Skip to content

chore(deps): update docs dependencies#624

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/docs-dependencies
Open

chore(deps): update docs dependencies#624
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/docs-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Nov 16, 2023

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
@babel/preset-env (source) 7.20.27.29.3 age confidence
vue (source) 2.7.142.7.16 age confidence
vue-server-renderer (source) 2.7.142.7.16 age confidence
vue-template-compiler (source) 2.7.142.7.16 age confidence

Release Notes

babel/babel (@​babel/preset-env)

v7.29.3

Compare Source

v7.29.2

Compare Source

v7.29.0

Compare Source

v7.29.0 (2026-01-31)

Thanks @​simbahax for your first PR!

🚀 New Feature
🐛 Bug Fix
  • babel-parser
  • babel-traverse
    • #​17708 fix(traverse): provide a hub when traversing a File or Program and no parentPath is given (@​simbahax)
  • babel-plugin-transform-block-scoping, babel-traverse
    • #​17737 [7.x backport] fix: Rename switch discriminant references when body creates shadowing variable (@​magic-akari)
🏃‍♀️ Performance
Committers: 6

v7.28.6

Compare Source

v7.28.5

Compare Source

👓 Spec Compliance
🐛 Bug Fix
  • babel-plugin-proposal-destructuring-private
  • babel-parser
  • babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-plugin-transform-block-scoping, babel-plugin-transform-optional-chaining, babel-traverse, babel-types
  • babel-traverse
🏠 Internal
🏃‍♀️ Performance

v7.28.3

Compare Source

👓 Spec Compliance
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-transform-class-static-block, babel-preset-env
🐛 Bug Fix
💅 Polish
  • babel-plugin-transform-regenerator, babel-plugin-transform-runtime
📝 Documentation
🏠 Internal
🔬 Output optimization
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions

v7.28.0

Compare Source

🚀 New Feature
  • babel-node
  • babel-types
  • babel-compat-data, babel-preset-env
  • babel-core, babel-parser
  • babel-generator, babel-parser
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-transform-object-rest-spread, babel-traverse, babel-types
  • babel-parser, babel-traverse, babel-types
  • babel-generator, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-discard-binding, babel-plugin-transform-destructuring, babel-plugin-transform-explicit-resource-management, babel-plugin-transform-react-display-name, babel-types
  • babel-generator, babel-parser, babel-plugin-proposal-destructuring-private, babel-plugin-transform-block-scoping, babel-plugin-transform-object-rest-spread, babel-plugin-transform-typescript, babel-traverse, babel-types
🐛 Bug Fix
🏠 Internal
  • babel-compat-data, babel-plugin-proposal-decorators, babel-plugin-transform-async-generator-functions, babel-plugin-transform-json-modules, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs3

v7.27.2

Compare Source

🐛 Bug Fix
🏃‍♀️ Performance

v7.27.1

Compare Source

👓 Spec Compliance
🐛 Bug Fix
  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • babel-helper-fixtures, babel-parser
  • babel-generator, babel-parser
    • #​17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@​JLHwung)
  • babel-parser
  • babel-compat-data, babel-preset-env
  • babel-traverse
  • babel-generator
💅 Polish
  • babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse
🏠 Internal
  • babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-compat-data, babel-preset-env
  • babel-compat-data, babel-standalone
  • Other
  • babel-register
  • babel-cli, babel-compat-data, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-fixtures, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-parser, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-react-display-name, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-preset-env, babel-register, babel-standalone, babel-types
  • babel-plugin-transform-regenerator
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • babel-helpers, babel-plugin-transform-regenerator
  • babel-helpers
🔬 Output optimization
  • babel-helpers, babel-plugin-transform-modules-commonjs, babel-runtime-corejs3
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3

v7.26.9

Compare Source

🐛 Bug Fix
🏠 Internal

v7.26.8

Compare Source

v7.26.8 (2025-02-08)

🏠 Internal
  • babel-preset-env
    • #​17097 Update dependency babel-plugin-polyfill-corejs3 to ^0.11.0

v7.26.7

Compare Source

🐛 Bug Fix

v7.26.0

Compare Source

🚀 New Feature
  • babel-core, babel-generator, babel-parser, babel-plugin-syntax-import-assertions, babel-plugin-syntax-import-attributes, babel-preset-env, babel-standalone, babel-types
  • babel-core
  • babel-compat-data, babel-plugin-proposal-regexp-modifiers, babel-plugin-transform-regexp-modifiers, babel-preset-env, babel-standalone
  • babel-parser
  • babel-generator, babel-parser, babel-plugin-syntax-flow
  • babel-helpers, babel-preset-typescript, babel-runtime-corejs3
  • babel-generator, babel-parser
🐛 Bug Fix
💅 Polish
  • babel-plugin-proposal-json-modules, babel-plugin-transform-json-modules, babel-standalone
🏠 Internal
🏃‍♀️ Performance
  • babel-helper-module-transforms, babel-plugin-transform-modules-commonjs

v7.25.9

Compare Source

🐛 Bug Fix
🏠 Internal
🏃‍♀️ Performance

v7.25.8

Compare Source

🐛 Bug Fix
🏠 Internal
  • babel-parser, babel-plugin-proposal-async-do-expressions, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-plugin-proposal-explicit-resource-management, babel-plugin-proposal-export-default-from, babel-plugin-proposal-function-bind, babel-plugin-proposal-function-sent, babel-plugin-proposal-import-defer, babel-plugin-proposal-partial-application, babel-plugin-proposal-throw-expressions, babel-plugin-transform-async-generator-functions, babel-plugin-transform-class-static-block, babel-plugin-transform-dynamic-import, babel-plugin-transform-export-namespace-from, babel-plugin-transform-json-strings, babel-plugin-transform-logical-assignment-operators, babel-plugin-transform-nullish-coalescing-operator, babel-plugin-transform-numeric-separator, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-catch-binding, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-property-in-object, babel-preset-env

v7.25.7

Compare Source

🐛 Bug Fix
💅 Polish
🏠 Internal
  • babel-core
  • babel-helper-compilation-targets, babel-helper-plugin-utils, babel-preset-env
  • babel-plugin-proposal-destructuring-private, babel-plugin-syntax-decimal, babel-plugin-syntax-import-reflection, babel-standalone
  • babel-generator
🏃‍♀️ Performance

v7.25.4

Compare Source

🐛 Bug Fix
💅 Polish
  • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
  • babel-generator, babel-plugin-transform-class-properties
  • babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread
🔬 Output optimization

v7.25.3

Compare Source

🐛 Bug Fix
  • babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse
🏠 Internal

v7.25.2

Compare Source

🐛 Bug Fix

v7.25.0

Compare Source

👓 Spec Compliance
  • babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  • babel-plugin-transform-typescript
🚀 New Feature
  • babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
  • babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
  • babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
  • babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
  • babel-core, babel-parser
  • babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env
  • babel-plugin-transform-block-scoping, babel-traverse, babel-types
  • babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules
  • babel-helper-transform-fixture-test-runner, babel-node
  • babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone
🐛 Bug Fix
🏠 Internal
🏃‍♀️ Performance
  • babel-parser, babel-plugin-proposal-pipeline-operator
🔬 Output optimization
  • babel-plugin-transform-classes
  • babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-object-super, babel-plugin-transform-private-methods, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-plugin-transform-class-properties, babel-plugin-transform-classes

v7.24.8

Compare Source

👓 Spec Compliance
🐛 Bug Fix
💅 Polish

v7.24.7

Compare Source

🐛 Bug Fix
🏠 Internal
  • babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime

v7.24.6

Compare Source

🐛 Bug Fix
  • babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  • babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  • babel-parser, babel-plugin-transform-typescript
🏠 Internal
  • babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-helpers
  • babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-parser, babel-traverse
  • Other

v7.24.5

Compare Source

🐛 Bug Fix
💅 Polish
🏠 Internal
  • Other
  • babel-parser
  • babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
  • babel-plugin-proposal-partial-application, babel-types
  • babel-plugin-transform-class-properties, babel-preset-env
🏃‍♀️ Performance
  • babel-helpers, babel-preset-env, babel-runtime-corejs3

v7.24.4

Compare Source

👓 Spec Compliance
  • babel-parser
    • #​16403 Forbid initializerless using ([@​JLHwung](ht

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Nov 16, 2023
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 23ad105 to c6fcdde Compare December 3, 2023 11:32
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from c6fcdde to fc795a1 Compare December 11, 2023 15:57
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 7ef8fef to 2697cf3 Compare December 29, 2023 23:01
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 8e62610 to 3a2a133 Compare January 12, 2024 15:26
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 9a724d8 to e77918d Compare January 28, 2024 11:18
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from e77918d to 1a93149 Compare February 4, 2024 11:41
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 4f6e3a7 to 0e0b072 Compare February 28, 2024 12:35
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 80de2b2 to 08795fc Compare March 12, 2024 10:35
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 3 times, most recently from 0d7dc45 to df541db Compare March 24, 2024 17:03
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from df541db to f9c37a6 Compare April 3, 2024 19:03
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 0233d95 to d632232 Compare April 21, 2024 09:28
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 997f0b3 to 134039f Compare April 29, 2024 21:27
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 6d79fca to 6bf6808 Compare May 29, 2024 07:18
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from cd5ab66 to f9b0d9c Compare June 5, 2024 17:20
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from f9b0d9c to c51b905 Compare June 14, 2024 16:15
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 7e15b31 to 4b01f3c Compare June 28, 2024 13:04
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 7afaaa6 to 5464fa6 Compare October 25, 2024 16:14
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from 5464fa6 to 5c36f4b Compare November 21, 2024 18:45
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from 5c36f4b to 3e688e2 Compare December 2, 2024 10:03
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 3 times, most recently from d37b74d to a75bea6 Compare January 30, 2025 16:30
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 3 times, most recently from 38e6465 to c184b13 Compare February 14, 2025 13:50
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 712d709 to f3bdf82 Compare March 6, 2025 22:00
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 3 times, most recently from 5ff81f4 to 5cb9e4a Compare March 17, 2025 14:48
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from 5cb9e4a to e9a2bb3 Compare April 1, 2025 09:41
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from e9a2bb3 to ee8628c Compare April 8, 2025 16:01
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from ea88fdf to 6b1f6d5 Compare April 30, 2025 18:23
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from 6b1f6d5 to 6320b99 Compare May 6, 2025 18:37
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from 6320b99 to 8f4fc9e Compare May 19, 2025 18:56
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from dff3a55 to 5e64463 Compare June 4, 2025 09:09
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch from 5e64463 to 81c57ec Compare June 22, 2025 12:00
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from c69b924 to 776e449 Compare July 2, 2025 19:50
@renovate renovate Bot force-pushed the renovate/docs-dependencies branch 2 times, most recently from 2226ee9 to deec9ae Compare August 10, 2025 15:47
@socket-security
Copy link
Copy Markdown

socket-security Bot commented Apr 27, 2026

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action Severity Alert  (click "▶" to expand/collapse)
Warn Critical
Critical CVE: npm cipher-base is missing type checks, leading to hash rewind and passing on crafted data

CVE: GHSA-cpq7-6gpm-g9rc cipher-base is missing type checks, leading to hash rewind and passing on crafted data (CRITICAL)

Affected versions: < 1.0.5

Patched version: 1.0.5

From: ?npm/cipher-base@1.0.4

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/cipher-base@1.0.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
Critical CVE: Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)

CVE: GHSA-vjh7-7g9h-fjfh Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string) (CRITICAL)

Affected versions: < 6.6.1

Patched version: 6.6.1

From: ?npm/elliptic@6.5.4

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/elliptic@6.5.4. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
Critical CVE: npm form-data uses unsafe random function in form-data for choosing boundary

CVE: GHSA-fjxv-7rqg-78g4 form-data uses unsafe random function in form-data for choosing boundary (CRITICAL)

Affected versions: < 2.5.4; >= 3.0.0 < 3.0.4; >= 4.0.0 < 4.0.4

Patched version: 4.0.4

From: ?npm/form-data@4.0.0

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/form-data@4.0.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn Critical
Critical CVE: Handlebars.js has JavaScript Injection via AST Type Confusion

CVE: GHSA-2w6w-674q-4c4q Handlebars.js has JavaScript Injection via AST Type Confusion (CRITICAL)

Affected versions: >= 4.0.0 < 4.7.9

Patched version: 4.7.9

From: ?npm/handlebars@4.7.8

ℹ Read more on: This package | This alert | What is a critical CVE?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/handlebars@4.7.8. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

Warn High
Obfuscated code: npm entities is 91.0% likely obfuscated

Confidence: 0.91

Location: Package overview

From: ?npm/entities@4.5.0

ℹ Read more on: This package | This alert | What is obfuscated code?

Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support@socket.dev.

Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code.

Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment @SocketSecurity ignore npm/entities@4.5.0. You can also ignore all packages with @SocketSecurity ignore-all. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants