This run took 155 seconds.
From 746267483e4c2bac5e26d17ff50818508d91fef2 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Mon, 13 Apr 2026 12:21:11 +0000
Subject: [PATCH] [DNM] there are no updates
Change-Id: I8688066df5371f9cb9a1531625ea76c3a5d39ae8
---
package-lock.json | 18 ++++++++----------
1 file changed, 8 insertions(+), 10 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 8dcebd3..bdef4e9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4685,13 +4685,12 @@
}
},
"node_modules/grunt-legacy-log-utils": {
- "version": "2.1.0",
- "resolved": "https://registry.npmjs.org/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.1.0.tgz",
- "integrity": "sha512-lwquaPXJtKQk0rUM1IQAop5noEpwFqOXasVoedLeNzaibf/OPWjKYvvdqnEHNmU+0T0CaReAXIbGo747ZD+Aaw==",
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.1.3.tgz",
+ "integrity": "sha512-sgG+QvKmdb44wZyzJP+ejDsy3jYxG2wzohpol+JTMlXqMUBDoZb01JPQ5jKAedtZBFwhmABAc88T9hEBLy3U+Q==",
"dev": true,
"dependencies": {
- "chalk": "~4.1.0",
- "lodash": "~4.17.19"
+ "chalk": "^4.1.0"
},
"engines": {
"node": ">=10"
@@ -13113,13 +13112,12 @@
}
},
"grunt-legacy-log-utils": {
- "version": "2.1.0",
- "resolved": "https://registry.npmjs.org/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.1.0.tgz",
- "integrity": "sha512-lwquaPXJtKQk0rUM1IQAop5noEpwFqOXasVoedLeNzaibf/OPWjKYvvdqnEHNmU+0T0CaReAXIbGo747ZD+Aaw==",
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.1.3.tgz",
+ "integrity": "sha512-sgG+QvKmdb44wZyzJP+ejDsy3jYxG2wzohpol+JTMlXqMUBDoZb01JPQ5jKAedtZBFwhmABAc88T9hEBLy3U+Q==",
"dev": true,
"requires": {
- "chalk": "~4.1.0",
- "lodash": "~4.17.19"
+ "chalk": "^4.1.0"
}
},
"grunt-legacy-util": {
--
2.47.3
$ date
--- stdout ---
Mon Apr 13 12:18:44 UTC 2026
--- end ---
$ git clone file:///srv/git/oojs-ui.git /src/repo --depth=1 -b master
--- stderr ---
Cloning into '/src/repo'...
--- stdout ---
--- end ---
$ git config user.name libraryupgrader
--- stdout ---
--- end ---
$ git config user.email tools.libraryupgrader@tools.wmflabs.org
--- stdout ---
--- end ---
$ git submodule update --init
--- stdout ---
--- end ---
$ grr init
--- stdout ---
Installed commit-msg hook.
--- end ---
$ git show-ref refs/heads/master
--- stdout ---
36d25ff7ea115ecd4c68927d724ddada8e522376 refs/heads/master
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"gaze": {
"name": "gaze",
"severity": "high",
"isDirect": false,
"via": [
"globule"
],
"effects": [
"grunt-contrib-watch"
],
"range": ">=0.4.0",
"nodes": [
"node_modules/gaze"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"globule": {
"name": "globule",
"severity": "high",
"isDirect": false,
"via": [
"minimatch"
],
"effects": [
"gaze"
],
"range": "*",
"nodes": [
"node_modules/globule"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt": {
"name": "grunt",
"severity": "high",
"isDirect": true,
"via": [
"grunt-legacy-log",
"grunt-legacy-util",
"minimatch"
],
"effects": [
"grunt-contrib-clean",
"grunt-contrib-concat",
"grunt-cssjanus",
"grunt-eslint",
"grunt-exec",
"grunt-file-exists",
"grunt-karma",
"grunt-promise-q"
],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt"
],
"fixAvailable": false
},
"grunt-contrib-clean": {
"name": "grunt-contrib-clean",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt-contrib-clean"
],
"fixAvailable": {
"name": "grunt-contrib-clean",
"version": "0.3.2",
"isSemVerMajor": true
}
},
"grunt-contrib-concat": {
"name": "grunt-contrib-concat",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.1.2-rc5",
"nodes": [
"node_modules/grunt-contrib-concat"
],
"fixAvailable": {
"name": "grunt-contrib-concat",
"version": "0.1.1",
"isSemVerMajor": true
}
},
"grunt-contrib-watch": {
"name": "grunt-contrib-watch",
"severity": "high",
"isDirect": true,
"via": [
"gaze"
],
"effects": [],
"range": ">=0.5.0",
"nodes": [
"node_modules/grunt-contrib-watch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt-cssjanus": {
"name": "grunt-cssjanus",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-cssjanus"
],
"fixAvailable": false
},
"grunt-eslint": {
"name": "grunt-eslint",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "<=1.0.0 || >=18.1.0",
"nodes": [
"node_modules/grunt-eslint"
],
"fixAvailable": {
"name": "grunt-eslint",
"version": "18.0.0",
"isSemVerMajor": true
}
},
"grunt-exec": {
"name": "grunt-exec",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-rc1",
"nodes": [
"node_modules/grunt-exec"
],
"fixAvailable": {
"name": "grunt-exec",
"version": "0.3.0",
"isSemVerMajor": true
}
},
"grunt-file-exists": {
"name": "grunt-file-exists",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-file-exists"
],
"fixAvailable": false
},
"grunt-karma": {
"name": "grunt-karma",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-karma"
],
"fixAvailable": false
},
"grunt-legacy-log": {
"name": "grunt-legacy-log",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.1",
"nodes": [
"node_modules/grunt-legacy-log"
],
"fixAvailable": false
},
"grunt-legacy-log-utils": {
"name": "grunt-legacy-log-utils",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [],
"range": "1.0.0 - 2.1.0",
"nodes": [
"node_modules/grunt-legacy-log-utils"
],
"fixAvailable": true
},
"grunt-legacy-util": {
"name": "grunt-legacy-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.0-rc1",
"nodes": [
"node_modules/grunt-legacy-util"
],
"fixAvailable": false
},
"grunt-promise-q": {
"name": "grunt-promise-q",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-promise-q"
],
"fixAvailable": false
},
"gulp-util": {
"name": "gulp-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash.template"
],
"effects": [
"remap-istanbul"
],
"range": ">=1.1.0",
"nodes": [
"node_modules/gulp-util"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"karma-remap-istanbul": {
"name": "karma-remap-istanbul",
"severity": "high",
"isDirect": true,
"via": [
"remap-istanbul"
],
"effects": [],
"range": ">=0.0.3",
"nodes": [
"node_modules/karma-remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"lodash": {
"name": "lodash",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115806,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Code Injection via `_.template` imports key names",
"url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc",
"severity": "high",
"cwe": [
"CWE-94"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.17.23"
},
{
"source": 1115810,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`",
"url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
},
"range": "<=4.17.23"
}
],
"effects": [
"grunt-legacy-log",
"grunt-legacy-log-utils",
"grunt-legacy-util"
],
"range": "<=4.17.23",
"nodes": [
"node_modules/lodash"
],
"fixAvailable": false
},
"lodash.template": {
"name": "lodash.template",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1106902,
"name": "lodash.template",
"dependency": "lodash.template",
"title": "Command Injection in lodash",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"severity": "high",
"cwe": [
"CWE-77",
"CWE-94"
],
"cvss": {
"score": 7.2,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
"range": "<=4.5.0"
}
],
"effects": [
"gulp-util"
],
"range": "<=4.5.0",
"nodes": [
"node_modules/lodash.template"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"meow": {
"name": "meow",
"severity": "high",
"isDirect": false,
"via": [
"trim-newlines"
],
"effects": [],
"range": "3.4.0 - 5.0.0",
"nodes": [
"node_modules/gulp-util/node_modules/meow"
],
"fixAvailable": true
},
"minimatch": {
"name": "minimatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113459,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<3.1.3"
},
{
"source": 1113538,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.3"
},
{
"source": 1113546,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.4"
}
],
"effects": [
"globule",
"grunt"
],
"range": "<=3.1.3",
"nodes": [
"node_modules/minimatch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"remap-istanbul": {
"name": "remap-istanbul",
"severity": "high",
"isDirect": false,
"via": [
"gulp-util"
],
"effects": [
"karma-remap-istanbul"
],
"range": "<=0.9.6",
"nodes": [
"node_modules/remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"trim-newlines": {
"name": "trim-newlines",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1095100,
"name": "trim-newlines",
"dependency": "trim-newlines",
"title": "Uncontrolled Resource Consumption in trim-newlines",
"url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v",
"severity": "high",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.0.1"
}
],
"effects": [
"meow"
],
"range": "<3.0.1",
"nodes": [
"node_modules/trim-newlines"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 23,
"critical": 0,
"total": 23
},
"dependencies": {
"prod": 4,
"dev": 811,
"optional": 11,
"peer": 2,
"peerOptional": 0,
"total": 814
}
}
}
--- end ---
$ /usr/bin/composer install
--- stderr ---
No composer.lock file present. Updating dependencies to latest instead of installing from lock file. See https://getcomposer.org/install for more information.
Loading composer repositories with package information
Updating dependencies
Lock file operations: 64 installs, 0 updates, 0 removals
- Locking composer/pcre (3.3.2)
- Locking composer/semver (3.4.4)
- Locking composer/spdx-licenses (1.5.10)
- Locking composer/xdebug-handler (3.0.5)
- Locking danog/advanced-json-rpc (v3.2.3)
- Locking dealerdirect/phpcodesniffer-composer-installer (v1.2.0)
- Locking doctrine/deprecations (1.1.6)
- Locking mediawiki/mediawiki-codesniffer (v50.0.0)
- Locking mediawiki/mediawiki-phan-config (0.20.0)
- Locking mediawiki/minus-x (2.0.1)
- Locking mediawiki/phan-taint-check-plugin (9.1.0)
- Locking myclabs/deep-copy (1.13.4)
- Locking netresearch/jsonmapper (v5.0.1)
- Locking nikic/php-parser (v5.7.0)
- Locking ockcyp/covers-validator (v1.7.0)
- Locking phan/phan (6.0.2)
- Locking phan/tolerant-php-parser (v0.2.0)
- Locking phan/var_representation_polyfill (0.1.4)
- Locking phar-io/manifest (2.0.4)
- Locking phar-io/version (3.2.1)
- Locking php-parallel-lint/php-console-color (v1.0.1)
- Locking php-parallel-lint/php-console-highlighter (v1.0.0)
- Locking php-parallel-lint/php-parallel-lint (v1.4.0)
- Locking phpcsstandards/phpcsextra (1.4.0)
- Locking phpcsstandards/phpcsutils (1.2.2)
- Locking phpdocumentor/reflection-common (2.2.0)
- Locking phpdocumentor/reflection-docblock (6.0.3)
- Locking phpdocumentor/type-resolver (2.0.0)
- Locking phpstan/phpdoc-parser (2.3.2)
- Locking phpunit/php-code-coverage (10.1.16)
- Locking phpunit/php-file-iterator (4.1.0)
- Locking phpunit/php-invoker (4.0.0)
- Locking phpunit/php-text-template (3.0.1)
- Locking phpunit/php-timer (6.0.0)
- Locking phpunit/phpunit (10.5.63)
- Locking psr/container (2.0.2)
- Locking psr/log (3.0.2)
- Locking sabre/event (6.0.1)
- Locking sebastian/cli-parser (2.0.1)
- Locking sebastian/code-unit (2.0.0)
- Locking sebastian/code-unit-reverse-lookup (3.0.0)
- Locking sebastian/comparator (5.0.5)
- Locking sebastian/complexity (3.2.0)
- Locking sebastian/diff (5.1.1)
- Locking sebastian/environment (6.1.0)
- Locking sebastian/exporter (5.1.4)
- Locking sebastian/global-state (6.0.2)
- Locking sebastian/lines-of-code (2.0.2)
- Locking sebastian/object-enumerator (5.0.0)
- Locking sebastian/object-reflector (3.0.0)
- Locking sebastian/recursion-context (5.0.1)
- Locking sebastian/type (4.0.0)
- Locking sebastian/version (4.0.1)
- Locking squizlabs/php_codesniffer (3.13.5)
- Locking symfony/console (v6.4.36)
- Locking symfony/deprecation-contracts (v3.6.0)
- Locking symfony/polyfill-ctype (v1.34.0)
- Locking symfony/polyfill-intl-grapheme (v1.34.0)
- Locking symfony/polyfill-intl-normalizer (v1.34.0)
- Locking symfony/polyfill-mbstring (v1.34.0)
- Locking symfony/service-contracts (v3.6.1)
- Locking symfony/string (v7.4.8)
- Locking theseer/tokenizer (1.3.1)
- Locking webmozart/assert (2.3.0)
Writing lock file
Installing dependencies from lock file (including require-dev)
Package operations: 64 installs, 0 updates, 0 removals
0 [>---------------------------] 0 [->--------------------------]
- Installing squizlabs/php_codesniffer (3.13.5): Extracting archive
- Installing dealerdirect/phpcodesniffer-composer-installer (v1.2.0): Extracting archive
- Installing composer/pcre (3.3.2): Extracting archive
- Installing phpcsstandards/phpcsutils (1.2.2): Extracting archive
- Installing phpcsstandards/phpcsextra (1.4.0): Extracting archive
- Installing symfony/polyfill-mbstring (v1.34.0): Extracting archive
- Installing composer/spdx-licenses (1.5.10): Extracting archive
- Installing composer/semver (3.4.4): Extracting archive
- Installing mediawiki/mediawiki-codesniffer (v50.0.0): Extracting archive
- Installing symfony/polyfill-intl-normalizer (v1.34.0): Extracting archive
- Installing symfony/polyfill-intl-grapheme (v1.34.0): Extracting archive
- Installing symfony/polyfill-ctype (v1.34.0): Extracting archive
- Installing symfony/deprecation-contracts (v3.6.0): Extracting archive
- Installing symfony/string (v7.4.8): Extracting archive
- Installing psr/container (2.0.2): Extracting archive
- Installing symfony/service-contracts (v3.6.1): Extracting archive
- Installing symfony/console (v6.4.36): Extracting archive
- Installing sabre/event (6.0.1): Extracting archive
- Installing phan/var_representation_polyfill (0.1.4): Extracting archive
- Installing phan/tolerant-php-parser (v0.2.0): Extracting archive
- Installing netresearch/jsonmapper (v5.0.1): Extracting archive
- Installing webmozart/assert (2.3.0): Extracting archive
- Installing phpstan/phpdoc-parser (2.3.2): Extracting archive
- Installing phpdocumentor/reflection-common (2.2.0): Extracting archive
- Installing doctrine/deprecations (1.1.6): Extracting archive
- Installing phpdocumentor/type-resolver (2.0.0): Extracting archive
- Installing phpdocumentor/reflection-docblock (6.0.3): Extracting archive
- Installing danog/advanced-json-rpc (v3.2.3): Extracting archive
- Installing psr/log (3.0.2): Extracting archive
- Installing composer/xdebug-handler (3.0.5): Extracting archive
- Installing phan/phan (6.0.2): Extracting archive
- Installing mediawiki/phan-taint-check-plugin (9.1.0): Extracting archive
- Installing mediawiki/mediawiki-phan-config (0.20.0): Extracting archive
- Installing mediawiki/minus-x (2.0.1): Extracting archive
- Installing sebastian/version (4.0.1): Extracting archive
- Installing sebastian/type (4.0.0): Extracting archive
- Installing sebastian/recursion-context (5.0.1): Extracting archive
- Installing sebastian/object-reflector (3.0.0): Extracting archive
- Installing sebastian/object-enumerator (5.0.0): Extracting archive
- Installing sebastian/global-state (6.0.2): Extracting archive
- Installing sebastian/exporter (5.1.4): Extracting archive
- Installing sebastian/environment (6.1.0): Extracting archive
- Installing sebastian/diff (5.1.1): Extracting archive
- Installing sebastian/comparator (5.0.5): Extracting archive
- Installing sebastian/code-unit (2.0.0): Extracting archive
- Installing sebastian/cli-parser (2.0.1): Extracting archive
- Installing phpunit/php-timer (6.0.0): Extracting archive
- Installing phpunit/php-text-template (3.0.1): Extracting archive
- Installing phpunit/php-invoker (4.0.0): Extracting archive
- Installing phpunit/php-file-iterator (4.1.0): Extracting archive
- Installing theseer/tokenizer (1.3.1): Extracting archive
- Installing nikic/php-parser (v5.7.0): Extracting archive
- Installing sebastian/lines-of-code (2.0.2): Extracting archive
- Installing sebastian/complexity (3.2.0): Extracting archive
- Installing sebastian/code-unit-reverse-lookup (3.0.0): Extracting archive
- Installing phpunit/php-code-coverage (10.1.16): Extracting archive
- Installing phar-io/version (3.2.1): Extracting archive
- Installing phar-io/manifest (2.0.4): Extracting archive
- Installing myclabs/deep-copy (1.13.4): Extracting archive
- Installing phpunit/phpunit (10.5.63): Extracting archive
- Installing ockcyp/covers-validator (v1.7.0): Extracting archive
- Installing php-parallel-lint/php-console-color (v1.0.1): Extracting archive
- Installing php-parallel-lint/php-console-highlighter (v1.0.0): Extracting archive
- Installing php-parallel-lint/php-parallel-lint (v1.4.0): Extracting archive
0/62 [>---------------------------] 0%
27/62 [============>---------------] 43%
45/62 [====================>-------] 72%
59/62 [==========================>-] 95%
62/62 [============================] 100%
3 package suggestions were added by new dependencies, use `composer suggest` to see details.
Generating autoload files
40 packages you are using are looking for funding.
Use the `composer fund` command to find out more!
--- stdout ---
PHP CodeSniffer Config installed_paths set to ../../mediawiki/mediawiki-codesniffer,../../phpcsstandards/phpcsextra,../../phpcsstandards/phpcsutils
--- end ---
$ /usr/bin/npm audit --json
--- stdout ---
{
"auditReportVersion": 2,
"vulnerabilities": {
"gaze": {
"name": "gaze",
"severity": "high",
"isDirect": false,
"via": [
"globule"
],
"effects": [
"grunt-contrib-watch"
],
"range": ">=0.4.0",
"nodes": [
"node_modules/gaze"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"globule": {
"name": "globule",
"severity": "high",
"isDirect": false,
"via": [
"minimatch"
],
"effects": [
"gaze"
],
"range": "*",
"nodes": [
"node_modules/globule"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt": {
"name": "grunt",
"severity": "high",
"isDirect": true,
"via": [
"grunt-legacy-log",
"grunt-legacy-util",
"minimatch"
],
"effects": [
"grunt-contrib-clean",
"grunt-contrib-concat",
"grunt-cssjanus",
"grunt-eslint",
"grunt-exec",
"grunt-file-exists",
"grunt-karma",
"grunt-promise-q"
],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt"
],
"fixAvailable": false
},
"grunt-contrib-clean": {
"name": "grunt-contrib-clean",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt-contrib-clean"
],
"fixAvailable": {
"name": "grunt-contrib-clean",
"version": "0.3.2",
"isSemVerMajor": true
}
},
"grunt-contrib-concat": {
"name": "grunt-contrib-concat",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.1.2-rc5",
"nodes": [
"node_modules/grunt-contrib-concat"
],
"fixAvailable": {
"name": "grunt-contrib-concat",
"version": "0.1.1",
"isSemVerMajor": true
}
},
"grunt-contrib-watch": {
"name": "grunt-contrib-watch",
"severity": "high",
"isDirect": true,
"via": [
"gaze"
],
"effects": [],
"range": ">=0.5.0",
"nodes": [
"node_modules/grunt-contrib-watch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt-cssjanus": {
"name": "grunt-cssjanus",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-cssjanus"
],
"fixAvailable": false
},
"grunt-eslint": {
"name": "grunt-eslint",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "<=1.0.0 || >=18.1.0",
"nodes": [
"node_modules/grunt-eslint"
],
"fixAvailable": {
"name": "grunt-eslint",
"version": "18.0.0",
"isSemVerMajor": true
}
},
"grunt-exec": {
"name": "grunt-exec",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-rc1",
"nodes": [
"node_modules/grunt-exec"
],
"fixAvailable": {
"name": "grunt-exec",
"version": "0.3.0",
"isSemVerMajor": true
}
},
"grunt-file-exists": {
"name": "grunt-file-exists",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-file-exists"
],
"fixAvailable": false
},
"grunt-karma": {
"name": "grunt-karma",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-karma"
],
"fixAvailable": false
},
"grunt-legacy-log": {
"name": "grunt-legacy-log",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.1",
"nodes": [
"node_modules/grunt-legacy-log"
],
"fixAvailable": false
},
"grunt-legacy-log-utils": {
"name": "grunt-legacy-log-utils",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [],
"range": "1.0.0 - 2.1.0",
"nodes": [
"node_modules/grunt-legacy-log-utils"
],
"fixAvailable": true
},
"grunt-legacy-util": {
"name": "grunt-legacy-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.0-rc1",
"nodes": [
"node_modules/grunt-legacy-util"
],
"fixAvailable": false
},
"grunt-promise-q": {
"name": "grunt-promise-q",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-promise-q"
],
"fixAvailable": false
},
"gulp-util": {
"name": "gulp-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash.template"
],
"effects": [
"remap-istanbul"
],
"range": ">=1.1.0",
"nodes": [
"node_modules/gulp-util"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"karma-remap-istanbul": {
"name": "karma-remap-istanbul",
"severity": "high",
"isDirect": true,
"via": [
"remap-istanbul"
],
"effects": [],
"range": ">=0.0.3",
"nodes": [
"node_modules/karma-remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"lodash": {
"name": "lodash",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115806,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Code Injection via `_.template` imports key names",
"url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc",
"severity": "high",
"cwe": [
"CWE-94"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.17.23"
},
{
"source": 1115810,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`",
"url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
},
"range": "<=4.17.23"
}
],
"effects": [
"grunt-legacy-log",
"grunt-legacy-log-utils",
"grunt-legacy-util"
],
"range": "<=4.17.23",
"nodes": [
"node_modules/lodash"
],
"fixAvailable": false
},
"lodash.template": {
"name": "lodash.template",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1106902,
"name": "lodash.template",
"dependency": "lodash.template",
"title": "Command Injection in lodash",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"severity": "high",
"cwe": [
"CWE-77",
"CWE-94"
],
"cvss": {
"score": 7.2,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
"range": "<=4.5.0"
}
],
"effects": [
"gulp-util"
],
"range": "<=4.5.0",
"nodes": [
"node_modules/lodash.template"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"meow": {
"name": "meow",
"severity": "high",
"isDirect": false,
"via": [
"trim-newlines"
],
"effects": [],
"range": "3.4.0 - 5.0.0",
"nodes": [
"node_modules/gulp-util/node_modules/meow"
],
"fixAvailable": true
},
"minimatch": {
"name": "minimatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113459,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<3.1.3"
},
{
"source": 1113538,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.3"
},
{
"source": 1113546,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.4"
}
],
"effects": [
"globule",
"grunt"
],
"range": "<=3.1.3",
"nodes": [
"node_modules/minimatch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"remap-istanbul": {
"name": "remap-istanbul",
"severity": "high",
"isDirect": false,
"via": [
"gulp-util"
],
"effects": [
"karma-remap-istanbul"
],
"range": "<=0.9.6",
"nodes": [
"node_modules/remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"trim-newlines": {
"name": "trim-newlines",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1095100,
"name": "trim-newlines",
"dependency": "trim-newlines",
"title": "Uncontrolled Resource Consumption in trim-newlines",
"url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v",
"severity": "high",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.0.1"
}
],
"effects": [
"meow"
],
"range": "<3.0.1",
"nodes": [
"node_modules/trim-newlines"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 23,
"critical": 0,
"total": 23
},
"dependencies": {
"prod": 4,
"dev": 811,
"optional": 11,
"peer": 2,
"peerOptional": 0,
"total": 814
}
}
}
--- end ---
Attempting to npm audit fix
$ /usr/bin/npm audit fix --dry-run --only=dev --json
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
--- stdout ---
{
"added": 814,
"removed": 0,
"changed": 0,
"audited": 815,
"funding": 128,
"audit": {
"auditReportVersion": 2,
"vulnerabilities": {
"gaze": {
"name": "gaze",
"severity": "high",
"isDirect": false,
"via": [
"globule"
],
"effects": [
"grunt-contrib-watch"
],
"range": ">=0.4.0",
"nodes": [
"node_modules/gaze"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"globule": {
"name": "globule",
"severity": "high",
"isDirect": false,
"via": [
"minimatch"
],
"effects": [
"gaze"
],
"range": "*",
"nodes": [
"node_modules/globule"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt": {
"name": "grunt",
"severity": "high",
"isDirect": true,
"via": [
"grunt-legacy-log",
"grunt-legacy-util",
"minimatch"
],
"effects": [
"grunt-contrib-clean",
"grunt-contrib-concat",
"grunt-cssjanus",
"grunt-eslint",
"grunt-exec",
"grunt-file-exists",
"grunt-karma",
"grunt-promise-q"
],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt"
],
"fixAvailable": false
},
"grunt-contrib-clean": {
"name": "grunt-contrib-clean",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-a",
"nodes": [
"node_modules/grunt-contrib-clean"
],
"fixAvailable": {
"name": "grunt-contrib-clean",
"version": "0.3.2",
"isSemVerMajor": true
}
},
"grunt-contrib-concat": {
"name": "grunt-contrib-concat",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.1.2-rc5",
"nodes": [
"node_modules/grunt-contrib-concat"
],
"fixAvailable": {
"name": "grunt-contrib-concat",
"version": "0.1.1",
"isSemVerMajor": true
}
},
"grunt-contrib-watch": {
"name": "grunt-contrib-watch",
"severity": "high",
"isDirect": true,
"via": [
"gaze"
],
"effects": [],
"range": ">=0.5.0",
"nodes": [
"node_modules/grunt-contrib-watch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"grunt-cssjanus": {
"name": "grunt-cssjanus",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-cssjanus"
],
"fixAvailable": false
},
"grunt-eslint": {
"name": "grunt-eslint",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "<=1.0.0 || >=18.1.0",
"nodes": [
"node_modules/grunt-eslint"
],
"fixAvailable": {
"name": "grunt-eslint",
"version": "18.0.0",
"isSemVerMajor": true
}
},
"grunt-exec": {
"name": "grunt-exec",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": ">=0.4.0-rc1",
"nodes": [
"node_modules/grunt-exec"
],
"fixAvailable": {
"name": "grunt-exec",
"version": "0.3.0",
"isSemVerMajor": true
}
},
"grunt-file-exists": {
"name": "grunt-file-exists",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-file-exists"
],
"fixAvailable": false
},
"grunt-karma": {
"name": "grunt-karma",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-karma"
],
"fixAvailable": false
},
"grunt-legacy-log": {
"name": "grunt-legacy-log",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.1",
"nodes": [
"node_modules/grunt-legacy-log"
],
"fixAvailable": false
},
"grunt-legacy-log-utils": {
"name": "grunt-legacy-log-utils",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [],
"range": "1.0.0 - 2.1.0",
"nodes": [
""
],
"fixAvailable": true
},
"grunt-legacy-util": {
"name": "grunt-legacy-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash"
],
"effects": [
"grunt"
],
"range": ">=1.0.0-rc1",
"nodes": [
"node_modules/grunt-legacy-util"
],
"fixAvailable": false
},
"grunt-promise-q": {
"name": "grunt-promise-q",
"severity": "high",
"isDirect": true,
"via": [
"grunt"
],
"effects": [],
"range": "*",
"nodes": [
"node_modules/grunt-promise-q"
],
"fixAvailable": false
},
"gulp-util": {
"name": "gulp-util",
"severity": "high",
"isDirect": false,
"via": [
"lodash.template"
],
"effects": [
"remap-istanbul"
],
"range": ">=1.1.0",
"nodes": [
"node_modules/gulp-util"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"karma-remap-istanbul": {
"name": "karma-remap-istanbul",
"severity": "high",
"isDirect": true,
"via": [
"remap-istanbul"
],
"effects": [],
"range": ">=0.0.3",
"nodes": [
"node_modules/karma-remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"lodash": {
"name": "lodash",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1115806,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Code Injection via `_.template` imports key names",
"url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc",
"severity": "high",
"cwe": [
"CWE-94"
],
"cvss": {
"score": 8.1,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
"range": ">=4.0.0 <=4.17.23"
},
{
"source": 1115810,
"name": "lodash",
"dependency": "lodash",
"title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`",
"url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh",
"severity": "moderate",
"cwe": [
"CWE-1321"
],
"cvss": {
"score": 6.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
},
"range": "<=4.17.23"
}
],
"effects": [
"grunt-legacy-log",
"grunt-legacy-log-utils",
"grunt-legacy-util"
],
"range": "<=4.17.23",
"nodes": [
"node_modules/lodash"
],
"fixAvailable": false
},
"lodash.template": {
"name": "lodash.template",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1106902,
"name": "lodash.template",
"dependency": "lodash.template",
"title": "Command Injection in lodash",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"severity": "high",
"cwe": [
"CWE-77",
"CWE-94"
],
"cvss": {
"score": 7.2,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
"range": "<=4.5.0"
}
],
"effects": [
"gulp-util"
],
"range": "<=4.5.0",
"nodes": [
"node_modules/lodash.template"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"meow": {
"name": "meow",
"severity": "high",
"isDirect": false,
"via": [
"trim-newlines"
],
"effects": [],
"range": "3.4.0 - 5.0.0",
"nodes": [
"node_modules/gulp-util/node_modules/meow"
],
"fixAvailable": true
},
"minimatch": {
"name": "minimatch",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1113459,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 0,
"vectorString": null
},
"range": "<3.1.3"
},
{
"source": 1113538,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments",
"url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj",
"severity": "high",
"cwe": [
"CWE-407"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.3"
},
{
"source": 1113546,
"name": "minimatch",
"dependency": "minimatch",
"title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions",
"url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74",
"severity": "high",
"cwe": [
"CWE-1333"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.1.4"
}
],
"effects": [
"globule",
"grunt"
],
"range": "<=3.1.3",
"nodes": [
"node_modules/minimatch"
],
"fixAvailable": {
"name": "grunt-contrib-watch",
"version": "0.4.4",
"isSemVerMajor": true
}
},
"remap-istanbul": {
"name": "remap-istanbul",
"severity": "high",
"isDirect": false,
"via": [
"gulp-util"
],
"effects": [
"karma-remap-istanbul"
],
"range": "<=0.9.6",
"nodes": [
"node_modules/remap-istanbul"
],
"fixAvailable": {
"name": "karma-remap-istanbul",
"version": "0.0.2",
"isSemVerMajor": true
}
},
"trim-newlines": {
"name": "trim-newlines",
"severity": "high",
"isDirect": false,
"via": [
{
"source": 1095100,
"name": "trim-newlines",
"dependency": "trim-newlines",
"title": "Uncontrolled Resource Consumption in trim-newlines",
"url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v",
"severity": "high",
"cwe": [
"CWE-400"
],
"cvss": {
"score": 7.5,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
"range": "<3.0.1"
}
],
"effects": [
"meow"
],
"range": "<3.0.1",
"nodes": [
"node_modules/trim-newlines"
],
"fixAvailable": true
}
},
"metadata": {
"vulnerabilities": {
"info": 0,
"low": 0,
"moderate": 0,
"high": 23,
"critical": 0,
"total": 23
},
"dependencies": {
"prod": 4,
"dev": 811,
"optional": 11,
"peer": 2,
"peerOptional": 0,
"total": 814
}
}
}
}
--- end ---
{"added": 814, "removed": 0, "changed": 0, "audited": 815, "funding": 128, "audit": {"auditReportVersion": 2, "vulnerabilities": {"gaze": {"name": "gaze", "severity": "high", "isDirect": false, "via": ["globule"], "effects": ["grunt-contrib-watch"], "range": ">=0.4.0", "nodes": ["node_modules/gaze"], "fixAvailable": {"name": "grunt-contrib-watch", "version": "0.4.4", "isSemVerMajor": true}}, "globule": {"name": "globule", "severity": "high", "isDirect": false, "via": ["minimatch"], "effects": ["gaze"], "range": "*", "nodes": ["node_modules/globule"], "fixAvailable": {"name": "grunt-contrib-watch", "version": "0.4.4", "isSemVerMajor": true}}, "grunt": {"name": "grunt", "severity": "high", "isDirect": true, "via": ["grunt-legacy-log", "grunt-legacy-util", "minimatch"], "effects": ["grunt-contrib-clean", "grunt-contrib-concat", "grunt-cssjanus", "grunt-eslint", "grunt-exec", "grunt-file-exists", "grunt-karma", "grunt-promise-q"], "range": ">=0.4.0-a", "nodes": ["node_modules/grunt"], "fixAvailable": false}, "grunt-contrib-clean": {"name": "grunt-contrib-clean", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": ">=0.4.0-a", "nodes": ["node_modules/grunt-contrib-clean"], "fixAvailable": {"name": "grunt-contrib-clean", "version": "0.3.2", "isSemVerMajor": true}}, "grunt-contrib-concat": {"name": "grunt-contrib-concat", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": ">=0.1.2-rc5", "nodes": ["node_modules/grunt-contrib-concat"], "fixAvailable": {"name": "grunt-contrib-concat", "version": "0.1.1", "isSemVerMajor": true}}, "grunt-contrib-watch": {"name": "grunt-contrib-watch", "severity": "high", "isDirect": true, "via": ["gaze"], "effects": [], "range": ">=0.5.0", "nodes": ["node_modules/grunt-contrib-watch"], "fixAvailable": {"name": "grunt-contrib-watch", "version": "0.4.4", "isSemVerMajor": true}}, "grunt-cssjanus": {"name": "grunt-cssjanus", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": "*", "nodes": ["node_modules/grunt-cssjanus"], "fixAvailable": false}, "grunt-eslint": {"name": "grunt-eslint", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": "<=1.0.0 || >=18.1.0", "nodes": ["node_modules/grunt-eslint"], "fixAvailable": {"name": "grunt-eslint", "version": "18.0.0", "isSemVerMajor": true}}, "grunt-exec": {"name": "grunt-exec", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": ">=0.4.0-rc1", "nodes": ["node_modules/grunt-exec"], "fixAvailable": {"name": "grunt-exec", "version": "0.3.0", "isSemVerMajor": true}}, "grunt-file-exists": {"name": "grunt-file-exists", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": "*", "nodes": ["node_modules/grunt-file-exists"], "fixAvailable": false}, "grunt-karma": {"name": "grunt-karma", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": "*", "nodes": ["node_modules/grunt-karma"], "fixAvailable": false}, "grunt-legacy-log": {"name": "grunt-legacy-log", "severity": "high", "isDirect": false, "via": ["lodash"], "effects": ["grunt"], "range": ">=1.0.1", "nodes": ["node_modules/grunt-legacy-log"], "fixAvailable": false}, "grunt-legacy-log-utils": {"name": "grunt-legacy-log-utils", "severity": "high", "isDirect": false, "via": ["lodash"], "effects": [], "range": "1.0.0 - 2.1.0", "nodes": [""], "fixAvailable": true}, "grunt-legacy-util": {"name": "grunt-legacy-util", "severity": "high", "isDirect": false, "via": ["lodash"], "effects": ["grunt"], "range": ">=1.0.0-rc1", "nodes": ["node_modules/grunt-legacy-util"], "fixAvailable": false}, "grunt-promise-q": {"name": "grunt-promise-q", "severity": "high", "isDirect": true, "via": ["grunt"], "effects": [], "range": "*", "nodes": ["node_modules/grunt-promise-q"], "fixAvailable": false}, "gulp-util": {"name": "gulp-util", "severity": "high", "isDirect": false, "via": ["lodash.template"], "effects": ["remap-istanbul"], "range": ">=1.1.0", "nodes": ["node_modules/gulp-util"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "karma-remap-istanbul": {"name": "karma-remap-istanbul", "severity": "high", "isDirect": true, "via": ["remap-istanbul"], "effects": [], "range": ">=0.0.3", "nodes": ["node_modules/karma-remap-istanbul"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "lodash": {"name": "lodash", "severity": "high", "isDirect": false, "via": [{"source": 1115806, "name": "lodash", "dependency": "lodash", "title": "lodash vulnerable to Code Injection via `_.template` imports key names", "url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc", "severity": "high", "cwe": ["CWE-94"], "cvss": {"score": 8.1, "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"}, "range": ">=4.0.0 <=4.17.23"}, {"source": 1115810, "name": "lodash", "dependency": "lodash", "title": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`", "url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh", "severity": "moderate", "cwe": ["CWE-1321"], "cvss": {"score": 6.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"}, "range": "<=4.17.23"}], "effects": ["grunt-legacy-log", "grunt-legacy-log-utils", "grunt-legacy-util"], "range": "<=4.17.23", "nodes": ["node_modules/lodash"], "fixAvailable": false}, "lodash.template": {"name": "lodash.template", "severity": "high", "isDirect": false, "via": [{"source": 1106902, "name": "lodash.template", "dependency": "lodash.template", "title": "Command Injection in lodash", "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "severity": "high", "cwe": ["CWE-77", "CWE-94"], "cvss": {"score": 7.2, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}, "range": "<=4.5.0"}], "effects": ["gulp-util"], "range": "<=4.5.0", "nodes": ["node_modules/lodash.template"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "meow": {"name": "meow", "severity": "high", "isDirect": false, "via": ["trim-newlines"], "effects": [], "range": "3.4.0 - 5.0.0", "nodes": ["node_modules/gulp-util/node_modules/meow"], "fixAvailable": true}, "minimatch": {"name": "minimatch", "severity": "high", "isDirect": false, "via": [{"source": 1113459, "name": "minimatch", "dependency": "minimatch", "title": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 0, "vectorString": null}, "range": "<3.1.3"}, {"source": 1113538, "name": "minimatch", "dependency": "minimatch", "title": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments", "url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "severity": "high", "cwe": ["CWE-407"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.1.3"}, {"source": 1113546, "name": "minimatch", "dependency": "minimatch", "title": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions", "url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "severity": "high", "cwe": ["CWE-1333"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.1.4"}], "effects": ["globule", "grunt"], "range": "<=3.1.3", "nodes": ["node_modules/minimatch"], "fixAvailable": {"name": "grunt-contrib-watch", "version": "0.4.4", "isSemVerMajor": true}}, "remap-istanbul": {"name": "remap-istanbul", "severity": "high", "isDirect": false, "via": ["gulp-util"], "effects": ["karma-remap-istanbul"], "range": "<=0.9.6", "nodes": ["node_modules/remap-istanbul"], "fixAvailable": {"name": "karma-remap-istanbul", "version": "0.0.2", "isSemVerMajor": true}}, "trim-newlines": {"name": "trim-newlines", "severity": "high", "isDirect": false, "via": [{"source": 1095100, "name": "trim-newlines", "dependency": "trim-newlines", "title": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "severity": "high", "cwe": ["CWE-400"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.1"}], "effects": ["meow"], "range": "<3.0.1", "nodes": ["node_modules/trim-newlines"], "fixAvailable": true}}, "metadata": {"vulnerabilities": {"info": 0, "low": 0, "moderate": 0, "high": 23, "critical": 0, "total": 23}, "dependencies": {"prod": 4, "dev": 811, "optional": 11, "peer": 2, "peerOptional": 0, "total": 814}}}}
$ /usr/bin/npm audit fix --only=dev
--- stderr ---
npm WARN invalid config only="dev" set in command line options
npm WARN invalid config Must be one of: null, prod, production
npm WARN skipping integrity check for git dependency ssh://git@github.com/jdforrester/grunt-promise-q.git
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated gulp-util@3.0.7: gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
npm WARN deprecated istanbul@0.4.5: This module is no longer maintained, try this instead:
npm WARN deprecated npm i nyc
npm WARN deprecated Visit https://istanbul.js.org/integrations for other alternatives.
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---
added 813 packages, and audited 814 packages in 16s
128 packages are looking for funding
run `npm fund` for details
# npm audit report
lodash <=4.17.23
Severity: high
lodash vulnerable to Code Injection via `_.template` imports key names - https://github.com/advisories/GHSA-r5fr-rjxr-66jc
lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` - https://github.com/advisories/GHSA-f23m-r3pf-42rh
No fix available
node_modules/lodash
grunt-legacy-log >=1.0.1
Depends on vulnerable versions of lodash
node_modules/grunt-legacy-log
grunt >=0.4.0-a
Depends on vulnerable versions of grunt-legacy-log
Depends on vulnerable versions of grunt-legacy-util
Depends on vulnerable versions of minimatch
node_modules/grunt
grunt-contrib-clean >=0.4.0-a
Depends on vulnerable versions of grunt
node_modules/grunt-contrib-clean
grunt-contrib-concat >=0.1.2-rc5
Depends on vulnerable versions of grunt
node_modules/grunt-contrib-concat
grunt-cssjanus *
Depends on vulnerable versions of grunt
node_modules/grunt-cssjanus
grunt-eslint <=1.0.0 || >=18.1.0
Depends on vulnerable versions of grunt
node_modules/grunt-eslint
grunt-exec >=0.4.0-rc1
Depends on vulnerable versions of grunt
node_modules/grunt-exec
grunt-file-exists *
Depends on vulnerable versions of grunt
node_modules/grunt-file-exists
grunt-karma *
Depends on vulnerable versions of grunt
node_modules/grunt-karma
grunt-promise-q *
Depends on vulnerable versions of grunt
node_modules/grunt-promise-q
grunt-legacy-util >=1.0.0-rc1
Depends on vulnerable versions of lodash
node_modules/grunt-legacy-util
lodash.template <=4.5.0
Severity: high
Command Injection in lodash - https://github.com/advisories/GHSA-35jh-r3h4-6jhm
fix available via `npm audit fix --force`
Will install karma-remap-istanbul@0.0.2, which is a breaking change
node_modules/lodash.template
gulp-util >=1.1.0
Depends on vulnerable versions of lodash.template
node_modules/gulp-util
remap-istanbul <=0.9.6
Depends on vulnerable versions of gulp-util
node_modules/remap-istanbul
karma-remap-istanbul >=0.0.3
Depends on vulnerable versions of remap-istanbul
node_modules/karma-remap-istanbul
minimatch <=3.1.3
Severity: high
minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern - https://github.com/advisories/GHSA-3ppc-4f35-3m26
minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments - https://github.com/advisories/GHSA-7r86-cg39-jmmj
minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions - https://github.com/advisories/GHSA-23c5-xmqv-rm74
fix available via `npm audit fix --force`
Will install grunt-contrib-watch@0.4.4, which is a breaking change
node_modules/minimatch
globule *
Depends on vulnerable versions of minimatch
node_modules/globule
gaze >=0.4.0
Depends on vulnerable versions of globule
node_modules/gaze
grunt-contrib-watch >=0.5.0
Depends on vulnerable versions of gaze
node_modules/grunt-contrib-watch
trim-newlines <3.0.1
Severity: high
Uncontrolled Resource Consumption in trim-newlines - https://github.com/advisories/GHSA-7p7h-4mm5-852v
fix available via `npm audit fix`
node_modules/trim-newlines
meow 3.4.0 - 5.0.0
Depends on vulnerable versions of trim-newlines
node_modules/gulp-util/node_modules/meow
22 high severity vulnerabilities
To address issues that do not require attention, run:
npm audit fix
To address all issues possible (including breaking changes), run:
npm audit fix --force
Some issues need review, and may require choosing
a different dependency.
--- end ---
Verifying that tests still pass
$ /usr/bin/npm ci
--- stderr ---
npm WARN skipping integrity check for git dependency ssh://git@github.com/jdforrester/grunt-promise-q.git
npm WARN deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
npm WARN deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
npm WARN deprecated gulp-util@3.0.7: gulp-util is deprecated - replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5
npm WARN deprecated istanbul@0.4.5: This module is no longer maintained, try this instead:
npm WARN deprecated npm i nyc
npm WARN deprecated Visit https://istanbul.js.org/integrations for other alternatives.
npm WARN deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
--- stdout ---
added 813 packages, and audited 814 packages in 11s
128 packages are looking for funding
run `npm fund` for details
22 high severity vulnerabilities
To address issues that do not require attention, run:
npm audit fix
To address all issues possible (including breaking changes), run:
npm audit fix --force
Some issues need review, and may require choosing
a different dependency.
Run `npm audit` for details.
--- end ---
$ /usr/bin/npm test
--- stderr ---
(node:367) Warning: Accessing non-existent property 'VERSION' of module exports inside circular dependency
(Use `node --trace-warnings ...` to show where the warning was created)
--- stdout ---
> oojs-ui@0.53.1 test
> npm run minify:svg:src && grunt test
> oojs-ui@0.53.1 minify:svg:src
> svgo --config=.svgo.config.js --pretty --quiet --recursive --folder ./src/themes/wikimediaui/images/
Running "eslint:all" (eslint) task
/src/repo/Gruntfile.js
501:17 warning Found non-literal argument to RegExp Constructor security/detect-non-literal-regexp
505:17 warning Found non-literal argument to RegExp Constructor security/detect-non-literal-regexp
509:17 warning Found non-literal argument to RegExp Constructor security/detect-non-literal-regexp
631:19 warning Found non-literal argument in require security/detect-non-literal-require
/src/repo/build/tasks/colorize-svg.js
339:1 warning This line has a length of 122. Maximum allowed is 100 max-len
/src/repo/demos/classes/BookletDialog.js
25:5 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
31:5 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/demos/demo.js
69:3 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
74:3 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
476:1 warning This line has a length of 101. Maximum allowed is 100 max-len
/src/repo/demos/pages/widgets.js
305:6 warning OOUI button has no label. Even icon-only buttons should set a label with invisibleLabel set to true mediawiki/no-unlabeled-buttonwidget
/src/repo/src/ActionSet.js
157:1 warning This line has a length of 121. Maximum allowed is 100 max-len
158:1 warning This line has a length of 113. Maximum allowed is 100 max-len
471:1 warning Invalid JSDoc inline tag name "see" jsdoc/check-tag-names
471:1 warning Invalid JSDoc inline tag name "see" jsdoc/check-tag-names
471:1 warning Invalid JSDoc inline tag name "see" jsdoc/check-tag-names
/src/repo/src/Dialog.js
222:1 warning This line has a length of 110. Maximum allowed is 100 max-len
/src/repo/src/Element.js
14:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/Tool.js
31:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/ToolGroup.js
28:1 warning This line has a length of 104. Maximum allowed is 100 max-len
30:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/Toolbar.js
141:1 warning This line has a length of 120. Maximum allowed is 100 max-len
275:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/Widget.js
13:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/Window.js
12:1 warning This line has a length of 111. Maximum allowed is 100 max-len
22:1 warning This line has a length of 112. Maximum allowed is 100 max-len
26:1 warning This line has a length of 130. Maximum allowed is 100 max-len
45:1 warning This line has a length of 106. Maximum allowed is 100 max-len
46:1 warning This line has a length of 109. Maximum allowed is 100 max-len
136:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
364:1 warning This line has a length of 106. Maximum allowed is 100 max-len
563:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/WindowManager.js
717:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/dialogs/MessageDialog.js
145:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/dialogs/ProcessDialog.js
248:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/layouts/BookletLayout.js
50:1 warning This line has a length of 105. Maximum allowed is 100 max-len
127:1 warning This line has a length of 105. Maximum allowed is 100 max-len
135:1 warning This line has a length of 109. Maximum allowed is 100 max-len
/src/repo/src/layouts/FieldsetLayout.js
51:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/layouts/FormLayout.js
117:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/layouts/HorizontalLayout.js
24:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/src/layouts/IndexLayout.js
39:1 warning This line has a length of 104. Maximum allowed is 100 max-len
42:1 warning This line has a length of 102. Maximum allowed is 100 max-len
122:1 warning This line has a length of 112. Maximum allowed is 100 max-len
130:1 warning This line has a length of 114. Maximum allowed is 100 max-len
138:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/layouts/MenuLayout.js
84:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/layouts/PanelLayout.js
22:1 warning This line has a length of 101. Maximum allowed is 100 max-len
24:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/layouts/StackLayout.js
31:1 warning This line has a length of 108. Maximum allowed is 100 max-len
34:1 warning This line has a length of 104. Maximum allowed is 100 max-len
67:1 warning This line has a length of 132. Maximum allowed is 100 max-len
/src/repo/src/mixins/AccessKeyedElement.js
24:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/src/mixins/ClippableElement.js
21:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/src/mixins/DraggableElement.js
12:1 warning This line has a length of 103. Maximum allowed is 100 max-len
14:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/mixins/DraggableGroupElement.js
17:1 warning This line has a length of 106. Maximum allowed is 100 max-len
/src/repo/src/mixins/FlaggedElement.js
40:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/mixins/FloatableElement.js
18:1 warning This line has a length of 103. Maximum allowed is 100 max-len
220:1 warning This line has a length of 101. Maximum allowed is 100 max-len
/src/repo/src/mixins/IconElement.js
116:1 warning This line has a length of 127. Maximum allowed is 100 max-len
/src/repo/src/mixins/LabelElement.js
19:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/mixins/LookupElement.js
24:1 warning This line has a length of 103. Maximum allowed is 100 max-len
28:1 warning This line has a length of 103. Maximum allowed is 100 max-len
31:1 warning This line has a length of 102. Maximum allowed is 100 max-len
34:1 warning This line has a length of 106. Maximum allowed is 100 max-len
225:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/mixins/RequestManager.js
10:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/mixins/RequiredElement.js
13:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/mixins/TabIndexedElement.js
37:1 warning This line has a length of 107. Maximum allowed is 100 max-len
40:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/mixins/TitledElement.js
24:1 warning This line has a length of 122. Maximum allowed is 100 max-len
/src/repo/src/toolgroups/ListToolGroup.js
87:1 warning This line has a length of 107. Maximum allowed is 100 max-len
93:1 warning This line has a length of 104. Maximum allowed is 100 max-len
96:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/ActionWidget.js
19:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/ButtonInputWidget.js
32:1 warning This line has a length of 112. Maximum allowed is 100 max-len
33:1 warning This line has a length of 169. Maximum allowed is 100 max-len
130:1 warning This line has a length of 119. Maximum allowed is 100 max-len
/src/repo/src/widgets/ButtonMenuSelectWidget.js
46:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/CheckboxInputWidget.js
40:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/widgets/CheckboxMultiselectInputWidget.js
149:1 warning This line has a length of 125. Maximum allowed is 100 max-len
/src/repo/src/widgets/ComboBoxInputWidget.js
60:1 warning This line has a length of 104. Maximum allowed is 100 max-len
62:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/DropdownInputWidget.js
33:1 warning This line has a length of 106. Maximum allowed is 100 max-len
34:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/DropdownWidget.js
53:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/InputWidget.js
23:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/LabelWidget.js
38:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/MenuSelectWidget.js
32:1 warning This line has a length of 106. Maximum allowed is 100 max-len
36:1 warning This line has a length of 109. Maximum allowed is 100 max-len
39:1 warning This line has a length of 107. Maximum allowed is 100 max-len
45:1 warning This line has a length of 101. Maximum allowed is 100 max-len
51:1 warning This line has a length of 104. Maximum allowed is 100 max-len
/src/repo/src/widgets/MenuTagMultiselectWidget.js
23:1 warning This line has a length of 108. Maximum allowed is 100 max-len
/src/repo/src/widgets/MultilineTextInputWidget.js
179:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/NumberInputWidget.js
27:1 warning This line has a length of 109. Maximum allowed is 100 max-len
/src/repo/src/widgets/PopupButtonWidget.js
25:1 warning This line has a length of 105. Maximum allowed is 100 max-len
/src/repo/src/widgets/PopupWidget.js
31:1 warning This line has a length of 104. Maximum allowed is 100 max-len
32:1 warning This line has a length of 108. Maximum allowed is 100 max-len
34:1 warning This line has a length of 104. Maximum allowed is 100 max-len
54:1 warning This line has a length of 103. Maximum allowed is 100 max-len
57:1 warning This line has a length of 104. Maximum allowed is 100 max-len
60:1 warning This line has a length of 107. Maximum allowed is 100 max-len
69:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/ProgressBarWidget.js
41:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/RadioInputWidget.js
40:1 warning This line has a length of 107. Maximum allowed is 100 max-len
/src/repo/src/widgets/SearchInputWidget.js
56:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
71:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/widgets/SearchWidget.js
22:1 warning This line has a length of 104. Maximum allowed is 100 max-len
77:1 warning This line has a length of 102. Maximum allowed is 100 max-len
/src/repo/src/widgets/TabOptionWidget.js
67:1 warning This line has a length of 101. Maximum allowed is 100 max-len
/src/repo/src/widgets/TagMultiselectWidget.js
228:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
246:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
267:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
362:1 warning JSDoc @return declaration present but return expression not available in function jsdoc/require-returns-check
/src/repo/src/widgets/TextInputWidget.js
42:1 warning This line has a length of 102. Maximum allowed is 100 max-len
44:1 warning This line has a length of 104. Maximum allowed is 100 max-len
46:1 warning This line has a length of 105. Maximum allowed is 100 max-len
48:1 warning This line has a length of 106. Maximum allowed is 100 max-len
506:1 warning This line has a length of 103. Maximum allowed is 100 max-len
/src/repo/tests/TestTimer.js
68:1 warning This line has a length of 116. Maximum allowed is 100 max-len
✖ 122 problems (0 errors, 122 warnings)
Running "stylelint:dev" (stylelint) task
>> src/themes/apex/elements.less
>> 358:3 ⚠ Unexpected browser feature "css-dir-pseudo" is not supported by Edge 113,114,115,116,117,118,119, Chrome 113,114,115,116,117,118,119, Safari 12,13,14,15,11.1,12.1,13.1,14.1,15.1,15.2-15.3,15.4,15.5,15.6,16.0,16.1,16.2,16.3, Safari on iOS 11.3-11.4,12.0-12.1,12.2-12.5,13.0-13.1,13.2,13.3,13.4-13.7,14.0-14.4,14.5-14.8,15.0-15.1,15.2-15.3,15.4,15.5,15.6-15.8,16.0,16.1,16.2,16.3 plugin/no-unsupported-browser-features
>>
>> src/themes/wikimediaui/elements.less
>> 443:3 ⚠ Unexpected browser feature "css-dir-pseudo" is not supported by Edge 113,114,115,116,117,118,119, Chrome 113,114,115,116,117,118,119, Safari 12,13,14,15,11.1,12.1,13.1,14.1,15.1,15.2-15.3,15.4,15.5,15.6,16.0,16.1,16.2,16.3, Safari on iOS 11.3-11.4,12.0-12.1,12.2-12.5,13.0-13.1,13.2,13.3,13.4-13.7,14.0-14.4,14.5-14.8,15.0-15.1,15.2-15.3,15.4,15.5,15.6-15.8,16.0,16.1,16.2,16.3 plugin/no-unsupported-browser-features
>>
>> ⚠ 2 problems (0 errors, 2 warnings)
⚠ 2 warnings
>> Linted 126 files without errors
Running "banana:all" (banana) task
>> 1 message directory checked.
Running "check-theme-manifests" task
>> Theme icon/indicator manifests match.
Running "pre-git-build" task
Running "clean:build" (clean) task
>> 0 paths cleaned.
Running "fileExists:src" (fileExists) task
Checking 249 files for existence...
OK
Running "tyops:src" (tyops) task
>> No typos found; 273 files checked for 16 typos.
Running "concat:i18nMessages" (concat) task
Running "concat:js" (concat) task
Running "concat:omnibusJs" (concat) task
Running "colorizeSvg:wikimediaui-icons-movement" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-movement.less".
Created "dist/tmp/themes/wikimediaui/icons-movement.rtl.less".
Created 75 SVG files.
Running "colorizeSvg:wikimediaui-icons-content" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-content.less".
Created "dist/tmp/themes/wikimediaui/icons-content.rtl.less".
Created 117 SVG files.
Running "colorizeSvg:wikimediaui-icons-alerts" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-alerts.less".
Created "dist/tmp/themes/wikimediaui/icons-alerts.rtl.less".
Created 45 SVG files.
Running "colorizeSvg:wikimediaui-icons-interactions" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-interactions.less".
Created "dist/tmp/themes/wikimediaui/icons-interactions.rtl.less".
Created 127 SVG files.
Running "colorizeSvg:wikimediaui-icons-moderation" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-moderation.less".
Created "dist/tmp/themes/wikimediaui/icons-moderation.rtl.less".
Created 61 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-core" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-core.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-core.rtl.less".
Created 40 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-styling" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-styling.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-styling.rtl.less".
Created 135 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-functions" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-functions.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-functions.rtl.less".
Created 21 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-list" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-list.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-list.rtl.less".
Created 24 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-advanced" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-advanced.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-advanced.rtl.less".
Created 189 SVG files.
Running "colorizeSvg:wikimediaui-icons-editing-citation" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-editing-citation.less".
Created "dist/tmp/themes/wikimediaui/icons-editing-citation.rtl.less".
Created 33 SVG files.
Running "colorizeSvg:wikimediaui-icons-media" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-media.less".
Created "dist/tmp/themes/wikimediaui/icons-media.rtl.less".
Created 69 SVG files.
Running "colorizeSvg:wikimediaui-icons-location" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-location.less".
Created "dist/tmp/themes/wikimediaui/icons-location.rtl.less".
Created 18 SVG files.
Running "colorizeSvg:wikimediaui-icons-user" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-user.less".
Created "dist/tmp/themes/wikimediaui/icons-user.rtl.less".
Created 66 SVG files.
Running "colorizeSvg:wikimediaui-icons-layout" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-layout.less".
Created "dist/tmp/themes/wikimediaui/icons-layout.rtl.less".
Created 30 SVG files.
Running "colorizeSvg:wikimediaui-icons-accessibility" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-accessibility.less".
Created "dist/tmp/themes/wikimediaui/icons-accessibility.rtl.less".
Created 33 SVG files.
Running "colorizeSvg:wikimediaui-icons-wikimedia" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/icons-wikimedia.less".
Created "dist/tmp/themes/wikimediaui/icons-wikimedia.rtl.less".
Created 36 SVG files.
Running "colorizeSvg:wikimediaui-indicators" (colorizeSvg) task
Created "dist/tmp/themes/wikimediaui/indicators.less".
Created "dist/tmp/themes/wikimediaui/indicators.rtl.less".
Created 8 SVG files.
Running "colorizeSvg:apex-icons-movement" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-movement.less".
Created "dist/tmp/themes/apex/icons-movement.rtl.less".
Created 25 SVG files.
Running "colorizeSvg:apex-icons-content" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-content.less".
Created "dist/tmp/themes/apex/icons-content.rtl.less".
Created 37 SVG files.
Running "colorizeSvg:apex-icons-alerts" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-alerts.less".
Created "dist/tmp/themes/apex/icons-alerts.rtl.less".
Created 14 SVG files.
Running "colorizeSvg:apex-icons-interactions" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-interactions.less".
Created "dist/tmp/themes/apex/icons-interactions.rtl.less".
Created 40 SVG files.
Running "colorizeSvg:apex-icons-moderation" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-moderation.less".
Created "dist/tmp/themes/apex/icons-moderation.rtl.less".
Created 19 SVG files.
Running "colorizeSvg:apex-icons-editing-core" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-core.less".
Created "dist/tmp/themes/apex/icons-editing-core.rtl.less".
Created 13 SVG files.
Running "colorizeSvg:apex-icons-editing-styling" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-styling.less".
Created "dist/tmp/themes/apex/icons-editing-styling.rtl.less".
Created 45 SVG files.
Running "colorizeSvg:apex-icons-editing-functions" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-functions.less".
Created "dist/tmp/themes/apex/icons-editing-functions.rtl.less".
Created 7 SVG files.
Running "colorizeSvg:apex-icons-editing-list" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-list.less".
Created "dist/tmp/themes/apex/icons-editing-list.rtl.less".
Created 8 SVG files.
Running "colorizeSvg:apex-icons-editing-advanced" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-advanced.less".
Created "dist/tmp/themes/apex/icons-editing-advanced.rtl.less".
Created 63 SVG files.
Running "colorizeSvg:apex-icons-editing-citation" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-editing-citation.less".
Created "dist/tmp/themes/apex/icons-editing-citation.rtl.less".
Created 11 SVG files.
Running "colorizeSvg:apex-icons-media" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-media.less".
Created "dist/tmp/themes/apex/icons-media.rtl.less".
Created 23 SVG files.
Running "colorizeSvg:apex-icons-location" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-location.less".
Created "dist/tmp/themes/apex/icons-location.rtl.less".
Created 6 SVG files.
Running "colorizeSvg:apex-icons-user" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-user.less".
Created "dist/tmp/themes/apex/icons-user.rtl.less".
Created 22 SVG files.
Running "colorizeSvg:apex-icons-layout" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-layout.less".
Created "dist/tmp/themes/apex/icons-layout.rtl.less".
Created 10 SVG files.
Running "colorizeSvg:apex-icons-accessibility" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-accessibility.less".
Created "dist/tmp/themes/apex/icons-accessibility.rtl.less".
Created 11 SVG files.
Running "colorizeSvg:apex-icons-wikimedia" (colorizeSvg) task
Created "dist/tmp/themes/apex/icons-wikimedia.less".
Created "dist/tmp/themes/apex/icons-wikimedia.rtl.less".
Created 18 SVG files.
Running "colorizeSvg:apex-indicators" (colorizeSvg) task
Created "dist/tmp/themes/apex/indicators.less".
Created "dist/tmp/themes/apex/indicators.rtl.less".
Created 4 SVG files.
Running "less:wikimediaui" (less) task
>> 132 stylesheets created.
Running "less:apex" (less) task
>> 132 stylesheets created.
Running "cssjanus:dist" (cssjanus) task
File "dist/tmp/wikimediaui/styles/Element.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/ButtonElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/ClippableElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/FloatableElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/FlaggedElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/GroupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/LabelElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/IconElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/IndicatorElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/PendingElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/PopupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/TabIndexedElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/TitledElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Layout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/FieldLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/ActionFieldLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/FieldsetLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/FormLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/PanelLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/HorizontalLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Widget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/SelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/DecoratedOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/LabelWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MessageWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/IconWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/IndicatorWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonGroupWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/PopupWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/PopupButtonWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/InputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxMultiselectInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/DropdownInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/RadioSelectInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TextInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuSectionOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/DropdownWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ComboBoxInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MultioptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxMultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/CheckboxMultioptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ProgressBarWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/NumberInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/SelectFileInputWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ToggleWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ToggleSwitchWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/core.rtl.css" created.
File "dist/tmp/apex/styles/Element.rtl.css" created.
File "dist/tmp/apex/styles/elements/ButtonElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/ClippableElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/FloatableElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/FlaggedElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/GroupElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/LabelElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/IconElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/IndicatorElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/PendingElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/PopupElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/TabIndexedElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/TitledElement.rtl.css" created.
File "dist/tmp/apex/styles/Layout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/FieldLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/ActionFieldLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/FieldsetLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/FormLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/PanelLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/HorizontalLayout.rtl.css" created.
File "dist/tmp/apex/styles/Widget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/SelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/DecoratedOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/LabelWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MessageWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/IconWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/IndicatorWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonGroupWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/PopupWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/PopupButtonWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/InputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxMultiselectInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/DropdownInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/RadioSelectInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TextInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuSectionOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/DropdownWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ComboBoxInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MultioptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxMultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/CheckboxMultioptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ProgressBarWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/NumberInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/SelectFileInputWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ToggleWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ToggleSwitchWidget.rtl.css" created.
File "dist/tmp/apex/styles/core.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/DraggableElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/DraggableGroupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/elements/LookupElement.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/BookletLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/IndexLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/CopyTextLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/MenuLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/TabPanelLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/PageLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/layouts/StackLayout.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ToggleButtonWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OutlineSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OutlineOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/OutlineControlsWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TabSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TabOptionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ButtonMenuSelectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TagMultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/MenuTagMultiselectWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/TagItemWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/SearchWidget.rtl.css" created.
File "dist/tmp/apex/styles/elements/DraggableElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/DraggableGroupElement.rtl.css" created.
File "dist/tmp/apex/styles/elements/LookupElement.rtl.css" created.
File "dist/tmp/apex/styles/layouts/BookletLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/IndexLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/CopyTextLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/MenuLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/TabPanelLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/PageLayout.rtl.css" created.
File "dist/tmp/apex/styles/layouts/StackLayout.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ToggleButtonWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OutlineSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OutlineOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/OutlineControlsWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TabSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TabOptionWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ButtonMenuSelectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TagMultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/MenuTagMultiselectWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/TagItemWidget.rtl.css" created.
File "dist/tmp/apex/styles/widgets/SearchWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Tool.rtl.css" created.
File "dist/tmp/wikimediaui/styles/tools/PopupTool.rtl.css" created.
File "dist/tmp/wikimediaui/styles/tools/ToolGroupTool.rtl.css" created.
File "dist/tmp/wikimediaui/styles/ToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/BarToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/LabelToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/PopupToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/ListToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/toolgroups/MenuToolGroup.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Toolbar.rtl.css" created.
File "dist/tmp/apex/styles/Tool.rtl.css" created.
File "dist/tmp/apex/styles/tools/PopupTool.rtl.css" created.
File "dist/tmp/apex/styles/tools/ToolGroupTool.rtl.css" created.
File "dist/tmp/apex/styles/ToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/BarToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/LabelToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/PopupToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/ListToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/toolgroups/MenuToolGroup.rtl.css" created.
File "dist/tmp/apex/styles/Toolbar.rtl.css" created.
File "dist/tmp/wikimediaui/styles/widgets/ActionWidget.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Window.rtl.css" created.
File "dist/tmp/wikimediaui/styles/Dialog.rtl.css" created.
File "dist/tmp/wikimediaui/styles/dialogs/MessageDialog.rtl.css" created.
File "dist/tmp/wikimediaui/styles/dialogs/ProcessDialog.rtl.css" created.
File "dist/tmp/wikimediaui/styles/WindowManager.rtl.css" created.
File "dist/tmp/apex/styles/widgets/ActionWidget.rtl.css" created.
File "dist/tmp/apex/styles/Window.rtl.css" created.
File "dist/tmp/apex/styles/Dialog.rtl.css" created.
File "dist/tmp/apex/styles/dialogs/MessageDialog.rtl.css" created.
File "dist/tmp/apex/styles/dialogs/ProcessDialog.rtl.css" created.
File "dist/tmp/apex/styles/WindowManager.rtl.css" created.
Running "cssjanus:demoCss" (cssjanus) task
File "demos/styles/demo.rtl.css" created.
Running "concat:css" (concat) task
Running "concat:omnibusCss" (concat) task
Running "concat:codexTokensCss" (concat) task
Running "concat:demoCss" (concat) task
Running "copy:images" (copy) task
Copied 36 files
Running "copy:i18n" (copy) task
Copied 224 files
Running "copy:dist" (copy) task
Copied 4 files
Running "clean:tmp" (clean) task
>> 1 path cleaned.
Running "clean:demos" (clean) task
>> 0 paths cleaned.
Running "copy:demos" (copy) task
Created 40 directories, copied 2263 files
Running "demo-image-list" task
Running "exec:demos" (exec) task
>> Loading composer repositories with package information
>> Updating dependencies
>> Lock file operations: 64 installs, 0 updates, 0 removals
>> - Locking composer/pcre (3.3.2)
>> - Locking composer/semver (3.4.4)
>> - Locking composer/spdx-licenses (1.5.10)
>> - Locking composer/xdebug-handler (3.0.5)
>> - Locking danog/advanced-json-rpc (v3.2.3)
>> - Locking dealerdirect/phpcodesniffer-composer-installer (v1.2.0)
>> - Locking doctrine/deprecations (1.1.6)
>> - Locking mediawiki/mediawiki-codesniffer (v50.0.0)
>> - Locking mediawiki/mediawiki-phan-config (0.20.0)
>> - Locking mediawiki/minus-x (2.0.1)
>> - Locking mediawiki/phan-taint-check-plugin (9.1.0)
>> - Locking myclabs/deep-copy (1.13.4)
>> - Locking netresearch/jsonmapper (v5.0.1)
>> - Locking nikic/php-parser (v5.7.0)
>> - Locking ockcyp/covers-validator (v1.7.0)
>> - Locking phan/phan (6.0.2)
>> - Locking phan/tolerant-php-parser (v0.2.0)
>> - Locking phan/var_representation_polyfill (0.1.4)
>> - Locking phar-io/manifest (2.0.4)
>> - Locking phar-io/version (3.2.1)
>> - Locking php-parallel-lint/php-console-color (v1.0.1)
>> - Locking php-parallel-lint/php-console-highlighter (v1.0.0)
>> - Locking php-parallel-lint/php-parallel-lint (v1.4.0)
>> - Locking phpcsstandards/phpcsextra (1.4.0)
>> - Locking phpcsstandards/phpcsutils (1.2.2)
>> - Locking phpdocumentor/reflection-common (2.2.0)
>> - Locking phpdocumentor/reflection-docblock (6.0.3)
>> - Locking phpdocumentor/type-resolver (2.0.0)
>> - Locking phpstan/phpdoc-parser (2.3.2)
>> - Locking phpunit/php-code-coverage (10.1.16)
>> - Locking phpunit/php-file-iterator (4.1.0)
>> - Locking phpunit/php-invoker (4.0.0)
>> - Locking phpunit/php-text-template (3.0.1)
>> - Locking phpunit/php-timer (6.0.0)
>> - Locking phpunit/phpunit (10.5.63)
>> - Locking psr/container (2.0.2)
>> - Locking psr/log (3.0.2)
>> - Locking sabre/event (6.0.1)
>> - Locking sebastian/cli-parser (2.0.1)
>> - Locking sebastian/code-unit (2.0.0)
>> - Locking sebastian/code-unit-reverse-lookup (3.0.0)
>> - Locking sebastian/comparator (5.0.5)
>> - Locking sebastian/complexity (3.2.0)
>> - Locking sebastian/diff (5.1.1)
>> - Locking sebastian/environment (6.1.0)
>> - Locking sebastian/exporter (5.1.4)
>> - Locking sebastian/global-state (6.0.2)
>> - Locking sebastian/lines-of-code (2.0.2)
>> - Locking sebastian/object-enumerator (5.0.0)
>> - Locking sebastian/object-reflector (3.0.0)
>> - Locking sebastian/recursion-context (5.0.1)
>> - Locking sebastian/type (4.0.0)
>> - Locking sebastian/version (4.0.1)
>> - Locking squizlabs/php_codesniffer (3.13.5)
>> - Locking symfony/console (v6.4.36)
>> - Locking symfony/deprecation-contracts (v3.6.0)
>> - Locking symfony/polyfill-ctype (v1.34.0)
>> - Locking symfony/polyfill-intl-grapheme (v1.34.0)
>> - Locking symfony/polyfill-intl-normalizer (v1.34.0)
>> - Locking symfony/polyfill-mbstring (v1.34.0)
>> - Locking symfony/service-contracts (v3.6.1)
>> - Locking symfony/string (v7.4.8)
>> - Locking theseer/tokenizer (1.3.1)
>> - Locking webmozart/assert (2.3.0)
>> Writing lock file
>> Installing dependencies from lock file
>> Nothing to install, update or remove
>> 7 package suggestions were added by new dependencies, use `composer suggest` to see details.
>> Generating autoload files
>> No installed packages - skipping audit.
Running "exec:testSuiteGenerator" (exec) task
>> Generated 8253 test cases.
>> * ActionFieldLayout: 480
>> * FieldLayout: 544
>> * FieldsetLayout: 79
>> * FormLayout: 6
>> * HorizontalLayout: 1
>> * IndexLayout: 106
>> * MenuLayout: 78
>> * PanelLayout: 69
>> * StackLayout: 73
>> * TabPanelLayout: 69
>> * ButtonGroupWidget: 14
>> * ButtonInputWidget: 568
>> * ButtonWidget: 616
>> * CheckboxInputWidget: 160
>> * CheckboxMultiselectInputWidget: 156
>> * ComboBoxInputWidget: 751
>> * DropdownInputWidget: 194
>> * HiddenInputWidget: 9
>> * IconWidget: 92
>> * IndicatorWidget: 66
>> * LabelWidget: 34
>> * MessageWidget: 92
>> * MultilineTextInputWidget: 715
>> * NumberInputWidget: 964
>> * OptionWidget: 122
>> * ProgressBarWidget: 29
>> * RadioInputWidget: 160
>> * RadioSelectInputWidget: 156
>> * SearchInputWidget: 607
>> * SelectFileInputWidget: 338
>> * SelectWidget: 6
>> * TabOptionWidget: 139
>> * TabSelectWidget: 38
>> * TextInputWidget: 675
>> * ToggleSwitchWidget: 38
>> * ToggleWidget: 9
Running "exec:phpGenerateJSPHPForKarma" (exec) task
>> Loading composer repositories with package information
>> Updating dependencies
>> Nothing to modify in lock file
>> Writing lock file
>> Installing dependencies from lock file (including require-dev)
>> Nothing to install, update or remove
>> Generating autoload files
>> 40 packages you are using are looking for funding.
>> Use the `composer fund` command to find out more!
>> No security vulnerability advisories found.
Running "clean:coverage" (clean) task
>> 0 paths cleaned.
Running "karma:main" (karma) task
13 04 2026 12:20:28.705:INFO [karma-server]: Karma v6.3.20 server started at http://localhost:9876/
13 04 2026 12:20:28.707:INFO [launcher]: Launching browsers ChromeCustom with concurrency unlimited
13 04 2026 12:20:28.711:INFO [launcher]: Starting browser ChromeHeadless
13 04 2026 12:20:29.569:INFO [Chrome Headless 145.0.0.0 (Linux x86_64)]: Connected on socket 4gBfsD-SWjkYJbzXAAAB with id 88992519
Chrome Headless 145.0.0.0 (Linux x86_64) WARN: 'QUnit.load is deprecated and will be removed in QUnit 3.0. https://qunitjs.com/api/QUnit/load/'
Chrome Headless 145.0.0.0 (Linux x86_64) WARN: 'QUnit.load is deprecated and will be removed in QUnit 3.0. https://qunitjs.com/api/QUnit/load/'
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
................................................................................
...................................................................
Chrome Headless 145.0.0.0 (Linux x86_64): Executed 8307 of 8307 SUCCESS (37.8 secs / 35.974 secs)
TOTAL: 8307 SUCCESS
=============================== Coverage summary ===============================
Statements : 56.08% ( 4254/7585 )
Branches : 36.13% ( 1456/4030 )
Functions : 49.2% ( 551/1120 )
Lines : 56.17% ( 4201/7479 )
================================================================================
Done.
--- end ---
{}
{"1095100": {"source": 1095100, "name": "trim-newlines", "dependency": "trim-newlines", "title": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "severity": "high", "cwe": ["CWE-400"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.1"}}
{"1095100": {"source": 1095100, "name": "trim-newlines", "dependency": "trim-newlines", "title": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "severity": "high", "cwe": ["CWE-400"], "cvss": {"score": 7.5, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}, "range": "<3.0.1"}}
$ package-lock-lint /src/repo/package-lock.json
--- stdout ---
Checking /src/repo/package-lock.json
--- end ---
[DNM] there are no updates
$ git add .
--- stdout ---
--- end ---
$ git commit -F /tmp/tmp208jlo1v
--- stdout ---
[master 7462674] [DNM] there are no updates
1 file changed, 8 insertions(+), 10 deletions(-)
--- end ---
$ git format-patch HEAD~1 --stdout
--- stdout ---
From 746267483e4c2bac5e26d17ff50818508d91fef2 Mon Sep 17 00:00:00 2001
From: libraryupgrader <tools.libraryupgrader@tools.wmflabs.org>
Date: Mon, 13 Apr 2026 12:21:11 +0000
Subject: [PATCH] [DNM] there are no updates
Change-Id: I8688066df5371f9cb9a1531625ea76c3a5d39ae8
---
package-lock.json | 18 ++++++++----------
1 file changed, 8 insertions(+), 10 deletions(-)
diff --git a/package-lock.json b/package-lock.json
index 8dcebd3..bdef4e9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -4685,13 +4685,12 @@
}
},
"node_modules/grunt-legacy-log-utils": {
- "version": "2.1.0",
- "resolved": "https://registry.npmjs.org/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.1.0.tgz",
- "integrity": "sha512-lwquaPXJtKQk0rUM1IQAop5noEpwFqOXasVoedLeNzaibf/OPWjKYvvdqnEHNmU+0T0CaReAXIbGo747ZD+Aaw==",
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.1.3.tgz",
+ "integrity": "sha512-sgG+QvKmdb44wZyzJP+ejDsy3jYxG2wzohpol+JTMlXqMUBDoZb01JPQ5jKAedtZBFwhmABAc88T9hEBLy3U+Q==",
"dev": true,
"dependencies": {
- "chalk": "~4.1.0",
- "lodash": "~4.17.19"
+ "chalk": "^4.1.0"
},
"engines": {
"node": ">=10"
@@ -13113,13 +13112,12 @@
}
},
"grunt-legacy-log-utils": {
- "version": "2.1.0",
- "resolved": "https://registry.npmjs.org/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.1.0.tgz",
- "integrity": "sha512-lwquaPXJtKQk0rUM1IQAop5noEpwFqOXasVoedLeNzaibf/OPWjKYvvdqnEHNmU+0T0CaReAXIbGo747ZD+Aaw==",
+ "version": "2.1.3",
+ "resolved": "https://registry.npmjs.org/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.1.3.tgz",
+ "integrity": "sha512-sgG+QvKmdb44wZyzJP+ejDsy3jYxG2wzohpol+JTMlXqMUBDoZb01JPQ5jKAedtZBFwhmABAc88T9hEBLy3U+Q==",
"dev": true,
"requires": {
- "chalk": "~4.1.0",
- "lodash": "~4.17.19"
+ "chalk": "^4.1.0"
}
},
"grunt-legacy-util": {
--
2.47.3
--- end ---