Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add allow-scripts #5

Merged
merged 2 commits into from
Jul 11, 2023
Merged

Add allow-scripts #5

merged 2 commits into from
Jul 11, 2023

Conversation

mcmire
Copy link

@mcmire mcmire commented Jul 10, 2023

Our Yarn v3 layer in the module template assumes that this package has been installed and configured.

Progresses MetaMask/core#1471

Our Yarn v3 layer in the module template assumes that this package has
been installed and configured.
@socket-security
Copy link

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
@lavamoat/preinstall-always-fail 1.0.0 None +0 2.17 kB kumavis
@lavamoat/allow-scripts 2.3.1 eval, network, filesystem, shell, environment +138 8.39 MB lgbot

@socket-security
Copy link

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue Package Version Note Source
Filesystem access @lavamoat/aa 3.1.2
Install scripts @lavamoat/aa 3.1.2
No bug tracker @lavamoat/aa 3.1.2
Filesystem access @lavamoat/allow-scripts 2.3.1
Install scripts @lavamoat/allow-scripts 2.3.1
New author @lavamoat/allow-scripts 2.3.1
No contributors or author data @lavamoat/allow-scripts 2.3.1
Shell access @lavamoat/allow-scripts 2.3.1
Filesystem access @npmcli/node-gyp 3.0.0
New author @npmcli/node-gyp 3.0.0
Filesystem access @npmcli/run-script 6.0.2
Filesystem access chownr 2.0.0
Unmaintained chownr 2.0.0
  • Last Publish: 2/12/2020, 2:33:07 AM
Filesystem access cross-spawn 7.0.3
Shell access cross-spawn 7.0.3
  • Module: child_process
  • Location: index.js
Unmaintained cross-spawn 7.0.3
  • Last Publish: 5/25/2020, 3:35:07 PM
Filesystem access escalade 3.1.1
Unmaintained escalade 3.1.1
  • Last Publish: 10/13/2020, 6:03:44 AM
Filesystem access fs-minipass 2.1.0
Filesystem access fs-minipass 3.0.2
New author fs-minipass 3.0.2
Filesystem access fs.realpath 1.0.0
Unmaintained fs.realpath 1.0.0
  • Last Publish: 6/15/2016, 6:39:05 PM
Filesystem access glob 10.3.3
Filesystem access glob 7.2.3
Filesystem access graceful-fs 4.2.11
No contributors or author data graceful-fs 4.2.11
Filesystem access isexe 2.0.0
Unmaintained isexe 2.0.0
  • Last Publish: 3/23/2017, 12:53:16 AM
Filesystem access mkdirp 1.0.4
No contributors or author data mkdirp 1.0.4
Filesystem access node-gyp 9.4.0
Network access node-gyp 9.4.0
Shell access node-gyp 9.4.0
Filesystem access path-scurry 1.10.1
Filesystem access read-cmd-shim 4.0.0
New author read-cmd-shim 4.0.0
Filesystem access require-directory 2.1.1
Unmaintained require-directory 2.1.1
  • Last Publish: 5/28/2015, 8:31:04 AM
Filesystem access resolve 1.22.2
Filesystem access rimraf 3.0.2
Filesystem access tar 6.1.15
Filesystem access write-file-atomic 5.0.1
New author write-file-atomic 5.0.1
Filesystem access y18n 5.0.8
Unmaintained y18n 5.0.8
  • Last Publish: 4/7/2021, 6:57:33 PM
Filesystem access yargs 16.2.0
Filesystem access yargs-parser 20.2.9
Filesystem access cacache 17.1.3
Filesystem access @npmcli/fs 3.1.0
Filesystem access bin-links 4.0.1
Filesystem access cmd-shim 6.0.1
Filesystem access read-package-json-fast 3.0.2
Install scripts @lavamoat/preinstall-always-fail 1.0.0
  • Install script: preinstall
  • Source: echo "Don't run npm lifecycle scripts by default, whitelist them with @lavamoat/allow-scripts" && exit 1
No contributors or author data @lavamoat/preinstall-always-fail 1.0.0
No bug tracker @lavamoat/preinstall-always-fail 1.0.0
Unmaintained @lavamoat/preinstall-always-fail 1.0.0
  • Last Publish: 2/3/2021, 8:18:19 AM
Network access http-proxy-agent 5.0.0
Network access https-proxy-agent 5.0.1
Network access socks-proxy-agent 7.0.0
Network access make-fetch-happen 11.1.1
Network access minipass-fetch 3.0.3

Gudahtt
Gudahtt previously approved these changes Jul 11, 2023
Copy link
Member

@Gudahtt Gudahtt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@mcmire
Copy link
Author

mcmire commented Jul 11, 2023

^ Rebased to resolve conflicts.

@mcmire mcmire merged commit 3cde8be into main Jul 11, 2023
@mcmire mcmire deleted the add-allow-scripts branch July 11, 2023 15:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants