Package.json fixes for security and consistency(#1147)

- Fix security alert for undici
- Copy resolutions to helloworld package.json for template repo
- Make ICA package private
- Fix version num in infra package

package.json

@@ -33,6 +33,7 @@
     "underscore": "^1.13",
     "fetch-ponyfill": "^7.1",
     "lodash": "^4.17.21",
-    "async": "^2.6.4"
+    "async": "^2.6.4",
+    "undici": "^5.11"
   }
 }

typescript/helloworld/package.json

@@ -59,5 +59,12 @@
     "test": "hardhat test ./src/test/**/*.test.ts",
     "sync": "ts-node scripts/sync-with-template-repo.ts"
   },
-  "types": "dist/src/index.d.ts"
+  "types": "dist/src/index.d.ts",
+  "resolutions": {
+    "underscore": "^1.13",
+    "fetch-ponyfill": "^7.1",
+    "lodash": "^4.17.21",
+    "async": "^2.6.4",
+    "undici": "^5.11"
+  }
 }

typescript/ica/package.json

@@ -53,6 +53,7 @@
     "type": "git",
     "url": "https://github.com/hyperlane-xyz/hyperlane-monorepo"
   },
+  "private": true,
   "scripts": {
     "build": "hardhat compile && tsc",
     "clean": "hardhat clean && rm -rf dist cache src/types",

typescript/infra/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@hyperlane-xyz/infra",
   "description": "Infrastructure utilities for the Hyperlane Network",
-  "version": "0.5.0",
+  "version": "0.5.0-beta0",
   "dependencies": {
     "@aws-sdk/client-iam": "^3.74.0",
     "@aws-sdk/client-kms": "3.48.0",

yarn.lock

@@ -6758,6 +6758,15 @@ __metadata:
   languageName: node
   linkType: hard
 
+"busboy@npm:^1.6.0":
+  version: 1.6.0
+  resolution: "busboy@npm:1.6.0"
+  dependencies:
+    streamsearch: ^1.1.0
+  checksum: 32801e2c0164e12106bf236291a00795c3c4e4b709ae02132883fe8478ba2ae23743b11c5735a0aae8afe65ac4b6ca4568b91f0d9fed1fdbc32ede824a73746e
+  languageName: node
+  linkType: hard
+
 "bytes@npm:3.1.2":
   version: 3.1.2
   resolution: "bytes@npm:3.1.2"
@@ -16040,6 +16049,13 @@ __metadata:
   languageName: node
   linkType: hard
 
+"streamsearch@npm:^1.1.0":
+  version: 1.1.0
+  resolution: "streamsearch@npm:1.1.0"
+  checksum: 1cce16cea8405d7a233d32ca5e00a00169cc0e19fbc02aa839959985f267335d435c07f96e5e0edd0eadc6d39c98d5435fb5bbbdefc62c41834eadc5622ad942
+  languageName: node
+  linkType: hard
+
 "strict-uri-encode@npm:^1.0.0":
   version: 1.1.0
   resolution: "strict-uri-encode@npm:1.1.0"
@@ -17060,10 +17076,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"undici@npm:^5.4.0":
-  version: 5.5.1
-  resolution: "undici@npm:5.5.1"
-  checksum: c041c9093df7ec683479a9555581206a7c7bebfc1ed6e8669920e55618461fc4ce08938e2fbf8ef7d692c2813c44392b5ed25c58396ee4a72ffd1f1f953712c9
+"undici@npm:^5.11":
+  version: 5.11.0
+  resolution: "undici@npm:5.11.0"
+  dependencies:
+    busboy: ^1.6.0
+  checksum: 20669ef4023d24a75e81ed8142829f525f16af14d61f833b5f19cfc6bed7c706adde343a190d764dcceb227eba3211222d2b194010462a2ca221a7da0487f563
   languageName: node
   linkType: hard