Skip to content

Actions: npm/cli

Actions

CodeQL

Actions

Loading...
Loading

Show workflow options

Create status badge

Loading
codeql-analysis.yml
1,991 workflow runs
1,991 workflow runs

Filter by Event

⌥ + click/return to exclude

Filter by Status

⌥ + click/return to exclude

Filter by Branch

⌥ + click/return to exclude

Filter by Actor

⌥ + click/return to exclude
fix(install): reload user config after preinstall CodeQL #6459: Pull request #9909 opened by arhxam
Action required arhxam:codex/preinstall-reload-user-config
arhxam:codex/preinstall-reload-user-config
Action required
fix(ci): allow omitted bundled dependencies in lockfile validation CodeQL #6458: Pull request #9908 opened by arhxam
Action required arhxam:codex/ci-ignore-unlocked-bundled-nodes
arhxam:codex/ci-ignore-unlocked-bundled-nodes
Action required
feat: add no-downgrade package trust policy CodeQL #6457: Pull request #9902 synchronize by isaacsamual994-lang
Action required isaacsamual994-lang:feat/trust-policy-no-downgrade
isaacsamual994-lang:feat/trust-policy-no-downgrade
Action required
feat: add no-downgrade package trust policy CodeQL #6456: Pull request #9902 synchronize by isaacsamual994-lang
Action required isaacsamual994-lang:feat/trust-policy-no-downgrade
isaacsamual994-lang:feat/trust-policy-no-downgrade
Action required
feat: add no-downgrade package trust policy CodeQL #6455: Pull request #9902 synchronize by isaacsamual994-lang
Action required isaacsamual994-lang:feat/trust-policy-no-downgrade
isaacsamual994-lang:feat/trust-policy-no-downgrade
Action required
fix(help): join wrapped multi-line flag descriptions in getUsage CodeQL #6454: Pull request #9907 opened by anasysuf
Action required anasysuf:fix/help-flag-description-truncation
anasysuf:fix/help-flag-description-truncation
Action required
fix(arborist): normalize file and directory paths in allowScripts matcher CodeQL #6453: Pull request #9906 opened by anasysuf
Action required anasysuf:fix/allow-scripts-windows-file-match
anasysuf:fix/allow-scripts-windows-file-match
Action required
fix(arborist): handle directories named yarn.lock CodeQL #6452: Pull request #9905 opened by Fnine59
Action required Fnine59:fix/npm-yarn-lock-directory-8782
Fnine59:fix/npm-yarn-lock-directory-8782
Action required
Revert 1 jas hmar patch 1 CodeQL #6451: Pull request #9904 opened by jasHmar
Action required jasHmar:revert-1-jasHmar-patch-1
jasHmar:revert-1-jasHmar-patch-1
Action required
chore: release 12.0.3 CodeQL #6450: Pull request #9839 synchronize by github-actions Bot
Action required release-please--branches--latest
release-please--branches--latest
Action required
chore: release 12.0.3 CodeQL #6449: Pull request #9839 synchronize by github-actions Bot
Action required release-please--branches--latest
release-please--branches--latest
Action required
fix(arborist): don't fetch packuments for uninstallable optional peer deps CodeQL #6448: Pull request #9903 opened by github-actions Bot
Action required backport/v11/9877
backport/v11/9877
Action required
fix(arborist): don't fetch packuments for uninstallable optional peer… CodeQL #6447: Commit dc43591 pushed by martinrrm
3m 4s latest
latest
3m 4s
feat: add no-downgrade package trust policy CodeQL #6446: Pull request #9902 opened by isaacsamual994-lang
Action required isaacsamual994-lang:feat/trust-policy-no-downgrade
isaacsamual994-lang:feat/trust-policy-no-downgrade
Action required
fix(arborist): match allowScripts keys for local paths CodeQL #6445: Pull request #9901 synchronize by lazerg
1m 33s lazerg:fix/9900-allow-scripts-file-spec
lazerg:fix/9900-allow-scripts-file-spec
1m 33s
fix(arborist): match allowScripts keys for local paths CodeQL #6444: Pull request #9901 opened by lazerg
1m 32s lazerg:fix/9900-allow-scripts-file-spec
lazerg:fix/9900-allow-scripts-file-spec
1m 32s
feat(stage): display staged package status CodeQL #6443: Pull request #9898 opened by joelverhagen
1m 37s joelverhagen:jver/staged-approval-status
joelverhagen:jver/staged-approval-status
1m 37s
fix(exec): suppress run-script notices CodeQL #6442: Pull request #9895 opened by dev-sriramp
-1s dev-sriramp:fix/exec-suppress-run-script-notices
dev-sriramp:fix/exec-suppress-run-script-notices
-1s
fix(arborist): reject uninstall args that carry a version CodeQL #6441: Pull request #9881 synchronize by lazerg
1m 44s lazerg:fix/9880-uninstall-version-spec
lazerg:fix/9880-uninstall-version-spec
1m 44s
fix(arborist): don't fetch packuments for uninstallable optional peer deps CodeQL #6440: Pull request #9877 synchronize by danielroe
1m 34s danielroe:fix/opt-peer-deps
danielroe:fix/opt-peer-deps
1m 34s
deps: update vulnerable transitive dependencies CodeQL #6439: Pull request #9872 synchronize by martinrrm
1m 53s deps/vulnerable-transitives-v11
deps/vulnerable-transitives-v11
1m 53s
deps: update vulnerable transitive dependencies CodeQL #6437: Pull request #9871 synchronize by martinrrm
1m 33s deps/vulnerable-transitives-latest
deps/vulnerable-transitives-latest
1m 33s
deps: update vulnerable transitive dependencies CodeQL #6436: Pull request #9872 synchronize by martinrrm
1m 54s deps/vulnerable-transitives-v11
deps/vulnerable-transitives-v11
1m 54s
deps: update vulnerable transitive dependencies CodeQL #6435: Pull request #9871 synchronize by martinrrm
1m 35s deps/vulnerable-transitives-latest
deps/vulnerable-transitives-latest
1m 35s
fix(exec): don't inherit global config when installing to the npx cache CodeQL #6434: Pull request #9894 synchronize by lazerg
1m 30s lazerg:fix/9890-npx-cache-global
lazerg:fix/9890-npx-cache-global
1m 30s