Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update lstn.yml #23

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update lstn.yml #23

wants to merge 1 commit into from

Conversation

jadoonf
Copy link
Owner

@jadoonf jadoonf commented Aug 29, 2023

No description provided.

@github-actions
Copy link

listen.dev ∙ Security Report

critical 🚨 2 medium ⚠️ 1 low 🔷 1

🔍 The following behaviors have been detected in the dependency tree during installation

🚨 Critical severity
📑🔀 2 categories

  • 📑 Metadata ∙ 1 package
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • This package has inconsistent dependencies in the tarball's package.json ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        chokidar 3.5.3 1 🔗
  • 🔀 Typosquatting ∙ 1 package
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • The name of this package closely resembles other package names ("ini") which are popular on NPM: it might be a typosquatting attempt ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        ink 3.2.0 1 🔗

⚠️ Medium severity
🔎 1 category

  • 🔎 Static analysis ∙ 1 package
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • install script detected in package.json ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        ink 3.2.0 1 🔗

🔷 Low severity
📑 1 category

  • 📑 Metadata ∙ 1 package
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        source-map-support 0.5.21 1 🔗

Powered by listen.dev

@jadoonf
Copy link
Owner Author

jadoonf commented Aug 29, 2023

📊 Package size report   0.1%↑

File Before After
.github/workflows/lstn.yml 408 B 3%↑419 B
Total (Includes all files) 10.0 kB 0.1%↑10.0 kB
Tarball size 3.8 kB 0.2%↑3.8 kB
Unchanged files
File Size
.github/workflows/explain.yml 736 B
.github/workflows/package-size-report.yml 536 B
.github/workflows/test/lstn-cli-workflow.yml 2.0 kB
.github/workflows/test/lstn-dynamic.yml 378 B
.github/workflows/test/lstn-policy.yml 334 B
index.js 28 B
package.json 981 B
README.md 3.4 kB
rules.yml 1.2 kB

🤖 This report was automatically generated by pkg-size-action

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant