artefactual-sdps / enduro

A tool to support ingest and automation in digital preservation workflows
https://enduro.readthedocs.io/
Apache License 2.0
4 stars 3 forks source link

Replace npm ip package with ip-address #971

Closed djjuhasz closed 3 months ago

djjuhasz commented 3 months ago

Fixes: https://github.com/advisories/GHSA-2p57-rm9w-gvfp

The https://github.com/indutny/node-ip project has been officially archived and is no longer actively maintained. Switching to ip-address is recommended by https://github.com/indutny/node-ip/issues/150 and avoids ongoing security issues with the identification of public vs. private IP addresses in "ip".

codecov[bot] commented 3 months ago

Codecov Report

All modified and coverable lines are covered by tests :white_check_mark:

Project coverage is 52.20%. Comparing base (33c7bd1) to head (d0fcef4). Report is 41 commits behind head on main.

Additional details and impacted files ```diff @@ Coverage Diff @@ ## main #971 +/- ## ========================================== + Coverage 52.12% 52.20% +0.07% ========================================== Files 100 100 Lines 5590 5590 ========================================== + Hits 2914 2918 +4 + Misses 2429 2427 -2 + Partials 247 245 -2 ```

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.