- Big update!Introducing GitHub Bot Commands. Learn more →
Unstable ownership
Severity
High
Description
A new collaborator has begun publishing package versions. Package stability and security risk may be elevated.
Suggestion
Try to reduce the amount of authors you depend on to reduce the risk to malicious actors gaining access to your supply chain. Packages should remove inactive collaborators with publishing rights from packages on npm.
Packages with this issue
@zeit/schemas
All schemas used for validation that are shared between our projects
remove-accents
Converting the accented characters to their corresponding non-accented ASCII characters.
sanitize-html
Clean up user-submitted HTML, preserving allowlisted elements and allowlisted attributes on a per-element basis
react-devtools-core
Use react-devtools outside of the browser
@rails/actioncable
WebSocket framework for Ruby on Rails.
@contentful/rich-text-types
Type definitions and constants for the Contentful rich text field type.
@rails/ujs
Ruby on Rails unobtrusive scripting adapter