Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump ip from 1.1.8 to 1.1.9 #557

Merged
merged 1 commit into from
Apr 17, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 20, 2024

Bumps ip from 1.1.8 to 1.1.9.

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot requested a review from dannyhw as a code owner February 20, 2024 19:56
Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/@hutson/[email protected] None 0 20.6 kB hutson
npm/@lerna/[email protected] environment, filesystem, network Transitive: eval, shell, unsafe +226 72.9 MB jameshenry
npm/@nodelib/[email protected] filesystem +2 40.6 kB mrmlnc
npm/@nodelib/[email protected] Transitive: filesystem +5 118 kB mrmlnc
npm/@npmcli/[email protected] filesystem 0 1.87 kB lukekarrys
npm/@npmcli/[email protected] environment, shell Transitive: filesystem +2 62.5 kB npm-cli-ops
npm/@npmcli/[email protected] environment, filesystem Transitive: shell +17 3.56 MB npm-cli-ops
npm/@nrwl/[email protected] Transitive: environment, eval, filesystem, network, shell, unsafe +57 8.01 MB nrwl-jason
npm/@nx/[email protected] environment, filesystem, shell, unsafe Transitive: eval, network +57 8.01 MB nrwl-jason
npm/@octokit/[email protected] None 0 24.2 kB octokitbot
npm/@octokit/[email protected] Transitive: network +13 4.94 MB octokitbot
npm/@octokit/[email protected] None +4 4.56 MB octokitbot
npm/@octokit/[email protected] Transitive: network +10 4.83 MB octokitbot
npm/@octokit/[email protected] None 0 4.23 MB octokitbot
npm/@octokit/[email protected] None 0 8.99 MB octokitbot
npm/@octokit/[email protected] Transitive: network +15 5.13 MB octokitbot
npm/@octokit/[email protected] Transitive: network +14 4.95 MB gr2m
npm/@octokit/[email protected] Transitive: network +15 6.67 MB octokitbot
npm/@octokit/[email protected] None +4 4.48 MB octokitbot
npm/@octokit/[email protected] network +9 4.79 MB octokitbot
npm/@octokit/[email protected] Transitive: network +19 6.89 MB octokitbot
npm/@octokit/[email protected] None 0 2.63 kB octokitbot
npm/@octokit/[email protected] None +1 4.45 MB octokitbot
npm/[email protected] None +1 556 kB rreverser
npm/[email protected] None 0 5.51 kB wilsonjackson
npm/[email protected] environment 0 26.1 kB jonschlinkert
npm/[email protected] None +1 135 kB sindresorhus
npm/[email protected] Transitive: eval +11 238 kB ljharb
npm/[email protected] None 0 2.15 kB stevemao
npm/[email protected] Transitive: eval +51 3.15 MB ljharb
npm/[email protected] Transitive: eval +49 3.12 MB ljharb
npm/[email protected] None +1 27.8 kB ljharb
npm/[email protected] None 0 20.4 kB ljharb
npm/[email protected] None 0 37 kB gr2m
npm/[email protected] None +2 22.9 kB juliangruber
npm/[email protected] None 0 32.8 kB 75lb
npm/[email protected] Transitive: eval +9 207 kB ljharb
npm/[email protected] None +3 23.3 kB sindresorhus
npm/[email protected] environment 0 11.5 kB knownasilya
npm/[email protected] None +5 86.8 kB oss-bot
npm/[email protected] None +4 54.7 kB jonschlinkert
npm/[email protected] filesystem 0 11.8 kB nlf
npm/[email protected] None +2 57.1 kB timoxley
npm/[email protected] None +3 19.3 kB stevemao
npm/[email protected] Transitive: environment +4 168 kB mafintosh
npm/[email protected] filesystem +4 33.1 kB oss-bot
npm/[email protected] shell Transitive: environment, eval, filesystem +64 6.76 MB oss-bot
npm/[email protected] None 0 5.97 kB oss-bot
npm/[email protected] filesystem Transitive: environment, eval +38 6.07 MB oss-bot
npm/[email protected] None +2 60.6 kB oss-bot
npm/[email protected] Transitive: environment, filesystem +29 841 kB oss-bot
npm/[email protected] Transitive: environment, filesystem, shell +40 991 kB oss-bot
npm/[email protected] filesystem Transitive: environment, unsafe +16 32.9 MB d-fischer
npm/[email protected] None 0 11.5 kB sindresorhus
npm/[email protected] None 0 15 kB doowb
npm/[email protected] None 0 4.85 kB dmnd
npm/[email protected] Transitive: eval +6 155 kB ljharb
npm/[email protected] Transitive: eval +9 206 kB ljharb
npm/[email protected] None 0 4.01 kB gr2m
npm/[email protected] Transitive: filesystem +1 10.8 kB sindresorhus
npm/[email protected] None +1 12.4 kB sindresorhus
npm/[email protected] eval, filesystem Transitive: environment, shell +9 440 kB mde
npm/[email protected] environment +1 224 kB jonschlinkert
npm/[email protected] environment, eval, filesystem, shell 0 160 kB tabrindle
