Skip to content

Commit

Permalink
chore: Remove unused and unsafe dependency
Browse files Browse the repository at this point in the history
`xlsx` is removed due to the author is no longer publishing update to
the npm registry. The current version on npm is vulnerable to a
Prototype Pollution attack.
(read:cscan/vue3-excel-editor#49)
  • Loading branch information
ZENG-JING-YUAN committed Jul 26, 2024
1 parent adb6995 commit 01c46d7
Show file tree
Hide file tree
Showing 3 changed files with 7 additions and 113 deletions.
116 changes: 6 additions & 110 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

3 changes: 1 addition & 2 deletions package.json
Original file line number Diff line number Diff line change
Expand Up @@ -39,8 +39,7 @@
"twin.macro": "^3.4.1",
"typescript": "^5.5.4",
"uuid": "^10.0.0",
"web-vitals": "^2.1.4",
"xlsx": "^0.18.5"
"web-vitals": "^2.1.4"
},
"scripts": {
"start": "react-scripts start",
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,6 @@ import React, { useEffect, useState } from "react";
import { useTranslation } from "react-i18next";
import Table from "../TableTest/Table";
import StatusComponent from "./StatusComponent";
import * as XLSX from "xlsx";
import { useFactoryLogContext } from "./FactoryLogContext";
import Modal from "../../Modal/NonDialogModal";
import ColumnChart from "./Chart/ColumnChart";
Expand Down

0 comments on commit 01c46d7

Please sign in to comment.