Skip to content

Changes to update build process to fix vulnerabilities - #60

Open
jackWhtman wants to merge 1 commit into
digidem:gh-pagesfrom
jackWhtman:gh-pages
Open

Changes to update build process to fix vulnerabilities#60
jackWhtman wants to merge 1 commit into
digidem:gh-pagesfrom
jackWhtman:gh-pages

Conversation

@jackWhtman

Copy link
Copy Markdown

What I updated

  • Replaced legacy Browserify pipeline in package.json with esbuild:
  • build now runs build:js + build:min
  • build:js bundles to leaflet-side-by-side.js
  • build:min bundles + minifies to leaflet-side-by-side.min.js
  • start now uses esbuild --watch --servedir=.
  • inline layout.css and range.css at runtime via injected <style> tags so CSS behavior remains packaged with JS output
  • replaced CSS background-image URL for range-icon.png with base64 value for image

Removed old build dependencies:

  • browserify, browserify-shim, budo, cssify, terser

Added modern build dependency:

  • esbuild

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedesbuild@​0.25.12911007393100
Updatedstandard@​11.0.1 ⏵ 17.1.299 +110099 +186100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant