- 🇸🇰Slovakia kaszarobert
Okay, valid reasons but since the whole JS build process uses a few years old unsupported packages, the whole thing need to be redone from scratch with current tools instead.
CISA issued an advisory [1] regarding malware found in a recent release (0.7.29) of the ua-parser.js NPM package. The yarn lockfile distributed with Lightning Scheduler points to version 0.7.17 of ua-parser.js, which is not compromised.
Although this does not currently constitute a security issue with the module, consider requiring version 0.7.30 or later of the package as a safeguard.
[1] https://us-cert.cisa.gov/ncas/current-activity/2021/10/22/malware-discov...
Closed: outdated
1.3
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Okay, valid reasons but since the whole JS build process uses a few years old unsupported packages, the whole thing need to be redone from scratch with current tools instead.