Skip to content

Commit

Permalink
Remove name from package.json for security reasons
Browse files Browse the repository at this point in the history
If a package.json has a name but isn't actually published, it is possible for an attacker to register a package using the same name (if unclaimed on npm.js) to introduce dependency confusion. Given that this package.json is intended to be private, I'm removing the `name` property.
  • Loading branch information
wpscholar committed Aug 18, 2023
1 parent 1db329d commit e8e5489
Showing 1 changed file with 0 additions and 1 deletion.
1 change: 0 additions & 1 deletion package.json
Original file line number Diff line number Diff line change
@@ -1,5 +1,4 @@
{
"name": "bluehost-wordpress-plugin",
"description": "WordPress plugin that integrates your WordPress site with the Bluehost control panel, including performance, security, and update features.",
"license": "GPL-2.0-or-later",
"version": "3.0.11",
Expand Down

0 comments on commit e8e5489

Please sign in to comment.