Splitting dev and prod dependencies, adding npm audit step to catch security vulnerabilities (#88)

This commit is contained in:
Nat Hillard 2021-06-02 13:21:23 -04:00 committed by GitHub
commit 394260bbec
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 2474 additions and 756 deletions

View file

@ -37,6 +37,8 @@ jobs:
run: npm run lint run: npm run lint
- name: Test - name: Test
run: npm test run: npm test
- name: Check for security vulnerabilities
run: npm audit --production
- name: Upload Artifact - name: Upload Artifact
uses: actions/upload-artifact@v2 uses: actions/upload-artifact@v2
with: with:

3224
client/package-lock.json generated

File diff suppressed because it is too large Load diff

View file

@ -23,6 +23,7 @@
}, },
"devDependencies": { "devDependencies": {
"@formatjs/cli": "^4.2.15", "@formatjs/cli": "^4.2.15",
"@types/react-helmet": "^6.1.1",
"@types/jest": "^26.0.23", "@types/jest": "^26.0.23",
"@types/node": "^15.3.1", "@types/node": "^15.3.1",
"@types/react": "^17.0.1", "@types/react": "^17.0.1",
@ -35,6 +36,7 @@
"eslint": "^7.27.0", "eslint": "^7.27.0",
"eslint-config-google": "^0.14.0", "eslint-config-google": "^0.14.0",
"eslint-plugin-react": "^7.23.2", "eslint-plugin-react": "^7.23.2",
"gatsby": "^3.4.1",
"gatsby-cli": "^3.5.0", "gatsby-cli": "^3.5.0",
"gatsby-plugin-intl": "^0.3.3", "gatsby-plugin-intl": "^0.3.3",
"gatsby-plugin-prettier-eslint": "^1.0.6", "gatsby-plugin-prettier-eslint": "^1.0.6",
@ -51,8 +53,6 @@
}, },
"dependencies": { "dependencies": {
"@trussworks/react-uswds": "github:nathillardusds/react-uswds#nathillardusds/ssr", "@trussworks/react-uswds": "github:nathillardusds/react-uswds#nathillardusds/ssr",
"@types/react-helmet": "^6.1.1",
"gatsby": "^3.4.1",
"react": "^17.0.1", "react": "^17.0.1",
"react-dom": "^17.0.1", "react-dom": "^17.0.1",
"react-helmet": "^6.1.0", "react-helmet": "^6.1.0",