chore: fix vulnerabilities and add deprecation notice (#15) (#37)

## Summary
Address vulnerabilities with form-data, path-to-regexp and axios

## Detail
- upgrade axios, path-to-regexp and form-data npm packages
- add deprecation notice with redirection to developer documentation

## Testing
- ensured test, build and start scripts work as expected after the
changes

## Documentation
- updated README with deprecation notice and link to developer
documentation

---

**Requested Reviewers:** @mention

Author: jhilaire-circle

.github/workflows/ci.yml

@@ -11,10 +11,10 @@ jobs:
       - name: Check out repository code
         uses: actions/checkout@v4
 
-      - name: Install Node 16.x
+      - name: Install Node 22.x
         uses: actions/setup-node@v4
         with:
-          node-version: 16
+          node-version: 22
 
       - name: Install Dependencies
         run: yarn install

.nvmrc

@@ -1 +1 @@
-16
+22.14.0

README.md

@@ -1,4 +1,14 @@
-# CCTP Sample App
+# [DEPRECATED] CCTP Sample App
+
+**This project is no longer actively maintained or supported by [Circle].**
+
+This repository is kept for historical and archival purposes only. No further updates, bug fixes, or new features will be implemented by the original maintainers.
+
+**Reason for Deprecation:** The sample code shared in the repository is outdated. Our focus has shifted to providing the latest and greatest of the CCTP experience through our [developer documentation portal](https://developers.circle.com/cctp/).
+
+**Recommended Alternative:** If you are looking for similar functionality, please consider using the [CCTP QuickStart](https://developers.circle.com/cctp/transfer-usdc-on-testnet-from-ethereum-to-avalanche).
+
+# Summary
 
 A sample app used to demonstrate CCTP step by step capabilities on testnet. The app currently supports Ethereum Sepolia, Avalanche Fuji C-Chain, and Arbitrum Sepolia testnets.
 
@@ -49,7 +59,7 @@ Launch the test runner in interactive watch mode
 yarn test
 ```
 
-Run tests with test converage.
+Run tests with test coverage.
 
 ```
 yarn test:unit:coverage
@@ -76,7 +86,8 @@ yarn build
 To deploy, install and run `serve`
 
 ```
-yarn global add serve serve -s build
+yarn global add serve
+serve -s build
 ```
 
 See [deployment docs](https://facebook.github.io/create-react-app/docs/deployment) for more information.
@@ -93,7 +104,7 @@ We have two config files which will be need to be updated to add a new chain sup
 
 2. Add the addresses for the new chain
 
-- In `./src/constants/addresses.ts`, we need to add the contract addresses for the new chain to support. For `CHAIN_IDS_TO_USDC_ADDRESSES`, `CHAIN_IDS_TO_TOKEN_MESSENGER_ADDRESSES` and `CHAIN_IDS_TO_MESSAGE_TRANSMITTER_ADDRESSES`, add the coressponding addresses for the new chain. This will allow the hooks to interact with the relevant addresses
+- In `./src/constants/addresses.ts`, we need to add the contract addresses for the new chain to support. For `CHAIN_IDS_TO_USDC_ADDRESSES`, `CHAIN_IDS_TO_TOKEN_MESSENGER_ADDRESSES` and `CHAIN_IDS_TO_MESSAGE_TRANSMITTER_ADDRESSES`, add the corresponding addresses for the new chain. This will allow the hooks to interact with the relevant addresses
 
 3. Add the logo for the new chain
 

package.json

@@ -33,7 +33,8 @@
     "@web3-react/core": "^6.1.9",
     "@web3-react/injected-connector": "^6.0.7",
     "@web3-react/types": "^6.0.7",
-    "axios": "^0.27.2",
+    "axios": "^0.30.1",
+    "corepack": "^0.34.0",
     "ethers": "^5.7.0",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
@@ -95,5 +96,9 @@
       "last 1 firefox version",
       "last 1 safari version"
     ]
-  }
+  },
+  "resolutions": {
+    "path-to-regexp": "0.1.12"
+  },
+  "packageManager": "yarn@1.22.22+sha512.a6b2f7906b721bba3d67d4aff083df04dad64c399707841b7acf00f6b133b7ac24255f2652fa22ae3534329dc6180534e98d17432037ff6fd140556e2bb3137e"
 }