socket-security[bot]
commented
1 year ago Socket Security Pull Request Report
👍 No new dependency issues detected in pull request
Pull request report summary
| Issue | Status |
|---|---|
| Install scripts | ✅ 0 issues |
| Native code | ✅ 0 issues |
| Bin script confusion | ✅ 0 issues |
| Bin script shell injection | ✅ 0 issues |
| Unresolved require | ✅ 0 issues |
| Invalid package.json | ✅ 0 issues |
| HTTP dependency | ✅ 0 issues |
| Git dependency | ✅ 0 issues |
| Potential typo squat | ✅ 0 issues |
| Known Malware | ✅ 0 issues |
| Telemetry | ✅ 0 issues |
| Protestware/Troll package | ✅ 0 issues |
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2
Ignoring: es5-ext@0.10.62
Powered by socket.dev
franky47
github-actions[bot]
In theory, this could help testing versioning strategies with changesets and setting up CD without depending on an immutable (public or private) registry, we could reset the Verdaccio local package database as we ~make mistakes~ learn.