eggjs / eggjs/egg

ChainAlert: Dependency "@umijs/test" version 4.0.0 has no matching tag in its git repo

Open
#4,971 0 comments 0 reactions 0 assignees View on GitHub
Inactive
Dominant language
TypeScript
Stars
19k
Forks
1.8k
PR merge metrics
No merged PRs in 30d

Description

[ChainAlert](https://github.com/Checkmarx/chainalert-github-action) has detected a [suspicious new release](https://npmjs.com/package/@umijs/test) in one of your project's dependencies - "@umijs/test" version "4.0.0" on npm has no matching tag in its [git repo](https://github.com/umijs/umi).

This is an automated notification by [ChainAlert](https://github.com/Checkmarx/chainalert-github-action), a free service for the Open Source community by [Checkmarx](https://github.com/checkmarx).
For any questions please contact us at supplychainsecurity@checkmarx.com

[![badge](https://user-images.githubusercontent.com/1287098/148130209-36364d84-63c0-411b-9216-2ffc5642d0f1.png)](https://github.com/checkmarx/chainalert-github-action)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.