View Issue Details

IDProjectCategoryView StatusLast Update
0006977Talerwallet (TS core)public2021-08-04 17:55
ReporterFlorian Dold Assigned ToFlorian Dold  
PrioritynormalSeverityminorReproducibilityhave not tried
Status assignedResolutionopen 
Summary0006977: make wallet-core more resistant against node supply chain attacks
DescriptionThe core wallet packages already have very few run-time dependencies.

However, the build process pulls in a huge number of packages.

We should restructure the build process so that it can also use ambient versions of the various executables instead of the ones shipped via NPM.
TagsNo tags attached.

Activities

Florian Dold

2021-08-04 17:55

manager   ~0018065

Might be a good idea to switch to https://github.com/evanw/esbuild to replace rollup and TypeScript.

Almost all of our run-time dependencies should be vendored.

Issue History

Date Modified Username Field Change
2021-08-04 17:47 Florian Dold New Issue
2021-08-04 17:47 Florian Dold Status new => assigned
2021-08-04 17:47 Florian Dold Assigned To => Florian Dold
2021-08-04 17:55 Florian Dold Note Added: 0018065