Skip to content

fix: Resolve security vulnerabilities

56c16ef
Select commit
Loading
Failed to load commit list.
Merged

fix: Resolve security vulnerabilities #31

fix: Resolve security vulnerabilities
56c16ef
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Apr 22, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers
  • Script Injection Check - Checks for script injection vulnerabilities in the PR
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • PyPI Compromised Packages Check - Checks for compromised PyPI package versions in the PR
  • PyPI Package Cooldown Check - Fails if any PyPI package version in the PR was released within the configured cooldown period

Details

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
@typescript-eslint/eslint-plugin 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:19Z
@typescript-eslint/eslint-plugin 6.7.2 8.59.0 package.json 2026-04-20T17:24:19Z
@typescript-eslint/type-utils 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:06Z
@typescript-eslint/parser 6.7.2 8.59.0 package.json 2026-04-20T17:23:58Z
@typescript-eslint/parser 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/utils 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/scope-manager 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:51Z
@typescript-eslint/typescript-estree 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:43Z
@typescript-eslint/visitor-keys 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:36Z
@typescript-eslint/project-service 8.59.0 package-lock.json 2026-04-20T17:23:35Z
@typescript-eslint/types 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:29Z
@typescript-eslint/tsconfig-utils 8.59.0 package-lock.json 2026-04-20T17:23:28Z
eslint-plugin-jest 27.9.0 29.15.2 package-lock.json 2026-04-09T22:12:25Z
eslint-plugin-jest 27.4.0 29.15.2 package.json 2026-04-09T22:12:25Z
tinyglobby 0.2.16 package-lock.json 2026-04-07T23:37:03Z
minimatch 9.0.3 10.2.5 package-lock.json 2026-03-30T18:08:07Z
brace-expansion 2.0.3 5.0.5 package-lock.json 2026-03-24T17:58:07Z
picomatch 4.0.4 package-lock.json 2026-03-23T20:39:47Z
ts-api-utils 1.0.3 2.5.0 package-lock.json 2026-03-19T02:50:49Z
balanced-match 4.0.4 package-lock.json 2026-02-22T11:38:25Z
eslint-visitor-keys 5.0.1 package-lock.json 2026-02-20T14:40:47Z
@eslint-community/eslint-utils 4.4.0 4.9.1 package-lock.json 2025-12-31T14:49:52Z
@eslint-community/regexpp 4.8.1 4.12.2 package-lock.json 2025-10-22T11:56:00Z
debug 4.3.4 4.4.3 package-lock.json 2025-09-13T17:25:19Z
fdir 6.5.0 package-lock.json 2025-08-14T16:56:03Z
ignore 7.0.5 package-lock.json 2025-05-31T02:18:53Z
ms 2.1.2 2.1.3 package-lock.json 2020-12-08T13:54:35Z
⏲️ History

Previous invocation results of same check:

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
@typescript-eslint/eslint-plugin 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:19Z
@typescript-eslint/eslint-plugin 6.7.2 8.59.0 package.json 2026-04-20T17:24:19Z
@typescript-eslint/type-utils 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:06Z
@typescript-eslint/parser 6.7.2 8.59.0 package.json 2026-04-20T17:23:58Z
@typescript-eslint/parser 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/utils 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/scope-manager 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:51Z
@typescript-eslint/typescript-estree 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:43Z
@typescript-eslint/visitor-keys 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:36Z
@typescript-eslint/project-service 8.59.0 package-lock.json 2026-04-20T17:23:35Z
@typescript-eslint/types 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:29Z
@typescript-eslint/tsconfig-utils 8.59.0 package-lock.json 2026-04-20T17:23:28Z
eslint-plugin-jest 27.9.0 29.15.2 package-lock.json 2026-04-09T22:12:25Z
eslint-plugin-jest 27.4.0 29.15.2 package.json 2026-04-09T22:12:25Z
tinyglobby 0.2.16 package-lock.json 2026-04-07T23:37:03Z
minimatch 9.0.3 10.2.5 package-lock.json 2026-03-30T18:08:07Z
brace-expansion 2.0.3 5.0.5 package-lock.json 2026-03-24T17:58:07Z
picomatch 4.0.4 package-lock.json 2026-03-23T20:39:47Z
ts-api-utils 1.0.3 2.5.0 package-lock.json 2026-03-19T02:50:49Z
balanced-match 4.0.4 package-lock.json 2026-02-22T11:38:25Z
eslint-visitor-keys 5.0.1 package-lock.json 2026-02-20T14:40:47Z
@eslint-community/eslint-utils 4.4.0 4.9.1 package-lock.json 2025-12-31T14:49:52Z
@eslint-community/regexpp 4.8.1 4.12.2 package-lock.json 2025-10-22T11:56:00Z
debug 4.3.4 4.4.3 package-lock.json 2025-09-13T17:25:19Z
fdir 6.5.0 package-lock.json 2025-08-14T16:56:03Z
ignore 7.0.5 package-lock.json 2025-05-31T02:18:53Z
ms 2.1.2 2.1.3 package-lock.json 2020-12-08T13:54:35Z
⏲️ History

Previous invocation results of same check:

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
@typescript-eslint/eslint-plugin 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:19Z
@typescript-eslint/eslint-plugin 6.7.2 8.59.0 package.json 2026-04-20T17:24:19Z
@typescript-eslint/type-utils 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:06Z
@typescript-eslint/parser 6.7.2 8.59.0 package.json 2026-04-20T17:23:58Z
@typescript-eslint/parser 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/utils 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/scope-manager 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:51Z
@typescript-eslint/typescript-estree 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:43Z
@typescript-eslint/visitor-keys 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:36Z
@typescript-eslint/project-service 8.59.0 package-lock.json 2026-04-20T17:23:35Z
@typescript-eslint/types 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:29Z
@typescript-eslint/tsconfig-utils 8.59.0 package-lock.json 2026-04-20T17:23:28Z
eslint-plugin-jest 27.9.0 29.15.2 package-lock.json 2026-04-09T22:12:25Z
eslint-plugin-jest 27.4.0 29.15.2 package.json 2026-04-09T22:12:25Z
tinyglobby 0.2.16 package-lock.json 2026-04-07T23:37:03Z
minimatch 9.0.3 10.2.5 package-lock.json 2026-03-30T18:08:07Z
brace-expansion 2.0.3 5.0.5 package-lock.json 2026-03-24T17:58:07Z
picomatch 4.0.4 package-lock.json 2026-03-23T20:39:47Z
ts-api-utils 1.0.3 2.5.0 package-lock.json 2026-03-19T02:50:49Z
balanced-match 4.0.4 package-lock.json 2026-02-22T11:38:25Z
eslint-visitor-keys 5.0.1 package-lock.json 2026-02-20T14:40:47Z
@eslint-community/eslint-utils 4.4.0 4.9.1 package-lock.json 2025-12-31T14:49:52Z
@eslint-community/regexpp 4.8.1 4.12.2 package-lock.json 2025-10-22T11:56:00Z
debug 4.3.4 4.4.3 package-lock.json 2025-09-13T17:25:19Z
fdir 6.5.0 package-lock.json 2025-08-14T16:56:03Z
ignore 7.0.5 package-lock.json 2025-05-31T02:18:53Z
ms 2.1.2 2.1.3 package-lock.json 2020-12-08T13:54:35Z
⏲️ History

Previous invocation results of same check:

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
@typescript-eslint/eslint-plugin 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:19Z
@typescript-eslint/eslint-plugin 6.7.2 8.59.0 package.json 2026-04-20T17:24:19Z
@typescript-eslint/type-utils 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:06Z
@typescript-eslint/parser 6.7.2 8.59.0 package.json 2026-04-20T17:23:58Z
@typescript-eslint/parser 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/utils 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/scope-manager 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:51Z
@typescript-eslint/typescript-estree 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:43Z
@typescript-eslint/visitor-keys 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:36Z
@typescript-eslint/project-service 8.59.0 package-lock.json 2026-04-20T17:23:35Z
@typescript-eslint/types 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:29Z
@typescript-eslint/tsconfig-utils 8.59.0 package-lock.json 2026-04-20T17:23:28Z
eslint-plugin-jest 27.9.0 29.15.2 package-lock.json 2026-04-09T22:12:25Z
eslint-plugin-jest 27.4.0 29.15.2 package.json 2026-04-09T22:12:25Z
tinyglobby 0.2.16 package-lock.json 2026-04-07T23:37:03Z
minimatch 9.0.3 10.2.5 package-lock.json 2026-03-30T18:08:07Z
brace-expansion 2.0.3 5.0.5 package-lock.json 2026-03-24T17:58:07Z
picomatch 4.0.4 package-lock.json 2026-03-23T20:39:47Z
ts-api-utils 1.0.3 2.5.0 package-lock.json 2026-03-19T02:50:49Z
balanced-match 4.0.4 package-lock.json 2026-02-22T11:38:25Z
eslint-visitor-keys 5.0.1 package-lock.json 2026-02-20T14:40:47Z
@eslint-community/eslint-utils 4.4.0 4.9.1 package-lock.json 2025-12-31T14:49:52Z
@eslint-community/regexpp 4.8.1 4.12.2 package-lock.json 2025-10-22T11:56:00Z
debug 4.3.4 4.4.3 package-lock.json 2025-09-13T17:25:19Z
fdir 6.5.0 package-lock.json 2025-08-14T16:56:03Z
ignore 7.0.5 package-lock.json 2025-05-31T02:18:53Z
ms 2.1.2 2.1.3 package-lock.json 2020-12-08T13:54:35Z
⏲️ History

Previous invocation results of same check:

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
@typescript-eslint/eslint-plugin 6.7.2 8.59.0 package.json 2026-04-20T17:24:19Z
@typescript-eslint/eslint-plugin 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:19Z
@typescript-eslint/type-utils 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:06Z
@typescript-eslint/parser 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/parser 6.7.2 8.59.0 package.json 2026-04-20T17:23:58Z
@typescript-eslint/utils 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/scope-manager 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:51Z
@typescript-eslint/typescript-estree 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:43Z
@typescript-eslint/visitor-keys 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:36Z
@typescript-eslint/project-service 8.59.0 package-lock.json 2026-04-20T17:23:35Z
@typescript-eslint/types 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:29Z
@typescript-eslint/tsconfig-utils 8.59.0 package-lock.json 2026-04-20T17:23:28Z
eslint-plugin-jest 27.4.0 29.15.2 package.json 2026-04-09T22:12:25Z
eslint-plugin-jest 27.9.0 29.15.2 package-lock.json 2026-04-09T22:12:25Z
tinyglobby 0.2.16 package-lock.json 2026-04-07T23:37:03Z
minimatch 9.0.3 10.2.5 package-lock.json 2026-03-30T18:08:07Z
brace-expansion 2.0.3 5.0.5 package-lock.json 2026-03-24T17:58:07Z
picomatch 4.0.4 package-lock.json 2026-03-23T20:39:47Z
ts-api-utils 1.0.3 2.5.0 package-lock.json 2026-03-19T02:50:49Z
balanced-match 4.0.4 package-lock.json 2026-02-22T11:38:25Z
eslint-visitor-keys 5.0.1 package-lock.json 2026-02-20T14:40:47Z
@eslint-community/eslint-utils 4.4.0 4.9.1 package-lock.json 2025-12-31T14:49:52Z
@eslint-community/regexpp 4.8.1 4.12.2 package-lock.json 2025-10-22T11:56:00Z
debug 4.3.4 4.4.3 package-lock.json 2025-09-13T17:25:19Z
fdir 6.5.0 package-lock.json 2025-08-14T16:56:03Z
ignore 7.0.5 package-lock.json 2025-05-31T02:18:53Z
ms 2.1.2 2.1.3 package-lock.json 2020-12-08T13:54:35Z
⏲️ History

Previous invocation results of same check:

🔐 Approve Check Run

One or more security checks failed. To approve this check run, click here.


❌ NPM Package Cooldown Check

The following npm packages added in current PR are recent versions(not older than 2 days). This check will pass at 2026-04-23T17:24:19Z

Package Name Previous Version Current Version file Current Version Release Date
@typescript-eslint/project-service 8.59.0 package-lock.json 2026-04-20T17:23:35Z
@typescript-eslint/types 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:29Z
@typescript-eslint/tsconfig-utils 8.59.0 package-lock.json 2026-04-20T17:23:28Z
@typescript-eslint/scope-manager 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:51Z
@typescript-eslint/typescript-estree 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:43Z
@typescript-eslint/visitor-keys 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:36Z
@typescript-eslint/eslint-plugin 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:19Z
@typescript-eslint/parser 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/type-utils 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:06Z
@typescript-eslint/utils 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/eslint-plugin 6.7.2 8.59.0 package.json 2026-04-20T17:24:19Z
@typescript-eslint/parser 6.7.2 8.59.0 package.json 2026-04-20T17:23:58Z
✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

⏲️ History

Previous invocation results of same check:

🔐 Approve Check Run

One or more security checks failed. To approve this check run, click here.


❌ NPM Package Cooldown Check

The following npm packages added in current PR are recent versions(not older than 2 days). This check will pass at 2026-04-23T17:24:19Z

Package Name Previous Version Current Version file Current Version Release Date
@typescript-eslint/eslint-plugin 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:19Z
@typescript-eslint/utils 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/project-service 8.59.0 package-lock.json 2026-04-20T17:23:35Z
@typescript-eslint/visitor-keys 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:36Z
@typescript-eslint/type-utils 6.21.0 8.59.0 package-lock.json 2026-04-20T17:24:06Z
@typescript-eslint/types 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:29Z
@typescript-eslint/tsconfig-utils 8.59.0 package-lock.json 2026-04-20T17:23:28Z
@typescript-eslint/typescript-estree 5.62.0 8.59.0 package-lock.json 2026-04-20T17:23:43Z
@typescript-eslint/parser 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:58Z
@typescript-eslint/scope-manager 6.21.0 8.59.0 package-lock.json 2026-04-20T17:23:51Z
@typescript-eslint/eslint-plugin 6.7.2 8.59.0 package.json 2026-04-20T17:24:19Z
@typescript-eslint/parser 6.7.2 8.59.0 package.json 2026-04-20T17:23:58Z
✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.