npm/[email protected] Transitive: eval +49 3.12 MB ljharb
npm/[email protected] Transitive: eval +6 144 kB ljharb
npm/[email protected] None +2 53.6 kB ljharb
npm/[email protected] None +5 150 kB ljharb
npm/[email protected] environment, shell Transitive: filesystem +13 231 kB sindresorhus
npm/[email protected] environment, filesystem, shell +8 1.57 MB mrkmg
npm/[email protected] filesystem +10 300 kB mrmlnc
npm/[email protected] None +1 51.4 kB matteo.collina
npm/[email protected] None +1 14.8 kB sindresorhus
npm/[email protected] filesystem Transitive: environment +10 1.59 MB jaredwray
npm/[email protected] Transitive: environment, filesystem +3 112 kB ryanzim
npm/[email protected] Transitive: eval +49 3.12 MB ljharb
npm/[email protected] eval +4 117 kB ljharb
npm/[email protected] Transitive: environment, filesystem +17 639 kB oss-bot
npm/[email protected] network 0 8.74 kB sindresorhus
npm/[email protected] None 0 12.3 kB sindresorhus
npm/[email protected] Transitive: eval +10 222 kB ljharb
npm/[email protected] shell Transitive: environment, filesystem +29 827 kB oss-bot
npm/[email protected] Transitive: filesystem +3 20.4 kB sindresorhus
npm/[email protected] shell Transitive: environment, filesystem +25 670 kB oss-bot
npm/[email protected] None +2 64.7 kB ionicabizau
npm/[email protected] None +3 95.7 kB ionicabizau
npm/[email protected] filesystem +1 11.6 kB soldair
npm/[email protected] Transitive: environment, filesystem +5 1.47 MB isaacs
npm/[email protected] Transitive: eval +10 228 kB ljharb
npm/[email protected] Transitive: eval +5 124 kB ljharb
npm/[email protected] filesystem Transitive: environment, eval +5 5.26 MB jaylinski
npm/[email protected] None 0 10.9 kB ljharb
npm/[email protected] None +1 38.2 kB ljharb
npm/[email protected] None +1 42.6 kB ljharb
npm/[email protected] None +1 39.2 kB gar
npm/[email protected] Transitive: filesystem +5 37.1 kB sindresorhus
npm/[email protected] None 0 9.3 kB isaacs
npm/[email protected] filesystem Transitive: environment, unsafe +19 1.74 MB lukekarrys
npm/[email protected] Transitive: environment, filesystem, shell +32 7.99 MB sboudrias
npm/[email protected] Transitive: eval +12 343 kB ljharb
npm/[email protected] Transitive: eval +10 225 kB ljharb
npm/[email protected] None 0 3.81 kB sibiraj-s
npm/[email protected] None +2 59 kB ljharb
npm/[email protected] None 0 2.82 kB sindresorhus
npm/[email protected] None 0 9.16 kB trysound
npm/[email protected] Transitive: eval +11 255 kB ljharb
npm/[email protected] Transitive: eval +10 219 kB ljharb
npm/[email protected] None 0 17.5 kB ionicabizau
npm/[email protected] None 0 5.69 kB sindresorhus
npm/[email protected] None +2 57.3 kB ljharb
npm/[email protected] None +1 42.6 kB ljharb
npm/[email protected] None 0 2.75 kB sindresorhus
npm/[email protected] Transitive: eval +13 310 kB ljharb
npm/[email protected] Transitive: eval +10 219 kB ljharb
npm/[email protected] environment, filesystem 0 43 kB isaacs
npm/[email protected] Transitive: eval +51 3.16 MB ljharb
npm/[email protected] environment, filesystem, shell +8 298 kB mde
npm/[email protected] Transitive: environment +4 144 kB simenb
npm/[email protected] filesystem Transitive: environment +2 57 kB ryanzim
npm/[email protected] None +1 12.5 kB
npm/[email protected] None +1 33.2 kB jaredwray
npm/[email protected] Transitive: environment, filesystem, network +8 253 kB lukekarrys
npm/[email protected] environment, filesystem Transitive: network +11 350 kB lukekarrys
npm/[email protected] Transitive: environment, filesystem +11 326 kB sindresorhus
npm/[email protected] filesystem 0 7.02 kB sindresorhus
npm/[email protected] None 0 49.9 kB jdalton
npm/[email protected] filesystem +1 78.3 kB sindresorhus
npm/[email protected] Transitive: environment, filesystem +24 663 kB sindresorhus
npm/[email protected] None 0 55.9 kB jonschlinkert
npm/[email protected] None 0 69.4 kB isaacs
npm/[email protected] None 0 2.86 kB sindresorhus
npm/[email protected] None +5 67 kB sindresorhus
npm/[email protected] None 0 6.51 kB isaacs
npm/[email protected] network 0 152 kB endless
npm/[email protected] environment, shell Transitive: filesystem +12 3.52 MB lukekarrys
npm/[email protected] None +4 152 kB gar
npm/[email protected] None +4 132 kB nlf
npm/[email protected] filesystem Transitive: environment +6 1.5 MB lukekarrys
npm/[email protected] environment, filesystem, network +7 245 kB npm-cli-ops
npm/[email protected] environment +1 12.7 kB sindresorhus
npm/[email protected] None 0 17.1 kB lukekarrys
npm/[email protected] environment, filesystem, network, shell, unsafe +52 7.5 MB nrwl-jason
npm/[email protected] Transitive: eval +12 319 kB ljharb
npm/[email protected] None 0 4.05 kB isaacs
npm/[email protected] None 0 6.17 kB sindresorhus
npm/[email protected] Transitive: environment +10 131 kB sindresorhus
npm/[email protected] None 0 5.63 kB sindresorhus
npm/[email protected] None 0 8.69 kB sindresorhus
npm/[email protected] None 0 8.52 kB sindresorhus
npm/[email protected] None 0 30.9 kB sindresorhus
npm/[email protected] None 0 6.14 kB sindresorhus
npm/[email protected] None +1 16.6 kB sindresorhus
npm/[email protected] environment, filesystem, network Transitive: shell +27 3.86 MB npm-cli-ops
npm/[email protected] None 0 3.92 kB sindresorhus
npm/[email protected] Transitive: environment +8 177 kB sindresorhus
npm/[email protected] None 0 36.3 kB ionicabizau
npm/[email protected] filesystem 0 529 kB isaacs
npm/[email protected] None 0 8.87 kB sindresorhus
npm/[email protected] Transitive: filesystem +3 27.4 kB sindresorhus
npm/[email protected] None 0 5.21 kB lukekarrys
npm/[email protected] filesystem, unsafe +2 22.2 kB lukekarrys
npm/[email protected] filesystem 0 5.16 kB lukekarrys
npm/[email protected] filesystem 0 8.62 kB lukekarrys
npm/[email protected] filesystem Transitive: environment +11 1.65 MB npm-cli-ops
npm/[email protected] Transitive: environment, filesystem +22 515 kB sindresorhus
npm/[email protected] Transitive: environment, filesystem +18 488 kB sindresorhus
npm/[email protected] None +1 11.4 kB npm-cli-ops
npm/[email protected] environment +1 128 kB matteo.collina
npm/[email protected] Transitive: eval +50 3.15 MB ljharb
npm/[email protected] Transitive: eval +14 321 kB ljharb
npm/[email protected] None 0 4.98 kB sindresorhus
npm/[email protected] environment, filesystem 0 138 kB ljharb
npm/[email protected] None +2 18.9 kB sindresorhus
npm/[email protected] filesystem Transitive: environment +6 1.49 MB isaacs
npm/[email protected] None 0 6.6 kB sboudrias
npm/[email protected] None 0 6.56 kB feross
npm/[email protected] None +1 4.59 MB blesh
npm/[email protected] Transitive: eval +10 226 kB ljharb
npm/[email protected] Transitive: eval +12 265 kB ljharb
npm/[email protected] Transitive: eval +8 185 kB ljharb
npm/[email protected] Transitive: eval +9 200 kB ljharb
npm/[email protected] None +1 32.3 kB jonschlinkert
npm/[email protected] Transitive: eval +11 322 kB ljharb
npm/[email protected] None +1 24.8 kB dominictarr
npm/[email protected] Transitive: environment +2 145 kB matteo.collina
npm/[email protected] None +1 52.3 kB nlf
npm/[email protected] None +1 9.19 kB sindresorhus
npm/[email protected] Transitive: eval +50 3.16 MB ljharb
npm/[email protected] Transitive: eval +49 3.12 MB ljharb
npm/[email protected] Transitive: eval +49 3.12 MB ljharb
npm/[email protected] Transitive: eval +49 3.12 MB ljharb
npm/[email protected] filesystem +2 83.4 kB rmg
npm/[email protected] environment, filesystem +1 175 kB isaacs
npm/[email protected] filesystem 0 2.79 kB sindresorhus
npm/[email protected] None 0 12.5 kB dominictarr
npm/[email protected] Transitive: environment +2 138 kB rvagg
npm/[email protected] filesystem Transitive: environment +7 1.54 MB raszi
npm/[email protected] Transitive: eval +14 323 kB ljharb
npm/[email protected] Transitive: eval +14 324 kB ljharb
npm/[email protected] Transitive: eval +14 325 kB ljharb
npm/[email protected] Transitive: eval +14 329 kB ljharb
npm/[email protected] None 0 26 kB substack
npm/[email protected] environment, eval, filesystem 0 1.28 MB alexlamsl
npm/[email protected] Transitive: eval +10 222 kB ljharb
npm/[email protected] None 0 5.76 kB gr2m
npm/[email protected] None 0 36.7 kB anodynos
npm/[email protected] None 0 16.6 kB kemitchell
npm/[email protected] None 0 7.88 kB lukekarrys
npm/[email protected] None 0 14.2 kB timoxley
npm/[email protected] Transitive: eval +12 287 kB ljharb
npm/[email protected] None 0 36.8 kB substack
npm/[email protected] None +4 56.2 kB sindresorhus
npm/[email protected] filesystem +2 101 kB npm-cli-ops
npm/[email protected] None +1 117 kB sindresorhus
npm/[email protected] environment, filesystem 0 128 kB oss-bot
npm/[email protected] environment, filesystem +13 439 kB oss-bot

🚮 Removed packages: npm/@aashutoshrathi/[email protected], npm/@babel/[email protected], npm/@babel/[email protected], npm/@hapi/[email protected], npm/@pkgjs/[email protected], npm/@react-native/[email protected], npm/@sideway/[email protected], npm/@sideway/[email protected], npm/@sinclair/[email protected], npm/@tootallnate/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@yarnpkg/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert Package Note
Shell access npm/[email protected]
Uses eval npm/[email protected]
Uses eval npm/[email protected]
Uses eval npm/[email protected]
New author npm/[email protected]
Shell access npm/[email protected]
New author npm/[email protected]
Shell access npm/[email protected]
New author npm/[email protected]
New author npm/[email protected]
New author npm/[email protected]
New author npm/[email protected]
New author npm/@npmcli/[email protected]
New author npm/[email protected]
New author npm/[email protected]
New author npm/[email protected]
New author npm/[email protected]
Shell access npm/[email protected]
New author npm/[email protected]
Shell access npm/[email protected]
Shell access npm/[email protected]
Shell access npm/@npmcli/[email protected]
Uses eval npm/[email protected]
Shell access npm/@nx/[email protected]
Shell access npm/[email protected]
Install scripts npm/[email protected]
  • Install script: postinstall
  • Source: node ./bin/post-install
Shell access npm/[email protected]

View full report↗︎

Next steps

What is shell access?

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Packages should avoid accessing the shell which can reduce portability, and make it easier for malicious shell access to be introduced.

What is eval?

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Avoid packages that use eval, since this could potentially execute any code.

What is new author?

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Scrutinize new collaborator additions to packages because they now have the ability to publish code into your dependency tree. Packages should avoid frequent or unnecessary additions or changes to publishing rights.

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/ip-1.1.9 branch 2 times, most recently from bc1aa44 to 5f9f7d5 Compare March 8, 2024 16:27
Bumps [ip](https://github.com/indutny/node-ip) from 1.1.8 to 1.1.9.
- [Commits](indutny/node-ip@v1.1.8...v1.1.9)

---
updated-dependencies:
- dependency-name: ip
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/ip-1.1.9 branch from 5f9f7d5 to d354db4 Compare March 17, 2024 15:46
@dannyhw dannyhw merged commit 6e5a359 into next Apr 17, 2024
1 check passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/ip-1.1.9 branch April 17, 2024 10:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant