Closed domjtalbot closed 1 year ago
Latest commit: e0192d957e3f39a54043983b000a766f7ad48f3c
The changes in this PR will be included in the next version bump.
Not sure what this means? Click here to learn what changesets are.
Click here if you're a maintainer who wants to add another changeset to this PR
CI is running/has finished running commands for commit e0192d957e3f39a54043983b000a766f7ad48f3c. As they complete they will appear below. Click to see the status, the terminal output, and the build insights.
📂 See all runs for this branch
Sent with 💌 from NxCloud.
Dependency issues detected: If you merge this pull request, you will not be alerted to the instances of these issues again.
Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.
Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.
Package | Script field | Source |
---|---|---|
cypress@12.7.0 (upgraded) | postinstall |
package.json , pnpm-lock.yaml via , packages/nx-mesh/package.json via @nrwl/cypress@15.8.5 |
core-js@3.29.0 (upgraded) | postinstall |
package.json , pnpm-lock.yaml |
nx@15.8.5 (upgraded) | postinstall |
pnpm-lock.yaml , packages/nx-mesh/package.json via @nrwl/cypress@15.8.5, @nrwl/js@15.8.5, @nrwl/linter@15.8.5, @nrwl/node@15.8.5, @nrwl/workspace@15.8.5 |
nx@15.8.6 (upgraded) | postinstall |
packages/nx-mesh/package.json |
Issue | Status |
---|---|
Install scripts | ⚠️ 4 issues |
Native code | ✅ 0 issues |
Bin script shell injection | ✅ 0 issues |
Unresolved require | ✅ 0 issues |
Invalid package.json | ✅ 0 issues |
HTTP dependency | ✅ 0 issues |
Git dependency | ✅ 0 issues |
Potential typo squat | ✅ 0 issues |
Known Malware | ✅ 0 issues |
Telemetry | ✅ 0 issues |
Protestware/Troll package | ✅ 0 issues |
To ignore an alert, reply with a comment starting with @SocketSecurity ignore
followed by a space separated list of package-name@version
specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@*
or ignore all packages with @SocketSecurity ignore-all
@SocketSecurity ignore cypress@12.7.0
@SocketSecurity ignore core-js@3.29.0
@SocketSecurity ignore nx@15.8.5
@SocketSecurity ignore nx@15.8.6
Powered by socket.dev
Code Climate has analyzed commit e0192d95 and detected 4 issues on this pull request.
Here's the issue category breakdown:
Category | Count |
---|---|
Duplication | 4 |
View more on Code Climate.
SonarCloud Quality Gate failed.
This pull request has been deployed to Vercel.
Latest commit: | e0192d9 |
✅ Preview: | https://nx-mesh-rd5597d18-domjtalbot.vercel.app |
🔍 Inspect: | https://vercel.com/domjtalbot/nx-mesh/5RbLFgYsWuYiJydcc9T7js3CDm61 |
What's Changed?
nx
to15.7.2