TB - 84 Fix vulnerable packages/dependencies

.dockerignore

@@ -1,5 +1,19 @@
+.github
+.travis
+.nyc_output
+.vscode
+.git
+.gitignore
 node_modules
 lib/*
+performance
 packaging
 infrastructure
 test
+.env.test
+.eslintrc.json
+.eslintignore
+.npmignore
+.nycrc.json
+.prettierrc.yaml
+.travis.yml

.travis.yml

@@ -1,7 +1,7 @@
 language: node_js
 node_js:
-  - "lts/erbium"
   - "lts/fermium"
+  - "lts/gallium"
   - "node"
 matrix:
   fast_finish: true

Dockerfile

@@ -1,15 +1,25 @@
-FROM node:14.17-alpine
+FROM node:14.21.3-alpine as build
+
+WORKDIR /build
+
+COPY . .
+
+RUN npm install && npm run build
+
+FROM node:14.21.3-alpine
+
+ENV NODE_ENV=production
 
 RUN apk upgrade --update-cache --available && \
     apk add openssl && \
     rm -rf /var/cache/apk/*
 
 WORKDIR /app
 
-COPY . .
+COPY --from=build ./build/lib ./lib
 
-RUN npm install
+COPY . .
 
-RUN npm run build
+RUN npm install --production
 
 CMD ["node", "lib/server.js"]

README.md

@@ -18,12 +18,13 @@ See the [development road-map](http://openhim.org/docs/introduction/roadmap) for
 
 ## Requirements
 
-Last 2 versions of NodeJS LTS are supported
+Currently supported versions of NodeJS LTS are
 
 | NodeJS (LTS) | MongoDB                    |
 | ------------ | -------------------------- |
-| 10.x         | >= 3.6 &#124;&#124; <= 4.2 |
-| 12.x         | >= 3.6 &#124;&#124; <= 4.2 |
+|  14.2x.x     | >= 3.6 &#124;&#124; <= 4.2 |
+|  15.x        | >= 3.6 &#124;&#124; <= 4.2 |
+
 
 - [NodeJS Release Versions](https://github.com/nodejs/Release)
 - [MongoDB NodeJS Driver Versions](https://mongodb.github.io/node-mongodb-native/)

config/production.json

@@ -0,0 +1,7 @@
+{
+  "logger": {
+    "level": "warn",
+    "logToDB": true,
+    "capDBLogs": false
+  }
+}