Skip to content

StackShift/Week-8 - #67

Open
Victorvikson1996 wants to merge 2 commits into
celo-org:mainfrom
Victorvikson1996:week/8
Open

StackShift/Week-8#67
Victorvikson1996 wants to merge 2 commits into
celo-org:mainfrom
Victorvikson1996:week/8

Conversation

@Victorvikson1996

@Victorvikson1996 Victorvikson1996 commented Jun 13, 2023

Copy link
Copy Markdown

No description provided.

@socket-security

socket-security Bot commented Jun 13, 2023 •
edited
Loading

Copy link
Copy Markdown

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue Package Version Note Source
Git dependency @celo/identity 4.1.0 social-connect/packages/react-app/package.json
Native code bigint-buffer 1.1.5 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Install scripts bigint-buffer 1.1.5
  • Install script: install
  • Source: npm run rebuild || echo "Couldn't build bindings. Non-native version used."
 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Native code bufferutil 4.0.7 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, ethers@5.7.2, viem@0.3.30, wagmi@1.0.5
Native code dtrace-provider 0.8.8 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0
Native code keccak 3.0.3 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Native code secp256k1 4.0.3 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Native code utf-8-validate 5.0.10 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, ethers@5.7.2, viem@0.3.30, wagmi@1.0.5
Install scripts web3-bzz 1.3.6
  • Install script: postinstall
  • Source: echo "WARNING: the web3-bzz api will be deprecated in the next version"
 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Install scripts web3 1.3.6
  • Install script: postinstall
  • Source: echo "WARNING: the web3-shh and web3-bzz api will be deprecated in the next version"
 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Install scripts web3-shh 1.3.6
  • Install script: postinstall
  • Source: echo "WARNING: the web3-shh api will be deprecated in the next version"
 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Install scripts yarn 1.22.19
  • Install script: preinstall
  • Source: :; (node ./preinstall.js > /dev/null 2>&1 || true)
 social-connect/packages/react-app/package.json
Install scripts @celo/react-celo 5.0.3
  • Install script: postinstall
  • Source: sh ./scripts/postinstall.sh
 social-connect/packages/react-app/package.json
Install scripts es5-ext 0.10.62
  • Install script: postinstall
  • Source: node -e "try{require('./_postinstall')}catch(e){}" || exit 0
 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Protestware/Troll package es5-ext 0.10.62
  • Note: This package prints a protestware console message on install regarding Ukraine for users with Russian language locale
 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Network access defer-to-connect 1.1.3 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Network access forever-agent 0.6.1 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Network access http2-wrapper 1.0.3 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Network access jayson 3.7.0 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access jayson 4.1.0
Network access next 13.4.2 social-connect/packages/react-app/package.json
Telemetry next 13.4.2
  • Note: Can be disabled by setting the environment variable NEXT_TELEMETRY_DISABLED=1
 social-connect/packages/react-app/package.json
Network access next 13.4.5 social-connect/package.json via next-auth@4.22.1, social-connect/packages/react-app/package.json via next-auth@4.22.1
Telemetry next 13.4.5
  • Note: Can be disabled by setting the environment variable NEXT_TELEMETRY_DISABLED=1
 social-connect/package.json via next-auth@4.22.1, social-connect/packages/react-app/package.json via next-auth@4.22.1
Network access resolve-alpn 1.2.1 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Network access tunnel-agent 0.6.0 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Network access ws 7.4.6 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, ethers@5.7.2, viem@0.3.30, wagmi@1.0.5
Network access ws 7.5.9 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access ws 8.12.0 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, viem@0.3.30, wagmi@1.0.5
Network access ws 8.13.0 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access ws 3.3.3 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/react-celo@5.0.3
Network access @ethersproject/web 5.7.1 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, ethers@5.7.2, wagmi@1.0.5
Network access @solana/web3.js 1.76.0 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access @walletconnect/core 2.7.4 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access @walletconnect/ethereum-provider 2.7.4 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access @walletconnect/jsonrpc-http-connection 1.0.6 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access @walletconnect/legacy-client 2.0.0 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access @walletconnect/legacy-modal 2.0.0 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access @walletconnect/legacy-provider 2.0.0 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access @web3modal/core 2.4.1 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access cross-fetch 3.0.4 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0
Network access cross-fetch 3.1.6 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access ethers 5.7.2 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access isomorphic-fetch 3.0.0 social-connect/packages/react-app/package.json via @celo/react-celo@5.0.3
Network access next-auth 4.22.1 social-connect/packages/react-app/package.json
Network access node-fetch 2.6.0 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0
Network access node-fetch 2.6.11 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0, @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access rxjs 6.6.7 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access styled-jsx 5.1.1 social-connect/package.json via next-auth@4.22.1, social-connect/packages/react-app/package.json via next@13.4.2, next-auth@4.22.1
Network access viem 0.3.30 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access whatwg-fetch 3.0.0 social-connect/package.json via @celo/identity@4.1.0, social-connect/packages/react-app/package.json via @celo/identity@4.1.0
Network access whatwg-fetch 3.6.2 social-connect/packages/react-app/package.json via @celo/react-celo@5.0.3
Network access agentkeepalive 4.3.0 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @celo/react-celo@5.0.3, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access axios 0.21.4 social-connect/packages/react-app/package.json via @celo/rainbowkit-celo@1.0.0, @rainbow-me/rainbowkit@1.0.0, wagmi@1.0.5
Network access follow-redirects 1.15.2 social-connect/packages/react-app/package.json

@socket-security

socket-security Bot commented Jun 13, 2023 •
edited
Loading

Copy link
Copy Markdown

New and updated dependency changes detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives1 Size Publisher
blind-threshold-bls 🆕 0.0.1-security None +0 444 B npm
next 🆕 13.4.2 eval, network, filesystem, shell, environment +27 1.05 GB vercel-release-bot
yarn 🆕 1.22.19 filesystem, shell, environment +0 5.33 MB danbuild
next-auth 🆕 4.22.1 eval, network, filesystem, shell, environment +88 1.96 GB balazsorban
eslint-config-next 🆕 13.4.2 eval, network, filesystem, shell, environment +245 64.7 MB vercel-release-bot
@celo/identity 🆕 4.1.0 eval, network, filesystem, shell, environment +816 110 MB aaron-clabs
@types/node 🆕 20.2.1 None +0 3.78 MB types
@celo/react-celo 🆕 5.0.3 eval, network, filesystem, shell, environment +549 99.9 MB nicolasbrugneaux
typescript 🆕 5.0.4 filesystem +0 39.2 MB typescript-bot
@celo/rainbowkit-celo 🆕 1.0.0 eval, network, filesystem, shell, environment +343 149 MB pputman684
react-modal 🆕 3.16.1 filesystem, environment +11 5.29 MB diasbruno
viem 🆕 0.3.30 network, filesystem, shell, environment +16 48.1 MB jmoxey
@types/react-modal 🆕 3.16.0 None +4 1.6 MB types
add 🆕 2.0.6 None +0 8.06 kB benng
autoprefixer 🆕 10.4.14 filesystem, shell, environment +13 3.01 MB ai
react-hot-toast 🆕 2.4.1 filesystem, environment +14 12.7 MB timolins
eslint 🆕 8.40.0 eval, network, filesystem, shell, environment +96 9.62 MB eslintbot
postcss 🆕 8.4.14 filesystem, environment +3 362 kB ai
@heroicons/react 🆕 2.0.18 filesystem, environment +3 2.76 MB malfaitrobin
react-dom 🆕 18.2.0 filesystem, environment +4 4.93 MB gnoff
@rainbow-me/rainbowkit 🆕 1.0.0 eval, network, filesystem, shell, environment +342 149 MB danielsinclair
@types/react-dom 🆕 18.2.4 None +4 1.62 MB types
tailwindcss 🆕 3.3.2 network, filesystem, shell, environment +83 12.1 MB adamwathan
react 🆕 18.2.0 filesystem, environment +2 337 kB gnoff
@headlessui/react 🆕 1.7.14 filesystem, environment +6 5.93 MB malfaitrobin
ethers 🆕 5.7.2 network, filesystem, shell, environment +47 19 MB ricmoo
wagmi 🆕 1.0.5 eval, network, filesystem, shell, environment +314 145 MB awkweb
@types/react 🆕 18.2.6 None +3 1.59 MB types

Footnotes

  1. https://docs.socket.dev ↩

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Victorvikson1996