Skip to content

ToolChain Update - #161

Open
jimchen5209 wants to merge 18 commits into
devfrom
toolchain-update
Open

ToolChain Update#161
jimchen5209 wants to merge 18 commits into
devfrom
toolchain-update

Conversation

@jimchen5209

Copy link
Copy Markdown
Collaborator
  • Switch the package manager from Yarn to pnpm
  • Optimize the Docker build process
  • Replace ESLint with Biome for linting and address various linting issues
  • Remove the dist directory from source control

@snyk-io

snyk-io Bot commented Nov 17, 2025

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@socket-security

socket-security Bot commented Nov 17, 2025

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updated@​types/​express@​4.17.24 ⏵ 4.17.251001007185100
Updated@​types/​node@​22.18.12 ⏵ 24.12.2100 +110081 +194100
Updatedcors@​2.8.5 ⏵ 2.8.610010010084100
Updatedexpress@​4.21.2 ⏵ 4.22.197 +110010087100
Updatedmongodb@​6.20.0 ⏵ 6.21.093 +110010098100
Updatedredis@​5.9.0 ⏵ 5.12.1100 +110010096 +4100
Added@​biomejs/​biome@​2.3.210010010098100

View full report

@socket-security

socket-security Bot commented Nov 17, 2025

Copy link
Copy Markdown

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

@jimchen5209 jimchen5209 added type:dependencies Pull requests that update a dependency file package:npm Pull requests that update node.js deps labels Nov 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

package:npm Pull requests that update node.js deps type:dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant