Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
Warning Review the following alerts detected in dependencies. According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.
|
b3e3b04 to
3ad05fa
Compare
Removed dependency on bigint-buffer by patching discv5. Repo [link](ChainSafe/discv5@master...NethermindEth:discv5:mralj/chore/backport-306-v3) The applied changes are inspired by [this PR](ChainSafe/discv5#306), but the changeset is much smaller -- I have only removed the dependency on `bigint-buffer` and made it work, because previous attempts made code flaky. This has been done to remove vulnerable transitive dependency ([link](https://github.com/AztecProtocol/aztec-packages/security/dependabot/395))
d110ea8 to
b89c66c
Compare
|
@PhilWindle |
Removed dependency on bigint-buffer by patching discv5.
Repo link
The applied changes are inspired by this PR, but the changeset is much smaller -- I have only removed the dependency on
bigint-bufferand made it work, because previous attempts made code flaky.This has been done to remove vulnerable transitive dependency (link)