Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 19, 2025

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the nx group in /lambdas with 3 updates: @nx/eslint, @nx/js and @nx/vite.

Updates @nx/eslint from 21.3.11 to 21.4.0

Release notes

Sourced from @​nx/eslint's releases.

21.4.0 (2025-08-15)

🚀 Features

  • add new angular- packages and create legacy packages (#3)
  • add new angular- packages and create legacy packages (#3)
  • angular: update ngrx to v20 (#32140)
  • angular-rspack: add angular rspack to nx repo (31c2810e7e)
  • angular-rspack: add withConfigurations (#6)
  • angular-rspack: support expanded syntax for assets, styles, and scripts (#28)
  • angular-rspack: support extractLicenses option (#30)
  • angular-rspack: improve createConfig public api (#35)
  • angular-rspack: support host option for the dev server (#38)
  • angular-rspack: add allowedHosts option (#47)
  • angular-rspack: add support for i18n (#51)
  • angular-rspack: add service-worker support (#55)
  • angular-rspack: improve entry files handling and index.html generation (#56)
  • angular-rspack: use development config for serve (#61)
  • angular-rspack: support static site generation (#65)
  • angular-rspack: improve styles processing and support tailwindcss v4 (#70)
  • angular-rspack: add support for more devServer options (#71)
  • angular-rspack: add hmr support (#78)
  • angular-rspack: add statsJson plugin (#79)
  • angular-rspack: add poll option (#80)
  • angular-rspack: add verbose option (#82)
  • angular-rspack: add progress option (#83)
  • angular-rspack: add watch option (#84)
  • angular-rspack: add open option (#85)
  • angular-rspack: finalize devServer options (#86)
  • angular-rspack: add granular optimization support (#89)
  • angular-rspack: add budgets support (#92)
  • angular-rspack: add appShell option (#93)
  • angular-rspack: support index transformer (#118)
  • angular-rspack: include js-based postcss config (#120)
  • angular-rspack: support pkg scheme importer (#124)
  • angular-rspack: Add "zoneless" option to enable Angular's provideZonelessChangeDetection() usage (#115)
  • angular-rspack: add angular-rspack package (16035f42fd)
  • angular-rspack: move angular rspack to nx (#32226)
  • angular-rspack,angular-rsbuild: rename jit to aot (#11)
  • angular-rspack,angular-rsbuild: rename tsconfigPath to tsConfig (#13)
  • angular-rspack,angular-rsbuild: rename inlineStylesExtension to inlineStyleLanguage (#14)
  • angular-rspack,angular-rsbuild: support web workers (#58)
  • angular-rspack,angular-rsbuild: refactor withConfigurations to be createConfig (#9)
  • angular-rspack,angular-rsbuild: rename jit to aot (#11)
  • angular-rspack,angular-rsbuild: rename tsconfigPath to tsConfig (#13)
  • angular-rspack,angular-rsbuild: rename inlineStylesExtension to inlineStyleLanguage (#14)
  • angular-rspack,angular-rsbuild: support passing devServer options (#16)
  • angular-rspack,angular-rsbuild: add optimization option (#21)
  • angular-rspack,angular-rsbuild: rename ssrEntry to ssr.entry (#20)
  • angular-rspack,angular-rsbuild: add outputHashing option (#22)

... (truncated)

Commits
  • 0452910 fix(vite): add tslib as a dep for @​nx/vite and remove @​swc/helpers (#32341)
  • a626ee1 fix(linter): handle negative numbers in flat config AST generation (#32085)
  • adbfaf8 feat(core): add tsBuildInfoFile option all packages tsconfig.lib.json (#32030)
  • 59496ed fix(linter): update lint executor to correctly handle --fix and --quiet (...
  • 0ca4aac feat(repo): use ts solution in the nx repo (#31654)
  • See full diff in compare view

Updates @nx/js from 21.3.11 to 21.4.0

Release notes

Sourced from @​nx/js's releases.

21.4.0 (2025-08-15)

🚀 Features

  • add new angular- packages and create legacy packages (#3)
  • add new angular- packages and create legacy packages (#3)
  • angular: update ngrx to v20 (#32140)
  • angular-rspack: add angular rspack to nx repo (31c2810e7e)
  • angular-rspack: add withConfigurations (#6)
  • angular-rspack: support expanded syntax for assets, styles, and scripts (#28)
  • angular-rspack: support extractLicenses option (#30)
  • angular-rspack: improve createConfig public api (#35)
  • angular-rspack: support host option for the dev server (#38)
  • angular-rspack: add allowedHosts option (#47)
  • angular-rspack: add support for i18n (#51)
  • angular-rspack: add service-worker support (#55)
  • angular-rspack: improve entry files handling and index.html generation (#56)
  • angular-rspack: use development config for serve (#61)
  • angular-rspack: support static site generation (#65)
  • angular-rspack: improve styles processing and support tailwindcss v4 (#70)
  • angular-rspack: add support for more devServer options (#71)
  • angular-rspack: add hmr support (#78)
  • angular-rspack: add statsJson plugin (#79)
  • angular-rspack: add poll option (#80)
  • angular-rspack: add verbose option (#82)
  • angular-rspack: add progress option (#83)
  • angular-rspack: add watch option (#84)
  • angular-rspack: add open option (#85)
  • angular-rspack: finalize devServer options (#86)
  • angular-rspack: add granular optimization support (#89)
  • angular-rspack: add budgets support (#92)
  • angular-rspack: add appShell option (#93)
  • angular-rspack: support index transformer (#118)
  • angular-rspack: include js-based postcss config (#120)
  • angular-rspack: support pkg scheme importer (#124)
  • angular-rspack: Add "zoneless" option to enable Angular's provideZonelessChangeDetection() usage (#115)
  • angular-rspack: add angular-rspack package (16035f42fd)
  • angular-rspack: move angular rspack to nx (#32226)
  • angular-rspack,angular-rsbuild: rename jit to aot (#11)
  • angular-rspack,angular-rsbuild: rename tsconfigPath to tsConfig (#13)
  • angular-rspack,angular-rsbuild: rename inlineStylesExtension to inlineStyleLanguage (#14)
  • angular-rspack,angular-rsbuild: support web workers (#58)
  • angular-rspack,angular-rsbuild: refactor withConfigurations to be createConfig (#9)
  • angular-rspack,angular-rsbuild: rename jit to aot (#11)
  • angular-rspack,angular-rsbuild: rename tsconfigPath to tsConfig (#13)
  • angular-rspack,angular-rsbuild: rename inlineStylesExtension to inlineStyleLanguage (#14)
  • angular-rspack,angular-rsbuild: support passing devServer options (#16)
  • angular-rspack,angular-rsbuild: add optimization option (#21)
  • angular-rspack,angular-rsbuild: rename ssrEntry to ssr.entry (#20)
  • angular-rspack,angular-rsbuild: add outputHashing option (#22)

... (truncated)

Commits
  • d48ff63 fix(js): node executor handles processes robustly (#32356)
  • 18ba315 feat(js): add plugin option to skip build checks when inferring the build tas...
  • 0452910 fix(vite): add tslib as a dep for @​nx/vite and remove @​swc/helpers (#32341)
  • 4449b3a fix(bundling): normalize Windows paths for additionalEntryPoints (#32336)
  • cdf5edb fix(js): fix npm dist-tag error handling TypeError in release-publish executo...
  • b6bab0b feat(js): add esm support for esbuild and running serve with the node executo...
  • 18a93cf feat(js): ignore scoped export conditions (#32063)
  • b68c349 fix(misc): loose and fix the ts solution setup requirements and use it when t...
  • 98ee167 fix(js): handle npm 11 warnings in stderr during registry version resolution ...
  • 1b1de90 feat(core): log out-of-sync details returned by sync generators when running ...
  • Additional commits viewable in compare view

Updates @nx/vite from 21.3.11 to 21.4.0

Release notes

Sourced from @​nx/vite's releases.

21.4.0 (2025-08-15)

🚀 Features

  • add new angular- packages and create legacy packages (#3)
  • add new angular- packages and create legacy packages (#3)
  • angular: update ngrx to v20 (#32140)
  • angular-rspack: add angular rspack to nx repo (31c2810e7e)
  • angular-rspack: add withConfigurations (#6)
  • angular-rspack: support expanded syntax for assets, styles, and scripts (#28)
  • angular-rspack: support extractLicenses option (#30)
  • angular-rspack: improve createConfig public api (#35)
  • angular-rspack: support host option for the dev server (#38)
  • angular-rspack: add allowedHosts option (#47)
  • angular-rspack: add support for i18n (#51)
  • angular-rspack: add service-worker support (#55)
  • angular-rspack: improve entry files handling and index.html generation (#56)
  • angular-rspack: use development config for serve (#61)
  • angular-rspack: support static site generation (#65)
  • angular-rspack: improve styles processing and support tailwindcss v4 (#70)
  • angular-rspack: add support for more devServer options (#71)
  • angular-rspack: add hmr support (#78)
  • angular-rspack: add statsJson plugin (#79)
  • angular-rspack: add poll option (#80)
  • angular-rspack: add verbose option (#82)
  • angular-rspack: add progress option (#83)
  • angular-rspack: add watch option (#84)
  • angular-rspack: add open option (#85)
  • angular-rspack: finalize devServer options (#86)
  • angular-rspack: add granular optimization support (#89)
  • angular-rspack: add budgets support (#92)
  • angular-rspack: add appShell option (#93)
  • angular-rspack: support index transformer (#118)
  • angular-rspack: include js-based postcss config (#120)
  • angular-rspack: support pkg scheme importer (#124)
  • angular-rspack: Add "zoneless" option to enable Angular's provideZonelessChangeDetection() usage (#115)
  • angular-rspack: add angular-rspack package (16035f42fd)
  • angular-rspack: move angular rspack to nx (#32226)
  • angular-rspack,angular-rsbuild: rename jit to aot (#11)
  • angular-rspack,angular-rsbuild: rename tsconfigPath to tsConfig (#13)
  • angular-rspack,angular-rsbuild: rename inlineStylesExtension to inlineStyleLanguage (#14)
  • angular-rspack,angular-rsbuild: support web workers (#58)
  • angular-rspack,angular-rsbuild: refactor withConfigurations to be createConfig (#9)
  • angular-rspack,angular-rsbuild: rename jit to aot (#11)
  • angular-rspack,angular-rsbuild: rename tsconfigPath to tsConfig (#13)
  • angular-rspack,angular-rsbuild: rename inlineStylesExtension to inlineStyleLanguage (#14)
  • angular-rspack,angular-rsbuild: support passing devServer options (#16)
  • angular-rspack,angular-rsbuild: add optimization option (#21)
  • angular-rspack,angular-rsbuild: rename ssrEntry to ssr.entry (#20)
  • angular-rspack,angular-rsbuild: add outputHashing option (#22)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the nx group in /lambdas with 3 updates: [@nx/eslint](https://github.com/nrwl/nx/tree/HEAD/packages/eslint), [@nx/js](https://github.com/nrwl/nx/tree/HEAD/packages/js) and [@nx/vite](https://github.com/nrwl/nx/tree/HEAD/packages/vite).


Updates `@nx/eslint` from 21.3.11 to 21.4.0
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/21.4.0/packages/eslint)

Updates `@nx/js` from 21.3.11 to 21.4.0
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/21.4.0/packages/js)

Updates `@nx/vite` from 21.3.11 to 21.4.0
- [Release notes](https://github.com/nrwl/nx/releases)
- [Commits](https://github.com/nrwl/nx/commits/21.4.0/packages/vite)

---
updated-dependencies:
- dependency-name: "@nx/eslint"
  dependency-version: 21.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: nx
- dependency-name: "@nx/js"
  dependency-version: 21.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: nx
- dependency-name: "@nx/vite"
  dependency-version: 21.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: nx
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 19, 2025
@dependabot dependabot bot requested a review from a team as a code owner August 19, 2025 07:01
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 19, 2025
Copy link
Contributor

github-actions bot commented Aug 19, 2025

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@nx/eslint 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/js ^21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/vite ^21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/devkit 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/eslint 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/js 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-darwin-arm64 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-darwin-x64 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-freebsd-x64 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-linux-arm-gnueabihf 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-linux-arm64-gnu 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-linux-arm64-musl 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-linux-x64-gnu 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-linux-x64-musl 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-win32-arm64-msvc 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/nx-win32-x64-msvc 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/vite 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/@nx/workspace 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected
npm/nx 21.4.0 🟢 3.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Security-Policy⚠️ 0security policy file not detected
Signed-Releases⚠️ -1no releases found
Binary-Artifacts🟢 7binaries present in source code
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities⚠️ 094 existing vulnerabilities detected

Scanned Files

  • lambdas/package.json
  • lambdas/yarn.lock

@npalm npalm merged commit 3ba24a6 into main Aug 25, 2025
6 checks passed
@npalm npalm deleted the dependabot/npm_and_yarn/lambdas/nx-daec1b43bf branch August 25, 2025 20:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant