rooch-network / rooch

VApp Container with Move Language for Bitcoin ecosystem
https://rooch.network
Apache License 2.0
158 stars 83 forks source link

fix: portal bitcoin assets compatibility #2544

Closed jojoo-eth closed 4 weeks ago

jojoo-eth commented 4 weeks ago

Summary

[Summary about this PR](fix: portal bitcoin assets compatibility)

vercel[bot] commented 4 weeks ago

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
rooch-portal ✅ Ready (Inspect) Visit Preview 💬 Add feedback Aug 30, 2024 4:17pm
rooch-portal-v2.1 ✅ Ready (Inspect) Visit Preview 💬 Add feedback Aug 30, 2024 4:17pm
1 Skipped Deployment | Name | Status | Preview | Comments | Updated (UTC) | | :--- | :----- | :------ | :------- | :------ | | **rooch** | ⬜️ Ignored ([Inspect](https://vercel.com/rooch/rooch/FCt5PZbtcgHWC3ojjKaqeyihvna6)) | [Visit Preview](https://rooch-git-fix-assets-bitcoin-parse-rooch.vercel.app) | | Aug 30, 2024 4:17pm |
github-actions[bot] commented 4 weeks ago

Dependency Review

The following issues were found:

See the Details below.

License Issues

infra/rooch-portal-v2/package.json

PackageVersionLicenseIssue Type
dompurify^3.1.6NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@types/dompurify ^3.0.5 :green_circle: 6.9
Details
CheckScoreReason
Code-Review:green_circle: 8Found 23/27 approved changesets -- score normalized to 8
Maintained:green_circle: 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 9license file detected
Signed-Releases:warning: -1no releases found
Branch-Protection:warning: -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging:warning: -1packaging workflow not detected
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Security-Policy:green_circle: 10security policy file detected
Vulnerabilities:green_circle: 100 existing vulnerabilities detected
SAST:warning: 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts:green_circle: 10no binaries found in the repo
Pinned-Dependencies:green_circle: 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing:warning: 0project is not fuzzed
npm/dompurify ^3.1.6 :green_circle: 6.1
Details
CheckScoreReason
Code-Review:green_circle: 7Found 7/10 approved changesets -- score normalized to 7
Maintained:green_circle: 1023 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices:warning: 0no effort to earn an OpenSSF best practices badge detected
License:green_circle: 9license file detected
Signed-Releases:warning: -1no releases found
Dangerous-Workflow:green_circle: 10no dangerous workflow patterns detected
Security-Policy:green_circle: 10security policy file detected
Binary-Artifacts:green_circle: 10no binaries found in the repo
Token-Permissions:warning: 0detected GitHub workflow tokens with excessive permissions
Packaging:warning: -1packaging workflow not detected
Pinned-Dependencies:green_circle: 3dependency not pinned by hash detected -- score normalized to 3
Fuzzing:warning: 0project is not fuzzed
Branch-Protection:warning: 0branch protection not enabled on development/release branches
SAST:green_circle: 10SAST tool is run on all commits
Vulnerabilities:green_circle: 64 existing vulnerabilities detected

Scanned Manifest Files

infra/rooch-portal-v2/package.json
  • @types/dompurify@^3.0.5
  • dompurify@^3.1.6