blocknative / web3-onboard

Client library to onboard users to web3 apps
https://onboard.blocknative.com/
MIT License
813 stars 474 forks source link

Add sunset warnings to tx preview #2205

Closed Adamj1232 closed 1 month ago

Adamj1232 commented 1 month ago

Description

Add sunset warnings to tx preview

Screenshot 2024-05-24 at 10 45 44 Screenshot 2024-05-24 at 10 44 40

PLEASE NOTE- Checklist must be complete prior to review.

Checklist

Docs Checklist

socket-security[bot] commented 1 month ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@0xpass/webauthn-signer@2.0.0 None +2 321 kB kwk236
npm/@adraffy/ens-normalize@1.10.0 None 0 441 kB adraffy
npm/@arcana/auth@1.0.10 network 0 928 kB makyl
npm/@babel/code-frame@7.24.6 environment 0 24.1 kB nicolo-ribaudo
npm/@babel/compat-data@7.24.6 None 0 65.2 kB nicolo-ribaudo
npm/@babel/helper-compilation-targets@7.24.6 None +2 82.7 kB nicolo-ribaudo
npm/@babel/helper-module-imports@7.22.15 None 0 54.4 kB nicolo-ribaudo
npm/@babel/helper-string-parser@7.24.6 None 0 31.7 kB nicolo-ribaudo
npm/@babel/helper-validator-identifier@7.24.6 None 0 49.2 kB nicolo-ribaudo
npm/@babel/helper-validator-option@7.24.6 None 0 11.8 kB nicolo-ribaudo
npm/@babel/highlight@7.24.6 environment 0 20.3 kB nicolo-ribaudo
npm/@babel/runtime@7.24.6 None 0 249 kB nicolo-ribaudo
npm/@babel/types@7.24.6 environment 0 2.41 MB nicolo-ribaudo
npm/@bitget-wallet/web3-sdk@0.0.8 None +1 507 kB phoenix-bitget
npm/@blocto/dappauth@2.1.0 None 0 20.1 kB scottphc
npm/@celo/base@3.2.0 None 0 210 kB alecps
npm/@celo/utils@3.2.0 None +9 1.92 MB alecps
npm/@chakra-ui/accordion@1.4.12 environment +12 1.23 MB segunadebayo
npm/@chakra-ui/alert@1.3.7 environment +8 765 kB segunadebayo
npm/@chakra-ui/anatomy@1.3.0 environment +8 763 kB segunadebayo
npm/@chakra-ui/avatar@1.3.11 environment +11 1.07 MB segunadebayo
npm/@chakra-ui/breadcrumb@1.3.6 environment +8 769 kB segunadebayo
npm/@chakra-ui/button@1.5.10 environment +12 1.07 MB segunadebayo
npm/@chakra-ui/checkbox@1.7.1 environment +12 1.17 MB segunadebayo
npm/@chakra-ui/clickable@1.2.6 environment 0 73.9 kB segunadebayo
npm/@chakra-ui/close-button@1.2.7 environment +8 751 kB segunadebayo
npm/@chakra-ui/color-mode@2.2.0 Transitive: environment +2 437 kB segunadebayo
npm/@chakra-ui/control-box@1.1.6 environment +8 754 kB segunadebayo
npm/@chakra-ui/counter@1.2.10 environment +2 273 kB segunadebayo
npm/@chakra-ui/css-reset@1.1.3 environment 0 24.1 kB segunadebayo
npm/@chakra-ui/editable@1.4.2 environment +10 1.06 MB segunadebayo
npm/@chakra-ui/focus-lock@1.2.6 environment 0 13.1 kB segunadebayo
npm/@chakra-ui/icon@2.0.5 environment +8 757 kB segunadebayo
npm/@chakra-ui/icons@2.1.1 Transitive: environment +9 1.16 MB segunadebayo
npm/@chakra-ui/input@1.4.6 environment +11 1.11 MB segunadebayo
npm/@chakra-ui/layout@1.8.0 environment +8 913 kB segunadebayo
npm/@chakra-ui/live-region@1.1.6 environment 0 17.4 kB segunadebayo
npm/@chakra-ui/media-query@2.0.4 environment +12 8.9 MB segunadebayo
npm/@chakra-ui/menu@1.8.12 environment +14 3.03 MB segunadebayo
npm/@chakra-ui/modal@1.11.1 environment +13 1.27 MB segunadebayo
npm/@chakra-ui/number-input@1.4.7 environment +11 1.19 MB segunadebayo
npm/@chakra-ui/pin-input@1.7.11 environment +11 1.09 MB segunadebayo
npm/@chakra-ui/popover@1.11.9 environment +12 2.62 MB segunadebayo
npm/@chakra-ui/progress@1.2.6 environment +8 798 kB segunadebayo
npm/@chakra-ui/provider@1.7.14 environment +9 2.1 MB segunadebayo
npm/@chakra-ui/radio@1.5.1 environment +12 1.15 MB segunadebayo
npm/@chakra-ui/react-utils@1.2.3 environment 0 19 kB segunadebayo
npm/@chakra-ui/react@1.8.9 environment Transitive: eval +39 12.2 MB segunadebayo
npm/@chakra-ui/theme-tools@1.3.6 environment +9 1.06 MB segunadebayo
npm/@chakra-ui/utils@1.10.4 environment +3 370 kB segunadebayo
npm/@coinbase/wallet-sdk@3.9.2 network 0 368 kB jungho.bang
npm/@cosmjs/amino@0.29.5 None +1 227 kB webmaster128
npm/@cosmjs/crypto@0.29.4 None 0 139 kB webmaster128
npm/@cosmjs/encoding@0.29.5 None 0 24.6 kB webmaster128
npm/@cosmjs/math@0.29.5 None 0 36.8 kB webmaster128
npm/@cosmjs/proto-signing@0.29.5 None 0 80 kB webmaster128
npm/@cosmjs/stream@0.29.5 None 0 30.4 kB webmaster128
npm/@cosmjs/tendermint-rpc@0.29.5 network +3 491 kB webmaster128
npm/@cosmjs/utils@0.29.5 None 0 14.5 kB webmaster128
npm/@emotion/react@11.11.4 environment Transitive: filesystem +12 1.81 MB emotion-release-bot
npm/@emotion/serialize@1.1.4 environment +4 98.5 kB emotion-release-bot
npm/@emotion/styled@11.11.5 environment Transitive: filesystem +10 1.26 MB emotion-release-bot
npm/@ethereumjs/common@2.6.5 None +1 2.84 MB holgerd77
npm/@ethereumjs/tx@3.5.2 None 0 431 kB holgerd77
npm/@ethereumjs/util@8.1.0 None +5 2.47 MB holgerd77
npm/@ethersproject/abi@5.7.0 None 0 498 kB ricmoo
npm/@ethersproject/abstract-provider@5.7.0 None 0 61 kB ricmoo
npm/@ethersproject/abstract-signer@5.7.0 None 0 82.2 kB ricmoo
npm/@ethersproject/address@5.7.0 None 0 33.1 kB ricmoo
npm/@ethersproject/base64@5.7.0 None 0 11.3 kB ricmoo
npm/@ethersproject/basex@5.7.0 None 0 30.1 kB ricmoo
npm/@ethersproject/bignumber@5.7.0 None 0 143 kB ricmoo
npm/@ethersproject/bytes@5.7.0 None 0 80.9 kB ricmoo
npm/@ethersproject/constants@5.7.0 None 0 18.7 kB ricmoo
npm/@ethersproject/hash@5.7.0 None 0 257 kB ricmoo
npm/@ethersproject/hdnode@5.7.0 None 0 80.7 kB ricmoo
npm/@ethersproject/json-wallets@5.7.0 None +1 2.56 MB ricmoo
npm/@ethersproject/keccak256@5.7.0 None 0 6.09 kB ricmoo
npm/@ethersproject/logger@5.7.0 None 0 69.5 kB ricmoo
npm/@ethersproject/networks@5.7.1 None 0 47.5 kB ricmoo
npm/@ethersproject/pbkdf2@5.7.0 None 0 17.4 kB ricmoo
npm/@ethersproject/properties@5.7.0 None 0 31 kB ricmoo
npm/@ethersproject/providers@5.7.2 network +1 1.32 MB ricmoo
npm/@ethersproject/random@5.7.0 None 0 17.3 kB ricmoo
npm/@ethersproject/rlp@5.7.0 None 0 29.6 kB ricmoo
npm/@ethersproject/sha2@5.7.0 None 0 21.7 kB ricmoo
npm/@ethersproject/signing-key@5.7.0 None 0 244 kB ricmoo
npm/@ethersproject/strings@5.7.0 None 0 119 kB ricmoo
npm/@ethersproject/transactions@5.7.0 None 0 89.6 kB ricmoo
npm/@ethersproject/web@5.7.1 network 0 128 kB ricmoo
npm/@ethersproject/wordlists@5.7.0 None 0 390 kB ricmoo
npm/@hapi/address@5.1.1 None +1 204 kB marsup
npm/@hapi/formula@3.0.2 None 0 17 kB marsup
npm/@hapi/pinpoint@2.0.1 None 0 3.67 kB marsup
npm/@hapi/tlds@1.0.2 None 0 94.2 kB marsup
npm/@jridgewell/gen-mapping@0.3.5 None 0 81.6 kB jridgewell
npm/@jridgewell/set-array@1.2.1 None 0 17.9 kB jridgewell
npm/@jridgewell/trace-mapping@0.3.25 None +1 224 kB jridgewell
npm/@lit-labs/ssr-dom-shim@1.1.2 environment 0 33.7 kB lit-robot
npm/@lit/reactive-element@1.6.3 None 0 788 kB lit-robot
npm/@metamask/json-rpc-engine@7.3.3 None 0 96.9 kB metamaskbot
npm/@metamask/rpc-errors@6.2.1 None 0 129 kB metamaskbot
npm/@metamask/safe-event-emitter@2.0.0 None 0 7.65 kB whymarrh
npm/@metamask/sdk-communication-layer@0.20.2 environment 0 3.04 MB metamaskbot
npm/@metamask/sdk-install-modal-web@0.20.2 None 0 548 kB metamaskbot
npm/@metamask/sdk@0.20.3 Transitive: environment, network +9 33 MB metamaskbot
npm/@metamask/utils@8.4.0 None +5 1.13 MB metamaskbot
npm/@motionone/animation@10.16.3 None +2 111 kB popmotion
npm/@motionone/dom@10.16.4 None +1 524 kB popmotion
npm/@motionone/types@10.16.3 None 0 11 kB popmotion
npm/@motionone/utils@10.16.3 None 0 33 kB popmotion
npm/@ngraveio/bc-ur@1.1.6 None +1 138 kB antwnic4
npm/@noble/curves@1.4.0 None 0 1.39 MB paulmillr
npm/@noble/hashes@1.4.0 None 0 773 kB paulmillr
npm/@noble/secp256k1@1.7.1 None 0 111 kB paulmillr
npm/@protobufjs/aspromise@1.1.2 None 0 9.05 kB dcode
npm/@ramp-network/ramp-instant-sdk@4.0.5 None 0 353 kB jakubsta
npm/@safe-global/safe-apps-provider@0.18.0 None 0 33 kB dasanra
npm/@safe-global/safe-apps-sdk@8.1.0 Transitive: network +1 249 kB dasanra
npm/@scure/base@1.1.3 None 0 77.8 kB paulmillr
npm/@scure/bip32@1.3.2 None 0 57.7 kB paulmillr
npm/@scure/bip39@1.2.1 None 0 357 kB paulmillr
npm/@shapeshiftoss/hdwallet-core@1.52.2 None +3 11.6 MB shapeshift-ci-bot
npm/@sindresorhus/is@4.6.0 None 0 57.5 kB sindresorhus
npm/@solana/buffer-layout@4.0.1 None 0 197 kB steveluscher
npm/@solana/web3.js@1.91.8 network +2 10.9 MB lorisleiva
npm/@tanstack/query-core@4.36.1 environment 0 2.28 MB tannerlinsley
npm/@tanstack/query-persist-client-core@4.36.1 environment 0 90.4 kB tannerlinsley
npm/@tanstack/query-sync-storage-persister@4.36.1 None 0 46.3 kB tannerlinsley
npm/@tanstack/react-query-persist-client@4.36.1 None 0 85.7 kB tannerlinsley
npm/@tanstack/react-query@4.36.1 environment 0 1.33 MB tannerlinsley
npm/@toruslabs/base-controllers@2.9.0 network +4 9.35 MB chaitanyapotti
npm/@toruslabs/eccrypto@2.2.1 None 0 47.9 kB chaitanyapotti
npm/@toruslabs/openlogin-jrpc@4.7.2 Transitive: environment +8 2.24 MB chaitanyapotti
npm/@types/bn.js@5.1.2 None 0 14.1 kB types
npm/@types/cacheable-request@6.0.3 None +3 30.1 kB types
npm/@types/connect@3.4.36 None 0 6.21 kB types
npm/@types/estree@1.0.2 None 0 25.7 kB types
npm/@types/express-serve-static-core@4.17.37 None +3 67.9 kB types
npm/@types/express@4.17.19 None +4 38.7 kB types
npm/@types/js-cookie@2.2.7 None 0 7.38 kB types
npm/@types/json-schema@7.0.13 None 0 32.2 kB types
npm/@types/lodash@4.14.199 None 0 863 kB types
npm/@types/mime@1.3.3 None 0 4.09 kB types
npm/@types/node@20.8.6 None 0 3.93 MB types
npm/@types/secp256k1@4.0.6 None 0 8.05 kB types
npm/@types/ws@7.4.7 None 0 18.9 kB types
npm/@usecapsule/user-management-client@0.18.0 network 0 76.8 kB nsquare
npm/@usecapsule/web-sdk@0.29.4 network Transitive: environment +29 52.8 MB vtig2020
npm/@venly/connect@2.5.0 network +1 1.26 MB venly_io
npm/@venly/web3-provider@3.5.3 network +6 1.57 MB venly_io
npm/@wagmi/connectors@3.1.11 Transitive: environment, eval, filesystem, network +47 54.4 MB awkweb
npm/@walletconnect/legacy-types@2.0.0 None 0 246 kB pedrouid
npm/@web3-onboard/arcana-auth@2.1.0-wagmi.2 None 0 20.3 kB cmeisl
npm/@web3-onboard/bitget@2.0.1 None +1 25.7 kB cmeisl
npm/@web3-onboard/blocto@2.1.0-wagmi.2 Transitive: network +1 425 kB cmeisl
npm/@web3-onboard/capsule@2.0.1 Transitive: environment +2 4.83 MB cmeisl
npm/@web3-onboard/cede-store@2.3.0-wagmi.2 None +7 1.13 MB cmeisl
npm/@web3-onboard/coinbase@2.3.0-wagmi.2 None 0 7.15 kB cmeisl
npm/@web3-onboard/common@2.4.0-wagmi.2 None +2 1.19 MB cmeisl
npm/@web3-onboard/core@2.22.0-wagmi.4 network +1 4.06 MB cmeisl
npm/@web3-onboard/dcent@2.2.7 network +2 2.65 MB cmeisl
npm/@web3-onboard/enkrypt@2.1.0-wagmi.2 None 0 6.66 kB cmeisl
npm/@web3-onboard/fortmatic@2.1.0-wagmi.2 None 0 7.68 kB cmeisl
npm/@web3-onboard/frame@2.1.0-wagmi.2 None 0 6.51 kB cmeisl
npm/@web3-onboard/frontier@2.1.0-wagmi.2 None 0 6.27 kB cmeisl
npm/@web3-onboard/gas@2.2.0-wagmi.2 None 0 9.01 kB cmeisl
npm/@web3-onboard/gnosis@2.3.0-wagmi.2 Transitive: network +1 98.1 kB cmeisl
npm/@web3-onboard/infinity-wallet@2.1.0-wagmi.2 Transitive: environment +3 136 kB cmeisl
npm/@web3-onboard/injected-wallets@2.11.0-wagmi.2 None 0 570 kB cmeisl
npm/@web3-onboard/keepkey@2.3.8 Transitive: environment, network +16 16 MB cmeisl
npm/@web3-onboard/keystone@2.3.8 Transitive: environment +9 6.4 MB cmeisl
npm/@web3-onboard/ledger@2.7.0-wagmi.2 Transitive: network +4 3.74 MB cmeisl
npm/@web3-onboard/magic@2.2.0-wagmi.2 None 0 66.7 kB cmeisl
npm/@web3-onboard/metamask@2.1.0-wagmi.2 None 0 14.9 kB cmeisl
npm/@web3-onboard/mew-wallet@2.1.0-wagmi.2 None 0 18 kB cmeisl
npm/@web3-onboard/particle-network@2.1.0-wagmi.2 Transitive: network +6 3.34 MB cmeisl
npm/@web3-onboard/passport@2.1.0-wagmi.2 Transitive: network +10 18.6 MB cmeisl
npm/@web3-onboard/phantom@2.1.0-wagmi.2 None 0 6.24 kB cmeisl
npm/@web3-onboard/portis@2.2.0-wagmi.2 Transitive: environment +4 999 kB cmeisl
npm/@web3-onboard/sequence@2.1.0-wagmi.2 Transitive: environment, network +17 3.29 MB cmeisl
npm/@web3-onboard/taho@2.1.0-wagmi.2 None 0 21.6 kB cmeisl
npm/@web3-onboard/torus@2.3.0-wagmi.2 Transitive: network +6 2.41 MB cmeisl
npm/@web3-onboard/transaction-preview@2.1.0-wagmi.2 None 0 95.5 kB cmeisl
npm/@web3-onboard/trezor@2.4.4 Transitive: environment, filesystem, network +30 8.48 MB cmeisl
npm/@web3-onboard/trust@2.1.0-wagmi.2 None 0 9.48 kB cmeisl
npm/@web3-onboard/uauth@2.2.0-wagmi.2 Transitive: filesystem, network +15 3.54 MB cmeisl
npm/@web3-onboard/venly@2.1.0-wagmi.2 None 0 7.25 kB cmeisl
npm/@web3-onboard/wagmi@2.0.0-wagmi.4 None +2 2.98 MB cmeisl
npm/@web3-onboard/walletconnect@2.6.0-wagmi.2 Transitive: environment, eval, network +34 22.8 MB cmeisl
npm/@web3-onboard/web3auth@2.3.0-wagmi.2 Transitive: environment, eval, network +55 82.6 MB cmeisl
npm/@web3-onboard/xdefi@2.1.0-wagmi.2 None 0 10 kB cmeisl
npm/@web3-onboard/zeal@2.1.0-wagmi.2 None 0 4.06 kB cmeisl
npm/@web3auth/base@5.2.0 None +3 5.26 MB chaitanyapotti
npm/@webassemblyjs/ast@1.11.6 None +5 341 kB xtuc
npm/@webassemblyjs/wasm-parser@1.11.6 None +7 329 kB xtuc
npm/accepts@1.3.8 None 0 16.8 kB dougwilson
npm/agent-base@6.0.2 None 0 34.6 kB tootallnate
npm/agentkeepalive@4.5.0 network 0 43.7 kB fengmk2
npm/anymatch@3.1.3 None 0 9.65 kB phated
npm/assert-plus@1.0.0 environment 0 11.4 kB pfmooney
npm/async@2.6.4 None 0 541 kB hargasinski
npm/base-x@3.0.9 None 0 9.35 kB junderw
npm/base64url@3.0.1 None 0 7.55 kB brianloveswords
npm/big-integer@1.6.51 None 0 164 kB peterolson
npm/bignumber.js@9.1.2 None 0 351 kB mikemcl
npm/bind-decorator@1.0.11 None 0 7.18 kB nohomey
npm/bindings@1.5.0 environment, filesystem 0 11.2 kB tootallnate
npm/bip32@2.0.6 None +1 599 kB junderw
npm/bip66@1.1.5 None 0 7.79 kB dcousens
npm/bitcoin-ops@1.4.1 None 0 4.38 kB dcousens
npm/blakejs@1.2.1 None 0 156 kB dcposch

🚮 Removed packages: npm/@babel/runtime@7.18.9, npm/@esbuild-plugins/node-globals-polyfill@0.2.3, npm/@esbuild-plugins/node-modules-polyfill@0.2.2, npm/@ethersproject/abi@5.5.0, npm/@ethersproject/abstract-provider@5.6.1, npm/@ethersproject/abstract-signer@5.6.2, npm/@ethersproject/address@5.6.1, npm/@ethersproject/base64@5.6.1, npm/@ethersproject/basex@5.6.1, npm/@ethersproject/bignumber@5.6.2, npm/@ethersproject/bytes@5.6.1, npm/@ethersproject/constants@5.6.1, npm/@ethersproject/hash@5.6.1, npm/@ethersproject/hdnode@5.5.0, npm/@ethersproject/json-wallets@5.5.0, npm/@ethersproject/keccak256@5.6.1, npm/@ethersproject/logger@5.6.0, npm/@ethersproject/networks@5.6.4, npm/@ethersproject/pbkdf2@5.5.0, npm/@ethersproject/properties@5.6.0, npm/@ethersproject/random@5.6.1, npm/@ethersproject/rlp@5.6.1, npm/@ethersproject/sha2@5.6.1, npm/@ethersproject/signing-key@5.6.2, npm/@ethersproject/strings@5.6.1, npm/@ethersproject/transactions@5.6.2, npm/@ethersproject/web@5.6.1, npm/@ethersproject/wordlists@5.5.0, npm/@fontsource/fira-mono@4.5.10, npm/@jridgewell/sourcemap-codec@1.4.14, npm/@ledgerhq/connect-kit-loader@1.1.0, npm/@lit-labs/ssr-dom-shim@1.1.1, npm/@lit/reactive-element@1.6.1, npm/@lit/reactive-element@1.6.2, npm/@rollup/plugin-commonjs@25.0.7, npm/@sveltejs/adapter-auto@1.0.0-next.91, npm/@sveltejs/kit@1.0.0-next.589, npm/@types/cookie@0.5.1, npm/@types/estree@1.0.0, npm/@typescript-eslint/eslint-plugin@5.49.0, npm/@typescript-eslint/parser@5.49.0, npm/@web3-onboard/core@2.21.6, npm/@web3-onboard/injected-wallets@2.10.1, npm/@web3-onboard/ledger@2.6.0, npm/@web3-onboard/react@2.8.17, npm/@web3-onboard/walletconnect@2.3.9, npm/array-includes@3.1.5, npm/bignumber.js@9.1.1, npm/browserify-aes@1.2.0, npm/browserify-rsa@4.1.0, npm/browserify-zlib@0.2.0, npm/buffer@6.0.3, npm/call-bind@1.0.2, npm/call-bind@1.0.7, npm/cipher-base@1.0.4, npm/create-hash@1.2.0, npm/create-hmac@1.1.7, npm/crypto-browserify@3.12.0, npm/d@1.0.1, npm/debug@4.3.4, npm/decode-uri-component@0.2.2, npm/deepmerge@4.3.0, npm/define-data-property@1.1.4, npm/define-properties@1.1.4, npm/define-properties@1.2.1, npm/es-abstract@1.20.1, npm/es5-ext@0.10.62, npm/es6-symbol@3.1.3, npm/eslint-config-next@12.2.3, npm/eslint-config-prettier@8.6.0, npm/eslint-plugin-svelte3@4.0.0, npm/eslint@8.20.0, npm/eslint@8.33.0, npm/estraverse@5.3.0, npm/estree-walker@2.0.2, npm/evp_bytestokey@1.0.3, npm/fast-glob@3.2.12, npm/get-intrinsic@1.1.2, npm/get-intrinsic@1.2.4, npm/glob@7.1.7, npm/has-bigints@1.0.2, npm/has-property-descriptors@1.0.2, npm/has-symbols@1.0.3, npm/has-tostringtag@1.0.2, npm/hash-base@3.0.4, npm/hash.js@1.1.7, npm/import-fresh@3.3.0, npm/inherits@2.0.4, npm/is-callable@1.2.4, npm/is-core-module@2.9.0, npm/is-glob@4.0.3, npm/is-string@1.0.7, npm/is-symbol@1.0.4, npm/is-typedarray@1.0.0, npm/jsx-ast-utils@3.3.2, npm/lit@2.7.6, npm/loose-envify@1.4.0, npm/merge2@1.4.1, npm/minimalistic-assert@1.0.1, npm/minimatch@3.1.2, npm/minimist@1.2.6, npm/minimist@1.2.7, npm/ms@2.1.2, npm/next-tick@1.1.0, npm/next@12.2.4, npm/normalize-path@3.0.0, npm/object-inspect@1.12.2, npm/once@1.4.0, npm/react@18.2.0, npm/regexp.prototype.flags@1.4.3, npm/resolve@1.22.1, npm/rxjs@7.5.6, npm/safe-buffer@5.2.1, npm/string-width@4.2.3, npm/strip-ansi@6.0.1, npm/strip-json-comments@3.1.1, npm/tslib@1.14.1, npm/type-check@0.4.0, npm/uint8arrays@3.1.1, npm/valtio@1.11.0

View full report↗︎

socket-security[bot] commented 1 month ago

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/protobufjs@7.2.4
  • Install script: postinstall
  • Source: node scripts/postinstall
Install scripts npm/bigint-buffer@1.1.5
  • Install script: install
  • Source: npm run rebuild || echo "Couldn't build bindings. Non-native version used."
Install scripts npm/keccak@1.4.0
  • Install script: install
  • Source: npm run rebuild || echo "Keccak bindings compilation fail. Pure JS implementation will be used."

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/protobufjs@7.2.4
  • @SocketSecurity ignore npm/bigint-buffer@1.1.5
  • @SocketSecurity ignore npm/keccak@1.4.0