turborepo
bbcf472c - fix: Replace axios with native fetch in turbo-codemod (#11600)

Commit
33 days ago
fix: Replace axios with native fetch in turbo-codemod (#11600) ## Summary - Replace axios with native `fetch()` in `@turbo/codemod` package - Remove axios dependency and all its transitive dependencies (form-data, follow-redirects) - Fixes TURBO-5143: axios SSRF and Credential Leakage vulnerability (High severity) ## Changes The `getLatestVersion.ts` file was the only place using axios for a simple GET request to the npm registry. Node.js 18+ has native fetch support, so this removes the need for the axios dependency entirely. ## Testing - The modified code preserves the same error handling behavior - Tests pass (pre-existing failures unrelated to this change are due to workspace package build ordering)
Author
Parents
Loading