Force jpeg-js version > 0.4.0

to fix a security vulnerability
eliep · Sep 30, 2020 · 2045495 · 2045495
1 parent 3aa4f1d
commit 2045495
Show file tree

Hide file tree

Showing 2 changed files with 34 additions and 13 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -4,6 +4,7 @@
   "description": "A cowsay alternative for terminal with true color.",
   "main": "src/index.js",
   "scripts": {
+    "preinstall": "npx npm-force-resolutions",
     "lint": "eslint src",
     "test": "npm run lint && mocha"
   },
@@ -38,5 +39,8 @@
     "eslint-plugin-promise": "^4.2.1",
     "eslint-plugin-standard": "^4.0.1",
     "mocha": "^8.1.3"
+  },
+  "resolutions": {
+    "jpeg-js": "^0.4.0"
   }
 }