New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(core): replace unmaintained shelljs dependency by execa #10358

Draft

OzakIOne wants to merge 2 commits into main from ozaki/execa

Draft

chore(core): replace unmaintained shelljs dependency by execa #10358

Merge branch 'main' into ozaki/execa

GitHub Advanced Security / CodeQL succeeded Aug 9, 2024 in 7s

8 new alerts including 8 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

8 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 525 in packages/create-docusaurus/src/index.ts

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This path concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 525 in packages/create-docusaurus/src/index.ts

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This path concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 586 in packages/create-docusaurus/src/index.ts

Code scanning / CodeQL

Shell command built from environment values Medium

This shell command depends on an uncontrolled

absolute path

.

Check warning on line 586 in packages/create-docusaurus/src/index.ts

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 298 in packages/docusaurus-utils/src/urlUtils.ts

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 310 in packages/docusaurus-utils/src/urlUtils.ts

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 312 in packages/docusaurus-utils/src/urlUtils.ts

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.
This string concatenation which depends on

library input

is later used in a

shell command

.

Check warning on line 215 in packages/docusaurus/src/commands/deploy.ts

Code scanning / CodeQL

Unsafe shell command constructed from library input Medium

This string concatenation which depends on

library input

is later used in a

shell command

.