search

OpenZeppelin / defender-client

Monorepo for all defender-client npm packages
https://docs.openzeppelin.com/defender/
MIT License
56 stars 47 forks source link

defender-client-deps: bump @types/node from 16.18.38 to 16.18.87 #535

Closed dependabot[bot] closed 6 months ago

dependabot[bot] commented 6 months ago

Bumps @types/node from 16.18.38 to 16.18.87.

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 6 months ago

The following labels could not be found: vulnerabilites.

socket-security[bot] commented 6 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@babel/code-frame@7.22.5 Transitive: environment +7 166 kB nicolo-ribaudo
npm/@babel/core@7.22.8 environment, filesystem, unsafe Transitive: shell +59 17.6 MB nicolo-ribaudo
npm/@babel/generator@7.22.7 Transitive: environment +11 3.39 MB nicolo-ribaudo
npm/@babel/helper-plugin-utils@7.22.5 None 0 11.9 kB nicolo-ribaudo
npm/@babel/parser@7.22.7 None 0 3.72 MB nicolo-ribaudo
npm/@babel/template@7.22.5 Transitive: environment +12 6.39 MB nicolo-ribaudo
npm/@babel/traverse@7.23.2 Transitive: environment +30 8.64 MB nicolo-ribaudo
npm/@babel/types@7.22.5 environment +3 2.48 MB nicolo-ribaudo
npm/@eslint-community/regexpp@4.8.1 None 0 430 kB eslint-community-bot
npm/@jridgewell/gen-mapping@0.3.3 None +5 400 kB jridgewell
npm/@jridgewell/trace-mapping@0.3.18 None +2 259 kB jridgewell
npm/@nodelib/fs.stat@2.0.5 filesystem 0 11.8 kB mrmlnc
npm/@nodelib/fs.walk@1.2.8 Transitive: filesystem +6 124 kB mrmlnc
npm/@npmcli/fs@3.1.0 filesystem +2 135 kB lukekarrys
npm/@npmcli/promise-spawn@6.0.2 environment, shell Transitive: filesystem +2 30.2 kB nlf
npm/@npmcli/run-script@6.0.2 environment, filesystem Transitive: eval, network, shell, unsafe +114 7.39 MB npm-cli-ops
npm/@nx/devkit@16.9.1 environment, filesystem, shell, unsafe Transitive: eval, network +125 95.8 MB nrwl-jason
npm/@octokit/types@9.3.2 None +1 4.45 MB octokitbot
npm/@types/babel__traverse@7.20.1 Transitive: environment +4 2.56 MB types
npm/@types/glob@8.1.0 None +2 3.58 MB types
npm/@types/istanbul-lib-coverage@2.0.4 None 0 5.76 kB types
npm/@types/jest@29.5.3 Transitive: environment, filesystem, unsafe +49 5.36 MB types
npm/@types/lodash@4.14.195 None 0 863 kB types
npm/@types/node@16.18.87 None 0 3.56 MB types
npm/@typescript-eslint/eslint-plugin@5.62.0 Transitive: environment, eval, filesystem, shell, unsafe +123 82.7 MB jameshenry
npm/@typescript-eslint/parser@5.62.0 Transitive: environment, eval, filesystem, shell, unsafe +115 79.5 MB jameshenry
npm/agent-base@6.0.2 Transitive: environment +2 83.8 kB tootallnate
npm/ajv@6.12.6 eval +5 1.48 MB esp
npm/axios@1.6.2 network Transitive: environment, filesystem +8 2.17 MB jasonsaayman
npm/bl@4.1.0 Transitive: environment +9 347 kB matteo.collina
npm/buffer@5.7.1 None +3 103 kB feross
npm/chownr@2.0.0 filesystem 0 5.75 kB isaacs
npm/ci-info@3.8.0 environment 0 25.8 kB sibiraj-s
npm/cli-cursor@3.1.0 None +4 27.8 kB sindresorhus
npm/cli-spinners@2.6.1 None 0 27.5 kB sindresorhus
npm/core-util-is@1.0.3 None 0 4.98 kB isaacs
npm/depd@2.0.0 environment, eval 0 27.1 kB dougwilson
npm/dotenv@16.3.1 environment, filesystem 0 71.6 kB motdotla
npm/end-of-stream@1.4.4 None +2 13.2 kB mafintosh
npm/eslint-config-prettier@8.8.0 Transitive: environment, eval, filesystem, shell, unsafe +94 10.4 MB lydell
npm/eslint-plugin-prettier@4.2.1 Transitive: environment, eval, filesystem, shell, unsafe +97 21.7 MB jounqin
npm/eslint-visitor-keys@3.4.3 None 0 32.3 kB eslintbot
npm/eslint@8.50.0 environment, filesystem Transitive: eval, shell, unsafe +93 10.4 MB eslintbot
npm/espree@9.6.1 None +3 624 kB eslintbot
npm/estraverse@5.3.0 None 0 37.1 kB michaelficarra
npm/eventemitter3@4.0.7 None 0 38 kB lpinca
npm/expect@29.6.1 Transitive: environment, filesystem, unsafe +48 5.28 MB simenb
npm/fast-deep-equal@3.1.3 None 0 13 kB esp
npm/figures@3.2.0 None 0 12.1 kB sindresorhus
npm/follow-redirects@1.15.2 network 0 28.3 kB rubenverborgh
npm/fs-extra@11.1.1 Transitive: environment, filesystem +3 116 kB ryanzim
npm/fs-minipass@3.0.2 filesystem 0 14.4 kB npm-cli-ops
npm/globby@11.1.0 filesystem +22 584 kB sindresorhus
npm/has-unicode@2.0.1 environment 0 3.44 kB iarna
npm/hosted-git-info@4.1.0 None +2 54.8 kB gar
npm/http-cache-semantics@4.1.1 None 0 35.9 kB kornel
npm/iconv-lite@0.4.24 None +1 378 kB ashtuchkin
npm/ignore@5.2.4 None 0 51.2 kB kael
npm/ini@1.3.8 None 0 9.3 kB isaacs
npm/is-core-module@2.12.1 None +2 57.2 kB ljharb
npm/is-docker@2.2.1 filesystem 0 3.01 kB sindresorhus
npm/is-glob@4.0.3 None +1 19.8 kB phated
npm/is-plain-obj@1.1.0 None 0 2.62 kB sindresorhus
npm/istanbul-lib-coverage@3.2.0 None 0 29.3 kB oss-bot
npm/jest-diff@29.7.0 Transitive: environment +12 758 kB simenb
npm/jest-util@29.6.1 environment Transitive: filesystem +18 4.41 MB simenb
npm/jest@29.6.1 Transitive: environment, eval, filesystem, network, shell, unsafe +278 29.1 MB simenb
npm/js-yaml@4.1.0 None 0 405 kB vitaly
npm/json-stringify-safe@5.0.1 None 0 12.7 kB isaacs
npm/jsonfile@6.1.0 filesystem Transitive: environment +2 56.9 kB ryanzim
npm/jsonparse@1.3.1 None 0 36.8 kB creationix
npm/kind-of@6.0.3 None 0 22.8 kB doowb
npm/lerna@7.4.2 Transitive: environment, eval, filesystem, network, shell, unsafe +506 209 MB jameshenry
npm/make-fetch-happen@11.1.1 environment, network Transitive: eval, filesystem, shell, unsafe +76 4.7 MB npm-cli-ops
npm/merge2@1.4.1 None 0 8.9 kB zensh
npm/minimist@1.2.8 None 0 54.5 kB ljharb
npm/minipass@4.2.8 None 0 69.4 kB isaacs
npm/minizlib@2.1.2 None +1 32.1 kB isaacs
npm/mkdirp@1.0.4 environment, filesystem 0 19.1 kB isaacs
npm/negotiator@0.6.3 None 0 27.4 kB dougwilson
npm/node-fetch@2.6.7 network +4 600 kB endless
npm/node-gyp-build@4.6.0 environment, filesystem 0 13.1 kB mafintosh
npm/node-machine-id@1.1.12 environment, eval, shell 0 35.8 kB automation-stack
npm/normalize-package-data@3.0.3 None +10 285 kB gar
npm/npm-registry-fetch@14.0.5 environment, filesystem, network Transitive: eval, shell, unsafe +82 4.8 MB npm-cli-ops
npm/npmlog@6.0.2 Transitive: environment +18 328 kB lukekarrys
npm/nx-cloud@16.5.2 environment, filesystem, shell Transitive: eval, network +33 3.27 MB altan-nrwl
npm/nx@16.9.1 environment, filesystem, network, shell, unsafe Transitive: eval +117 94.4 MB nrwl-jason
npm/open@8.4.2 environment, filesystem, shell +3 57.5 kB sindresorhus
npm/p-limit@3.1.0 None +1 13.8 kB sindresorhus
npm/p-map@4.0.0 None +3 25.3 kB sindresorhus
npm/p-reduce@2.1.0 None 0 6.14 kB sindresorhus
npm/path-scurry@1.10.1 filesystem +1 1.19 MB isaacs
npm/prettier@2.8.8 environment, filesystem, unsafe 0 11.2 MB prettier-bot
npm/pretty-format@29.6.1 Transitive: environment +4 546 kB simenb
npm/protocols@2.0.1 None 0 9.29 kB ionicabizau
npm/punycode@2.3.0 None 0 32.9 kB google-wombot
npm/read-package-json@6.0.4 filesystem Transitive: environment, shell, unsafe +37 2.43 MB npm-cli-ops
npm/readable-stream@3.6.2 environment +4 180 kB matteo.collina
npm/resolve@1.22.2 environment, filesystem +5 216 kB ljharb
npm/retry@0.12.0 None 0 32.2 kB tim-kos
npm/safer-buffer@2.1.2 None 0 42.3 kB chalker
npm/semver@7.5.4 None +1 108 kB npm-cli-ops
npm/sigstore@1.7.0 environment, network, shell Transitive: eval, filesystem, unsafe +82 5.29 MB bdehamer
npm/strong-log-transformer@2.1.0 filesystem +3 88.9 kB rmg
npm/tar@6.1.11 environment, filesystem +5 232 kB isaacs
npm/through@2.3.8 None 0 12.5 kB dominictarr
npm/ts-jest@29.1.1 environment, filesystem, unsafe Transitive: eval, network, shell +283 96.3 MB kul
npm/tslib@2.6.0 None 0 83.5 kB typescript-bot
npm/type-check@0.4.0 None +1 57.9 kB gkz
npm/util-deprecate@1.0.2 None 0 5.48 kB tootallnate
npm/validate-npm-package-license@3.0.4 None +2 51.9 kB kemitchell
npm/validate-npm-package-name@5.0.0 None +1 10.6 kB lukekarrys
npm/wcwidth@1.0.1 None 0 14.2 kB timoxley
npm/xtend@4.0.2 None 0 6.46 kB raynos
npm/yargs-parser@20.2.4 environment, filesystem 0 120 kB oss-bot
npm/yargs@17.7.2 environment, filesystem +12 450 kB oss-bot

🚮 Removed packages: npm/dotenv@16.4.5, npm/jest-mock-extended@1.0.18

View full report↗︎

socket-security[bot] commented 6 months ago

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Mild CVE npm/follow-redirects@1.15.2
Mild CVE npm/ip@2.0.0
Install scripts npm/nx@16.9.1
  • Install script: postinstall
  • Source: node ./bin/post-install

View full report↗︎

Next steps

What is a mild CVE?

Contains a low severity Common Vulnerability and Exposure (CVE).

Remove or replace dependencies that include known low severity CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/follow-redirects@1.15.2
  • @SocketSecurity ignore npm/ip@2.0.0
  • @SocketSecurity ignore npm/nx@16.9.1
dependabot[bot] commented 6 months ago

Superseded by #541.