Skip to content

Comments

Upgrade dependencies to fix vulnerabilities#68

Merged
kezhenxu94 merged 1 commit intoapache:masterfrom
Jiannan-dev:audit_fix
Feb 1, 2022
Merged

Upgrade dependencies to fix vulnerabilities#68
kezhenxu94 merged 1 commit intoapache:masterfrom
Jiannan-dev:audit_fix

Conversation

@Jiannan-dev
Copy link

This PR is to fix a vulnerability that occurs when using npm install, as follows

image

@wu-sheng wu-sheng added this to the 0.4.0 milestone Feb 1, 2022
@wu-sheng wu-sheng requested a review from kezhenxu94 February 1, 2022 04:00
@Jiannan-dev
Copy link
Author

In addition, I would like to know how to participate in the contribution to skywalking and is there any relevant literature or blogs that I can refer to understand the operation mechanism of skywalking, I can contribute using js/ts and java

@kezhenxu94 kezhenxu94 modified the milestone: 0.4.0 Feb 1, 2022
@kezhenxu94
Copy link
Member

In addition, I would like to know how to participate in the contribution to skywalking and is there any relevant literature or blogs that I can refer to understand the operation mechanism of skywalking, I can contribute using js/ts and java

All materials of skywalking is public for globally access, for tasks open to new contributors please refer to our GitHub issues https://github.com/apache/skywalking/issues

@kezhenxu94
Copy link
Member

In addition, I would like to know how to participate in the contribution to skywalking and is there any relevant literature or blogs that I can refer to understand the operation mechanism of skywalking, I can contribute using js/ts and java

All materials of skywalking is public for globally access, for tasks open to new contributors please refer to our GitHub issues https://github.com/apache/skywalking/issues

For most (new) contributors they usually got started by contributing plugins to the SkyWalking agent of their favorite languages and favorite(familiar) libraries/modules/frameworks.

@kezhenxu94
Copy link
Member

I'd say it's also pretty nice that you get yourself familiar with the contributing process (how to open a PR and get review comments from reviewers, modify PR content accordingly, make the CI passed, etc.), if you like you can start to dig deep in the real content of this NodeJS agent and try to contribute a plugin of a module that you're most familiar with.

@Jiannan-dev
Copy link
Author

Thanks for the advice, let me start with nodejs

@kezhenxu94
Copy link
Member

Thanks for the advice, let me start with nodejs

Take a look at this https://github.com/apache/skywalking/issues?q=is%3Aopen+is%3Aissue+label%3Anodejs we have good first issues labeled with NodeJS for contributors like you

@kezhenxu94 kezhenxu94 added the dependencies Keep tracking dependencies version, CVE, etc. label Feb 1, 2022
Copy link
Member

@kezhenxu94 kezhenxu94 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks nice!! 0 vulnerabilities now

@kezhenxu94 kezhenxu94 changed the title Fix audit Upgrade dependencies to fix vulnerabilities Feb 1, 2022
@kezhenxu94 kezhenxu94 merged commit b33189a into apache:master Feb 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Keep tracking dependencies version, CVE, etc.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants