socket-security[bot]
commented
1 year ago Socket Security Pull Request Report
Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.
📜 Install scripts
Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.
Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.
Pull request report summary
| Issue | Status |
|---|---|
| Install scripts | ⚠️ 2 issues |
| Native code | ✅ 0 issues |
| Bin script confusion | ✅ 0 issues |
| Bin script shell injection | ✅ 0 issues |
| Unresolved require | ✅ 0 issues |
| Invalid package.json | ✅ 0 issues |
| HTTP dependency | ✅ 0 issues |
| Git dependency | ✅ 0 issues |
| Potential typo squat | ✅ 0 issues |
| Known Malware | ✅ 0 issues |
| Telemetry | ✅ 0 issues |
| Protestware/Troll package | ✅ 0 issues |
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2
@SocketSecurity ignore near-sdk-js@0.7.0
Powered by socket.dev
renovate[bot]
This PR contains the following updates:
0.6.0->0.7.0Release Notes
near/near-sdk-js
### [`v0.7.0`](https://togithub.com/near/near-sdk-js/releases/tag/v0.7.0) [Compare Source](https://togithub.com/near/near-sdk-js/compare/v0.6.0...v0.7.0) ##### Highlights - Docstrings are now available on every public APIs. - Support of WSL 2. You can now develop with near-sdk-js on Windows! Check README for recipes. - ABI support is added on CLI! - CLI enhancement: flexible build commands are added! - Starting from this version, near-contract-standards is released together with near-sdk-js! - UTF-8 support is added. You can now store and retrieve UTF-8 strings in storage and collections. - The confusing Bytes types is dropped. It is replaced with string and Uint8Array. - Storage/Input/ValueReturn API now comes with both raw version and string version. The raw version will help you efficiently handle raw bytes in Uint8Array. - Refactor: starting from this version, near-sdk-js becomes a monorepo with a number of enhancement for contributors. - Refactor: Optimized exports. - An migration guide from v0.6.0 is added in README. ##### What's Changed - v0.6.0 by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/275](https://togithub.com/near/near-sdk-js/pull/275) - deps dir management moved to post-install script by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/276](https://togithub.com/near/near-sdk-js/pull/276) - TSC error suppression for latest versions by [@vunderkind](https://togithub.com/vunderkind) in [https://github.com/near/near-sdk-js/pull/272](https://togithub.com/near/near-sdk-js/pull/272) - cli chmod hack deleted by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/277](https://togithub.com/near/near-sdk-js/pull/277) - patch(cli): fix typo by [@waynenilsen](https://togithub.com/waynenilsen) in [https://github.com/near/near-sdk-js/pull/282](https://togithub.com/near/near-sdk-js/pull/282) - NFT standard by [@ailisp](https://togithub.com/ailisp) in [https://github.com/near/near-sdk-js/pull/177](https://togithub.com/near/near-sdk-js/pull/177) - cli bash replaced with node by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/285](https://togithub.com/near/near-sdk-js/pull/285) - quick js v0.1.3 by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/279](https://togithub.com/near/near-sdk-js/pull/279) - ts-morph to deps by [@idea404](https://togithub.com/idea404) in [https://github.com/near/near-sdk-js/pull/292](https://togithub.com/near/near-sdk-js/pull/292) - standarts import paths fixed by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/293](https://togithub.com/near/near-sdk-js/pull/293) - Test cross contract call failures and error handling by [@ailisp](https://togithub.com/ailisp) in [https://github.com/near/near-sdk-js/pull/294](https://togithub.com/near/near-sdk-js/pull/294) - WSL2 instructions by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/295](https://togithub.com/near/near-sdk-js/pull/295) - Added a warning until we can get the runtime audited by [@DavidM-D](https://togithub.com/DavidM-D) in [https://github.com/near/near-sdk-js/pull/298](https://togithub.com/near/near-sdk-js/pull/298) - Exports and import paths by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/299](https://togithub.com/near/near-sdk-js/pull/299) - feat(cli): new subcommands by [@waynenilsen](https://togithub.com/waynenilsen) in [https://github.com/near/near-sdk-js/pull/283](https://togithub.com/near/near-sdk-js/pull/283) - NFT standard refund account storage based on actual size by [@ailisp](https://togithub.com/ailisp) in [https://github.com/near/near-sdk-js/pull/300](https://togithub.com/near/near-sdk-js/pull/300) - \[bugfix] display stderr on command failure by [@DerekTBrown](https://togithub.com/DerekTBrown) in [https://github.com/near/near-sdk-js/pull/303](https://togithub.com/near/near-sdk-js/pull/303) - Example of programmatic update of JS Smart Contract by [@nsejim](https://togithub.com/nsejim) in [https://github.com/near/near-sdk-js/pull/287](https://togithub.com/near/near-sdk-js/pull/287) - add remaining doc strings by [@ailisp](https://togithub.com/ailisp) in [https://github.com/near/near-sdk-js/pull/305](https://togithub.com/near/near-sdk-js/pull/305) - Include Example and Test for Promises Created in For Loops by [@idea404](https://togithub.com/idea404) in [https://github.com/near/near-sdk-js/pull/309](https://togithub.com/near/near-sdk-js/pull/309) - fix: Fix logging by [@petarvujovic98](https://togithub.com/petarvujovic98) in [https://github.com/near/near-sdk-js/pull/311](https://togithub.com/near/near-sdk-js/pull/311) - Use TS ? to replace option in nft standard interface by [@ailisp](https://togithub.com/ailisp) in [https://github.com/near/near-sdk-js/pull/304](https://togithub.com/near/near-sdk-js/pull/304) - Exports refactored by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/313](https://togithub.com/near/near-sdk-js/pull/313) - ABI generation by [@itegulov](https://togithub.com/itegulov) in [https://github.com/near/near-sdk-js/pull/301](https://togithub.com/near/near-sdk-js/pull/301) - pnpm by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/317](https://togithub.com/near/near-sdk-js/pull/317) - fix: ensure that NEAR functions have explicit types by [@itegulov](https://togithub.com/itegulov) in [https://github.com/near/near-sdk-js/pull/322](https://togithub.com/near/near-sdk-js/pull/322) - Separate tests replased with one script in examples CI by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/318](https://togithub.com/near/near-sdk-js/pull/318) - Monorepo implemented with Turborepo by [@volovyks](https://togithub.com/volovyks) in [https://github.com/near/near-sdk-js/pull/323](https://togithub.com/near/near-sdk-js/pull/323) - Use uint8array by [@ailisp](https://togithub.com/ailisp) in [https://github.com/near/near-sdk-js/pull/308](https://togithub.com/near/near-sdk-js/pull/308) - move IntoStorageKey alike feature to lib by [@ailisp](https://togithub.com/ailisp) in [https://github.com/near/near-sdk-js/pull/329](https://togithub.com/near/near-sdk-js/pull/329) - 0.7 release by [@ailisp](https://togithub.com/ailisp) in [https://github.com/near/near-sdk-js/pull/332](https://togithub.com/near/near-sdk-js/pull/332) ##### New Contributors - [@vunderkind](https://togithub.com/vunderkind) made their first contribution in [https://github.com/near/near-sdk-js/pull/272](https://togithub.com/near/near-sdk-js/pull/272) - [@waynenilsen](https://togithub.com/waynenilsen) made their first contribution in [https://github.com/near/near-sdk-js/pull/282](https://togithub.com/near/near-sdk-js/pull/282) - [@DavidM-D](https://togithub.com/DavidM-D) made their first contribution in [https://github.com/near/near-sdk-js/pull/298](https://togithub.com/near/near-sdk-js/pull/298) - [@DerekTBrown](https://togithub.com/DerekTBrown) made their first contribution in [https://github.com/near/near-sdk-js/pull/303](https://togithub.com/near/near-sdk-js/pull/303) - [@nsejim](https://togithub.com/nsejim) made their first contribution in [https://github.com/near/near-sdk-js/pull/287](https://togithub.com/near/near-sdk-js/pull/287) **Full Changelog**: https://github.com/near/near-sdk-js/compare/v0.6.0...v0.7.0Configuration
📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.