Merge pull request #951 from kubecost/bolt/ui-set-value-fix

Fix CVE for set-value

ui/package.json

@@ -3,7 +3,8 @@
   "version": "0.0.1",
   "description": "Open source UI for Kubecost",
   "scripts": {
-    "test": "echo \"Error: no test specified\" && exit 1"
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "preinstall": "npx npm-force-resolutions"
   },
   "author": "",
   "license": "Apache-2.0",
@@ -32,6 +33,10 @@
     "@babel/plugin-proposal-class-properties": "^7.13.0",
     "@babel/plugin-transform-runtime": "^7.13.10",
     "@babel/preset-react": "^7.12.13",
-    "parcel": "*"
+    "parcel": "*",
+    "set-value": "4.0.1"
+  },
+  "resolutions": {
+    "set-value": "4.0.1"
   }
 }