Security vulnerability found
Open
- Dominant language
- Python
- Stars
- 48
- Forks
- 11
- PR merge metrics
- No merged PRs in 30d
Description
Hello!
I'm a Cybersecurity researcher developing Packj [1]. Our tool has detected a supply-chain vulnerability in this repository. In order for me to disclose it, kindly enable GitHub Private vulnerability reporting, which allows security researchers to responsibly disclose a security vulnerability.
Thanks!
Packj detects malicious/"risky" NPM/PyPI/Ruby dependencies: https://github.com/ossillate-inc/packj
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.