adds allow scripts and configures allow list for all workspaces

stellar · Jul 21, 2023 · 67ff40b · 67ff40b
1 parent bb00b8b
commit 67ff40b
Show file tree

Hide file tree

Showing 7 changed files with 58 additions and 46 deletions.
diff --git a/@shared/api/package.json b/@shared/api/package.json
@@ -7,12 +7,19 @@
     "@stellar/wallet-sdk": "^0.8.0",
     "bignumber.js": "^9.1.1",
     "prettier": "^2.0.5",
-    "stellar-sdk": "^10.4.1",
     "soroban-client": "^0.9.1",
+    "stellar-sdk": "^10.4.1",
     "typescript": "~3.7.2",
     "webextension-polyfill": "^0.10.0"
   },
   "devDependencies": {
+    "@lavamoat/allow-scripts": "^2.3.1",
     "@stellar/prettier-config": "^1.0.1"
+  },
+  "lavamoat": {
+    "allowScripts": {
+      "soroban-client>stellar-base>sodium-native": false,
+      "stellar-sdk>stellar-base>sodium-native": false
+    }
   }
 }
diff --git a/@shared/constants/package.json b/@shared/constants/package.json
@@ -3,10 +3,16 @@
   "prettier": "@stellar/prettier-config",
   "version": "1.0.0",
   "dependencies": {
-    "typescript": "~3.7.2",
-    "stellar-sdk": "^10.4.1"
+    "stellar-sdk": "^10.4.1",
+    "typescript": "~3.7.2"
   },
   "devDependencies": {
+    "@lavamoat/allow-scripts": "^2.3.1",
     "@stellar/prettier-config": "^1.0.1"
+  },
+  "lavamoat": {
+    "allowScripts": {
+      "stellar-sdk>stellar-base>sodium-native": false
+    }
   }
 }
diff --git a/@stellar/freighter-api/package.json b/@stellar/freighter-api/package.json
@@ -15,5 +15,8 @@
     "start": "webpack --config webpack.dev.js --watch --mode development"
   },
   "types": "build/@stellar/freighter-api/src/index.d.ts",
-  "dependencies": {}
+  "dependencies": {},
+  "devDependencies": {
+    "@lavamoat/allow-scripts": "^2.3.1"
+  }
 }
diff --git a/docs/package.json b/docs/package.json
@@ -32,5 +32,15 @@
     "react-dom": "^17.0.2",
     "react-is": "^16.13.1",
     "styled-components": "^5.0.1"
+  },
+  "devDependencies": {
+    "@lavamoat/allow-scripts": "^2.3.1"
+  },
+  "lavamoat": {
+    "allowScripts": {
+      "@docusaurus/core>@babel/runtime-corejs3>core-js-pure": false,
+      "@docusaurus/core>core-js": false,
+      "@docusaurus/core>file-loader>webpack>watchpack>watchpack-chokidar2>chokidar>fsevents": false
+    }
   }
 }
diff --git a/extension/package.json b/extension/package.json
@@ -4,6 +4,7 @@
   "license": "Apache-2.0",
   "prettier": "@stellar/prettier-config",
   "scripts": {
+    "setup": "yarn install && yarn allow-scripts",
     "build": "webpack --config webpack.extension.js",
     "build:experimental": "yarn build --env.EXPERIMENTAL=true",
     "build:production": "yarn build --env.PRODUCTION",
@@ -71,6 +72,7 @@
     "redux": "^4.0.5",
     "sass": "^1.22.10",
     "sass-loader": "8.0.0",
+    "ses": "^0.18.5",
     "simplebar-react": "^2.3.6",
     "soroban-client": "^0.9.1",
     "stellar-hd-wallet": "^0.0.10",
@@ -81,5 +83,18 @@
     "tslib": "2.0.0",
     "webextension-polyfill": "^0.10.0",
     "yup": "^0.29.1"
+  },
+  "devDependencies": {
+    "@lavamoat/allow-scripts": "^2.3.1"
+  },
+  "lavamoat": {
+    "allowScripts": {
+      "@testing-library/react>@testing-library/dom>aria-query>@babel/runtime-corejs3>core-js-pure": false,
+      "css-loader>webpack>watchpack>watchpack-chokidar2>chokidar>fsevents": false,
+      "simplebar-react>simplebar>core-js": false,
+      "soroban-client>stellar-base>sodium-native": false,
+      "stellar-hd-wallet>stellar-base>sodium-native": false,
+      "stellar-sdk>stellar-base>sodium-native": false
+    }
   }
 }
diff --git a/package.json b/package.json
@@ -85,7 +85,6 @@
     "babel-loader": "^8.3.0",
     "babel-plugin-dynamic-import-node": "^2.3.3",
     "babel-polyfill": "6.26.0",
-    "can-i-ignore-scripts": "^0.1.9",
     "eslint": "7.12.1",
     "eslint-config-prettier": "^6.10.0",
     "eslint-config-react-app": "^5.2.1",

diff --git a/yarn.lock b/yarn.lock
@@ -3058,6 +3058,11 @@
   resolved "https://registry.npmjs.org/@emotion/unitless/-/unitless-0.7.5.tgz"
   integrity sha512-OWORNpfjMsSSUBVrRBVGECkhWcULOAJz9ZW8uK9qgxD+87M7jHRcvh/A96XXNhXTLmKcoYSQtBEX7lHMO7YRwg==
 
+"@endo/env-options@^0.1.1":
+  version "0.1.1"
+  resolved "https://registry.yarnpkg.com/@endo/env-options/-/env-options-0.1.1.tgz#568e37d9be2cbbcb39de3c0bc717a9d8e2d55e6d"
+  integrity sha512-QlY6Z2r/izom+wZI0vQtU6yQf5V/EGRMwcqacmZv6j3e9bcYGZbG0ikoa8E155XETKr551BALlJhculBvlBLpg==
+
 "@eslint/eslintrc@^0.2.1":
   version "0.2.1"
   resolved "https://registry.npmjs.org/@eslint/eslintrc/-/eslintrc-0.2.1.tgz"
@@ -6177,13 +6182,6 @@ builtin-status-codes@^3.0.0:
   resolved "https://registry.npmjs.org/builtin-status-codes/-/builtin-status-codes-3.0.0.tgz"
   integrity sha1-hZgoeOIbmOHGZCXgPQF0eI9Wnug=
 
-busboy@^1.6.0:
-  version "1.6.0"
-  resolved "https://registry.yarnpkg.com/busboy/-/busboy-1.6.0.tgz#966ea36a9502e43cdb9146962523b92f531f6893"
-  integrity sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==
-  dependencies:
-    streamsearch "^1.1.0"
-
 bytes@3.0.0:
   version "3.0.0"
   resolved "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz"
@@ -6336,15 +6334,6 @@ camelize@^1.0.0:
   resolved "https://registry.npmjs.org/camelize/-/camelize-1.0.0.tgz"
   integrity sha1-FkpUg+Yw+kMh5a8HAg5TGDGyYJs=
 
-can-i-ignore-scripts@^0.1.9:
-  version "0.1.9"
-  resolved "https://registry.yarnpkg.com/can-i-ignore-scripts/-/can-i-ignore-scripts-0.1.9.tgz#fe06a565ba30c10e8f7e5e5097230421e5e47419"
-  integrity sha512-xSSw70SdnXq8PFZIfenfgH9ZsRnCB9mKsi0n2zOUoUFwOh9cQxtf1+3nsBgR7VDMaUpKPSuzVGtnn6uWI03FKA==
-  dependencies:
-    glob "^7.1.7"
-    lodash "^4.17.21"
-    undici "^5.11.0"
-
 can-use-dom@^0.1.0:
   version "0.1.0"
   resolved "https://registry.npmjs.org/can-use-dom/-/can-use-dom-0.1.0.tgz"
@@ -9471,18 +9460,6 @@ glob@^7.0.0, glob@^7.0.3, glob@^7.1.1, glob@^7.1.2, glob@^7.1.3, glob@^7.1.4, gl
     once "^1.3.0"
     path-is-absolute "^1.0.0"
 
-glob@^7.1.7:
-  version "7.2.3"
-  resolved "https://registry.yarnpkg.com/glob/-/glob-7.2.3.tgz#b8df0fb802bbfa8e89bd1d938b4e16578ed44f2b"
-  integrity sha512-nFR0zLpU2YCaRxwoCJvL6UvCH2JFyFVIvwTLsIf21AuHlMskA1hhTdk+LlYJtOlYt9v6dvszD2BGRqBL+iQK9Q==
-  dependencies:
-    fs.realpath "^1.0.0"
-    inflight "^1.0.4"
-    inherits "2"
-    minimatch "^3.1.1"
-    once "^1.3.0"
-    path-is-absolute "^1.0.0"
-
 glob@^9.3.2:
   version "9.3.2"
   resolved "https://registry.npmjs.org/glob/-/glob-9.3.2.tgz"
@@ -12449,7 +12426,7 @@ minimatch@3.0.4, minimatch@^3.0.4:
   dependencies:
     brace-expansion "^1.1.7"
 
-minimatch@^3.0.2, minimatch@^3.0.5, minimatch@^3.1.1:
+minimatch@^3.0.2, minimatch@^3.0.5:
   version "3.1.2"
   resolved "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz"
   integrity sha512-J7p63hRiAjw1NDEww1W7i37+ByIrOWO5XQQAzZ3VOcL0PNybwpfmV/N05zFAzwQ9USyEcX6t3UO+K5aqBQOIHw==
@@ -15569,6 +15546,13 @@ serve-static@1.15.0:
     parseurl "~1.3.3"
     send "0.18.0"
 
+ses@^0.18.5:
+  version "0.18.5"
+  resolved "https://registry.yarnpkg.com/ses/-/ses-0.18.5.tgz#fc7a88c48dd292dd7253ce060104df5f1a36470d"
+  integrity sha512-paLV2JHUqGGpbLn+V4LM9g20WVzAn9jLU22Bx5/18fo6h6nF8SwhC+3cAMYxzmHmkAzplY5lkg1ms3xSkmSzdw==
+  dependencies:
+    "@endo/env-options" "^0.1.1"
+
 set-blocking@^2.0.0:
   version "2.0.0"
   resolved "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
@@ -16229,11 +16213,6 @@ stream-shift@^1.0.0:
   resolved "https://registry.npmjs.org/stream-shift/-/stream-shift-1.0.1.tgz"
   integrity sha512-AiisoFqQ0vbGcZgQPY1cdP2I76glaVA/RauYR4G4thNFgkTqr90yXTo4LYX60Jl+sIlPNHHdGSwo01AvbKUSVQ==
 
-streamsearch@^1.1.0:
-  version "1.1.0"
-  resolved "https://registry.yarnpkg.com/streamsearch/-/streamsearch-1.1.0.tgz#404dd1e2247ca94af554e841a8ef0eaa238da764"
-  integrity sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==
-
 strict-uri-encode@^2.0.0:
   version "2.0.0"
   resolved "https://registry.npmjs.org/strict-uri-encode/-/strict-uri-encode-2.0.0.tgz"
@@ -17084,13 +17063,6 @@ underscore.string@~3.3.4:
     sprintf-js "^1.1.1"
     util-deprecate "^1.0.2"
 
-undici@^5.11.0:
-  version "5.22.1"
-  resolved "https://registry.yarnpkg.com/undici/-/undici-5.22.1.tgz#877d512effef2ac8be65e695f3586922e1a57d7b"
-  integrity sha512-Ji2IJhFXZY0x/0tVBXeQwgPlLWw13GVzpsWPQ3rV50IFMMof2I55PZZxtm4P6iNq+L5znYN9nSTAq0ZyE6lSJw==
-  dependencies:
-    busboy "^1.6.0"
-
 unfetch@^4.2.0:
   version "4.2.0"
   resolved "https://registry.npmjs.org/unfetch/-/unfetch-4.2.0.tgz"