Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the production-dependencies group across 1 directory with 14 updates #112

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 20, 2025

Bumps the production-dependencies group with 14 updates in the /frontend directory:

Package From To
@angular/animations 18.2.12 19.1.2
@angular/cdk 18.2.13 19.1.0
@angular/common 18.2.12 19.1.2
@angular/compiler 18.2.12 19.1.2
@angular/core 18.2.12 19.1.2
@angular/forms 18.2.12 19.1.2
@angular/material 18.2.13 19.1.0
@angular/platform-browser 18.2.12 19.1.2
@angular/platform-browser-dynamic 18.2.12 19.1.2
@angular/router 18.2.12 19.1.2
@octokit/types 13.6.1 13.7.0
cronstrue 2.51.0 2.53.0
highcharts 11.4.8 12.1.2
ng2-charts 7.0.0 8.0.0

Updates @angular/animations from 18.2.12 to 19.1.2

Release notes

Sourced from @​angular/animations's releases.

v19.1.2

19.1.2 (2025-01-20)

compiler

Commit Description
fix - 8dcd889987 update @ng/component URL to be relative (#59620)

compiler-cli

Commit Description
fix - 95a05bb202 disable tree shaking during HMR (#59595)

core

Commit Description
fix - a4eb74c79c animation sometimes renderer not being destroyed during HMR (#59574)
fix - 906413aba3 change Resource to use explicit undefined in its typings (#59024)
fix - 4eb541837c cleanup _ejsa when app is destroyed (#59492)
fix - 5497102769 cleanup stash listener when app is destroyed (#59598)
fix - 266a8f2f2e handle shadow DOM encapsulated component with HMR (#59597)
fix - 6f7716268a HMR not matching component that injects ViewContainerRef (#59596)
fix - d12a186d53 treat exceptions in equal as part of computation (#55818)

v19.1.1

19.1.1 (2025-01-16)

core

Commit Description
fix - 357795cb96 run HMR replacement in the zone (#59562)

platform-browser

Commit Description
fix - eb0b1851f4 roll back HMR fix (#59557)

v19.1.0

19.1.0 (2025-01-15)

common

Commit Description
feat - e4c50b3bea expose component instance in NgComponentOutlet (#58698)

compiler

Commit Description
fix - ceadd28ea1 allow $any in two-way bindings (#59362)
fix - aed49ddaaa use chunk origin in template HMR request URL (#59459)

compiler-cli

Commit Description
fix - c5c20e9d86 check event side of two-way bindings (#59002)

... (truncated)

Changelog

Sourced from @​angular/animations's changelog.

19.1.2 (2025-01-20)

compiler

Commit Type Description
8dcd889987 fix update @ng/component URL to be relative (#59620)

compiler-cli

Commit Type Description
95a05bb202 fix disable tree shaking during HMR (#59595)

core

Commit Type Description
a4eb74c79c fix animation sometimes renderer not being destroyed during HMR (#59574)
906413aba3 fix change Resource to use explicit undefined in its typings (#59024)
4eb541837c fix cleanup _ejsa when app is destroyed (#59492)
5497102769 fix cleanup stash listener when app is destroyed (#59598)
266a8f2f2e fix handle shadow DOM encapsulated component with HMR (#59597)
6f7716268a fix HMR not matching component that injects ViewContainerRef (#59596)
d12a186d53 fix treat exceptions in equal as part of computation (#55818)

19.1.1 (2025-01-16)

core

Commit Type Description
357795cb96 fix run HMR replacement in the zone (#59562)

platform-browser

Commit Type Description
eb0b1851f4 fix roll back HMR fix (#59557)

19.1.0 (2025-01-15)

common

Commit Type Description
e4c50b3bea feat expose component instance in NgComponentOutlet (#58698)

compiler

Commit Type Description
ceadd28ea1 fix allow $any in two-way bindings (#59362)
aed49ddaaa fix use chunk origin in template HMR request URL (#59459)

compiler-cli

Commit Type Description
c5c20e9d86 fix check event side of two-way bindings (#59002)

... (truncated)

Commits
  • a4eb74c fix(core): animation sometimes renderer not being destroyed during HMR (#59574)
  • bfaeefe refactor(animations): drop warning functions in production (#59408)
  • 0e23f20 fix(platform-browser): styles not replaced during HMR when using animations r...
  • 2f5f898 docs(animations): update position parameter to be a decimal (#57927)
  • d010e11 feat(core): add event listener options to renderer (#59092)
  • 0513fbc docs: set syntax highlighting of code examples MD code blocks (#59026)
  • 8d6ea5b docs: fix missing alert block styles in the API reference (#59020)
  • 09df589 refactor(core): Migrate all packages with the explicit-standalone-flag sche...
  • 84b6896 refactor(platform-server): Add an ssr benchmark setup. (#57647)
  • 9dbe6fc refactor: update license text to point to angular.dev (#57901)
  • See full diff in compare view

Updates @angular/cdk from 18.2.13 to 19.1.0

Release notes

Sourced from @​angular/cdk's releases.

v19.1.0

19.1.0 "denim-firefly" (2025-01-16)

material-luxon-adapter

Commit Description
fix - e52a369a1b infer first day of week from locale (#30285)

material-experimental

Commit Description
feat - 8685c01a92 column-resize: Add support for "lazy" rather than live updating during resizing. (#30120)

cdk-experimental

Commit Description
feat - 75c8aa8767 column-resize: Support column size persistance hooks (#30136)
fix - 50d906b3e3 column-resize: Previous size was being sent for persistance rather than newly updated size in non-live resize mode. (#30161)

material

Commit Description
feat - f47f5f9a1e schematics: Add CSS output to custom theme schematic (#30004)
fix - 057ed370aa api-theme: fix nav items hover/focus contrast (#1004)
fix - 5138fe7b38 checkbox: ensure focus indicator has the correct shape (#30332)
fix - 3163040850 docs: change twitter logo (#1245)
fix - 781e91e798 menu: lazy content not detached after animation (#30301)
fix - a3d9e4b45d select: match disabled placeholder color with label (#29870)
fix - 027c3ad267 select: remove color transition w/ no animations module (#30304)
fix - 4f676d4030 slider: active vs inactive tick mark count (#30319)
fix - eae073032c slider: tick mark positioning (#30329)
fix - 0c099ff024 sort: avoid center align for sort header
fix - 6ca21fd740 tabs: tab nav bar animation not working when navigating forwards (#30313)
fix - a0b5546111 theme: unselected theme picker
fix - 884740d605 tooltip: deprecate matTooltipAnimations (#30310)
perf - ab497c44e7 button: Remove unused inject. (#30320)
perf - ab44d45c56 table: Optimize expensive css selector (#30305)
perf - 980f9ba7bb tooltip: Use afterNextRender to invoke aria describer to align layout updates with other components using afterNextRender. (#30265)

cdk

Commit Description
feat - 62a672af0d dialog: expose cdk dialog docs (#1144)
feat - a0a16fc70e menu: expose cdk menu docs (#1142)
fix - 2be0afcfb5 menu: avoid resetting the scroll position when using the mouse (#30249)
fix - e421765d8d menu: not responding to position changes (#30234)
fix - 5c75bbecb2 scrolling: avoid SSR error in CdkVirtualScrollableWindow (#30259)
perf - d721f0c2bc table: Use afterNextRender for sticky styling. Fixes a performance regression dating back to #28393 and removes need for coalesced sticky styler. (#30242)

Commit Description
feat - f5abaa31a1 add 404 page (#902)
feat - 5c5903e82c add button to copy link to example (#922)
feat - 76f9d98d22 add cdk/testing docs (#678)

... (truncated)

Changelog

Sourced from @​angular/cdk's changelog.

19.1.0 "denim-firefly" (2025-01-16)

cdk

Commit Type Description
62a672af0d feat dialog: expose cdk dialog docs (#1144)
a0a16fc70e feat menu: expose cdk menu docs (#1142)
2be0afcfb5 fix menu: avoid resetting the scroll position when using the mouse (#30249)
e421765d8d fix menu: not responding to position changes (#30234)
5c75bbecb2 fix scrolling: avoid SSR error in CdkVirtualScrollableWindow (#30259)
d721f0c2bc perf table: Use afterNextRender for sticky styling. Fixes a performance regression dating back to #28393 and removes need for coalesced sticky styler. (#30242)

material

Commit Type Description
f47f5f9a1e feat schematics: Add CSS output to custom theme schematic (#30004)
057ed370aa fix api-theme: fix nav items hover/focus contrast (#1004)
5138fe7b38 fix checkbox: ensure focus indicator has the correct shape (#30332)
3163040850 fix docs: change twitter logo (#1245)
781e91e798 fix menu: lazy content not detached after animation (#30301)
a3d9e4b45d fix select: match disabled placeholder color with label (#29870)
027c3ad267 fix select: remove color transition w/ no animations module (#30304)
4f676d4030 fix slider: active vs inactive tick mark count (#30319)
eae073032c fix slider: tick mark positioning (#30329)
0c099ff024 fix sort: avoid center align for sort header
6ca21fd740 fix tabs: tab nav bar animation not working when navigating forwards (#30313)
a0b5546111 fix theme: unselected theme picker
884740d605 fix tooltip: deprecate matTooltipAnimations (#30310)
ab497c44e7 perf button: Remove unused inject. (#30320)
ab44d45c56 perf table: Optimize expensive css selector (#30305)
980f9ba7bb perf tooltip: Use afterNextRender to invoke aria describer to align layout updates with other components using afterNextRender. (#30265)

cdk-experimental

Commit Type Description
75c8aa8767 feat column-resize: Support column size persistance hooks (#30136)
50d906b3e3 fix column-resize: Previous size was being sent for persistance rather than newly updated size in non-live resize mode. (#30161)

material-experimental

Commit Type Description
8685c01a92 feat column-resize: Add support for "lazy" rather than live updating during resizing. (#30120)

material-luxon-adapter

Commit Type Description
e52a369a1b fix infer first day of week from locale (#30285)

Commit Type Description
f5abaa31a1 feat add 404 page (#902)
5c5903e82c feat add button to copy link to example (#922)
76f9d98d22 feat add cdk/testing docs (#678)
39ab48f4be feat add cookie popup (#988)
cfdc032c09 feat add CSP and recommended security headers to site

... (truncated)

Commits
  • 7a3eb6c release: cut the v19.1.0 release
  • 0f12ed2 Revert "test(material/timepicker): updates timepicker.spec.ts (#30335)" (#30342)
  • 5138fe7 fix(material/checkbox): ensure focus indicator has the correct shape (#30332)
  • eae0730 fix(material/slider): tick mark positioning (#30329)
  • 0df6e03 test(material/timepicker): updates timepicker.spec.ts (#30335)
  • ab497c4 perf(material/button): Remove unused inject. (#30320)
  • 4f676d4 fix(material/slider): active vs inactive tick mark count (#30319)
  • 9490f1a refactor: move material.aio GHA to the root (#30288)
  • ab44d45 perf(material/table): Optimize expensive css selector (#30305)
  • 6c8c976 test(material/slider): Ensure tick marks are rendered correctly (#30317)
  • Additional commits viewable in compare view

Updates @angular/common from 18.2.12 to 19.1.2

Release notes

Sourced from @​angular/common's releases.

v19.1.2

19.1.2 (2025-01-20)

compiler

Commit Description
fix - 8dcd889987 update @ng/component URL to be relative (#59620)

compiler-cli

Commit Description
fix - 95a05bb202 disable tree shaking during HMR (#59595)

core

Commit Description
fix - a4eb74c79c animation sometimes renderer not being destroyed during HMR (#59574)
fix - 906413aba3 change Resource to use explicit undefined in its typings (#59024)
fix - 4eb541837c cleanup _ejsa when app is destroyed (#59492)
fix - 5497102769 cleanup stash listener when app is destroyed (#59598)
fix - 266a8f2f2e handle shadow DOM encapsulated component with HMR (#59597)
fix - 6f7716268a HMR not matching component that injects ViewContainerRef (#59596)
fix - d12a186d53 treat exceptions in equal as part of computation (#55818)

v19.1.1

19.1.1 (2025-01-16)

core

Commit Description
fix - 357795cb96 run HMR replacement in the zone (#59562)

platform-browser

Commit Description
fix - eb0b1851f4 roll back HMR fix (#59557)

v19.1.0

19.1.0 (2025-01-15)

common

Commit Description
feat - e4c50b3bea expose component instance in NgComponentOutlet (#58698)

compiler

Commit Description
fix - ceadd28ea1 allow $any in two-way bindings (#59362)
fix - aed49ddaaa use chunk origin in template HMR request URL (#59459)

compiler-cli

Commit Description
fix - c5c20e9d86 check event side of two-way bindings (#59002)

... (truncated)

Changelog

Sourced from @​angular/common's changelog.

19.1.2 (2025-01-20)

compiler

Commit Type Description
8dcd889987 fix update @ng/component URL to be relative (#59620)

compiler-cli

Commit Type Description
95a05bb202 fix disable tree shaking during HMR (#59595)

core

Commit Type Description
a4eb74c79c fix animation sometimes renderer not being destroyed during HMR (#59574)
906413aba3 fix change Resource to use explicit undefined in its typings (#59024)
4eb541837c fix cleanup _ejsa when app is destroyed (#59492)
5497102769 fix cleanup stash listener when app is destroyed (#59598)
266a8f2f2e fix handle shadow DOM encapsulated component with HMR (#59597)
6f7716268a fix HMR not matching component that injects ViewContainerRef (#59596)
d12a186d53 fix treat exceptions in equal as part of computation (#55818)

19.1.1 (2025-01-16)

core

Commit Type Description
357795cb96 fix run HMR replacement in the zone (#59562)

platform-browser

Commit Type Description
eb0b1851f4 fix roll back HMR fix (#59557)

19.1.0 (2025-01-15)

common

Commit Type Description
e4c50b3bea feat expose component instance in NgComponentOutlet (#58698)

compiler

Commit Type Description
ceadd28ea1 fix allow $any in two-way bindings (#59362)
aed49ddaaa fix use chunk origin in template HMR request URL (#59459)

compiler-cli

Commit Type Description
c5c20e9d86 fix check event side of two-way bindings (#59002)

... (truncated)

Commits
  • 810ed6a refactor(common): prevent duplicating Content-Type header (#59518)
  • e2b7359 refactor(common): drop error message in production (#59471)
  • 95c0e51 docs: update class & style binding recommendation (#59240)
  • 6a0dd96 Revert "refactor: initialize headers map directly in HttpHeaders class (#5926...
  • 3e7ba3d docs: set syntax highlighting to the remaining Markdown code examples blocks ...
  • 51a4839 refactor(common): tree-shake lcpObserver in NgOptimizedImage (#59481)
  • f6e7516 refactor(common): tree-shake transfer cache interceptor stuff (#59439)
  • f73f39c refactor: initialize headers map directly in HttpHeaders class (#59268)
  • 411b4f5 refactor(common): prevent duplicating Accept header (#59467)
  • de12b52 refactor(common): drop enums by changing to const enum (#59468)
  • Additional commits viewable in compare view

Updates @angular/compiler from 18.2.12 to 19.1.2

Release notes

Sourced from @​angular/compiler's releases.

v19.1.2

19.1.2 (2025-01-20)

compiler

Commit Description
fix - 8dcd889987 update @ng/component URL to be relative (#59620)

compiler-cli

Commit Description
fix - 95a05bb202 disable tree shaking during HMR (#59595)

core

Commit Description
fix - a4eb74c79c animation sometimes renderer not being destroyed during HMR (#59574)
fix - 906413aba3 change Resource to use explicit undefined in its typings (#59024)
fix - 4eb541837c cleanup _ejsa when app is destroyed (#59492)
fix - 5497102769 cleanup stash listener when app is destroyed (#59598)
fix - 266a8f2f2e handle shadow DOM encapsulated component with HMR (#59597)
fix - 6f7716268a HMR not matching component that injects ViewContainerRef (#59596)
fix - d12a186d53 treat exceptions in equal as part of computation (#55818)

v19.1.1

19.1.1 (2025-01-16)

core

Commit Description
fix - 357795cb96 run HMR replacement in the zone (#59562)

platform-browser

Commit Description
fix - eb0b1851f4 roll back HMR fix (#59557)

v19.1.0

19.1.0 (2025-01-15)

common

Commit Description
feat - e4c50b3bea expose component instance in NgComponentOutlet (#58698)

compiler

Commit Description
fix - ceadd28ea1 allow $any in two-way bindings (#59362)
fix - aed49ddaaa use chunk origin in template HMR request URL (#59459)

compiler-cli

Commit Description
fix - c5c20e9d86 check event side of two-way bindings (#59002)

... (truncated)

Changelog

Sourced from @​angular/compiler's changelog.

19.1.2 (2025-01-20)

compiler

Commit Type Description
8dcd889987 fix update @ng/component URL to be relative (#59620)

compiler-cli

Description has been truncated

Commit Type Description
95a05bb202 fix disable tree shaking during HMR (#59595)

…ates

Bumps the production-dependencies group with 14 updates in the /frontend directory:

| Package | From | To |
| --- | --- | --- |
| [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `18.2.12` | `19.1.2` |
| [@angular/cdk](https://github.com/angular/components) | `18.2.13` | `19.1.0` |
| [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `18.2.12` | `19.1.2` |
| [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `18.2.12` | `19.1.2` |
| [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `18.2.12` | `19.1.2` |
| [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `18.2.12` | `19.1.2` |
| [@angular/material](https://github.com/angular/components) | `18.2.13` | `19.1.0` |
| [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `18.2.12` | `19.1.2` |
| [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `18.2.12` | `19.1.2` |
| [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `18.2.12` | `19.1.2` |
| [@octokit/types](https://github.com/octokit/types.ts) | `13.6.1` | `13.7.0` |
| [cronstrue](https://github.com/bradymholt/cronstrue) | `2.51.0` | `2.53.0` |
| [highcharts](https://github.com/highcharts/highcharts-dist) | `11.4.8` | `12.1.2` |
| [ng2-charts](https://github.com/valor-software/ng2-charts) | `7.0.0` | `8.0.0` |



Updates `@angular/animations` from 18.2.12 to 19.1.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/19.1.2/packages/animations)

Updates `@angular/cdk` from 18.2.13 to 19.1.0
- [Release notes](https://github.com/angular/components/releases)
- [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md)
- [Commits](angular/components@18.2.13...19.1.0)

Updates `@angular/common` from 18.2.12 to 19.1.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/19.1.2/packages/common)

Updates `@angular/compiler` from 18.2.12 to 19.1.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/19.1.2/packages/compiler)

Updates `@angular/core` from 18.2.12 to 19.1.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/19.1.2/packages/core)

Updates `@angular/forms` from 18.2.12 to 19.1.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/19.1.2/packages/forms)

Updates `@angular/material` from 18.2.13 to 19.1.0
- [Release notes](https://github.com/angular/components/releases)
- [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md)
- [Commits](angular/components@18.2.13...19.1.0)

Updates `@angular/platform-browser` from 18.2.12 to 19.1.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/19.1.2/packages/platform-browser)

Updates `@angular/platform-browser-dynamic` from 18.2.12 to 19.1.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/19.1.2/packages/platform-browser-dynamic)

Updates `@angular/router` from 18.2.12 to 19.1.2
- [Release notes](https://github.com/angular/angular/releases)
- [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md)
- [Commits](https://github.com/angular/angular/commits/19.1.2/packages/router)

Updates `@octokit/types` from 13.6.1 to 13.7.0
- [Release notes](https://github.com/octokit/types.ts/releases)
- [Commits](octokit/types.ts@v13.6.1...v13.7.0)

Updates `cronstrue` from 2.51.0 to 2.53.0
- [Release notes](https://github.com/bradymholt/cronstrue/releases)
- [Changelog](https://github.com/bradymholt/cRonstrue/blob/main/CHANGELOG.md)
- [Commits](bradymholt/cRonstrue@v2.51.0...v2.53.0)

Updates `highcharts` from 11.4.8 to 12.1.2
- [Commits](highcharts/highcharts-dist@v11.4.8...v12.1.2)

Updates `ng2-charts` from 7.0.0 to 8.0.0
- [Release notes](https://github.com/valor-software/ng2-charts/releases)
- [Commits](valor-software/ng2-charts@v7.0.0...v8.0.0)

---
updated-dependencies:
- dependency-name: "@angular/animations"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@angular/cdk"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@angular/common"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@angular/compiler"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@angular/core"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@angular/forms"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@angular/material"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@angular/platform-browser"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@angular/platform-browser-dynamic"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@angular/router"
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: "@octokit/types"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: cronstrue
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: highcharts
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: ng2-charts
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 20, 2025
Copy link

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

frontend/package.json

PackageVersionLicenseIssue Type
highcharts^12.1.2NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@angular/animations 19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/cdk 19.1.0 🟢 7.4
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: in_progress
Code-Review🟢 10all changesets reviewed
Contributors🟢 1023 different organizations found -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) out of 30 and 3 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging⚠️ -1no published package detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 8detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 054 existing vulnerabilities detected
npm/@angular/common 19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/compiler 19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/core 19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/forms 19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/material 19.1.0 🟢 7.4
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: in_progress
Code-Review🟢 10all changesets reviewed
Contributors🟢 1023 different organizations found -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) out of 30 and 3 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging⚠️ -1no published package detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 8detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 054 existing vulnerabilities detected
npm/@angular/platform-browser 19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/platform-browser-dynamic 19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/router 19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@octokit/openapi-types 23.0.1 🟢 7
Details
CheckScoreReason
Code-Review🟢 8Found 6/7 approved changesets -- score normalized to 8
Maintained🟢 78 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 7
Security-Policy🟢 9security policy file detected
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Packaging🟢 10packaging workflow detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
SAST🟢 9SAST tool detected but not run on all commits
npm/@octokit/types 13.7.0 🟢 7.1
Details
CheckScoreReason
Security-Policy🟢 9security policy file detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 77 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 7
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
npm/cronstrue 2.53.0 🟢 3.8
Details
CheckScoreReason
Code-Review🟢 3Found 9/28 approved changesets -- score normalized to 3
Maintained🟢 65 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 6
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 55 existing vulnerabilities detected
npm/highcharts 12.1.2 🟢 3.5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ -1No tokens found
Dangerous-Workflow⚠️ -1no workflows found
Maintained🟢 79 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7
Code-Review⚠️ 0Found 1/28 approved changesets -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License⚠️ 0license file not detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Pinned-Dependencies⚠️ -1no dependencies found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
npm/ng2-charts 8.0.0 🟢 4.3
Details
CheckScoreReason
Maintained🟢 1014 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 1/16 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 82 existing vulnerabilities detected
npm/zone.js 0.15.0 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/animations ^19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/cdk ^19.1.0 🟢 7.4
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: in_progress
Code-Review🟢 10all changesets reviewed
Contributors🟢 1023 different organizations found -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) out of 30 and 3 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging⚠️ -1no published package detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 8detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 054 existing vulnerabilities detected
npm/@angular/common ^19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/compiler ^19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/core ^19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/forms ^19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/material ^19.1.0 🟢 7.4
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 1029 out of 29 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: in_progress
Code-Review🟢 10all changesets reviewed
Contributors🟢 1023 different organizations found -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) out of 30 and 3 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging⚠️ -1no published package detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions🟢 8detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 054 existing vulnerabilities detected
npm/@angular/platform-browser ^19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/platform-browser-dynamic ^19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@angular/router ^19.1.2 🟢 6.5
Details
CheckScoreReason
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 6branch protection is not maximal on development and all release branches
CI-Tests🟢 104 out of 4 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices⚠️ 2badge detected: InProgress
Code-Review⚠️ 0Found 1/30 approved changesets -- score normalized to 0
Contributors🟢 10project has 38 contributing companies or organizations
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Dependency-Update-Tool🟢 10update tool detected
Fuzzing🟢 10project is fuzzed
License🟢 10license file detected
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies🟢 10all dependencies are pinned
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Security-Policy🟢 10security policy file detected
Signed-Releases⚠️ -1no releases found
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Vulnerabilities⚠️ 071 existing vulnerabilities detected
npm/@octokit/types ^13.7.0 🟢 7.1
Details
CheckScoreReason
Security-Policy🟢 9security policy file detected
Code-Review🟢 10all changesets reviewed
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 77 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 7
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
Vulnerabilities🟢 82 existing vulnerabilities detected
npm/cronstrue ^2.53.0 🟢 3.8
Details
CheckScoreReason
Code-Review🟢 3Found 9/28 approved changesets -- score normalized to 3
Maintained🟢 65 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 6
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License🟢 10license file detected
Fuzzing⚠️ 0project is not fuzzed
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 55 existing vulnerabilities detected
npm/highcharts ^12.1.2 🟢 3.5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ -1No tokens found
Dangerous-Workflow⚠️ -1no workflows found
Maintained🟢 79 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7
Code-Review⚠️ 0Found 1/28 approved changesets -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
License⚠️ 0license file not detected
Vulnerabilities🟢 100 existing vulnerabilities detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Pinned-Dependencies⚠️ -1no dependencies found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
npm/ng2-charts ^8.0.0 🟢 4.3
Details
CheckScoreReason
Maintained🟢 1014 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 0Found 1/16 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 82 existing vulnerabilities detected

Scanned Files

  • frontend/package-lock.json
  • frontend/package.json

Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 27, 2025

Superseded by #114.

@dependabot dependabot bot closed this Jan 27, 2025
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/frontend/production-dependencies-be5962080a branch January 27, 2025 20:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants