From 41507cbb427b3d4ad41a5df5af15fb24d2e49345 Mon Sep 17 00:00:00 2001 From: Dmitri Zagidulin Date: Wed, 25 Jan 2017 10:31:54 -0500 Subject: [PATCH 1/3] Bump uuid dep: node-uuid is deprecated and has moved to uuid --- lib/in-memory.js | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/in-memory.js b/lib/in-memory.js index 60100d7..88379d0 100644 --- a/lib/in-memory.js +++ b/lib/in-memory.js @@ -1,6 +1,6 @@ module.exports = InMemory -var uuid = require('node-uuid') +var uuid = require('node') function InMemory (opts) { opts = opts || {} diff --git a/package.json b/package.json index ab6158e..5ce9c6b 100644 --- a/package.json +++ b/package.json @@ -18,8 +18,8 @@ "license": "MIT", "dependencies": { "debug": "^2.2.0", - "node-uuid": "^1.4.3", "run-parallel": "^1.1.4", + "uuid": "^3.0.1", "ws": "^0.8.0" }, "devDependencies": { From 35e786c56aa5b0ed8d96d9603d3a34e49d361f08 Mon Sep 17 00:00:00 2001 From: Dmitri Zagidulin Date: Wed, 25 Jan 2017 10:32:15 -0500 Subject: [PATCH 2/3] Add repository prop to package.json --- package.json | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/package.json b/package.json index 5ce9c6b..6f726ca 100644 --- a/package.json +++ b/package.json @@ -6,6 +6,10 @@ "scripts": { "test": "./node_modules/mocha/bin/mocha ./test/*.js" }, + "repository": { + "type": "git", + "url": "https://github.com/solid/node-solid-ws" + }, "keywords": [ "solid", "websockets", From 9ece310df64028e1289e14f7a616ae6152a4cf8f Mon Sep 17 00:00:00 2001 From: Dmitri Zagidulin Date: Wed, 25 Jan 2017 10:34:11 -0500 Subject: [PATCH 3/3] Update ws to 1.1.1, fix DoS & remote mem exposure vulnerabilities --- lib/in-memory.js | 2 +- package.json | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/in-memory.js b/lib/in-memory.js index 88379d0..d02c4fa 100644 --- a/lib/in-memory.js +++ b/lib/in-memory.js @@ -1,6 +1,6 @@ module.exports = InMemory -var uuid = require('node') +var uuid = require('uuid') function InMemory (opts) { opts = opts || {} diff --git a/package.json b/package.json index 6f726ca..cce3ae2 100644 --- a/package.json +++ b/package.json @@ -24,7 +24,7 @@ "debug": "^2.2.0", "run-parallel": "^1.1.4", "uuid": "^3.0.1", - "ws": "^0.8.0" + "ws": "^1.1.1" }, "devDependencies": { "chai": "^3.3.0",