amphora icon indicating copy to clipboard operation
amphora copied to clipboard

Middleware for Express that composes components into renderable pages

Results 54 amphora issues
Sort by recently updated
recently updated
newest added

Sets us up for pagination to list endpoints like `/_components/instances` - Calls `db.createReadStream()` which has been modified in the storage module, for list requests - Adds `prev` and `size` query...

Bumps [minimist](https://github.com/minimistjs/minimist) to 1.2.8 and updates ancestor dependencies [minimist](https://github.com/minimistjs/minimist), [handlebars](https://github.com/wycats/handlebars.js), [mkdirp](https://github.com/isaacs/node-mkdirp) and [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together. Updates `minimist` from 1.2.0 to 1.2.8 Changelog Sourced from minimist's...

dependencies

Bumps [xml2js](https://github.com/Leonidas-from-XIV/node-xml2js) and [aws-sdk](https://github.com/aws/aws-sdk-js). These dependencies needed to be updated together. Updates `xml2js` from 0.4.19 to 0.5.0 Commits 9f730bb Update package.json with latest PR 50a492a Merge pull request #603 from...

dependencies

Bumps [minimatch](https://github.com/isaacs/minimatch) to 3.1.2 and updates ancestor dependency [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together. Updates `minimatch` from 3.0.4 to 3.1.2 Commits 699c459 3.1.2 2f2b5ff fix: trim pattern 25d7c0d...

dependencies

Bumps [qs](https://github.com/ljharb/qs) from 6.5.2 to 6.5.3. Changelog Sourced from qs's changelog. 6.5.3 [Fix] parse: ignore __proto__ keys (#428) [Fix] utils.merge: avoid a crash with a null target and a truthy...

dependencies

Bumps [cookiejar](https://github.com/bmeck/node-cookiejar) from 2.1.2 to 2.1.4. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cookiejar&package-manager=npm_and_yarn&previous-version=2.1.2&new-version=2.1.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: #...

dependencies

Bumps [passport](https://github.com/jaredhanson/passport) from 0.3.2 to 0.6.0. Changelog Sourced from passport's changelog. [0.6.0] - 2022-05-20 Added authenticate(), req#login, and req#logout accept a keepSessionInfo: true option to keep session information after regenerating...

dependencies

Bumps [moment](https://github.com/moment/moment) from 2.24.0 to 2.29.4. Changelog Sourced from moment's changelog. 2.29.4 Release Jul 6, 2022 #6015 [bugfix] Fix ReDoS in preprocessRFC2822 regex 2.29.3 Full changelog Release Apr 17, 2022...

dependencies

Bumps [node-fetch](https://github.com/node-fetch/node-fetch) from 1.7.3 to 2.6.7. Release notes Sourced from node-fetch's releases. v2.6.7 Security patch release Recommended to upgrade, to not leak sensitive cookie and authentication header information to 3th...

dependencies

## Description It looks like there's inefficient garbage collection happening when we call [`amphora.components.get`](https://github.com/clay/amphora/blob/master/lib/services/components.js#L16), which may indicate a memory leak. **Background:** our team created [this script](https://gist.github.com/salomoneb/b619a64ada78e0417178a760bec16ab2) to batch update all...