clams-tech / Remote

Remote control your Core Lightning node
https://remote.clams.tech
GNU General Public License v3.0
43 stars 7 forks source link

Release 0.1.0 #24

Closed lnbc1QWFyb24 closed 2 years ago

socket-security[bot] commented 2 years ago

Socket Security Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 New install scripts detected

A dependency change in this PR is introducing new install scripts to your install step.

Package Script field Location
secp256k1@4.0.3 (added) binding.gyp package.json via lnmessage@0.0.5
secp256k1@4.0.3 (added) install package.json via lnmessage@0.0.5
core-js@3.25.5 (added) postinstall package.json via vconsole@3.14.7
🫣 Native code

Contains native code which could be a vector to obscure malicious code, and generally decrease the likelihood of reproducible or reliable installs.

Package Location
secp256k1@4.0.3 (added) package.json via lnmessage@0.0.5
Socket.dev scan summary
Issue Status
Did you mean? ✅ no new possible package typos
Install scripts ⚠️ 3 new install scripts detected
Telemetry ✅ no new telemetry
Troll package ✅ no new troll packages
Malware ✅ no new malware
Native code ⚠️ 1 new native module detected
Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2

  • @SocketSecurity ignore secp256k1@4.0.3
  • @SocketSecurity ignore core-js@3.25.5

Powered by socket.dev