Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade antd from 5.16.4 to 5.16.5 #769

Closed

Conversation

aashutoshrathi
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade antd from 5.16.4 to 5.16.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released 23 days ago, on 2024-04-28.

Release notes
Package name: antd
  • 5.16.5 - 2024-04-28
    • 🐞 Fix Transfer component issue when trying to select item from the right column while it has "unknown-key" within targetKeys. #48664 @ andreyk1512
    • 🐞 Fix Steps custom icon not vertically centered error. #48650 @ ZinkWu
    • 🐞 Fix Badge number centered but slightly right-aligned. #48605 @ akinocccc
    • 🐞 Fix Popover and Popconfirm blinking when open on the right edge of screen. #48591
    • 🐞 Fix ColorPicker that cleared icon should change when initial value is undefined. #48584 @ MadCcc
    • 💄 Fix Collapse bottom border issue. #48561 @ hamzaseif13
    • 💄 Adjust Input border style in form validation when disabled. #48616 @ nova1751
    • TypeScript
    • Locales
      • 🇪🇸 Added missing es_ES translations for DatePicker component. #48601 @ JMMOLLER
      • 🇩🇪 Added missing german translations for DatePicker component. #48586 @ sebhs

    • 🐞 修复 Transfer 组件在 targetKeys 中含有 "unknown-key" 时,尝试从右侧列选中单项的问题。#48664 @ andreyk1512
    • 🐞 修复 Steps 自定义图标未垂直居中问题。#48650 @ ZinkWu
    • 🐞 修复 Badge 数字居中偏右的问题。#48605 @ akinocccc
    • 🐞 修复 Popover 和 Popconfirm 在屏幕右侧边缘闪烁的问题。#48591
    • 🐞 修复 ColorPicker 在初始未受控时清除图标不会改变的问题。#48584 @ MadCcc
    • 💄 修复 Collapse 组件底部边框样式问题。#48561 @ hamzaseif13
    • 💄 调整 Input 组件在禁用的时候在表单校验时的边框颜色。#48616 @ nova1751
    • TypeScript
    • 国际化
  • 5.16.4 - 2024-04-22
    • 🐞 Fix Select with multiple and paddingXXS=0 will break the height align of controlHeight token. #48574
    • 🐞 Fix Upload miss style when enable CSS Variable. #48569 @ nova1751
    • 🐞 Fix Slider in range tooltip blink when drag the handle over another one. #48536
    • Input
      • 🐞 Fix the text of the button is not the large size when Input.Search is set to a large size. #48527
      • 🐞 Fix abnormal text display in Input.TextArea. #48489 @ korkt-kim
    • 🐞 Fix the stuck animation effect of the Upload component image. #48522 @ nova1751
    • 🐞 Fix the issue where the Switch component using checkedChildren and unCheckedChildren did not add a default height. #48513 @ wanpan11
    • 🐞 Fix the warning reminder when Form.Item uses noStyle with no value. #48508
    • 🐞 Fix Popover defaultOpen setting failed. #48481 @ linhf123
    • 🐞 Fix where placeholder is not displayed when DatePicker is configured with multiple. #48387 @ nova1751
    • 🐞 Fix where ColorPicker clear color could not be changed when controlled in strict mode. #48450
    • 💄 Fix the arrow style issue when Collapse uses third-party icons. #48417 @ guoyunhe
    • 💄 Optimize the animation effect of the embedded Menu Sider when it is expanded. #48127 @ metouch
    • 💄 Optimize Steps process style. #48464
    • Locales

    • 🐞 修复 Select 配置 paddingXXS=0 时,多选下超出设定的 controlHeight token 的问题。#48574
    • 🐞 修复 Upload 在开启 CSS Variable 时样式丢失的问题。#48569 @ nova1751
    • 🐞 修复 Slider 在范围选择下,拖动滑块越过另一个滑块时提示框闪动的问题。#48536
    • Input
      • 🐞 修复 Input.Search 设置大尺寸时,按钮的文字不是大尺寸的问题。#48527
      • 🐞 修复 Input.TextArea 的文字显示异常问题。#48489 @ korkt-kim
    • 🐞 修复 Upload 组件图片卡顿的动画效果。#48522 @ nova1751
    • 🐞 修复 Switch 组件使用 checkedChildren unCheckedChildren 未添加默认高度的问题。#48513 @ wanpan11
    • 🐞 修复 Form.Item 使用 noStyle 无值时的警告提醒。#48508
    • 🐞 修复 Popover defaultOpen 设置失效的问题。#48481 @ linhf123
    • 🐞 修复 DatePicker 配置 multipleplaceholder 不展示的问题。#48387 @ nova1751
    • 🐞 修复 ColorPicker 在严格模式下受控时清除颜色无法改变的问题。#48450
    • 💄 修复 Collapse 使用第三方图标时的 arrow 样式问题。#48417 @ guoyunhe
    • 💄 优化内嵌 Menu 的 Sider 在展开时的动画效果。#48127 @ metouch
    • 💄 优化 Steps process 样式。#48464
    • 国际化
from antd GitHub release notes
Commit messages
Package name: antd
  • 1a6e9e0 docs: changelog v5.16.5 (#48676)
  • 029cb1d test: rm legacy `react-dom/test-utils` for compatible React-18.3.1 (#48667)
  • f799219 fix: ajust the input border style in validation (#48616)
  • cb19e0e fix: fix transfer when trying to select item from the right column while it has "unknown-key" within targetKeys (#48664)
  • dfaf6ba chore(deps-dev): bump react from 18.2.0 to 18.3.0 (#48666)
  • aa5d3bd chore(deps-dev): bump the dev-dependencies group with 3 updates (#48665)
  • b173ce1 docs: add names demo (#48488)
  • c8bd145 fix(step): custom icon not vertically centered error (#48650)
  • 2afb721 site: Replace card deprecated API 'bodyStyle' (#48644)
  • 409a227 🔒 ci: locked React version (#48640)
  • bf330cb demo: code optimization (#48621)
  • 9d4a532 chore(deps-dev): bump the dev-dependencies group with 2 updates (#48632)
  • c0ae625 docs: fix tooltip shift demo (#48628)
  • 8f1808d type: add miss generic of Upload prop (#48614)
  • 533c855 docs: Update FUNDING.yml (#48615)
  • decfac3 fix: add Spanish locale in datepicker (#48601)
  • 3f339fc fix: add german locale in datepicker (#48586)
  • b1ef895 type: missing generic of Upload `customRequest` prop (#48612)
  • 0dbbe8b docs: update api since date (#48610)
  • d9813a9 chore(deps-dev): bump the dev-dependencies group with 3 updates (#48609)
  • cba1533 fix(badge): number centered but slightly right-aligned (#48605)
  • 11a160c demo: Table drag handle use useContext (#48588)
  • b9d90f8 chore: simplify import expression from package.json (#48602)
  • 8812b14 docs: improve Header menu style (#48597)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

Snyk has created this PR to upgrade antd from 5.16.4 to 5.16.5.

See this package in npm:
antd

See this project in Snyk:
https://app.snyk.io/org/aashutoshrathi/project/215a56fb-437a-4154-bf9f-452661d73de4?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@apollo/protobufjs@1.2.7 environment, filesystem, network 0 2.9 MB glasser
npm/@apollo/usage-reporting-protobuf@4.1.1 None 0 1.02 MB apollo-bot
npm/@apollo/utils.dropunuseddefinitions@1.1.0 None 0 5.85 kB apollo-bot
npm/@apollo/utils.keyvaluecache@1.0.2 None +1 100 kB apollo-bot
npm/@apollo/utils.logger@1.0.1 None 0 7.6 kB apollo-bot
npm/@apollo/utils.printwithreducedwhitespace@1.1.0 None 0 6.43 kB apollo-bot
npm/@apollo/utils.removealiases@1.0.0 None 0 4.99 kB apollo-bot
npm/@apollo/utils.sortast@1.1.0 None 0 8.61 kB apollo-bot
npm/@apollo/utils.stripsensitiveliterals@1.2.0 None 0 8.97 kB apollo-bot
npm/@apollo/utils.usagereporting@1.0.1 None 0 26.9 kB apollo-bot
npm/@apollographql/apollo-tools@0.5.4 None 0 56.9 kB apollo-bot
npm/@apollographql/graphql-playground-html@1.6.29 None 0 28.4 kB apollo-bot
npm/@babel/runtime@7.22.15 None 0 244 kB nicolo-ribaudo
npm/@ensdomains/address-encoder@0.1.9 None 0 2.21 MB makoto_inoue
npm/@ensdomains/ens@0.4.5 None 0 3.96 MB makoto_inoue
npm/@ensdomains/ensjs@2.1.0 None +2 10.8 MB nickjohnson
npm/@ensdomains/resolver@0.2.4 None 0 5.02 MB nickjohnson
npm/@ethereumjs/common@2.5.0 None 0 2.49 MB holgerd77
npm/@ethereumjs/tx@3.3.2 None 0 384 kB holgerd77
npm/@ethersproject/abi@5.7.0 None 0 498 kB ricmoo
npm/@ethersproject/abstract-provider@5.7.0 None 0 61 kB ricmoo
npm/@ethersproject/abstract-signer@5.7.0 None 0 82.2 kB ricmoo
npm/@ethersproject/address@5.7.0 None 0 33.1 kB ricmoo
npm/@ethersproject/base64@5.7.0 None 0 11.3 kB ricmoo
npm/@ethersproject/basex@5.7.0 None 0 30.1 kB ricmoo
npm/@ethersproject/bignumber@5.7.0 None +1 242 kB ricmoo
npm/@ethersproject/bytes@5.7.0 None 0 80.9 kB ricmoo
npm/@ethersproject/constants@5.7.0 None 0 18.7 kB ricmoo
npm/@ethersproject/contracts@5.7.0 None 0 250 kB ricmoo
npm/@ethersproject/hash@5.7.0 None 0 257 kB ricmoo
npm/@ethersproject/hdnode@5.7.0 None 0 80.7 kB ricmoo
npm/@ethersproject/json-wallets@5.7.0 None +1 351 kB ricmoo
npm/@ethersproject/keccak256@5.7.0 None 0 6.09 kB ricmoo
npm/@ethersproject/logger@5.7.0 None 0 69.5 kB ricmoo
npm/@ethersproject/networks@5.7.1 None 0 47.5 kB ricmoo
npm/@ethersproject/pbkdf2@5.7.0 None 0 17.4 kB ricmoo
npm/@ethersproject/properties@5.7.0 None 0 31 kB ricmoo
npm/@ethersproject/providers@5.7.2 network +1 1.32 MB ricmoo
npm/@ethersproject/random@5.7.0 None 0 17.3 kB ricmoo
npm/@ethersproject/rlp@5.7.0 None 0 29.6 kB ricmoo
npm/@ethersproject/sha2@5.7.0 None 0 21.7 kB ricmoo
npm/@ethersproject/signing-key@5.7.0 None +2 458 kB ricmoo
npm/@ethersproject/solidity@5.7.0 None 0 23.2 kB ricmoo
npm/@ethersproject/strings@5.7.0 None 0 119 kB ricmoo
npm/@ethersproject/transactions@5.7.0 None 0 89.6 kB ricmoo
npm/@ethersproject/units@5.7.0 None 0 20.2 kB ricmoo
npm/@ethersproject/wallet@5.7.0 None 0 55.2 kB ricmoo
npm/@ethersproject/web@5.7.1 network 0 128 kB ricmoo
npm/@ethersproject/wordlists@5.7.0 None 0 390 kB ricmoo
npm/@graphql-tools/batch-execute@8.5.1 None 0 34 kB ardatan
npm/@graphql-tools/delegate@8.8.1 None 0 139 kB ardatan
npm/@graphql-tools/merge@8.3.1 None 0 94.4 kB ardatan
npm/@graphql-tools/mock@8.7.20 environment +5 823 kB ardatan
npm/@graphql-tools/schema@8.5.1 None 0 64.8 kB ardatan
npm/@graphql-tools/utils@8.9.0 None 0 416 kB ardatan
npm/@graphql-typed-document-node/core@3.2.0 None 0 2.96 kB dotansimha
npm/@josephg/resolvable@1.0.1 None 0 3.21 kB josephg
npm/@protobufjs/aspromise@1.1.2 None 0 9.05 kB dcode
npm/@protobufjs/base64@1.1.2 None 0 9.22 kB dcode
npm/@protobufjs/codegen@2.0.4 None 0 9.14 kB dcode
npm/@protobufjs/eventemitter@1.1.0 None 0 7.75 kB dcode
npm/@protobufjs/fetch@1.1.0 network 0 8.76 kB dcode
npm/@protobufjs/float@1.0.2 None 0 27 kB dcode
npm/@protobufjs/inquire@1.1.0 None 0 4.29 kB dcode
npm/@protobufjs/path@1.1.2 None 0 7.77 kB dcode
npm/@protobufjs/pool@1.1.0 None 0 6.25 kB dcode
npm/@protobufjs/utf8@1.1.0 None 0 23.5 kB dcode
npm/@redux-saga/core@1.2.3 environment +1 611 kB redux-saga-release-bot
npm/@redux-saga/deferred@1.2.1 None 0 3.87 kB redux-saga-release-bot
npm/@redux-saga/delay-p@1.2.1 environment 0 4.48 kB redux-saga-release-bot
npm/@redux-saga/is@1.1.3 None 0 7.8 kB redux-saga-release-bot
npm/@redux-saga/symbols@1.1.3 None 0 4.68 kB redux-saga-release-bot
npm/@redux-saga/types@1.2.1 None 0 13.6 kB redux-saga-release-bot
npm/@sindresorhus/is@0.14.0 None 0 40.2 kB sindresorhus
npm/@szmarczak/http-timer@1.1.2 None 0 6.3 kB szmarczak
npm/@truffle/abi-utils@1.0.3 None +1 259 kB haltman
npm/@truffle/code-utils@3.0.4 None 0 39.4 kB haltman
npm/@truffle/codec@0.17.3 Transitive: environment +2 28.1 MB haltman
npm/@truffle/compile-common@0.9.8 None 0 39.9 kB haltman
npm/@truffle/config@1.3.61 None 0 69.8 kB haltman
npm/@truffle/dashboard-message-bus-client@0.1.12 Transitive: network +1 180 kB haltman
npm/@truffle/dashboard-message-bus-common@0.1.7 None 0 12.2 kB haltman
npm/@truffle/db-loader@0.2.36 None 0 3.53 kB haltman
npm/@truffle/db@2.0.36 filesystem +3 13.2 MB haltman
npm/@truffle/debugger@12.1.5 environment Transitive: filesystem, network, shell +50 9.15 MB haltman
npm/@truffle/error@0.2.2 None 0 2.77 kB haltman
npm/@truffle/events@0.1.25 None 0 51.5 kB haltman
npm/@truffle/interface-adapter@0.5.37 Transitive: network +7 3.23 MB haltman
npm/@truffle/promise-tracker@0.1.7 None 0 11.5 kB haltman
npm/@truffle/provider@0.3.13 None 0 19.3 kB haltman
npm/@truffle/source-map-utils@1.3.119 None 0 20 kB haltman
npm/@truffle/spinners@0.2.5 None 0 19.4 kB haltman
npm/@trufflesuite/spinnies@0.1.1 environment 0 52 kB benjamincburns
npm/@types/accepts@1.3.5 None 0 7.12 kB types
npm/@types/bn.js@5.1.1 None 0 14.1 kB types
npm/@types/body-parser@1.19.2 None 0 8.3 kB types
npm/@types/cacheable-request@6.0.3 None 0 9.28 kB types
npm/@types/connect@3.4.36 None 0 6.21 kB types
npm/@types/cors@2.8.12 None 0 6.35 kB types
npm/@types/express-serve-static-core@4.17.36 None 0 45.7 kB types
npm/@types/express@4.17.14 None 0 8.24 kB types
npm/@types/http-cache-semantics@4.0.1 None 0 9.55 kB types
npm/@types/http-errors@2.0.1 None 0 6.72 kB types
npm/@types/keyv@3.1.4 None 0 6.12 kB types
npm/@types/long@4.0.2 None 0 13.3 kB types
npm/@types/mime@1.3.2 None 0 4 kB types
npm/@types/node@10.17.5 None 0 611 kB types
npm/@types/pbkdf2@3.1.0 None 0 3.59 kB types
npm/@types/qs@6.9.8 None 0 7.07 kB types
npm/@types/range-parser@1.2.4 None 0 5.05 kB types
npm/@types/responselike@1.0.0 None 0 3.62 kB types
npm/@types/secp256k1@4.0.3 None 0 8.05 kB types
npm/@types/send@0.17.1 None 0 10.2 kB types
npm/@types/serve-static@1.15.2 None 0 8.15 kB types
npm/abort-controller@3.0.0 None 0 76.3 kB mysticatea
npm/abortcontroller-polyfill@1.7.5 network 0 94.6 kB molsson
npm/abstract-leveldown@7.2.0 None +2 341 kB vweevers
npm/accepts@1.3.8 None +2 241 kB dougwilson
npm/aes-js@3.0.0 None 0 2.43 MB ricmoo
npm/ansi-colors@4.1.1 environment 0 24.4 kB jonschlinkert
npm/apollo-datasource@3.3.2 None 0 3.15 kB apollo-bot
npm/apollo-reporting-protobuf@3.4.0 Transitive: environment, filesystem, network +1 3.42 MB apollo-bot
npm/apollo-server-core@3.12.1 environment, network 0 962 kB apollo-bot
npm/apollo-server-env@4.2.1 None 0 17.3 kB apollo-bot
npm/apollo-server-errors@3.3.1 None 0 29.7 kB apollo-bot
npm/apollo-server-express@3.12.1 None +1 72.2 kB apollo-bot
npm/apollo-server-plugin-base@3.7.2 None 0 14 kB apollo-bot
npm/apollo-server-types@3.8.0 None 0 25.4 kB apollo-bot
npm/apollo-server@3.12.1 network 0 26.6 kB apollo-bot
npm/app-module-path@2.2.0 unsafe 0 14.1 kB pnidem
npm/argsarray@0.0.1 None 0 3.69 kB cwmma
npm/array-flatten@1.1.1 None 0 4.42 kB blakeembrey
npm/asn1.js@4.10.1 unsafe 0 46.6 kB indutny
npm/asn1@0.2.4 None 0 18 kB melloc
npm/assert-plus@1.0.0 environment 0 11.4 kB pfmooney
npm/async-retry@1.3.3 None 0 5.21 kB leerobinson
npm/atomically@1.7.0 filesystem 0 93.3 kB fabiospampinato
npm/available-typed-arrays@1.0.5 None 0 14.1 kB ljharb
npm/aws-sign2@0.7.0 None 0 14.2 kB mikeal
npm/aws4@1.8.0 environment 0 31.9 kB hichaelmart
