Skip to content

fix: Security updates #27

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Raj-StepSecurity merged 2 commits into from
Mar 27, 2026

fix: apply audit fixes

266c3d0
Select commit
Loading
Failed to load commit list.
Merged

fix: Security updates #27

fix: apply audit fixes
266c3d0
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Mar 27, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
  • Pwn Request Vulnerabilities Check - Checks for Pwn Request vulnerabilities in the PR via risky triggers
  • Script Injection Check - Checks for script injection vulnerabilities in the PR
  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR

Details

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
flatted 3.2.2 3.4.2 package-lock.json 2026-03-17T15:03:56Z
axios 1.13.2 1.13.6 package-lock.json 2026-02-27T15:35:51Z
minimatch 3.1.2 3.1.5 package-lock.json 2026-02-25T17:17:15Z
ajv 8.6.3 8.18.0 package-lock.json 2026-02-14T15:41:17Z
fast-uri 3.1.0 package-lock.json 2025-08-25T13:16:04Z
✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

⏲️ History

Previous invocation results of same check:

✅ Pwn Request Vulnerabilities Check

No Pwn Request vulnerabilities found in this PR.

✅ Script Injection Vulnerabilities Check

No Script Injection vulnerabilities found in this PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.

✅ NPM Package Cooldown Check

No npm package upgrades to recent releases found in current PR.

The following npm packages are inspected in current PR

Package Name Previous Version Current Version file Current Version Release Date
flatted 3.2.2 3.4.2 package-lock.json 2026-03-17T15:03:56Z
axios 1.13.2 1.13.6 package-lock.json 2026-02-27T15:35:51Z
minimatch 3.1.2 3.1.5 package-lock.json 2026-02-25T17:17:15Z
ajv 8.6.3 8.18.0 package-lock.json 2026-02-14T15:41:17Z
fast-uri 3.1.0 package-lock.json 2025-08-25T13:16:04Z
View more details on StepSecurity Actions Security