[WIP] Fix package audit

examples/package.json

@@ -4,20 +4,21 @@
   "type": "module",
   "version": "0.22.3",
   "scripts": {
-    "bbs-dock-example": "babel-node ./src/bbs-dock.js",
-    "claim-deduction-example": "babel-node ./src/claim-deduction.js",
-    "open-badges-example": "babel-node ./src/open-badges.js",
-    "schema-validation-example": "babel-node ./src/schema-validation.js",
-    "standard-schemas-example": "babel-node ./src/standard-schemas.js",
-    "dock-did-example": "babel-node ./src/dock-did.js",
-    "did-resolver-example": "babel-node ./src/resolver.js",
-    "schema-example": "babel-node ./src/schema.js",
-    "blob-example": "babel-node ./src/blob.js",
+    "bbs-dock-example": "node ./src/bbs-dock.js",
+    "claim-deduction-example": "node ./src/claim-deduction.js",
+    "open-badges-example": "node ./src/open-badges.js",
+    "schema-validation-example": "node ./src/schema-validation.js",
+    "standard-schemas-example": "node ./src/standard-schemas.js",
+    "dock-did-example": "node ./src/dock-did.js",
+    "did-resolver-example": "node ./src/resolver.js",
+    "schema-example": "node ./src/schema.js",
+    "blob-example": "node ./src/blob.js",
     "examples": "yarn bbs-dock-example && yarn claim-deduction-example && yarn open-badges-example && yarn schema-validation-example && yarn standard-schemas-example && yarn dock-did-example && yarn did-resolver-example && yarn schema-example && yarn blob-example",
     "examples-with-node": "CHEQD_MNEMONIC=$CHEQD_MNEMONIC CHEQD_IMAGE_TAG=$CHEQD_IMAGE_TAG CHEQD_NETWORK=$CHEQD_NETWORK ../scripts/with_cheqd_docker_test_node yarn examples",
     "lint": "eslint \"src/**/*.js\""
   },
   "dependencies": {
+    "ethr-did-resolver": "^11.1.0",
     "@docknetwork/credential-sdk": "0.54.18",
     "@docknetwork/cheqd-blockchain-api": "4.2.1",
     "@docknetwork/cheqd-blockchain-modules": "4.0.8"

examples/src/resolver.js

@@ -51,7 +51,11 @@ class EtherResolver extends Resolver {
   async resolve(did) {
     const parsed = parseDIDUrl(did);
     try {
-      return this.ethres(did, parsed);
+      // ethr-did-resolver v11 expects DID Resolution options as the 4th arg.
+      // Passing an explicit accept value avoids undefined option access.
+      return this.ethres(did, parsed, undefined, {
+        accept: 'application/did+ld+json',
+      });
     } catch (e) {
       throw new NoDIDError(did);
     }

package.json

@@ -9,6 +9,29 @@
     "scripts/bench"
   ],
   "dependencies": {},
+  "overrides": {
+    "axios": "^1.15.2",
+    "bn.js": "^5.2.3",
+    "brace-expansion": "^2.0.3",
+    "file-type": "^22.0.1",
+    "lodash": "^4.18.1",
+    "minimatch": "^9.0.7",
+    "picomatch": "^4.0.4",
+    "protobufjs": "^8.0.1",
+    "undici": "^6.24.0",
+    "uuid": "^14.0.0",
+    "@stablelib/ed25519": "^1.0.2",
+    "@stablelib/ed25519-cjs": "npm:@stablelib/ed25519@^1.0.2",
+    "uuid-cjs": "npm:uuid@^14.0.0",
+    "file-type-cjs": "npm:file-type@^21.3.2",
+    "@digitalbazaar/http-client": "^3.4.1",
+    "@cheqd/ts-proto": {
+      "protobufjs": "^8.0.1"
+    },
+    "@cheqd/ts-proto-cjs": {
+      "protobufjs": "^8.0.1"
+    }
+  },
   "devDependencies": {
     "@babel/cli": "^7.24.1",
     "@babel/core": "^7.24.3",
@@ -19,6 +42,25 @@
     "turbo": "2.0.5"
   },
   "packageManager": "yarn@1.22.22",
+  "resolutions": {
+    "axios": "^1.15.2",
+    "bn.js": "^5.2.3",
+    "brace-expansion": "^2.0.3",
+    "file-type": "^22.0.1",
+    "lodash": "^4.18.1",
+    "minimatch": "^9.0.7",
+    "picomatch": "^4.0.4",
+    "protobufjs": "^8.0.1",
+    "undici": "^6.24.0",
+    "uuid": "^14.0.0",
+    "@stablelib/ed25519": "^1.0.2",
+    "@stablelib/ed25519-cjs": "npm:@stablelib/ed25519@^1.0.2",
+    "uuid-cjs": "npm:uuid@^14.0.0",
+    "file-type-cjs": "npm:file-type@^21.3.2",
+    "@digitalbazaar/http-client": "^3.4.1",
+    "@cheqd/ts-proto/protobufjs": "^8.0.1",
+    "@cheqd/ts-proto-cjs/protobufjs": "^8.0.1"
+  },
   "scripts": {
     "mdbook": "mdbook build tutorials --dest-dir ../out/tutorials",
     "publish-packages": "changeset version && changeset publish"

packages/cheqd-blockchain-api/jest.config.js

@@ -6,6 +6,7 @@ export default {
     "^@cheqd/sdk(.*)$": "<rootDir>/../../node_modules/@cheqd/sdk/build/cjs/$1",
     "^uint8arrays$": "<rootDir>/../../node_modules/uint8arrays/dist/src",
     "^file-type$": "<rootDir>/../../node_modules/file-type/index.js",
+    "^uuid$": "<rootDir>/../../node_modules/uuid-cjs",
     "^multiformats/(.*)$":
       "<rootDir>/../../node_modules/multiformats/dist/src/$1",
   },

packages/cheqd-blockchain-api/package.json

@@ -62,21 +62,17 @@
     "eslint-plugin-jest": "^26.0.0",
     "eslint-plugin-sonarjs": "0.5.0",
     "eslint-plugin-unused-imports": "^3.0.0",
-    "eth-revert-reason": "^1.0.3",
-    "ethers": "^5.4",
-    "ethr-did-resolver": "^2.2.0",
     "glob": "^7.1.6",
     "jest": "^29.7.0",
     "jest-environment-node": "^29.7.0",
-    "jsdoc": "^3.6.3",
+    "jsdoc": "^4.0.5",
     "jsdoc-typeof-plugin": "^1.0.0",
     "node-datachannel": "^0.5.4",
     "parity-scale-codec": "^0.5.3",
-    "rollup": "2.79.2",
+    "rollup": "2.80.0",
     "rollup-plugin-copy": "^3.4.0",
     "rollup-plugin-multi-input": "^1.3.2",
     "rollup-plugin-node-polyfills": "^0.2.1",
-    "rollup-plugin-terser": "^7.0.2",
     "rxjs": "^7.4.0",
     "typescript": "5.0.4"
   },

packages/cheqd-blockchain-api/rollup.config.mjs

@@ -1,7 +1,6 @@
 import json from "@rollup/plugin-json";
 import multiInput from "rollup-plugin-multi-input";
 import commonjs from "@rollup/plugin-commonjs";
-import { terser } from "rollup-plugin-terser";
 // import { wasm } from '@rollup/plugin-wasm';
 // import pkg from './package.json';
 

packages/cheqd-blockchain-modules/package.json

@@ -61,13 +61,12 @@
     "file-type": "^21.3.2",
     "jest": "^29.7.0",
     "jest-environment-node": "^29.7.0",
-    "jsdoc": "^3.6.3",
+    "jsdoc": "^4.0.5",
     "jsdoc-typeof-plugin": "^1.0.0",
-    "rollup": "2.79.2",
+    "rollup": "2.80.0",
     "rollup-plugin-copy": "^3.4.0",
     "rollup-plugin-multi-input": "^1.3.2",
-    "rollup-plugin-node-polyfills": "^0.2.1",
-    "rollup-plugin-terser": "^7.0.2"
+    "rollup-plugin-node-polyfills": "^0.2.1"
   },
   "scripts": {
     "build": "rollup -c",

packages/credential-sdk/package.json

@@ -43,7 +43,7 @@
     "@juanelas/base64": "^1.1.5",
     "@sphereon/pex": "^5.0.0-unstable.28",
     "@sphereon/ssi-sdk-ext.did-resolver-jwk": "^0.26.0",
-    "@stablelib/ed25519": "^1.0.0",
+    "@stablelib/ed25519": "^1.0.2",
     "@transmute/json-web-signature": "^0.7.0-unstable.82",
     "blake2b": "2.1.4",
     "blakejs": "^1.2.1",
@@ -53,16 +53,16 @@
     "js-sha256": "^0.11.0",
     "json-canonicalize": "1.0.4",
     "json-stringify-deterministic": "^1.0.12",
-    "jsonld": "^6.0.0",
-    "jsonld-signatures": "^9.3.1",
+    "jsonld": "^9.0.0",
+    "jsonld-signatures": "^11.6.0",
     "jsonschema": "1.4.1",
-    "key-did-resolver": "^1.4.0",
+    "key-did-resolver": "^4.0.0",
     "mrklt": "^0.2.0",
     "multiformats": "^9.5.4",
     "n3": "^1.17.4",
     "rify": "^0.7.1",
     "semver": "^7.6.0",
-    "uuid": "^10.0.0",
+    "uuid": "^14.0.0",
     "uuidv4": "^6.2.13",
     "varint": "^6.0.0"
   },
@@ -94,13 +94,12 @@
     "helia": "^4.2.5",
     "jest": "^29.7.0",
     "jest-environment-node": "^29.7.0",
-    "jsdoc": "^3.6.3",
+    "jsdoc": "^4.0.5",
     "jsdoc-typeof-plugin": "^1.0.0",
     "rollup": "^4.28.0",
     "rollup-plugin-copy": "^3.4.0",
     "rollup-plugin-multi-input": "^1.4.1",
-    "rollup-plugin-node-polyfills": "^0.2.1",
-    "rollup-plugin-terser": "^7.0.2"
+    "rollup-plugin-node-polyfills": "^0.2.1"
   },
   "scripts": {
     "build": "rollup -c",

packages/credential-sdk/src/vc/crypto/common/CustomLinkedDataSignature.js

@@ -24,7 +24,15 @@ export default class CustomLinkedDataSignature extends jsigs.suites
    * @param {object} config - Configuration options
    */
   constructor(config) {
-    super(config);
+    super({
+      ...config,
+      // Keep pre-upgrade behavior: allow relative JSON-LD terms/types during
+      // canonization unless a caller explicitly opts into safe mode.
+      canonizeOptions: {
+        safe: false,
+        ...(config.canonizeOptions || {}),
+      },
+    });
     this.alg = config.alg;
     this.useProofValue = config.useProofValue || false;
   }

packages/vc-delegation-engine/package.json

@@ -54,12 +54,11 @@
     "@babel/plugin-syntax-import-attributes": "^7.25.6",
     "@babel/preset-env": "^7.24.3",
     "@cedar-policy/cedar-wasm": "^4.5.0",
-    "@types/minimatch": "^6.0.0",
     "@types/node": "^24.10.1",
-    "@vitest/coverage-v8": "^2.0.2",
+    "@vitest/coverage-v8": "^4.0.7",
     "esbuild": "^0.25.0",
     "rimraf": "^5.0.5",
     "typescript": "^5.6.3",
-    "vitest": "^2.1.8"
+    "vitest": "^4.1.5"
   }
 }