Skip to content

build(deps): bump the npm_and_yarn group across 1 directory with 13 updates #18473

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

build(deps): bump the npm_and_yarn group across 1 directory with 13 updates #18473

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 20, 2025

Bumps the npm_and_yarn group with 8 updates in the / directory:

Package From To
lerna 8.1.9 8.2.2
postcss 8.5.1 8.5.3
stylelint 13.13.1 16.19.1
stylelint-selector-bem-pattern 2.1.1 4.0.1
storybook 8.5.3 8.6.14
@babel/helpers 7.26.7 7.27.1
@babel/runtime 7.26.7 7.27.1
axios 1.7.9 1.9.0

Updates lerna from 8.1.9 to 8.2.2

Release notes

Sourced from lerna's releases.

v8.2.2

8.2.2 (2025-04-10)

Bug Fixes

  • use searchStrategy: global to fix breaking change behaviour after upgrading cosmiconfig to 9.0.0 (#4159) (6242511)
  • version: disable legacy peer deps behavior by default (#4175) (0cd3241)

v8.2.1

8.2.1 (2025-03-03)

Note: Version bump only for package lerna-monorepo

v8.2.0

8.2.0 (2025-02-19)

Bug Fixes

  • drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

  • allow custom working dir for detectProjects (#4148) (08d1d0d)
Changelog

Sourced from lerna's changelog.

8.2.2 (2025-04-10)

Note: Version bump only for package lerna

8.2.1 (2025-03-03)

Note: Version bump only for package lerna

8.2.0 (2025-02-19)

Bug Fixes

  • drop strip-ansi in favor of native stripVTControlCharacters (#4095) (9e4ac9c)

Features

  • allow custom working dir for detectProjects (#4148) (08d1d0d)
Commits
  • 6ea835d chore(misc): publish 8.2.2
  • 95ab1cb chore(misc): publish 8.2.1
  • 770220c chore(deps): bump @​octokit/rest from 19.0.11 to 20.1.2 (#4154)
  • 58cdfec chore(misc): publish 8.2.0
  • 08d1d0d feat: allow custom working dir for detectProjects (#4148)
  • 0dd2cb9 chore: update to latest dependencies (#4151)
  • 9e4ac9c fix: drop strip-ansi in favor of native stripVTControlCharacters (#4095)
  • See full diff in compare view

Updates postcss from 8.5.1 to 8.5.3

Release notes

Sourced from postcss's releases.

8.5.3

8.5.2

Changelog

Sourced from postcss's changelog.

8.5.3

8.5.2

Commits

Updates stylelint from 13.13.1 to 16.19.1

Release notes

Sourced from stylelint's releases.

16.19.1

16.19.0

It adds 2 options to 2 rules and fixes 3 bugs.

  • Added: exceptWithoutPropertyFallback: [] to function-allowed-list (#8488) (@​ryo-manba).
  • Added: ignore: ["four-into-three-edge-values"] to shorthand-property-no-redundant-values (#8527) (@​ryo-manba).
  • Fixed: compact formatter with pnpm to newline the exit code (#8534) (@​konomae).
  • Fixed: declaration-property-value-no-unknown range and message for invalid syntax within known functions (#8528) (@​ryo-manba).
  • Fixed: no-empty-source false positives for --report-needless-disables (#8536) (@​romainmenke).

16.18.0

It adds 2 new rules and fixes 2 bugs. We've turned on these rules, and the syntax-string-no-invalid and layer-name-pattern ones from recent releases, in our standard config.

16.17.0

It adds 1 new rule, support for languageOptions to 2 rules, 1 option to a rule, the --compute-edit-info CLI flag (along with support for EditInfo in 3 rules), and fixes 1 bug. EditInfo is useful for automated fixing tools and editor integrations.

16.16.0

It adds support for computing EditInfo to 22 more rules and reverts a change that added context.lexer to our public API in the previous release.

... (truncated)

Changelog

Sourced from stylelint's changelog.

16.19.1 - 2025-04-25

16.19.0 - 2025-04-23

It adds 2 options to 2 rules and fixes 3 bugs.

  • Added: exceptWithoutPropertyFallback: [] to function-allowed-list (#8488) (@​ryo-manba).
  • Added: ignore: ["four-into-three-edge-values"] to shorthand-property-no-redundant-values (#8527) (@​ryo-manba).
  • Fixed: compact formatter with pnpm to newline the exit code (#8534) (@​konomae).
  • Fixed: declaration-property-value-no-unknown range and message for invalid syntax within known functions (#8528) (@​ryo-manba).
  • Fixed: no-empty-source false positives for --report-needless-disables (#8536) (@​romainmenke).

