Closed FrederikBolding closed 1 year ago
New dependency changes detected. Learn more about Socket for GitHub ↗︎
👍 No new dependency issues detected in pull request
To ignore an alert, reply with a comment starting with @SocketSecurity ignore
followed by a space separated list of package-name@version
specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@*
or ignore all packages with @SocketSecurity ignore-all
Issue | Status |
---|---|
Install scripts | ✅ 0 issues |
Native code | ✅ 0 issues |
Bin script shell injection | ✅ 0 issues |
Unresolved require | ✅ 0 issues |
Invalid package.json | ✅ 0 issues |
HTTP dependency | ✅ 0 issues |
Git dependency | ✅ 0 issues |
Potential typo squat | ✅ 0 issues |
Known Malware | ✅ 0 issues |
Telemetry | ✅ 0 issues |
Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
➕ Added Package | Capability Access | +/- Transitive Count |
Publisher |
---|---|---|---|
@metamask/rpc-errors@5.1.0 | None | +0 |
metamaskbot |
brfs@2.0.2 | filesystem, shell | +15 |
goto-bus-stop |
assemblyscript@0.27.2 | network, filesystem, environment | +2 |
assemblyscript |
Adds a WASM test-snap that uses AssemblyScript to build a WASM file and imports it via
brfs
. The imported WASM file is then executed viaWebAssembly
by requestingendowment:webassembly