From 6cc5506cea8f2b0ce745e51b8cfae2f1b30b395b Mon Sep 17 00:00:00 2001 From: "Benjamin A. Beasley" Date: Mon, 28 Mar 2022 09:57:39 -0400 Subject: [PATCH] =?UTF-8?q?Drop=20the=20NodeJS=20example=E2=80=99s=20packa?= =?UTF-8?q?ge-lock.json=20file?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This will hopefully keep us from having bugs filed due to CVE’s in its (unpackaged) recursive dependencies. --- grpc.spec | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/grpc.spec b/grpc.spec index 0ccdc3f..e7cabec 100644 --- a/grpc.spec +++ b/grpc.spec @@ -688,6 +688,11 @@ echo '' > etc/roots.pem # examples/android/helloworld/gradle/wrapper/gradle-wrapper.jar rm -rvf examples/android src/android +# Drop the NodeJS example’s package-lock.json file, which will hopefully keep +# us from having bugs filed due to CVE’s in its (unpackaged) recursive +# dependencies. +rm -vf examples/node/package-lock.json + # Remove unwanted .gitignore files, generally in examples. One could argue that # a sample .gitignore file is part of the example, but, well, we’re not going # to do that.