Skip to content

fix: pin package.json dependencies instead of using latest (#48) - #49

Open
erhnysr wants to merge 1 commit into
circlefin:masterfrom
erhnysr:fix/pin-package-versions
Open

fix: pin package.json dependencies instead of using latest (#48)#49
erhnysr wants to merge 1 commit into
circlefin:masterfrom
erhnysr:fix/pin-package-versions

fix: pin package.json dependencies instead of using latest (#48)

21e2c22
Select commit
Loading
Failed to load commit list.
StepSecurity Actions Security / StepSecurity Required Checks succeeded Jul 26, 2026 in 0s

StepSecurity Required Checks

Finished StepSecurity Required Checks

  • NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
  • PyPI Compromised Packages Check - Checks for compromised PyPI package versions in the PR
  • PyPI Package Cooldown Check - Fails if any PyPI package version in the PR was released within the configured cooldown period

Details

✅ PyPI Package Cooldown Check

No PyPI package upgrades to recent releases found in current PR.

✅ PyPI Compromised Packages Check

No compromised PyPI package versions found in current PR.

✅ NPM Compromised Packages Check

No Compromised npm packages are added in current PR.