ci: add npm audit check to CI to catch new vulnerabilities #2
ci.yml
on: pull_request
Lint & Type-check
27s
Security audit
21s
Test
31s
Build & bundle size
36s
Annotations
11 errors and 7 warnings
|
Security audit
Process completed with exit code 1.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L158
Property 'signedTxXdr' does not exist on type 'string'.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L157
Property 'error' does not exist on type 'string'.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L157
Property 'error' does not exist on type 'string'.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L155
Object literal may only specify known properties, and 'address' does not exist in type '{ network?: string | undefined; networkPassphrase?: string | undefined; accountToSign?: string | undefined; }'.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L140
Property 'networkPassphrase' does not exist on type 'string'.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L139
Property 'network' does not exist on type 'string'.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L111
Property 'networkPassphrase' does not exist on type 'string'.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L110
Property 'network' does not exist on type 'string'.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L90
Property 'isConnected' does not exist on type 'Boolean'.
|
|
Build & bundle size:
src/hooks/useFreighter.ts#L4
Module '"@stellar/freighter-api"' has no exported member 'getAddress'. Did you mean to use 'import getAddress from "@stellar/freighter-api"' instead?
|
|
Security audit
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Lint & Type-check
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Lint & Type-check:
src/hooks/useOfferBook.ts#L65
React Hook useEffect has a complex expression in the dependency array. Extract it to a separate variable so it can be statically checked
|
|
Lint & Type-check:
src/hooks/useOfferBook.ts#L65
React Hook useEffect has a complex expression in the dependency array. Extract it to a separate variable so it can be statically checked
|
|
Lint & Type-check:
src/hooks/useOfferBook.ts#L65
React Hook useEffect has missing dependencies: 'data', 'options.buying', and 'options.selling'. Either include them or remove the dependency array
|
|
Test
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Build & bundle size
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@v4, actions/setup-node@v4, andresz1/size-limit-action@v1. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|