Commit a2d89a5
authored
security: remove unused rollup-plugin-serve (CVE-2020-7684) (#1077)
## Summary
- Removes `rollup-plugin-serve` from devDependencies — it was never used
in the codebase (`rollup-plugin-dev` serves the same purpose)
- Fixes SNYK-JS-ROLLUPPLUGINSERVE-585897 / CVE-2020-7684 (Directory
Traversal, CVSS 9.8)
- Also removes transitive dependencies `mime@3.0.0` and `opener@1.5.2`
which were only pulled in by this package
No functional impact.1 parent bbc3c1a commit a2d89a5
2 files changed
+0
-30
lines changedSome generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
82 | 82 | | |
83 | 83 | | |
84 | 84 | | |
85 | | - | |
86 | 85 | | |
87 | 86 | | |
88 | 87 | | |
| |||
0 commit comments