eggjs / eggjs/egg

ChainAlert: Dependency "ahooks" version 3.3.8 has no matching tag in its git repo

Open
#4,927 0 comments 0 reactions 0 assignees View on GitHub
Inactive
Dominant language
TypeScript
Stars
19k
Forks
1.8k
PR merge metrics
No merged PRs in 30d

Description

[ChainAlert](https://github.com/Checkmarx/chainalert-github-action) has detected a [suspicious new release](https://npmjs.com/package/ahooks) in one of your project's dependencies - "ahooks" version "3.3.8" on npm has no matching tag in its [git repo](https://github.com/alibaba/hooks).

We've already alerted ahooks maintainers on https://github.com/alibaba/hooks/issues/1557

This is an automated notification by [ChainAlert](https://github.com/Checkmarx/chainalert-github-action), a free service for the Open Source community by [Checkmarx](https://github.com/checkmarx).
For any questions please contact us at supplychainsecurity@checkmarx.com

[![badge](https://user-images.githubusercontent.com/1287098/148130209-36364d84-63c0-411b-9216-2ffc5642d0f1.png)](https://github.com/checkmarx/chainalert-github-action)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.