Merge pull request #46 from RobotlegsJS/migrate-to-terser-webpack-plugin

Migrate to terser-webpack-plugin

CHANGELOG.md

@@ -41,6 +41,10 @@ Types of changes:
 - in case of vulnerabilities.
 -->
 
+#### Security
+
+- Migrate to [terser-webpack-plugin](https://github.com/webpack-contrib/terser-webpack-plugin) to solve security vulnerability (see #46).
+
 ## RobotlegsJS Phaser-CE SignalCommandMap 1.0.0
 
 ### [v1.0.1](https://github.com/RobotlegsJS/RobotlegsJS-Phaser-CE-SignalCommandMap/releases/tag/1.0.1) - 2019-10-31

package.json

@@ -61,12 +61,12 @@
     "reflect-metadata": "^0.1.13"
   },
   "devDependencies": {
-    "@types/bluebird": "^3.5.28",
-    "@types/chai": "^4.2.4",
-    "@types/mocha": "^5.2.7",
-    "@types/sinon": "^7.5.0",
-    "@types/webpack-env": "^1.14.1",
-    "bluebird": "^3.7.1",
+    "@types/bluebird": "^3.5.29",
+    "@types/chai": "^4.2.9",
+    "@types/mocha": "^7.0.1",
+    "@types/sinon": "^7.5.1",
+    "@types/webpack-env": "^1.15.1",
+    "bluebird": "^3.7.2",
     "browserify-versionify": "^1.0.6",
     "chai": "^4.2.0",
     "es6-map": "^0.1.5",
@@ -76,31 +76,31 @@
     "istanbul-instrumenter-loader": "^3.0.1",
     "karma": "^4.4.1",
     "karma-chrome-launcher": "^3.1.0",
-    "karma-coverage-istanbul-reporter": "^2.1.0",
+    "karma-coverage-istanbul-reporter": "^2.1.1",
     "karma-es6-shim": "^1.0.0",
     "karma-mocha": "^1.3.0",
     "karma-mocha-reporter": "^2.2.5",
     "karma-sinon-chai": "^2.0.2",
     "karma-sourcemap-loader": "^0.3.7",
     "karma-sourcemap-writer": "^0.1.2",
     "karma-webpack": "^4.0.2",
-    "mocha": "^6.2.2",
+    "mocha": "^7.0.1",
     "phaser-ce": "^2.13.3",
-    "prettier": "^1.18.2",
+    "prettier": "^1.19.1",
     "publish-please": "^5.5.1",
-    "puppeteer": "^2.0.0",
+    "puppeteer": "^2.1.1",
     "reflect-metadata": "^0.1.13",
-    "rimraf": "^3.0.0",
-    "sinon": "^7.5.0",
-    "sinon-chai": "^3.3.0",
+    "rimraf": "^3.0.2",
+    "sinon": "^9.0.0",
+    "sinon-chai": "^3.4.0",
+    "terser-webpack-plugin": "^2.3.5",
     "ts-loader": "^6.2.1",
-    "ts-node": "^8.4.1",
-    "tslint": "^5.20.0",
+    "ts-node": "^8.6.2",
+    "tslint": "^6.0.0",
     "tslint-config-prettier": "^1.18.0",
-    "typescript": "^3.6.4",
-    "uglifyjs-webpack-plugin": "^2.2.0",
-    "webpack": "^4.41.2",
-    "webpack-cli": "^3.3.10",
-    "webpack-dev-server": "^3.9.0"
+    "typescript": "^3.7.5",
+    "webpack": "^4.41.6",
+    "webpack-cli": "^3.3.11",
+    "webpack-dev-server": "^3.10.3"
   }
 }

webpack.config.js

@@ -1,6 +1,6 @@
 const webpack = require("webpack");
 const path = require("path");
-const UglifyJsPlugin = require("uglifyjs-webpack-plugin");
+const TerserPlugin = require("terser-webpack-plugin");
 
 module.exports = env => {
   if (!env) env = { production: false, karma: false };
@@ -55,10 +55,10 @@ module.exports = env => {
           concatenateModules: true,
           minimize: true,
           minimizer: [
-            new UglifyJsPlugin({
+            new TerserPlugin({
               cache: true,
               parallel: 4,
-              uglifyOptions: {
+              terserOptions: {
                 output: {
                   comments: false
                 }