Brave-browser: npm vulnerability: `minimist`

[bsclifton]

Description

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ Moderate      │ Prototype Pollution                                          │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package       │ minimist                                                     │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ jest [dev]                                                   │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path          │ jest > @jest/core > jest-runner > jest-jasmine2 >            │
│               │ jest-runtime > @jest/transform > jest-haste-map > sane >     │
│               │ @cnakazawa/watch > minimist                                  │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info     │ https://npmjs.com/advisories/1179                            │
└───────────────┴──────────────────────────────────────────────────────────────┘

Steps to Reproduce

1. Have full setup of Brave
2. run npm run audit_deps from root
3. have a bad time

[bsclifton]

*Angry fist shaking at NPM vulnerability*

[bsclifton]

Notes about attempted fix here:
https://github.com/brave/security/issues/101#issuecomment-600994528

Current status: not solved. Will need to revisit once deps are updated and it's fixable by npm audit fix (unless there is a better solution)

[bsclifton]

Almost there! Fixes in progress

[kjozwiak]

Awesome sir! Sent you a BAT ;)

[bsclifton]

Re-opening as this is still a problem actually

[bsclifton]

Should be completely resolved with https://github.com/brave/brave-core/pull/5013 and https://github.com/brave/brave-browser/pull/8788