upgrades packages in examples to latest version

[Jesse-Sawa]

done by running 'yarn upgrade --latest'

[socket-security]

Socket Security Pull Request Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package	Script field	Source
web3@1.8.2 (upgraded)	postinstall	examples/package.json
web3-bzz@1.8.2 (upgraded)	postinstall	examples/package.json via web3@1.8.2
keccak@3.0.3 (upgraded)	install	examples/package.json via @celo/identity@3.2.0, web3@1.8.2, web3-utils@1.8.2
secp256k1@4.0.3 (added)	install	examples/package.json via @celo/identity@3.2.0, web3@1.8.2, web3-utils@1.8.2
web3-shh@1.8.2 (upgraded)	postinstall	examples/package.json via web3@1.8.2
bufferutil@4.0.7 (upgraded)	install	examples/package.json via @celo/identity@3.2.0, ethers@6.0.0, react-native-blind-threshold-bls@1.0.1, web3@1.8.2
utf-8-validate@5.0.10 (upgraded)	install	examples/package.json via @celo/identity@3.2.0, ethers@6.0.0, react-native-blind-threshold-bls@1.0.1, web3@1.8.2

Pull request report summary

Issue	Status
Install scripts	⚠️ 7 issues
Native code	✅ 0 issues
Bin script confusion	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2

• @SocketSecurity ignore web3@1.8.2
• @SocketSecurity ignore web3-bzz@1.8.2
• @SocketSecurity ignore keccak@3.0.3
• @SocketSecurity ignore secp256k1@4.0.3
• @SocketSecurity ignore web3-shh@1.8.2

Powered by socket.dev