github-actions[bot]
commented
2 months ago Dependency Review
The following issues were found:
- ✅ 0 vulnerable package(s)
- ✅ 0 package(s) with incompatible licenses
- ✅ 0 package(s) with invalid SPDX license definitions
- ⚠️ 1 package(s) with unknown licenses.
License Issues
package.json
| Package | Version | License | Issue Type |
| socks-proxy-agent | ^8.0.4 | Null | Unknown License |
OpenSSF Scorecard
| Package | Version | Score | Details | ||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| npm/socks-proxy-agent | ^8.0.4 | :green_circle: 3.1 | Details
|
Scanned Manifest Files
package.json
- socks-proxy-agent@^8.0.4
- socks-proxy-agent@^5.0.1
sonarcloud[bot]
Bumps socks-proxy-agent from 5.0.1 to 8.0.4.
Release notes
Sourced from socks-proxy-agent's releases.
Changelog
Sourced from socks-proxy-agent's changelog.
... (truncated)
Commits
5555794Version Packages (#311)fdeed27Bump socks and pac-resolver versions to mitigate vulnerability in IP package ...70023c1Add SOCKS auth tests5908e84Removenet.isIP()check for TLSservername(#312)010fdc3Fix e2e (#303)1429c7eVersion Packages (#301)ada656d[socks-proxy-agent] pass socket_options to SocksClient (#302)5923589Moved licenses to separate files (#251)523b74cRestrict use of global URL in certain packages (#246)dd3b98fVersion Packages (#238)You can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show