From 1e9b82b2011fe1ad70cee8ce7813c352470cb6c4 Mon Sep 17 00:00:00 2001 From: tuyuribr <45042245+tuyuribr@users.noreply.github.com> Date: Sun, 17 Dec 2023 04:53:59 -0300 Subject: [PATCH] Reduce supply chain attacks vectors (#2691) * Reduce supply chain attacks vectors For some smallers dependencies we should hardcode specific versions to make it harder to make a supply chain attack * Update package.json --- package.json | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/package.json b/package.json index 7c85738..ef93508 100644 --- a/package.json +++ b/package.json @@ -30,11 +30,10 @@ "homepage": "https://wwebjs.dev/", "dependencies": { "@pedroslopez/moduleraid": "^5.0.2", - "fluent-ffmpeg": "^2.1.2", - "jsqr": "^1.3.1", + "fluent-ffmpeg": "2.1.2", "mime": "^3.0.0", "node-fetch": "^2.6.5", - "node-webpmux": "^3.1.0", + "node-webpmux": "3.1.0", "puppeteer": "^13.0.0" }, "devDependencies": {