socket-security[bot] comments

Results 7106 comments of


                                            socket-security[bot]

feat: add createMarkdown() factory to expose the compiler and parser

**👍 Dependency issues cleared.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. [**View full report↗︎**](https://socket.dev/dashboard/org/quantizor/diff/62a5b79d-a570-47a4-a15c-0e677a19bbdc/20e85947-e733-4e04-be9b-6babb30cc156)

feat: add createMarkdown() factory to expose the compiler and parser

Report too large to display inline [**View full report↗︎**](https://socket.dev/dashboard/org/quantizor/diff/62a5b79d-a570-47a4-a15c-0e677a19bbdc/20e85947-e733-4e04-be9b-6babb30cc156)

chore(@vercel/node): bump esbuild version

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License npm/esbuild@0.25.0 [View full report](https://socket.dev/dashboard/org/vercel/diff/b98c8b2e-3ddb-4b8b-9754-c74cd0c2c1e1/cfd663ab-a5fd-4329-a11a-b28474ca5d57?tab=dependencies)

Bump webpack from 5.90.0 to 5.94.0

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

chore(deps-dev): bump @commitlint/config-conventional from 17.7.0 to 18.6.2

[feat] Add ZIP download support for multiple assets

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License client-zip@2.5.0 [View full report](https://socket.dev/dashboard/org/Comfy-Org/diff-scan/4316ea3f-01b2-4770-85df-0b9c80bc6ee4?tab=dependencies)

Bump tmp and patch-package

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License npm/@types/uuid@9.0.8 npm/@types/fluent-ffmpeg@2.1.24 npm/@types/luxon@3.1.0 npm/@types/underscore@1.11.4 npm/@types/lodash@4.17.0 npm/underscore@1.13.6 npm/p-queue@8.1.0 npm/fluent-ffmpeg@2.1.3 npm/lodash@4.17.21...

Bump tmp and patch-package

> [!WARNING] > **Review the following alerts detected in dependencies.** > > According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about [Socket for...

Bump chalk from 5.4.1 to 5.6.2

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License mock-cwd@1.0.0 is-url@1.2.4 p-mutex@1.0.0 ajv-draft-04@1.0.0 global-agent@3.0.0 minimatch@10.0.3 prettier-plugin-jsdoc@1.3.3 cosmiconfig@9.0.0 glob@11.0.3...

build(deps): bump @capacitor/core from 6.2.1 to 7.2.0 in /materialious

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License electron-builder@26.0.12 @capacitor/core@7.2.0 electron-updater@6.6.2 electron-window-state@5.0.3 electron-unhandled@4.0.1 electron-serve@1.1.0 electron-rebuild@3.2.9 jsdom@26.1.0 electron@35.2.1...