Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

hot-formula-parser

Ecosystem:
npm
Package URL:
pkg:npm/hot-formula-parser
Total PRs:
758 Dependabot PRs
Latest PR:
4 days ago
Unique Repositories:
627 repositories
Unique Repos (30 days):
18 repositories
Security Advisories
Command Injection in hot-formula-parser
GHSA-rc77-xxq6-4mff CVE-2020-6836 CRITICAL published almost 6 years ago • updated 4 days ago
Versions of `hot-formula-parser` prior to 3.0.1 are vulnerable to Command Injection. The package fails to sanitize values passed to the `parse` fu...
Recent PRs
RSS Feed
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

polojuchandu/demo #6

3.0.0 → 4.0.0 Major PR
Open 4 days ago 1 comment
polojuchandu
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

Luggage-Logistics/dependabot-demo #6

3.0.0 → 4.0.0 Major PR
Open 4 days ago 1 comment
Luggage-Logistics
Bump the npm_and_yarn group across 1 directory with 2 updates

tristanscholten/dependabot #7

3.0.0 → 3.0.1 Patch PR
Open 8 days ago 1 comment
tristanscholten
Bump hot-formula-parser from 3.0.0 to 3.0.1 in /javascript

freek-aizy/demo #7

3.0.0 → 3.0.1 Patch PR
Open 10 days ago 1 comment
freek-aizy
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

BlckHawker/demo #7

3.0.0 → 4.0.0 Major PR
Open 13 days ago 1 comment
BlckHawker
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

ananegrea/demo #6

3.0.0 → 4.0.0 Major PR
Open 16 days ago 1 comment
ananegrea
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

ananegrea/demo-dependabot #6

3.0.0 → 4.0.0 Major PR
Open 16 days ago 1 comment
ananegrea
Bump the all-dependencies group in /javascript with 5 updates

BhaveshAnandpara-bentley/dependabot-demo #14

3.0.0 → 4.0.0 Major PR
Open 17 days ago 1 comment
BhaveshAnandpara-bentley
Bump hot-formula-parser from 3.0.0 to 3.0.1 in /javascript

BhaveshAnandpara-bentley/dependabot-demo #8

3.0.0 → 3.0.1 Patch PR
Closed 17 days ago 2 comments
BhaveshAnandpara-bentley
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

chumbayaa/dependabot #5

3.0.0 → 4.0.0 Major PR
Open 20 days ago 1 comment
chumbayaa
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

Paumen/demo #6

3.0.0 → 4.0.0 Major PR
Open 21 days ago 1 comment
Paumen
Bump the npm_and_yarn group across 1 directory with 2 updates

vorn003/demo-dependabot #7

3.0.0 → 3.0.1 Patch PR
Open 21 days ago 1 comment
vorn003
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

vorn003/demo-dependabot #6

3.0.0 → 4.0.0 Major PR
Open 21 days ago 1 comment
vorn003
Bump the npm_and_yarn group across 1 directory with 2 updates

denisarissa/depbot-demo #7

3.0.0 → 3.0.1 Patch PR
Open 23 days ago 2 comments
denisarissa
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

rasahina-1/demo #5

3.0.0 → 4.0.0 Major PR
Open 25 days ago 1 comment
rasahina-1
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

anmfan/demo #5

3.0.0 → 4.0.0 Major PR
Open 25 days ago 1 comment
anmfan
Bump hot-formula-parser from 3.0.0 to 3.0.1 in /javascript

kkbbg3107/demo-dependabot #6

3.0.0 → 3.0.1 Patch PR
Open 29 days ago 1 comment
kkbbg3107
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

liamrobinson-sec/demo #2

3.0.0 → 4.0.0 Major PR
Open about 1 month ago 1 comment
liamrobinson-sec
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

JanisHuber/dependabot #6

3.0.0 → 4.0.0 Major PR
Open about 1 month ago 1 comment
JanisHuber
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

tanmaymahajan/demo #6

3.0.0 → 4.0.0 Major PR
Open about 1 month ago 1 comment
tanmaymahajan
Bump hot-formula-parser from 3.0.0 to 3.0.1 in /javascript

hakonmuggerud/demo-dependabot #7

3.0.0 → 3.0.1 Patch PR
Open about 1 month ago 4 comments
hakonmuggerud
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

Matthieu-steelseries/demo #5

3.0.0 → 4.0.0 Major PR
Open about 1 month ago 1 comment
Matthieu-steelseries
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

johannaedh2/dependabot-demo #5

3.0.0 → 4.0.0 Major PR
Open about 1 month ago 1 comment
johannaedh2
Bump the npm_and_yarn group across 1 directory with 2 updates

prajoldavid/dependabot-test #7

3.0.0 → 3.0.1 Patch PR
Open about 1 month ago 1 comment
prajoldavid
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

vratier/dependabot-demo #4

3.0.0 → 4.0.0 Major PR
Open about 1 month ago 1 comment
vratier
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

jakebark/demo #6

3.0.0 → 4.0.0 Major PR
Open about 1 month ago 1 comment
jakebark
Bump the npm_and_yarn group across 1 directory with 2 updates

Nachha/demo_depend #7

3.0.0 → 3.0.1 Patch PR
Open about 2 months ago 1 comment
Nachha
Bump the npm_and_yarn group across 1 directory with 2 updates

raphagibello/demo_dependabot #8

3.0.0 → 3.0.1 Patch PR
Open about 2 months ago 1 comment
raphagibello
Bump the npm_and_yarn group across 1 directory with 2 updates

z41020443-ctrl/demo #7

3.0.0 → 3.0.1 Patch PR
Open about 2 months ago 1 comment
z41020443-ctrl
Bump the npm_and_yarn group across 1 directory with 2 updates

kmagzhan/demo #7

3.0.0 → 3.0.1 Patch PR
Open about 2 months ago 1 comment
kmagzhan
Bump the npm_and_yarn group across 1 directory with 2 updates

LITMAS-AI/dependabot #8

3.0.0 → 3.0.1 Patch PR
Open about 2 months ago 1 comment
LITMAS-AI
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

MeteoriteLabs/depandabot #5

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 1 comment
MeteoriteLabs
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

jsvoboda-prgs/dependabot-demo #5

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 1 comment
jsvoboda-prgs
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

opro-cho-shunrin/DependabotDemo #6

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 1 comment
opro-cho-shunrin
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

emilaukner/dependabot-demo #6

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 1 comment
emilaukner
Bump hot-formula-parser from 3.0.0 to 3.0.1 in /javascript in the npm_and_yarn group across 1 directory

janileho/dependabot #7

3.0.0 → 3.0.1 Patch PR
Open about 2 months ago 1 comment
janileho
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

Container-xChange/xc-dependabot #6

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 1 comment
Container-xChange
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

CivicAIScraper/demo #5

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 2 comments
CivicAIScraper
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

zachnjuegebeya/demo #7

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 1 comment
zachnjuegebeya
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

UpShiftNZ/dependabot-demo #6

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 1 comment
UpShiftNZ
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

zburstein-rrwm/dependabot-demo #6

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 1 comment
zburstein-rrwm
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

wankaiss/dependabot-demo #6

3.0.0 → 4.0.0 Major PR
Open about 2 months ago 5 comments
wankaiss
Bump the npm_and_yarn group across 1 directory with 2 updates

BernhardFraidel/Dependabot-demo #7

3.0.0 → 3.0.1 Patch PR
Open 2 months ago 1 comment
BernhardFraidel
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

BernhardFraidel/Dependabot-demo #6

3.0.0 → 4.0.0 Major PR
Open 2 months ago 5 comments
BernhardFraidel
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

astra1dev/demo #6

3.0.0 → 4.0.0 Major PR
Open 2 months ago 1 comment
astra1dev
Bump hot-formula-parser from 3.0.0 to 3.0.1 in /javascript

michel-kth/demo #1

3.0.0 → 3.0.1 Patch PR
Closed 2 months ago 1 comment
michel-kth
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

fernando-since/dependabot-practice #5

3.0.0 → 4.0.0 Major PR
Open 2 months ago 1 comment
fernando-since
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

kazumasa-kato/demo #7

3.0.0 → 4.0.0 Major PR
Open 2 months ago 1 comment
kazumasa-kato
Bump hot-formula-parser from 3.0.0 to 4.0.0 in /javascript

Kullas233/Dependabot #6

3.0.0 → 4.0.0 Major PR
Open 2 months ago 1 comment
Kullas233
Bump hot-formula-parser from 3.0.1 to 4.0.0 in /javascript

PavanRaga/demo #7

3.0.1 → 4.0.0 Major PR
Open 2 months ago 1 comment
PavanRaga
Package Details
Name: hot-formula-parser
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/hot-formula-parser
JSON API: View JSON
Security Advisories

1

Active advisories
CRITICAL 1
View All npm Advisories
Package Information
Description:

Formula parser

Repository: https://github.com/handsontable/formula-parser
Homepage: https://github.com/handsontable/formula-parser
Latest Release: 4.0.0
about 5 years ago
Dependent Repos: 674
Dependent Packages: 70
Downloads: 371,999
Ranking: Top 0.7151% by dependent repos Top 0.5249% by downloads Top 0.4991% by dependent pkgs
PR Status
Open 631 (83.2%)
Merged 68 (9.0%)
Closed 45 (5.9%)
PR Types
Patch 268 (35.4%)
Major 476 (62.8%)