socket-security[bot]

Results 7540 comments of socket-security[bot]

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License golang/​github.com/​go-git/​go-git/​v5@​v5.16.1 ⏵ v5.16.2 +1 [View full report](https://socket.dev/dashboard/org/wandb/diff/4c9ef514-6f44-48b9-9c4b-43f32635cbb4/03f5a178-113e-46be-9f44-5c74f47b7ba7?tab=dependencies)

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License eslint@​8.57.1 ⏵ 9.39.1 +1 +47 [View full report](https://socket.dev/dashboard/org/pengx17/diff-scan/03cc1ea9-d508-4cb8-9db4-2a5a72ff02e3?tab=dependencies)

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @​img/​sharp-darwin-arm64@​0.34.3 @​img/​sharp-darwin-x64@​0.34.3 @​img/​sharp-linux-arm64@​0.34.3 @​img/​sharp-linux-arm@​0.34.3 @​img/​sharp-linux-ppc64@​0.34.3 @​img/​sharp-linux-s390x@​0.34.3 @​img/​sharp-linux-x64@​0.34.3 @​img/​sharp-linuxmusl-arm64@​0.34.3 @​img/​sharp-linuxmusl-x64@​0.34.3...

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License npm/​@​types/​smoothscroll-polyfill@​0.3.4 npm/​@​capacitor/​ios@​6.1.0 ⏵ 7.4.3 +1 +1 npm/​@​typescript-eslint/​parser@​5.62.0 npm/​@​types/​react-router-dom@​5.3.3 npm/​@​types/​ua-parser-js@​0.7.39...

> [!WARNING] > **Review the following alerts detected in dependencies.** > > According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about [Socket for...

**New and removed dependencies detected.** Learn more about [Socket for GitHub ↗︎](https://socket.dev?utm_medium=gh) | Package | New capabilities | Transitives | Size | Publisher | |:--- |:--- |:--- |:--- |:--- |...

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License mock-cwd@​1.0.0 is-url@​1.2.4 p-mutex@​1.0.0 ajv-draft-04@​1.0.0 global-agent@​3.0.0 decamelize@​6.0.0 prettier-plugin-jsdoc@​1.3.3 cosmiconfig@​9.0.0 glob@​11.0.3...

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @​types/​lodash@​4.17.20 ⏵ 4.17.7 [View full report](https://socket.dev/dashboard/org/MetaMask/diff-scan/ae89229e-4579-4fe0-92b5-0070704dbc5c?tab=dependencies)

**Review the following changes in direct dependencies.** Learn more about [Socket for GitHub](https://socket.dev?utm_medium=gh). Diff Package Supply ChainSecurity Vulnerability Quality Maintenance License @​metamask/​eth-json-rpc-middleware@​17.0.1 ⏵ 21.0.0 +1 +5 +7 [View full report](https://socket.dev/dashboard/org/MetaMask/diff-scan/5a794ab7-f191-4916-8983-eff0d8c6a79e?tab=dependencies)