Skip to content

[Snyk] Upgrade react-intersection-observer from 10.0.0 to 10.0.2#18

Open
ahqsoftwares wants to merge 1 commit intomainfrom
snyk-upgrade-ad60bb46398aea92136f919d55c14d5b
Open

[Snyk] Upgrade react-intersection-observer from 10.0.0 to 10.0.2#18
ahqsoftwares wants to merge 1 commit intomainfrom
snyk-upgrade-ad60bb46398aea92136f919d55c14d5b

Conversation

@ahqsoftwares
Copy link
Copy Markdown
Member

snyk-top-banner

Snyk has created this PR to upgrade react-intersection-observer from 10.0.0 to 10.0.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released a month ago.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade react-intersection-observer from 10.0.0 to 10.0.2.

See this package in pnpm:
react-intersection-observer

See this project in Snyk:
https://app.snyk.io/org/ahq-store/project/786c0430-7cd2-4bae-a364-21737a153107?utm_source=github&utm_medium=referral&page=upgrade-pr
@github-actions
Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/react-intersection-observer 10.0.2 🟢 4.6
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Code-Review⚠️ 1Found 2/13 approved changesets -- score normalized to 1
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Maintained🟢 56 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 5
Packaging⚠️ -1packaging workflow not detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 55 existing vulnerabilities detected

Scanned Files

  • pnpm-lock.yaml

@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​react-intersection-observer@​10.0.0 ⏵ 10.0.210010010086 +4100

View full report

@github-actions
Copy link
Copy Markdown

Seems like no activity, cloding...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants