Skip to content
This repository was archived by the owner on Jun 12, 2026. It is now read-only.

chore: update protobufjs override - #44

Draft
asutermo wants to merge 3 commits into
mainfrom
cursor/update-protobufjs-1f34
Draft

chore: update protobufjs override#44
asutermo wants to merge 3 commits into
mainfrom
cursor/update-protobufjs-1f34

Conversation

@asutermo

@asutermo asutermo commented May 13, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • update the pnpm protobufjs override from >=7.5.5 to >=8.2.1
  • regenerate the pnpm lockfile so transitive protobufjs users resolve to 8.2.1

Testing

  • pnpm audit --prod
  • pnpm install --frozen-lockfile && pnpm -r typecheck
  • pnpm why protobufjs -r
Open in Web Open in Cursor 

Co-authored-by: Andrew Suter-Morris <asutermo@users.noreply.github.com>
@asutermo
asutermo temporarily deployed to dependency-review May 13, 2026 15:20 — with GitHub Actions Inactive
@github-actions

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

pnpm-lock.yaml

PackageVersionLicenseIssue Type
protobufjs8.2.1NullUnknown License
Allowed Licenses: MIT, MITNFA, Apache-2.0, BSD-2-Clause, BSD-3-Clause, ISC, 0BSD, Unlicense, CC0-1.0, Zlib, PSF-2.0, Python-2.0, BlueOak-1.0.0, BSL-1.0, MPL-2.0

OpenSSF Scorecard

PackageVersionScoreDetails
npm/protobufjs 8.2.1 🟢 6.2
Details
CheckScoreReason
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 4security policy file detected
Packaging⚠️ -1packaging workflow not detected
Code-Review🟢 8Found 25/30 approved changesets -- score normalized to 8
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
License🟢 9license file detected
Fuzzing🟢 10project is fuzzed
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • pnpm-lock.yaml

cursoragent and others added 2 commits May 19, 2026 17:53
Co-authored-by: Andrew Suter-Morris <asutermo@users.noreply.github.com>
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants