Skip to content

Demonstrate Bomly Guard dependency protection - #1

Open
bomly-guy wants to merge 1 commit into
demo-basefrom
demo-head
Open

Demonstrate Bomly Guard dependency protection#1
bomly-guy wants to merge 1 commit into
demo-basefrom
demo-head

feat: add node-fetch to web and marked to lib

b59c301
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / bomly failed Jul 17, 2026 in 5s

4 new alerts including 3 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 3 high
  • 1 medium

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 52 in pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / bomly

Inefficient Regular Expression Complexity in marked High

Inefficient Regular Expression Complexity in marked in pkg:npm/marked@0.3.19

Check failure on line 52 in pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / bomly

Inefficient Regular Expression Complexity in marked High

Inefficient Regular Expression Complexity in marked in pkg:npm/marked@0.3.19

Check failure on line 63 in pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / bomly

node-fetch forwards secure headers to untrusted sites High

node-fetch forwards secure headers to untrusted sites in pkg:npm/node-fetch@2.6.6

Check warning on line 52 in pnpm-lock.yaml

See this annotation in the file changed.

Code scanning / bomly

Marked ReDoS due to email addresses being evaluated in quadratic time Medium

Marked ReDoS due to email addresses being evaluated in quadratic time in pkg:npm/marked@0.3.19