mojaloop / project

Repo to track product development issues for the Mojaloop project.
Other
22 stars 15 forks source link

Quality improvements on beneficiary-registration-portal-frontend #3925

Closed PaulGregoryBaker closed 4 days ago

PaulGregoryBaker commented 1 month ago

Goal:

As a Community member interested in the G2P usecase that leverages MOSIP to manage personal payment aliases I want to quality software assets so that I can make use for and confidently modify the software

Acceptance Criteria:

licence-scanner error: https://app.circleci.com/pipelines/github/mojaloop/beneficiary-management-system-svc/2/workflows/fa306d87-54d4-4761-8ac0-2a3d4fcd47ba/jobs/15

Allowing only the following licenses: AFLv2.1;Apache License, Version 2.0;Apache*;Apache-2.0;Apache 2.0;BlueOak-1.0.0;BSD;BSD*;BSD-2-Clause;BSD-3-Clause;BSD-3-Clause-Clear;CC-BY-3.0;CC-BY-4.0;CC0-1.0;ISC;MIT;MIT*;Public Domain;Python-2.0;UNLICENSED;Unlicense;Unlicensed;WTFPL;(BSD-2-Clause OR MIT OR Apache-2.0);(MIT OR Apache-2.0);(MIT OR CC0-1.0);(Unlicense OR Apache-2.0);WTFPL OR ISC;(WTFPL OR MIT)

Package "axe-core@4.7.0" is licensed under "MPL-2.0" which is not permitted by the --onlyAllow flag. Exiting.
make: *** [Makefile:49: run] Error 1

What should be done to fix it: Identify which UI package is using axe-core@4.7.0, and try to remove/update it. I think, @James Simbi is able to do it.

Complexity: <High|Medium|Low> > A short comment to remind the reason for the rating

Uncertainty: <High|Medium|Low> > A short comment to remind the reason for the rating


Tasks:

New Issues

Done

Pull Requests:

Follow-up:

Dependencies:

Accountability:

elijah0kello commented 1 week ago

Here is a link to the latest run and it passes for license checks but fails on linting and vulnerability checks.

I need some advice on how to fix these vulnerability checks.

https://app.circleci.com/pipelines/github/mojaloop/beneficiary-registration-portal-frontend/13/workflows/fa5f4394-670d-49a6-819c-193f1c987a7c

elijah0kello commented 4 days ago

PR Merged

https://github.com/mojaloop/beneficiary-registration-portal-frontend/pull/3