huanld/openscreen
1
0
Fork 0
Code Issues Pull Requests Actions 5 Packages Projects Releases 2 Wiki Activity

fix(security): remove unused electron-icon-builder and electron-rebuild

Browse Source 
Both packages were listed as devDependencies but not referenced in any
scripts or source files. Removing them eliminates all 22 npm audit
vulnerabilities (2 critical, 5 high, 13 moderate, 2 low) introduced by
their unmaintained transitive dependency chain (phantomjs-prebuilt,
request, tar, etc.).
This commit is contained in:
FabLrc
2026-04-21 14:07:23 +02:00
parent 41a26f3e66
commit 018ba08eb9
2 changed files with 5 additions and 3296 deletions
Download Patch File Download Diff File Expand all files Collapse all files
package-lock.json
Generated
+5 -3294
View File
File diff suppressed because it is too large Load Diff
package.json
-2
View File
@@ -88,8 +88,6 @@
"autoprefixer": "^10.5.0",
"electron": "^41.2.1",
"electron-builder": "^26.8.1",
"electron-icon-builder": "^2.0.1",
"electron-rebuild": "^3.2.9",
"fast-check": "^4.7.0",
"husky": "^9.1.7",
"jsdom": "^29.0.2",