npm/axios@1.5.0 network Transitive: filesystem +1 1.8 MB jasonsaayman
npm/base64-js@1.3.1 None 0 9.18 kB feross
npm/bcrypt-pbkdf@1.0.2 None 0 29 kB arekinath
npm/bech32@1.1.4 None 0 9.98 kB junderw
npm/big-integer@1.6.36 None 0 164 kB peterolson
npm/big.js@6.2.1 None 0 58.6 kB mikemcl
npm/binary-extensions@2.2.0 None 0 5.36 kB sindresorhus
npm/bl@1.2.3 None 0 38.9 kB rvagg
npm/bluebird@3.7.1 environment, eval, unsafe 0 636 kB esailija
npm/body-parser@1.19.0 network 0 56.4 kB dougwilson
npm/braces@3.0.2 None 0 49.2 kB doowb
npm/brorand@1.1.0 None 0 3.52 kB indutny
npm/browser-stdout@1.3.1 None 0 2.3 kB kumavis
npm/browserify-cipher@1.0.1 None 0 6.45 kB cwmma
npm/browserify-des@1.0.2 None 0 6.27 kB cwmma
npm/browserify-rsa@4.0.1 None 0 11.6 kB dcousens
npm/browserify-sha3@0.0.4 None 0 4.58 kB null_radix
npm/browserify-sign@4.2.2 Transitive: environment +5 238 kB ljharb
npm/bs58check@2.1.2 None 0 4.79 kB dcousens
npm/buffer-alloc@1.2.0 None 0 2.27 kB linusu
npm/buffer-crc32@0.2.13 None 0 7.95 kB brianloveswords
npm/buffer-to-arraybuffer@0.0.5 None 0 6.24 kB miguelmota
npm/buffer@5.4.3 None 0 81.3 kB feross
npm/bufferutil@4.0.7 None 0 409 kB lpinca
npm/bytes@3.1.0 None 0 11 kB dougwilson
npm/cacheable-lookup@6.1.0 network 0 24.9 kB szmarczak
npm/cacheable-request@6.1.0 network +1 28.6 kB lukechilds
npm/call-bind@1.0.2 None 0 14.7 kB ljharb
npm/camel-case@3.0.0 None 0 2.99 kB blakeembrey
npm/camelcase@3.0.0 None 0 3.9 kB sindresorhus
npm/caseless@0.12.0 None 0 14.3 kB mikeal
npm/catering@2.1.1 None 0 5 kB vweevers
npm/cbor@5.2.0 None 0 89.4 kB hildjj
npm/change-case@3.0.2 None 0 20.3 kB blakeembrey
npm/chokidar@3.5.3 environment, filesystem 0 90.1 kB paulmillr
npm/cli-cursor@3.1.0 None 0 4.37 kB sindresorhus
npm/cliui@3.2.0 None +2 20.2 kB bcoe
npm/clone-buffer@1.0.0 None 0 4.28 kB phated
npm/clone-response@1.0.2 None 0 4.61 kB lukechilds
npm/code-point-at@1.1.0 None 0 2.99 kB sindresorhus
npm/colors@1.4.0 environment 0 39.5 kB dabh
npm/combined-stream@1.0.8 None 0 11.5 kB alexindigo
npm/conf@10.2.0 environment, filesystem 0 50 kB sindresorhus
npm/constant-case@2.0.0 None 0 2.58 kB blakeembrey
npm/content-hash@2.5.2 None 0 264 kB pldespaigne
npm/content-type@1.0.4 None 0 10.2 kB dougwilson
npm/cookie-signature@1.0.6 None 0 3.94 kB natevw
npm/cookiejar@2.1.4 None 0 14.5 kB andyburke
npm/core-util-is@1.0.2 None 0 23.2 kB isaacs
npm/cors@2.8.5 None 0 20 kB dougwilson
npm/crc-32@1.2.2 None 0 31 kB sheetjs
npm/create-ecdh@4.0.3 None 0 5.4 kB cwmma
npm/create-hmac@1.1.7 None 0 5.81 kB cwmma
npm/cross-fetch@3.1.8 network 0 75.1 kB lquixada
npm/crypto-addr-codec@0.1.8 None +1 557 kB leeondamiky
npm/crypto-browserify@3.12.0 None 0 53.5 kB cwmma
npm/cssfilter@0.0.10 None 0 32 kB leizongmin
npm/d@1.0.1 None 0 22.8 kB medikoo
npm/dashdash@1.14.1 environment, filesystem 0 80.6 kB trentm
npm/dataloader@2.1.0 None 0 58.8 kB leebyron
npm/debounce-fn@4.0.0 None +1 14.6 kB sindresorhus
npm/decamelize@1.2.0 None 0 2.94 kB sindresorhus
npm/decode-uri-component@0.2.2 None 0 6.09 kB samverschueren
npm/decompress-response@3.3.0 None 0 3.54 kB sindresorhus
npm/decompress-tar@4.1.1 None 0 3.85 kB kevva
npm/decompress-tarbz2@4.1.1 None +1 22.9 kB kevva
npm/decompress-targz@4.1.1 None 0 3.22 kB kevva
npm/decompress-unzip@4.0.1 None +2 33.1 kB kevva
npm/decompress@4.2.1 None 0 8.12 kB sindresorhus
npm/defer-to-connect@1.1.0 network 0 10.1 kB szmarczak
npm/deferred-leveldown@5.3.0 None +3 279 kB vweevers
npm/delay@5.0.0 None 0 11.2 kB sindresorhus
npm/depd@1.1.2 environment, eval 0 30.5 kB dougwilson
npm/des.js@1.0.1 None 0 38.6 kB indutny
npm/diff@5.0.0 None 0 369 kB kpdecker
npm/diffie-hellman@5.0.3 None 0 17.3 kB cwmma
npm/dom-walk@0.1.1 None 0 17.9 kB raynos
npm/dot-case@2.1.1 None 0 3.75 kB blakeembrey
npm/dot-prop@6.0.1 None 0 10.2 kB sindresorhus
npm/double-ended-queue@2.1.0-0 None 0 24.4 kB esailija
npm/duplexer3@0.1.4 None 0 6.43 kB floatdrop
npm/ecc-jsbn@0.1.2 None 0 27.8 kB aduh95
npm/elliptic@6.5.3 None 0 119 kB indutny
npm/emittery@0.4.1 None 0 20.3 kB novemberborn
npm/encoding-down@6.3.0 None +1 266 kB vweevers
npm/end-stream@0.1.0 None 0 3.29 kB raynos
npm/env-paths@2.2.1 None 0 10.2 kB sindresorhus
npm/errno@0.1.8 None 0 18.1 kB ralphtheninja
npm/error-ex@1.3.2 None 0 9.04 kB qix
npm/es5-ext@0.10.63 eval +1 381 kB medikoo
npm/es6-iterator@2.0.3 None 0 29.7 kB medikoo
npm/es6-promise@4.2.8 None 0 315 kB stefanpenner
npm/es6-symbol@3.1.3 None 0 19.4 kB medikoo
npm/escalade@3.1.1 filesystem 0 11.4 kB lukeed
npm/esniff@2.0.1 None +1 150 kB medikoo
npm/eth-ens-namehash@2.0.8 None 0 254 kB danfinlay
npm/eth-lib@0.1.27 None 0 94.3 kB maiavictor
npm/ethereum-bloom-filters@1.0.10 None 0 20.1 kB joshstevens19
npm/ethereum-cryptography@0.1.3 None 0 845 kB alcuadrado
npm/ethereumjs-util@7.1.5 None 0 310 kB holgerd77
npm/ethers@4.0.0-beta.3 network +1 2.4 MB ricmoo
npm/ethjs-unit@0.1.6 None +1 634 kB silentcicero
npm/event-emitter@0.3.5 None 0 27.2 kB medikoo
npm/event-target-shim@5.0.1 None 0 189 kB mysticatea
npm/express@4.18.2 environment, filesystem, network Transitive: eval, unsafe +21 865 kB dougwilson
npm/ext@1.2.0 None +1 126 kB medikoo
npm/extend@3.0.2 None 0 23.5 kB ljharb
npm/extsprintf@1.3.0 None 0 22.8 kB dap
npm/fast-check@3.1.1 None 0 799 kB ndubien
npm/fast-json-stable-stringify@2.0.0 None 0 16.1 kB esp
npm/fd-slicer@1.1.0 filesystem 0 29.8 kB thejoshwolfe
npm/fetch-cookie@0.11.0 network 0 9.68 kB valeriangalliat
npm/file-type@5.2.0 None 0 18 kB sindresorhus
npm/fill-range@7.0.1 None 0 16.4 kB jonschlinkert
npm/find-up@2.1.0 None +4 20.6 kB sindresorhus
npm/flat@5.0.2 None 0 26.6 kB timoxley
npm/follow-redirects@1.15.6 network 0 29.4 kB rubenverborgh
npm/for-each@0.3.3 None 0 13 kB ljharb
npm/foreach@2.0.6 None 0 8.73 kB manuelstofer
npm/forever-agent@0.6.1 network 0 14 kB simov
npm/form-data-encoder@1.7.1 None 0 47 kB octetstream
npm/form-data@2.3.3 filesystem, network 0 119 kB alexindigo
npm/fs-constants@1.0.0 filesystem 0 2.22 kB mafintosh
npm/fs-extra@4.0.3 filesystem 0 141 kB ryanzim
npm/fs-minipass@1.2.7 filesystem 0 13.1 kB isaacs
npm/function-bind@1.1.1 None 0 25.2 kB ljharb
npm/functional-red-black-tree@1.0.1 None 0 43.5 kB mikolalysenko
npm/ganache@7.9.1 environment, filesystem, network +38 188 MB truffle-cicd
npm/get-caller-file@1.0.3 None 0 2.48 kB stefanpenner
npm/get-intrinsic@1.1.3 eval 0 37.1 kB ljharb
npm/get-stream@4.1.0 None 0 7.88 kB sindresorhus
npm/getpass@0.1.7 filesystem 0 5.67 kB arekinath
npm/global@4.3.2 None 0 3.61 kB raynos
npm/got@9.6.0 filesystem, network 0 85.4 kB sindresorhus
npm/graceful-fs@4.2.3 environment, filesystem 0 27.6 kB isaacs
npm/graceful-readlink@1.0.1 filesystem 0 2.38 kB zhiyelee
npm/graphql-tag@2.12.6 None 0 172 kB apollo-bot
npm/graphql@15.8.0 environment 0 2.12 MB i1g
npm/har-schema@2.0.0 None 0 15.1 kB ahmadnassri
npm/har-validator@5.1.3 None 0 8.23 kB ahmadnassri
npm/has-symbol-support-x@1.4.2 None 0 16.7 kB xotic750
npm/has-to-string-tag-x@1.4.1 None 0 15.1 kB xotic750
npm/has-tostringtag@1.0.0 None 0 10.9 kB ljharb
npm/has@1.0.3 None 0 2.77 kB ljharb
npm/hash-base@3.0.4 None 0 6.03 kB dcousens
npm/header-case@1.0.1 None 0 3.94 kB blakeembrey
npm/hosted-git-info@2.8.9 None 0 25.8 kB nlf
npm/http-cache-semantics@4.1.1 None 0 35.9 kB kornel
npm/http-errors@1.7.2 None +1 20.9 kB dougwilson
npm/http-https@1.0.0 network 0 2.36 kB isaacs
npm/http-signature@1.2.0 network 0 48.4 kB arekinath
npm/http2-wrapper@2.2.0 network 0 75.3 kB szmarczak
npm/idna-uts46-hx@2.3.1 None +1 232 kB 1api
npm/ieee754@1.1.13 None 0 6.25 kB feross
npm/immediate@3.3.0 None 0 21 kB cwmma
npm/invert-kv@1.0.0 None 0 1.3 kB sindresorhus
npm/is-arguments@1.1.1 None 0 28.8 kB ljharb
npm/is-arrayish@0.2.1 None 0 4.05 kB qix
npm/is-binary-path@2.1.0 None 0 3.08 kB sindresorhus
npm/is-core-module@2.13.0 None 0 29.8 kB ljharb
npm/is-fullwidth-code-point@1.0.0 None 0 4.25 kB sindresorhus
npm/is-function@1.0.1 None 0 175 kB grncdr
npm/is-generator-function@1.0.10 eval 0 31.9 kB ljharb
npm/is-hex-prefixed@1.0.0 None 0 9.44 kB silentcicero
npm/is-lower-case@1.1.3 None 0 3.68 kB blakeembrey
npm/is-natural-number@4.0.1 None 0 5.81 kB shinnn
npm/is-obj@2.0.0 None 0 2.82 kB sindresorhus
npm/is-object@1.0.1 None 0 6.98 kB ljharb
npm/is-plain-obj@1.1.0 None 0 2.62 kB sindresorhus
npm/is-retry-allowed@1.2.0 None 0 3.6 kB sindresorhus
npm/is-typed-array@1.1.12 None 0 17.6 kB ljharb
npm/is-typedarray@1.0.0 None 0 4.41 kB hughsk
npm/is-unicode-supported@0.1.0 None 0 3.54 kB sindresorhus
npm/is-upper-case@1.1.2 None 0 3.8 kB blakeembrey
npm/is-utf8@0.2.1 None 0 4.34 kB wayfind
npm/isomorphic-ws@4.0.1 None 0 3.89 kB heineiuo
npm/isstream@0.1.2 None 0 13.3 kB rvagg
npm/isurl@1.0.0 None 0 4.03 kB stevenvachon
npm/js-sha3@0.6.1 None 0 105 kB emn178
npm/json-buffer@3.0.0 None 0 5.44 kB dominictarr
npm/json-pointer@0.6.2 None 0 100 kB manuelstofer
npm/json-schema-typed@7.0.3 None 0 56.9 kB jayrylan
npm/json-schema@0.2.3 None 0 147 kB kriszyp
npm/json-stable-stringify@1.0.2 None 0 23.8 kB ljharb
npm/jsonfile@4.0.0 filesystem 0 16.9 kB ryanzim
npm/jsonify@0.0.1 None 0 19.4 kB ljharb
npm/jsprim@1.4.1 None 0 31.1 kB dap
npm/keccak@3.0.3 None 0 779 kB fanatid
npm/keccakjs@0.2.3 None 0 4.54 kB axic
npm/keyv@3.1.0 None 0 14.7 kB lukechilds
npm/klaw@1.3.1 filesystem 0 12.6 kB jprichardson
npm/lcid@1.0.0 None 0 6.43 kB sindresorhus
npm/level-codec@9.0.2 None 0 32.8 kB vweevers
npm/level-errors@2.0.1 None 0 12.6 kB vweevers
npm/level-iterator-stream@4.0.2 None 0 26.5 kB vweevers
npm/level-js@5.0.2 None 0 66.5 kB vweevers
npm/level-packager@5.1.1 None 0 32.8 kB vweevers
npm/level-write-stream@1.0.0 None 0 3.42 kB raynos
npm/level@6.0.1 None 0 51.3 kB vweevers
npm/leveldown@5.6.0 Transitive: environment, filesystem +1 5.15 MB vweevers
npm/levelup@4.4.0 None 0 108 kB vweevers
npm/load-json-file@1.1.0 None 0 3.4 kB sindresorhus
npm/locate-path@3.0.0 None 0 3.87 kB sindresorhus
npm/lodash-es@4.17.21 eval 0 636 kB bnjmnt4n
npm/lodash.assign@4.2.0 None 0 19.9 kB jdalton
npm/lodash.sortby@4.7.0 None 0 75.8 kB jdalton
npm/log-symbols@4.1.0 None 0 4.58 kB sindresorhus
npm/loglevel@1.8.1 None 0 139 kB pimterry
npm/long@4.0.0 None 0 177 kB dcode
npm/lower-case-first@1.0.2 None 0 4.01 kB blakeembrey
npm/lower-case@1.1.4 None 0 4.78 kB blakeembrey
npm/lowercase-keys@1.0.1 None 0 2.46 kB sindresorhus
npm/lru-cache@6.0.0 None +1 30.4 kB isaacs
npm/ltgt@2.2.1 None 0 17.5 kB dominictarr
npm/make-dir@1.3.0 filesystem +1 13.6 kB sindresorhus
npm/media-typer@0.3.0 None 0 11.1 kB dougwilson
npm/memdown@1.4.1 None +2 179 kB vweevers
npm/memorystream@0.3.1 None 0 23.2 kB jsbizon
npm/merge-descriptors@1.0.1 None 0 4.89 kB dougwilson
npm/methods@1.1.2 network 0 5.29 kB dougwilson
npm/miller-rabin@4.0.1 None 0 6.84 kB indutny
npm/mime-db@1.42.0 None 0 191 kB dougwilson
npm/mime-types@2.1.25 None 0 16.1 kB dougwilson
npm/mimic-fn@2.1.0 None 0 4.46 kB sindresorhus
npm/mimic-response@1.0.1 None 0 3.58 kB sindresorhus
npm/min-document@2.19.0 None 0 54.9 kB raynos
npm/minimist@1.2.6 None 0 33.2 kB substack
npm/minipass@2.9.0 None 0 36.5 kB isaacs
npm/minizlib@1.3.3 None 0 16.2 kB isaacs
npm/mkdirp-promise@5.0.1 None 0 4.63 kB ahmadnassri
npm/mkdirp@0.5.5 filesystem 0 7.53 kB isaacs
npm/mocha@10.1.0 environment, eval, filesystem +17 2.72 MB juergba
npm/mock-fs@4.10.3 filesystem 0 96.5 kB tschaub
npm/nan@2.13.2 None 0 417 kB kkoopa
npm/nano-base32@1.0.1 None 0 5.84 kB grayolson
npm/nano-json-stream-parser@0.1.2 None 0 8.66 kB maiavictor
npm/nanoid@3.3.3 None 0 21.6 kB ai
npm/no-case@2.3.2 None 0 30.8 kB blakeembrey
npm/node-abort-controller@3.1.1 None 0 16.9 kB ethan_arrowood
npm/node-fetch@2.7.0 network 0 162 kB node-fetch-bot
npm/node-gyp-build@4.6.1 environment, filesystem 0 13.2 kB mafintosh
npm/node-interval-tree@1.3.3 None 0 82.1 kB 2pacalypse-
npm/nofilter@1.0.4 None 0 26 kB hildjj
npm/normalize-package-data@2.5.0 None +1 90 kB audrey.e
npm/normalize-url@4.5.1 None 0 18.1 kB sindresorhus
npm/number-is-nan@1.0.1 None 0 2.35 kB sindresorhus
npm/number-to-bn@1.7.0 None 0 429 kB silentcicero
npm/oauth-sign@0.9.0 None 0 13.8 kB simov
npm/object-inspect@1.12.2 None 0 93.6 kB ljharb
npm/oboe@2.1.4 network 0 7.5 MB juancaicedo
npm/on-finished@2.3.0 None 0 12.3 kB dougwilson
npm/original-require@1.0.1 None 0 511 B tcoulter
npm/os-locale@1.4.0 environment, shell 0 5.47 kB sindresorhus
npm/p-cancelable@1.1.0 None 0 12.5 kB sindresorhus
npm/p-locate@3.0.0 None 0 5.05 kB sindresorhus
npm/p-timeout@1.2.1 None 0 4.4 kB sindresorhus
npm/param-case@2.1.1 None 0 3.82 kB blakeembrey
npm/parse-asn1@5.1.5 None 0 13.1 kB cwmma
npm/parse-headers@2.0.3 None 0 17.1 kB kesla
npm/parse-json@2.2.0 None 0 33.5 kB sindresorhus
npm/pascal-case@2.0.1 None 0 4.16 kB blakeembrey
npm/path-case@2.1.1 None 0 3.78 kB blakeembrey
npm/path-to-regexp@0.1.7 None 0 6.78 kB blakeembrey
npm/path-type@1.1.0 None 0 3.54 kB sindresorhus
npm/pbkdf2@3.0.17 None 0 12.9 kB cwmma
npm/pend@1.2.0 None 0 6.01 kB superjoe
npm/performance-now@2.1.0 None 0 11.3 kB meryn
npm/pkg-up@3.1.0 None +1 9.1 kB sindresorhus
npm/pluralize@8.0.0 None 0 17.7 kB blakeembrey
npm/pouchdb-abstract-mapreduce@7.3.1 None 0 85.2 kB albaherreriasdev
npm/pouchdb-adapter-leveldb-core@7.3.1 None 0 193 kB albaherreriasdev
npm/pouchdb-adapter-memory@7.3.1 None 0 13.9 kB albaherreriasdev
npm/pouchdb-adapter-utils@7.3.1 None 0 39.2 kB albaherreriasdev
npm/pouchdb-binary-utils@7.3.1 None 0 26.5 kB albaherreriasdev
npm/pouchdb-collate@7.3.1 None 0 36.2 kB albaherreriasdev
npm/pouchdb-collections@7.3.1 None 0 17.9 kB albaherreriasdev
npm/pouchdb-debug@7.2.1 Transitive: environment +1 69.3 kB garethbowen
npm/pouchdb-errors@7.3.1 None 0 21.7 kB albaherreriasdev
npm/pouchdb-fetch@7.3.1 network +1 167 kB albaherreriasdev
npm/pouchdb-find@7.3.1 None 0 197 kB albaherreriasdev
npm/pouchdb-json@7.3.1 None 0 14.1 kB albaherreriasdev
npm/pouchdb-mapreduce-utils@7.3.1 None 0 18.4 kB albaherreriasdev
npm/pouchdb-md5@7.3.1 None 0 17.8 kB albaherreriasdev
npm/pouchdb-merge@7.3.1 None 0 38.4 kB albaherreriasdev
npm/pouchdb-selector-core@7.3.1 None 0 53.1 kB albaherreriasdev
npm/pouchdb-utils@7.3.1 eval +1 211 kB albaherreriasdev
npm/pouchdb@7.3.0 filesystem, network, unsafe Transitive: environment +3 4.01 MB albaherreriasdev
npm/prepend-http@2.0.0 None 0 2.98 kB sindresorhus
npm/process@0.5.2 None 0 3.44 kB shtylman
npm/proxy-from-env@1.1.0 environment 0 29.5 kB rob-w
npm/prr@1.0.1 None 0 10.1 kB rvagg
npm/psl@1.4.0 None 0 431 kB lupomontero
npm/public-encrypt@4.0.3 None 0 27.8 kB cwmma
npm/punycode@2.1.1 None 0 32.4 kB mathias
npm/pure-rand@5.0.5 None 0 66.1 kB ndubien
npm/qs@6.7.0 None 0 143 kB ljharb
npm/query-string@5.1.1 None 0 12.7 kB sindresorhus
npm/quick-lru@5.1.1 None 0 8.64 kB sindresorhus
npm/randombytes@2.1.0 None 0 6.36 kB cwmma
npm/randomfill@1.0.4 None 0 6.84 kB cwmma
npm/randomhex@0.1.5 None 0 4.75 kB frozeman
npm/raw-body@2.4.0 network 0 22.7 kB dougwilson
npm/react-pagination-nav@1.0.7 None 0 22.3 kB mohitkyadav
npm/read-pkg-up@1.0.1 Transitive: filesystem +2 11.9 kB sindresorhus
npm/read-pkg@1.1.0 None 0 4.42 kB sindresorhus
npm/readable-stream@2.3.6 environment 0 88 kB matteo.collina
npm/readdirp@3.6.0 filesystem 0 20.5 kB paulmillr
npm/redux-saga@1.0.0 None 0 118 kB andarist
npm/redux@3.7.2 environment 0 136 kB timdorr
npm/regenerator-runtime@0.14.0 None 0 27.8 kB benjamn
npm/request@2.88.0 environment, filesystem, network +1 333 kB mikeal
npm/require-directory@2.1.1 filesystem 0 12.1 kB troygoode
npm/require-main-filename@1.0.1 None 0 4.14 kB bcoe
npm/reselect-tree@1.3.7 Transitive: environment +1 81 kB haltman
npm/reselect@4.1.8 None 0 175 kB acemarke
npm/resolve-alpn@1.2.1 network 0 4.64 kB szmarczak
npm/resolve@1.22.4 environment, filesystem 0 145 kB ljharb
npm/responselike@1.0.2 None 0 4.63 kB lukechilds
npm/restore-cursor@3.1.0 None 0 2.82 kB sindresorhus
npm/retry@0.13.1 None 0 18.9 kB tim-kos
npm/rimraf@2.7.1 filesystem 0 15.5 kB isaacs
npm/ripemd160-min@0.0.6 None 0 38.9 kB zone117x
npm/rlp@2.2.7 None 0 62.9 kB ralxz
npm/safe-buffer@5.2.0 None 0 31.9 kB feross
npm/scrypt-js@2.0.3 None 0 225 kB ricmoo
npm/scryptsy@2.1.0 None 0 15.6 kB junderw
npm/seek-bzip@1.0.5 Transitive: filesystem, shell +1 85.8 kB cscott
npm/semver@7.5.4 None 0 93.4 kB npm-cli-ops
npm/sentence-case@2.1.1 None 0 4.29 kB blakeembrey
npm/serialize-javascript@6.0.0 None 0 16.8 kB okuryu

🚮 Removed packages: npm/antd@5.17.3, npm/gh-pages@6.1.1, npm/ipfs-api@26.1.2, npm/react-dom@18.3.1, npm/react-loading@2.0.3, npm/react-router-dom@6.23.1, npm/react-scripts@5.0.1, npm/react@18.3.1, npm/truffle-hdwallet-provider@1.0.17, npm/web3@4.8.0

View full report↗︎

Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSource
Install scripts npm/@apollo/protobufjs@1.2.6
  • Install script: postinstall
  • Source: node scripts/postinstall
Install scripts npm/@apollo/protobufjs@1.2.7
  • Install script: postinstall
  • Source: node scripts/postinstall
Install scripts npm/web3@1.10.0
  • Install script: postinstall
  • Source: echo "Web3.js 4.x alpha has been released for early testing and feedback. Checkout doc at https://docs.web3js.org/ "
Install scripts npm/web3-bzz@1.10.0
  • Install script: postinstall
  • Source: echo "WARNING: the web3-bzz api will be deprecated in the next version"
Install scripts npm/web3-shh@1.10.0
  • Install script: postinstall
  • Source: echo "WARNING: the web3-shh api will be deprecated in the next version"
Protestware/Troll package npm/es5-ext@0.10.63
  • Note: This package prints a protestware console message on install regarding Ukraine for users with Russian language locale
Install scripts npm/es5-ext@0.10.63
  • Install script: postinstall
  • Source: node -e "try{require('./_postinstall')}catch(e){}"

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

What is protestware?

This package is a joke, parody, or includes undocumented or hidden behavior unrelated to its primary function.

Consider that consuming this package my come along with functionality unrelated to its primary purpose.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

  • @SocketSecurity ignore npm/@apollo/protobufjs@1.2.6
  • @SocketSecurity ignore npm/@apollo/protobufjs@1.2.7
  • @SocketSecurity ignore npm/web3@1.10.0
  • @SocketSecurity ignore npm/web3-bzz@1.10.0
  • @SocketSecurity ignore npm/web3-shh@1.10.0
  • @SocketSecurity ignore npm/es5-ext@0.10.63

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants