Skip to content

release: 14.2.0 - bump html-encoding-sniffer from 3.0.0 to 5.0.0 and bump node requirement as a result#12

Merged
maw629 merged 4 commits into
trunkfrom
chore/release-14.2.0
Jul 15, 2026
Merged

release: 14.2.0 - bump html-encoding-sniffer from 3.0.0 to 5.0.0 and bump node requirement as a result#12
maw629 merged 4 commits into
trunkfrom
chore/release-14.2.0

Conversation

@maw629

@maw629 maw629 commented Jul 14, 2026

Copy link
Copy Markdown

No description provided.

@maw629
maw629 marked this pull request as ready for review July 14, 2026 05:24
@maw629
maw629 force-pushed the chore/release-14.2.0 branch from 4681099 to 048b187 Compare July 14, 2026 11:32
@github-actions

github-actions Bot commented Jul 14, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
  • ⚠️ 1 packages with OpenSSF Scorecard issues.
See the Details below.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@exodus/bytes 1.15.1 UnknownUnknown
npm/html-encoding-sniffer 5.0.0 🟢 4.2
Details
CheckScoreReason
Code-Review⚠️ 1Found 3/21 approved changesets -- score normalized to 1
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies🟢 3dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Packaging🟢 10packaging workflow detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
npm/safer-buffer 2.1.2 ⚠️ 2.1
Details
CheckScoreReason
Code-Review⚠️ 1Found 4/30 approved changesets -- score normalized to 1
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ -1no workflows found
Token-Permissions⚠️ -1No tokens found
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • package-lock.json

@maw629
maw629 force-pushed the chore/release-14.2.0 branch from 048b187 to 15a5b41 Compare July 15, 2026 15:12
@maw629
maw629 merged commit 06e215c into trunk Jul 15, 2026
13 checks passed
@maw629
maw629 deleted the chore/release-14.2.0 branch July 15, 2026 15:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant