Skip to content

fix: apply audit fixes

b6df7eb
Select commit
Loading
Failed to load commit list.
Merged

fix: Security updates #291

fix: apply audit fixes
b6df7eb
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Jan 19, 2026 in 2s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers
  • Script Injection Check - Checks for script injection vulnerabilities in the PR
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases

Details

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
@tsconfig/node10 1.0.12 package-lock.json 2025-11-13T04:19:50Z
acorn-walk 8.3.4 package-lock.json 2024-09-09T08:40:58Z
ts-node 9.0.0 10.9.2 package-lock.json 2023-12-08T12:04:46Z
@tsconfig/node16 1.0.4 package-lock.json 2023-05-12T04:11:34Z
@tsconfig/node12 1.0.11 package-lock.json 2022-06-16T04:27:41Z
@tsconfig/node14 1.0.3 package-lock.json 2022-06-16T04:27:05Z
@cspotcode/source-map-support 0.8.1 package-lock.json 2022-05-02T13:24:38Z
v8-compile-cache-lib 3.0.1 package-lock.json 2022-04-16T01:03:39Z
create-require 1.1.1 package-lock.json 2020-11-26T13:41:32Z
⏲️ History

Previous invocation results of same check:

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
@tsconfig/node10 1.0.12 package-lock.json 2025-11-13T04:19:50Z
acorn-walk 8.3.4 package-lock.json 2024-09-09T08:40:58Z
ts-node 9.0.0 10.9.2 package-lock.json 2023-12-08T12:04:46Z
@tsconfig/node16 1.0.4 package-lock.json 2023-05-12T04:11:34Z
@tsconfig/node12 1.0.11 package-lock.json 2022-06-16T04:27:41Z
@tsconfig/node14 1.0.3 package-lock.json 2022-06-16T04:27:05Z
@cspotcode/source-map-support 0.8.1 package-lock.json 2022-05-02T13:24:38Z
v8-compile-cache-lib 3.0.1 package-lock.json 2022-04-16T01:03:39Z
create-require 1.1.1 package-lock.json 2020-11-26T13:41:32Z
⏲️ History

Previous invocation results of same check: