Skip to content

feat: pin axios and add min-release-age rule to .npmrc#52

Merged
omgate234 merged 2 commits intomainfrom
release
Mar 31, 2026
Merged

feat: pin axios and add min-release-age rule to .npmrc#52
omgate234 merged 2 commits intomainfrom
release

Conversation

@omgate234
Copy link
Copy Markdown
Collaborator

Pull Request

Description:
This PR pins the axios version to 1.14.0 in the light of recent events with respect to axios' security compromise.
This PR also introduces .npmrc with the min-release-age as 7 days, to avoid installing extremely new versions.

See: https://docs.npmjs.com/cli/v11/using-npm/config#min-release-age

Changes:

  • Pins axios package's version to 1.14.0
  • Added min-release-age=7 to .npmrc to block packages published less than 7 days ago

Next Steps:

  • Review the need of all packages, and remove the packages, whose functionalities can be natively supported such as axios and uuid
  • Pinning stable versions for rest of the packages

Testing:

  • Since this change only pins the newest versions, there will virtually be know functional change

Checklist:

  • Code follows project coding standards
  • Tests have been added or updated
  • Code Review
  • Manual test after merge
  • All checks passed

@omgate234 omgate234 merged commit 6b92f4c into main Mar 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant