chore: Hard-pin docusaurus overrides to clear npm audit vulnerabilities

Open Beginner friendly
#2,236 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
76/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Quiet
Tech stack
javascript
Domain
build-system, security

Research direction

Start in package.json by reviewing the Docusaurus dependency overrides and the affected packages: undici, http-proxy-middleware, and js-yaml. Run npm audit before and after the change, then verify that the Docusaurus build remains functional; done means the overrides are hard-pinned and npm audit reports zero vulnerabilities.

Written by the indexing model from the issue text.

Description

maintenance needs-triage

Hard-pin the docusaurus dependency overrides in package.json to remediate open npm audit findings for undici, http-proxy-middleware, and js-yaml, achieving npm audit 0.

Parent tracking issue: #2232

Acceptance Criteria

  • Docusaurus dependency overrides for undici, http-proxy-middleware, and js-yaml are hard-pinned in package.json
  • npm audit reports 0 vulnerabilities after the change
  • Docusaurus build remains functional
    Related to #2232

Generated by Issue Triage for issue #2232 · 98.6 AIC · ⌖ 13.4 AIC · ⊞ 28.5K · ◷

Dominant language
Python
Stars
1.5k
Forks
302
Avg merge
2d 17h
Merged PRs (30d)
95

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from microsoft/hve-core

All issues in microsoft/hve-core

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.