- Big update!Introducing GitHub Bot Commands. Learn more →
Filesystem access
Severity
Low
Description
Accesses the file system, and could potentially read sensitive data.
Suggestion
If a package must read the file system, clarify what it will read and ensure it reads only what it claims to. If appropriate, packages can leave file system access to consumers and operate on data passed to it instead.
Packages with this issue
wpm-webiste-performance-monitoring
Website Performance Monitoring (WPM) is a Puppeteer-based library developed in order to monitor the performance of a website using WebVitals scores (like Lighthouse).
duclearc
published 1.0.1 • source-map
Generates and consumes source maps
loganfsmyth
published 0.8.0-beta.0 • locate-path
Get the first path that exists on disk of multiple paths
sindresorhus
published 7.1.1 • schema-utils
webpack Validation Utils
michael-ciniawsky
published 1.0.0 •