Skip to content

Commit d7a9881

Browse files
committed
fix: replace node-ipc with @achrinza/node-ipc to further secure the dependency chain
1 parent c38e755 commit d7a9881

File tree

5 files changed

+21
-21
lines changed

5 files changed

+21
-21
lines changed

packages/@vue/cli-shared-utils/lib/ipc.js

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
const ipc = require('node-ipc')
1+
const ipc = require('@achrinza/node-ipc')
22

33
const DEFAULT_ID = process.env.VUE_CLI_IPC || 'vue-cli'
44
const DEFAULT_IDLE_TIMEOUT = 3000

packages/@vue/cli-shared-utils/package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@
2525
"execa": "^1.0.0",
2626
"launch-editor": "^2.2.1",
2727
"lru-cache": "^5.1.1",
28-
"node-ipc": "9.2.1",
28+
"@achrinza/node-ipc": "9.2.2",
2929
"open": "^6.3.0",
3030
"ora": "^3.4.0",
3131
"read-pkg": "^5.1.1",

packages/@vue/cli-ui/apollo-server/util/ipc.js

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
const ipc = require('node-ipc')
1+
const ipc = require('@achrinza/node-ipc')
22
// Utils
33
const { log, dumpObject } = require('../util/logger')
44

packages/@vue/cli-ui/package.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@
5353
"lodash.merge": "^4.6.1",
5454
"lowdb": "^1.0.0",
5555
"lru-cache": "^5.1.1",
56-
"node-ipc": "9.2.1",
56+
"@achrinza/node-ipc": "9.2.2",
5757
"node-notifier": "^9.0.0",
5858
"parse-git-config": "^2.0.2",
5959
"portfinder": "^1.0.26",

yarn.lock

+17-17
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,15 @@
22
# yarn lockfile v1
33

44

5+
"@achrinza/[email protected]":
6+
version "9.2.2"
7+
resolved "https://registry.yarnpkg.com/@achrinza/node-ipc/-/node-ipc-9.2.2.tgz#ae1b5d3d6a9362034eea60c8d946b93893c2e4ec"
8+
integrity sha512-b90U39dx0cU6emsOvy5hxU4ApNXnE3+Tuo8XQZfiKTGelDwpMwBVgBP7QX6dGTcJgu/miyJuNJ/2naFBliNWEw==
9+
dependencies:
10+
"@node-ipc/js-queue" "2.0.3"
11+
event-pubsub "4.3.0"
12+
js-message "1.0.7"
13+
514
"@akryum/winattr@^3.0.0":
615
version "3.0.0"
716
resolved "https://registry.yarnpkg.com/@akryum/winattr/-/winattr-3.0.0.tgz#c345d49f8415583897e345729c12b3503927dd11"
@@ -2302,6 +2311,13 @@
23022311
call-me-maybe "^1.0.1"
23032312
glob-to-regexp "^0.3.0"
23042313

2314+
"@node-ipc/[email protected]":
2315+
version "2.0.3"
2316+
resolved "https://registry.yarnpkg.com/@node-ipc/js-queue/-/js-queue-2.0.3.tgz#ac7fe33d766fa53e233ef8fedaf3443a01c5a4cd"
2317+
integrity sha512-fL1wpr8hhD5gT2dA1qifeVaoDFlQR5es8tFuKqjHX+kdOtdNHnxkVZbtIrR2rxnMFvehkjaZRNV2H/gPXlb0hw==
2318+
dependencies:
2319+
easy-stack "1.0.1"
2320+
23052321
"@nodelib/[email protected]":
23062322
version "2.1.3"
23072323
resolved "https://registry.yarnpkg.com/@nodelib/fs.scandir/-/fs.scandir-2.1.3.tgz#3a582bdb53804c6ba6d146579c46e52130cf4a3b"
@@ -8234,7 +8250,7 @@ duplexify@^3.4.2, duplexify@^3.6.0:
82348250
readable-stream "^2.0.0"
82358251
stream-shift "^1.0.0"
82368252

8237-
easy-stack@^1.0.1:
8253+
82388254
version "1.0.1"
82398255
resolved "https://registry.yarnpkg.com/easy-stack/-/easy-stack-1.0.1.tgz#8afe4264626988cabb11f3c704ccd0c835411066"
82408256
integrity sha512-wK2sCs4feiiJeFXn3zvY0p41mdU5VUgbgs1rNsc/y5ngFUijdWd+iIN8eoyuZHKB8xN6BL4PdWmzqFmxNg6V2w==
@@ -12502,13 +12518,6 @@ [email protected]:
1250212518
resolved "https://registry.yarnpkg.com/js-message/-/js-message-1.0.7.tgz#fbddd053c7a47021871bb8b2c95397cc17c20e47"
1250312519
integrity sha512-efJLHhLjIyKRewNS9EGZ4UpI8NguuL6fKkhRxVuMmrGV2xN/0APGdQYwLFky5w9naebSZ0OwAGp0G6/2Cg90rA==
1250412520

12505-
12506-
version "2.0.2"
12507-
resolved "https://registry.yarnpkg.com/js-queue/-/js-queue-2.0.2.tgz#0be590338f903b36c73d33c31883a821412cd482"
12508-
integrity sha512-pbKLsbCfi7kriM3s1J4DDCo7jQkI58zPLHi0heXPzPlj0hjUsm+FesPUbE0DSbIVIK503A36aUBoCN7eMFedkA==
12509-
dependencies:
12510-
easy-stack "^1.0.1"
12511-
1251212521
"js-tokens@^3.0.0 || ^4.0.0", js-tokens@^4.0.0:
1251312522
version "4.0.0"
1251412523
resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
@@ -14609,15 +14618,6 @@ node-int64@^0.4.0:
1460914618
resolved "https://registry.yarnpkg.com/node-int64/-/node-int64-0.4.0.tgz#87a9065cdb355d3182d8f94ce11188b825c68a3b"
1461014619
integrity sha1-h6kGXNs1XTGC2PlM4RGIuCXGijs=
1461114620

14612-
14613-
version "9.2.1"
14614-
resolved "https://registry.yarnpkg.com/node-ipc/-/node-ipc-9.2.1.tgz#b32f66115f9d6ce841dc4ec2009d6a733f98bb6b"
14615-
integrity sha512-mJzaM6O3xHf9VT8BULvJSbdVbmHUKRNOH7zDDkCrA1/T+CVjq2WVIDfLt0azZRXpgArJtl3rtmEozrbXPZ9GaQ==
14616-
dependencies:
14617-
event-pubsub "4.3.0"
14618-
js-message "1.0.7"
14619-
js-queue "2.0.2"
14620-
1462114621
"node-libs-browser@^1.0.0 || ^2.0.0", node-libs-browser@^2.2.1:
1462214622
version "2.2.1"
1462314623
resolved "https://registry.yarnpkg.com/node-libs-browser/-/node-libs-browser-2.2.1.tgz#b64f513d18338625f90346d27b0d235e631f6425"

0 commit comments

Comments
 (0)