@codyswann/lisa 1.82.0 → 1.82.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/cdk/copy-overwrite/tsconfig.json +1 -3
- package/cdk/create-only/tsconfig.local.json +4 -1
- package/expo/copy-overwrite/tsconfig.json +1 -3
- package/expo/create-only/tsconfig.local.json +3 -1
- package/nestjs/copy-overwrite/tsconfig.json +1 -3
- package/nestjs/create-only/tsconfig.local.json +3 -1
- package/package.json +1 -1
- package/plugins/lisa/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.claude-plugin/plugin.json +1 -1
- package/typescript/copy-overwrite/audit.ignore.config.json +45 -0
- package/typescript/copy-overwrite/tsconfig.json +1 -3
- package/typescript/create-only/tsconfig.local.json +3 -1
package/package.json
CHANGED
|
@@ -76,7 +76,7 @@
|
|
|
76
76
|
"lodash": ">=4.18.1"
|
|
77
77
|
},
|
|
78
78
|
"name": "@codyswann/lisa",
|
|
79
|
-
"version": "1.82.
|
|
79
|
+
"version": "1.82.2",
|
|
80
80
|
"description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
|
|
81
81
|
"main": "dist/index.js",
|
|
82
82
|
"exports": {
|
|
@@ -92,6 +92,51 @@
|
|
|
92
92
|
"id": "GHSA-chqc-8p9q-pq6q",
|
|
93
93
|
"package": "basic-ftp",
|
|
94
94
|
"reason": "FTP command injection via CRLF — devDep only via @lhci/cli > proxy-agent > pac-proxy-agent > get-uri, no FTP usage in production code"
|
|
95
|
+
},
|
|
96
|
+
{
|
|
97
|
+
"id": "GHSA-3mfm-83xf-c92r",
|
|
98
|
+
"package": "handlebars",
|
|
99
|
+
"reason": "JS injection via AST type confusion — devDeps only (ts-jest, standard-version), no fix available (4.7.8 is latest)"
|
|
100
|
+
},
|
|
101
|
+
{
|
|
102
|
+
"id": "GHSA-2w6w-674q-4c4q",
|
|
103
|
+
"package": "handlebars",
|
|
104
|
+
"reason": "JS injection via AST type confusion — devDeps only (ts-jest, standard-version), no fix available (4.7.8 is latest)"
|
|
105
|
+
},
|
|
106
|
+
{
|
|
107
|
+
"id": "GHSA-xjpj-3mr7-gcpf",
|
|
108
|
+
"package": "handlebars",
|
|
109
|
+
"reason": "JS injection in CLI precompiler — devDeps only (ts-jest, standard-version), CLI not used"
|
|
110
|
+
},
|
|
111
|
+
{
|
|
112
|
+
"id": "GHSA-xhpv-hc6g-r9c6",
|
|
113
|
+
"package": "handlebars",
|
|
114
|
+
"reason": "JS injection via AST type confusion with dynamic partial — devDeps only (ts-jest, standard-version), no fix available"
|
|
115
|
+
},
|
|
116
|
+
{
|
|
117
|
+
"id": "GHSA-9cx6-37pm-9jff",
|
|
118
|
+
"package": "handlebars",
|
|
119
|
+
"reason": "DoS via malformed decorator syntax — devDeps only (ts-jest, standard-version), no fix available (4.7.8 is latest)"
|
|
120
|
+
},
|
|
121
|
+
{
|
|
122
|
+
"id": "GHSA-r5fr-rjxr-66jc",
|
|
123
|
+
"package": "lodash",
|
|
124
|
+
"reason": "Code injection via _.template — devDeps only (serverless-export-env, commitlint, standard-version), no user input to _.template"
|
|
125
|
+
},
|
|
126
|
+
{
|
|
127
|
+
"id": "GHSA-jg4p-7fhp-p32p",
|
|
128
|
+
"package": "@hapi/content",
|
|
129
|
+
"reason": "ReDoS in HTTP header parsing — devDeps only (serverless-offline), local dev tool not deployed"
|
|
130
|
+
},
|
|
131
|
+
{
|
|
132
|
+
"id": "GHSA-3p68-rc4w-qgx5",
|
|
133
|
+
"package": "axios",
|
|
134
|
+
"reason": "NO_PROXY hostname normalization bypass — devDeps only (serverless), no user-controlled proxy config"
|
|
135
|
+
},
|
|
136
|
+
{
|
|
137
|
+
"id": "GHSA-fvcv-3m26-pcqx",
|
|
138
|
+
"package": "axios",
|
|
139
|
+
"reason": "Cloud metadata exfiltration via header injection — devDeps only (serverless), no user-controlled headers"
|
|
95
140
|
}
|
|
96
141
|
]
|
|
97
142
|
}
|