@codyswann/lisa 2.16.0 → 2.16.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/expo/copy-overwrite/jest.setup.ts +6 -0
- package/package.json +1 -1
- package/plugins/lisa/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-cdk/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-expo/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-nestjs/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-rails/.claude-plugin/plugin.json +1 -1
- package/plugins/lisa-typescript/.claude-plugin/plugin.json +1 -1
- package/typescript/copy-overwrite/audit.ignore.config.json +10 -0
- package/typescript/package-lisa/package.lisa.json +2 -2
|
@@ -82,6 +82,12 @@ jest.mock("expo-router", () => ({
|
|
|
82
82
|
setOptions: jest.fn(),
|
|
83
83
|
})),
|
|
84
84
|
})),
|
|
85
|
+
// Invoke the callback synchronously so screens that rely on it for
|
|
86
|
+
// mount-time effects behave like a focused screen under test.
|
|
87
|
+
useFocusEffect: jest.fn((callback: () => (() => void) | void) => {
|
|
88
|
+
callback();
|
|
89
|
+
}),
|
|
90
|
+
useIsFocused: jest.fn(() => true),
|
|
85
91
|
Link: ({ children }: { children: React.ReactNode }) => children,
|
|
86
92
|
Stack: {
|
|
87
93
|
Screen: () => null,
|
package/package.json
CHANGED
|
@@ -79,7 +79,7 @@
|
|
|
79
79
|
"lodash": ">=4.18.1"
|
|
80
80
|
},
|
|
81
81
|
"name": "@codyswann/lisa",
|
|
82
|
-
"version": "2.16.
|
|
82
|
+
"version": "2.16.2",
|
|
83
83
|
"description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
|
|
84
84
|
"main": "dist/index.js",
|
|
85
85
|
"exports": {
|
|
@@ -137,6 +137,16 @@
|
|
|
137
137
|
"id": "GHSA-j759-j44w-7fr8",
|
|
138
138
|
"package": "@xmldom/xmldom",
|
|
139
139
|
"reason": "XML node injection via unvalidated comment serialization. Transitive via expo > @expo/config-plugins > @expo/plist; only serializes developer-authored plist files at build/prebuild time, no runtime code path serializes attacker-controlled XML."
|
|
140
|
+
},
|
|
141
|
+
{
|
|
142
|
+
"id": "GHSA-v39h-62p7-jpjc",
|
|
143
|
+
"package": "fast-uri",
|
|
144
|
+
"reason": "Host confusion via percent-encoded authority delimiters in fast-uri parser. Transitive devDep via eslint > @eslint/eslintrc > ajv > fast-uri (also via commitlint, lisa); no production code path passes attacker-controlled URIs through ajv schema validation that relies on fast-uri parsing."
|
|
145
|
+
},
|
|
146
|
+
{
|
|
147
|
+
"id": "GHSA-q3j6-qgpj-74h6",
|
|
148
|
+
"package": "fast-uri",
|
|
149
|
+
"reason": "Path traversal via percent-encoded dot segments in fast-uri parser. Transitive devDep via eslint > @eslint/eslintrc > ajv > fast-uri (also via commitlint, lisa); no production code path passes attacker-controlled URIs through ajv schema validation that relies on fast-uri parsing."
|
|
140
150
|
}
|
|
141
151
|
]
|
|
142
152
|
}
|
|
@@ -23,12 +23,12 @@
|
|
|
23
23
|
},
|
|
24
24
|
"resolutions": {
|
|
25
25
|
"@isaacs/brace-expansion": "^5.0.1",
|
|
26
|
-
"axios": ">=1.15.
|
|
26
|
+
"axios": ">=1.15.2",
|
|
27
27
|
"handlebars": ">=4.7.9"
|
|
28
28
|
},
|
|
29
29
|
"overrides": {
|
|
30
30
|
"@isaacs/brace-expansion": "^5.0.1",
|
|
31
|
-
"axios": ">=1.15.
|
|
31
|
+
"axios": ">=1.15.2",
|
|
32
32
|
"handlebars": ">=4.7.9"
|
|
33
33
|
}
|
|
34
34
|
},
|