fix: replace live-server with serve to resolve Snyk vulnerabilities by Copilot · Pull Request #147 · DavidKRK/DavidKRK.github.io

Copilot · 2026-04-04T02:23:01Z

Investigate Snyk PR check vulnerabilities
Replace live-server with serve to eliminate 11 vulnerabilities
Update dev script to use serve
Regenerate package-lock.json — npm audit reports 0 vulnerabilities
Remove node_modules/.package-lock.json from git tracking (npm-generated artifact, should not be committed)

Agent-Logs-Url: https://github.com/DavidKRK/DavidKRK.github.io/sessions/03e73c36-d7a7-4fe7-837d-e900985bd2cc Co-authored-by: DavidKRK <136035295+DavidKRK@users.noreply.github.com>

…abilities Agent-Logs-Url: https://github.com/DavidKRK/DavidKRK.github.io/sessions/03e73c36-d7a7-4fe7-837d-e900985bd2cc Co-authored-by: DavidKRK <136035295+DavidKRK@users.noreply.github.com>

bolt-new-by-stackblitz · 2026-04-04T02:23:05Z

Run & review this pull request in StackBlitz Codeflow.

netlify · 2026-04-04T02:23:06Z

✅ Deploy Preview for whimsical-kitsune-85066d ready!

Name	Link
🔨 Latest commit	`5a98d31`
🔍 Latest deploy log	https://app.netlify.com/projects/whimsical-kitsune-85066d/deploys/69d077c2cf3d4e0008b56dbc
😎 Deploy Preview	https://deploy-preview-147--whimsical-kitsune-85066d.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

netlify · 2026-04-04T02:23:23Z

✅ Deploy Preview for spiffy-liger-8bab58 ready!

Name	Link
🔨 Latest commit	`5a98d31`
🔍 Latest deploy log	https://app.netlify.com/projects/spiffy-liger-8bab58/deploys/69d077c24a2b490008bec44d
😎 Deploy Preview	https://deploy-preview-147--spiffy-liger-8bab58.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Copilot

Pull request overview

This PR replaces live-server with serve in the project’s development tooling to eliminate unfixable transitive vulnerabilities and updates lockfiles accordingly.

Changes:

Swap live-server@^1.2.0 → serve@^14.2.6 in devDependencies.
Update the dev script to use serve on port 8080.
Regenerate package-lock.json to reflect the new dependency tree.

Reviewed changes

Copilot reviewed 1 out of 3 changed files in this pull request and generated 1 comment.

File	Description
package.json	Replaces `live-server` with `serve` and updates the `dev` script accordingly.
package-lock.json	Updates the dependency graph to remove `live-server` and its transitive dependencies.
node_modules/.package-lock.json	Updated npm-generated lock artifact under `node_modules/` (should not be tracked).

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

DavidKRK · 2026-04-04T02:29:34Z

@copilot @copilot Peux-tu exécuter les actions que tu m'as proposé précédemment ?

Agent-Logs-Url: https://github.com/DavidKRK/DavidKRK.github.io/sessions/77dc0386-a668-443a-be71-77b24c82cf10 Co-authored-by: DavidKRK <136035295+DavidKRK@users.noreply.github.com>

Copilot · 2026-04-04T02:30:31Z

@copilot @copilot Peux-tu exécuter les actions que tu m'as proposé précédemment ?

Done in commit 5a98d31. node_modules/.package-lock.json has been removed from git tracking with git rm --cached. Since node_modules is already in .gitignore, this file will no longer appear in future diffs or commits.

DavidKRK

@copilot donne un résumer

DavidKRK · 2026-04-04T03:42:43Z

@copilot apply changes based on the comments in this thread

Copilot · 2026-04-04T03:43:41Z

@copilot donne un résumer

Voici un résumé de ce PR :

Problème : live-server@1.2.x embarquait 11 vulnérabilités transitives non corrigeables (7 élevées, 4 modérées) — principalement des ReDoS dans debug, ms, micromatch, braces et picomatch.

Solution :

live-server@^1.2.0 → serve@^14.2.6 dans devDependencies
Script dev mis à jour : npx live-server --port=8080 → npx serve --listen 8080
package-lock.json regénéré — supprime ~193 paquets vulnérables ; npm audit signale désormais 0 vulnérabilité
node_modules/.package-lock.json retiré du suivi git (artefact généré par npm, ne devait pas être versionné)

@copilot apply changes based on the comments in this thread

Already done. The only actionable change in that review thread was removing node_modules/.package-lock.json from git tracking, which was applied in commit 5a98d31 (git rm --cached node_modules/.package-lock.json). The thread is now marked as resolved.

Copilot AI and others added 2 commits April 4, 2026 02:17

chore: plan to fix Snyk security vulnerabilities

c927889

Agent-Logs-Url: https://github.com/DavidKRK/DavidKRK.github.io/sessions/03e73c36-d7a7-4fe7-837d-e900985bd2cc Co-authored-by: DavidKRK <136035295+DavidKRK@users.noreply.github.com>

fix: replace live-server with serve to eliminate Snyk security vulner…

054f6af

…abilities Agent-Logs-Url: https://github.com/DavidKRK/DavidKRK.github.io/sessions/03e73c36-d7a7-4fe7-837d-e900985bd2cc Co-authored-by: DavidKRK <136035295+DavidKRK@users.noreply.github.com>

Copilot AI assigned Copilot and DavidKRK Apr 4, 2026

Copilot created this pull request from a session on behalf of DavidKRK April 4, 2026 02:23 View session

DavidKRK requested a review from Copilot April 4, 2026 02:23

Copilot started reviewing on behalf of DavidKRK April 4, 2026 02:24 View session

Copilot AI reviewed Apr 4, 2026

View reviewed changes

Comment thread node_modules/.package-lock.json Outdated

DavidKRK marked this pull request as ready for review April 4, 2026 02:28

Copilot started work on behalf of DavidKRK April 4, 2026 02:29 View session

chore: untrack node_modules/.package-lock.json (npm-generated artifact)

5a98d31

Agent-Logs-Url: https://github.com/DavidKRK/DavidKRK.github.io/sessions/77dc0386-a668-443a-be71-77b24c82cf10 Co-authored-by: DavidKRK <136035295+DavidKRK@users.noreply.github.com>

Copilot AI requested a review from DavidKRK April 4, 2026 02:30

Copilot finished work on behalf of DavidKRK April 4, 2026 02:30

DavidKRK approved these changes Apr 4, 2026

View reviewed changes

DavidKRK assigned Claude and Codex Apr 4, 2026

Copilot started work on behalf of DavidKRK April 4, 2026 03:42 View session

Copilot finished work on behalf of DavidKRK April 4, 2026 03:44

Copilot AI requested a review from DavidKRK April 4, 2026 03:44

DavidKRK approved these changes Apr 4, 2026

View reviewed changes

DavidKRK merged commit 2b66a7a into gh-pages Apr 4, 2026
18 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix: replace live-server with serve to resolve Snyk vulnerabilities#147

fix: replace live-server with serve to resolve Snyk vulnerabilities#147
DavidKRK merged 3 commits into
gh-pagesfrom
copilot/fix-snyk-pr-checks-issue

Copilot AI commented Apr 4, 2026 •

edited

Loading

Uh oh!

bolt-new-by-stackblitz Bot commented Apr 4, 2026

Uh oh!

netlify Bot commented Apr 4, 2026 •

edited

Loading

Uh oh!

netlify Bot commented Apr 4, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

DavidKRK commented Apr 4, 2026

Uh oh!

Copilot AI commented Apr 4, 2026

Uh oh!

DavidKRK left a comment

Uh oh!

DavidKRK commented Apr 4, 2026

Uh oh!

Copilot AI commented Apr 4, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Conversation

Copilot AI commented Apr 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

bolt-new-by-stackblitz Bot commented Apr 4, 2026

Uh oh!

netlify Bot commented Apr 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for whimsical-kitsune-85066d ready!

Uh oh!

netlify Bot commented Apr 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for spiffy-liger-8bab58 ready!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

DavidKRK commented Apr 4, 2026

Uh oh!

Copilot AI commented Apr 4, 2026

Uh oh!

DavidKRK left a comment

Choose a reason for hiding this comment

Uh oh!

DavidKRK commented Apr 4, 2026

Uh oh!

Copilot AI commented Apr 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Copilot AI commented Apr 4, 2026 •

edited

Loading

netlify Bot commented Apr 4, 2026 •

edited

Loading

netlify Bot commented Apr 4, 2026 •

edited

Loading

Copilot AI commented Apr 4, 2026 •

edited

Loading