Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the development-dependencies group across 1 directory with 5 updates #87

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 9, 2024

Bumps the development-dependencies group with 5 updates in the /backend directory:

Package From To
@eslint/js 9.15.0 9.16.0
eslint 9.14.0 9.16.0
globals 15.12.0 15.13.0
typescript 5.6.3 5.7.2
typescript-eslint 8.14.0 8.17.0

Updates @eslint/js from 9.15.0 to 9.16.0

Release notes

Sourced from @​eslint/js's releases.

v9.16.0

Features

  • 8f70eb1 feat: Add ignoreComputedKeys option in sort-keys rule (#19162) (Milos Djermanovic)

Documentation

  • 9eefc8f docs: fix typos in use-isnan (#19190) (루밀LuMir)
  • 0c8cea8 docs: switch the order of words in no-unreachable (#19189) (루밀LuMir)
  • 0c19417 docs: add missing backtick to no-async-promise-executor (#19188) (루밀LuMir)
  • 8df9276 docs: add backtick in -0 in description of no-compare-neg-zero (#19186) (루밀LuMir)
  • 7e16e3f docs: fix caseSensitive option's title of sort-keys (#19183) (Tanuj Kanti)
  • 0c6b842 docs: fix typos in migration-guide.md (#19180) (루밀LuMir)
  • 353266e docs: fix a typo in debug.md (#19179) (루밀LuMir)
  • 5ff318a docs: delete unnecessary horizontal rule(---) in nodejs-api (#19175) (루밀LuMir)
  • 576bcc5 docs: mark more rules as handled by TypeScript (#19164) (Tanuj Kanti)
  • 742d054 docs: note that no-restricted-syntax can be used with any language (#19148) (Milos Djermanovic)

Chores

  • feb703b chore: upgrade to @eslint/[email protected] (#19195) (Francesco Trotta)
  • df9bf95 chore: package.json update for @​eslint/js release (Jenkins)
  • f831893 chore: add type for ignoreComputedKeys option of sort-keys (#19184) (Tanuj Kanti)
  • 3afb8a1 chore: update dependency @​eslint/json to ^0.8.0 (#19177) (Milos Djermanovic)
  • 1f77c53 chore: add repository.directory property to package.json (#19165) (루밀LuMir)
  • d460594 chore: update dependency @​arethetypeswrong/cli to ^0.17.0 (#19147) (renovate[bot])
  • 45cd4ea refactor: update default options in rules (#19136) (Milos Djermanovic)
Changelog

Sourced from @​eslint/js's changelog.

v9.16.0 - November 29, 2024

  • feb703b chore: upgrade to @eslint/[email protected] (#19195) (Francesco Trotta)
  • df9bf95 chore: package.json update for @​eslint/js release (Jenkins)
  • 9eefc8f docs: fix typos in use-isnan (#19190) (루밀LuMir)
  • 0c8cea8 docs: switch the order of words in no-unreachable (#19189) (루밀LuMir)
  • 0c19417 docs: add missing backtick to no-async-promise-executor (#19188) (루밀LuMir)
  • 8df9276 docs: add backtick in -0 in description of no-compare-neg-zero (#19186) (루밀LuMir)
  • 7e16e3f docs: fix caseSensitive option's title of sort-keys (#19183) (Tanuj Kanti)
  • f831893 chore: add type for ignoreComputedKeys option of sort-keys (#19184) (Tanuj Kanti)
  • 8f70eb1 feat: Add ignoreComputedKeys option in sort-keys rule (#19162) (Milos Djermanovic)
  • 0c6b842 docs: fix typos in migration-guide.md (#19180) (루밀LuMir)
  • 353266e docs: fix a typo in debug.md (#19179) (루밀LuMir)
  • 3afb8a1 chore: update dependency @​eslint/json to ^0.8.0 (#19177) (Milos Djermanovic)
  • 5ff318a docs: delete unnecessary horizontal rule(---) in nodejs-api (#19175) (루밀LuMir)
  • 576bcc5 docs: mark more rules as handled by TypeScript (#19164) (Tanuj Kanti)
  • 1f77c53 chore: add repository.directory property to package.json (#19165) (루밀LuMir)
  • d460594 chore: update dependency @​arethetypeswrong/cli to ^0.17.0 (#19147) (renovate[bot])
  • 45cd4ea refactor: update default options in rules (#19136) (Milos Djermanovic)
  • 742d054 docs: note that no-restricted-syntax can be used with any language (#19148) (Milos Djermanovic)
Commits

Updates eslint from 9.14.0 to 9.16.0

Release notes

Sourced from eslint's releases.

v9.16.0

Features

  • 8f70eb1 feat: Add ignoreComputedKeys option in sort-keys rule (#19162) (Milos Djermanovic)

Documentation

  • 9eefc8f docs: fix typos in use-isnan (#19190) (루밀LuMir)
  • 0c8cea8 docs: switch the order of words in no-unreachable (#19189) (루밀LuMir)
  • 0c19417 docs: add missing backtick to no-async-promise-executor (#19188) (루밀LuMir)
  • 8df9276 docs: add backtick in -0 in description of no-compare-neg-zero (#19186) (루밀LuMir)
  • 7e16e3f docs: fix caseSensitive option's title of sort-keys (#19183) (Tanuj Kanti)
  • 0c6b842 docs: fix typos in migration-guide.md (#19180) (루밀LuMir)
  • 353266e docs: fix a typo in debug.md (#19179) (루밀LuMir)
  • 5ff318a docs: delete unnecessary horizontal rule(---) in nodejs-api (#19175) (루밀LuMir)
  • 576bcc5 docs: mark more rules as handled by TypeScript (#19164) (Tanuj Kanti)
  • 742d054 docs: note that no-restricted-syntax can be used with any language (#19148) (Milos Djermanovic)

Chores

  • feb703b chore: upgrade to @eslint/[email protected] (#19195) (Francesco Trotta)
  • df9bf95 chore: package.json update for @​eslint/js release (Jenkins)
  • f831893 chore: add type for ignoreComputedKeys option of sort-keys (#19184) (Tanuj Kanti)
  • 3afb8a1 chore: update dependency @​eslint/json to ^0.8.0 (#19177) (Milos Djermanovic)
  • 1f77c53 chore: add repository.directory property to package.json (#19165) (루밀LuMir)
  • d460594 chore: update dependency @​arethetypeswrong/cli to ^0.17.0 (#19147) (renovate[bot])
  • 45cd4ea refactor: update default options in rules (#19136) (Milos Djermanovic)

v9.15.0

Features

  • 01557ce feat: Implement Language#normalizeLanguageOptions() (#19104) (Nicholas C. Zakas)
  • 2edc0e2 feat: add meta.defaultOptions (#17656) (Josh Goldberg ✨)
  • bdec50e feat: fix no-useless-computed-key false negative with __proto__ (#19123) (Milos Djermanovic)
  • 3087c9e feat: add meta object to @eslint/js plugin (#19095) (Francesco Trotta)

Bug Fixes

  • fd33f13 fix: update types for no-restricted-imports rule (#19060) (Nitin Kumar)
  • bd35098 fix: switch away from Node.js node:assert and AssertionError (#19082) (Josh Goldberg ✨)
  • 9db5b15 fix: unsafe report for no-lonely-if (#19087) (Abraham Guo)
  • 68fa497 fix: ignore files on a different drive on Windows (#19069) (Francesco Trotta)
  • 4ce625a fix: upgrade @​humanwhocodes/retry@​0.4.1 to avoid debug logs (#19102) (Milos Djermanovic)

Documentation

  • d927920 docs: fix styles in no-js mode (#18916) (Tanuj Kanti)
  • 09bc2a8 docs: Update README (GitHub Actions Bot)
  • 39089c8 docs: add no-useless-computed-key examples with object patterns (#19109) (Milos Djermanovic)
  • 895c60f docs: add missing messageId property and suggestion properties (#19122) (fnx)
  • 298625e docs: Change CLI -c to use flat config (#19103) (Nicholas C. Zakas)
  • 522d8a3 docs: add deprecation on indent, quotes and semi rule types (#19090) (Marco Pasqualetti)

Chores

  • 2967d91 chore: upgrade @​eslint/js@​9.15.0 (#19133) (Milos Djermanovic)
  • b441bee chore: package.json update for @​eslint/js release (Jenkins)

... (truncated)

Changelog

Sourced from eslint's changelog.

v9.16.0 - November 29, 2024

  • feb703b chore: upgrade to @eslint/[email protected] (#19195) (Francesco Trotta)
  • df9bf95 chore: package.json update for @​eslint/js release (Jenkins)
  • 9eefc8f docs: fix typos in use-isnan (#19190) (루밀LuMir)
  • 0c8cea8 docs: switch the order of words in no-unreachable (#19189) (루밀LuMir)
  • 0c19417 docs: add missing backtick to no-async-promise-executor (#19188) (루밀LuMir)
  • 8df9276 docs: add backtick in -0 in description of no-compare-neg-zero (#19186) (루밀LuMir)
  • 7e16e3f docs: fix caseSensitive option's title of sort-keys (#19183) (Tanuj Kanti)
  • f831893 chore: add type for ignoreComputedKeys option of sort-keys (#19184) (Tanuj Kanti)
  • 8f70eb1 feat: Add ignoreComputedKeys option in sort-keys rule (#19162) (Milos Djermanovic)
  • 0c6b842 docs: fix typos in migration-guide.md (#19180) (루밀LuMir)
  • 353266e docs: fix a typo in debug.md (#19179) (루밀LuMir)
  • 3afb8a1 chore: update dependency @​eslint/json to ^0.8.0 (#19177) (Milos Djermanovic)
  • 5ff318a docs: delete unnecessary horizontal rule(---) in nodejs-api (#19175) (루밀LuMir)
  • 576bcc5 docs: mark more rules as handled by TypeScript (#19164) (Tanuj Kanti)
  • 1f77c53 chore: add repository.directory property to package.json (#19165) (루밀LuMir)
  • d460594 chore: update dependency @​arethetypeswrong/cli to ^0.17.0 (#19147) (renovate[bot])
  • 45cd4ea refactor: update default options in rules (#19136) (Milos Djermanovic)
  • 742d054 docs: note that no-restricted-syntax can be used with any language (#19148) (Milos Djermanovic)

v9.15.0 - November 15, 2024

  • 2967d91 chore: upgrade @​eslint/js@​9.15.0 (#19133) (Milos Djermanovic)
  • b441bee chore: package.json update for @​eslint/js release (Jenkins)
  • 7d6bf4a chore: upgrade @​eslint/core@​0.9.0 (#19131) (Milos Djermanovic)
  • 01557ce feat: Implement Language#normalizeLanguageOptions() (#19104) (Nicholas C. Zakas)
  • 902e707 chore: upgrade @​eslint/plugin-kit@​0.2.3 (#19130) (Milos Djermanovic)
  • 2edc0e2 feat: add meta.defaultOptions (#17656) (Josh Goldberg ✨)
  • fd33f13 fix: update types for no-restricted-imports rule (#19060) (Nitin Kumar)
  • 5ff6c1d chore: bump cross-spawn (#19125) (Ian Bobinac)
  • d927920 docs: fix styles in no-js mode (#18916) (Tanuj Kanti)
  • bdec50e feat: fix no-useless-computed-key false negative with __proto__ (#19123) (Milos Djermanovic)
  • 09bc2a8 docs: Update README (GitHub Actions Bot)
  • bd35098 fix: switch away from Node.js node:assert and AssertionError (#19082) (Josh Goldberg ✨)
  • 39089c8 docs: add no-useless-computed-key examples with object patterns (#19109) (Milos Djermanovic)
  • 895c60f docs: add missing messageId property and suggestion properties (#19122) (fnx)
  • cceccc7 chore: update dependency @​eslint/json to ^0.6.0 (#19117) (renovate[bot])
  • 0da3f73 chore: update algolia referrer (#19114) (Strek)
  • 9db5b15 fix: unsafe report for no-lonely-if (#19087) (Abraham Guo)
  • 68fa497 fix: ignore files on a different drive on Windows (#19069) (Francesco Trotta)
  • 4f08332 ci: unpin trunk-io/trunk-action (#19108) (Francesco Trotta)
  • 3087c9e feat: add meta object to @eslint/js plugin (#19095) (Francesco Trotta)
  • 298625e docs: Change CLI -c to use flat config (#19103) (Nicholas C. Zakas)
  • 4ce625a fix: upgrade @​humanwhocodes/retry@​0.4.1 to avoid debug logs (#19102) (Milos Djermanovic)
  • 522d8a3 docs: add deprecation on indent, quotes and semi rule types (#19090) (Marco Pasqualetti)
  • 6b75683 perf: optimize text-table by replacing regex with trimEnd (#19061) (Nitin Kumar)
Commits

Updates globals from 15.12.0 to 15.13.0

Release notes

Sourced from globals's releases.

v15.13.0

  • Update globals

sindresorhus/globals@v15.12.0...v15.13.0

Commits

Updates typescript from 5.6.3 to 5.7.2

Release notes

Sourced from typescript's releases.

TypeScript 5.7

For release notes, check out the release announcement.

Downloads are available on:

TypeScript 5.7 RC

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

TypeScript 5.7 Beta

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

Downloads are available on:

Commits
  • d701d90 Bump version to 5.7.2 and LKG
  • 0503a63 🤖 Pick PR #60450 (Move to file: fix detection of refe...) into release-5.7 (#...
  • 3140dbb 🤖 Pick PR #60488 (Stub out copilotRelated command) into release-5.7 (#60495)
  • c1216de Update LKG
  • 3ee2b95 🤖 Pick PR #60415 (Fix false positive rewriteRelativeI...) into release-5.7 (#...
  • 44bd3f2 Bump version to 5.7.1-rc and LKG
  • 5925c81 Update LKG
  • 84d58cf Merge remote-tracking branch 'origin/main' into release-5.7
  • 0ec4d30 Fixing exception on unsaved file (#60362)
  • 11b2930 Add compatible overloads that accept ArrayBuffer to BigInt64Array/BigUint64Ar...
  • Additional commits viewable in compare view

Updates typescript-eslint from 8.14.0 to 8.17.0

Release notes

Sourced from typescript-eslint's releases.

v8.17.0

8.17.0 (2024-12-02)

🚀 Features

  • eslint-plugin: [prefer-promise-reject-errors] options to allow any and unknown (#10392)
  • typescript-estree: add package version to ts version warning (#10343)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-template-expressions] allow template expressions used to make trailing whitespace visible (#10363)
  • eslint-plugin: remove references to "extendDefaults" in no-restricted-types (#10401)
  • eslint-plugin: [promise-function-async] handle function overloading (#10304)
  • website: press the Report an Issue button makes error if eslintrc does not include rules (#10367)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.16.0

8.16.0 (2024-11-25)

🚀 Features

  • support TypeScript 5.7 (#10372)
  • eslint-plugin: [max-params] add function overload and function type support (#10312)
  • eslint-plugin: [no-base-to-string] check Array.prototype.join (#10287)

🩹 Fixes

  • typescript-estree: update conditions for unsupported version warning (#10385)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.15.0

8.15.0 (2024-11-18)

... (truncated)

Changelog

Sourced from typescript-eslint's changelog.

8.17.0 (2024-12-02)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.16.0 (2024-11-25)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.15.0 (2024-11-18)

🚀 Features

  • typescript-eslint: allow infinitely deep array nesting in config function and extends (#10333)
  • eslint-plugin: new rule no-unsafe-type-assertion (#10051)
  • eslint-plugin: added related-getter-setter-pairs rule (#10192)

🩹 Fixes

  • add missing peer dependencies (#9744)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Commits
  • 2c8a75e chore(release): publish 8.17.0
  • f74a8fa chore(release): publish 8.16.0
  • 2444351 chore(release): publish 8.15.0
  • b351703 feat(typescript-eslint): allow infinitely deep array nesting in config functi...
  • 00a3a84 fix: add missing peer dependencies (#9744)
  • 9ebdff4 feat(eslint-plugin): new rule no-unsafe-type-assertion (#10051)
  • 0409851 feat(eslint-plugin): added related-getter-setter-pairs rule (#10192)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…ates

Bumps the development-dependencies group with 5 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) | `9.15.0` | `9.16.0` |
| [eslint](https://github.com/eslint/eslint) | `9.14.0` | `9.16.0` |
| [globals](https://github.com/sindresorhus/globals) | `15.12.0` | `15.13.0` |
| [typescript](https://github.com/microsoft/TypeScript) | `5.6.3` | `5.7.2` |
| [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) | `8.14.0` | `8.17.0` |



Updates `@eslint/js` from 9.15.0 to 9.16.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/commits/v9.16.0/packages/js)

Updates `eslint` from 9.14.0 to 9.16.0
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)
- [Commits](eslint/eslint@v9.14.0...v9.16.0)

Updates `globals` from 15.12.0 to 15.13.0
- [Release notes](https://github.com/sindresorhus/globals/releases)
- [Commits](sindresorhus/globals@v15.12.0...v15.13.0)

Updates `typescript` from 5.6.3 to 5.7.2
- [Release notes](https://github.com/microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.6.3...v5.7.2)

Updates `typescript-eslint` from 8.14.0 to 8.17.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.17.0/packages/typescript-eslint)

---
updated-dependencies:
- dependency-name: "@eslint/js"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: globals
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: typescript-eslint
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Dec 9, 2024
Copy link

github-actions bot commented Dec 9, 2024

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@eslint/config-array 0.19.1 UnknownUnknown
npm/@eslint/core 0.9.1 UnknownUnknown
npm/@eslint/js 9.16.0 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
npm/@eslint/object-schema 2.1.5 UnknownUnknown
npm/@typescript-eslint/eslint-plugin 8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/@typescript-eslint/parser 8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/@typescript-eslint/scope-manager 8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/@typescript-eslint/type-utils 8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/@typescript-eslint/types 8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/@typescript-eslint/typescript-estree 8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/@typescript-eslint/utils 8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/@typescript-eslint/visitor-keys 8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/eslint 9.16.0 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
npm/globals 15.13.0 🟢 5.4
Details
CheckScoreReason
Maintained🟢 1010 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 4Found 11/24 approved changesets -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/ts-api-utils 1.4.3 UnknownUnknown
npm/typescript 5.7.2 🟢 8.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
Contributors🟢 10project has 36 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
SAST🟢 10SAST tool is run on all commits
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 73 existing vulnerabilities detected
npm/typescript-eslint 8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected
npm/@eslint/js ^9.16.0 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
npm/eslint 9.16 🟢 6.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 7Found 23/30 approved changesets -- score normalized to 7
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST🟢 10SAST tool is run on all commits
npm/globals ^15.13.0 🟢 5.4
Details
CheckScoreReason
Maintained🟢 1010 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 4Found 11/24 approved changesets -- score normalized to 4
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities🟢 100 existing vulnerabilities detected
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/typescript ^5.7.2 🟢 8.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
CI-Tests🟢 1030 out of 30 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Code-Review🟢 10all changesets reviewed
Contributors🟢 10project has 36 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
SAST🟢 10SAST tool is run on all commits
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Vulnerabilities🟢 73 existing vulnerabilities detected
npm/typescript-eslint ^8.17.0 🟢 5.3
Details
CheckScoreReason
Code-Review🟢 8Found 23/26 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy🟢 10security policy file detected
Packaging⚠️ -1packaging workflow not detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 022 existing vulnerabilities detected

Scanned Files

  • backend/package-lock.json
  • backend/package.json

@austenstone austenstone merged commit 214d5a5 into main Dec 9, 2024
10 checks passed
@austenstone austenstone deleted the dependabot/npm_and_yarn/backend/development-dependencies-3214f22230 branch December 9, 2024 13:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant