- Temporarily suppress CVE for superagent

- Remove package-lock.json from Git
EasyPost · Apr 23, 2024 · c8dbeef · c8dbeef
1 parent 93737bf
commit c8dbeef
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 9,806 deletions.
diff --git a/audit-ci.jsonc b/audit-ci.jsonc
@@ -0,0 +1,13 @@
+{
+  "$schema": "https://github.com/IBM/audit-ci/raw/main/docs/schema.json",
+  "critical": true, // Only fail the audit if there are critical vulnerabilities.
+  "allowlist": [
+    {
+      "GHSA-8cp3-66vr-3r4c": {
+        "active": true,
+        "expiry": "2024-10-22", // Re-evaluate this vulnerability after this date.
+        "notes": "Transitive dependency of `superagent`, awaiting new `superagent` release." // https://github.com/ladjs/superagent/issues/1799
+      }
+    }
+  ]
+}