Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RBS Chart Improvements #3190

Closed
wants to merge 5 commits into from
Closed

RBS Chart Improvements #3190

wants to merge 5 commits into from

Conversation

0xJem
Copy link
Contributor

@0xJem 0xJem commented Aug 26, 2024

No description provided.

@0xJem 0xJem linked an issue Aug 26, 2024 that may be closed by this pull request
2 tasks
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@apollo/[email protected] network 0 7 MB apollo-bot
npm/@ardatan/[email protected] environment, eval, filesystem, shell 0 2.44 MB ardatan
npm/@ardatan/[email protected] network, shell 0 85.7 kB ardatan
npm/@envelop/[email protected] None 0 91.9 kB dotansimha
npm/@envelop/[email protected] None 0 24.3 kB dotansimha
npm/@envelop/[email protected] None 0 13.9 kB dotansimha
npm/@envelop/[email protected] None 0 48.9 kB dotansimha
npm/@fastify/[email protected] None 0 101 kB matteo.collina
npm/@graphprotocol/[email protected] None 0 3.67 kB dotansimha
npm/@graphprotocol/[email protected] None 0 29.4 kB dotansimha
npm/@graphprotocol/[email protected] None 0 4.75 kB dotansimha
npm/@graphprotocol/[email protected] None 0 33 kB dotansimha
npm/@graphprotocol/[email protected] None 0 4.04 kB dotansimha
npm/@graphprotocol/[email protected] None 0 10.4 kB dotansimha
npm/@graphql-codegen/[email protected] None 0 39.2 kB dotansimha
npm/@graphql-codegen/[email protected] unsafe 0 114 kB dotansimha
npm/@graphql-codegen/[email protected] None 0 11.3 kB dotansimha
npm/@graphql-codegen/[email protected] None 0 17.9 kB dotansimha
npm/@graphql-codegen/[email protected] None 0 18.8 kB dotansimha
npm/@graphql-codegen/[email protected] None 0 45.1 kB dotansimha
npm/@graphql-codegen/[email protected] None 0 55.2 kB dotansimha
npm/@graphql-codegen/[email protected] None 0 90.2 kB dotansimha
npm/@graphql-codegen/[email protected] None 0 571 kB dotansimha
npm/@graphql-mesh/[email protected] None 0 13.4 kB ardatan
npm/@graphql-mesh/[email protected] environment, filesystem, network 0 126 kB ardatan
npm/@graphql-mesh/[email protected] environment 0 70.4 kB ardatan
npm/@graphql-mesh/[email protected] filesystem 0 15.8 kB ardatan
npm/@graphql-mesh/[email protected] None 0 114 kB ardatan
npm/@graphql-mesh/[email protected] environment 0 41.5 kB ardatan
npm/@graphql-mesh/[email protected] environment 0 15.7 kB ardatan
npm/@graphql-mesh/[email protected] environment 0 10 kB ardatan
npm/@graphql-mesh/[email protected] None 0 11.4 kB ardatan
npm/@graphql-mesh/[email protected] None 0 6.37 kB ardatan
npm/@graphql-mesh/[email protected] environment, eval 0 82 kB ardatan
npm/@graphql-mesh/[email protected] None 0 26.8 kB ardatan
npm/@graphql-mesh/[email protected] None 0 8.86 kB ardatan
npm/@graphql-mesh/[email protected] None 0 8.83 kB ardatan
npm/@graphql-mesh/[email protected] None 0 803 kB ardatan
npm/@graphql-mesh/[email protected] environment, eval, network 0 154 kB ardatan
npm/@graphql-tools/[email protected] None 0 16 kB ardatan
npm/@graphql-tools/[email protected] None 0 37.4 kB ardatan
npm/@graphql-tools/[email protected] filesystem, unsafe 0 37.5 kB ardatan
npm/@graphql-tools/[email protected] None 0 233 kB ardatan
npm/@graphql-tools/[email protected] None 0 7.91 kB ardatan
npm/@graphql-tools/[email protected] None 0 61.2 kB ardatan, dotansimha, urigo
npm/@graphql-tools/[email protected] None 0 16 kB ardatan
npm/@graphql-tools/[email protected] None 0 169 kB ardatan
npm/@graphql-tools/[email protected] environment, network 0 201 kB ardatan
npm/@graphql-tools/[email protected] filesystem 0 17.6 kB ardatan
npm/@graphql-tools/[email protected] None 0 66.4 kB ardatan
npm/@graphql-tools/[email protected] filesystem 0 62.4 kB ardatan
npm/@graphql-tools/[email protected] unsafe 0 76 kB ardatan
npm/@graphql-tools/[email protected] None 0 96.7 kB ardatan, dotansimha, urigo
npm/@graphql-tools/[email protected] None 0 16.2 kB ardatan
npm/@graphql-tools/[email protected] None 0 8.47 kB ardatan
npm/@graphql-tools/[email protected] None 0 68.4 kB ardatan, dotansimha, urigo
npm/@graphql-tools/[email protected] None 0 266 kB ardatan
npm/@graphql-tools/[email protected] None 0 115 kB ardatan
npm/@graphql-tools/[email protected] network 0 35.9 kB ardatan
npm/@graphql-tools/[email protected] None 0 507 kB ardatan
npm/@graphql-tools/[email protected] None 0 281 kB ardatan
npm/@graphql-yoga/[email protected] None 0 6.73 kB dotansimha
npm/@graphql-yoga/[email protected] None 0 14.6 kB dotansimha
npm/@graphql-yoga/[email protected] None 0 26.3 kB dotansimha
npm/@graphql-yoga/[email protected] None 0 4.11 kB dotansimha
npm/@kamilkisiela/[email protected] None 0 46.1 kB kamilkisiela
npm/@mapbox/[email protected] environment, filesystem 0 170 kB mapbox-npm-01
npm/@whatwg-node/[email protected] None 0 17.4 kB ardatan
npm/@whatwg-node/[email protected] None 0 41.9 kB ardatan
npm/@whatwg-node/[email protected] environment, filesystem, network 0 201 kB ardatan
npm/@whatwg-node/[email protected] None 0 143 kB ardatan
npm/@wry/[email protected] None 0 63.8 kB benjamn
npm/@wry/[email protected] None 0 65 kB benjamn
npm/@wry/[email protected] None 0 31.1 kB benjamn
npm/[email protected] None 0 56.8 kB jason-green
npm/[email protected] None 0 14.1 kB gar
npm/[email protected] None 0 6.7 kB sindresorhus
npm/[email protected] None 0 7.78 kB btxtiger
npm/[email protected] None 0 12.7 kB iarna
npm/[email protected] None 0 7.37 kB ardatan
npm/[email protected] None 0 670 kB iamkun
npm/[email protected] environment, filesystem 0 71.6 kB motdotla
npm/[email protected] None 0 6.61 kB sindresorhus
npm/[email protected] None 0 37.3 kB sssayegh
npm/[email protected] None 0 19.8 kB jaydenseric
npm/[email protected] eval 0 369 kB jsumners
npm/[email protected] None 0 48.5 kB gar
npm/[email protected] eval 0 9.04 kB mafintosh
npm/[email protected] filesystem, unsafe 0 103 kB hirokiosame
npm/[email protected] filesystem 0 21.8 kB sindresorhus
npm/[email protected] filesystem 0 2.94 kB ardatan
npm/[email protected] eval 0 459 kB ruiaraujo
npm/[email protected] None 0 343 kB enisdenjo
npm/[email protected] None 0 262 kB dotansimha
npm/[email protected] environment 0 1.34 MB i1g
npm/[email protected] unsafe 0 4.91 kB sindresorhus
npm/[email protected] None 0 8.55 kB jonschlinkert
npm/[email protected] filesystem 0 3.01 kB sindresorhus
npm/[email protected] None 0 9.36 kB blakeembrey
npm/[email protected] None 0 13.6 kB mikolalysenko
npm/[email protected] None 0 9.37 kB blakeembrey
npm/[email protected] environment, filesystem 0 3.76 kB sindresorhus
npm/[email protected] environment, filesystem, unsafe 0 1.95 MB pi0
npm/[email protected] None 0 32.1 kB ardatan
npm/[email protected] None 0 56 kB ivan-tymoshenko
npm/[email protected] network 0 468 kB tofumatt
npm/[email protected] None 0 20.1 kB jdalton
npm/[email protected] None 0 54.2 kB jdalton
npm/[email protected] None 0 8.84 kB blakeembrey
npm/[email protected] None 0 804 kB isaacs
npm/[email protected] network 0 52.8 kB npm-cli-ops
npm/[email protected] None 0 15.3 kB marais
npm/[email protected] None 0 429 kB kkoopa
npm/[email protected] environment, shell 0 1.72 MB lukekarrys
npm/[email protected] environment, filesystem, shell 0 1.59 MB jonathancardoso
npm/[email protected] None 0 26.2 kB npm-cli-ops
npm/[email protected] None 0 16.6 kB gar
npm/[email protected] environment, filesystem, shell 0 41.9 kB sindresorhus
npm/[email protected] None 0 187 kB benjamn
npm/[email protected] None 0 7.92 kB phated
npm/[email protected] None 0 12.3 kB npm-cli-ops
npm/[email protected] None 0 32.9 kB google-wombot
npm/[email protected] None 0 10.1 kB phryneas
npm/[email protected] None 0 15 kB hirokiosame
npm/[email protected] None 0 67.8 kB kmalakoff
npm/[email protected] None 0 4.22 kB bcoe
npm/[email protected] None 0 9.11 kB blakeembrey
npm/[email protected] None 0 10.1 kB blakeembrey
npm/[email protected] eval 0 16.8 kB blesh
npm/[email protected] None 0 27.7 kB blakeembrey
npm/[email protected] None 0 28.5 kB benjamn
npm/[email protected] None 0 7.36 kB jonschlinkert
npm/[email protected] None 0 49.9 kB kenchris
npm/[email protected] None 0 0 B
npm/[email protected] None 0 22.8 kB apollo-bot

🚮 Removed packages: npm/@apidevtools/[email protected]), npm/@apidevtools/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.22.15), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@babel/[email protected]), npm/@graphql-mesh/[email protected]), npm/@graphql-mesh/[email protected]), npm/@graphql-mesh/[email protected]), npm/@graphql-mesh/[email protected]), npm/@graphql-tools/[email protected]), npm/@graphql-tools/[email protected]), npm/@graphql-tools/[email protected]), npm/@graphql-tools/[email protected]), npm/@graphql-tools/[email protected]), npm/@graphql-tools/[email protected]), npm/@graphql-tools/[email protected]), npm/@nicolo-ribaudo/[email protected]), npm/@redocly/[email protected]), npm/@redocly/[email protected]), npm/@redocly/[email protected]), npm/@types/[email protected]), npm/@whatwg-node/[email protected]), npm/@whatwg-node/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected]), npm/[email protected])

View full report↗︎

Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package NoteSourceCI
Install scripts npm/[email protected]
  • Install script: install
  • Source: node-pre-gyp install --fallback-to-build
🚫
Install scripts npm/[email protected]
  • Install script: postinstall
  • Source: node scripts/postinstall
🚫

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

Comment on lines +33 to +38
"@graphql-mesh/cross-helpers": "^0.4.6",
"@graphql-mesh/http": "0.103.2",
"@graphql-mesh/runtime": "0.103.2",
"@graphql-mesh/types": "^0.102.2",
"@graphql-mesh/utils": "^0.102.2",
"@graphql-tools/utils": "^10.5.3",
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

why do we need all these new dependencies @0xJem ?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

They're peer dependencies for the graphclient

@brightiron
Copy link
Contributor

closing in favor of #3198

@brightiron brightiron closed this Sep 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Implement improvements to RBS chart
2 participants