Skip to content

Next13#59

Draft
jpnykw wants to merge 1 commit intomainfrom
next13
Draft

Next13#59
jpnykw wants to merge 1 commit intomainfrom
next13

Conversation

@jpnykw
Copy link
Copy Markdown
Owner

@jpnykw jpnykw commented May 21, 2023

Next13に移植する

@jpnykw jpnykw self-assigned this May 21, 2023
@socket-security
Copy link
Copy Markdown

New dependency changes detected. Learn more about Socket for GitHub ↗︎


🚨 Potential security issues found in this pull request. To accept the risk, merge this PR and you will not be notified again.

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore next@13.4.3

⚠️ Please accept the latest app permissions to ensure bot commands work properly. Accept the new permissions here.

📞 Telemetry

This package contains telemetry which tracks you.

Package Note Source
next@13.4.3 (added) Can be disabled by setting the environment variable NEXT_TELEMETRY_DISABLED=1 package.json
Pull request alert summary
Issue Status
Install scripts ✅ 0 issues
Native code ✅ 0 issues
Bin script shell injection ✅ 0 issues
Unresolved require ✅ 0 issues
Invalid package.json ✅ 0 issues
HTTP dependency ✅ 0 issues
Git dependency ✅ 0 issues
Potential typo squat ✅ 0 issues
Known Malware ✅ 0 issues
Telemetry ⚠️ 1 issue
Protestware/Troll package ✅ 0 issues

📊 Modified Dependency Overview:

➕ Added Package Capability Access +/- Transitive Count Publisher
next@13.4.3 eval, network, filesystem, shell, environment +20 vercel-release-bot
⬆️ Updated Package Version Diff Added Capability Access +/- Transitive Count Publisher
@types/react@18.2.6 17.0.13...18.2.6 None +3/-3 types
react@18.2.0 17.0.2...18.2.0 None +0/-1 gnoff
react-dom@18.2.0 17.0.2...18.2.0 None +2/-3 gnoff
typescript@5.0.4 4.3.5...5.0.4 None +0/-0 typescript-bot

🚮 Removed packages: @babel/register@7.14.5, @emotion/react@11.10.5, @emotion/styled@11.10.5, @loadable/component@5.15.2, @lottiefiles/react-lottie-player@3.3.1, @mui/icons-material@5.0.5, @mui/material@5.0.6, @mui/styled-engine-sc@5.10.6, @types/animejs@3.1.3, @types/loadable__component@5.13.4, @types/react-dom@17.0.8, @types/react-responsive@8.0.2, @types/styled-components@5.1.26, @typescript-eslint/eslint-plugin@4.28.1, @typescript-eslint/parser@4.28.1, @vitejs/plugin-react-refresh@1.3.6, animejs@3.2.1, assert@2.0.0, babel-loader@8.2.2, browserify-zlib@0.2.0, buffer@6.0.3, css-loader@5.2.6, eslint@7.30.0, eslint-config-prettier@8.3.0, file-loader@6.2.0, gh-pages@3.2.3, json-loader@0.5.7, material-icons@0.7.5, path@0.12.7, pinst@2.1.6, prettier@2.3.2, process@0.11.10, react-icons@4.6.0, react-intersection-observer@8.32.0, react-responsive@8.2.0, react-router-dom@6.4.3, react-youtube@10.0.0, stream-browserify@3.0.0, style-loader@3.0.0, styled-components@5.3.6, ts-loader@9.2.3, util@0.12.4, vite@3.2.2, vite-plugin-svgr@2.2.2

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant