fix: CVE of tough-cookie and word-wrap (opensearch-project#763)

Signed-off-by: SuZhou-Joe <suzhou@amazon.com>
SuZhou-Joe · Jul 18, 2023 · 7f8a7d7 · 7f8a7d7
1 parent 39444c1
commit 7f8a7d7
Show file tree

Hide file tree

Showing 2 changed files with 68 additions and 31 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -24,7 +24,8 @@
     "lint": "eslint . --ext .js",
     "pkg-version": "./scripts/getpkgversion.sh",
     "generate:test-data": "node ./scripts/generate_data/index.js",
-    "postinstall": "husky install"
+    "postinstall": "husky install",
+    "preinstall": "npx npm-force-resolutions"
   },
   "repository": {
     "type": "git",
@@ -57,5 +58,9 @@
     "husky": "^6.0.0",
     "luxon": "^3.2.1",
     "mocha-junit-reporter": "^2.0.0"
+  },
+  "resolutions": {
+    "tough-cookie": "^4.1.3",
+    "optionator": "^0.9.3"
   }
 }