3 ms·

Wow.. Yeah that's a great example of exposing what's actually going on! Btw, is there a specific reason you're not listing the "yellow issues" from a packages

Wow.. Yeah that's a great example of exposing what's actually going on! Btw, is there a specific reason you're not listing the "yellow issues" from a packages dependencies on its front page? For instance https://socket.dev/npm/package/mongoose https://socket.dev/npm/package/mongoose doesn't really show anything on the front page, but if you go to "dependency issues" you get "uses network, eval etc.". I think it'd be necessary to treat "dependency issues" the same as the packages own issues.

feross 5y ago
We're not happy with the noisiness of filesystem and network issues, so we mark them as a bit lower priority for the moment. The specific issue is that we currently only detect when 'fs', 'net', etc. are required and not whether they're actually used and which specific functions are used. We're working on improving our analysis and are close to shipping a big update at which point we'll increase the severity of these issues.