chore(deps): lodash security vuln (#847)

readmeio · Mar 11, 2024 · 77ba97d · 77ba97d
1 parent bd7c6de
commit 77ba97d
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 37 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/packages/oas-to-har/package.json b/packages/oas-to-har/package.json
@@ -50,17 +50,15 @@
   },
   "dependencies": {
     "@readme/data-urls": "^3.0.0",
-    "lodash.get": "^4.4.2",
-    "lodash.set": "^4.3.2",
+    "lodash-es": "^4.17.21",
     "oas": "file:../oas",
     "qs": "^6.11.2",
     "remove-undefined-objects": "^5.0.0"
   },
   "devDependencies": {
     "@readme/oas-examples": "^5.12.0",
     "@types/har-format": "^1.2.12",
-    "@types/lodash.get": "^4.4.8",
-    "@types/lodash.set": "^4.3.8",
+    "@types/lodash-es": "^4.17.12",
     "@types/qs": "^6.9.8",
     "@vitest/coverage-v8": "^0.34.4",
     "eslint": "^8.49.0",

diff --git a/packages/oas-to-har/src/index.ts b/packages/oas-to-har/src/index.ts
@@ -16,8 +16,7 @@ import type {
 } from 'oas/types';
 
 import { parse as parseDataUrl } from '@readme/data-urls';
-import lodashGet from 'lodash.get';
-import lodashSet from 'lodash.set';
+import { get as lodashGet, set as lodashSet } from 'lodash-es';
 import { HEADERS, PROXY_ENABLED } from 'oas/extensions';
 import { Operation } from 'oas/operation';
 import { isRef } from 'oas/types';

diff --git a/packages/oas-to-har/src/lib/utils.ts b/packages/oas-to-har/src/lib/utils.ts
@@ -1,6 +1,6 @@
 import type { JSONSchema, SchemaObject } from 'oas/types';
 
-import lodashGet from 'lodash.get';
+import { get as lodashGet } from 'lodash-es';
 
 /**
  * Determine if a schema `type` is, or contains, a specific discriminator.