
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
support-requests
Advanced tools
A GitHub App built with Probot that comments on and closes issues labeled as support requests.
This project is no longer maintained, please migrate to Support Requests.
Support Requests is a GitHub App built with Probot that comments on and closes issues labeled as support requests.

.github/support.yml based on the template belowIf possible, install the app only for select repositories.
Do not leave the All repositories option selected, unless you intend
to use the app for all current and future repositories.
Create .github/support.yml in the default branch to enable the app,
or add it at the same file path to a repository named .github.
The file can be empty, or it can override any of these default settings:
# Configuration for Support Requests - https://github.com/dessant/support-requests-app
# Label used to mark issues as support requests
supportLabel: support
# Comment to post on issues marked as support requests, `{issue-author}` is an
# optional placeholder. Set to `false` to disable
supportComment: >
:wave: @{issue-author}, we use the issue tracker exclusively for bug reports
and feature requests. However, this issue appears to be a support request.
Please use our support channels to get help with the project.
# Close issues marked as support requests
close: true
# Lock issues marked as support requests
lock: false
# Assign `off-topic` as the reason for locking. Set to `false` to disable
setLockReason: true
# Repository to extend settings from
# _extends: repo
See docs/deploy.md if you would like to run your own instance of this app.
Copyright (c) 2017-2021 Armin Sebastian
This software is released under the terms of the MIT License. See the LICENSE file for further information.
FAQs
A GitHub App built with Probot that comments on and closes issues labeled as support requests.
We found that support-requests demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.