Socket alert for dependency safer-buffer

[bj00rn]

Socket warn about possible supply chain attack in safer-buffer

https://socket.dev/npm/package/safer-buffer/overview/2.1.2

[bjohansebas]

I’ve been reviewing it and I don’t see any security issue. This is something Socket will need to fix, because there is no actual security problem. The file being reported is part of the tests, and those tests contain some Base64 content, which makes Socket think there is obfuscated code when in reality they are just text strings.

[wereHamster]

For anyone coming here with the same question: seems like safer-buffer dependency has been dropped (#265), change will be in the v1.0.0 release (#381).

[bjohansebas]

Remember that the alpha version is not ready for production