search

motiondivision / motionone

https://motion.dev
MIT License
2.95k stars 52 forks source link

Missing source code reference in NPM package #245

Open hubofgitongithub opened 9 months ago

hubofgitongithub commented 9 months ago

Please see: https://snyk.io/advisor/npm-package/@motionone/animation And: https://www.npmjs.com/package/@motionone/animation

Our internal security scanning tool triggers on missing source code URL reference for all the motion one packages (animation, dom, easing, etc.)

I believe you can fix this by adding the following to the package.json's:

"repository": {
    "type": "git",
    "url": "https://github.com/XXX",
    "directory": "packages/XXX"
  },

Also see: https://docs.npmjs.com/cli/v10/configuring-npm/package-json#repository