From cd306d0296d673d317eda9b5570f51f3ab2a3244 Mon Sep 17 00:00:00 2001 From: Axel Chalon Date: Sat, 8 Feb 2020 12:18:40 +0000 Subject: [PATCH] Use kind-of >=6.0.3 everywhere This repo's dependencies currently use [older versions](https://github.com/paritytech/substrate-ui/blob/b185aad6174ee6bf2f2a68eadd84801ec2efe39d/yarn.lock#L3362) of kind-of which have a possibly exploitable vulnerability ([original issue](https://github.com/jonschlinkert/kind-of/issues/30), [PR](https://github.com/jonschlinkert/kind-of/pull/31)). --- package.json | 3 +++ 1 file changed, 3 insertions(+) diff --git a/package.json b/package.json index d128693..b4c6409 100644 --- a/package.json +++ b/package.json @@ -58,5 +58,8 @@ "url-loader": "^1.0.1", "uuid": "^3.3.2", "xxhashjs": "^0.2.2" + }, + "resolutions": { + "kind-of": ">=6.0.3" } }