socket-security[bot]
commented
1 year ago Socket Security Pull Request Report
Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.
š Install scripts
Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.
Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.
| Package | Script field | Location |
|---|---|---|
| es5-ext@0.10.62 (added) | postinstall |
package.json via @supabase/supabase-js@2.0.5, @supabase/realtime-js@2.1.0, websocket@1.0.34 |
Pull request report summary
| Issue | Status |
|---|---|
| Install scripts | ā ļø 1 issue |
| Native code | ā 0 issues |
| Bin script confusion | ā 0 issues |
| Bin script shell injection | ā 0 issues |
| Unresolved require | ā 0 issues |
| Invalid package.json | ā 0 issues |
| HTTP dependency | ā 0 issues |
| Git dependency | ā 0 issues |
| Non-existent author | ā 0 issues |
| Potential typo squat | ā 0 issues |
| Known Malware | ā 0 issues |
| Telemetry | ā 0 issues |
| Protestware/Troll package | ā 0 issues |
Bot Commands
To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2
@SocketSecurity ignore es5-ext@0.10.62
Powered by socket.dev
This PR contains the following updates:
2.0.0->2.0.529.1.2->29.2.25.40.0->5.42.05.40.0->5.42.08.25.0->8.27.029.2.0->29.2.2Release Notes
supabase/supabase-js
### [`v2.0.5`](https://togithub.com/supabase/supabase-js/releases/tag/v2.0.5) [Compare Source](https://togithub.com/supabase/supabase-js/compare/v2.0.4...v2.0.5) ##### Bug Fixes - bump gotrue-js version ([#618](https://togithub.com/supabase/supabase-js/issues/618)) ([a46e823](https://togithub.com/supabase/supabase-js/commit/a46e823e670f6a494448925645787b7e78d2d1e6)) ### [`v2.0.4`](https://togithub.com/supabase/supabase-js/releases/tag/v2.0.4) [Compare Source](https://togithub.com/supabase/supabase-js/compare/v2.0.3...v2.0.4) ##### Bug Fixes - bump gotrue version ([8f6bc0e](https://togithub.com/supabase/supabase-js/commit/8f6bc0e878cc884fb9f18852c1b0298f80f9f91b)) ### [`v2.0.3`](https://togithub.com/supabase/supabase-js/releases/tag/v2.0.3) [Compare Source](https://togithub.com/supabase/supabase-js/compare/v2.0.2...v2.0.3) ##### Bug Fixes - bump version ([3c666f3](https://togithub.com/supabase/supabase-js/commit/3c666f3abc502b867c234fab4bf92a5c3d8ae2c8)) ### [`v2.0.2`](https://togithub.com/supabase/supabase-js/releases/tag/v2.0.2) [Compare Source](https://togithub.com/supabase/supabase-js/compare/v2.0.1...v2.0.2) ##### Bug Fixes - **deps:** bump postgrest-js ([3bd2e8e](https://togithub.com/supabase/supabase-js/commit/3bd2e8e76e49d8de498073545faaffd2b62ea7e5)) ### [`v2.0.1`](https://togithub.com/supabase/supabase-js/releases/tag/v2.0.1) [Compare Source](https://togithub.com/supabase/supabase-js/compare/v2.0.0...v2.0.1) ##### Bug Fixes - upgrade realtime-js to v2.1.0 to fix PG change types ([9bb27f3](https://togithub.com/supabase/supabase-js/commit/9bb27f3385a0a9017e5f1a61e694014bb791c6aa))typescript-eslint/typescript-eslint (@typescript-eslint/eslint-plugin)
### [`v5.42.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#5420-httpsgithubcomtypescript-eslinttypescript-eslintcomparev5410v5420-2022-10-31) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v5.41.0...v5.42.0) ##### Bug Fixes - **ast-spec:** add TSQualifiedName to TypeNode union ([#5906](https://togithub.com/typescript-eslint/typescript-eslint/issues/5906)) ([5c316c1](https://togithub.com/typescript-eslint/typescript-eslint/commit/5c316c12f09d58aee6ee634a8055533f361f1589)) - **eslint-plugin:** \[no-extra-parens] handle type assertion in extends clause ([#5901](https://togithub.com/typescript-eslint/typescript-eslint/issues/5901)) ([8ed7219](https://togithub.com/typescript-eslint/typescript-eslint/commit/8ed72192c274249d26628fb125796e71318b857a)) ##### Features - **eslint-plugin:** \[member-ordering] add natural sort order ([#5662](https://togithub.com/typescript-eslint/typescript-eslint/issues/5662)) ([1eaae09](https://togithub.com/typescript-eslint/typescript-eslint/commit/1eaae09ecca359f366b94f6a04665403f48b05c7)) - **eslint-plugin:** \[no-invalid-void-type] better report message for void used as a constituent inside a function return type ([#5274](https://togithub.com/typescript-eslint/typescript-eslint/issues/5274)) ([d806bda](https://togithub.com/typescript-eslint/typescript-eslint/commit/d806bda82343712a24e3c78b9b34d4345dd1de3b)) ### [`v5.41.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#5410-httpsgithubcomtypescript-eslinttypescript-eslintcomparev5401v5410-2022-10-24) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v5.40.1...v5.41.0) ##### Bug Fixes - **eslint-plugin:** \[no-base-to-string] ignore Error, URL, and URLSearchParams by default ([#5839](https://togithub.com/typescript-eslint/typescript-eslint/issues/5839)) ([96e1c6c](https://togithub.com/typescript-eslint/typescript-eslint/commit/96e1c6c171a34b0793c50c3dba853c3999a6bd49)) - **type-utils:** prevent stack overflow in `isTypeReadonly` ([#5860](https://togithub.com/typescript-eslint/typescript-eslint/issues/5860)) ([a6d8f7e](https://togithub.com/typescript-eslint/typescript-eslint/commit/a6d8f7edb84f9f6dd59a76faf53bf686756e2aed)), closes [#4476](https://togithub.com/typescript-eslint/typescript-eslint/issues/4476) ##### Features - **eslint-plugin:** \[no-unsafe-declaration-merging] switch to use scope analysis instead of type information ([#5865](https://togithub.com/typescript-eslint/typescript-eslint/issues/5865)) ([e70a10a](https://togithub.com/typescript-eslint/typescript-eslint/commit/e70a10aea684bc6bca05b69bfce3bae769a5f5ab)) - **eslint-plugin:** add no-unsafe-declaration-merging ([#5840](https://togithub.com/typescript-eslint/typescript-eslint/issues/5840)) ([3728031](https://togithub.com/typescript-eslint/typescript-eslint/commit/3728031c659dabde7658cd54184951d4be9aabcb)) #### [5.40.1](https://togithub.com/typescript-eslint/typescript-eslint/compare/v5.40.0...v5.40.1) (2022-10-17) ##### Bug Fixes - **eslint-plugin:** Skip missing 'rest' tuple type arguments in no-misused-promises ([#5809](https://togithub.com/typescript-eslint/typescript-eslint/issues/5809)) ([c5beaa2](https://togithub.com/typescript-eslint/typescript-eslint/commit/c5beaa2ea340985211ca5c12821842c54f5170f0)), closes [#5807](https://togithub.com/typescript-eslint/typescript-eslint/issues/5807) ### [`v5.40.1`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/eslint-plugin/CHANGELOG.md#5401-httpsgithubcomtypescript-eslinttypescript-eslintcomparev5400v5401-2022-10-17) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v5.40.0...v5.40.1) ##### Bug Fixes - **eslint-plugin:** Skip missing 'rest' tuple type arguments in no-misused-promises ([#5809](https://togithub.com/typescript-eslint/typescript-eslint/issues/5809)) ([c5beaa2](https://togithub.com/typescript-eslint/typescript-eslint/commit/c5beaa2ea340985211ca5c12821842c54f5170f0)), closes [#5807](https://togithub.com/typescript-eslint/typescript-eslint/issues/5807)typescript-eslint/typescript-eslint (@typescript-eslint/parser)
### [`v5.42.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#5420-httpsgithubcomtypescript-eslinttypescript-eslintcomparev5410v5420-2022-10-31) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v5.41.0...v5.42.0) ##### Features - **scope-manager:** ignore ECMA version ([#5881](https://togithub.com/typescript-eslint/typescript-eslint/issues/5881)) ([3b8d449](https://togithub.com/typescript-eslint/typescript-eslint/commit/3b8d449696c319690536a18a48ef32749dc2f559)) ##### Reverts - Revert "feat(scope-manager): ignore ECMA version" ([#5888](https://togithub.com/typescript-eslint/typescript-eslint/issues/5888)) ([2ee81df](https://togithub.com/typescript-eslint/typescript-eslint/commit/2ee81df5a365d82ef4b3dfc124d4ec39c7bcb725)), closes [#5888](https://togithub.com/typescript-eslint/typescript-eslint/issues/5888) [#5881](https://togithub.com/typescript-eslint/typescript-eslint/issues/5881) ### [`v5.41.0`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#5410-httpsgithubcomtypescript-eslinttypescript-eslintcomparev5401v5410-2022-10-24) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v5.40.1...v5.41.0) **Note:** Version bump only for package [@typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) #### [5.40.1](https://togithub.com/typescript-eslint/typescript-eslint/compare/v5.40.0...v5.40.1) (2022-10-17) **Note:** Version bump only for package [@typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) ### [`v5.40.1`](https://togithub.com/typescript-eslint/typescript-eslint/blob/HEAD/packages/parser/CHANGELOG.md#5401-httpsgithubcomtypescript-eslinttypescript-eslintcomparev5400v5401-2022-10-17) [Compare Source](https://togithub.com/typescript-eslint/typescript-eslint/compare/v5.40.0...v5.40.1) **Note:** Version bump only for package [@typescript-eslint/parser](https://togithub.com/typescript-eslint/parser)eslint/eslint
### [`v8.27.0`](https://togithub.com/eslint/eslint/releases/tag/v8.27.0) [Compare Source](https://togithub.com/eslint/eslint/compare/v8.26.0...v8.27.0) ##### Features - [`f14587c`](https://togithub.com/eslint/eslint/commit/f14587c42bb0fe6ec89529aede045a488083d6ee) feat: new `no-new-native-nonconstructor` rule ([#16368](https://togithub.com/eslint/eslint/issues/16368)) (Sosuke Suzuki) - [`978799b`](https://togithub.com/eslint/eslint/commit/978799bd5c76fecf4ce8f17d89ad6c9f436c3228) feat: add new rule `no-empty-static-block` ([#16325](https://togithub.com/eslint/eslint/issues/16325)) (Sosuke Suzuki) - [`69216ee`](https://togithub.com/eslint/eslint/commit/69216ee69c7172e847b64e0e934b5121a34d0ea3) feat: no-empty suggest to add comment in empty BlockStatement ([#16470](https://togithub.com/eslint/eslint/issues/16470)) (Nitin Kumar) - [`319f0a5`](https://togithub.com/eslint/eslint/commit/319f0a5491598825bbd528c6d1fc12771056a74c) feat: use `context.languageOptions.ecmaVersion` in core rules ([#16458](https://togithub.com/eslint/eslint/issues/16458)) (Milos Djermanovic) ##### Bug Fixes - [`c3ce521`](https://togithub.com/eslint/eslint/commit/c3ce5212f672d95dde3465d7d3c4bf99ff665f8b) fix: Ensure unmatched glob patterns throw an error ([#16462](https://togithub.com/eslint/eslint/issues/16462)) (Nicholas C. Zakas) - [`886a038`](https://togithub.com/eslint/eslint/commit/886a0386897f96d2da95eba8c52bd893fcbf7e86) fix: handle files with unspecified path in `getRulesMetaForResults` ([#16437](https://togithub.com/eslint/eslint/issues/16437)) (Francesco Trotta) ##### Documentation - [`ce93b42`](https://togithub.com/eslint/eslint/commit/ce93b429bf917640473dd7e26b49bba993c68ce4) docs: Stylelint property-no-unknown ([#16497](https://togithub.com/eslint/eslint/issues/16497)) (Nick Schonning) - [`d2cecb4`](https://togithub.com/eslint/eslint/commit/d2cecb4ad2a6d33444cf0288a863c43acb3b468a) docs: Stylelint declaration-block-no-shorthand-property-overrides ([#16498](https://togithub.com/eslint/eslint/issues/16498)) (Nick Schonning) - [`0a92805`](https://togithub.com/eslint/eslint/commit/0a92805d7713118866e519b0ff2a61c5d6238ad9) docs: stylelint color-hex-case ([#16496](https://togithub.com/eslint/eslint/issues/16496)) (Nick Schonning) - [`74a5af4`](https://togithub.com/eslint/eslint/commit/74a5af487ac7296a46a8078e585f00df72b63d83) docs: fix stylelint error ([#16491](https://togithub.com/eslint/eslint/issues/16491)) (Milos Djermanovic) - [`324db1a`](https://togithub.com/eslint/eslint/commit/324db1a11e43ba9d954dc522763faea19129ce6a) docs: explicit stylelint color related rules ([#16465](https://togithub.com/eslint/eslint/issues/16465)) (Nick Schonning) - [`94dc4f1`](https://togithub.com/eslint/eslint/commit/94dc4f19ba49fe2358f8bcc2fc3555d222766755) docs: use Stylelint for HTML files ([#16468](https://togithub.com/eslint/eslint/issues/16468)) (Nick Schonning) - [`cc6128d`](https://togithub.com/eslint/eslint/commit/cc6128db4f489c3ab80fff2f9dbeea313e72208d) docs: enable stylelint declaration-block-no-duplicate-properties ([#16466](https://togithub.com/eslint/eslint/issues/16466)) (Nick Schonning) - [`d03a8bf`](https://togithub.com/eslint/eslint/commit/d03a8bf8978bd330aeb951f18cc92bf1ad24eeec) docs: Add heading to justification explanation ([#16430](https://togithub.com/eslint/eslint/issues/16430)) (Maritaria) - [`8a15968`](https://togithub.com/eslint/eslint/commit/8a159686f9d497262d573dd601855ce28362199b) docs: add Stylelint configuration and cleanup ([#16379](https://togithub.com/eslint/eslint/issues/16379)) (Nick Schonning) - [`9b0a469`](https://togithub.com/eslint/eslint/commit/9b0a469d1e4650c1d9da26239357e715b11b2d97) docs: note commit messages don't support scope ([#16435](https://togithub.com/eslint/eslint/issues/16435)) (Andy Edwards) - [`1581405`](https://togithub.com/eslint/eslint/commit/15814057fd69319b3744bdea5db2455f85d2e74f) docs: improve context.getScope() docs ([#16417](https://togithub.com/eslint/eslint/issues/16417)) (Ben Perlmutter) - [`b797149`](https://togithub.com/eslint/eslint/commit/b7971496e9b44add405ca0360294f5c3be85b540) docs: update formatters template ([#16454](https://togithub.com/eslint/eslint/issues/16454)) (Milos Djermanovic) - [`5ac4de9`](https://togithub.com/eslint/eslint/commit/5ac4de911f712cb3a5a16eb7a4063eee09dfc97c) docs: fix link to formatters on the Core Concepts page ([#16455](https://togithub.com/eslint/eslint/issues/16455)) (Vladislav) - [`33313ef`](https://togithub.com/eslint/eslint/commit/33313ef56258a6a96b00a3e70025b94bd2f2fe9f) docs: core-concepts: fix link to semi rule ([#16453](https://togithub.com/eslint/eslint/issues/16453)) (coderaiser) ### [`v8.26.0`](https://togithub.com/eslint/eslint/releases/tag/v8.26.0) [Compare Source](https://togithub.com/eslint/eslint/compare/v8.25.0...v8.26.0) ##### Features - [`4715787`](https://togithub.com/eslint/eslint/commit/4715787724a71494ba0bb0c5fe4639570bb6985b) feat: check `Object.create()` in getter-return ([#16420](https://togithub.com/eslint/eslint/issues/16420)) (Yuki Hirasawa) - [`28d1902`](https://togithub.com/eslint/eslint/commit/28d190264017dbaa29f2ab218f73b623143cd1af) feat: `no-implicit-globals` supports `exported` block comment ([#16343](https://togithub.com/eslint/eslint/issues/16343)) (Sosuke Suzuki) - [`e940be7`](https://togithub.com/eslint/eslint/commit/e940be7a83d0caea15b64c1e1c2785a6540e2641) feat: Use ESLINT_USE_FLAT_CONFIG environment variable for flat config ([#16356](https://togithub.com/eslint/eslint/issues/16356)) (Tomer Aberbach) - [`dd0c58f`](https://togithub.com/eslint/eslint/commit/dd0c58f0f34d24331ae55139af39cf2747125f5e) feat: Swap out Globby for custom globbing solution. ([#16369](https://togithub.com/eslint/eslint/issues/16369)) (Nicholas C. Zakas) ##### Bug Fixes - [`df77409`](https://togithub.com/eslint/eslint/commit/df7740967ffab2915974c7b310ac76ea2915ac2d) fix: use `baseConfig` constructor option in FlatESLint ([#16432](https://togithub.com/eslint/eslint/issues/16432)) (Milos Djermanovic) - [`33668ee`](https://togithub.com/eslint/eslint/commit/33668ee9d22e1988ba03e07fb547738bdb21dc0e) fix: Ensure that glob patterns are matched correctly. ([#16449](https://togithub.com/eslint/eslint/issues/16449)) (Nicholas C. Zakas) - [`740b208`](https://togithub.com/eslint/eslint/commit/740b20826fadc5322ea5547c1ba41793944e571d) fix: ignore messages without a `ruleId` in `getRulesMetaForResults` ([#16409](https://togithub.com/eslint/eslint/issues/16409)) (Francesco Trotta) - [`8f9759e`](https://togithub.com/eslint/eslint/commit/8f9759e2a94586357d85fac902e038fabdba79a7) fix: `--ignore-pattern` in flat config mode should be relative to `cwd` ([#16425](https://togithub.com/eslint/eslint/issues/16425)) (Milos Djermanovic) - [`325ad37`](https://togithub.com/eslint/eslint/commit/325ad375a52d1c7b8b8fd23943350c91781366a2) fix: make `getRulesMetaForResults` return a plain object in trivial case ([#16438](https://togithub.com/eslint/eslint/issues/16438)) (Francesco Trotta) - [`a2810bc`](https://togithub.com/eslint/eslint/commit/a2810bc485d9f1123a86b60702fcaa51e19d71a3) fix: Ensure that directories can be unignored. ([#16436](https://togithub.com/eslint/eslint/issues/16436)) (Nicholas C. Zakas) - [`35916ad`](https://togithub.com/eslint/eslint/commit/35916ad9bfc07dab63361721df1bd7f21e43e094) fix: Ensure unignore and reignore work correctly in flat config. ([#16422](https://togithub.com/eslint/eslint/issues/16422)) (Nicholas C. Zakas) ##### Documentation - [`651649b`](https://togithub.com/eslint/eslint/commit/651649b12797594a86c0d659d6a0d1cdbda6f57b) docs: Core concepts page ([#16399](https://togithub.com/eslint/eslint/issues/16399)) (Ben Perlmutter) - [`631cf72`](https://togithub.com/eslint/eslint/commit/631cf72e82f316a2cc08770e5c81b858637ab04a) docs: note --ignore-path not supported with flat config ([#16434](https://togithub.com/eslint/eslint/issues/16434)) (Andy Edwards) - [`1692840`](https://togithub.com/eslint/eslint/commit/1692840a2f763737a4891419dc304db4ebedab5d) docs: fix syntax in examples for new config files ([#16427](https://togithub.com/eslint/eslint/issues/16427)) (Milos Djermanovic) - [`d336cfc`](https://togithub.com/eslint/eslint/commit/d336cfc9145a72bf8730250ee1e331a135e6ee2c) docs: Document extending plugin with new config ([#16394](https://togithub.com/eslint/eslint/issues/16394)) (Ben Perlmutter) ##### Chores - [`e917a9a`](https://togithub.com/eslint/eslint/commit/e917a9a2e555d398c64b985fc933d44a42c958f0) ci: add node v19 ([#16443](https://togithub.com/eslint/eslint/issues/16443)) (Koichi ITO) - [`4b70b91`](https://togithub.com/eslint/eslint/commit/4b70b91a6e28669ab8e2a4ce2a6d9ed40be20fa7) chore: Add VS Code issues link ([#16423](https://togithub.com/eslint/eslint/issues/16423)) (Nicholas C. Zakas) - [`232d291`](https://togithub.com/eslint/eslint/commit/232d2916ac5e44db55c2ffbd2f3b37ad70037b7b) chore: suppress a Node.js deprecation warning ([#16398](https://togithub.com/eslint/eslint/issues/16398)) (Koichi ITO)facebook/jest
### [`v29.2.2`](https://togithub.com/facebook/jest/blob/HEAD/CHANGELOG.md#2922) [Compare Source](https://togithub.com/facebook/jest/compare/v29.2.1...v29.2.2) ##### Fixes - `[@jest/test-sequencer]` Make sure sharding does not produce empty groups ([#13476](https://togithub.com/facebook/jest/pull/13476)) - `[jest-circus]` Test marked as `todo` are shown as todo when inside a focussed describe ([#13504](https://togithub.com/facebook/jest/pull/13504)) - `[jest-mock]` Ensure mock resolved and rejected values are promises from correct realm ([#13503](https://togithub.com/facebook/jest/pull/13503)) - `[jest-snapshot]` Don't highlight passing asymmetric property matchers in snapshot diff ([#13480](https://togithub.com/facebook/jest/issues/13480)) ##### Chore & Maintenance - `[docs]` Update link to Jest 28 upgrade guide in error message ([#13483](https://togithub.com/facebook/jest/pull/13483)) - `[jest-runner, jest-watcher]` Update `emittery` ([#13490](https://togithub.com/facebook/jest/pull/13490)) ### [`v29.2.1`](https://togithub.com/facebook/jest/blob/HEAD/CHANGELOG.md#2921) [Compare Source](https://togithub.com/facebook/jest/compare/v29.2.0...v29.2.1) ##### Features - `[@jest/globals, jest-mock]` Add `jest.Spied*` utility types ([#13440](https://togithub.com/facebook/jest/pull/13440)) ##### Fixes - `[jest-environment-node]` make `globalThis.performance` writable for Node 19 and fake timers ([#13467](https://togithub.com/facebook/jest/pull/13467)) - `[jest-mock]` Revert [#13398](https://togithub.com/facebook/jest/pull/13398) to restore mocking of setters ([#13472](https://togithub.com/facebook/jest/pull/13472)) ##### Performance - `[*]` Use sha1 instead of sha256 for hashing ([#13421](https://togithub.com/facebook/jest/pull/13421))Configuration
š Schedule: Branch creation - "every 2 weeks on Monday before 7am" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).
š¦ Automerge: Enabled.
ā» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
š» Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate. View repository job log here.