add Vulnerability info

This commit is contained in:
Eugenio Romano 2019-06-14 15:57:53 +01:00
parent c0d1f74d57
commit 4733bc7d3b
4 changed files with 41 additions and 1 deletions

View File

@ -34,7 +34,9 @@ A few other pages of information are also available:
version of ADF.
- The [Roadmap](roadmap.md)
contains a preview of features we hope to release in future versions of ADF.
- The [License info](license-info/license-info-v3.0.0.md) section lists the third-party
- The [License info](license-info/README.md) section lists the third-party libraries used by ADF along with links to their Open Source licenses.
- The [Vulnerability](vulnerability/README.md) section lists the third-party
libraries known vulnerability.
libraries used by ADF along with links to their Open Source licenses.
- The [Breaking changes](breaking-changes/breaking-change-2.6.0-3.0.0.md) section lists
all breaking changes between major versions, such as removal of deprecated items.

View File

@ -61,4 +61,5 @@
- compatibility.md: 'Version compatibility'
- release-notes: 'Release notes'
- upgrade-guide: 'Upgrade Guide'
- vulnerability: 'Vulnerability'
- license-info: 'License info'

View File

@ -0,0 +1,10 @@
---
Title: Audit information
Github only: true
---
# License information
The pages linked below contain the audit for all third party dependencies of ADF.
- [ADF v3.3.0](audit-info-3.3.0.md)

View File

@ -0,0 +1,27 @@
---
Title: Audit info, Alfresco Angular components 3.3.0
---
# Audit information for Alfresco Angular components 3.3.0
This page lists the npm audit of the project in the version Alfresco Angular components 3.3.0
## Risks
- Critical risk dependencies 0
- High risk dependencies 0
- Moderate risk dependencies 4
- Low risk dependencies 1
Dependencies analyzed 64965
## Libraries
| Severity | Vulnerable versions | Module |
| --- | --- | --- |
|low | "<4.17.5" | lodash |
|moderate | "<4.17.11" | lodash |
|moderate | ">=0.3.14 <0.6.2" | marked |
|moderate | "<0.18.1" | axios |