@leverege/build-tools 1.8.4 → 1.10.0

package/lib/server/circleate

@@ -119,7 +119,9 @@ jobs:
 
       - run: 
           name: Check for vulnerabilities
-          command: npm run vuln
+          command: |
+            sudo npm install -g npm@latest
+            npm audit --production
 
       - run:
           name: Check for LICENSE and README files
@@ -301,7 +303,9 @@ jobs:
 
       - run: 
           name: Check for vulnerabilities
-          command: npm run vuln
+          command: |
+            sudo npm install -g npm@latest
+            npm audit --production
 
       - run:
           name: Check for LICENSE and README files

package/lib/server/helmdn

@@ -77,6 +77,11 @@ function doNuking() {
       doNuking "${PLATFORM[@]}" && exit $?
     fi
 
+    if [ "$SERVICE" == "system" ];
+    then
+      doNuking "${SYSTEM[@]}" && exit $?
+    fi
+
     if [ "$SERVICE" == "ingress" ];
     then
       clearlyWarn

package/lib/server/helmify

@@ -46,7 +46,8 @@ spec:
   selector:
     app: $chartname
   ports:
-  - protocol: TCP
+  - name: $chartname-input
+    protocol: TCP
     port: {{ .Values.$chartname_go.SERVER_PORT }}
     targetPort: api
 SVC_YAML
@@ -98,7 +99,7 @@ CHARTYAML
 cat<<VALUESYAML > values.yaml
 # List your env variables here
 $chartname_go:
-  VERSION: v$PACKAGE_VERSION
+  VERSION: vX.Y.Z
   SERVER_PORT: 8080
   IMAGE: gcr.io/leverege-docker-images/$chartname
 
@@ -108,7 +109,7 @@ default:
   MAX_CHILD_PROCESSES: "1"
 
   MODEL_FIREBASE_SERVICE_ACCOUNT: /var/config/keys/model-data
-  MODEL_FIREBASE_DATABASE_URL: <firebase URL>
+  MODEL_FIREBASE_DATABASE_URL: https://OVH:<PROJECT_NAME>.firebaseio.com
   MODEL_FIREBASE_CONFIG: /var/config/keys/model-data-config
 
   SECRET_KEY: key.json
@@ -191,34 +192,39 @@ spec:
       - name: pubsub-key
         secret:
           secretName: pubsub
-      # UNCOMMENT TO USE PRE-EMPTIBLES
-      # tolerations:
-      # - key: "preemptible"
-      #   operator: "Equal"
-      #   value: "true"
-      #   effect: "NoSchedule"
-      # affinity:
-      #   podAntiAffinity:
-      #     preferredDuringSchedulingIgnoredDuringExecution:
-      #     - weight: 100
-      #       podAffinityTerm:   
-      #         labelSelector:
-      #           matchExpressions:
-      #           - key: app
-      #             operator: In
-      #             values:
-      #             - api-server
-      #         topologyKey: kubernetes.io/hostname
-      #   nodeAffinity:
-      #     preferredDuringSchedulingIgnoredDuringExecution:
-      #     - preference:
-      #         matchExpressions:
-      #         - key: cloud.google.com/gke-preemptible
-      #           operator: Exists
-      #       weight: 50
+{{- if (.Values.$chartname_go.PREEMPTIBLE) and eq .Values.$chartname_go.PREEMPTIBLE "true" }}
+      tolerations:
+      - key: "preemptible"
+        operator: "Equal"
+        value: "true"
+        effect: "NoSchedule"
+      affinity:
+        podAntiAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+          - weight: 100
+            podAffinityTerm:
+              labelSelector:
+                matchExpressions:
+                - key: app
+                  operator: In
+                  values:
+                  - api-server
+              topologyKey: kubernetes.io/hostname
+        nodeAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+          - preference:
+              matchExpressions:
+              - key: cloud.google.com/gke-preemptible
+                operator: Exists
+            weight: 50
+{{- end }}
       containers:
       - name: $chartname
         image: gcr.io/leverege-docker-images/$chartname:{{ .Values.$chartname_go.VERSION }}
+        imagePullPolicy: Always
+        securityContext:
+          runAsUser: 1000
+          allowPrivilegeEscalation: false
         resources:
           requests:
             cpu: "10m"

package/lib/server/helmup

@@ -3,9 +3,12 @@
 # This script is used to ease the pain of transition testing to chart museum
 # prior to setting up keel for new clusters / installs.
 #
+# Removing db-curator from the list of platform components for now. It needs
+# to be turned into a cronjob to avoid having it run as soon as it gets
+# deployed.
+#
 PLATFORM=(
   api-server
-  db-curator
   emailer
   imagine
   message-processor
@@ -19,18 +22,112 @@ PLATFORM=(
 
 SYSTEM=(
   descheduler
+  disks
   elastic
+  keel
   monitoring
+  polaris
   redis
 )
 
+# Simple ANSI color coded string generator.
+function color() {
+  local color=
+  case "$1" in
+    'g') color="92m" ;; # green
+    'c') color="96m" ;; # lt blue
+    'y') color="93m" ;; # yellow
+    'r') color="91m" ;; # red
+    'toast') color="1;3;7;91;103;5m" ;;
+  esac
+  printf "\e[$color$2\e[0m"
+}
+RED_ERROR=`color r '***ERROR:'`
+YELO_WARN="`color y '***WARNING:'`"
+
+function setOrUnset() {
+  local setting=`color toast "NEEDS TO BE SET"`
+  [ ! -z "$1" ] && setting=`color g $1`
+  echo "$setting"
+}
+
+# Installing keel is a little more involved since we need to feed it svc acct
+# keys and a slack bot token.
+function keelNeeds() {
+  cat<<KEELNEEDS
+
+ $RED_ERROR  $1
+
+ In order to get its job done keel needs the service account JSON file for the
+ project containing the docker images that it is reponsible for. It also needs
+ a token for the slack bot in order to interact with slack.
+
+   `color g LEV_KEYS`
+           points to the top level directory containing the keys and secrets
+           to the k8s clusters
+   `color g \$LEV_KEYS/docker-image-svc-acct`
+           directory containing the service account JSON files
+   `color g "\$LEV_KEYS/<branch-name>/slack-bot-token"`
+           location of the slack bot token text file
+
+ Current settings:
+   LEV_KEYS   => `setOrUnset $LEV_KEYS`
+
+ Missing variables should be set using the standard bash syntax:
+   `color y export\ VARNAME=\"\<YOUR_SETTING\>\"`
+
+KEELNEEDS
+  exit 1
+}
+
+function installKeel() {
+  [ ! -d "$LEV_KEYS" ] &&
+    keelNeeds "`color c \\$LEV_KEYS` must point to the keys directory for the clusters."
+
+  # TODO make the docker image project configurable and not just lev
+  SVC_ACCT="$LEV_KEYS/docker-image-svc-acct/leverege-docker-images.json"
+  [ ! -f "$SVC_ACCT" ] &&
+    keelNeeds "Missing service account info => `color c $SVC_ACCT`"
+
+  BRANCH=`git rev-parse --abbrev-ref HEAD`
+  SLACK_TOKEN="$LEV_KEYS/$BRANCH/slack-bot-token"
+  [ ! -f "$SLACK_TOKEN" ] &&
+    keelNeeds "Missing slack bot token => `color c $SLACK_TOKEN`"
+
+  helm repo add keel https://charts.keel.sh; helm repo update
+  helm upgrade --install keel keel/keel \
+    --set gcr.enabled="true" \
+    --set gcr.projectId="leverege-docker-images" \
+    --set gcr.pubSub.enabled="true" \
+    --set slack.enabled="true" \
+    --set slack.channel="devs-cicd" \
+    --set slack.approvalsChannel="cd-approvals" \
+    --set slack.botName="$BRANCH" \
+    --set slack.token="$(cat $SLACK_TOKEN)" \
+    --set googleApplicationCredentials="$(cat $SVC_ACCT | base64 -w 0)"
+}
+
+# ---------- helmup MAIN ----------
+command -v chartmuseum &> /dev/null
+if [ $? -ne 0 ];
+then
+  cat<<NOMUSEUM
+
+$RED_ERROR Missing chartmuseum. Head over to the wiki site and follow the
+           instructions in the section entitled Installing ChartMuseum down
+           in the How-to articles -> Helm Charts via ChartMuseum.
+
+NOMUSEUM
+  exit 1
+fi
+
 GITTOP=`git rev-parse --show-toplevel`
 cd $GITTOP
 
