This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

This repository currently has no open or pending branches.

Detected dependencies

• Check this box to trigger a request for Renovate to run again on this repository

Here's the Weekly Digest for 9renpoto/dotfiles:

ISSUES

Last week 2 issues were created.
Of these, 2 issues have been closed and 0 issues are still open.

CLOSED ISSUES

❤️ #222 Update dependency lint-staged to v8.2.1, by renovate[bot]
❤️ #221 Update dependency husky to v2.4.1, by renovate[bot]

PULL REQUESTS

Last week, 2 pull requests were created, updated or merged.

MERGED PULL REQUEST

Last week, 2 pull requests were merged.
💜 #222 Update dependency lint-staged to v8.2.1, by renovate[bot]
💜 #221 Update dependency husky to v2.4.1, by renovate[bot]

COMMITS

Last week there were 2 commits.
🛠️ Update dependency lint-staged to v8.2.1 by renovate-bot
🛠️ Update dependency husky to v2.4.1 by renovate-bot

CONTRIBUTORS

Last week there was 1 contributor.
👤 renovate-bot

STARGAZERS

Last week there were no stargazers.

RELEASES

Last week there were no releases.

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/dotfiles to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

• lint-staged:8.1.7
        └─ micromatch:3.1.10
              └─ extglob:2.0.4
                    └─ expand-brackets:2.1.4
                          └─ debug:2.6.9
              └─ snapdragon:0.8.2
                    └─ debug:2.6.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Here's the Weekly Digest for 9renpoto/dotfiles:

ISSUES

Last week, no issues were created.

PULL REQUESTS

Last week, no pull requests were created, updated or merged.

COMMITS

Last week there were no commits.

CONTRIBUTORS

Last week there were no contributors.

STARGAZERS

Last week there were no stargazers.

RELEASES

Last week there were no releases.

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/dotfiles to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

CVE-2017-18342 - High Severity Vulnerability

Vulnerable Library - PyYAML-3.13.tar.gz

YAML parser and emitter for Python

path: /tmp/git/dotfiles/requirements.txt

Library home page: https://files.pythonhosted.org/packages/9e/a3/1d13970c3f36777c583f136c136f804d70f500168edc1edea6daa7200769/PyYAML-3.13.tar.gz

Dependency Hierarchy:

• vim_vint-0.3.19-py2.py3-none-any.whl (Root Library)
  • ❌ PyYAML-3.13.tar.gz (Vulnerable Library)

Vulnerability Details

In PyYAML before 4.1, the yaml.load() API could execute arbitrary code. In other words, yaml.safe_load is not used.

Publish Date: 2018-06-27

URL: CVE-2017-18342

CVSS 3 Score Details (9.8)

Base Score Metrics:

• Exploitability Metrics:
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
• Impact Metrics:
  • Confidentiality Impact: High
  • Integrity Impact: High
  • Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2017-18342

Release Date: 2018-06-27

Fix Resolution: 4.1

Step up your Open Source Security Game with WhiteSource here

Here's the Weekly Digest for 9renpoto/dotfiles:

ISSUES

Last week 5 issues were created.
Of these, 4 issues have been closed and 1 issues are still open.

OPEN ISSUES

💚 #216 [DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.6.9, by sonatype-depshield[bot]

CLOSED ISSUES

❤️ #219 Update dependency prettier to v1.18.2, by renovate[bot]
❤️ #218 Update dependency prettier to v1.18.0, by renovate[bot]
❤️ #217 Update dependency lint-staged to v8.2.0, by renovate[bot]
❤️ #215 Update dependency husky to v2.4.0, by renovate[bot]

NOISY ISSUE

🔈 #216 [DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.6.9, by sonatype-depshield[bot]
It received 1 comments.

PULL REQUESTS

Last week, 4 pull requests were created, updated or merged.

MERGED PULL REQUEST

Last week, 4 pull requests were merged.
💜 #219 Update dependency prettier to v1.18.2, by renovate[bot]
💜 #218 Update dependency prettier to v1.18.0, by renovate[bot]
💜 #217 Update dependency lint-staged to v8.2.0, by renovate[bot]
💜 #215 Update dependency husky to v2.4.0, by renovate[bot]

COMMITS

Last week there were 6 commits.
🛠️ Merge pull request #219 from 9renpoto/renovate/prettier-1.x Update dependency prettier to v1.18.2 by 9renpoto
🛠️ Update dependency prettier to v1.18.2 by renovate-bot
🛠️ Merge pull request #218 from 9renpoto/renovate/prettier-1.x Update dependency prettier to v1.18.0 by 9renpoto
🛠️ Update dependency prettier to v1.18.0 by renovate-bot
🛠️ Update dependency lint-staged to v8.2.0 by renovate-bot
🛠️ Update dependency husky to v2.4.0 by renovate-bot

CONTRIBUTORS

Last week there were 2 contributors.
👤 9renpoto
👤 renovate-bot

STARGAZERS

Last week there were no stargazers.

RELEASES

Last week there were no releases.

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/dotfiles to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

Here's the Weekly Digest for 9renpoto/dotfiles:

ISSUES

Last week, no issues were created.

PULL REQUESTS

Last week, no pull requests were created, updated or merged.

COMMITS

Last week there were no commits.

CONTRIBUTORS

Last week there were no contributors.

STARGAZERS

Last week there were no stargazers.

RELEASES

Last week there were no releases.

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/dotfiles to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

理由はないけれど

The project could not be analyzed because of maven build errors. Please review the error messages here. Another build will be scheduled within 24 hours. If the build is successful this issue will be closed, otherwise the error message will be updated.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

The project could not be analyzed because of build errors. Please review the error messages here. Another build will be scheduled within 24 hours. If the build is successful this issue will be closed, otherwise the error message will be updated.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

Here's the Weekly Digest for 9renpoto/dotfiles:

ISSUES

Last week 1 issue was created.
It is closed now.

CLOSED ISSUES

❤️ #224 feat(.github) Added auto assign, by 9renpoto

PULL REQUESTS

Last week, 1 pull request was created, updated or merged.

MERGED PULL REQUEST

Last week, 1 pull request was merged.
💜 #224 feat(.github) Added auto assign, by 9renpoto

COMMITS

Last week there were 2 commits.
🛠️ Merge pull request #224 from 9renpoto/fix/assignee feat(.github) Added auto assign by 9renpoto
🛠️ feat(.github) Added auto assign by 9renpoto

CONTRIBUTORS

Last week there was 1 contributor.
👤 9renpoto

STARGAZERS

Last week there were no stargazers.

RELEASES

Last week there were no releases.

That's all for last week, please 👀 Watch and ⭐ Star the repository 9renpoto/dotfiles to receive next weekly updates. 😃

You can also view all Weekly Digests by clicking here.

Your Weekly Digest bot. 📆

Vulnerabilities

DepShield reports that this application's usage of lodash.get:4.4.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.get:4.4.2 is a transitive dependency introduced by the following direct dependency(s):

• husky:1.3.1
        └─ cosmiconfig:5.1.0
              └─ lodash.get:4.4.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: undefined. Note: this is a nested preset so please contact the preset author if you are unable to fix it yourself.