Skip to content

Commit

Permalink
Use @versatica/sctp fork to fix npm audit vulnerability
Browse files Browse the repository at this point in the history
## Details

- I've forked NPM `ip` package (see https://github.com/versatica/node-ip), removed public API affected by the [vulnerability](GHSA-2p57-rm9w-gvfp) and published version 3.0.0 under `@versatica` NPM organization.
- I've forked NPM `sctp` package(see https://github.com/versatica/node-sctp), updated deps and (of course) replace `ip` with `@versativa/ip` dependency, and published version 1.1.0 under `@versatica` NPM organization.
- And of course I've replaced `sctp` with `@versativa/sctp` in mediasoup, so now `npm audit` is ok.
  • Loading branch information
ibc committed Dec 17, 2024
1 parent 363fb04 commit e80f727
Show file tree
Hide file tree
Showing 3 changed files with 50 additions and 47 deletions.
2 changes: 1 addition & 1 deletion node/src/test/test-node-sctp.ts
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
import * as dgram from 'node:dgram';
// @ts-expect-error -- sctp library doesn't have TS types.
import * as sctp from 'sctp';
import * as sctp from '@versatica/sctp';
import * as mediasoup from '../';
import { enhancedOnce } from '../enhancedEvents';
import type { WorkerEvents } from '../types';
Expand Down
93 changes: 48 additions & 45 deletions package-lock.json

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -114,6 +114,7 @@
"@types/debug": "^4.1.12",
"@types/jest": "^29.5.14",
"@types/node": "^22.10.2",
"@versatica/sctp": "^1.1.0",
"eslint": "^9.17.0",
"eslint-config-prettier": "^9.1.0",
"eslint-plugin-jest": "^28.9.0",
Expand All @@ -124,7 +125,6 @@
"open-cli": "^8.0.0",
"pick-port": "^2.1.0",
"prettier": "^3.4.2",
"sctp": "^1.0.0",
"ts-jest": "^29.2.5",
"typescript": "^5.7.2",
"typescript-eslint": "^8.18.1"
Expand Down

0 comments on commit e80f727

Please sign in to comment.