Closed JReinhold closed 1 year ago
New dependency changes detected. Learn more about Socket for GitHub ↗︎
🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.
To ignore an alert, reply with a comment starting with @SocketSecurity ignore
followed by a space separated list of package-name@version
specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@*
or ignore all packages with @SocketSecurity ignore-all
@SocketSecurity ignore @auto-it/core@10.43.0
@SocketSecurity ignore @auto-it/npm@10.43.0
@SocketSecurity ignore @aw-web-design/x-default-browser@1.4.88
@SocketSecurity ignore @expo/cli@0.6.2
@SocketSecurity ignore @expo/dev-server@0.2.3
@SocketSecurity ignore @expo/devcert@1.1.0
@SocketSecurity ignore @expo/package-manager@1.0.1
@SocketSecurity ignore @react-native-community/cli@10.2.2
@SocketSecurity ignore @react-native-community/cli-platform-ios@10.2.1
@SocketSecurity ignore babel-plugin-istanbul@6.1.1
@SocketSecurity ignore better-opn@3.0.2
@SocketSecurity ignore command-exists@1.2.9
@SocketSecurity ignore commander@2.13.0
@SocketSecurity ignore commander@2.20.3
@SocketSecurity ignore commander@7.2.0
@SocketSecurity ignore commander@9.5.0
@SocketSecurity ignore cross-spawn@7.0.3
@SocketSecurity ignore envinfo@7.8.1
@SocketSecurity ignore esbuild@0.17.14
@SocketSecurity ignore exec-async@2.2.0
@SocketSecurity ignore execa@5.1.1
@SocketSecurity ignore fb-watchman@2.0.2
@SocketSecurity ignore gitlog@4.0.4
@SocketSecurity ignore jake@10.8.5
@SocketSecurity ignore jest-haste-map@28.1.3
@SocketSecurity ignore jest-worker@27.5.1
@SocketSecurity ignore jscodeshift@0.14.0
@SocketSecurity ignore logkitty@0.7.1
@SocketSecurity ignore metro-file-map@0.73.9
@SocketSecurity ignore open@8.4.2
@SocketSecurity ignore osenv@0.1.5
@SocketSecurity ignore ps-tree@1.2.0
@SocketSecurity ignore requireg@0.2.2
@SocketSecurity ignore shelljs@0.8.5
@SocketSecurity ignore sudo-prompt@8.2.5
@SocketSecurity ignore sudo-prompt@9.1.1
@SocketSecurity ignore sudo-prompt@9.2.1
@SocketSecurity ignore temp@0.8.3
@SocketSecurity ignore tree-kill@1.2.2
@SocketSecurity ignore ts-node@10.9.1
@SocketSecurity ignore typescript@4.9.5
@SocketSecurity ignore update-browserslist-db@1.0.10
@SocketSecurity ignore xcode@3.0.1
@SocketSecurity ignore @yarnpkg/lockfile@1.1.0
@SocketSecurity ignore ajv@8.12.0
@SocketSecurity ignore depd@2.0.0
@SocketSecurity ignore ejs@3.1.9
@SocketSecurity ignore handlebars@4.7.7
@SocketSecurity ignore is-callable@1.2.7
@SocketSecurity ignore jest-diff@27.5.1
This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.
Thanks @JReinhold 🙏
Two of the stories seems to be 1px higher than the baseline in Chromatic? 😵💫
This PR does a few things to the
package.json
. I don't know much about this addon, but I did ensure that thebuild
andbuild-storybook
script still worked, and that all the stories afterstart
worked as expected.@storybook/addons
so it would be nice to clean them up. But maybe I'm missing some aspect here?7.0.0
.start
script by removing the removed--no-manager-cache
flag.storybook
📦 Published PR as canary version:
0.0.20--canary.58.da0bae1.0
:sparkles: Test out this PR locally via: ```bash npm install @storybook/addon-react-native-web@0.0.20--canary.58.da0bae1.0 # or yarn add @storybook/addon-react-native-web@0.0.20--canary.58.da0bae1.0 ```