Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Lalaps Dashboard #65

Open
lalaps bot opened this issue Jan 24, 2022 · 0 comments
Open

Lalaps Dashboard #65

lalaps bot opened this issue Jan 24, 2022 · 0 comments

Comments

@lalaps
Copy link
Contributor

lalaps bot commented Jan 24, 2022

This issue provides visibility into Lalaps updates and their statuses.

npm

decode-uri-component vulnerable to Denial of Service (DoS)
Library: decode-uri-component
Affected versions: <=0.2.0
Severity: low
Root Libraries:

  • danger

minimatch ReDoS vulnerability
Library: minimatch
Affected versions: <3.0.5
Severity: high
✔️ #112
Root Libraries:

Last Updated: 01 Dec 2022, at 01:22 UTC

pustovitDmytro pushed a commit that referenced this issue Feb 7, 2023
| datasource | package                                   | from   | to      |
| ---------- | ----------------------------------------- | ------ | ------- |
| npm        | @babel/cli                                | 7.15.7 | 7.16.8  |
| npm        | @babel/core                               | 7.15.5 | 7.16.12 |
| npm        | @babel/node                               | 7.15.4 | 7.16.8  |
| npm        | @babel/plugin-proposal-class-properties   | 7.14.5 | 7.16.7  |
| npm        | @babel/plugin-proposal-decorators         | 7.15.4 | 7.16.7  |
| npm        | @babel/plugin-proposal-object-rest-spread | 7.15.6 | 7.16.7  |
| npm        | @babel/plugin-proposal-optional-chaining  | 7.14.5 | 7.16.7  |
| npm        | @babel/preset-env                         | 7.15.6 | 7.16.11 |
| npm        | @babel/runtime                            | 7.15.4 | 7.16.7  |
| npm        | @commitlint/cli                           | 13.2.0 | 13.2.1  |
| npm        | @semantic-release/changelog               | 6.0.0  | 6.0.1   |
| npm        | @semantic-release/git                     | 10.0.0 | 10.0.1  |
| npm        | danger                                    | 10.8.0 | 10.8.0  |
| npm        | eslint-config-incredible                  | 2.3.4  | 2.4.0   |
| npm        | eslint-plugin-censor                      | 1.5.1  | 1.5.2   |
| npm        | eslint-plugin-import                      | 2.24.2 | 2.25.4  |
| npm        | eslint-plugin-promise                     | 5.1.0  | 5.2.0   |
| npm        | eslint-plugin-regexp                      | 1.3.1  | 1.5.1   |
| npm        | eslint-plugin-sonarjs                     | 0.10.0 | 0.11.0  |
| npm        | husky                                     | 7.0.2  | 7.0.4   |
| npm        | jscpd                                     | 3.3.26 | 3.4.5   |
| npm        | mocha                                     | 9.2.0  | 9.2.0   |
| npm        | node-package-tester                       | 1.1.24 | 1.1.28  |
| npm        | semantic-release-telegram                 | 1.5.0  | 1.5.1   |

Co-authored-by: Renovate Bot <bot@renovateapp.com>
pustovitDmytro pushed a commit that referenced this issue Feb 7, 2023
## [1.6.4](v1.6.3...v1.6.4) (2023-02-07)

### Chore

* anti-terrorism disclaimer ([96327fe](96327fe))
* fixes eslint-plugin-unicorn version ([dd45e9a](dd45e9a))
* fixes npm audit ([0500470](0500470))
* fixes npm audit vulnerabilities (#107) ([08741e9](08741e9)), closes [#107](#107)
* fixes some npm audit vulnerabilities ([b913fee](b913fee))
* fixes some npm audit vulnerabilities (#100) ([04f24e9](04f24e9)), closes [#100](#100)
* fixes some npm audit vulnerabilities (#101) ([9603b17](9603b17)), closes [#101](#101)
* fixes some npm audit vulnerabilities (#86) ([eb549de](eb549de)), closes [#86](#86)
* Lock file maintenance ([85b7c09](85b7c09))
* Update dependency danger to v11 ([1779a27](1779a27))
* Update dependency nanoid to 3.1.31 [SECURITY] (#83) ([89d3014](89d3014)), closes [#83](#83)
* Update dependency node-fetch to 2.6.7 [SECURITY] (#84) ([11e82bc](11e82bc)), closes [#84](#84)
* Update devDependencies (non-major) ([01bd6c0](01bd6c0))
* Update devDependencies (non-major) ([85a0161](85a0161))
* Update devDependencies (non-major) (#65) ([d60ef28](d60ef28)), closes [#65](#65)
* Update devDependencies (non-major) (#66) ([69aac8f](69aac8f)), closes [#66](#66)
* Update devDependencies (non-major) (#92) ([f492769](f492769)), closes [#92](#92)

### Docs

* add logo ([bf6f064](bf6f064))
* drop lgtm ([b1841f2](b1841f2))
* update year in license ([64521cb](64521cb))
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

0 participants