jappel/leistungsbilanz-ts
1
0
Fork 1
Code Issues 6 Pull requests Projects Releases Packages Wiki Activity Actions

fix(deps): npm audit fix 2026-10-28 (nur Lockfile)
Some checks failed
security-baseline / secrets (push) Has been cancelled
Details
security-baseline / node (push) Has been cancelled
Details
security-baseline / semgrep (push) Has been cancelled
Details
security-baseline / trivy (push) Has been cancelled
Details

Browse source 
npm audit --audit-level=high war im prepush nach dem Baseline-Rollout rot.
npm audit fix ohne --force, package.json unverändert. Geändert:
- body-parser 2.3.0->2.4.0
- iconv-lite 0.7.2->0.7.3
- zod 4.4.1->4.6.7

Moderat offen (Fix nur per --force bzw. Major): esbuild uuid

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
Grovy311 2026-10-28 06:38:09 +01:00
parent e39de4ddf5
commit 9974948b54
2 changed files with 15 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

1
AGENTS.md
View file

@ -819,6 +819,7 @@ Open security points (state at adoption, 2026-10-15; updated 2026-10-17):
`estimate-balance-format.ts`, `room-area.ts` – check for ReDoS when inputs can be long;
several `react-hooks/exhaustive-deps` warnings in the editor.
- Baseline-Stand 2026-10-27 (security-baseline 3a23c7a): `mutation_check.py` zählt Syntax-/Importfehler nicht mehr als getötet (`[UNGÜLTIG]`), Sicherheitstests verlangen konfigurierte ungültige Eingaben (Leerlauf-Sperre).
- Abhängigkeiten 2026-10-28: `npm audit fix` ohne `--force` (nur Lockfile) gegen die High-Funde: body-parser: 2.3.0->2.4.0, iconv-lite: 0.7.2->0.7.3, zod: 4.4.1->4.6.7. Moderat offen (Fix nur per `--force`/Major): esbuild uuid .
## Response Style for Codex