Kong / Kong/workspace-config-apply-nodejs
'resolve' package version contains false positive for malware
Open
- Dominant language
- JavaScript
- Stars
- 5
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
https://github.com/browserify/resolve/issues/317
'monorepo-symlink-test' is a coincidence with malware. Updating package.json to require "resolve": "^1.22.8" should fix this
Contributor guide
Research direction
Start in package.json and inspect the current resolve dependency, then review the referenced resolve issue for the false-positive malware report. Done means the dependency requires resolve ^1.22.8 and the package configuration reflects that change.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- tooling
- Issue type
- Bug
- Difficulty
- 1/5
- Estimated time
- Under an hour
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 55/100