Fix / remove some vulnerable dependencies (SOC2) (#2268)

* remove non critical vulnerable dependencies in core

* blog fix

blog/package.json

@@ -12,7 +12,7 @@
   "dependencies": {
     "@mdx-js/loader": "^2.3.0",
     "@mdx-js/react": "^2.3.0",
-    "@next/mdx": "^13.2.4",
+    "@next/mdx": "^13.5.4",
     "autoprefixer": "^10.4.7",
     "dd-trace": "^3.16.0",
     "clsx": "^1.2.0",
@@ -21,7 +21,7 @@
     "mdast-util-to-string": "^3.2.0",
     "mdx-annotations": "^0.1.3",
     "motion": "^10.15.5",
-    "next": "13.4.2",
+    "next": "13.5.4",
     "next-themes": "^0.2.1",
     "postcss-focus-visible": "^6.0.4",
     "react": "18.2.0",

core/Cargo.toml

@@ -13,8 +13,6 @@ serde = { version = "1.0", features = ["rc", "derive"] }
 serde_json = "1.0"
 pest = "2.0"
 pest_derive = "2.0"
-clap = { version = "3.2", features = ["derive"] }
-colored = "2.0"
 shellexpand = "2.1"
 blake3 = "1.3"
 async-trait = "0.1"

core/src/utils.rs

@@ -1,6 +1,5 @@
 use anyhow::Result;
 use async_std::path::PathBuf;
-use colored::Colorize;
 use std::io::Write;
 use uuid::Uuid;
 
@@ -83,23 +82,23 @@ pub fn utc_date_from(millis: u64) -> String {
 
 // TODO(spolu): maybe make async eventually
 pub fn info(msg: &str) {
-    println!("{} {}", "[i]".yellow(), msg);
+    println!("{} {}", "[i]", msg);
 }
 
 pub fn action(msg: &str) {
-    println!("{} {}", "[·]".blue(), msg);
+    println!("{} {}", "[·]", msg);
 }
 
 pub fn error(msg: &str) {
-    println!("{} {}", "[!]".red(), msg);
+    println!("{} {}", "[!]", msg);
 }
 
 pub fn done(msg: &str) {
-    println!("{} {}", "[✓]".green(), msg);
+    println!("{} {}", "[✓]", msg);
 }
 
 pub fn confirm(msg: &str) -> Result<bool> {
-    print!("{} {} Confirm ([y]/n) ? ", "[?]".cyan(), msg);
+    print!("{} {} Confirm ([y]/n) ? ", "[?]", msg);
     std::io::stdout().flush()?;
 
     let mut input = String::new();