Skip to content

[Snyk] Upgrade semver from 7.3.2 to 7.3.4 #9

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade semver from 7.3.2 to 7.3.4 #9

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade semver from 7.3.2 to 7.3.4.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 2 versions ahead of your current version.
  • The recommended version was released 4 months ago, on 2020-12-01.
Release notes
Package name: semver from semver GitHub release notes
Commit messages
Package name: semver

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@mistaken-pull-closer
Copy link

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

@pull-dog
Copy link

pull-dog bot commented Mar 27, 2021 •
edited
Loading

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

  • docker-compose.yml
What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands
  • @pull-dog up to reprovision or provision the server.
  • @pull-dog down to delete the provisioned server.
Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
50739290-8f4c-11eb-9a26-551becbf7ebd

@mistaken-pull-closer mistaken-pull-closer bot added the invalid This doesn't seem right label Mar 27, 2021
@guardrails
Copy link

guardrails bot commented Mar 27, 2021

⚠️ We detected security issues in this pull request:
Mode: paranoid | Total findings: 172 | Considered vulnerability: 0

Hard-Coded Secrets (12)

create-react-app/docusaurus/docs/deployment.md

Line 368 in e9c31a3

2. `git remote set-url origin https://<user>:<token>@github.com/<user>/<repo>` .

create-react-app/docusaurus/website/docusaurus.config.js

Line 37 in e9c31a3

apiKey: '3be60f4f8ffc24c75da84857d6323791',

https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle.mjs#L62
https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle.mjs#L8103
https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle.mjs#L15667
https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle.mjs#L39583
https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle.mjs.map#L1
https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle_u.mjs#L62
https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle_u.mjs#L8239
https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle_u.mjs#L15827
https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle_u.mjs#L39709
https://github.com/turkdevops/create-react-app/blob/e9c31a31c3f149a3c38b92e857ee47c9b9cd78b0/packages/react-error-overlay/fixtures/bundle_u.mjs.map#L1

More info on how to fix Hard-Coded Secrets in General.

Insecure Use of Dangerous Function (31)

create-react-app/packages/create-react-app/createReactApp.js

Line 37 in e9c31a3

const execSync = require('child_process').execSync;

create-react-app/packages/create-react-app/createReactApp.js

Line 724 in e9c31a3

const { name, version } = require(path.join(

create-react-app/packages/create-react-app/createReactApp.js

Line 762 in e9c31a3

const { name, version } = require(path.join(

create-react-app/packages/create-react-app/createReactApp.js

Line 830 in e9c31a3

const packageJson = require(packageJsonPath);

create-react-app/packages/create-react-app/createReactApp.js

Line 910 in e9c31a3

const packageJson = require(packagePath);

create-react-app/packages/react-dev-utils/getCacheIdentifier.js

Line 15 in e9c31a3

cacheIdentifier += require(`${packageName}/package.json`).version;

create-react-app/packages/react-dev-utils/getProcessForPort.js

Line 11 in e9c31a3

var execSync = require('child_process').execSync;

create-react-app/packages/react-dev-utils/getProcessForPort.js

Line 37 in e9c31a3

return require(packagePath).name;

create-react-app/packages/react-dev-utils/launchEditor.js

Line 11 in e9c31a3

const child_process = require('child_process');

create-react-app/packages/react-dev-utils/openBrowser.js

Line 11 in e9c31a3

var execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/config/modules.js

Line 119 in e9c31a3

const ts = require(resolve.sync('typescript', {

create-react-app/packages/react-scripts/config/modules.js

Line 126 in e9c31a3

config = require(paths.appJsConfig);

create-react-app/packages/react-scripts/config/paths.js

Line 28 in e9c31a3

require(resolveApp('package.json')).homepage,

create-react-app/packages/react-scripts/config/webpack.config.js

Line 42 in e9c31a3

const appPackageJson = require(paths.appPackageJson);

create-react-app/packages/react-scripts/config/webpackDevServer.config.js

Line 123 in e9c31a3

require(paths.proxySetup)(app);

create-react-app/packages/react-scripts/scripts/build.js

Line 116 in e9c31a3

const appPackage = require(paths.appPackageJson);

create-react-app/packages/react-scripts/scripts/eject.js

Line 20 in e9c31a3

const execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/scripts/eject.js

Line 169 in e9c31a3

const ownPackage = require(path.join(ownPath, 'package.json'));

create-react-app/packages/react-scripts/scripts/eject.js

Line 170 in e9c31a3

const appPackage = require(path.join(appPath, 'package.json'));

create-react-app/packages/react-scripts/scripts/init.js

Line 20 in e9c31a3

const execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/scripts/init.js

Line 91 in e9c31a3

const appPackage = require(path.join(appPath, 'package.json'));

create-react-app/packages/react-scripts/scripts/init.js

Line 124 in e9c31a3

templateJson = require(templateJsonPath);

create-react-app/packages/react-scripts/scripts/start.js

Line 52 in e9c31a3

const react = require(require.resolve('react', { paths: [paths.appPath] }));

create-react-app/packages/react-scripts/scripts/start.js

Line 101 in e9c31a3

const appName = require(paths.appPackageJson).name;

create-react-app/packages/react-scripts/scripts/start.js

Line 129 in e9c31a3

const proxySetting = require(paths.appPackageJson).proxy;

create-react-app/packages/react-scripts/scripts/test.js

Line 36 in e9c31a3

const execSync = require('child_process').execSync;

create-react-app/packages/react-scripts/scripts/utils/createJestConfig.js

Line 74 in e9c31a3

const overrides = Object.assign({}, require(paths.appPackageJson).jest);

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 80 in e9c31a3

ts = require(resolve.sync('typescript', {

create-react-app/tasks/compile-lockfile.js

Line 11 in e9c31a3

const cprocess = require('child_process');

create-react-app/tasks/cra.js

Line 13 in e9c31a3

const cp = require('child_process');

create-react-app/tasks/screencast.js

Line 41 in e9c31a3

const data = require(cast);

More info on how to fix Insecure Use of Dangerous Function in Javascript.

Insecure File Management (111)

create-react-app/packages/create-react-app/createReactApp.js

Line 269 in e9c31a3

fs.writeFileSync(

create-react-app/packages/create-react-app/createReactApp.js

Line 506 in e9c31a3

const nodeArgs = fs.existsSync(pnpPath) ? ['--require', pnpPath] : [];

create-react-app/packages/create-react-app/createReactApp.js

Line 548 in e9c31a3

const currentFiles = fs.readdirSync(path.join(root));

create-react-app/packages/create-react-app/createReactApp.js

Line 558 in e9c31a3

const remainingFiles = fs.readdirSync(path.join(root));

create-react-app/packages/create-react-app/createReactApp.js

Line 719 in e9c31a3

stream = fs.createReadStream(installPackage);

create-react-app/packages/create-react-app/createReactApp.js

Line 826 in e9c31a3

if (!fs.existsSync(packageJsonPath)) {

create-react-app/packages/create-react-app/createReactApp.js

Line 926 in e9c31a3

fs.writeFileSync(packagePath, JSON.stringify(packageJson, null, 2) + os.EOL);

create-react-app/packages/create-react-app/createReactApp.js

Line 964 in e9c31a3

const conflicts = fs

create-react-app/packages/create-react-app/createReactApp.js

Line 979 in e9c31a3

const stats = fs.lstatSync(path.join(root, file));

create-react-app/packages/create-react-app/createReactApp.js

Line 998 in e9c31a3

fs.readdirSync(root).forEach(file => {

create-react-app/packages/react-dev-utils/FileSizeReporter.js

Line 42 in e9c31a3

var fileContents = fs.readFileSync(path.join(root, asset.name));

create-react-app/packages/react-dev-utils/FileSizeReporter.js

Line 139 in e9c31a3

var contents = fs.readFileSync(fileName);

create-react-app/packages/react-dev-utils/WebpackDevServerUtils.js

Line 387 in e9c31a3

const isPublicFileRequest = fs.existsSync(maybePublicPath);

create-react-app/packages/react-dev-utils/browsersHelper.js

Line 75 in e9c31a3

const pkg = JSON.parse(fs.readFileSync(filePath));

create-react-app/packages/react-dev-utils/browsersHelper.js

Line 77 in e9c31a3

fs.writeFileSync(filePath, JSON.stringify(pkg, null, 2) + os.EOL);

create-react-app/packages/react-dev-utils/launchEditor.js

Line 288 in e9c31a3

if (!fs.existsSync(fileName)) {

create-react-app/packages/react-dev-utils/printHostingInstructions.js

Line 118 in e9c31a3

if (!fs.existsSync(`${globalModules}/serve`)) {

create-react-app/packages/react-dev-utils/typescriptFormatter.js

Line 27 in e9c31a3

const source = file && fs.existsSync(file) && fs.readFileSync(file, 'utf-8');

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 13 in e9c31a3

const file = fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 17 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 33 in e9c31a3

const file = fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 36 in e9c31a3

const fileO = fs

create-react-app/packages/react-error-overlay/src/__tests__/get-source-map.js

Line 52 in e9c31a3

const file = fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 19 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 24 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 31 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 44 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 49 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/mapper.js

Line 56 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 23 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 28 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 35 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 42 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 47 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 61 in e9c31a3

fs

create-react-app/packages/react-error-overlay/src/__tests__/unmapper.js

Line 66 in e9c31a3

fs

create-react-app/packages/react-scripts/config/env.js

Line 42 in e9c31a3

if (fs.existsSync(dotenvFile)) {

create-react-app/packages/react-scripts/config/env.js

Line 60 in e9c31a3

const appDirectory = fs.realpathSync(process.cwd());

create-react-app/packages/react-scripts/config/getHttpsConfig.js

Line 44 in e9c31a3

if (!fs.existsSync(file)) {

create-react-app/packages/react-scripts/config/getHttpsConfig.js

Line 51 in e9c31a3

return fs.readFileSync(file);

create-react-app/packages/react-scripts/config/modules.js

Line 104 in e9c31a3

const hasTsConfig = fs.existsSync(paths.appTsConfig);

create-react-app/packages/react-scripts/config/modules.js

Line 105 in e9c31a3

const hasJsConfig = fs.existsSync(paths.appJsConfig);

create-react-app/packages/react-scripts/config/modules.js

Line 122 in e9c31a3

config = ts.readConfigFile(paths.appTsConfig, ts.sys.readFile).config;

create-react-app/packages/react-scripts/config/paths.js

Line 17 in e9c31a3

const appDirectory = fs.realpathSync(process.cwd());

create-react-app/packages/react-scripts/config/paths.js

Line 49 in e9c31a3

fs.existsSync(resolveFn(`${filePath}.${extension}`))

create-react-app/packages/react-scripts/config/paths.js

Line 110 in e9c31a3

fs.existsSync(reactScriptsPath) &&

create-react-app/packages/react-scripts/config/paths.js

Line 111 in e9c31a3

fs.lstatSync(reactScriptsPath).isSymbolicLink();

create-react-app/packages/react-scripts/config/webpack.config.js

Line 63 in e9c31a3

const useTypeScript = fs.existsSync(paths.appTsConfig);

create-react-app/packages/react-scripts/config/webpack.config.js

Line 712 in e9c31a3

fs.existsSync(swSrc) &&

create-react-app/packages/react-scripts/config/webpackDevServer.config.js

Line 121 in e9c31a3

if (fs.existsSync(paths.proxySetup)) {

create-react-app/packages/react-scripts/fixtures/kitchensink/template/integration/initDOM.js

Line 21 in e9c31a3

return fs.readFileSync(

create-react-app/packages/react-scripts/scripts/build.js

Line 50 in e9c31a3

const useYarn = fs.existsSync(paths.yarnLockFile);

create-react-app/packages/react-scripts/scripts/eject.js

Line 101 in e9c31a3

if (fs.existsSync(path.join(appPath, file))) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 117 in e9c31a3

fs

create-react-app/packages/react-scripts/scripts/eject.js

Line 122 in e9c31a3

.filter(file => fs.lstatSync(file).isFile())

create-react-app/packages/react-scripts/scripts/eject.js

Line 141 in e9c31a3

fs.mkdirSync(path.join(appPath, folder));

create-react-app/packages/react-scripts/scripts/eject.js

Line 145 in e9c31a3

let content = fs.readFileSync(file, 'utf8');

create-react-app/packages/react-scripts/scripts/eject.js

Line 165 in e9c31a3

fs.writeFileSync(file.replace(ownPath, appPath), content);

create-react-app/packages/react-scripts/scripts/eject.js

Line 247 in e9c31a3

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/eject.js

Line 253 in e9c31a3

if (fs.existsSync(paths.appTypeDeclarations)) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 256 in e9c31a3

let content = fs.readFileSync(paths.appTypeDeclarations, 'utf8');

create-react-app/packages/react-scripts/scripts/eject.js

Line 258 in e9c31a3

fs.readFileSync(paths.ownTypeDeclarations, 'utf8').trim() + os.EOL;

create-react-app/packages/react-scripts/scripts/eject.js

Line 270 in e9c31a3

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/eject.js

Line 293 in e9c31a3

if (fs.existsSync(paths.yarnLockFile)) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 307 in e9c31a3

windowsCmdFileContent = fs.readFileSync(windowsCmdFilePath);

create-react-app/packages/react-scripts/scripts/eject.js

Line 316 in e9c31a3

if (windowsCmdFileContent && !fs.existsSync(windowsCmdFilePath)) {

create-react-app/packages/react-scripts/scripts/eject.js

Line 318 in e9c31a3

fs.writeFileSync(windowsCmdFilePath, windowsCmdFileContent);

create-react-app/packages/react-scripts/scripts/init.js

Line 92 in e9c31a3

const useYarn = fs.existsSync(path.join(appPath, 'yarn.lock'));

create-react-app/packages/react-scripts/scripts/init.js

Line 123 in e9c31a3

if (fs.existsSync(templateJsonPath)) {

create-react-app/packages/react-scripts/scripts/init.js

Line 226 in e9c31a3

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/init.js

Line 231 in e9c31a3

const readmeExists = fs.existsSync(path.join(appPath, 'README.md'));

create-react-app/packages/react-scripts/scripts/init.js

Line 233 in e9c31a3

fs.renameSync(

create-react-app/packages/react-scripts/scripts/init.js

Line 241 in e9c31a3

if (fs.existsSync(templateDir)) {

create-react-app/packages/react-scripts/scripts/init.js

Line 253 in e9c31a3

const readme = fs.readFileSync(path.join(appPath, 'README.md'), 'utf8');

create-react-app/packages/react-scripts/scripts/init.js

Line 254 in e9c31a3

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/init.js

Line 264 in e9c31a3

const gitignoreExists = fs.existsSync(path.join(appPath, '.gitignore'));

create-react-app/packages/react-scripts/scripts/init.js

Line 267 in e9c31a3

const data = fs.readFileSync(path.join(appPath, 'gitignore'));

create-react-app/packages/react-scripts/scripts/init.js

Line 268 in e9c31a3

fs.appendFileSync(path.join(appPath, '.gitignore'), data);

create-react-app/packages/react-scripts/scripts/init.js

Line 269 in e9c31a3

fs.unlinkSync(path.join(appPath, 'gitignore'));

create-react-app/packages/react-scripts/scripts/start.js

Line 55 in e9c31a3

const useYarn = fs.existsSync(paths.yarnLockFile);

create-react-app/packages/react-scripts/scripts/start.js

Line 103 in e9c31a3

const useTypeScript = fs.existsSync(paths.appTsConfig);

create-react-app/packages/react-scripts/scripts/utils/createJestConfig.js

Line 21 in e9c31a3

const setupTestsFile = fs.existsSync(paths.testsSetup)

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 62 in e9c31a3

if (!fs.existsSync(maybeNodeModules)) {

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 67 in e9c31a3

if (!fs.existsSync(maybeDep)) {

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 71 in e9c31a3

if (!fs.existsSync(maybeDepPackageJson)) {

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 75 in e9c31a3

fs.readFileSync(maybeDepPackageJson, 'utf8')

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 35 in e9c31a3

fs.writeFileSync(

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 63 in e9c31a3

if (!fs.existsSync(paths.appTsConfig)) {

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 71 in e9c31a3

const isYarn = fs.existsSync(paths.yarnLockFile);

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 175 in e9c31a3

ts.sys.readFile

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 292 in e9c31a3

if (!fs.existsSync(paths.appTypeDeclarations)) {

create-react-app/packages/react-scripts/scripts/utils/verifyTypeScriptSetup.js

Line 293 in e9c31a3

fs.writeFileSync(

create-react-app/tasks/compile-lockfile.js

Line 21 in e9c31a3

fse.mkdirSync(temp);

create-react-app/tasks/compile-lockfile.js

Line 24 in e9c31a3

fse.writeFileSync(path.join(temp, 'package.json'), '{}');

create-react-app/tasks/cra.js

Line 64 in e9c31a3

fs.readdirSync(packagesDir).forEach(name => {

create-react-app/tasks/cra.js

Line 67 in e9c31a3

if (fs.existsSync(packageJson)) {

create-react-app/tasks/cra.js

Line 73 in e9c31a3

const json = JSON.parse(fs.readFileSync(packageJson, 'utf8'));

create-react-app/tasks/cra.js

Line 91 in e9c31a3

fs.writeFileSync(packageJson, JSON.stringify(json, null, 2), 'utf8');

create-react-app/tasks/screencast.js

Line 47 in e9c31a3

fs.writeFileSync(cast, JSON.stringify(data, null, ' '));

create-react-app/test/fixtures/__shared__/test-setup.js

Line 7 in e9c31a3

const disablePnp = fs.existsSync(path.resolve(fixturePath, '.disable-pnp'));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 25 in e9c31a3

fs.mkdirSync(path.join(...tsPackagePath.slice(0, 2)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 26 in e9c31a3

fs.mkdirSync(path.join(...tsPackagePath.slice(0, 3)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 27 in e9c31a3

fs.mkdirSync(path.join(...tsPackagePath.slice(0, 4)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 28 in e9c31a3

fs.writeFileSync(path.join(...tsPackagePath));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 30 in e9c31a3

expect(fs.existsSync(tsConfigPath)).toBe(false);

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 34 in e9c31a3

fs.mkdirSync(path.join(...dtsSrcPath.slice(0, 3)));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 35 in e9c31a3

fs.writeFileSync(path.join(...dtsSrcPath));

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 37 in e9c31a3

expect(fs.existsSync(tsConfigPath)).toBe(false);

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 41 in e9c31a3

fs.writeFileSync(tsSrcPath);

create-react-app/test/fixtures/issue-5947-not-typescript/index.test.js

Line 43 in e9c31a3

expect(fs.existsSync(tsConfigPath)).toBe(true);

create-react-app/test/fixtures/relative-paths/index.test.js

Line 20 in e9c31a3

.exec(fs.readFileSync(cssFile, 'utf8'))

More info on how to fix Insecure File Management in Javascript.

Insecure Use of Regular Expressions (16)

create-react-app/packages/create-react-app/createReactApp.js

Line 586 in e9c31a3

version.match(/^file:(.*)?$/)[1]

create-react-app/packages/create-react-app/createReactApp.js

Line 631 in e9c31a3

template.match(/^file:(.*)?$/)[1]

create-react-app/packages/create-react-app/createReactApp.js

Line 642 in e9c31a3

const packageMatch = template.match(/^(@[^/]+\/)?([^@]+)?(@.+)?$/);

create-react-app/packages/create-react-app/createReactApp.js

Line 738 in e9c31a3

/^.+\/(.+?)(?:-\d+.+)?\.(tgz|tar\.gz)$/

create-react-app/packages/create-react-app/createReactApp.js

Line 752 in e9c31a3

name: installPackage.match(/([^/]+)\.git(#.*)?$/)[1],

create-react-app/packages/create-react-app/createReactApp.js

Line 761 in e9c31a3

const installPackagePath = installPackage.match(/^file:(.*)?$/)[1];

create-react-app/packages/react-dev-utils/InterpolateHtmlPlugin.js

Line 34 in e9c31a3

new RegExp('%' + escapeStringRegexp(key) + '%', 'g'),

create-react-app/packages/react-dev-utils/WebpackDevServerUtils.js

Line 385 in e9c31a3

pathname.replace(new RegExp('^' + servedPathname), '')

create-react-app/packages/react-dev-utils/formatWebpackMessages.js

Line 27 in e9c31a3

const parsingError = /Line (\d+):(?:(\d+):)?\s*Parsing error: (.+)$/.exec(

create-react-app/packages/react-dev-utils/ignoredFiles.js

Line 14 in e9c31a3

return new RegExp(

create-react-app/packages/react-error-overlay/src/utils/getSourceMap.js

Line 109 in e9c31a3

const base64 = /^data:application\/json;([\w=:"-]+;)*base64,/;

create-react-app/packages/react-error-overlay/src/utils/parseCompileError.js

Line 10 in e9c31a3

const filePathRegex = /^\.(\/[^/\n ]+)+\.[^/\n ]+$/;

create-react-app/packages/react-error-overlay/src/utils/parser.js

Line 11 in e9c31a3

const regexExtractLocation = /\(?(.+?)(?::(\d+))?(?::(\d+))?\)?$/;

create-react-app/packages/react-error-overlay/src/utils/parser.js

Line 44 in e9c31a3

/ line (\d+)(?: > eval line \d+)* > (eval|Function):\d+:\d+/g,

create-react-app/packages/react-scripts/scripts/eject.js

Line 211 in e9c31a3

const regex = new RegExp(binKey + ' (\\w+)', 'g');

create-react-app/packages/react-scripts/scripts/utils/verifyPackageTree.js

Line 35 in e9c31a3

/\bv?(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[\da-z-]+(?:\.[\da-z-]+)*)?(?:\+[\da-z-]+(?:\.[\da-z-]+)*)?\b/gi;

More info on how to fix Insecure Use of Regular Expressions in Javascript.

Insecure Use of Language/Framework API (1)

create-react-app/packages/react-error-overlay/src/components/CodeBlock.js

Line 49 in e9c31a3

<code style={codeStyle} dangerouslySetInnerHTML={codeBlock} />

More info on how to fix Insecure Use of Language/Framework API in Javascript.

Information Disclosure (1)

create-react-app/test/fixtures/webpack-message-formatting/src/AppBabel.js

Line 8 in e9c31a3

</div>

More info on how to fix Information Disclosure in Javascript.

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
invalid This doesn't seem right
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@snyk-bot