chore(deps): bump typeorm from 0.3.20 to 0.3.26 in /back-end #1960
StepSecurity Actions Security / StepSecurity Required Checks
succeeded
Oct 31, 2025 in 6s
StepSecurity Required Checks
Finished StepSecurity Required Checks
- NPM Package Cooldown Check - Fails if any package version in the PR was released within the configured cooldown period, helping to avoid brand-new (and potentially unreviewed or malicious) releases
- Script Injection Check - Checks for script injection vulnerabilities in the PR
- NPM Compromised Packages Check - Checks for compromised npm package versions in the PR
Details
✅ Script Injection Vulnerabilities Check
No Script Injection vulnerabilities found in this PR.
✅ NPM Compromised Packages Check
No Compromised npm packages are added in current PR.
✅ NPM Package Cooldown Check
No npm package upgrades to recent releases found in current PR.
The following npm packages are inspected in current PR (showing first 50 of 61 packages)
| Package Name | Previous Version | Current Version | file | Current Version Release Date |
|---|---|---|---|---|
| dayjs | 1.11.13 | 1.11.19 | pnpm-lock.yaml | 2025-10-31T05:07:50Z |
| node-abi | 3.75.0 | 3.80.0 | pnpm-lock.yaml | 2025-10-30T16:06:05Z |
| exponential-backoff | 3.1.2 | 3.1.3 | pnpm-lock.yaml | 2025-10-10T23:10:07Z |
| detect-libc | 2.0.4 | 2.1.2 | pnpm-lock.yaml | 2025-10-05T12:46:33Z |
| lru-cache | 11.0.2 | 11.2.2 | pnpm-lock.yaml | 2025-09-23T17:02:13Z |
| error-ex | 1.3.2 | 1.3.4 | pnpm-lock.yaml | 2025-09-15T14:58:41Z |
| strip-ansi | 7.1.0 | 7.1.2 | pnpm-lock.yaml | 2025-09-08T15:05:29Z |
| ansi-styles | 6.2.1 | 6.2.3 | pnpm-lock.yaml | 2025-09-08T14:52:15Z |
| ansi-regex | 6.1.0 | 6.2.2 | pnpm-lock.yaml | 2025-09-08T14:48:14Z |
| dedent | 1.5.3 | 1.7.0 | pnpm-lock.yaml | 2025-09-03T18:09:19Z |
| typeorm | 0.3.20 | 0.3.26 | package.json | 2025-08-18T16:37:00Z |
| agent-base | 7.1.3 | 7.1.4 | pnpm-lock.yaml | 2025-07-07T17:44:01Z |
| metro-transform-worker | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:17:04Z |
| metro-transform-plugins | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:17:03Z |
| metro-symbolicate | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:17:01Z |
| metro-source-map | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:17:00Z |
| metro-runtime | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:16:58Z |
| metro-resolver | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:16:57Z |
| metro-minify-terser | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:16:55Z |
| metro-file-map | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:16:53Z |
| metro-core | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:16:51Z |
| metro-config | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:16:50Z |
| metro-cache-key | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:16:48Z |
| metro-cache | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:16:47Z |
| metro-babel-transformer | 0.82.4 | 0.82.5 | pnpm-lock.yaml | 2025-07-06T08:16:45Z |
| react-devtools-core | 6.1.2 | 6.1.5 | pnpm-lock.yaml | 2025-07-04T15:44:13Z |
| sha.js | 2.4.11 | 2.4.12 | pnpm-lock.yaml | 2025-07-01T17:46:33Z |
| hermes-parser | 0.28.1 | 0.29.1 | pnpm-lock.yaml | 2025-06-27T07:58:30Z |
| hermes-estree | 0.28.1 | 0.29.1 | pnpm-lock.yaml | 2025-06-27T07:57:34Z |
| end-of-stream | 1.4.5 | pnpm-lock.yaml | 2025-06-16T13:29:00Z | |
| pump | 3.0.2 | 3.0.3 | pnpm-lock.yaml | 2025-06-16T09:15:59Z |
| glob | 11.0.1 | 11.0.3 | pnpm-lock.yaml | 2025-06-12T20:23:24Z |
| brace-expansion | 2.0.1 | 2.0.2 | pnpm-lock.yaml | 2025-06-11T08:48:36Z |
| acorn | 8.14.1 | 8.15.0 | pnpm-lock.yaml | 2025-06-08T16:23:04Z |
| sql-highlight | 6.1.0 | pnpm-lock.yaml | 2025-06-06T10:53:14Z | |
| call-bound | 1.0.4 | pnpm-lock.yaml | 2025-03-03T17:50:03Z | |
| ansis | 3.17.0 | pnpm-lock.yaml | 2025-03-02T00:32:30Z | |
| foreground-child | 3.3.0 | 3.3.1 | pnpm-lock.yaml | 2025-02-24T16:47:52Z |
| call-bind-apply-helpers | 1.0.1 | 1.0.2 | pnpm-lock.yaml | 2025-02-12T19:24:56Z |
| for-each | 0.3.5 | pnpm-lock.yaml | 2025-02-11T06:56:03Z | |
| es-object-atoms | 1.1.1 | pnpm-lock.yaml | 2025-01-15T00:42:43Z | |
| get-proto | 1.0.1 | pnpm-lock.yaml | 2025-01-02T20:08:02Z | |
| math-intrinsics | 1.1.0 | pnpm-lock.yaml | 2024-12-19T05:58:09Z | |
| is-typed-array | 1.1.15 | pnpm-lock.yaml | 2024-12-18T17:20:07Z | |
| es-define-property | 1.0.1 | pnpm-lock.yaml | 2024-12-06T18:16:02Z | |
| call-bind | 1.0.8 | pnpm-lock.yaml | 2024-12-06T05:19:14Z | |
| gopd | 1.2.0 | pnpm-lock.yaml | 2024-12-04T16:21:52Z | |
| has-symbols | 1.1.0 | pnpm-lock.yaml | 2024-12-02T16:34:17Z | |
| ip-address | 9.0.5 | 10.0.1 | pnpm-lock.yaml | 2024-10-10T20:34:21Z |
| hasown | 2.0.2 | pnpm-lock.yaml | 2024-03-10T17:38:25Z |
⏲️ History
Previous invocation results of same check:
✅ NPM Compromised Packages Check
No Compromised npm packages are added in current PR.
✅ Script Injection Vulnerabilities Check
No Script Injection vulnerabilities found in this PR.
❌ NPM Package Cooldown Check
The following npm packages added in current PR are recent versions(not older than 2 days). This check will pass at 2025-11-03T05:07:50Z
| Package Name | Previous Version | Current Version | file | Current Version Release Date |
|---|---|---|---|---|
| node-abi | 3.75.0 | 3.80.0 | pnpm-lock.yaml | 2025-10-30T16:06:05Z |
| dayjs | 1.11.13 | 1.11.19 | pnpm-lock.yaml | 2025-10-31T05:07:50Z |
⏲️ History
Previous invocation results of same check:
Loading