Merge pull request #197 from pipedrive/GRAL-5798-fix-critical-and-high-security-vulnerabilities-in-example-apps

GRAL-5798 update dependencies and add overrides in package.json

Author: likawka

apps/caller/package-lock.json

@@ -10,21 +10,28 @@
   "author": "Hem",
   "license": "ISC",
   "dependencies": {
-    "@twilio/voice-sdk": "^2.1.1",
-    "@vscode/sqlite3": "^5.1.6-vscode",
-    "body-parser": "^1.19.0",
+    "@twilio/voice-sdk": "^2.18.1",
+    "@vscode/sqlite3": "^5.1.12-vscode",
+    "axios": "^1.7.9",
+    "body-parser": "^1.20.3",
     "dotenv": "^10.0.0",
-    "express": "^4.19.2",
+    "express": "^4.22.1",
     "form-data": "^4.0.5",
     "jquery": "^3.6.0",
     "jws": "^4.0.1",
     "knex": "^2.4.0",
     "passport": "^0.6.0",
     "passport-oauth": "^1.0.0",
-    "request": "^2.88.2",
-    "request-promise": "^4.2.5",
-    "sqlite3": "^5.1.6",
-    "tar": "^7.5.7",
-    "twilio": "~3.64.0"
+    "sqlite3": "^6.0.1",
+    "tar": "^7.5.12",
+    "twilio": "^4.20.0"
+  },
+  "overrides": {
+    "minimatch": "^3.1.4",
+    "tar-fs": "^2.1.4",
+    "ws": "^7.5.10",
+    "picomatch": "^2.3.2",
+    "brace-expansion": "^2.0.3",
+    "path-to-regexp": "0.1.13"
   }
 }

apps/caller/package.json

@@ -1,35 +1,17 @@
-const request = require('request-promise');
-/**
- * Get details pertaining to an authorized user
- */
-async function getUser(accessToken) {
-    const requestOptions = {
-        uri: 'https://api.pipedrive.com/v1/users/me',
-        headers: {
-            'Authorization': `Bearer ${accessToken}`
-        },
-        json: true
-    };
-    const userInfo = await request(requestOptions);
+const axios = require('axios');
 
-    return userInfo;
+async function getUser(accessToken) {
+    const response = await axios.get('https://api.pipedrive.com/v1/users/me', {
+        headers: { 'Authorization': `Bearer ${accessToken}` }
+    });
+    return response.data;
 }
 
-/**
- * Retrieve contact details associated with the company
- * Note that you need to have `Contacts` OAuth scope to access these details
- */
 async function getPersons(accessToken) {
-    const requestOptions = {
-        uri: 'https://api.pipedrive.com/v1/persons',
-        headers: {
-            'Authorization': `Bearer ${accessToken}`
-        },
-        json: true
-    };
-    const persons = await request(requestOptions);
-
-    return persons;
+    const response = await axios.get('https://api.pipedrive.com/v1/persons', {
+        headers: { 'Authorization': `Bearer ${accessToken}` }
+    });
+    return response.data;
 }
 
 module.exports = {