frontend-collective / frontend-collective/react-sortable-tree

[potential Security Alert] New `storybook` script added in `react-sortable-tree-psh@1.5.2`

Open
#958 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
5k
Forks
914
PR merge metrics
No merged PRs in 30d

Description

A new `storybook` script was detected in version `1.5.2` of the package `react-sortable-tree-psh`.

**Suspicion Score:** 13/100

**Script content:**
```
cross-env TARGET=development start-storybook -p ${PORT:-3001} -h 0.0.0.0
```
see [npm documentation on package scripts](https://docs.npmjs.com/cli/v9/using-npm/scripts) for more details.
and [the detector](https://github.com/alphaleadership/npm-check). to understand why this script might be dangerous.
to get the alert only for dangerous scripts, please visit[the telegram](https://t.me/npmalert) if you want to improve the algorythm open a pull request
This could be a security risk. Please investigate.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.