Conversation
Socket Security Pull Request Report👍 No new dependency issues detected in pull request Pull request report summary
Bot CommandsTo ignore an alert, reply with a comment starting with Ignoring: Powered by socket.dev |
The project has been migrated to Yarn v3. The changes made have been based off of the module template. `allow-scripts` has been updated to the latest version as well.
7454082 to
492e417
Compare
| ### Setup | ||
|
|
||
| - Install [Node.js](https://nodejs.org) version 12 | ||
| - Install [Node.js](https://nodejs.org) version 14 |
There was a problem hiding this comment.
This change was unrelated; I just happened to notice that it was wrong. We forgot this when the Node.js minimum version was bumped to v14.
| "@lavamoat/preinstall-always-fail": false, | ||
| "keccak": true, | ||
| "secp256k1": true | ||
| "eth-sig-util>ethereumjs-util>keccak": false, |
There was a problem hiding this comment.
These were all true before, but seemingly they aren't needed at all for local development, so I left them disabled.
|
@SocketSecurity ignore keccak@3.0.2 secp256k1@4.0.3 These are false positives; these dependencies aren't actually changing in this PR. Socket is getting mislead by the lockfile version migration. |
The project has been migrated to Yarn v3. The changes made have been based off of the module template.
allow-scriptshas been updated to the latest version as well.