build-with-celo-hackathon icon indicating copy to clipboard operation
build-with-celo-hackathon copied to clipboard

Guessing It!

Open nikbhintade opened this issue 3 years ago • 1 comments

Initial hardhat setup

nikbhintade avatar Oct 08 '22 10:10 nikbhintade

Socket Security Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 New install scripts detected

A dependency change in this PR is introducing new install scripts to your install step.

Package Script field Location
[email protected] (added) binding.gyp contract/package.json via [email protected], @nomicfoundation/[email protected], [email protected]
[email protected] (added) binding.gyp contract/package.json
[email protected] (added) binding.gyp contract/package.json via [email protected]
[email protected] (added) install contract/package.json
[email protected] (added) install contract/package.json via [email protected]
[email protected] (added) postinstall frontend/package.json via [email protected], [email protected]
[email protected] (added) postinstall frontend/package.json via [email protected], @pmmmwh/[email protected]
[email protected] (added) install contract/package.json via [email protected], @nomicfoundation/[email protected], [email protected]
🫣 Native code

Contains native code which could be a vector to obscure malicious code, and generally decrease the likelihood of reproducible or reliable installs.

Package Location
[email protected] (added) contract/package.json via [email protected], @nomicfoundation/[email protected], [email protected]
[email protected] (added) contract/package.json
[email protected] (added) contract/package.json via [email protected]
Socket.dev scan summary
Issue Status
Did you mean? ✅ no new possible package typos
Install scripts ⚠️ 8 new install scripts detected
Telemetry ✅ no new telemetry
Troll package ✅ no new troll packages
Malware ✅ no new malware
Native code ⚠️ 3 new native modules detected
Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] [email protected]

Powered by socket.dev

socket-security[bot] avatar Oct 08 '22 10:10 socket-security[bot]