authgear · tung2744 · Dec 12, 2024 · Dec 12, 2024 · Dec 12, 2024 · Dec 12, 2024
diff --git a/example/capacitor/package-lock.json b/example/capacitor/package-lock.json
diff --git a/example/reactnative/README.md b/example/reactnative/README.md
@@ -8,14 +8,16 @@ Yarn Classic is our package manager. It does not support `audit fix`.
 I tried to switch to npm, but then `npm start` will result in error `cannot find package @authgear/react-native`.
 So a React Native project cannot really use npm as package manager.
 
-To automate the fixing of vulnerabilities in packages. We can use the following workaround
+To automate the fixing of vulnerabilities in packages. We can use the following workaround:
+
+> You can just `npm run yarnauditfix`. It does the following for you.
 
 - `rm yarn.lock`
 - `npm i` to generate `package-lock.json`.
 - `npm audit fix` to fix vulnerabilities.
 - `git checkout -- yarn.lock` to bring back `yarn.lock`.
 - `npm i` to ask npm to update `yarn.lock` based on `package-lock.json`.
-- `yarn i` to ask Yarn to update `yarn.lock` according to its own flavor.
+- `yarn install` to ask Yarn to update `yarn.lock` according to its own flavor.
 - `rm package-lock.json` to remove residue.
 
 # Initial setup

diff --git a/example/reactnative/package.json b/example/reactnative/package.json
@@ -8,7 +8,8 @@
     "start": "react-native start",
     "test": "jest",
     "lint": "eslint . --ext .js,.jsx,.ts,.tsx",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "yarnauditfix": "rm yarn.lock && npm install && npm audit fix && git checkout -- yarn.lock && npm install && yarn install && rm package-lock.json"
   },
   "dependencies": {
     "@authgear/react-native": "../../packages/authgear-react-native",

diff --git a/example/reactnative/yarn.lock b/example/reactnative/yarn.lock
@@ -2735,9 +2735,9 @@ create-jest@^29.7.0:
     prompts "^2.0.1"
 
 cross-spawn@^7.0.2, cross-spawn@^7.0.3:
-  version "7.0.3"
-  resolved "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz"
-  integrity sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==
+  version "7.0.6"
+  resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-7.0.6.tgz#8a58fe78f00dcd70c370451759dfbfaf03e8ee9f"
+  integrity sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==
   dependencies:
     path-key "^3.1.0"
     shebang-command "^2.0.0"

diff --git a/package-lock.json b/package-lock.json
diff --git a/website/package-lock.json b/website/package-lock.json