Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update package.json #27

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Update package.json #27

wants to merge 2 commits into from

Conversation

jadoonf
Copy link
Owner

@jadoonf jadoonf commented Nov 4, 2023

No description provided.

Copy link

github-actions bot commented Nov 4, 2023

listen.dev ∙ Security Report

critical 🚨 4 medium ⚠️ 5 low 🔷 1

🔍 The following behaviors have been detected in the dependency tree during installation

🚨 Critical severity
📑🔀 2 categories

  • 📑 Metadata ∙ 1 package
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • This package has inconsistent dependencies in the tarball's package.json ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        chokidar 3.5.3 1 🔗
  • 🔀 Typosquatting ∙ 3 packages
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • The name of this package closely resembles other package names ("q") which are popular on NPM: it might be a typosquatting attempt ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        jq 1.7.2 1 🔗
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • The name of this package closely resembles other package names ("ini") which are popular on NPM: it might be a typosquatting attempt ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        ink 3.2.0 1 🔗
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • The name of this package closely resembles other package names ("findit2") which are popular on NPM: it might be a typosquatting attempt ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        findit 2.0.0 1 🔗

⚠️ Medium severity
📡🔎 2 categories

  • 📡 Dynamic instrumentation ∙ 1 package
    • 📦 [email protected] ∙ 4 occurrences ∙ 2 kind of issues ∙ open 🔗
      • npm install spawned a process ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        contextify 0.1.15 ✔️ 1 🔗
      • unexpected outbound connection destination ∙ 3 total occurrences
        Name Version Transitive Dependency Occurrences More
        contextify 0.1.15 ✔️ 3 🔗
  • 🔎 Static analysis ∙ 1 package
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • install script detected in package.json ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        ink 3.2.0 1 🔗

🔷 Low severity
📑 1 category

  • 📑 Metadata ∙ 1 package
    • 📦 [email protected] ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗
      • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence
        Name Version Transitive Dependency Occurrences More
        source-map-support 0.5.21 1 🔗

### 🚩 Some problems have been encountered
🔗 Package not analysed yet ∙ 2 occurrences ∙ Package not analysed yet

See docs 🔗


Powered by listen.dev

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant