phylum-dev/vuln-reach issues and pull requests

#70 - Switch license to Apache 2.0

Pull Request - State: closed - Opened by andreaphylum 6 months ago

#69 - Error: called `Option::unwrap()` on a `None` value

Issue - State: open - Opened by dappelt about 1 year ago - 1 comment
Labels: bug

#68 - Consider handling duplicate main fields in package.json

Issue - State: open - Opened by dappelt about 1 year ago - 1 comment

#67 - Configuration format not sufficient to resolve packages aliases

Issue - State: open - Opened by dappelt about 1 year ago

#66 - Error downloading packages

Issue - State: open - Opened by dappelt about 1 year ago - 1 comment
Labels: bug

#65 - QoL updates

Pull Request - State: closed - Opened by andreaphylum about 1 year ago

#64 - Reachability analysis failed for [email protected] and [email protected]

Issue - State: open - Opened by dappelt about 1 year ago - 8 comments

#63 - Update Cargo.toml

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#62 - Update Cargo.toml for publishing

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#61 - Update README.md

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#60 - Enhance default exports

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#59 - Simplify root scope retrieval

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#58 - Shorthand identifiers are not handled correctly

Issue - State: open - Opened by andreaphylum over 1 year ago
Labels: bug

#57 - Change `find_accessor` to only emit identifiers

Pull Request - State: closed - Opened by andreaphylum over 1 year ago - 1 comment

#56 - Dependency cycles at the package level are not handled

Issue - State: open - Opened by andreaphylum over 1 year ago
Labels: bug

#55 - Remove unnecessary argument from `Project` constructor

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#54 - Bump `ouroboros` to 0.17

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#53 - Add test utilities and tests against real packages

Pull Request - State: closed - Opened by andreaphylum over 1 year ago - 1 comment

#52 - Add statistics to benchmark harness

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#51 - Remove assertions

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#50 - Fix parameter of catch block

Pull Request - State: closed - Opened by cd-work over 1 year ago

#49 - Review assumptions for `SymbolTableBuilder::root_scope` method

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: enhancement, low priority, implementation detail

#48 - Validate whether kind check in `compute_paths` is redundant

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: enhancement, low priority, implementation detail

#47 - Validate choice of `PathToExport` name in ES Modules

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: enhancement, low priority, implementation detail

#46 - Add tests for class reachability

Pull Request - State: closed - Opened by cd-work over 1 year ago

#45 - Add variable declaration support

Pull Request - State: closed - Opened by cd-work over 1 year ago

#45 - Add variable declaration support

Pull Request - State: closed - Opened by cd-work over 1 year ago

#44 - Add documentation

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#43 - Fix global variable hoisting

Pull Request - State: closed - Opened by cd-work over 1 year ago

#42 - Reachability is incorrect for assignments

Issue - State: closed - Opened by cd-work over 1 year ago
Labels: bug, high priority

#41 - Fix variable declaration access graphs

Issue - State: closed - Opened by cd-work over 1 year ago
Labels: bug, high priority

#40 - Add end position to vulnerable nodes

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#39 - Add support for anonymous functions and lambdas

Pull Request - State: closed - Opened by cd-work over 1 year ago

#38 - Skip processing modules with parse errors

Pull Request - State: closed - Opened by andreaphylum over 1 year ago - 4 comments

#37 - Fix tarball resolution without toplevel `package`

Pull Request - State: closed - Opened by cd-work over 1 year ago

#36 - Recognize dynamic function/closure definitions

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: bug, high priority

#35 - Handle catch clause

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#34 - Parameter identifier in `catch` clause ignored

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: bug, high priority

#33 - Panic on packages with uncommon directory structure

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: bug, high priority

#32 - Support formal_parameters node with comments next to them

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#31 - Support multiple versions of the same package in a tree

Issue - State: open - Opened by andreaphylum over 1 year ago
Labels: enhancement, medium priority

#30 - Use expanded information in `VulnerableNode`

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: enhancement, medium priority

#29 - Add observability

Issue - State: open - Opened by andreaphylum over 1 year ago
Labels: enhancement, medium priority

#28 - Improve comments

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: documentation, medium priority

#27 - Skip processing modules with parse errors

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: bug, high priority

#26 - Move from assertions to `Result`

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: enhancement, medium priority

#25 - Failing assertion in topological sorting

Issue - State: closed - Opened by andreaphylum over 1 year ago - 3 comments
Labels: bug, high priority

#24 - Improve module loading performance

Pull Request - State: closed - Opened by cd-work over 1 year ago

#23 - Fix symbol table evaluation bug

Pull Request - State: closed - Opened by andreaphylum over 1 year ago - 1 comment

#22 - Symbol table fails to parse functions with comments between formal parameters and body

Issue - State: closed - Opened by andreaphylum over 1 year ago
Labels: bug, high priority

#21 - Add API types to vuln-reach

Pull Request - State: closed - Opened by cd-work over 1 year ago - 3 comments

#20 - Add `edges_from` method to `ProjectReachability`

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#19 - Simplify `ProjectReachability` API

Pull Request - State: closed - Opened by andreaphylum over 1 year ago

#18 - Create CODE_OF_CONDUCT.md

Pull Request - State: closed - Opened by louislang almost 2 years ago - 1 comment

#17 - Update screencast

Pull Request - State: closed - Opened by andreaphylum almost 2 years ago

#16 - Expose packages in `PackageResolver`

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: enhancement, medium priority

#15 - Update README.md

Pull Request - State: closed - Opened by andreaphylum almost 2 years ago

#14 - Improve documentation

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: documentation, medium priority

#13 - Research (2023.8)

Issue - State: closed - Opened by andreaphylum almost 2 years ago
Labels: research

#12 - Improve test coverage

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: enhancement, medium priority

#11 - Implement discovery for `Project`

Issue - State: closed - Opened by andreaphylum almost 2 years ago
Labels: enhancement, needs triage

#10 - Improve "access" concept

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: enhancement, research, implementation detail

#9 - CommonJs is over-colored across packages

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: enhancement

#8 - CommonJS reexports

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: enhancement, needs triage

#7 - Address `ts_node_parent` performance issues

Issue - State: closed - Opened by andreaphylum almost 2 years ago - 1 comment
Labels: low priority, implementation detail

#6 - Improve representation of the `PathToExport` graph

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: implementation detail

#5 - Allow for multiple kinds of resolvers

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: enhancement, low priority

#4 - Support `"imports"` field in `package.json`

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: enhancement, low priority

#3 - Support `"exports"` field in `package.json`

Issue - State: open - Opened by andreaphylum almost 2 years ago
Labels: enhancement, low priority

#2 - Clarify license

Issue - State: open - Opened by kylewillmon almost 2 years ago

#1 - Add vuln-reach code

Pull Request - State: closed - Opened by andreaphylum almost 2 years ago

GitHub / phylum-dev/vuln-reach issues and pull requests