Open stvansolano opened 2 years ago
Please review this PR, can't upgrade to the latest version as they are not compatible
New dependency changes detected. Learn more about Socket for GitHub ↗︎
👍 No new dependency issues detected in pull request
To ignore an alert, reply with a comment starting with @SocketSecurity ignore
followed by a space separated list of package-name@version
specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@*
or ignore all packages with @SocketSecurity ignore-all
Issue | Status |
---|---|
Install scripts | ✅ 0 issues |
Native code | ✅ 0 issues |
Bin script confusion | ✅ 0 issues |
Bin script shell injection | ✅ 0 issues |
Shell access | ✅ 0 issues |
Uses eval | ✅ 0 issues |
Unresolved require | ✅ 0 issues |
Invalid package.json | ✅ 0 issues |
HTTP dependency | ✅ 0 issues |
Git dependency | ✅ 0 issues |
GitHub dependency | ✅ 0 issues |
New author | ✅ 0 issues |
Potential typo squat | ✅ 0 issues |
Known Malware | ✅ 0 issues |
Telemetry | ✅ 0 issues |
Protestware/Troll package | ✅ 0 issues |
📊 Modified Dependency Overview:
⬆️ Updated Package | Version Diff | Added Capability Access | +/- Transitive Count |
Publisher |
---|---|---|---|---|
marked@4.3.0 | 1.2.3...4.3.0 | None | +0/-0 |
tonybrix |
@stvansolano please make yarn test
pass
Fixes Inefficient Regular Expression Complexity already fixed in
marked
library https://github.com/advisories/GHSA-5v2h-r2cx-5xgjCC @jimmyandrade @christianalfoni @ndelangen @hypnosphi