search

rails / webpacker

Use Webpack to manage app-like JavaScript modules in Rails
MIT License
5.31k stars 1.47k forks source link

chore(deps): Included dependency review #3286

Closed naveensrinivasan closed 2 years ago

naveensrinivasan commented 2 years ago

Dependency Review GitHub Action in your repository to enforce dependency reviews on your pull requests. The action scans for vulnerable versions of dependencies introduced by package version changes in pull requests, and warns you about the associated security vulnerabilities. This gives you better visibility of what's changing in a pull request, and helps prevent vulnerabilities being added to your repository.

https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review#dependency-review-enforcement Signed-off-by: naveen 172697+naveensrinivasan@users.noreply.github.com

rafaelfranca commented 2 years ago

Thank you for the pull request but this gem is deprecated, so there is no active development happening on it. That said, I don't think we need new checks.