fix: packages/lib/package.json & packages/lib/.snyk to reduce vulnerabilities

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

.github/workflows/publish.yml

@@ -1,24 +0,0 @@
-name: Build and Deploy
-on: 
-  push:
-    branches:
-      - master
-jobs:
-  build-and-deploy:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout 🛎️
-        uses: actions/checkout@v2.3.1 # If you're using actions/checkout@v2 you must set persist-credentials to false in most cases for the deployment to work correctly.
-        with:
-          persist-credentials: false
-
-      - name: Install and Build 🔧 # This example project is built using npm and outputs the result to the 'build' folder. Replace with the commands required to build your project, or remove this step entirely if your site is pre-built.
-        run: yarn install
-      - name: Deploy 🚀
-        run: |
-          git config --global user.email "morten@olsen.pro"
-          git config --global user.name "Release action"
-          yarn prerelease
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

.gitignore

@@ -1,5 +1,4 @@
 node_modules
 /coverage
 /packages/lib/lib
-/.auth
+/.auth
-*.log

CHANGELOG.md

@@ -3,62 +3,6 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
-# [2.0.0-alpha.17](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.16...v2.0.0-alpha.17) (2021-04-09)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.16](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.16) (2021-04-09)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.15](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.15) (2021-04-09)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.14](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.14) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.13](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.13) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.12](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.12) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.11](https://github.com/morten-olsen/react-native-debug-console/compare/2.0.0-alpha.5...2.0.0-alpha.11) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
 # [2.0.0-alpha.7](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.6...v2.0.0-alpha.7) (2019-07-05)
 
 **Note:** Version bump only for package react-native-debug-console

lerna.json

@@ -1,11 +1,5 @@
 {
   "npmClient": "yarn",
   "useWorkspaces": true,
-  "version": "2.0.0-alpha.17",
+  "version": "2.0.0-alpha.7"
-  "command": {
-    "publish": {
-      "conventionalCommits": true,
-      "yes": true
-    }
-  }
 }

package.json

@@ -8,7 +8,7 @@
     "demo:ios": "lerna run --scope=react-native-debug-console-demo --stream ios",
     "demo:web": "lerna run --scope=react-native-debug-console-demo --stream web",
     "test": "lerna run --stream test",
-    "prerelease": "lerna version prerelease --yes -m \"chore(release): publish %s\" --conventional-commits --create-release github --force-publish"
+    "prerelease": "source .auth && lerna version prerelease --sign-git-tag -m \"chore(release): publish %s\" --conventional-commits --create-release github --force-publish"
   },
   "devDependencies": {
     "@babel/cli": "^7.5.0",

packages/demo/CHANGELOG.md

@@ -3,62 +3,6 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
-# [2.0.0-alpha.17](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.16...v2.0.0-alpha.17) (2021-04-09)
-
-**Note:** Version bump only for package react-native-debug-console-demo
-
-
-
-
-
-# [2.0.0-alpha.16](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.16) (2021-04-09)
-
-**Note:** Version bump only for package react-native-debug-console-demo
-
-
-
-
-
-# [2.0.0-alpha.15](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.15) (2021-04-09)
-
-**Note:** Version bump only for package react-native-debug-console-demo
-
-
-
-
-
-# [2.0.0-alpha.14](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.14) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console-demo
-
-
-
-
-
-# [2.0.0-alpha.13](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.13) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console-demo
-
-
-
-
-
-# [2.0.0-alpha.12](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.11...v2.0.0-alpha.12) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console-demo
-
-
-
-
-
-# 2.0.0-alpha.11 (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console-demo
-
-
-
-
-
 # [2.0.0-alpha.7](https://github.com/morten-olsen/react-native-debug-console/compare/v2.0.0-alpha.6...v2.0.0-alpha.7) (2019-07-05)
 
 **Note:** Version bump only for package react-native-debug-console-demo

packages/demo/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-debug-console-demo",
-  "version": "2.0.0-alpha.17",
+  "version": "2.0.0-alpha.7",
   "main": "./Entry.js",
   "scripts": {
     "start": "expo start",
@@ -15,7 +15,7 @@
     "react": "16.8.3",
     "react-dom": "^16.8.6",
     "react-native": "https://github.com/expo/react-native/archive/sdk-33.0.0.tar.gz",
-    "react-native-debug-console": "^2.0.0-alpha.17",
+    "react-native-debug-console": "^2.0.0-alpha.7",
     "react-native-web": "0.11.4"
   },
   "devDependencies": {

packages/lib/.snyk

@@ -0,0 +1,18 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.14.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  SNYK-JS-LODASH-567746:
+    - styled-components > @babel/traverse > lodash:
+        patched: '2020-04-30T22:47:36.693Z'
+    - styled-components > babel-plugin-styled-components > lodash:
+        patched: '2020-04-30T22:47:36.693Z'
+    - styled-components > @babel/traverse > @babel/generator > lodash:
+        patched: '2020-04-30T22:47:36.693Z'
+    - styled-components > babel-plugin-styled-components > @babel/helper-annotate-as-pure > @babel/types > lodash:
+        patched: '2020-04-30T22:47:36.693Z'
+    - styled-components > @babel/traverse > @babel/helper-split-export-declaration > @babel/types > lodash:
+        patched: '2020-04-30T22:47:36.693Z'
+    - styled-components > @babel/traverse > @babel/helper-function-name > @babel/template > @babel/types > lodash:
+        patched: '2020-04-30T22:47:36.693Z'

packages/lib/CHANGELOG.md

@@ -3,62 +3,6 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
-# [2.0.0-alpha.17](https://github.com/morten-olsen/react-native-debugger/compare/v2.0.0-alpha.16...v2.0.0-alpha.17) (2021-04-09)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.16](https://github.com/morten-olsen/react-native-debugger/compare/v2.0.0-alpha.11...v2.0.0-alpha.16) (2021-04-09)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.15](https://github.com/morten-olsen/react-native-debugger/compare/v2.0.0-alpha.11...v2.0.0-alpha.15) (2021-04-09)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.14](https://github.com/morten-olsen/react-native-debugger/compare/v2.0.0-alpha.11...v2.0.0-alpha.14) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.13](https://github.com/morten-olsen/react-native-debugger/compare/v2.0.0-alpha.11...v2.0.0-alpha.13) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# [2.0.0-alpha.12](https://github.com/morten-olsen/react-native-debugger/compare/v2.0.0-alpha.11...v2.0.0-alpha.12) (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
-# 2.0.0-alpha.11 (2020-10-19)
-
-**Note:** Version bump only for package react-native-debug-console
-
-
-
-
-
 # [2.0.0-alpha.7](https://github.com/morten-olsen/react-native-debugger/compare/v2.0.0-alpha.6...v2.0.0-alpha.7) (2019-07-05)
 
 **Note:** Version bump only for package react-native-debug-console

packages/lib/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-debug-console",
-  "version": "2.0.0-alpha.17",
+  "version": "2.0.0-alpha.9",
   "main": "lib/index.js",
   "react-native": "lib/native.js",
   "repository": {
@@ -9,16 +9,20 @@
   "scripts": {
     "test": "jest",
     "bundle": "babel --copy-files --extensions '.ts,.tsx,.js' -d lib src",
-    "prepublish": "yarn run bundle"
+    "prepublish": "npm run snyk-protect && yarn run bundle",
+    "snyk-protect": "snyk protect"
   },
   "license": "MIT",
   "dependencies": {
-    "styled-components": "^5.0.0-beta.8"
+    "react-native-json-tree": "^1.2.0",
+    "styled-components": "^5.0.0-beta.8",
+    "snyk": "^1.316.1"
   },
   "peerDependencies": {
     "prop-types": "^15.6.0",
     "react": "^16.8.3",
     "react-native": "^0.59.8",
     "react-native-webview": "^6.9.0"
-  }
+  },
+  "snyk": true
 }

packages/lib/src/components/DevTool/Console/Output.js

@@ -1,6 +1,6 @@
 import React, { Fragment, createRef } from 'react';
 import styled from 'styled-components/native';
-import JSONTree from '../../JSON';
+import JSONTree from 'react-native-json-tree';
 import {
   ScrollView
 } from 'react-native';

packages/lib/src/components/DevTool/Requests/Details.js

@@ -9,7 +9,7 @@ import {
   Emphasis,
   Fixed,
 } from '../../base/text';
-import JSONTree from '../../JSON';
+import JSONTree from 'react-native-json-tree';
 import Cell from '../../base/Cell';
 import CellHeader from '../../base/CellHeader';
 import Tab from '../Tab';

packages/lib/src/components/JSON/index.js

@@ -1,13 +0,0 @@
-import React from 'react';
-import {
-  Fixed,
-} from '../base/text';
-
-const JSONTree = ({ data }) => (
-  <Fixed>
-    { JSON.stringify(data, null, '  ') }
-  </Fixed>
-);
-
-export default JSONTree;
-

packages/lib/src/events.js

@@ -8,7 +8,7 @@ class Events {
   }
 
   unlisten(fn) {
-    this.listeners = this.listeners.filter(l => l !== fn);
+    this.listeners = this.listeners(l => l !== fn);
   }
 
   publish(type, data) {
@@ -18,4 +18,4 @@ class Events {
 
 const events = new Events();
 
-export default events;
+export default events;

yarn.lock

@@ -2702,6 +2702,11 @@ ajv@^6.1.0, ajv@^6.5.5:
     json-schema-traverse "^0.4.1"
     uri-js "^4.2.2"
 
+almost-equal@^1.1.0:
+  version "1.1.0"
+  resolved "https://registry.yarnpkg.com/almost-equal/-/almost-equal-1.1.0.tgz#f851c631138757994276aa2efbe8dfa3066cccdd"
+  integrity sha1-+FHGMROHV5lCdqou++jfowZszN0=
+
 alphanum-sort@^1.0.0:
   version "1.0.2"
   resolved "https://registry.yarnpkg.com/alphanum-sort/-/alphanum-sort-1.0.2.tgz#97a1119649b211ad33691d9f9f486a8ec9fbe0a3"
@@ -3328,6 +3333,10 @@ balanced-match@^1.0.0:
   resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.0.tgz#89b4d199ab2bee49de164ea02b89ce462d71b767"
   integrity sha1-ibTRmasr7kneFk6gK4nORi1xt2c=
 
+base16@Dean177/base16-js:
+  version "1.0.1"
+  resolved "https://codeload.github.com/Dean177/base16-js/tar.gz/6c5e5f3b63990b580ffdc036bc672f8987d5b93d"
+
 base32.js@0.1.0:
   version "0.1.0"
   resolved "https://registry.yarnpkg.com/base32.js/-/base32.js-0.1.0.tgz#b582dec693c2f11e893cf064ee6ac5b6131a2202"
@@ -4192,6 +4201,14 @@ color-name@^1.0.0:
   resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.4.tgz#c2a09a87acbde69543de6f63fa3995c826c536a2"
   integrity sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==
 
+color-space@^1.14.3:
+  version "1.16.0"
+  resolved "https://registry.yarnpkg.com/color-space/-/color-space-1.16.0.tgz#611781bca41cd8582a1466fd9e28a7d3d89772a2"
+  integrity sha512-A6WMiFzunQ8KEPFmj02OnnoUnqhmSaHaZ/0LVFcPTdlvm8+3aMJ5x1HRHy3bDHPkovkf4sS0f4wsVvwk71fKkg==
+  dependencies:
+    hsluv "^0.0.3"
+    mumath "^3.3.4"
+
 color-string@^1.5.2:
   version "1.5.3"
   resolved "https://registry.yarnpkg.com/color-string/-/color-string-1.5.3.tgz#c9bbc5f01b58b5492f3d6857459cb6590ce204cc"
@@ -5006,9 +5023,9 @@ decamelize@^2.0.0:
     xregexp "4.0.0"
 
 decode-uri-component@^0.2.0:
-  version "0.2.2"
+  version "0.2.0"
-  resolved "https://registry.yarnpkg.com/decode-uri-component/-/decode-uri-component-0.2.2.tgz#e69dbe25d37941171dd540e024c444cd5188e1e9"
+  resolved "https://registry.yarnpkg.com/decode-uri-component/-/decode-uri-component-0.2.0.tgz#eb3913333458775cb84cd1a1fae062106bb87545"
-  integrity sha512-FqUYQ+8o158GyGTrMFJms9qh3CqTKvAqgqsTnkLI8sKu0028orqBhxNMFkFen0zGyg6epACD32pjVk58ngIErQ==
+  integrity sha1-6zkTMzRYd1y4TNGh+uBiEGu4dUU=
 
 decompress-response@^3.3.0:
   version "3.3.0"
@@ -7359,6 +7376,11 @@ hsla-regex@^1.0.0:
   resolved "https://registry.yarnpkg.com/hsla-regex/-/hsla-regex-1.0.0.tgz#c1ce7a3168c8c6614033a4b5f7877f3b225f9c38"
   integrity sha1-wc56MWjIxmFAM6S194d/OyJfnDg=
 
+hsluv@^0.0.3:
+  version "0.0.3"
+  resolved "https://registry.yarnpkg.com/hsluv/-/hsluv-0.0.3.tgz#829107dafb4a9f8b52a1809ed02e091eade6754c"
+  integrity sha1-gpEH2vtKn4tSoYCe0C4JHq3mdUw=
+
 html-comment-regex@^1.1.0:
   version "1.1.2"
   resolved "https://registry.yarnpkg.com/html-comment-regex/-/html-comment-regex-1.1.2.tgz#97d4688aeb5c81886a364faa0cad1dda14d433a7"
@@ -9100,6 +9122,16 @@ lodash.clonedeep@^4.5.0:
   resolved "https://registry.yarnpkg.com/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz#e23f3f9c4f8fbdde872529c1071857a086e5ccef"
   integrity sha1-4j8/nE+Pvd6HJSnBBxhXoIblzO8=
 
+lodash.curry@^4.0.1:
+  version "4.1.1"
+  resolved "https://registry.yarnpkg.com/lodash.curry/-/lodash.curry-4.1.1.tgz#248e36072ede906501d75966200a86dab8b23170"
+  integrity sha1-JI42By7ekGUB11lmIAqG2riyMXA=
+
+lodash.flow@^3.3.0:
+  version "3.5.0"
+  resolved "https://registry.yarnpkg.com/lodash.flow/-/lodash.flow-3.5.0.tgz#87bf40292b8cf83e4e8ce1a3ae4209e20071675a"
+  integrity sha1-h79AKSuM+D5OjOGjrkIJ4gBxZ1o=
+
 lodash.get@^4.4.2:
   version "4.4.2"
   resolved "https://registry.yarnpkg.com/lodash.get/-/lodash.get-4.4.2.tgz#2d177f652fa31e939b4438d5341499dfa3825e99"
@@ -10058,6 +10090,13 @@ multiyargs@1.0.x:
     debug "2.6.x"
     promise-do-whilst "1.0.x"
 
+mumath@^3.3.4:
+  version "3.3.4"
+  resolved "https://registry.yarnpkg.com/mumath/-/mumath-3.3.4.tgz#48d4a0f0fd8cad4e7b32096ee89b161a63d30bbf"
+  integrity sha1-SNSg8P2MrU57Mglu6JsWGmPTC78=
+  dependencies:
+    almost-equal "^1.1.0"
+
 mute-stream@0.0.7:
   version "0.0.7"
   resolved "https://registry.yarnpkg.com/mute-stream/-/mute-stream-0.0.7.tgz#3075ce93bc21b8fab43e1bc4da7e8115ed1e7bab"
@@ -11815,6 +11854,11 @@ punycode@^1.2.4, punycode@^1.4.1:
   resolved "https://registry.yarnpkg.com/punycode/-/punycode-1.4.1.tgz#c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
   integrity sha1-wNWmOycYgArY4esPpSachN1BhF4=
 
+pure-color@^1.2.0:
+  version "1.3.0"
+  resolved "https://registry.yarnpkg.com/pure-color/-/pure-color-1.3.0.tgz#1fe064fb0ac851f0de61320a8bf796836422f33e"
+  integrity sha1-H+Bk+wrIUfDeYTIKi/eWg2Qi8z4=
+
 q@^1.1.2, q@^1.5.1:
   version "1.5.1"
   resolved "https://registry.yarnpkg.com/q/-/q-1.5.1.tgz#7e32f75b41381291d04611f1bf14109ac00651d7"
@@ -11955,6 +11999,16 @@ react-art@^16.8.6:
     prop-types "^15.6.2"
     scheduler "^0.13.6"
 
+"react-base16-styling@github:dean177/react-base16-styling#fbc6593":
+  version "0.4.6"
+  resolved "https://codeload.github.com/dean177/react-base16-styling/tar.gz/fbc6593cc58c5f4662c40b85964c7f9fbcb3984d"
+  dependencies:
+    base16 Dean177/base16-js
+    color-space "^1.14.3"
+    lodash.curry "^4.0.1"
+    lodash.flow "^3.3.0"
+    pure-color "^1.2.0"
+
 react-clone-referenced-element@^1.0.1:
   version "1.1.0"
   resolved "https://registry.yarnpkg.com/react-clone-referenced-element/-/react-clone-referenced-element-1.1.0.tgz#9cdda7f2aeb54fea791f3ab8c6ab96c7a77d0158"
@@ -12054,6 +12108,14 @@ react-native-gesture-handler@1.2.1:
     invariant "^2.2.2"
     prop-types "^15.5.10"
 
+react-native-json-tree@^1.2.0:
+  version "1.2.0"
+  resolved "https://registry.yarnpkg.com/react-native-json-tree/-/react-native-json-tree-1.2.0.tgz#4600310bff1934026edbe77fc621230866fe7182"
+  integrity sha1-RgAxC/8ZNAJu2+d/xiEjCGb+cYI=
+  dependencies:
+    prop-types "^15.6.0"
+    react-base16-styling "github:dean177/react-base16-styling#fbc6593"
+
 react-native-maps@0.24.2:
   version "0.24.2"
   resolved "https://registry.yarnpkg.com/react-native-maps/-/react-native-maps-0.24.2.tgz#19974f967cb0c2e24dab74ca879118e0932571b2"
@@ -15159,9 +15221,9 @@ xtend@^4.0.0, xtend@~4.0.1:
   integrity sha1-pcbVMr5lbiPbgg77lDofBJmNY68=
 
 y18n@^3.2.1:
-  version "3.2.2"
+  version "3.2.1"
-  resolved "https://registry.yarnpkg.com/y18n/-/y18n-3.2.2.tgz#85c901bd6470ce71fc4bb723ad209b70f7f28696"
+  resolved "https://registry.yarnpkg.com/y18n/-/y18n-3.2.1.tgz#6d15fba884c08679c0d77e88e7759e811e07fa41"
-  integrity sha512-uGZHXkHnhF0XeeAPgnKfPv1bgKAYyVvmNL1xlKsPYZPaIHxGti2hHqvOCQv71XMsLxu1QjergkqogUnms5D3YQ==
+  integrity sha1-bRX7qITAhnnA136I53WegR4H+kE=
 
 "y18n@^3.2.1 || ^4.0.0", y18n@^4.0.0:
   version "4.0.0"