Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix/replace eslint config #640

Merged
merged 2 commits into from
Jul 16, 2024
Merged

Fix/replace eslint config #640

merged 2 commits into from
Jul 16, 2024

Conversation

shahzaibkhalid
Copy link
Member

Related issues

See

Description

  • Feature 1
  • Feature 2
  • Patch 1
  • Patch 2

Checklist before submitting pull request

  • Commits follow our Developer Guide
  • New code is unit tested
  • make sure visual and accessibility tests pass
  • make sure code builds

Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@eslint-community/[email protected] None 0 379 kB eslint-community-bot
npm/@eslint-community/[email protected] None 0 446 kB eslint-community-bot
npm/@nodelib/[email protected] filesystem 0 22.2 kB mrmlnc
npm/@nodelib/[email protected] None 0 26.4 kB mrmlnc
npm/@rushstack/[email protected] None 0 240 kB odspnpm
npm/@tds/[email protected] None 0 66.1 kB telusdigitaldelivery
npm/@tds/[email protected] None +1 224 kB telusdigitaldelivery
npm/@telus/[email protected] None 0 0 B
npm/@types/[email protected] None 0 3 kB types
npm/@types/[email protected] None 0 23.3 kB types
npm/@typescript-eslint/[email protected] None 0 2.59 MB jameshenry
npm/@typescript-eslint/[email protected] None 0 17.8 kB jameshenry
npm/@typescript-eslint/[email protected] None 0 612 kB jameshenry
npm/@typescript-eslint/[email protected] None 0 109 kB jameshenry
npm/@typescript-eslint/[email protected] None 0 156 kB jameshenry
npm/@typescript-eslint/[email protected] None 0 321 kB jameshenry
npm/@typescript-eslint/[email protected] None 0 19.3 kB jameshenry
npm/[email protected] None 0 13.5 kB ljharb
npm/[email protected] None 0 29.4 kB ljharb
npm/[email protected] None 0 19.1 kB ljharb
npm/[email protected] None +5 2.57 MB ljharb
npm/[email protected] None 0 20.4 kB ljharb
npm/[email protected] None +1 53.5 kB ljharb
npm/[email protected] None 0 12.3 kB ljharb
npm/[email protected] None 0 9.99 kB ljharb
npm/[email protected] None 0 12.2 kB ljharb
npm/[email protected] None 0 30.9 kB ljharb
npm/[email protected] None 0 11.8 kB ljharb
npm/[email protected] None 0 12.3 kB ljharb
npm/[email protected] None +1 60.5 kB ljharb
npm/[email protected] None 0 156 kB ljharb
npm/[email protected] None 0 9.17 kB ljharb
npm/[email protected] None 0 13.9 kB ljharb
npm/[email protected] None 0 11 kB ljharb
npm/[email protected] filesystem 0 53.1 kB ota-meshi
npm/[email protected] None 0 18 kB mightyiam
npm/[email protected] None 0 16.1 kB voxpelli
npm/[email protected] None 0 409 kB eslint-community-bot
npm/[email protected] filesystem 0 348 kB weiran.zsd
npm/[email protected] None 0 71.1 kB eslint-community-bot
npm/[email protected] None 0 41.9 kB matteo.collina
npm/[email protected] None 0 13 kB ljharb
npm/[email protected] eval 0 41.6 kB ljharb
npm/[email protected] None 0 14.3 kB ljharb
npm/[email protected] filesystem, unsafe 0 101 kB hirokiosame
npm/[email protected] None 0 23.7 kB ljharb
npm/[email protected] None 0 7.7 kB ljharb
npm/[email protected] None 0 812 kB mattpauldavies
npm/[email protected] None 0 12.8 kB ljharb
npm/[email protected] None 0 10.9 kB ljharb
npm/[email protected] None 0 12 kB ljharb
npm/[email protected] None 0 17.6 kB ljharb
npm/[email protected] None 0 8.77 kB ljharb
npm/[email protected] None 0 20.5 kB ljharb
npm/[email protected] None 0 17.6 kB ljharb
npm/[email protected] eval 0 19.5 kB ljharb
npm/[email protected] None 0 3.88 kB sindresorhus
npm/[email protected] None 0 15.6 kB ljharb
npm/[email protected] None 0 12.7 kB ljharb
npm/[email protected] eval 0 31.9 kB ljharb
npm/[email protected] None 0 20.4 kB ljharb
npm/[email protected] None 0 27.1 kB ljharb
npm/[email protected] None 0 19.7 kB ljharb
npm/[email protected] None 0 18.7 kB ljharb
npm/[email protected] None 0 23.3 kB ljharb
npm/[email protected] None 0 20.6 kB ljharb
npm/[email protected] None 0 21.2 kB ljharb
npm/[email protected] None 0 10.1 kB ljharb
npm/[email protected] None 0 1.54 MB mcg
npm/[email protected] None 0 32 kB mcg
npm/[email protected] None 0 14.6 kB ljharb
npm/[email protected] None 0 10.9 kB ljharb
npm/[email protected] None 0 8.37 kB feross
npm/[email protected] None 0 20.7 kB ljharb
npm/[email protected] None 0 15 kB hirokiosame
npm/[email protected] None 0 9.44 kB matteo.collina
npm/[email protected] None 0 6.56 kB feross
npm/[email protected] None +1 19.8 kB ljharb
npm/[email protected] None 0 10.2 kB ljharb
npm/[email protected] None 0 14.7 kB ljharb
npm/[email protected] None 0 16.7 kB ljharb
npm/[email protected] None +1 122 kB ljharb
npm/[email protected] None 0 8.69 kB ljharb
npm/[email protected] None 0 13.8 kB nicolo-ribaudo
npm/[email protected] None 0 22.1 kB ljharb
npm/[email protected] None 0 22.9 kB ljharb
npm/[email protected] None 0 9.18 kB ljharb
npm/[email protected] None 0 828 kB joshuakgoldberg
npm/[email protected] environment, filesystem, unsafe +2 349 kB jonaskello
npm/[email protected] None 0 13.1 kB ljharb
npm/[email protected] None 0 20 kB ljharb
npm/[email protected] None 0 20.3 kB ljharb
npm/[email protected] None 0 23.3 kB ljharb
npm/[email protected] None 0 14.9 kB ljharb
npm/[email protected] None +1 44.5 kB ljharb
npm/[email protected] None 0 20.1 kB ljharb
npm/[email protected] None 0 40.7 kB ljharb

🚮 Removed packages: npm/@tds/[email protected], npm/@tds/[email protected], npm/@telusdigital/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Trivial Package npm/[email protected] 🚫
Deprecated npm/[email protected]
  • Reason: Please use eslint-config-love, instead.
🚫

View full report↗︎

Next steps

What are trivial packages?

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Removing this package as a dependency and implementing its logic will reduce supply chain risk.

What is a deprecated package?

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Research the state of the package and determine if there are non-deprecated versions that can be used, or if it should be replaced with a new, supported solution.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@shahzaibkhalid shahzaibkhalid merged commit b75d52a into master Jul 16, 2024
6 of 9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant