react-native-qrcode-svg 6.3.35 → 6.3.36

package/Example/package.json

@@ -11,7 +11,8 @@
     "prettier": "prettier --write ./src/**/*.{tsx,ts}",
     "start": "react-native start",
     "test": "jest",
-    "tsc": "tsc"
+    "tsc": "tsc",
+    "postinstall": "node scripts/patchMetroImageSize.js"
   },
   "dependencies": {
     "@babel/plugin-proposal-export-namespace-from": "^7.18.9",
@@ -50,6 +51,9 @@
   "resolutions": {
     "selfsigned": "^5.5.0"
   },
+  "resolutions": {
+    "image-size": "2.0.4"
+  },
   "engines": {
     "node": ">=18"
   }

package/Example/scripts/patchMetroImageSize.js

@@ -0,0 +1,14 @@
+// image-size is pinned to 2.x via "resolutions" to fix Dependabot alerts. Metro 0.80 still
+// calls the 1.x API (a callable default export that also accepts file paths), so adapt it.
+const fs = require('fs');
+
+const assetsPath = require.resolve('metro/src/Assets.js');
+const source = fs.readFileSync(assetsPath, 'utf8');
+const original = 'const getImageSize = require("image-size");';
+const patched =
+  'const { imageSize } = require("image-size");\n' +
+  'const getImageSize = input => imageSize(typeof input === "string" ? fs.readFileSync(input) : input);';
+
+if (source.includes(original)) {
+  fs.writeFileSync(assetsPath, source.replace(original, patched));
+}

package/Example/yarn.lock

@@ -5012,11 +5012,9 @@ ignore@^5.0.5, ignore@^5.2.0, ignore@^5.3.1:
   integrity sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==
 
 image-size@^1.0.2:
-  version "1.2.0"
-  resolved "https://registry.yarnpkg.com/image-size/-/image-size-1.2.0.tgz#312af27a2ff4ff58595ad00b9344dd684c910df6"
-  integrity sha512-4S8fwbO6w3GeCVN6OPtA9I5IGKkcDMPcKndtUlpJuCwu7JLjtj7JZpwqLuyY2nrmQT3AWsCJLSKPsc2mPBSl3w==
-  dependencies:
-    queue "6.0.2"
+  version "2.0.4"
+  resolved "https://registry.yarnpkg.com/image-size/-/image-size-2.0.4.tgz#bbc1933173e4ee1adbbdf9d4958ded15fdb710e3"
+  integrity sha512-QRUkFFsRV/6fuESxb9Vkq+a0LkSrgKXuc2NEqfikiXxxN/G3tjWt5EVUlMaImRBZRZK/jRBEbYvpPYZL8t08Zw==
 
 import-fresh@^2.0.0:
   version "2.0.0"
@@ -7091,6 +7089,12 @@ queue-microtask@^1.2.2:
   resolved "https://registry.yarnpkg.com/queue-microtask/-/queue-microtask-1.2.3.tgz#4929228bbc724dfac43e0efb058caf7b6cfb6243"
   integrity sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==
 
+randombytes@^2.1.0:
+  version "2.1.0"
+  resolved "https://registry.yarnpkg.com/randombytes/-/randombytes-2.1.0.tgz#df6f84372f0270dc65cdf6291349ab7a473d4f2a"
+  integrity sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==
+  dependencies:
+    safe-buffer "^5.1.0"
 queue@6.0.2:
   version "6.0.2"
   resolved "https://registry.yarnpkg.com/queue/-/queue-6.0.2.tgz#b91525283e2315c7553d2efa18d83e76432fed65"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "react-native-qrcode-svg",
-  "version": "6.3.35",
+  "version": "6.3.36",
   "description": "A QR Code generator for React Native based on react-native-svg and javascript-qrcode.",
   "main": "index.js",
   "types": "index.d.ts",
@@ -85,6 +85,7 @@
     "standard": "^16.0.4"
   },
   "overrides": {
+    "image-size": "2.0.4",
     "selfsigned": "^5.5.0"
   }
 }