16.18.0 - 2025-04-06

It adds 2 new rules and fixes 2 bugs. We've turned on these rules, and the syntax-string-no-invalid and layer-name-pattern ones from recent releases, in our standard config.

16.17.0 - 2025-03-26

It adds 1 new rule, support for languageOptions to 2 rules, 1 option to a rule, the --compute-edit-info CLI flag (along with support for EditInfo in 3 rules), and fixes 1 bug. EditInfo is useful for automated fixing tools and editor integrations.

16.16.0 - 2025-03-14

It adds support for computing EditInfo to 22 more rules and reverts a change that added context.lexer to our public API in the previous release.

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by ybiquitous, a new releaser for stylelint since your current version.


Updates stylelint-selector-bem-pattern from 2.1.1 to 4.0.1

Changelog

Sourced from stylelint-selector-bem-pattern's changelog.

4.0.1

  • Move eslint-plugin-jest to devDependencies

4.0.0

3.0.1

  • Update postcss-bem-linter to ^4.0.1

3.0.0

  • Update postcss-bem-linter to ^4.0.0
  • Update stylelint to ^15.9.0 - BREAKING CHANGE
    • Drops support for Node 12
Commits

Updates storybook from 8.5.3 to 8.6.14

Release notes

Sourced from storybook's releases.

v8.6.14

8.6.14

v8.6.13

8.6.13

v8.6.12

8.6.12

v8.6.11

8.6.11

v8.6.10

8.6.10

v8.6.9

8.6.9

v8.6.8

8.6.8

... (truncated)

Changelog

Sourced from storybook's changelog.

8.6.14

8.6.13

8.6.12

8.6.11

8.6.10

8.6.9

8.6.8

8.6.7

8.6.6

  • Angular: Make sure that polyfills are loaded before the storybook is loaded - #30811, thanks @​kasperpeulen!

... (truncated)

Commits
  • ab87178 Bump version from "8.6.13" to "8.6.14" [skip ci]
  • 8fa9049 Bump version from "8.6.12" to "8.6.13" [skip ci]
  • 1c35b29 Bump version from "8.6.11" to "8.6.12" [skip ci]
  • 2afd30d Bump version from "8.6.10" to "8.6.11" [skip ci]
  • 23d2037 Bump version from "8.6.9" to "8.6.10" [skip ci]
  • 207c2f4 Bump version from "8.6.8" to "8.6.9" [skip ci]
  • d4960ea Bump version from "8.6.7" to "8.6.8" [skip ci]
  • 019cd1f Bump version from "8.6.6" to "8.6.7" [skip ci]
  • 9a7a795 Bump version from "8.6.5" to "8.6.6" [skip ci]
  • 4e23d75 Bump version from "8.6.4" to "8.6.5" [skip ci]
  • Additional commits viewable in compare view

Updates @babel/helpers from 7.26.7 to 7.27.1

Release notes

Sourced from @​babel/helpers's releases.

v7.27.1 (2025-04-30)

Thanks @​kermanx and @​woaitsAryan for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • babel-helper-fixtures, babel-parser
  • babel-generator, babel-parser
    • #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@​JLHwung)
  • babel-parser
    • #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@​JLHwung)
    • #17080 Fix start of TSParameterProperty (@​JLHwung)
  • babel-compat-data, babel-preset-env
  • babel-traverse
  • babel-generator

💅 Polish

  • babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

🏠 Internal

  • babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-compat-data, babel-preset-env
  • babel-compat-data, babel-standalone
  • babel-register
  • babel-helpers, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-preset-env, babel-runtime-corejs3
  • All packages

... (truncated)

Changelog

Sourced from @​babel/helpers's changelog.

v7.27.1 (2025-04-30)

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • babel-helper-remap-async-to-generator, babel-plugin-transform-async-to-generator
  • babel-helper-fixtures, babel-parser
  • babel-generator, babel-parser
    • #17226 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 2) (@​JLHwung)
  • babel-parser
    • #17224 Fill optional AST properties when both estree and typescript parser plugin are enabled (Part 1) (@​JLHwung)
    • #17080 Fix start of TSParameterProperty (@​JLHwung)
  • babel-compat-data, babel-preset-env
  • babel-traverse
  • babel-generator

💅 Polish

  • babel-plugin-bugfix-v8-spread-parameters-in-optional-chaining, babel-plugin-proposal-decorators, babel-plugin-transform-arrow-functions, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-traverse

🏠 Internal

  • babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • babel-compat-data, babel-preset-env
  • babel-compat-data, babel-standalone
  • Other
  • babel-register
  • babel-cli, babel-compat-data, babel-core, babel-generator, babel-helper-compilation-targets, babel-helper-fixtures, babel-helper-module-imports, babel-helper-module-transforms, babel-helper-plugin-test-runner, babel-helper-transform-fixture-test-runner, babel-helpers, babel-node, babel-parser, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-modules-umd, babel-plugin-transform-react-display-name, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-preset-env, babel-register, babel-standalone, babel-types
  • babel-plugin-transform-regenerator

... (truncated)

Commits

Updates @babel/runtime from 7.26.7 to 7.27.1

Release notes

Sourced from @​babel/runtime's releases.

v7.27.1 (2025-04-30)

Thanks @​kermanx and @​woaitsAryan for your first PRs!

👓 Spec Compliance

🐛 Bug Fix

  • babel-plugin-proposal-destructuring-private, babel-plugin-proposal-do-expressions, babel-traverse
  • babel-helper-wrap-function, babel-plugin-transform-async-to-generator
  • babel-helper...

    Description has been truncated

@dependabot
build(deps): bump the npm_and_yarn group across 1 directory with 13 u…
a840ebb 
…pdates

Bumps the npm_and_yarn group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [lerna](https://github.com/lerna/lerna/tree/HEAD/packages/lerna) | `8.1.9` | `8.2.2` |
| [postcss](https://github.com/postcss/postcss) | `8.5.1` | `8.5.3` |
| [stylelint](https://github.com/stylelint/stylelint) | `13.13.1` | `16.19.1` |
| [stylelint-selector-bem-pattern](https://github.com/simonsmith/stylelint-selector-bem-pattern) | `2.1.1` | `4.0.1` |
| [storybook](https://github.com/storybookjs/storybook/tree/HEAD/code/lib/cli) | `8.5.3` | `8.6.14` |
| [@babel/helpers](https://github.com/babel/babel/tree/HEAD/packages/babel-helpers) | `7.26.7` | `7.27.1` |
| [@babel/runtime](https://github.com/babel/babel/tree/HEAD/packages/babel-runtime) | `7.26.7` | `7.27.1` |
| [axios](https://github.com/axios/axios) | `1.7.9` | `1.9.0` |



Updates `lerna` from 8.1.9 to 8.2.2
- [Release notes](https://github.com/lerna/lerna/releases)
- [Changelog](https://github.com/lerna/lerna/blob/main/packages/lerna/CHANGELOG.md)
- [Commits](https://github.com/lerna/lerna/commits/v8.2.2/packages/lerna)

Updates `postcss` from 8.5.1 to 8.5.3
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.1...8.5.3)

Updates `stylelint` from 13.13.1 to 16.19.1
- [Release notes](https://github.com/stylelint/stylelint/releases)
- [Changelog](https://github.com/stylelint/stylelint/blob/main/CHANGELOG.md)
- [Commits](stylelint/stylelint@13.13.1...16.19.1)

Updates `stylelint-selector-bem-pattern` from 2.1.1 to 4.0.1
- [Changelog](https://github.com/simonsmith/stylelint-selector-bem-pattern/blob/master/CHANGELOG.md)
- [Commits](simonsmith/stylelint-selector-bem-pattern@2.1.1...4.0.1)

Updates `storybook` from 8.5.3 to 8.6.14
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v8.6.14/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.6.14/code/lib/cli)

Updates `@babel/helpers` from 7.26.7 to 7.27.1
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.1/packages/babel-helpers)

Updates `@babel/runtime` from 7.26.7 to 7.27.1
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/main/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/commits/v7.27.1/packages/babel-runtime)

Updates `@octokit/endpoint` from 7.0.6 to 9.0.6
- [Release notes](https://github.com/octokit/endpoint.js/releases)
- [Commits](octokit/endpoint.js@v7.0.6...v9.0.6)

Updates `@octokit/plugin-paginate-rest` from 6.1.2 to 11.4.0
- [Release notes](https://github.com/octokit/plugin-paginate-rest.js/releases)
- [Commits](octokit/plugin-paginate-rest.js@v6.1.2...v11.4.0)

Updates `@octokit/request` from 6.2.8 to 8.4.1
- [Release notes](https://github.com/octokit/request.js/releases)
- [Commits](octokit/request.js@v6.2.8...v8.4.1)

Updates `@octokit/request-error` from 3.0.3 to 5.1.1
- [Release notes](https://github.com/octokit/request-error.js/releases)
- [Commits](octokit/request-error.js@v3.0.3...v5.1.1)

Updates `axios` from 1.7.9 to 1.9.0
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](axios/axios@v1.7.9...v1.9.0)

Updates `esbuild` from 0.24.2 to 0.25.4
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG-2024.md)
- [Commits](evanw/esbuild@v0.24.2...v0.25.4)

---
updated-dependencies:
- dependency-name: lerna
  dependency-version: 8.2.2
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: postcss
  dependency-version: 8.5.3
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: stylelint
  dependency-version: 16.19.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: stylelint-selector-bem-pattern
  dependency-version: 4.0.1
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: storybook
  dependency-version: 8.6.14
  dependency-type: direct:development
  dependency-group: npm_and_yarn
- dependency-name: "@babel/helpers"
  dependency-version: 7.27.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@babel/runtime"
  dependency-version: 7.27.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/endpoint"
  dependency-version: 9.0.6
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/plugin-paginate-rest"
  dependency-version: 11.4.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request"
  dependency-version: 8.4.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: "@octokit/request-error"
  dependency-version: 5.1.1
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: axios
  dependency-version: 1.9.0
  dependency-type: indirect
  dependency-group: npm_and_yarn
- dependency-name: esbuild
  dependency-version: 0.25.4
  dependency-type: indirect
  dependency-group: npm_and_yarn
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 20, 2025
@vercel Vercel
Copy link

vercel bot commented May 20, 2025 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Updated (UTC)
deriv-app ❌ Failed (Inspect) May 20, 2025 9:22am

@github-actions GitHub Actions
Copy link
Contributor

A production App ID was automatically generated for this PR. (log)

Click here to copy & paste above information. 
- **PR**: [https://github.com/deriv-com/deriv-app/pull/18473](https://github.com/deriv-com/deriv-app/pull/18473)
- **URLs**:
    - **w/ App ID + Server**: https://deriv-app-git-dependabot-npmandyarnnpmandyarn-c7b9d99114.binary.sx?qa_server=red.derivws.com&app_id=38672
    - **Original**: https://deriv-app-git-dependabot-npmandyarnnpmandyarn-c7b9d99114.binary.sx
- **App ID**: `38672`

@github-actions GitHub Actions
Copy link
Contributor

github-actions bot commented May 20, 2025 •
edited
Loading

⏳ Generating Lighthouse report...

@github-actions GitHub Actions
Copy link
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@babel/helpers 7.26.7 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/runtime 7.26.7 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/code-frame 7.27.1 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/helper-string-parser 7.27.1 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/helper-validator-identifier 7.27.1 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/helpers 7.27.1 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/parser 7.27.2 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/runtime 7.27.1 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/template 7.27.2 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/types 7.27.1 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/postcss 8.5.3 🟢 4.8
Details
CheckScoreReason
Maintained🟢 1025 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 5Found 14/28 approved changesets -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@babel/code-frame 7.26.2 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/helper-string-parser 7.25.9 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/helper-validator-identifier 7.25.9 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/parser 7.26.7 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/template 7.25.9 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/@babel/types 7.26.7 🟢 6.3
Details
CheckScoreReason
Code-Review🟢 8Found 24/29 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions🟢 9detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 2badge detected: InProgress
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Vulnerabilities⚠️ 025 existing vulnerabilities detected
npm/postcss 8.5.1 🟢 4.8
Details
CheckScoreReason
Maintained🟢 1025 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review🟢 5Found 14/28 approved changesets -- score normalized to 5
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/regenerator-runtime 0.14.1 🟢 3.7
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 2Found 4/17 approved changesets -- score normalized to 2
Maintained⚠️ 0project is archived
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 10license file detected
Pinned-Dependencies⚠️ 1dependency not pinned by hash detected -- score normalized to 1
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 9security policy file detected
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities⚠️ 010 existing vulnerabilities detected

Scanned Manifest Files

package-lock.json
package.json
  • stylelint@^16.19.1
  • stylelint-selector-bem-pattern@^4.0.1
  • stylelint@^13.13.1
  • stylelint-selector-bem-pattern@^2.1.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@matin-deriv matin-deriv Awaiting requested review from matin-deriv matin-deriv is a code owner

@yashim-deriv yashim-deriv Awaiting requested review from yashim-deriv yashim-deriv is a code owner

At least 2 approving reviews are required to merge this pull request.

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants