Closed wumpus closed 2 weeks ago
Done. All alerts stemmed from transitive dependencies of Hadoop and should be addressed by the next upgrade of the Hadoop dependency together with an upgrade of the Hadoop version installed on the instances of the Hadoop cluster.
confused by the relationship between this repo and https://github.com/iipc/webarchive-commons
iipc/webarchive-commons is the upstream repository. This repo is a fork of Aloisius/ia-web-commons, forked from internetarchive/webarchive-commons, forked from iipc/webarchive-commons.
There are quite a few now:
https://github.com/commoncrawl/ia-web-commons/security/dependabot
Also I am confused by the relationship between this repo and https://github.com/iipc/webarchive-commons
Assigning to @sebastian-nagel for triage