The typescript-fp from kfang

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Warning

These dependencies are deprecated:

Datasource	Name	Replacement PR?
npm	`npm-run-all`

Edited/Blocked

These updates have been manually edited so Renovate will no longer make changes. To discard all commits and start over, click on a checkbox.

chore(deps): Update all non-major dependencies (@types/jest, @types/node, @typescript-eslint/eslint-plugin, @typescript-eslint/parser, eslint, ts-jest, ts-node, typedoc, typescript)

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

Detected dependencies

github-actions

.github/workflows/publish.yml

actions/checkout v3

actions/setup-node v3

.github/workflows/test.yml

actions/checkout v3

actions/setup-node v3

npm

package.json

@tsconfig/node14 ^1.0.3

@types/jest ^29.5.5

@types/node ^14.18.32

@typescript-eslint/eslint-plugin ^6.7.5

@typescript-eslint/parser ^6.7.5

eslint ^8.51.0

gh-pages ^4.0.0

jest ^29.7.0

npm-run-all ^4.1.5

semantic-release ^19.0.5

ts-jest ^29.1.1

ts-node ^10.9.1

typedoc ^0.25.2

typescript ^5.2.2

nvm

.nvmrc

Check this box to trigger a request for Renovate to run again on this repository

Success.map and Success.flatmap on the Try object should catch errors an convert them to Failures

I'm submitting a ...
[x] bug report
[ ] feature request
[ ] question about the decisions made in the repository
[ ] question about how to use this project
Summary
I would like to be able to do

Try.of(() => "some value")
  .map((s) => {
    if (!validate(s)) {
      throw new Error();
    }
    return s;
  });

and have it properly convert to a Failure object instead of throwing

Other information (e.g. detailed explanation, stacktraces, related issues, suggestions how to fix, links for us to have context, eg. StackOverflow, personal fork, etc.)

CVE-2021-35065 (High) detected in glob-parent-5.1.2.tgz - autoclosed

CVE-2021-35065 - High Severity Vulnerability

Vulnerable Library - glob-parent-5.1.2.tgz

Extract the non-magic parent path from a glob string.

Library home page: https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.2.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/glob-parent/package.json

Dependency Hierarchy:

parser-5.18.0.tgz (Root Library)
- typescript-estree-5.18.0.tgz
  - globby-11.1.0.tgz
    - fast-glob-3.2.11.tgz
      - ❌ glob-parent-5.1.2.tgz (Vulnerable Library)

Found in base branch: master

Vulnerability Details

The package glob-parent before 6.0.1 are vulnerable to Regular Expression Denial of Service (ReDoS)

Publish Date: 2021-06-22

URL: CVE-2021-35065

CVSS 3 Score Details (7.5)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: GHSA-cj88-88mr-972w

Release Date: 2021-06-22

Fix Resolution (glob-parent): 6.0.1

Direct dependency fix Resolution (@typescript-eslint/parser): 5.19.0

Step up your Open Source Security Game with Mend here

CVE-2021-43138 (High) detected in async-2.6.3.tgz - autoclosed

CVE-2021-43138 - High Severity Vulnerability

Vulnerable Library - async-2.6.3.tgz

Higher-order functions and common patterns for asynchronous code

Library home page: https://registry.npmjs.org/async/-/async-2.6.3.tgz

Path to dependency file: /package.json

Path to vulnerable library: /node_modules/async/package.json

Dependency Hierarchy:

gh-pages-3.2.3.tgz (Root Library)
- ❌ async-2.6.3.tgz (Vulnerable Library)

Found in base branch: master

Vulnerability Details

In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.

Publish Date: 2022-04-06

URL: CVE-2021-43138

CVSS 3 Score Details (7.8)

Base Score Metrics:

Exploitability Metrics:
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Scope: Unchanged
Impact Metrics:
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: High

For more information on CVSS3 Scores, click here.

Suggested Fix

Type: Upgrade version

Origin: https://nvd.nist.gov/vuln/detail/CVE-2021-43138

Release Date: 2022-04-06

Fix Resolution (async): 2.6.4

Direct dependency fix Resolution (gh-pages): 4.0.0

Step up your Open Source Security Game with Mend here

kfang / typescript-fp Goto Github PK

typescript-fp's People

Contributors

Stargazers

Watchers

Forkers

typescript-fp's Issues

Dependency Dashboard

Edited/Blocked

Open

Detected dependencies

Success.map and Success.flatmap on the Try object should catch errors an convert them to Failures

CVE-2021-35065 (High) detected in glob-parent-5.1.2.tgz - autoclosed

CVE-2021-35065 - High Severity Vulnerability

CVE-2021-43138 (High) detected in async-2.6.3.tgz - autoclosed

CVE-2021-43138 - High Severity Vulnerability

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent