Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps-dev): bump the dev-dependencies group with 4 updates #923

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 6, 2025

Bumps the dev-dependencies group with 4 updates: @docusaurus/module-type-aliases, @typescript-eslint/eslint-plugin, @typescript-eslint/parser and eslint-plugin-react.

Updates @docusaurus/module-type-aliases from 3.6.3 to 3.7.0

Release notes

Sourced from @​docusaurus/module-type-aliases's releases.

3.7.0 (2025-01-03)

🚀 New Feature

  • docusaurus-faster, docusaurus
  • docusaurus-plugin-content-blog, docusaurus-theme-classic
    • #10768 feat(blog): Add author social icons for bluesky, mastodon, threads, twitch, youtube, instagram (@​GingerGeek)
  • create-docusaurus, docusaurus-mdx-loader, docusaurus-module-type-aliases, docusaurus-plugin-client-redirects, docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-plugin-content-pages, docusaurus-plugin-debug, docusaurus-plugin-google-analytics, docusaurus-plugin-google-gtag, docusaurus-plugin-google-tag-manager, docusaurus-plugin-ideal-image, docusaurus-plugin-pwa, docusaurus-plugin-rsdoctor, docusaurus-plugin-sitemap, docusaurus-plugin-svgr, docusaurus-plugin-vercel-analytics, docusaurus-preset-classic, docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-live-codeblock, docusaurus-theme-mermaid, docusaurus-theme-search-algolia, docusaurus-types, docusaurus
  • docusaurus-plugin-content-blog
  • docusaurus-module-type-aliases, docusaurus-plugin-svgr, docusaurus-preset-classic, docusaurus-types, docusaurus-utils, docusaurus

🐛 Bug Fix

  • docusaurus-remark-plugin-npm2yarn
  • docusaurus-theme-classic, docusaurus-theme-common
    • #10796 fix(theme): Footer Column/Link should merge provided className (@​slorber)
  • docusaurus-bundler, docusaurus-theme-common
    • #10786 fix(core): fix React hydration errors, change html minifier settings (@​slorber)
  • docusaurus-theme-common
  • docusaurus-theme-translations
  • docusaurus-plugin-content-docs
  • docusaurus
    • #10727 fix(core): fix codegen routesChunkName possible hash collision (@​slorber)
  • docusaurus-mdx-loader
    • #10723 fix(mdx-loader): fix md image paths with spaces bug related to transformImage encoding problem (@​slorber)

📝 Documentation

🤖 Dependencies

🔧 Maintenance

  • Other
  • docusaurus-theme-search-algolia
  • docusaurus
    • #10798 refactor(core): Use Intl native API to get locale direction, remove rtl-detect depend… (@​slorber)
    • #10747 refactor(core): swizzle wrap should use ReactNode instead of JSX.Element (@​slorber)

... (truncated)

Changelog

Sourced from @​docusaurus/module-type-aliases's changelog.

3.7.0 (2025-01-03)

🚀 New Feature

  • docusaurus-faster, docusaurus
  • docusaurus-plugin-content-blog, docusaurus-theme-classic
    • #10768 feat(blog): Add author social icons for bluesky, mastodon, threads, twitch, youtube, instagram (@​GingerGeek)
  • create-docusaurus, docusaurus-mdx-loader, docusaurus-module-type-aliases, docusaurus-plugin-client-redirects, docusaurus-plugin-content-blog, docusaurus-plugin-content-docs, docusaurus-plugin-content-pages, docusaurus-plugin-debug, docusaurus-plugin-google-analytics, docusaurus-plugin-google-gtag, docusaurus-plugin-google-tag-manager, docusaurus-plugin-ideal-image, docusaurus-plugin-pwa, docusaurus-plugin-rsdoctor, docusaurus-plugin-sitemap, docusaurus-plugin-svgr, docusaurus-plugin-vercel-analytics, docusaurus-preset-classic, docusaurus-theme-classic, docusaurus-theme-common, docusaurus-theme-live-codeblock, docusaurus-theme-mermaid, docusaurus-theme-search-algolia, docusaurus-types, docusaurus
  • docusaurus-plugin-content-blog
  • docusaurus-module-type-aliases, docusaurus-plugin-svgr, docusaurus-preset-classic, docusaurus-types, docusaurus-utils, docusaurus

🐛 Bug Fix

  • docusaurus-remark-plugin-npm2yarn
  • docusaurus-theme-classic, docusaurus-theme-common
    • #10796 fix(theme): Footer Column/Link should merge provided className (@​slorber)
  • docusaurus-bundler, docusaurus-theme-common
    • #10786 fix(core): fix React hydration errors, change html minifier settings (@​slorber)
  • docusaurus-theme-common
  • docusaurus-theme-translations
  • docusaurus-plugin-content-docs
  • docusaurus
    • #10727 fix(core): fix codegen routesChunkName possible hash collision (@​slorber)
  • docusaurus-mdx-loader
    • #10723 fix(mdx-loader): fix md image paths with spaces bug related to transformImage encoding problem (@​slorber)

📝 Documentation

🤖 Dependencies

🔧 Maintenance

  • Other
  • docusaurus-theme-search-algolia

... (truncated)

Commits

Updates @typescript-eslint/eslint-plugin from 8.18.1 to 8.19.0

Release notes

Sourced from @​typescript-eslint/eslint-plugin's releases.

v8.19.0

8.19.0 (2024-12-30)

🚀 Features

  • eslint-plugin: [strict-boolean-expressions] check array predicate functions' return statements (#10106)

🩹 Fixes

  • eslint-plugin: add getConstraintInfo to handle generic constraints better (#10496)
  • eslint-plugin: [array-type] autofix with conditional types needs parentheses (#10522)
  • eslint-plugin: [consistent-indexed-object-style] don't report on indirect circular references (#10537)
  • eslint-plugin: [member-ordering] ignore method overloading (#10536)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.18.2

8.18.2 (2024-12-23)

🩹 Fixes

  • eslint-plugin: [no-deprecated] not reporting usages of deprecated declared constants as object value (#10498)
  • eslint-plugin: [prefer-reduce-type-parameter] don't report cases in which the fix results in a type error (#10494)
  • eslint-plugin: [no-unnecessary-condition] don't flag values of an unconstrained or valid type parameter (#10473)
  • eslint-plugin: [consistent-indexed-object-style] use a suggestion over an auto-fix if can't reliably determine that produced index signature is valid (#10490)
  • eslint-plugin: [no-unsafe-type-assertion] fix for unsafe assertion to a constrained type parameter (#10461)
  • eslint-plugin: [no-unnecessary-type-arguments] handle type/value context (#10503)
  • eslint-plugin: [consistent-type-assertions] allow default assertionStyle option (#10512)
  • eslint-plugin: [no-unnecessary-condition] handle noUncheckedIndexedAccess true (#10514)
  • typescript-eslint: export types so that declarations can be named for dts files (#10513)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/eslint-plugin's changelog.

8.19.0 (2024-12-30)

🚀 Features

  • eslint-plugin: [strict-boolean-expressions] check array predicate functions' return statements (#10106)

🩹 Fixes

  • eslint-plugin: [member-ordering] ignore method overloading (#10536)
  • eslint-plugin: [consistent-indexed-object-style] don't report on indirect circular references (#10537)
  • eslint-plugin: [array-type] autofix with conditional types needs parentheses (#10522)
  • eslint-plugin: add getConstraintInfo to handle generic constraints better (#10496)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

8.18.2 (2024-12-23)

🩹 Fixes

  • eslint-plugin: [no-unnecessary-condition] handle noUncheckedIndexedAccess true (#10514)
  • eslint-plugin: [consistent-type-assertions] allow default assertionStyle option (#10512)
  • eslint-plugin: [no-unnecessary-type-arguments] handle type/value context (#10503)
  • eslint-plugin: [no-unsafe-type-assertion] fix for unsafe assertion to a constrained type parameter (#10461)
  • eslint-plugin: [consistent-indexed-object-style] use a suggestion over an auto-fix if can't reliably determine that produced index signature is valid (#10490)
  • eslint-plugin: [no-unnecessary-condition] don't flag values of an unconstrained or valid type parameter (#10473)
  • eslint-plugin: [prefer-reduce-type-parameter] don't report cases in which the fix results in a type error (#10494)
  • eslint-plugin: [no-deprecated] not reporting usages of deprecated declared constants as object value (#10498)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Commits
  • e19f30f chore(release): publish 8.19.0
  • 9746832 fix(eslint-plugin): [member-ordering] ignore method overloading (#10536)
  • 7eba36e fix(eslint-plugin): [consistent-indexed-object-style] don't report on indirec...
  • 3097930 fix(eslint-plugin): [array-type] autofix with conditional types needs parenth...
  • 2e2731d fix(eslint-plugin): add getConstraintInfo to handle generic constraints bette...
  • 07d0e0d feat(eslint-plugin): [strict-boolean-expressions] check array predicate funct...
  • 157b781 chore(release): publish 8.18.2
  • 83c3bbf fix(eslint-plugin): [no-unnecessary-condition] handle noUncheckedIndexedAcces...
  • c6a387f fix(eslint-plugin): [consistent-type-assertions] allow default assertionStyle...
  • 4747299 fix(eslint-plugin): [no-unnecessary-type-arguments] handle type/value context...
  • Additional commits viewable in compare view

Updates @typescript-eslint/parser from 8.18.1 to 8.19.0

Release notes

Sourced from @​typescript-eslint/parser's releases.

v8.19.0

8.19.0 (2024-12-30)

🚀 Features

  • eslint-plugin: [strict-boolean-expressions] check array predicate functions' return statements (#10106)

🩹 Fixes

  • eslint-plugin: add getConstraintInfo to handle generic constraints better (#10496)
  • eslint-plugin: [array-type] autofix with conditional types needs parentheses (#10522)
  • eslint-plugin: [consistent-indexed-object-style] don't report on indirect circular references (#10537)
  • eslint-plugin: [member-ordering] ignore method overloading (#10536)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

v8.18.2

8.18.2 (2024-12-23)

🩹 Fixes

  • eslint-plugin: [no-deprecated] not reporting usages of deprecated declared constants as object value (#10498)
  • eslint-plugin: [prefer-reduce-type-parameter] don't report cases in which the fix results in a type error (#10494)
  • eslint-plugin: [no-unnecessary-condition] don't flag values of an unconstrained or valid type parameter (#10473)
  • eslint-plugin: [consistent-indexed-object-style] use a suggestion over an auto-fix if can't reliably determine that produced index signature is valid (#10490)
  • eslint-plugin: [no-unsafe-type-assertion] fix for unsafe assertion to a constrained type parameter (#10461)
  • eslint-plugin: [no-unnecessary-type-arguments] handle type/value context (#10503)
  • eslint-plugin: [consistent-type-assertions] allow default assertionStyle option (#10512)
  • eslint-plugin: [no-unnecessary-condition] handle noUncheckedIndexedAccess true (#10514)
  • typescript-eslint: export types so that declarations can be named for dts files (#10513)

❤️ Thank You

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @​typescript-eslint/parser's changelog.

8.19.0 (2024-12-30)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

8.18.2 (2024-12-23)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

Updates eslint-plugin-react from 7.37.2 to 7.37.3

Release notes

Sourced from eslint-plugin-react's releases.

v7.37.3

Fixed

  • [no-danger]: avoid a crash on a nested component name (#3833[] @​ljharb)
  • [Fix] types: correct generated type declaration (#3840[] @​ocavue)
  • [no-unknown-property]: support precedence prop in react 19 (#3829[] @​acusti)
  • [prop-types]: props missing in validation when using generic types from a namespace import (#3859[] @​rbondoc96)

Changed

  • [Tests] [jsx-no-script-url]: Improve tests (#3849[] @​radu2147)
  • [Docs] fix broken links: [default-props-match-prop-types], [jsx-boolean-value], [jsx-curly-brace-presence], [jsx-no-bind], [no-array-index-key], [no-is-mounted], [no-render-return-value], [require-default-props] (#3841[] @​bastiendmt)

#1000: jsx-eslint/eslint-plugin-react#1000 #1002: jsx-eslint/eslint-plugin-react#1002 #1005: jsx-eslint/eslint-plugin-react#1005 #100: jsx-eslint/eslint-plugin-react#100 #1010: jsx-eslint/eslint-plugin-react#1010 #1013: jsx-eslint/eslint-plugin-react#1013 #1022: jsx-eslint/eslint-plugin-react#1022 #1029: jsx-eslint/eslint-plugin-react#1029 #102: jsx-eslint/eslint-plugin-react#102 #1034: jsx-eslint/eslint-plugin-react#1034 #1038: jsx-eslint/eslint-plugin-react#1038 #1041: jsx-eslint/eslint-plugin-react#1041 #1043: jsx-eslint/eslint-plugin-react#1043 #1046: jsx-eslint/eslint-plugin-react#1046 #1047: jsx-eslint/eslint-plugin-react#1047 #1050: jsx-eslint/eslint-plugin-react#1050 #1053: jsx-eslint/eslint-plugin-react#1053 #1057: jsx-eslint/eslint-plugin-react#1057 #105: jsx-eslint/eslint-plugin-react#105 #1061: jsx-eslint/eslint-plugin-react#1061 #1062: jsx-eslint/eslint-plugin-react#1062 #1070: jsx-eslint/eslint-plugin-react#1070 #1071: jsx-eslint/eslint-plugin-react#1071 #1073: jsx-eslint/eslint-plugin-react#1073 #1076: jsx-eslint/eslint-plugin-react#1076 #1079: jsx-eslint/eslint-plugin-react#1079 #1088: jsx-eslint/eslint-plugin-react#1088 #1098: jsx-eslint/eslint-plugin-react#1098 #1101: jsx-eslint/eslint-plugin-react#1101 #1103: jsx-eslint/eslint-plugin-react#1103 #110: jsx-eslint/eslint-plugin-react#110 #1116: jsx-eslint/eslint-plugin-react#1116 #1117: jsx-eslint/eslint-plugin-react#1117 #1119: jsx-eslint/eslint-plugin-react#1119 #1121: jsx-eslint/eslint-plugin-react#1121 #1122: jsx-eslint/eslint-plugin-react#1122 #1123: jsx-eslint/eslint-plugin-react#1123 #1130: jsx-eslint/eslint-plugin-react#1130 #1131: jsx-eslint/eslint-plugin-react#1131

... (truncated)

Changelog

Sourced from eslint-plugin-react's changelog.

7.37.3 - 2024.12.23

Fixed

  • [no-danger]: avoid a crash on a nested component name (#3833[] @​ljharb)
  • [Fix] types: correct generated type declaration (#3840[] @​ocavue)
  • [no-unknown-property]: support precedence prop in react 19 (#3829[] @​acusti)
  • [prop-types]: props missing in validation when using generic types from a namespace import (#3859[] @​rbondoc96)

Changed

  • [Tests] [jsx-no-script-url]: Improve tests (#3849[] @​radu2147)
  • [Docs] fix broken links: [default-props-match-prop-types], [jsx-boolean-value], [jsx-curly-brace-presence], [jsx-no-bind], [no-array-index-key], [no-is-mounted], [no-render-return-value], [require-default-props] (#3841[] @​bastiendmt)

#3859: jsx-eslint/eslint-plugin-react#3859 #3849: jsx-eslint/eslint-plugin-react#3849 #3841: jsx-eslint/eslint-plugin-react#3841 #3840: jsx-eslint/eslint-plugin-react#3840 #3833: jsx-eslint/eslint-plugin-react#3833 #3829: jsx-eslint/eslint-plugin-react#3829

Commits
  • 244743a Update CHANGELOG and bump version
  • bc5b9dd [actions] release workflow needs some new domains
  • ed3b1cf [Tests] jsx-uses-vars, jsx-uses-react: fix no-unused-vars tests in esli...
  • 033ad19 [Deps] update array.prototype.flatmap, es-iterator-helpers, `object.value...
  • b4a14f4 [meta] add directories.test
  • b713026 [Fix] prop-types: props missing in validation when using generic types from...
  • 66ae4c1 [Fix] no-unknown-property: support precedence prop in react 19
  • 233d442 [Dev Deps] update @babel/preset-react
  • 958954d [Docs] fix broken links:
  • 2c0b10c [Tests] pin `@typescript-eslint/parser to < 8.18, due to a breaking change
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev-dependencies group with 4 updates: [@docusaurus/module-type-aliases](https://github.com/facebook/docusaurus/tree/HEAD/packages/docusaurus-module-type-aliases), [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) and [eslint-plugin-react](https://github.com/jsx-eslint/eslint-plugin-react).


Updates `@docusaurus/module-type-aliases` from 3.6.3 to 3.7.0
- [Release notes](https://github.com/facebook/docusaurus/releases)
- [Changelog](https://github.com/facebook/docusaurus/blob/main/CHANGELOG.md)
- [Commits](https://github.com/facebook/docusaurus/commits/v3.7.0/packages/docusaurus-module-type-aliases)

Updates `@typescript-eslint/eslint-plugin` from 8.18.1 to 8.19.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.19.0/packages/eslint-plugin)

Updates `@typescript-eslint/parser` from 8.18.1 to 8.19.0
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.19.0/packages/parser)

Updates `eslint-plugin-react` from 7.37.2 to 7.37.3
- [Release notes](https://github.com/jsx-eslint/eslint-plugin-react/releases)
- [Changelog](https://github.com/jsx-eslint/eslint-plugin-react/blob/master/CHANGELOG.md)
- [Commits](jsx-eslint/eslint-plugin-react@v7.37.2...v7.37.3)

---
updated-dependencies:
- dependency-name: "@docusaurus/module-type-aliases"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@typescript-eslint/eslint-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@typescript-eslint/parser"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: eslint-plugin-react
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested review from a team as code owners January 6, 2025 10:45
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 6, 2025
Copy link
Contributor

stacklok-cloud bot commented Jan 6, 2025

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of 5bd9d92e:

  • 🐞 vulnerable packages: 0
  • 🛠 fixes available for: 0

Copy link
Contributor

stacklok-cloud bot commented Jan 6, 2025

Dependency Information

Minder analyzed the dependencies introduced in this pull request and detected that some dependencies do not meet your security profile.

📦 Dependency: @docusaurus/module-type-aliases

Trusty Score: 0

Scoring details
Component Score
Package activity 9.2
Repository activity 9.3
User activity 9
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 1804
Number of git tags or releases 177
Versions matched to tags or releases 73

📦 Dependency: @docusaurus/types

Trusty Score: 0

Scoring details
Component Score
Package activity 9.2
Repository activity 9.3
User activity 9
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 1835
Number of git tags or releases 177
Versions matched to tags or releases 93
Alternatives
Package Score Description
@docusaurus/core 0

📦 Dependency: @typescript-eslint/eslint-plugin

Trusty Score: 0

Scoring details
Component Score
Package activity 8.4
Repository activity 8.2
User activity 8.7
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 3891
Number of git tags or releases 172
Versions matched to tags or releases 162
Alternatives
Package Score Description
@typescript-eslint/parser 0
@typescript-eslint/eslint-plugin-tslint 0

📦 Dependency: @typescript-eslint/parser

Trusty Score: 0

Scoring details
Component Score
Package activity 8.4
Repository activity 8.2
User activity 8.7
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 3976
Number of git tags or releases 172
Versions matched to tags or releases 162
Alternatives
Package Score Description
@babel/eslint-parser 0

📦 Dependency: @typescript-eslint/scope-manager

Trusty Score: 0

Scoring details
Component Score
Package activity 8.4
Repository activity 8.2
User activity 8.7
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 3214
Number of git tags or releases 172
Versions matched to tags or releases 162
Alternatives
Package Score Description
eslint-plugin-react 0
typescript 0
@typescript-eslint/parser 0
@typescript-eslint/eslint-plugin 0

📦 Dependency: @typescript-eslint/type-utils

Trusty Score: 0

Scoring details
Component Score
Package activity 8.4
Repository activity 8.2
User activity 8.7
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 2287
Number of git tags or releases 172
Versions matched to tags or releases 162
Alternatives
Package Score Description
@typescript-eslint/typescript-estree 0

📦 Dependency: @typescript-eslint/types

Trusty Score: 0

Scoring details
Component Score
Package activity 8.4
Repository activity 8.2
User activity 8.7
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 3252
Number of git tags or releases 172
Versions matched to tags or releases 163
Alternatives
Package Score Description
@typescript-eslint/parser 0

📦 Dependency: @typescript-eslint/typescript-estree

Trusty Score: 0

Scoring details
Component Score
Package activity 8.4
Repository activity 8.2
User activity 8.7
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 3986
Number of git tags or releases 172
Versions matched to tags or releases 163
Alternatives
Package Score Description
@typescript-eslint/parser 0
@babel/parser 0
@typescript-eslint/eslint-plugin 0

📦 Dependency: @typescript-eslint/utils

Trusty Score: 0

Scoring details
Component Score
Package activity 8.4
Repository activity 8.2
User activity 8.7
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 2271
Number of git tags or releases 172
Versions matched to tags or releases 162
Alternatives
Package Score Description
@typescript-eslint/parser 0
@typescript-eslint/eslint-plugin 0

📦 Dependency: @typescript-eslint/visitor-keys

Trusty Score: 0

Scoring details
Component Score
Package activity 8.4
Repository activity 8.2
User activity 8.7
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 3249
Number of git tags or releases 172
Versions matched to tags or releases 161
Alternatives
Package Score Description
@babel/eslint-parser 0
typescript-eslint 0
eslint-plugin-import 0
eslint 0
eslint-config-airbnb 0

📦 Dependency: array.prototype.flatmap

Trusty Score: 0

Scoring details
Component Score
Package activity 4.8
Repository activity 2.1
User activity 7.5
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 14
Number of git tags or releases 14
Versions matched to tags or releases 14
Alternatives
Package Score Description
lodash 0
ramda 0
underscore 0

📦 Dependency: dunder-proto

Trusty Score: 0

Scoring details
Component Score
Package activity 4.1
Repository activity 0.8
User activity 7.5
Provenance unknown
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 2
Number of git tags or releases 2
Versions matched to tags or releases 2
Alternatives
Package Score Description
set-prototype-of 0

📦 Dependency: es-iterator-helpers

Trusty Score: 0

Scoring details
Component Score
Package activity 4.7
Repository activity 1.8
User activity 7.6
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 23
Number of git tags or releases 23
Versions matched to tags or releases 23
Alternatives
Package Score Description
lodash 0
ramda 0
underscore 0
lazy.js 0

📦 Dependency: eslint-plugin-react

Trusty Score: 0

Scoring details
Component Score
Package activity 8.2
Repository activity 7.9
User activity 8.5
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 214
Number of git tags or releases 113
Versions matched to tags or releases 66
Alternatives
Package Score Description
eslint-plugin-react-hooks 0
eslint-config-airbnb 0
eslint-plugin-react-native 0

📦 Dependency: get-proto

Trusty Score: 0

Scoring details
Component Score
Package activity 4
Repository activity 0.6
User activity 7.3
Provenance unknown
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 2
Number of git tags or releases 2
Versions matched to tags or releases 2

📦 Dependency: iterator.prototype

Trusty Score: 0

Scoring details
Component Score
Package activity 4.2
Repository activity 0.9
User activity 7.5
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 8
Number of git tags or releases 8
Versions matched to tags or releases 8
Alternatives
Package Score Description
iterall 0
itertools 0
iterare 0

📦 Dependency: object.values

Trusty Score: 0

Scoring details
Component Score
Package activity 4.8
Repository activity 2.2
User activity 7.5
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 15
Number of git tags or releases 14
Versions matched to tags or releases 14
Alternatives
Package Score Description
object-assign 0
object-hash 0
object-path 0
object-inspect 0
object-keys 0
object.entries 0
object-refs 0
object-merge 0

📦 Dependency: string.prototype.matchall

Trusty Score: 0

Scoring details
Component Score
Package activity 4.6
Repository activity 1.8
User activity 7.5
Provenance historical_provenance_match
Proof of Origin (Provenance)

This package can be linked back to its source code using a historical provenance map.

We were able to correlate a significant number of git tags and tagged releases in this package’s source code to versions of the published package. This mapping creates a strong link from the package back to its source code repository, verifying proof of origin.

Published package versions 18
Number of git tags or releases 18
Versions matched to tags or releases 18

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants