Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

chownr

Ecosystem:
npm
Package URL:
pkg:npm/chownr
Total PRs:
105 Dependabot PRs
Latest PR:
about 1 month ago
Unique Repositories:
94 repositories
Unique Repos (30 days):
1 repository
Security Advisories
Time-of-check Time-of-use (TOCTOU) Race Condition in chownr
GHSA-c6rq-rjc2-86v2 CVE-2017-18869 LOW published over 4 years ago • updated 2 days ago
A TOCTOU issue in the chownr package before 1.1.0 for Node.js 10.10 could allow a local attacker to trick it into descending into unintended direct...
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
build(deps): bump the npm_and_yarn group across 2 directories with 41 updates

lingnet/nodejs.dev #1

1.1.1 → 1.1.4 Patch PR
Open almost 2 years ago 1 comment
lingnet
Package Details
Name: chownr
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/chownr
JSON API: View JSON
Security Advisories

1

Active advisories
LOW 1
View All npm Advisories
Package Information
Description:

like `chown -R`

Repository: https://github.com/isaacs/chownr
Homepage: https://github.com/isaacs/chownr#readme
Latest Release: 3.0.0
about 2 years ago
Dependent Repos: 3,832,022
Dependent Packages: 706
Downloads: 224,180,608
Ranking: Top 0.0027% by dependent repos Top 0.007% by downloads Top 0.0892% by dependent pkgs
PR Status
Open 42 (40.0%)
Merged 11 (10.5%)
Closed 48 (45.7%)
PR Types
Major 6 (5.7%)
Minor 94 (89.5%)
Patch 1 (1.0%)