[Snyk] Upgrade tempy from 0.2.1 to 1.0.0 by snyk-bot · Pull Request #7 · turkdevops/create-react-app

snyk-bot · 2021-03-27T22:04:16Z

Snyk has created this PR to upgrade tempy from 0.2.1 to 1.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 7 versions ahead of your current version.
The recommended version was released 6 months ago, on 2020-10-12.

Release notes

Package name: tempy

1.0.0 - 2020-10-12
- Make .task methods reflect return values from callbacks (#29) 77a5091
v0.7.1...v1.0.0
0.7.1 - 2020-09-26
- Update dependencies 709bd3d
v0.7.0...v0.7.1
0.7.0 - 2020-09-13
- Add cleanup methods (#25) 96592fe
v0.6.0...v0.7.0
0.6.0 - 2020-07-18
- Allow setting a prefix for temp directory (#20) f7fc51f
v0.5.0...v0.6.0
0.5.0 - 2020-03-09
- Add methods for writing data to temp files (#22) 532be0c
v0.4.0...v0.5.0
0.4.0 - 2020-02-12
Breaking
- Require Node.js 10 9f815c2
Fixes
- Fix tempy.file() always adds extension-dot . even if no extension is given (#19) 4ecbd80
v0.3.0...v0.4.0
0.3.0 - 2019-04-16
Breaking:
- Require Node.js 8 a168b8d
Enhancements:
- Add TypeScript definition (#9) 2e2760e
v0.2.1...v0.3.0
0.2.1 - 2017-09-19
0.2.1

from tempy GitHub release notes

Commit messages

Package name: tempy

3f5d3f4 1.0.0
77a5091 Make `.task` methods reflect return values from callbacks (Bump ua-parser-js from 0.7.22 to 0.7.28 in /docusaurus/website #29)
943ade0 0.7.1
709bd3d Update dependencies
e7b4c4f 0.7.0
96592fe Add cleanup methods (Bump postcss from 7.0.35 to 7.0.36 in /docusaurus/website #25)
c6e32f1 Consistent optional parameter documentation (Bump merge-deep from 3.0.2 to 3.0.3 in /docusaurus/website #26)
77204fe 0.6.0
ae9af82 Meta tweaks
f7fc51f Allow setting a prefix for temp directory (Bump ws from 6.2.1 to 6.2.2 in /docusaurus/website #20)
1a64f8b Get temporary directory from `temp-dir` in unit tests (Bump path-parse from 1.0.6 to 1.0.7 in /docusaurus/website #24)
37229ce Meta tweaks
ae6e6a2 0.5.0
10fb973 Meta tweaks
532be0c Add methods for writing data to temp files (Bump tar from 6.0.5 to 6.1.10 in /docusaurus/website #22)
a2c7198 0.4.0
9f815c2 Require Node.js 10
4ecbd80 Fix `tempy.file()` always adds extension-dot `.` even if no extension is given (Bump url-parse from 1.4.7 to 1.5.3 in /docusaurus/website #19)
c5aa7ee Upgrade engines field to Node.js >=8.3 support (Bump dns-packet from 1.3.1 to 1.3.4 in /docusaurus/website #18)
38433be Create funding.yml
828c04c Update readme cleanup explanation ([Snyk] Upgrade jest from 26.6.0 to 26.6.3 #6)
8958de5 0.3.0
a168b8d Require Node.js 8
2e2760e Add TypeScript definition ([Snyk] Upgrade semver from 7.3.2 to 7.3.4 #9)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade tempy from 0.2.1 to 1.0.0. See this package in npm: https://www.npmjs.com/package/tempy See this project in Snyk: https://app.snyk.io/org/turkdevops/project/dc80b946-233e-45f1-ac8c-54df97533a8e?utm_source=github&utm_medium=upgrade-pr

mistaken-pull-closer · 2021-03-27T22:04:21Z

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

pull-dog · 2021-03-27T22:04:27Z

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

@pull-dog up to reprovision or provision the server.
@pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
5fbdbea0-8f48-11eb-80b6-56f30a2c3f35

guardrails · 2021-03-27T22:07:05Z

⚠️ We detected security issues in this pull request:
Mode: paranoid | Total findings: 172 | Considered vulnerability: 0

Hard-Coded Secrets (12)

create-react-app/docusaurus/docs/deployment.md

Line 368 in 847cc9d

    
           2. `git remote set-url origin https://<user>:<token>@github.com/<user>/<repo>` .

create-react-app/docusaurus/website/docusaurus.config.js

Line 37 in 847cc9d

apiKey: '3be60f4f8ffc24c75da84857d6323791',

More info on how to fix Hard-Coded Secrets in General.

Insecure Use of Dangerous Function (31)

create-react-app/packages/create-react-app/createReactApp.js

Line 37 in 847cc9d

const execSync = require('child_process').execSync;

create-react-app/packages/create-react-app/createReactApp.js

Line 724 in 847cc9d

const { name, version } = require(path.join(

create-react-app/packages/create-react-app/createReactApp.js

Line 762 in 847cc9d

const { name, version } = require(path.join(

create-react-app/packages/create-react-app/createReactApp.js

Line 830 in 847cc9d

const packageJson = require(packageJsonPath);

create-react-app/packages/create-react-app/createReactApp.js

Line 910 in 847cc9d

const packageJson = require(packagePath);

create-react-app/packages/react-dev-utils/getCacheIdentifier.js

Line 15 in 847cc9d

cacheIdentifier += require(`${packageName}/package.json`).version;

create-react-app/packages/react-dev-utils/getProcessForPort.js

Line 11 in 847cc9d

var execSync = require('child_process').execSync;

create-react-app/packages/react-dev-utils/getProcessForPort.js

Line 37 in 847cc9d

return require(packagePath).name;

create-react-app/packages/react-dev-utils/launchEditor.js

Line 11 in 847cc9d

const child_process = require('child_process');

create-react-app/packages/react-dev-utils/openBrowser.js

Line 11 in 847cc9d

var execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/config/modules.js

Line 119 in 847cc9d

const ts = require(resolve.sync('typescript', {

create-react-app/packages/react-scripts/config/modules.js

Line 126 in 847cc9d

config = require(paths.appJsConfig);

create-react-app/packages/react-scripts/config/paths.js

Line 28 in 847cc9d

require(resolveApp('package.json')).homepage,

create-react-app/packages/react-scripts/config/webpack.config.js

Line 42 in 847cc9d

const appPackageJson = require(paths.appPackageJson);

create-react-app/packages/react-scripts/config/webpackDevServer.config.js

Line 123 in 847cc9d

require(paths.proxySetup)(app);

create-react-app/packages/react-scripts/scripts/build.js

Line 116 in 847cc9d

const appPackage = require(paths.appPackageJson);

create-react-app/packages/react-scripts/scripts/eject.js

Line 20 in 847cc9d

const execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/scripts/eject.js

Line 169 in 847cc9d

const ownPackage = require(path.join(ownPath, 'package.json'));

create-react-app/packages/react-scripts/scripts/eject.js

Line 170 in 847cc9d

const appPackage = require(path.join(appPath, 'package.json'));

create-react-app/packages/react-scripts/scripts/init.js

Line 20 in 847cc9d

const execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/scripts/init.js

Line 91 in 847cc9d

const appPackage = require(path.join(appPath, 'package.json'));

create-react-app/packages/react-scripts/scripts/init.js

Line 124 in 847cc9d

templateJson = require(templateJsonPath);

create-react-app/packages/react-scripts/scripts/start.js

Line 52 in 847cc9d

const react = require(require.resolve('react', { paths: [paths.appPath] }));

create-react-app/packages/react-scripts/scripts/start.js

Line 101 in 847cc9d

const appName = require(paths.appPackageJson).name;

create-react-app/packages/react-scripts/scripts/start.js

Line 129 in 847cc9d

const proxySetting = require(paths.appPackageJson).proxy;

create-react-app/packages/react-scripts/scripts/test.js

Line 36 in 847cc9d

const execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/scripts/utils/createJestConfig.js

Line 74 in 847cc9d

const overrides = Object.assign({}, require(paths.appPackageJson).jest);

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 80 in 847cc9d

ts = require(resolve.sync('typescript', {

create-react-app/tasks/compile-lockfile.js

Line 11 in 847cc9d

const cprocess = require('child_process');

create-react-app/tasks/cra.js

Line 13 in 847cc9d

const cp = require('child_process');

create-react-app/tasks/screencast.js

Line 41 in 847cc9d

const data = require(cast);

More info on how to fix Insecure Use of Dangerous Function in Javascript.

