socket-security[bot]
commented
2 years ago Socket Security Report
Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.
📜 New install scripts detected
A dependency change in this PR is introducing new install scripts to your install step.
| Package | Script field | Location |
|---|---|---|
| prisma@4.4.0 (added) | install |
api/package.json |
| prisma@4.4.0 (added) | preinstall |
api/package.json |
| @prisma/client@4.4.0 (added) | postinstall |
api/package.json |
| @prisma/engines@4.4.0 (added) | postinstall |
api/package.json via prisma@4.4.0 |
Socket.dev scan summary
| Issue | Status |
|---|---|
| Did you mean? | ✅ no new possible package typos |
| Install scripts | ⚠️ 4 new install scripts detected |
| Telemetry | ✅ no new telemetry |
| Troll package | ✅ no new troll packages |
| Malware | ✅ no new malware |
| Native code | ✅ no new native modules |
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2
@SocketSecurity ignore prisma@4.4.0@SocketSecurity ignore @prisma/client@4.4.0@SocketSecurity ignore @prisma/engines@4.4.0
Powered by socket.dev
github-actions[bot]
SocialGroovyBot
SonarCloud Quality Gate failed.