Closed mixmix closed 1 year ago
New dependency changes detected. Learn more about Socket for GitHub ↗︎
👍 No new dependency issues detected in pull request
To ignore an alert, reply with a comment starting with @SocketSecurity ignore
followed by a space separated list of package-name@version
specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@*
or ignore all packages with @SocketSecurity ignore-all
Issue | Status |
---|---|
Install scripts | ✅ 0 issues |
Native code | ✅ 0 issues |
Bin script shell injection | ✅ 0 issues |
Unresolved require | ✅ 0 issues |
Invalid package.json | ✅ 0 issues |
HTTP dependency | ✅ 0 issues |
Git dependency | ✅ 0 issues |
Deprecated license | ✅ 0 issues |
Missing license | ✅ 0 issues |
Potential typo squat | ✅ 0 issues |
Known Malware | ✅ 0 issues |
Telemetry | ✅ 0 issues |
Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
🚮 Removed packages: lodash.get@4.4.2, lodash.uniqby@4.7.0
I'm working on splitting this PR out into some parts
This PR:
pull-defer
as a tidier pattern for the "I need to async then I stream" problemmulticb
in favour of just using pull-streamslodash.uniqby
replaced bypull.unique()
when set up rightlodash.get
removed as we know we can rely on fields if passedpull.filter(isAddMember)
adds aisGroup
operator for faster querying of messages-by-grouptested!master
already in another PR