CodeQL

fix(deps): bump @maplibre/maplibre-gl-style-spec from 18.0.0 to 19.3.1 #432

Triggered via pull request September 14, 2023 04:16

dependabot[bot]

opened #268

dependabot/npm_and_yarn/maplibre/maplibre-gl-style-spec-19.3.1

Status Success

Total duration 3m 21s

Artifacts –

This run and associated checks have been archived and are scheduled for deletion. Learn more about checks retention

codeql.yml

on: pull_request

Matrix: Analyze

Annotations

50 warnings

src/healthcheck.js#L14

'err' is defined but never used (@typescript-eslint/no-unused-vars)

src/main.js#L86

Found statSync from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/main.js#L138

Found existsSync from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/main.js#L139

Generic Object Injection Sink (security/detect-object-injection)

src/main.js#L172

Found stat from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/main.js#L180

Found statSync from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/serve_data.js#L21

'next' is defined but never used (@typescript-eslint/no-unused-vars)

src/serve_data.js#L93

Variable Assigned to Object Injection Sink (security/detect-object-injection)

src/serve_data.js#L119

'next' is defined but never used (@typescript-eslint/no-unused-vars)

src/serve_data.js#L146

Found statSync from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/serve_data.js#L185

Generic Object Injection Sink (security/detect-object-injection)

src/serve_font.js#L18

Found readdir from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/serve_font.js#L24

Found stat from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/serve_font.js#L31

Found existsSync from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/serve_font.js#L41

'next' is defined but never used (@typescript-eslint/no-unused-vars)

src/serve_font.js#L61

'next' is defined but never used (@typescript-eslint/no-unused-vars)

src/serve_rendered.js#L25

Unsafe Regular Expression (security/detect-unsafe-regex)

src/serve_rendered.js#L26

Unsafe Regular Expression (security/detect-unsafe-regex)

src/serve_rendered.js#L56

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L76

Variable Assigned to Object Injection Sink (security/detect-object-injection)

src/serve_rendered.js#L94

'info' is defined but never used (@typescript-eslint/no-unused-vars)

src/serve_rendered.js#L96

Generic Object Injection Sink (security/detect-object-injection)

src/serve_rendered.js#L102

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/serve_rendered.js#L104

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L106

The type 'List' is undefined (jsdoc/no-undefined-types)

src/serve_rendered.js#L106

Expected @param names to be "coordinates, query". Got "coordinatePair, coordinates, query" (jsdoc/check-param-names)

src/serve_rendered.js#L107

Missing JSDoc @param "coordinates" description (jsdoc/require-param-description)

src/serve_rendered.js#L107

Missing JSDoc @param "coordinates" type (jsdoc/require-param-type)

src/serve_rendered.js#L128

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/serve_rendered.js#L129

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L131

The type 'List' is undefined (jsdoc/no-undefined-types)

src/serve_rendered.js#L146

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/serve_rendered.js#L147

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L222

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L224

The type 'List' is undefined (jsdoc/no-undefined-types)

src/serve_rendered.js#L256

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/serve_rendered.js#L257

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L336

Missing JSDoc @returns declaration (jsdoc/require-returns)

src/serve_rendered.js#L337

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L339

The type 'List' is undefined (jsdoc/no-undefined-types)

src/serve_rendered.js#L349

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L421

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L424

The type 'List' is undefined (jsdoc/no-undefined-types)

src/serve_rendered.js#L440

Expected only 0 line after block description (jsdoc/tag-lines)

src/serve_rendered.js#L443

The type 'List' is undefined (jsdoc/no-undefined-types)

src/serve_rendered.js#L632

Found readdir from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/serve_rendered.js#L638

Found stat from package "node:fs" with non literal argument at index 0 (security/detect-non-literal-fs-filename)

src/serve_rendered.js#L705

Generic Object Injection Sink (security/detect-object-injection)

src/serve_rendered.js#L707

Generic Object Injection Sink (security/detect-object-injection)

src/serve_rendered.js#L746

Generic Object Injection Sink (security/detect-object-injection)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): bump @maplibre/maplibre-gl-style-spec from 18.0.0 to 19.3.1 #432

Summary