Security Vulnerabilities

[irmerk]

Security Vulnerabilities

[Innovator007]

Can i work on this?

[Innovator007]

Is this issue still available, if so i would like to work on it

[Innovator007]

Hi @irmerk i researched about yarn.lock file and it says that it holds the version of the dependencies in it on yarn install and we should keep that in order to get the same output for every developer.

[mttrbrts]

Thanks @Innovator007 , you're correct. The real issue is that we should not have both yarn.lock and package-lock.json.

Most other AP repos use npm (which produces package-lock.json) rather than yarn (which produces yarn.lock ).

[Innovator007]

Yes i agree with you @mttrbrts i can remove it and it won't affect anything but although we can run tests and confirm.

[Innovator007]

Hi @irmerk i have made a pull request here, have tested and everything works fine, can you review it. Thanks :)