-
Notifications
You must be signed in to change notification settings - Fork 46
Description
Description
Pull request #1281 added several files from external sources. These files contribute lots of code quality issues. As they are old, they might even contain security issues
In total, GitHub reports 174 maintainability findings and 56 reliability findings.
Example: The file pdfkit.js from PDFKit version 0.13.0 (released 24.10.2021) is listed in several categories. New releases of this file exist and fix a security issue in 0.14.0, but there is currently no process to get and use such newer releases automatically.
Reproduction
Enable code quality checks in the GitHub security settings to get the code quality report.
Expected Behavior
Ideally the code quality report should not find any issues.
External code should be clearly documented (for example in README.md) or even better not be part of the code base, but listed in a specific BOM file which is tracked automatically by GitHub Dependabot.