milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Use strict dependency versions

Browse source
This commit is contained in:
Sander Declerck 2025-09-17 14:14:04 +02:00
parent 846c62e4e0
commit d5cd59fd25
No known key found for this signature in database
3 changed files with 13 additions and 48 deletions
Download patch file Download diff file Expand all files Collapse all files

12
packages/safe-chain/package.json
View file

@ -28,12 +28,12 @@
"license": "AGPL-3.0-or-later",
"description": "The Aikido Safe Chain wraps around the [npm cli](https://github.com/npm/cli), [npx](https://github.com/npm/cli/blob/latest/docs/content/commands/npx.md), [yarn](https://yarnpkg.com/), [pnpm](https://pnpm.io/), and [pnpx](https://pnpm.io/cli/dlx) to provide extra checks before installing new packages. This tool will detect when a package contains malware and prompt you to exit, preventing npm, npx, yarn, pnpm, or pnpx from downloading or running the malware.",
"dependencies": {
"abbrev": "^3.0.1",
"chalk": "^5.4.1",
"make-fetch-happen": "^14.0.3",
"npm-registry-fetch": "^18.0.2",
"ora": "^8.2.0",
"semver": "^7.7.2"
"abbrev": "3.0.1",
"chalk": "5.4.1",
"make-fetch-happen": "14.0.3",
"npm-registry-fetch": "18.0.2",
"ora": "8.2.0",
"semver": "7.7.2"
},
"main": "src/main.js",
"bugs": {