Skip to content

[MAINTENANCE] Code quality issues in outdated files from external sources #1863

@stweil

Description

@stweil

Description

Pull request #1281 added several files from external sources. These files contribute lots of code quality issues. As they are old, they might even contain security issues

In total, GitHub reports 174 maintainability findings and 56 reliability findings.

Example: The file pdfkit.js from PDFKit version 0.13.0 (released 24.10.2021) is listed in several categories. New releases of this file exist and fix a security issue in 0.14.0, but there is currently no process to get and use such newer releases automatically.

Reproduction

Enable code quality checks in the GitHub security settings to get the code quality report.

Expected Behavior

Ideally the code quality report should not find any issues.

External code should be clearly documented (for example in README.md) or even better not be part of the code base, but listed in a specific BOM file which is tracked automatically by GitHub Dependabot.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions