[Snyk] Upgrade fs-extra from 9.0.1 to 9.1.0

[snyk-bot]

Snyk has created this PR to upgrade fs-extra from 9.0.1 to 9.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 2 months ago, on 2021-01-19.

Release notes

Package name: fs-extra

• 9.1.0 - 2021-01-19
  

  9.1.0

• 9.0.1 - 2020-06-04
  

  9.0.1

from fs-extra GitHub release notes

Commit messages

Package name: fs-extra

• 1625838 9.1.0
• 76d38fc tests: fix birthtime not available on tmpfs on Linux (#765 - Work on removing publish feature flags facebook/create-react-app#861)
• d409cf8 Add promise support for fs.rm() ("Displaying Lint Output in the Editor" instructions not working in VS Code facebook/create-react-app#860)
• 6bffcd8 Upgrade universalify (Suggestion: Add Rekit Link facebook/create-react-app#825)
• 96facaa Docs: add fse-cli to the README (After ejecting getting "process.binding is not supported" error facebook/create-react-app#815)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mistaken-pull-closer]

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

[pull-dog]

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

• docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

• @pull-dog up to reprovision or provision the server.
• @pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
517412a0-8f4c-11eb-9754-b9b27d9cad80

[guardrails]

⚠️ We detected security issues in this pull request:
Mode: paranoid | Total findings: 172 | Considered vulnerability: 0

Hard-Coded Secrets (12)

create-react-app/docusaurus/docs/deployment.md

Line 368 in 8b9b973

2. `git remote set-url origin https://<user>:<token>@github.com/<user>/<repo>` .

create-react-app/docusaurus/website/docusaurus.config.js

Line 37 in 8b9b973

apiKey: '3be60f4f8ffc24c75da84857d6323791',

https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle.mjs#L62
https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle.mjs#L8103
https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle.mjs#L15667
https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle.mjs#L39583
https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle.mjs.map#L1
https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle_u.mjs#L62
https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle_u.mjs#L8239
https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle_u.mjs#L15827
https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle_u.mjs#L39709
https://github.com/turkdevops/create-react-app/blob/8b9b973a5fc9e87bd3c7928cacd7df45769a4324/packages/react-error-overlay/fixtures/bundle_u.mjs.map#L1

More info on how to fix Hard-Coded Secrets in General.

---

Insecure Use of Dangerous Function (31)

create-react-app/packages/create-react-app/createReactApp.js

Line 37 in 8b9b973

const execSync = require('child_process').execSync;

create-react-app/packages/create-react-app/createReactApp.js

Line 724 in 8b9b973

const { name, version } = require(path.join(

create-react-app/packages/create-react-app/createReactApp.js

Line 762 in 8b9b973

const { name, version } = require(path.join(

create-react-app/packages/create-react-app/createReactApp.js

Line 830 in 8b9b973

const packageJson = require(packageJsonPath);

create-react-app/packages/create-react-app/createReactApp.js

Line 910 in 8b9b973

const packageJson = require(packagePath);

create-react-app/packages/react-dev-utils/getCacheIdentifier.js

Line 15 in 8b9b973

cacheIdentifier += require(`${packageName}/package.json`).version;

create-react-app/packages/react-dev-utils/getProcessForPort.js

Line 11 in 8b9b973

var execSync = require('child_process').execSync;

create-react-app/packages/react-dev-utils/getProcessForPort.js

Line 37 in 8b9b973

return require(packagePath).name;

create-react-app/packages/react-dev-utils/launchEditor.js

Line 11 in 8b9b973

const child_process = require('child_process');

create-react-app/packages/react-dev-utils/openBrowser.js

Line 11 in 8b9b973

var execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/config/modules.js

Line 119 in 8b9b973

const ts = require(resolve.sync('typescript', {

create-react-app/packages/react-scripts/config/modules.js

Line 126 in 8b9b973

config = require(paths.appJsConfig);

create-react-app/packages/react-scripts/config/paths.js

Line 28 in 8b9b973

require(resolveApp('package.json')).homepage,

create-react-app/packages/react-scripts/config/webpack.config.js

Line 42 in 8b9b973

const appPackageJson = require(paths.appPackageJson);

create-react-app/packages/react-scripts/config/webpackDevServer.config.js

Line 123 in 8b9b973

require(paths.proxySetup)(app);

create-react-app/packages/react-scripts/scripts/build.js

Line 116 in 8b9b973

const appPackage = require(paths.appPackageJson);

create-react-app/packages/react-scripts/scripts/eject.js

Line 20 in 8b9b973

const execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/scripts/eject.js

Line 169 in 8b9b973

const ownPackage = require(path.join(ownPath, 'package.json'));

create-react-app/packages/react-scripts/scripts/eject.js

Line 170 in 8b9b973

const appPackage = require(path.join(appPath, 'package.json'));

create-react-app/packages/react-scripts/scripts/init.js

Line 20 in 8b9b973

const execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/scripts/init.js

Line 91 in 8b9b973

const appPackage = require(path.join(appPath, 'package.json'));

create-react-app/packages/react-scripts/scripts/init.js

Line 124 in 8b9b973

templateJson = require(templateJsonPath);

create-react-app/packages/react-scripts/scripts/start.js

Line 52 in 8b9b973

const react = require(require.resolve('react', { paths: [paths.appPath] }));

create-react-app/packages/react-scripts/scripts/start.js

Line 101 in 8b9b973

const appName = require(paths.appPackageJson).name;

create-react-app/packages/react-scripts/scripts/start.js

Line 129 in 8b9b973

const proxySetting = require(paths.appPackageJson).proxy;

create-react-app/packages/react-scripts/scripts/test.js

Line 36 in 8b9b973

const execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/scripts/utils/createJestConfig.js

Line 74 in 8b9b973

const overrides = Object.assign({}, require(paths.appPackageJson).jest);

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 80 in 8b9b973

ts = require(resolve.sync('typescript', {

create-react-app/tasks/compile-lockfile.js

Line 11 in 8b9b973

const cprocess = require('child_process');

create-react-app/tasks/cra.js

Line 13 in 8b9b973

const cp = require('child_process');

create-react-app/tasks/screencast.js

Line 41 in 8b9b973

const data = require(cast);

More info on how to fix Insecure Use of Dangerous Function in Javascript.

---

Insecure File Management (111)

create-react-app/packages/create-react-app/createReactApp.js

Line 269 in 8b9b973

fs.writeFileSync(

create-react-app/packages/create-react-app/createReactApp.js

Line 506 in 8b9b973

const nodeArgs = fs.existsSync(pnpPath) ? ['--require', pnpPath] : [];

create-react-app/packages/create-react-app/createReactApp.js

Line 548 in 8b9b973

const currentFiles = fs.readdirSync(path.join(root));

create-react-app/packages/create-react-app/createReactApp.js

Line 558 in 8b9b973

const remainingFiles = fs.readdirSync(path.join(root));

create-react-app/packages/create-react-app/createReactApp.js

Line 719 in 8b9b973

stream = fs.createReadStream(installPackage);

create-react-app/packages/create-react-app/createReactApp.js

Line 826 in 8b9b973

if (!fs.existsSync(packageJsonPath)) {

create-react-app/packages/create-react-app/createReactApp.js

Line 926 in 8b9b973

fs.writeFileSync(packagePath, JSON.stringify(packageJson, null, 2) + os.EOL);

create-react-app/packages/create-react-app/createReactApp.js

Line 964 in 8b9b973

const conflicts = fs

create-react-app/packages/create-react-app/createReactApp.js

Line 979 in 8b9b973

const stats = fs.lstatSync(path.join(root, file));

create-react-app/packages/create-react-app/createReactApp.js

Line 998 in 8b9b973

fs.readdirSync(root).forEach(file => {

create-react-app/packages/react-dev-utils/FileSizeReporter.js

Line 42 in 8b9b973

var fileContents = fs.readFileSync(path.join(root, asset.name));

create-react-app/packages/react-dev-utils/FileSizeReporter.js

Line 139 in 8b9b973

var contents = fs.readFileSync(fileName);

create-react-app/packages/react-dev-utils/WebpackDevServerUtils.js

Line 387 in 8b9b973

const isPublicFileRequest = fs.existsSync(maybePublicPath);

create-react-app/packages/react-dev-utils/browsersHelper.js

Line 75 in 8b9b973

const pkg = JSON.parse(fs.readFileSync(filePath));

create-react-app/packages/react-dev-utils/browsersHelper.js

Line 77 in 8b9b973

fs.writeFileSync(filePath, JSON.stringify(pkg, null, 2) + os.EOL);

create-react-app/packages/react-dev-utils/launchEditor.js

Line 288 in 8b9b973

if (!fs.existsSync(fileName)) {

create-react-app/packages/react-dev-utils/printHostingInstructions.js

Line 118 in 8b9b973

if (!fs.existsSync(`${globalModules}/serve`)) {

create-react-app/packages/react-dev-utils/typescriptFormatter.js

Line 27 in 8b9b973

const source = file && fs.existsSync(file) && fs.readFileSync(file, 'utf-8');

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 13 in 8b9b973

const file = fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 17 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 33 in 8b9b973

const file = fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 36 in 8b9b973

const fileO = fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 52 in 8b9b973

const file = fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 19 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 24 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 31 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 44 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 49 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 56 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 23 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 28 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 35 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 42 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 47 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 61 in 8b9b973

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 66 in 8b9b973

fs

create-react-app/packages/react-scripts/config/env.js

Line 42 in 8b9b973

if (fs.existsSync(dotenvFile)) {

create-react-app/packages/react-scripts/config/env.js

Line 60 in 8b9b973

const appDirectory = fs.realpathSync(process.cwd());

create-react-app/packages/react-scripts/config/getHttpsConfig.js

Line 44 in 8b9b973

if (!fs.existsSync(file)) {

create-react-app/packages/react-scripts/config/getHttpsConfig.js

Line 51 in 8b9b973

return fs.readFileSync(file);

create-react-app/packages/react-scripts/config/modules.js

Line 104 in 8b9b973

const hasTsConfig = fs.existsSync(paths.appTsConfig);

create-react-app/packages/react-scripts/config/modules.js

Line 105 in 8b9b973

const hasJsConfig = fs.existsSync(paths.appJsConfig);

create-react-app/packages/react-scripts/config/modules.js

Line 122 in 8b9b973

config = ts.readConfigFile(paths.appTsConfig, ts.sys.readFile).config;

create-react-app/packages/react-scripts/config/paths.js

Line 17 in 8b9b973

const appDirectory = fs.realpathSync(process.cwd());

create-react-app/packages/react-scripts/config/paths.js

Line 49 in 8b9b973

fs.existsSync(resolveFn(`${filePath}.${extension}`))

create-react-app/packages/react-scripts/config/paths.js

Line 110 in 8b9b973

fs.existsSync(reactScriptsPath) &&

create-react-app/packages/react-scripts/config/paths.js

Line 111 in 8b9b973

fs.lstatSync(reactScriptsPath).isSymbolicLink();

create-react-app/packages/react-scripts/config/webpack.config.js

Line 63 in 8b9b973

const useTypeScript = fs.existsSync(paths.appTsConfig);

create-react-app/packages/react-scripts/config/webpack.config.js

Line 712 in 8b9b973

fs.existsSync(swSrc) &&

create-react-app/packages/react-scripts/config/webpackDevServer.config.js

Line 121 in 8b9b973

if (fs.existsSync(paths.proxySetup)) {

create-react-app/packages/react-scripts/fixtures/kitchensink/template/integration/initDOM.js

Line 21 in 8b9b973

return fs.readFileSync(

create-react-app/packages/react-scripts/scripts/build.js

Line 50 in 8b9b973

const useYarn = fs.existsSync(paths.yarnLockFile);

create-react-app/packages/react-scripts/scripts/eject.js

Line 101 in 8b9b973

if (fs.existsSync(path.join(appPath, file))) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 117 in 8b9b973

fs

create-react-app/packages/react-scripts/scripts/eject.js

Line 122 in 8b9b973

.filter(file => fs.lstatSync(file).isFile())

create-react-app/packages/react-scripts/scripts/eject.js

Line 141 in 8b9b973

fs.mkdirSync(path.join(appPath, folder));

create-react-app/packages/react-scripts/scripts/eject.js

Line 145 in 8b9b973

let content = fs.readFileSync(file, 'utf8');

create-react-app/packages/react-scripts/scripts/eject.js

Line 165 in 8b9b973

fs.writeFileSync(file.replace(ownPath, appPath), content);

create-react-app/packages/react-scripts/scripts/eject.js

Line 247 in 8b9b973

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/eject.js

Line 253 in 8b9b973

if (fs.existsSync(paths.appTypeDeclarations)) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 256 in 8b9b973

let content = fs.readFileSync(paths.appTypeDeclarations, 'utf8');

create-react-app/packages/react-scripts/scripts/eject.js

Line 258 in 8b9b973

fs.readFileSync(paths.ownTypeDeclarations, 'utf8').trim() + os.EOL;

create-react-app/packages/react-scripts/scripts/eject.js

Line 270 in 8b9b973

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/eject.js

Line 293 in 8b9b973

if (fs.existsSync(paths.yarnLockFile)) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 307 in 8b9b973

windowsCmdFileContent = fs.readFileSync(windowsCmdFilePath);

create-react-app/packages/react-scripts/scripts/eject.js

Line 316 in 8b9b973

if (windowsCmdFileContent && !fs.existsSync(windowsCmdFilePath)) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 318 in 8b9b973

fs.writeFileSync(windowsCmdFilePath, windowsCmdFileContent);

create-react-app/packages/react-scripts/scripts/init.js

Line 92 in 8b9b973

const useYarn = fs.existsSync(path.join(appPath, 'yarn.lock'));

create-react-app/packages/react-scripts/scripts/init.js

Line 123 in 8b9b973

if (fs.existsSync(templateJsonPath)) {

create-react-app/packages/react-scripts/scripts/init.js

Line 226 in 8b9b973

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/init.js

Line 231 in 8b9b973

const readmeExists = fs.existsSync(path.join(appPath, 'README.md'));

create-react-app/packages/react-scripts/scripts/init.js

Line 233 in 8b9b973

fs.renameSync(

create-react-app/packages/react-scripts/scripts/init.js

Line 241 in 8b9b973

if (fs.existsSync(templateDir)) {

create-react-app/packages/react-scripts/scripts/init.js

Line 253 in 8b9b973

const readme = fs.readFileSync(path.join(appPath, 'README.md'), 'utf8');

create-react-app/packages/react-scripts/scripts/init.js

Line 254 in 8b9b973

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/init.js

Line 264 in 8b9b973

const gitignoreExists = fs.existsSync(path.join(appPath, '.gitignore'));

create-react-app/packages/react-scripts/scripts/init.js

Line 267 in 8b9b973

const data = fs.readFileSync(path.join(appPath, 'gitignore'));

create-react-app/packages/react-scripts/scripts/init.js

Line 268 in 8b9b973

fs.appendFileSync(path.join(appPath, '.gitignore'), data);

create-react-app/packages/react-scripts/scripts/init.js

Line 269 in 8b9b973

fs.unlinkSync(path.join(appPath, 'gitignore'));

create-react-app/packages/react-scripts/scripts/start.js

Line 55 in 8b9b973

const useYarn = fs.existsSync(paths.yarnLockFile);

create-react-app/packages/react-scripts/scripts/start.js

Line 103 in 8b9b973

const useTypeScript = fs.existsSync(paths.appTsConfig);

create-react-app/packages/react-scripts/scripts/utils/createJestConfig.js

Line 21 in 8b9b973

const setupTestsFile = fs.existsSync(paths.testsSetup)

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 62 in 8b9b973

if (!fs.existsSync(maybeNodeModules)) {

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 67 in 8b9b973

if (!fs.existsSync(maybeDep)) {

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 71 in 8b9b973

if (!fs.existsSync(maybeDepPackageJson)) {

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 75 in 8b9b973

fs.readFileSync(maybeDepPackageJson, 'utf8')

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 35 in 8b9b973

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 63 in 8b9b973

if (!fs.existsSync(paths.appTsConfig)) {

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 71 in 8b9b973

const isYarn = fs.existsSync(paths.yarnLockFile);

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 175 in 8b9b973

ts.sys.readFile

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 292 in 8b9b973

if (!fs.existsSync(paths.appTypeDeclarations)) {

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 293 in 8b9b973

fs.writeFileSync(

create-react-app/tasks/compile-lockfile.js

Line 21 in 8b9b973

fse.mkdirSync(temp);

create-react-app/tasks/compile-lockfile.js

Line 24 in 8b9b973

fse.writeFileSync(path.join(temp, 'package.json'), '{}');

create-react-app/tasks/cra.js

Line 64 in 8b9b973

fs.readdirSync(packagesDir).forEach(name => {

create-react-app/tasks/cra.js

Line 67 in 8b9b973

if (fs.existsSync(packageJson)) {

create-react-app/tasks/cra.js

Line 73 in 8b9b973

const json = JSON.parse(fs.readFileSync(packageJson, 'utf8'));

create-react-app/tasks/cra.js

Line 91 in 8b9b973

fs.writeFileSync(packageJson, JSON.stringify(json, null, 2), 'utf8');

create-react-app/tasks/screencast.js

Line 47 in 8b9b973

fs.writeFileSync(cast, JSON.stringify(data, null, ' '));

create-react-app/test/fixtures/__shared__/test-setup.js

Line 7 in 8b9b973

const disablePnp = fs.existsSync(path.resolve(fixturePath, '.disable-pnp'));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 25 in 8b9b973

fs.mkdirSync(path.join(...tsPackagePath.slice(0, 2)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 26 in 8b9b973

fs.mkdirSync(path.join(...tsPackagePath.slice(0, 3)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 27 in 8b9b973

fs.mkdirSync(path.join(...tsPackagePath.slice(0, 4)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 28 in 8b9b973

fs.writeFileSync(path.join(...tsPackagePath));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 30 in 8b9b973

expect(fs.existsSync(tsConfigPath)).toBe(false);

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 34 in 8b9b973

fs.mkdirSync(path.join(...dtsSrcPath.slice(0, 3)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 35 in 8b9b973

fs.writeFileSync(path.join(...dtsSrcPath));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 37 in 8b9b973

expect(fs.existsSync(tsConfigPath)).toBe(false);

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 41 in 8b9b973

fs.writeFileSync(tsSrcPath);

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 43 in 8b9b973

expect(fs.existsSync(tsConfigPath)).toBe(true);

create-react-app/test/fixtures/relative-paths/index.test.js

Line 20 in 8b9b973

.exec(fs.readFileSync(cssFile, 'utf8'))

More info on how to fix Insecure File Management in Javascript.

---

Insecure Use of Regular Expressions (16)

create-react-app/packages/create-react-app/createReactApp.js

Line 586 in 8b9b973

version.match(/^file:(.*)?$/)[1]

create-react-app/packages/create-react-app/createReactApp.js

Line 631 in 8b9b973

template.match(/^file:(.*)?$/)[1]

create-react-app/packages/create-react-app/createReactApp.js

Line 642 in 8b9b973

const packageMatch = template.match(/^(@[^/]+\/)?([^@]+)?(@.+)?$/);

create-react-app/packages/create-react-app/createReactApp.js

Line 738 in 8b9b973

/^.+\/(.+?)(?:-\d+.+)?\.(tgz|tar\.gz)$/

create-react-app/packages/create-react-app/createReactApp.js

Line 752 in 8b9b973

name: installPackage.match(/([^/]+)\.git(#.*)?$/)[1],

create-react-app/packages/create-react-app/createReactApp.js

Line 761 in 8b9b973

const installPackagePath = installPackage.match(/^file:(.*)?$/)[1];

create-react-app/packages/react-dev-utils/InterpolateHtmlPlugin.js

Line 34 in 8b9b973

new RegExp('%' + escapeStringRegexp(key) + '%', 'g'),

create-react-app/packages/react-dev-utils/WebpackDevServerUtils.js

Line 385 in 8b9b973

pathname.replace(new RegExp('^' + servedPathname), '')

create-react-app/packages/react-dev-utils/formatWebpackMessages.js

Line 27 in 8b9b973

const parsingError = /Line (\d+):(?:(\d+):)?\s*Parsing error: (.+)$/.exec(

create-react-app/packages/react-dev-utils/ignoredFiles.js

Line 14 in 8b9b973

return new RegExp(

create-react-app/packages/react-error-overlay/src/utils/getSourceMap.js

Line 109 in 8b9b973

const base64 = /^data:application\/json;([\w=:"-]+;)*base64,/;

create-react-app/packages/react-error-overlay/src/utils/parseCompileError.js

Line 10 in 8b9b973

const filePathRegex = /^\.(\/[^/\n ]+)+\.[^/\n ]+$/;

create-react-app/packages/react-error-overlay/src/utils/parser.js

Line 11 in 8b9b973

const regexExtractLocation = /\(?(.+?)(?::(\d+))?(?::(\d+))?\)?$/;

create-react-app/packages/react-error-overlay/src/utils/parser.js

Line 44 in 8b9b973

/ line (\d+)(?: > eval line \d+)* > (eval|Function):\d+:\d+/g,

create-react-app/packages/react-scripts/scripts/eject.js

Line 211 in 8b9b973

const regex = new RegExp(binKey + ' (\\w+)', 'g');

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 35 in 8b9b973

/\bv?(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[\da-z-]+(?:\.[\da-z-]+)*)?(?:\+[\da-z-]+(?:\.[\da-z-]+)*)?\b/gi;

More info on how to fix Insecure Use of Regular Expressions in Javascript.

---

Insecure Use of Language/Framework API (1)

create-react-app/packages/react-error-overlay/src/components/CodeBlock.js

Line 49 in 8b9b973

<code style={codeStyle} dangerouslySetInnerHTML={codeBlock} />

More info on how to fix Insecure Use of Language/Framework API in Javascript.

---

Information Disclosure (1)

create-react-app/test/fixtures/webpack-message-formatting/src/AppBabel.js

Line 8 in 8b9b973

</div>

More info on how to fix Information Disclosure in Javascript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.