fix: package.json & .snyk to reduce vulnerabilities (#147)

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-BRACES-6838727
- https://snyk.io/vuln/SNYK-JS-SEMVER-3247795
- https://snyk.io/vuln/SNYK-JS-TAR-6476909
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
- https://snyk.io/vuln/SNYK-JS-UNSETVALUE-2400660
- https://snyk.io/vuln/SNYK-JS-MICROMATCH-6838728
- https://snyk.io/vuln/SNYK-JS-OCTOKITPLUGINPAGINATEREST-8730855
- https://snyk.io/vuln/SNYK-JS-OCTOKITREQUEST-8730853
- https://snyk.io/vuln/SNYK-JS-OCTOKITREQUESTERROR-8730854


The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/npm:hoek:20180212

Co-authored-by: snyk-io[bot] <141718529+snyk-io[bot]@users.noreply.github.com>

Author: snyk-io[bot]

.snyk

@@ -0,0 +1,28 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.25.1
+ignore: {}
+# patches apply the minimum changes required to fix a vulnerability
+patch:
+  'npm:hoek:20180212':
+    - npm-install-version > npm > request > hawk > hoek:
+        patched: '2025-07-12T20:06:03.520Z'
+        id: 'npm:hoek:20180212'
+        path: npm-install-version > npm > request > hawk > hoek
+    - npm-install-version > npm > request > hawk > boom > hoek:
+        patched: '2025-07-12T20:06:03.520Z'
+        id: 'npm:hoek:20180212'
+        path: npm-install-version > npm > request > hawk > boom > hoek
+    - npm-install-version > npm > request > hawk > sntp > hoek:
+        patched: '2025-07-12T20:06:03.520Z'
+        id: 'npm:hoek:20180212'
+        path: npm-install-version > npm > request > hawk > sntp > hoek
+    - npm-install-version > npm > request > hawk > cryptiles > boom > hoek:
+        patched: '2025-07-12T20:06:03.520Z'
+        id: 'npm:hoek:20180212'
+        path: npm-install-version > npm > request > hawk > cryptiles > boom > hoek
+    - npm-install-version > npm > node-gyp > request > hawk > cryptiles > boom > hoek:
+        patched: '2025-07-12T20:06:03.520Z'
+        id: 'npm:hoek:20180212'
+        path: >-
+          npm-install-version > npm > node-gyp > request > hawk > cryptiles >
+          boom > hoek

package.json

@@ -85,7 +85,9 @@
     "watch": "watchify apps/remix-ide/src/index.js -dv -p browserify-reload -o apps/remix-ide/build/app.js --exclude solc",
     "reinstall": "rm ./node-modules/ -rf && rm yarn.lock && rm ./build/ -rf && yarn install & yarn run build",
     "ganache": "npx ganache",
-    "build-contracts": "find ./node_modules/@openzeppelin/contracts | grep -i '.sol' > libs/remix-ui/editor/src/lib/providers/completion/contracts/contracts.txt && find ./node_modules/@uniswap/v3-core/contracts | grep -i '.sol' >> libs/remix-ui/editor/src/lib/providers/completion/contracts/contracts.txt"
+    "build-contracts": "find ./node_modules/@openzeppelin/contracts | grep -i '.sol' > libs/remix-ui/editor/src/lib/providers/completion/contracts/contracts.txt && find ./node_modules/@uniswap/v3-core/contracts | grep -i '.sol' >> libs/remix-ui/editor/src/lib/providers/completion/contracts/contracts.txt",
+    "prepublish": "npm run snyk-protect",
+    "snyk-protect": "snyk-protect"
   },
   "dependencies": {
     "@apollo/client": "^3.9.5",
@@ -137,7 +139,7 @@
     "brace": "^0.8.0",
     "cbor": "^10.0.3",
     "change-case": "^4.1.1",
-    "chokidar": "^2.1.8",
+    "chokidar": "^3.0.0",
     "circom_wasm": "https://github.com/remix-project-org/circom_wasm.git",
     "color-support": "^1.1.3",
     "commander": "^9.4.1",
@@ -229,7 +231,8 @@
     "winston": "^3.3.3",
     "ws": "^8.18.0",
     "xterm": "^5.2.1",
-    "xterm-addon-search": "^0.12.0"
+    "xterm-addon-search": "^0.12.0",
+    "@snyk/protect": "latest"
   },
   "devDependencies": {
     "@babel/cli": "^7.19.3",
@@ -245,7 +248,7 @@
     "@babel/preset-stage-0": "^7.0.0",
     "@babel/preset-typescript": "^7.18.6",
     "@babel/register": "^7.4.4",
-    "@electron-forge/cli": "^6.1.1",
+    "@electron-forge/cli": "^7.0.0",
     "@fortawesome/fontawesome-free": "^5.8.1",
     "@graphql-codegen/cli": "^5.0.2",
     "@graphql-codegen/client-preset": "^4.2.4",
@@ -256,10 +259,10 @@
     "@nrwl/js": "15.7.1",
     "@nrwl/linter": "15.7.1",
     "@nrwl/node": "16.0.0",
-    "@nrwl/react": "16.0.0",
-    "@nrwl/tao": "15.9.7",
-    "@nrwl/web": "15.9.0",
-    "@nrwl/webpack": "16.0.0",
+    "@nrwl/react": "17.0.4",
+    "@nrwl/tao": "17.0.4",
+    "@nrwl/web": "16.0.0",
+    "@nrwl/webpack": "19.6.0",
     "@nrwl/workspace": "16.0.0",
     "@octokit/types": "^12.4.0",
     "@openzeppelin/contracts-upgradeable": "^5.0.0",
@@ -352,9 +355,9 @@
     "is-electron": "^2.2.0",
     "javascript-serialize": "^1.6.1",
     "js-base64": "^2.1.9",
-    "js-beautify": "1.14.1",
-    "lerna": "^6.5.0",
-    "lint-staged": "^13.2.3",
+    "js-beautify": "1.14.10",
+    "lerna": "^8.2.1",
+    "lint-staged": "^15.2.5",
     "minixhr": "^4.0.0",
     "mkdirp": "^0.5.5",
     "mocha": "^11.0.1",
@@ -366,7 +369,7 @@
     "npm-link-local": "^1.1.0",
     "npm-merge-driver": "^2.3.5",
     "npm-run-all": "^4.0.2",
-    "nx": "15.9.7",
+    "nx": "17.0.4",
     "nyc": "^15.0.0",
     "onchange": "^6.0.0",
     "onnxruntime-web": "^1.18.0",
@@ -408,5 +411,6 @@
     "@ethereumjs/util": "^10.0.0",
     "@ethereumjs/vm": "^10.0.0",
     "@ethereumjs/binarytree": "^10.0.0"
-  }
+  },
+  "snyk": true
 }