[Security] v10.0.1 has dependencies to vulnerable packages
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 25/100
- Issue type
- Bug
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- javascript
- Domain
- security
Research direction
The issue does not name files, tests, or the affected packages. Start by reviewing the repository's dependency configuration and auditing the installed dependencies to identify the three moderate vulnerabilities. Done means the vulnerabilities reported for v10.0.1 are resolved and the project checks still pass.
Written by the indexing model from the issue text.
Description
This version has 3 moderate severity vulnerabilities
- Dominant language
- JavaScript
- Stars
- 340
- Forks
- 75
- Avg merge
- 4h 49m
- Merged PRs (30d)
- 6
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from semantic-release/git
-
semantic-release
Difficulty 3/5 1-2 days Newbie friendliness 35/100
semantic-release/git#584 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 30/100
semantic-release/git#536 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 35/100
semantic-release/git#532 · 3 reactions ·
-
Difficulty 3/5 1-2 days Newbie friendliness 28/100
semantic-release/git#531 · 1 comment ·
-
Dependencies upgradeOpen
Difficulty 3/5 1-2 days Newbie friendliness 25/100
semantic-release/git#529 · 2 comments ·
All issues in semantic-release/git
Similar issues
-
Edit: RTE News LogoOpencheck:failed logos:edit
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
iptv-org/database#36354 · 1 comment ·
Maintainers usually reply within 4 days
-
agentic-workflows documentation workflow-editor
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
githubnext/gh-aw-workshop#4139 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
CircuitVerse/CircuitVerse#7967 · 1 comment · 1 reaction ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
CopilotKit/aimock#491 ·
Maintainers usually reply within 1 day
-
cvss-severity:high devguard l3montree-cybersecurity/.../devguard-documentation pkg:devguard/l3montree-c.../devguard-documentation risk:low state:open
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
l3montree-dev/devguard-documentation#338 · 1 comment ·