Wiz: Upgrade showdown to 12.0.0 (resolves 1 finding) - #33
Wiz: Upgrade showdown to 12.0.0 (resolves 1 finding)#33wiz-03f7a162ef[bot] wants to merge 1 commit into
Conversation
|
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension. |
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension. |
Wiz Scan Summary
To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension. |
![wiz-03f7a162ef[bot]](https://avatars.githubusercontent.com/u/12095627?s=60&v=4){kind=small}
| "@bynder/compact-view": "^5.4.0", | ||
| "@wordpress/block-editor": "^8.0.13", | ||
| "@wordpress/blocks": "^11.1.5", | ||
| "@wordpress/blocks": "12.0.0", |
There was a problem hiding this comment.
Code library with Restrictive license
More Details
Code library @wordpress/blocks version 12.0.0 has GPL-2.0-or-later license, categorized as Restrictive, its use may cause a supply chain licensing issue.
Remediation guidance
- Review the license terms to understand its specific rules.
- If needed, Replace this component immediately with an alternative using a permissive license (e.g., MIT, Apache 2.0).
- Consult your legal team if the component is business-critical or the terms are unclear.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| "@bynder/compact-view": "^5.4.0", | ||
| "@wordpress/block-editor": "^8.0.13", | ||
| "@wordpress/blocks": "^11.1.5", | ||
| "@wordpress/blocks": "12.0.0", |
There was a problem hiding this comment.
Code library with Restrictive license
More Details
Code library @wordpress/blocks version 12.0.0 has GPL-2.0-or-later license, categorized as Restrictive, its use may cause a supply chain licensing issue.
Remediation guidance
- Review the license terms to understand its specific rules.
- If needed, Replace this component immediately with an alternative using a permissive license (e.g., MIT, Apache 2.0).
- Consult your legal team if the component is business-critical or the terms are unclear.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
| "@bynder/compact-view": "^5.4.0", | ||
| "@wordpress/block-editor": "^8.0.13", | ||
| "@wordpress/blocks": "^11.1.5", | ||
| "@wordpress/blocks": "12.0.0", |
There was a problem hiding this comment.
Code library with Restrictive license
More Details
Code library @wordpress/blocks version 12.0.0 has GPL-2.0-or-later license, categorized as Restrictive, its use may cause a supply chain licensing issue.
Remediation guidance
- Review the license terms to understand its specific rules.
- If needed, Replace this component immediately with an alternative using a permissive license (e.g., MIT, Apache 2.0).
- Consult your legal team if the component is business-critical or the terms are unclear.
To ignore this finding as an exception, reply to this conversation with #wiz_ignore reason
If you'd like to ignore this finding in all future scans, add an exception in the .wiz file (learn more) or create an Ignore Rule (learn more).
To get more details on how to remediate this issue using AI, reply to this conversation with #wiz remediate
Wiz has created this PR to fix 1 finding detected in this project
Changes were made to the following file(s):
plugin-src/package.jsonVulnerabilities:
1.9.1 → 12.0.0
/plugin-src/package.jsonTo detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.