@stepzen/graphiql-proxy - npm Package Compare versions

Comparing version 0.45.0-experimental.32a4304 to 0.45.0-experimental.5b435ce

package.json

 {
   "name": "@stepzen/graphiql-proxy",
-  "version": "0.45.0-experimental.32a4304",
+  "version": "0.45.0-experimental.5b435ce",
   "author": "Darren Waddell <[e-mail]>",
@@ -12,4 +12,3 @@ "license": "MIT",
   "engines": {
-    "node": ">=14.0.1",
-    "npm": ">=6.14"
+    "node": ">=18.0"
   },
@@ -28,8 +27,9 @@ "type": "module",
   "dependencies": {
-    "@stepzen/fetch": "0.45.0-experimental.32a4304",
+    "@stepzen/fetch": "0.45.0-experimental.5b435ce",
     "chalk": "^4.1.2",
-    "cross-spawn": "^7.0.3",
+    "cross-spawn": "^7.0.6",
     "debug": "^4.3.4",
-    "express": "^4.21.1",
+    "express": "^4.21.2",
     "express-promise-router": "^4.1.1",
+    "helmet": "^8.0.0",
     "open": "^8.4.0",
@@ -45,4 +45,3 @@ "prettier": "^2.8.3"
     "@types/license-checker": "^25.0.1",
-    "@types/mocha": "^10.0.1",
-    "@types/node": "^14.18.36",
+    "@types/mocha": "^10.0.9",
     "@types/sinon-chai": "3.2.8",
@@ -55,3 +54,3 @@ "chai": "^4.3.10",
     "license-checker": "^25.0.1",
-    "mocha": "^10.2.0",
+    "mocha": "^10.8.2",
     "nock": "^13.0.4",
@@ -62,5 +61,10 @@ "nodemon": "^2.0.22",
     "sinon-chai": "3.7.0",
-    "ts-node": "^10.8.2"
+    "ts-node": "^10.9.2",
+    "typescript": ">=5 <5.4"
   },
-  "gitHead": "32a43047da221d51d7680e769ed11f766dcaaba5"
+  "overrides": {
+    "--comment--": "workaround for CVE-2024-21538",
+    "cross-spawn": "^7.0.6"
+  },
+  "gitHead": "5b435ce621ffa5faca211f246bdd4c548ea6fad8"
 }

src/server/index.js

@@ -18,2 +18,3 @@ // Copyright IBM Corp. 2020, 2024
 import samples from './api/samples.js'
+import helmet from 'helmet'
 
@@ -60,2 +61,4 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url))
 
+  app.use(helmet.frameguard())
+
   app.use(express.static(`${__dirname}/../ui/build`))
@@ -62,0 +65,0 @@ app.use((req, res, next) => {

No alert changes

Improved metrics

Total package byte prevSize

4856234

Lines of code

4389

increased by0.05%

Worsened metrics

Dependency count

9

increased by12.5%

Dependency changes

• + Addedhelmet@^8.0.0

• + Added@stepzen/fetch@0.45.0-experimental.5b435ce(transitive)

• + Addedhelmet@8.0.0(transitive)

• - Removed@stepzen/fetch@0.45.0-experimental.32a4304(transitive)

• Updated@stepzen/fetch@0.45.0-experimental.5b435ce

• Updatedcross-spawn@^7.0.6

• Updatedexpress@^4.21.2