 npm run ahoy
 [ $? -ne 0 ] && printf "\n\n***Aborting helmup...\n\n" && exit 1
 
-helm repo update && helm search chartmuseum
+helm repo update &> /dev/null && helm search chartmuseum
 
 function doInstall() {
 
@@ -52,32 +149,78 @@ function doInstall() {
         helm upgrade --install descheduler akomljen-charts/descheduler --set schedule="*/13 * * * *"
         ;;
 
+      "disks")
+        helm upgrade --install disks ./disks
+        ;;
+
       "elastic"|"elasticsearch")
         helm repo add elastic https://helm.elastic.co
         helm upgrade --install elasticsearch elastic/elasticsearch --version 7.2.0
         ;;
 
+      "keel")
+        installKeel # because it's a little more involved
+        ;;
+
       "monitoring")
         helm dep up ./monitoring && helm upgrade --install monitoring ./monitoring
         ;;
 
+      "polaris")
+        helm repo add reactiveops-stable https://charts.reactiveops.com/stable
+        helm upgrade --install polaris reactiveops-stable/polaris --namespace polaris
+        printf "\n***Proxy 8080 with this=> kubectl port-forward --namespace polaris svc/polaris-dashboard 8080:80\n\n"
+        ;;
+
       "redis")
         # https://github.com/helm/charts/tree/master/stable/redis
         helm upgrade --install redis stable/redis \
           --set usePassword=false,cluster.slaveCount=3,networkPolicy.enabled=true,metrics.enabled=true
         ;;
 
+      "timescale-db")
+        helm dep up ./timescale-db && helm upgrade --install timescale-db ./timescale-db
+        ;;
+
       "ingress")
         helm upgrade --install ingress ./ingress
         ;;
 
       *)
-        [ ! -d $SERVICE ] && continue
-        [ ! -f $SERVICE/values-local.yaml ] && continue
+        if [ ! -d $SERVICE ] || [ ! -f $SERVICE/values-local.yaml ];
+        then
+          printf "\n$YELO_WARN Skipping unknown service => $SERVICE\n\n"
+          continue
+        fi
 
         printf "\n--------------------------------------------------------------\nCharting $SERVICE\n"
-        helm upgrade --install $SERVICE chartmuseum/$SERVICE -f $SERVICE/values.yaml
-        [ $? -ne 0 ] && printf "The $SERVICE chart failed - you have issues.\n"
+        # By default the museum chart name will be the same as the service, but
+        # we have the flexibility to override the naming when the charts are
+        # reference by the downstream repositories via the .helmup-charmuseum file.
+        OVERRIDE="$SERVICE/.helmup-chartmuseum"
+        MUSEUM=$SERVICE
+        if [ -f $OVERRIDE ];
+        then
+          MUSEUM=$(<${OVERRIDE})
+          printf "\n$YELO_WARN Local chartmuseum name override from ${SERVICE} to ${MUSEUM}\n"
+        fi
+        helm upgrade --install $SERVICE chartmuseum/$MUSEUM -f $SERVICE/values.yaml 2> /dev/null
+        if [ $? -ne 0 ];
+        then
+          cat<<NOTRUNNING
+
+$RED_ERROR The $SERVICE chart failed to upgrade or install. Is chartmuseum up 
+           and running on the proper port? Try firing it up with:
+
+chartmuseum \\
+  --port="8080" \\
+  --storage-google-bucket="leverege-helm-charts" \\
+  --storage-google-prefix="" \\
+  --storage="google" &> /dev/null &
+
+NOTRUNNING
+          exit 1
+        fi
         ;;
     esac
   done

package/lib/server/overwhelm

@@ -11,16 +11,19 @@ const ask = require( 'readline-sync' )
 const YAML = require( 'js-yaml' )
 
 const optionsDefinitions = [
+  { name : 'context',  alias : 'x', type : String, default : '' },
   { name : 'section',  alias : 's', type : String, default : 'default' },
   { name : 'key',      alias : 'k', type : String },
   { name : 'export',   alias : 'e', type : Boolean, default : false },
   { name : 'continue', alias : 'c', type : Boolean, default : false },
+  { name : 'checkctx', alias : 't', type : Boolean, default : false },
   { name : 'verbose',  alias : 'v', type : Boolean, default : false },
 ]
 const args = cliArgs( optionsDefinitions )
 
 // The kubernetes context is equal to the git branch name.
-const context = require( 'git-branch' ).sync()
+const gitBranch = require( 'git-branch' ).sync()
+const context   = args.context || gitBranch
 
 if ( context == 'master' ) {
   console.log( '***ERROR: master context is forbidden; change to a different branch\n\n' )
@@ -36,15 +39,17 @@ if ( context == 'master' ) {
 //   my-project:
 //     GCE_MACHINE : "n1-highcpu-8"
 //
-// where the my-project specific setting may override the default if it
-// needs a beefier deployment. Any setting can be defaulted in this
 // fashion, but it is advised not to set a default region with this
 // approach in order to keep us cognizant of exactly where a cluster is
 // being formed.
 //
 const yaml = YAML.safeLoad( fs.readFileSync( 'overwhelm.yaml', 'utf-8' ) )
 const over = yaml.default
-const cfgs = yaml[context]
+let   cfgs = yaml[context]
+let   wtfs = cfgs
+
+// If we just need to check context return 0 if cfgs exists, else error.
+if ( args.checkctx ) { process.exit( !cfgs ) }
 
 if ( !cfgs ) {
   console.log( `***ERROR: Unknown context => [${context}]\n` )
@@ -56,6 +61,17 @@ if ( !cfgs ) {
   process.exit( 1 )
 }
 
+// Check to see if we are deriving from another configuration.
+if ( cfgs['PROJECT_BASE'] ) {
+  const baseName = cfgs['PROJECT_BASE']
+  const tempCfgs = cfgs
+  cfgs = yaml[baseName]
+  Object.keys( tempCfgs ).forEach( ( key ) => { cfgs[key] = tempCfgs[key] } )
+  console.log( "PROJECT_BASE still under evaluation" )
+  console.log( "\n  cfgs=", cfgs )
+  process.exit( 1 ) //XXX HERE
+}
+
 Object.keys( cfgs ).forEach( ( key ) => { over[key] = cfgs[key] || over[key] } )
 
 // Expand any variables that reference other variable settings. A perfect
@@ -232,7 +248,7 @@ ahoy.forEach( ( dir ) => {
 
 // Set the GCP context for safety!
   const clusterName = over['CLUSTER_NAME']
-  const projectName = over['PROJECT_NAME']
+  const projectId   = over['PROJECT_ID']
   const zone = over['GCE_REGION'] + ( over['GCE_ZONE'] ? `-${over['GCE_ZONE']}` : '' )
 
   if ( !clusterName ) {
@@ -248,7 +264,7 @@ ahoy.forEach( ( dir ) => {
       ${chalk.bold.green( `CLUSTER_NAME   : "\${PROJECT_NAME}"` )}
 
     However, if the CLUSTER_NAME is not the same as the PROJECT_NAME then go
-    ahead and add the CLUSTER_NAME setting to the ${chalk.bold.green(projectName)} section of the
+    ahead and add the CLUSTER_NAME setting to the ${chalk.bold.green(projectId)} section of the
     overwhelm.yaml file.
 
     ` ) )
@@ -262,9 +278,9 @@ ahoy.forEach( ( dir ) => {
   } catch (err) { }
 
   const currentCtx = kubeout.toString().trim()
-  const desiredCtx = `gke_${projectName}_${zone}_${clusterName}`
+  const desiredCtx = `gke_${projectId}_${zone}_${clusterName}`
   const matchedCtx = ( currentCtx === desiredCtx )
-  const cmd = `gcloud container clusters get-credentials ${clusterName} --zone ${zone} --project ${projectName}`
+  const cmd = `gcloud container clusters get-credentials ${clusterName} --zone ${zone} --project ${projectId}`
   
   if ( matchedCtx ) {
     console.log( `
@@ -278,7 +294,7 @@ ahoy.forEach( ( dir ) => {
 
   You are about to change your GCP context to:
       CLUSTER_NAME => ${chalk.bold.green(clusterName)}
-      PROJECT_NAME => ${chalk.bold.green(projectName)}
+      PROJECT_ID   => ${chalk.bold.green(projectId)}
       GCE_REGION   => ${chalk.bold.green(zone)}
 
   ` )

package/lib/server/pkglint/index.js

@@ -16,4 +16,7 @@ function arrayContainsArray(superset, subset) {
   });
 }
 
-arrayContainsArray(mdFiles, filesToCheck) ? console.log('README and LICENSE files exist') : process.exit(1);
+if (!arrayContainsArray(mdFiles, filesToCheck)) {
+  console.log('Cannot find README.md or LICENSE.md');
+  process.exit(1);
+}

package/lib/web/dnsify/index.js

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
 "use strict";
 
+require("core-js/modules/es7.object.get-own-property-descriptors");
+
 require("core-js/modules/es6.symbol");
 
 require("core-js/modules/web.dom.iterable");
@@ -15,7 +17,9 @@ require("core-js/modules/es6.promise");
 
 require("core-js/modules/es6.object.to-string");
 
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; var ownKeys = Object.keys(source); if (typeof Object.getOwnPropertySymbols === 'function') { ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function (sym) { return Object.getOwnPropertyDescriptor(source, sym).enumerable; })); } ownKeys.forEach(function (key) { _defineProperty(target, key, source[key]); }); } return target; }
+function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); keys.push.apply(keys, symbols); } return keys; }
+
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(source, true).forEach(function (key) { _defineProperty(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)); } else { ownKeys(source).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } } return target; }
 
 function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
 

package/lib/web/packleate/Packleator.js

@@ -1,5 +1,7 @@
 "use strict";
 
+require("core-js/modules/es7.object.get-own-property-descriptors");
+
 require("core-js/modules/es6.symbol");
 
 require("core-js/modules/es6.regexp.split");
@@ -32,7 +34,9 @@ function asyncGeneratorStep(gen, resolve, reject, _next, _throw, key, arg) { try
 
 function _asyncToGenerator(fn) { return function () { var self = this, args = arguments; return new Promise(function (resolve, reject) { var gen = fn.apply(self, args); function _next(value) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "next", value); } function _throw(err) { asyncGeneratorStep(gen, resolve, reject, _next, _throw, "throw", err); } _next(undefined); }); }; }
 
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; var ownKeys = Object.keys(source); if (typeof Object.getOwnPropertySymbols === 'function') { ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function (sym) { return Object.getOwnPropertyDescriptor(source, sym).enumerable; })); } ownKeys.forEach(function (key) { _defineProperty(target, key, source[key]); }); } return target; }
+function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); keys.push.apply(keys, symbols); } return keys; }
+
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(source, true).forEach(function (key) { _defineProperty(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)); } else { ownKeys(source).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } } return target; }
 
 function _classCallCheck(instance, Constructor) { if (!(instance instanceof Constructor)) { throw new TypeError("Cannot call a class as a function"); } }
 

package/lib/web/packleate/index.js

@@ -1,6 +1,8 @@
 #!/usr/bin/env node
 "use strict";
 
+require("core-js/modules/es7.object.get-own-property-descriptors");
+
 require("core-js/modules/es6.symbol");
 
 require("core-js/modules/web.dom.iterable");
@@ -15,7 +17,9 @@ require("core-js/modules/es6.promise");
 
 require("core-js/modules/es6.object.to-string");
 
-function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; var ownKeys = Object.keys(source); if (typeof Object.getOwnPropertySymbols === 'function') { ownKeys = ownKeys.concat(Object.getOwnPropertySymbols(source).filter(function (sym) { return Object.getOwnPropertyDescriptor(source, sym).enumerable; })); } ownKeys.forEach(function (key) { _defineProperty(target, key, source[key]); }); } return target; }
+function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); keys.push.apply(keys, symbols); } return keys; }
+
+function _objectSpread(target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i] != null ? arguments[i] : {}; if (i % 2) { ownKeys(source, true).forEach(function (key) { _defineProperty(target, key, source[key]); }); } else if (Object.getOwnPropertyDescriptors) { Object.defineProperties(target, Object.getOwnPropertyDescriptors(source)); } else { ownKeys(source).forEach(function (key) { Object.defineProperty(target, key, Object.getOwnPropertyDescriptor(source, key)); }); } } return target; }
 
 function _defineProperty(obj, key, value) { if (key in obj) { Object.defineProperty(obj, key, { value: value, enumerable: true, configurable: true, writable: true }); } else { obj[key] = value; } return obj; }
 

package/lib/web/pkglint/index.js

@@ -16,4 +16,7 @@ function arrayContainsArray(superset, subset) {
   });
 }
 
-arrayContainsArray(mdFiles, filesToCheck) ? console.log('README and LICENSE files exist') : process.exit(1);
+if (!arrayContainsArray(mdFiles, filesToCheck)) {
+  console.log('Cannot find README.md or LICENSE.md');
+  process.exit(1);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leverege/build-tools",
-  "version": "1.8.4",
+  "version": "1.10.0",
   "description": "A package for development build tools.",
   "main": "index.js",
   "scripts": {
@@ -13,7 +13,6 @@
     "test": "echo \"Error: no test specified\" && exit 1"
   },
   "bin": {
-    "auditate": "lib/server/auditate/index.js",
     "circleate": "src/circleate",
     "decrypt-secrets": "src/decrypt-secrets",
     "dockreate": "src/dockreate",
@@ -32,7 +31,7 @@
   "author": "Leverege Devs",
   "license": "SEE LICENSE IN LICENSE.md",
   "dependencies": {
-    "@google-cloud/kms": "^1.3.0",
+    "@google-cloud/kms": "^1.3.1",
     "async": "^2.6.2",
     "chalk": "^2.4.2",
     "cloudflare": "^2.4.1",
@@ -40,19 +39,9 @@
     "command-line-usage": "^5.0.5",
     "commander": "^2.20.0",
     "fs-extra": "^8.1.0",
-    "get-stdin": "^7.0.0",
     "git-branch": "^2.0.1",
     "glob": "^7.1.4",
     "js-yaml": "^3.13.1",
-    "lodash.countby": "^4.6.0",
-    "lodash.first": "^3.0.0",
-    "lodash.groupby": "^4.6.0",
-    "lodash.keyby": "^4.6.0",
-    "lodash.map": "^4.6.0",
-    "lodash.orderby": "^4.6.0",
-    "minimist": "^1.2.0",
-    "npm-audit-helper": "^2.3.18",
-    "npm-audit-report": "^1.3.2",
     "ora": "^3.4.0",
     "parse-gitignore": "^1.0.1",
     "readline-sync": "^1.4.9",
@@ -68,7 +57,7 @@
     "@babel/plugin-proposal-optional-chaining": "^7.2.0",
     "@babel/preset-env": "^7.5.4",
     "@babel/register": "^7.4.4",
-    "@leverege/eslint-config-leverege": "^1.4.0",
-    "core-js": "^3.1.4"
+    "@leverege/eslint-config-leverege": "^1.5.3",
+    "core-js": "^3.2.1"
   }
 }

package/src/circleate

@@ -119,7 +119,9 @@ jobs:
 
       - run: 
           name: Check for vulnerabilities
-          command: npm run vuln
+          command: |
+            sudo npm install -g npm@latest
+            npm audit --production
 
       - run:
           name: Check for LICENSE and README files
@@ -301,7 +303,9 @@ jobs:
 
       - run: 
           name: Check for vulnerabilities
-          command: npm run vuln
+          command: |
+            sudo npm install -g npm@latest
+            npm audit --production
 
       - run:
           name: Check for LICENSE and README files

package/src/helmdn

@@ -77,6 +77,11 @@ function doNuking() {
       doNuking "${PLATFORM[@]}" && exit $?
     fi
 
+    if [ "$SERVICE" == "system" ];
+    then
+      doNuking "${SYSTEM[@]}" && exit $?
+    fi
+
     if [ "$SERVICE" == "ingress" ];
     then
       clearlyWarn