search

technologiestiftung / giessdenkiez-de-dwd-harvester

Gather precipitation data from DWD's radolan data set, for the region of Berlin and connect to the trees DB
https://www.giessdenkiez.de
MIT License
4 stars 9 forks source link

ci(release): semantic release bot and minor fixes related to supabase #68

Closed ff6347 closed 1 year ago

ff6347 commented 1 year ago

fixes (hopefully) test runs of actions

socket-security[bot] commented 1 year ago

Socket Security Pull Request Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack

Consider removing one of the conflicting packages. Packages should only export bin scripts with their name

Package Bin script Source
npm@8.19.3 (added) rimraf package-lock.json via @saithodev/semantic-release-backmerge@2.1.3, @technologiestiftung/semantic-release-config@1.2.0
rimraf@3.0.2 (added) rimraf package-lock.json via @saithodev/semantic-release-backmerge@2.1.3, @technologiestiftung/semantic-release-config@1.2.0
npm@8.19.3 (added) semver package-lock.json via @saithodev/semantic-release-backmerge@2.1.3, @technologiestiftung/semantic-release-config@1.2.0
semver@5.7.1 (added) semver package-lock.json via @saithodev/semantic-release-backmerge@2.1.3, @technologiestiftung/semantic-release-config@1.2.0
semver@6.3.0 (added) semver package-lock.json via @saithodev/semantic-release-backmerge@2.1.3, @technologiestiftung/semantic-release-config@1.2.0
semver@7.3.8 (added) semver package-lock.json via @saithodev/semantic-release-backmerge@2.1.3, @technologiestiftung/semantic-release-config@1.2.0
npm@8.19.3 (added) node-which package-lock.json via @saithodev/semantic-release-backmerge@2.1.3, @technologiestiftung/semantic-release-config@1.2.0
which@2.0.2 (added) node-which package-lock.json via @saithodev/semantic-release-backmerge@2.1.3, @technologiestiftung/semantic-release-config@1.2.0
Pull request report summary
Issue Status
Install scripts ✅ 0 issues
Native code ✅ 0 issues
Bin script confusion ⚠️ 8 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ✅ 0 issues
Protestware/Troll package ✅ 0 issues
Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2

  • @SocketSecurity ignore npm@8.19.3
  • @SocketSecurity ignore rimraf@3.0.2
  • @SocketSecurity ignore semver@5.7.1
  • @SocketSecurity ignore semver@6.3.0
  • @SocketSecurity ignore semver@7.3.8

Powered by socket.dev