mirror of
https://github.com/shaka-project/shaka-player.git
synced 2026-06-25 17:45:03 +03:00
Joey Parrish
49fbcb4e5a
Most dependencies are not used in Shaka Player itself, but in our build and test infra or in our demo app. Still, GitHub reported 29 potential vulnerabilities in these deps, and NPM reported 37. The changes below being NPM's audit report from 37 down to 24 vulnerabilities. Detailed updates: - Dropped explicit deps for transitive dependencies that we no longer need to update for ourselves: - ua-parser-js (via karma) - Dropped because we no longer need them: - karma-ie-launcher - Updated to latest versions: - awesomplete - core-js - dialog-polyfill - htmlhint - jimp - karma* - less - pwacompat - rimraf - tippy.js - which - Updated as far as possible without code or config changes in Shaka: - mux.js - stylelint* - Still needs an update: - *babel* - eslint - eslint-config-google - google-closure-compiler - google-closure-library Some of the vulnerabilities stem from stylelint, babel, and others that haven't been updated yet, so follow-up work is needed to address those with breaking updates. mux.js is actually used at runtime (optional), so it was only updated to the latest non-breaking release.
75 lines
2.2 KiB
JSON
75 lines
2.2 KiB
JSON
{
|
|
"name": "shaka-player",
|
|
"description": "DASH/EME video player library",
|
|
"version": "3.4.0-pre",
|
|
"homepage": "https://github.com/google/shaka-player",
|
|
"author": "Google",
|
|
"maintainers": [
|
|
{
|
|
"name": "Joey Parrish",
|
|
"email": "joeyparrish@google.com"
|
|
}
|
|
],
|
|
"devDependencies": {
|
|
"@teppeis/clutz": "^1.0.29-4c95e12.v20190929",
|
|
"awesomplete": "^1.1.5",
|
|
"babel-core": "^6.26.3",
|
|
"babel-plugin-istanbul": "^4.1.6",
|
|
"babel-polyfill": "^6.26.0",
|
|
"babel-preset-env": "^1.7.0",
|
|
"cajon": "^0.4.4",
|
|
"core-js": "^3.21.1",
|
|
"dialog-polyfill": "^0.5.6",
|
|
"es6-promise-polyfill": "^1.2.0",
|
|
"eslint": "^7.18.0",
|
|
"eslint-config-google": "^0.13.0",
|
|
"eslint-plugin-shaka-rules": "file:./build/eslint-plugin-shaka-rules",
|
|
"esprima": "^4.0.1",
|
|
"fastestsmallesttextencoderdecoder": "^1.0.22",
|
|
"fontfaceonload": "^1.0.2",
|
|
"google-closure-compiler-java": "^20210505.0.0",
|
|
"google-closure-library": "^20210406.0.0",
|
|
"htmlhint": "^1.1.2",
|
|
"jasmine-ajax": "^4.0.0",
|
|
"jimp": "^0.16.1",
|
|
"jsdoc": "github:joeyparrish/jsdoc#45c271fa",
|
|
"karma": "^6.3.16",
|
|
"karma-babel-preprocessor": "^7.0.0",
|
|
"karma-coverage": "^2.2.0",
|
|
"karma-jasmine": "^4.0.1",
|
|
"karma-jasmine-ajax": "^0.1.13",
|
|
"karma-local-wd-launcher": "^1.4.1",
|
|
"karma-opera-launcher": "^1.0.0",
|
|
"karma-sourcemap-loader": "^0.3.8",
|
|
"karma-spec-reporter": "^0.0.33",
|
|
"karma-webdriver-launcher": "^1.0.8",
|
|
"less": "^4.1.2",
|
|
"less-plugin-clean-css": "^1.5.1",
|
|
"material-design-lite": "^1.3.0",
|
|
"mux.js": "^5.14.1",
|
|
"pwacompat": "^2.0.17",
|
|
"rimraf": "^3.0.2",
|
|
"sprintf-js": "^1.1.2",
|
|
"ssim.js": "^3.5.0",
|
|
"stylelint": "^13.13.1",
|
|
"stylelint-config-standard": "^22.0.0",
|
|
"tippy.js": "^4.3.5",
|
|
"which": "^2.0.2"
|
|
},
|
|
"main": "dist/shaka-player.compiled.js",
|
|
"repository": {
|
|
"type": "git",
|
|
"url": "https://github.com/google/shaka-player.git"
|
|
},
|
|
"bugs": {
|
|
"url": "https://github.com/google/shaka-player/issues"
|
|
},
|
|
"license": "Apache-2.0",
|
|
"scripts": {
|
|
"prepublishOnly": "python build/checkversion.py && python build/all.py --force"
|
|
},
|
|
"dependencies": {
|
|
"eme-encryption-scheme-polyfill": "^2.0.3"
|
|
}
|
|
}
|