Insecure File Management (111)

create-react-app/packages/create-react-app/createReactApp.js

Line 269 in 847cc9d

fs.writeFileSync(

create-react-app/packages/create-react-app/createReactApp.js

Line 506 in 847cc9d

const nodeArgs = fs.existsSync(pnpPath) ? ['--require', pnpPath] : [];

create-react-app/packages/create-react-app/createReactApp.js

Line 548 in 847cc9d

const currentFiles = fs.readdirSync(path.join(root));

create-react-app/packages/create-react-app/createReactApp.js

Line 558 in 847cc9d

const remainingFiles = fs.readdirSync(path.join(root));

create-react-app/packages/create-react-app/createReactApp.js

Line 719 in 847cc9d

stream = fs.createReadStream(installPackage);

create-react-app/packages/create-react-app/createReactApp.js

Line 826 in 847cc9d

if (!fs.existsSync(packageJsonPath)) {

create-react-app/packages/create-react-app/createReactApp.js

Line 926 in 847cc9d

fs.writeFileSync(packagePath, JSON.stringify(packageJson, null, 2) + os.EOL);

create-react-app/packages/create-react-app/createReactApp.js

Line 964 in 847cc9d

const conflicts = fs

create-react-app/packages/create-react-app/createReactApp.js

Line 979 in 847cc9d

const stats = fs.lstatSync(path.join(root, file));

create-react-app/packages/create-react-app/createReactApp.js

Line 998 in 847cc9d

fs.readdirSync(root).forEach(file => {

create-react-app/packages/react-dev-utils/FileSizeReporter.js

Line 42 in 847cc9d

var fileContents = fs.readFileSync(path.join(root, asset.name));

create-react-app/packages/react-dev-utils/FileSizeReporter.js

Line 139 in 847cc9d

var contents = fs.readFileSync(fileName);

create-react-app/packages/react-dev-utils/WebpackDevServerUtils.js

Line 387 in 847cc9d

const isPublicFileRequest = fs.existsSync(maybePublicPath);

create-react-app/packages/react-dev-utils/browsersHelper.js

Line 75 in 847cc9d

const pkg = JSON.parse(fs.readFileSync(filePath));

create-react-app/packages/react-dev-utils/browsersHelper.js

Line 77 in 847cc9d

fs.writeFileSync(filePath, JSON.stringify(pkg, null, 2) + os.EOL);

create-react-app/packages/react-dev-utils/launchEditor.js

Line 288 in 847cc9d

if (!fs.existsSync(fileName)) {

create-react-app/packages/react-dev-utils/printHostingInstructions.js

Line 118 in 847cc9d

if (!fs.existsSync(`${globalModules}/serve`)) {

create-react-app/packages/react-dev-utils/typescriptFormatter.js

Line 27 in 847cc9d

const source = file && fs.existsSync(file) && fs.readFileSync(file, 'utf-8');

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 13 in 847cc9d

const file = fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 17 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 33 in 847cc9d

const file = fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 36 in 847cc9d

const fileO = fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 52 in 847cc9d

const file = fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 19 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 24 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 31 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 44 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 49 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 56 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 23 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 28 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 35 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 42 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 47 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 61 in 847cc9d

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 66 in 847cc9d

fs

create-react-app/packages/react-scripts/config/env.js

Line 42 in 847cc9d

if (fs.existsSync(dotenvFile)) {

create-react-app/packages/react-scripts/config/env.js

Line 60 in 847cc9d

const appDirectory = fs.realpathSync(process.cwd());

create-react-app/packages/react-scripts/config/getHttpsConfig.js

Line 44 in 847cc9d

if (!fs.existsSync(file)) {

create-react-app/packages/react-scripts/config/getHttpsConfig.js

Line 51 in 847cc9d

return fs.readFileSync(file);

create-react-app/packages/react-scripts/config/modules.js

Line 104 in 847cc9d

const hasTsConfig = fs.existsSync(paths.appTsConfig);

create-react-app/packages/react-scripts/config/modules.js

Line 105 in 847cc9d

const hasJsConfig = fs.existsSync(paths.appJsConfig);

create-react-app/packages/react-scripts/config/modules.js

Line 122 in 847cc9d

config = ts.readConfigFile(paths.appTsConfig, ts.sys.readFile).config;

create-react-app/packages/react-scripts/config/paths.js

Line 17 in 847cc9d

const appDirectory = fs.realpathSync(process.cwd());

create-react-app/packages/react-scripts/config/paths.js

Line 49 in 847cc9d

fs.existsSync(resolveFn(`${filePath}.${extension}`))

create-react-app/packages/react-scripts/config/paths.js

Line 110 in 847cc9d

fs.existsSync(reactScriptsPath) &&

create-react-app/packages/react-scripts/config/paths.js

Line 111 in 847cc9d

fs.lstatSync(reactScriptsPath).isSymbolicLink();

create-react-app/packages/react-scripts/config/webpack.config.js

Line 63 in 847cc9d

const useTypeScript = fs.existsSync(paths.appTsConfig);

create-react-app/packages/react-scripts/config/webpack.config.js

Line 712 in 847cc9d

fs.existsSync(swSrc) &&

create-react-app/packages/react-scripts/config/webpackDevServer.config.js

Line 121 in 847cc9d

if (fs.existsSync(paths.proxySetup)) {

create-react-app/packages/react-scripts/fixtures/kitchensink/template/integration/initDOM.js

Line 21 in 847cc9d

return fs.readFileSync(

create-react-app/packages/react-scripts/scripts/build.js

Line 50 in 847cc9d

const useYarn = fs.existsSync(paths.yarnLockFile);

create-react-app/packages/react-scripts/scripts/eject.js

Line 101 in 847cc9d

if (fs.existsSync(path.join(appPath, file))) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 117 in 847cc9d

fs

create-react-app/packages/react-scripts/scripts/eject.js

Line 122 in 847cc9d

.filter(file => fs.lstatSync(file).isFile())

create-react-app/packages/react-scripts/scripts/eject.js

Line 141 in 847cc9d

fs.mkdirSync(path.join(appPath, folder));

create-react-app/packages/react-scripts/scripts/eject.js

Line 145 in 847cc9d

let content = fs.readFileSync(file, 'utf8');

create-react-app/packages/react-scripts/scripts/eject.js

Line 165 in 847cc9d

fs.writeFileSync(file.replace(ownPath, appPath), content);

create-react-app/packages/react-scripts/scripts/eject.js

Line 247 in 847cc9d

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/eject.js

Line 253 in 847cc9d

if (fs.existsSync(paths.appTypeDeclarations)) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 256 in 847cc9d

let content = fs.readFileSync(paths.appTypeDeclarations, 'utf8');

create-react-app/packages/react-scripts/scripts/eject.js

Line 258 in 847cc9d

fs.readFileSync(paths.ownTypeDeclarations, 'utf8').trim() + os.EOL;

create-react-app/packages/react-scripts/scripts/eject.js

Line 270 in 847cc9d

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/eject.js

Line 293 in 847cc9d

if (fs.existsSync(paths.yarnLockFile)) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 307 in 847cc9d

windowsCmdFileContent = fs.readFileSync(windowsCmdFilePath);

create-react-app/packages/react-scripts/scripts/eject.js

Line 316 in 847cc9d

if (windowsCmdFileContent && !fs.existsSync(windowsCmdFilePath)) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 318 in 847cc9d

fs.writeFileSync(windowsCmdFilePath, windowsCmdFileContent);

create-react-app/packages/react-scripts/scripts/init.js

Line 92 in 847cc9d

const useYarn = fs.existsSync(path.join(appPath, 'yarn.lock'));

create-react-app/packages/react-scripts/scripts/init.js

Line 123 in 847cc9d

if (fs.existsSync(templateJsonPath)) {

create-react-app/packages/react-scripts/scripts/init.js

Line 226 in 847cc9d

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/init.js

Line 231 in 847cc9d

const readmeExists = fs.existsSync(path.join(appPath, 'README.md'));

create-react-app/packages/react-scripts/scripts/init.js

Line 233 in 847cc9d

fs.renameSync(

create-react-app/packages/react-scripts/scripts/init.js

Line 241 in 847cc9d

if (fs.existsSync(templateDir)) {

create-react-app/packages/react-scripts/scripts/init.js

Line 253 in 847cc9d

const readme = fs.readFileSync(path.join(appPath, 'README.md'), 'utf8');

create-react-app/packages/react-scripts/scripts/init.js

Line 254 in 847cc9d

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/init.js

Line 264 in 847cc9d

const gitignoreExists = fs.existsSync(path.join(appPath, '.gitignore'));

create-react-app/packages/react-scripts/scripts/init.js

Line 267 in 847cc9d

const data = fs.readFileSync(path.join(appPath, 'gitignore'));

create-react-app/packages/react-scripts/scripts/init.js

Line 268 in 847cc9d

fs.appendFileSync(path.join(appPath, '.gitignore'), data);

create-react-app/packages/react-scripts/scripts/init.js

Line 269 in 847cc9d

fs.unlinkSync(path.join(appPath, 'gitignore'));

create-react-app/packages/react-scripts/scripts/start.js

Line 55 in 847cc9d

const useYarn = fs.existsSync(paths.yarnLockFile);

create-react-app/packages/react-scripts/scripts/start.js

Line 103 in 847cc9d

const useTypeScript = fs.existsSync(paths.appTsConfig);

create-react-app/packages/react-scripts/scripts/utils/createJestConfig.js

Line 21 in 847cc9d

const setupTestsFile = fs.existsSync(paths.testsSetup)

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 62 in 847cc9d

if (!fs.existsSync(maybeNodeModules)) {

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 67 in 847cc9d

if (!fs.existsSync(maybeDep)) {

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 71 in 847cc9d

if (!fs.existsSync(maybeDepPackageJson)) {

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 75 in 847cc9d

fs.readFileSync(maybeDepPackageJson, 'utf8')

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 35 in 847cc9d

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 63 in 847cc9d

if (!fs.existsSync(paths.appTsConfig)) {

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 71 in 847cc9d

const isYarn = fs.existsSync(paths.yarnLockFile);

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 175 in 847cc9d

ts.sys.readFile

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 292 in 847cc9d

if (!fs.existsSync(paths.appTypeDeclarations)) {

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 293 in 847cc9d

fs.writeFileSync(

create-react-app/tasks/compile-lockfile.js

Line 21 in 847cc9d

fse.mkdirSync(temp);

create-react-app/tasks/compile-lockfile.js

Line 24 in 847cc9d

fse.writeFileSync(path.join(temp, 'package.json'), '{}');

create-react-app/tasks/cra.js

Line 64 in 847cc9d

fs.readdirSync(packagesDir).forEach(name => {

create-react-app/tasks/cra.js

Line 67 in 847cc9d

if (fs.existsSync(packageJson)) {

create-react-app/tasks/cra.js

Line 73 in 847cc9d

const json = JSON.parse(fs.readFileSync(packageJson, 'utf8'));

create-react-app/tasks/cra.js

Line 91 in 847cc9d

fs.writeFileSync(packageJson, JSON.stringify(json, null, 2), 'utf8');

create-react-app/tasks/screencast.js

Line 47 in 847cc9d

fs.writeFileSync(cast, JSON.stringify(data, null, ' '));

create-react-app/test/fixtures/__shared__/test-setup.js

Line 7 in 847cc9d

const disablePnp = fs.existsSync(path.resolve(fixturePath, '.disable-pnp'));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 25 in 847cc9d

fs.mkdirSync(path.join(...tsPackagePath.slice(0, 2)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 26 in 847cc9d

fs.mkdirSync(path.join(...tsPackagePath.slice(0, 3)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 27 in 847cc9d

fs.mkdirSync(path.join(...tsPackagePath.slice(0, 4)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 28 in 847cc9d

fs.writeFileSync(path.join(...tsPackagePath));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 30 in 847cc9d

expect(fs.existsSync(tsConfigPath)).toBe(false);

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 34 in 847cc9d

fs.mkdirSync(path.join(...dtsSrcPath.slice(0, 3)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 35 in 847cc9d

fs.writeFileSync(path.join(...dtsSrcPath));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 37 in 847cc9d

expect(fs.existsSync(tsConfigPath)).toBe(false);

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 41 in 847cc9d

fs.writeFileSync(tsSrcPath);

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 43 in 847cc9d

expect(fs.existsSync(tsConfigPath)).toBe(true);

create-react-app/test/fixtures/relative-paths/index.test.js

Line 20 in 847cc9d

.exec(fs.readFileSync(cssFile, 'utf8'))

More info on how to fix Insecure File Management in Javascript.

Insecure Use of Regular Expressions (16)

create-react-app/packages/create-react-app/createReactApp.js

Line 586 in 847cc9d

version.match(/^file:(.*)?$/)[1]

create-react-app/packages/create-react-app/createReactApp.js

Line 631 in 847cc9d

template.match(/^file:(.*)?$/)[1]

create-react-app/packages/create-react-app/createReactApp.js

Line 642 in 847cc9d

const packageMatch = template.match(/^(@[^/]+\/)?([^@]+)?(@.+)?$/);

create-react-app/packages/create-react-app/createReactApp.js

Line 738 in 847cc9d

/^.+\/(.+?)(?:-\d+.+)?\.(tgz|tar\.gz)$/

create-react-app/packages/create-react-app/createReactApp.js

Line 752 in 847cc9d

name: installPackage.match(/([^/]+)\.git(#.*)?$/)[1],

create-react-app/packages/create-react-app/createReactApp.js

Line 761 in 847cc9d

const installPackagePath = installPackage.match(/^file:(.*)?$/)[1];

create-react-app/packages/react-dev-utils/InterpolateHtmlPlugin.js

Line 34 in 847cc9d

new RegExp('%' + escapeStringRegexp(key) + '%', 'g'),

create-react-app/packages/react-dev-utils/WebpackDevServerUtils.js

Line 385 in 847cc9d

pathname.replace(new RegExp('^' + servedPathname), '')

create-react-app/packages/react-dev-utils/formatWebpackMessages.js

Line 27 in 847cc9d

const parsingError = /Line (\d+):(?:(\d+):)?\s*Parsing error: (.+)$/.exec(

create-react-app/packages/react-dev-utils/ignoredFiles.js

Line 14 in 847cc9d

return new RegExp(

create-react-app/packages/react-error-overlay/src/utils/getSourceMap.js

Line 109 in 847cc9d

const base64 = /^data:application\/json;([\w=:"-]+;)*base64,/;

create-react-app/packages/react-error-overlay/src/utils/parseCompileError.js

Line 10 in 847cc9d

const filePathRegex = /^\.(\/[^/\n ]+)+\.[^/\n ]+$/;

create-react-app/packages/react-error-overlay/src/utils/parser.js

Line 11 in 847cc9d

const regexExtractLocation = /$?(.+?)(?::(\d+))?(?::(\d+))?$?$/;

create-react-app/packages/react-error-overlay/src/utils/parser.js

Line 44 in 847cc9d

/ line (\d+)(?: > eval line \d+)* > (eval|Function):\d+:\d+/g,

create-react-app/packages/react-scripts/scripts/eject.js

Line 211 in 847cc9d

const regex = new RegExp(binKey + ' (\\w+)', 'g');

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 35 in 847cc9d

    
           /\bv?(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[\da-z-]+(?:\.[\da-z-]+)*)?(?:\+[\da-z-]+(?:\.[\da-z-]+)*)?\b/gi;

More info on how to fix Insecure Use of Regular Expressions in Javascript.

Insecure Use of Language/Framework API (1)

create-react-app/packages/react-error-overlay/src/components/CodeBlock.js

Line 49 in 847cc9d

More info on how to fix Insecure Use of Language/Framework API in Javascript.

Information Disclosure (1)

create-react-app/test/fixtures/webpack-message-formatting/src/AppBabel.js

Line 8 in 847cc9d

</div>

More info on how to fix Information Disclosure in Javascript.

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

mistaken-pull-closer Bot added the invalid This doesn't seem right label Mar 27, 2021

mistaken-pull-closer Bot closed this Mar 27, 2021

Navigation Menu

[Snyk] Upgrade tempy from 0.2.1 to 1.0.0 - #7

[Snyk] Upgrade tempy from 0.2.1 to 1.0.0#7
snyk-bot wants to merge 1 commit into
masterfrom
snyk-upgrade-58c5b4f03484169ec6ca207c3ae3b55a

snyk-bot commented Mar 27, 2021

Breaking

Fixes

Uh oh!

mistaken-pull-closer Bot commented Mar 27, 2021

Uh oh!

pull-dog Bot commented Mar 27, 2021

Uh oh!

guardrails Bot commented Mar 27, 2021

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

snyk-bot commented Mar 27, 2021

Snyk has created this PR to upgrade tempy from 0.2.1 to 1.0.0.

Breaking

Fixes

Uh oh!

mistaken-pull-closer Bot commented Mar 27, 2021

Uh oh!

pull-dog Bot commented Mar 27, 2021

Uh oh!

guardrails Bot commented Mar 27, 2021

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant