socket-security[bot] comments

Results 7056 comments of


                                            socket-security[bot]

fix: update example app

> [!WARNING] > **Review the following alerts detected in dependencies.** > > According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about [Socket for...

Bump @metamask/eth-json-rpc-provider from 4.1.1 to 4.1.2

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

feat: Popular tokens display

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License npm/@metamask/token-search-discovery-controller@3.1.0 ⏵ 3.3.0 +3 [View full report](https://socket.dev/dashboard/org/MetaMask/diff/c37c38db-9901-45c9-a3c7-aea7e2e8b6ce/5fc4104c-44ee-45f4-ad83-610a01c11dc8?tab=dependencies)

Update dependency @rollup/plugin-node-resolve to v16

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @rollup/plugin-node-resolve@15.3.1 ⏵ 16.0.3 [View full report](https://socket.dev/dashboard/org/tjenkinson/diff-scan/6f5e356c-aa5f-450c-9cb3-64737706a049?tab=dependencies)

Bump tar-fs in /backend

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License npm/@types/murmurhash-js@1.0.3 npm/@types/uuid@8.3.4 npm/@types/bcryptjs@2.4.2 npm/@types/formidable@2.0.5 npm/@types/sharp@0.31.0 npm/@types/crypto-js@4.1.1 npm/murmurhash-js@1.0.0 npm/crypto-random-string@5.0.0 npm/@types/cors@2.8.12...

ERC-7930

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License npm/interoperable-addresses@0.1.3 [View full report](https://socket.dev/dashboard/org/OpenZeppelin/diff/25f4188b-cefc-4350-bcd8-656853fe8629/7dbf8340-cfde-416d-a191-65752e5ca858?tab=dependencies)

build(deps-dev): bump eslint-plugin-promise from 6.0.0 to 6.6.0

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License eslint-plugin-promise@6.0.0 ⏵ 6.6.0 +1 [View full report](https://socket.dev/dashboard/org/jshttp/diff/1ded6a0c-2e2b-4540-a710-29e2bdf8f284/833b2469-8d0f-4583-b30b-e6669c9c2209?tab=dependencies)

Add Array.uniquifySorted to the Arrays library

**New, updated, and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:---...

add Keystone hardware wallet integration

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License ergo-lib-wasm-browser@0.28.0 ⏵ 0.29.0-alpha-2f840d3 +3 +1 [View full report](https://socket.dev/dashboard/org/nautls/diff-scan/e6cd77a1-1166-411c-9b74-7c4576fc38bc?tab=dependencies)