OWASP/NodeGoat

Upgrade dependencies

Open

#153 opened on Aug 5, 2019

View on GitHub
 (3 comments) (0 reactions) (0 assignees)HTML (1,794 stars) (1,526 forks)batch import
Good first issuehelp wantedinfrastructurepriority: MEDIUMtask

Description

Context

  • This is part of release-1.5 #148
  • Context from #82
  • Critical task

Tasks

  • Upgrade dependencies to secure latest versions in package.json
  • Validate the instalation with the local test
  • Add and submit the changes in package-lock.json
  • Add the primary depdency list to the readme.md
  • Check that the npm tasks are working as expected
  • Update the readme.md with the extra relevant info (if needed)

Assignation

  • This tasks is open for assignation, just claim it (as reply to this) and submit your PR ;-)

Important

Contributor guide

Tech stack
nodejsjavascript
Domain
backendsecurity
Issue type
security
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
half day
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Node.js basic knowledgenpm experiencepackage.json structure
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
70
Research direction
First, review the current dependency versions in package.json and identify packages that need security updates. Then upgrade them to the latest secure versions, ensuring compatibility with the project. Validate the installation by running the local tests as described in the contributing guidelines. Finally, update package lock.json and the readme.md file with the new dependency list and any relevant information. Refer to the roadmap issue #148 and contributing guidelines for additional context.