Reduce supply chain attacks vectors (#2691)

* Reduce supply chain attacks vectors

For some smallers dependencies we should hardcode specific versions to make it harder to make a supply chain attack

* Update package.json
This commit is contained in:
tuyuribr 2023-12-17 04:53:59 -03:00 • committed by GitHub
commit 1e9b82b201
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -30,11 +30,10 @@
"homepage": "https://wwebjs.dev/", "homepage": "https://wwebjs.dev/",
"dependencies": { "dependencies": {
"@pedroslopez/moduleraid": "^5.0.2", "@pedroslopez/moduleraid": "^5.0.2",
"fluent-ffmpeg": "^2.1.2", "fluent-ffmpeg": "2.1.2",
"jsqr": "^1.3.1",
"mime": "^3.0.0", "mime": "^3.0.0",
"node-fetch": "^2.6.5", "node-fetch": "^2.6.5",
"node-webpmux": "^3.1.0", "node-webpmux": "3.1.0",
"puppeteer": "^13.0.0" "puppeteer": "^13.0.0"
}, },
"devDependencies": { "devDependencies": {