ChainAlert: Dependency "@umijs/test" version 4.0.0 has no matching tag in its git repo
- Dominant language
- TypeScript
- Stars
- 19k
- Forks
- 1.8k
- PR merge metrics
- No merged PRs in 30d
Description
[ChainAlert](https://github.com/Checkmarx/chainalert-github-action) has detected a [suspicious new release](https://npmjs.com/package/@umijs/test) in one of your project's dependencies - "@umijs/test" version "4.0.0" on npm has no matching tag in its [git repo](https://github.com/umijs/umi).
This is an automated notification by [ChainAlert](https://github.com/Checkmarx/chainalert-github-action), a free service for the Open Source community by [Checkmarx](https://github.com/checkmarx).
For any questions please contact us at supplychainsecurity@checkmarx.com
[](https://github.com/checkmarx/chainalert-github-action)
Contributor guide
Assessment
This issue has not been assessed yet.