Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

update-backstage-1.12.1 #5

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

update-backstage-1.12.1 #5

wants to merge 1 commit into from

Conversation

danielgonzalez3
Copy link

  • update backstage dependencies + add yarn.lock

@socket-security
Copy link

New dependency changes detected. Learn more about Socket for GitHub ↗︎

🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package Script field Source
[email protected] (upgraded) postinstall package.json
[email protected] (upgraded) postinstall package.json via @backstage/[email protected]
[email protected] (upgraded) postinstall package.json via @backstage/[email protected]
😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack

Consider removing one of the conflicting packages. Packages should only export bin scripts with their name

Package Bin script Source
[email protected] (upgraded) jest package.json via @backstage/[email protected]
[email protected] (upgraded) jest package.json via @backstage/[email protected]
⚠️ Filesystem access

Accesses the file system, and could potentially read sensitive data.

If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead.

Package Module Location Source
@esbuild-kit/[email protected] (added) fs dist/index.js package.json via @backstage/[email protected]
@esbuild-kit/[email protected] (added) fs dist/index.js package.json via @backstage/[email protected]
@istanbuljs/[email protected] (added) fs index.js package.json via @backstage/[email protected]
@jest/[email protected] (added) fs build/index.js package.json via @backstage/[email protected]
@nodelib/[email protected] (added) fs out/adapters/fs.js package.json via @backstage/[email protected]
@rollup/[email protected] (upgraded) fs dist/cjs/index.js package.json via @backstage/[email protected]
@rollup/[email protected] (upgraded) fs dist/es/index.js package.json via @backstage/[email protected]
@rollup/[email protected] (added) fs dist/cjs/index.js package.json via @backstage/[email protected]
@rollup/[email protected] (added) fs dist/es/index.js package.json via @backstage/[email protected]
@svgr/[email protected] (upgraded) fs dist/index.js package.json via @backstage/[email protected]
@swc/[email protected] (added) fs binding.js package.json via @backstage/[email protected]
@swc/[email protected] (added) fs index.js package.json via @backstage/[email protected]
@typescript-eslint/[email protected] (added) fs dist/create-program/getWatchProgramsForProjects.js package.json via @backstage/[email protected]
@typescript-eslint/[email protected] (added) fs dist/create-program/useProvidedPrograms.js package.json via @backstage/[email protected]
@typescript-eslint/[email protected] (added) fs dist/parseSettings/getProjectConfigFiles.js package.json via @backstage/[email protected]
@yarnpkg/[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs dist/bin.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/address.js package.json via @backstage/[email protected]
[email protected] (added) fs scripts/bundle.js package.json via @backstage/[email protected]
[email protected] (added) fs scripts/compile-dots.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/argument_parser.js package.json via @backstage/[email protected]
[email protected] (added) fs argparse.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/index.js package.json via @backstage/[email protected]
[email protected] (added) fs src/read.js package.json via @backstage/[email protected]
[email protected] (added) fs src/write.js package.json via @backstage/[email protected]
[email protected] (added) fs test/integration.js package.json via @backstage/[email protected]
[email protected] (added) fs test/performance.js package.json via @backstage/[email protected]
[email protected] (added) fs cli.js package.json via @backstage/[email protected]
[email protected] (added) fs node.js package.json via @backstage/[email protected]
[email protected] (added) fs bin/download-node-tests.js package.json via @backstage/[email protected]
[email protected] (added) fs bin/test.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected], [email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected], [email protected]
[email protected] (added) fs lib/fsevents-handler.js package.json via @backstage/[email protected], [email protected]
[email protected] (added) fs lib/nodefs-handler.js package.json via @backstage/[email protected], [email protected]
[email protected] (added) fs chownr.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/command.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs dist/readFile.js package.json via @backstage/[email protected]
[email protected] (added) fs dist/readFile.js package.json via @backstage/[email protected]
[email protected] (added) fs create-require.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/util/readShebang.js package.json via @backstage/[email protected]
[email protected] (added) fs src/node.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs install.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs install.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs lib/main.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs lib/main.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs install.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs install.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs lib/main.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs lib/main.js package.json via @backstage/[email protected]
[email protected] (added) fs dist/loader.js package.json via @backstage/[email protected]
[email protected] (added) fs dist/index.js package.json via @backstage/[email protected], [email protected]
[email protected] (added) fs dist/index.mjs package.json via @backstage/[email protected], [email protected]
[email protected] (added) fs sync/index.js package.json via @backstage/[email protected], [email protected]
[email protected] (added) fs sync/index.mjs package.json via @backstage/[email protected], [email protected]
[email protected] (added) fs lib/cli-engine/cli-engine.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/cli-engine/file-enumerator.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/cli-engine/lint-result-cache.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/cli-engine/load-rules.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/cli.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/eslint/eslint-helpers.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/eslint/eslint.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/eslint/flat-eslint.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs parse.js package.json via @backstage/[email protected]
[email protected] (added) fs pkgUp.js package.json via @backstage/[email protected]
[email protected] (added) fs readPkgUp.js package.json via @backstage/[email protected]
[email protected] (added) fs resolve.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/ExportMap.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/rules/no-extraneous-dependencies.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/index.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/util/version.js package.json via @backstage/[email protected]
[email protected] (added) fs bin/esparse.js package.json via @backstage/[email protected]
[email protected] (added) fs bin/esvalidate.js package.json via @backstage/[email protected]
[email protected] (added) fs bin/esvalidate.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/view.js package.json via @backstage/[email protected]
[email protected] (added) fs main/index.js package.json via @backstage/[email protected], [email protected]
[email protected] (added) fs cache.js package.json via @backstage/[email protected]
[email protected] (added) fs src/cache.js package.json via @backstage/[email protected]
[email protected] (added) fs src/del.js package.json via @backstage/[email protected]
[email protected] (added) fs src/utils.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs lib/form_data.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/index.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs old.js package.json via @backstage/[email protected]
[email protected] (added) fs async.cjs package.json via @backstage/[email protected]
[email protected] (added) fs sync.cjs package.json via @backstage/[email protected]
[email protected] (added) fs dist/index.cjs package.json via @backstage/[email protected]
[email protected] (added) fs dist/index.mjs package.json via @backstage/[email protected]
[email protected] (added) fs glob.js package.json via @backstage/[email protected]
[email protected] (added) fs sync.js package.json via @backstage/[email protected]
[email protected] (added) fs common.js package.json via @backstage/[email protected]
[email protected] (added) fs common.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs dist/cjs/precompiler.js package.json via @backstage/[email protected]
[email protected] (added) fs cli.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/index.js package.json via @backstage/[email protected]
[email protected] (added) fs es/generator/index.js package.json via @backstage/[email protected], @backstage/[email protected], @backstage/[email protected], @backstage/[email protected], @backstage/[email protected], [email protected]
[email protected] (added) fs lib/generator/index.js package.json via @backstage/[email protected], @backstage/[email protected], @backstage/[email protected], @backstage/[email protected], @backstage/[email protected], [email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs index.js package.json via @backstage/[email protected]
[email protected] (added) fs mode.js package.json via @backstage/[email protected]
[email protected] (added) fs test/basic.js package.json via @backstage/[email protected]
[email protected] (added) fs windows.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/context.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/map-store.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs build/watchers/NodeWatcher.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/index.js package.json via @backstage/[email protected]
[email protected] (added) fs bin/js-yaml.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs lib/api.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs lib/jsdom/browser/resources/resource-loader.js package.json via @backstage/[email protected]
[email protected] (upgraded) fs lib/jsdom/living/xhr/xhr-utils.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/cli.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/register.js package.json via @backstage/[email protected]
[email protected] (added) fs lib/cli.js [package.json](https://github.com/Weyn/backstage-teamcity/pull

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@danielgonzalez3