upgrade telejson

[ndelangen]

upgrade telejson

[socket-security]

Socket Security Pull Request Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package	Script field	Source
core-js-pure@3.26.1 (added)	postinstall	code/yarn.lock via @testing-library/dom@7.31.2, aria-query@4.2.2, @babel/runtime-corejs3@7.20.6,code/addons/a11y/package.json via @testing-library/react@11.2.7, @testing-library/dom@7.31.2, aria-query@4.2.2, @babel/runtime-corejs3@7.20.6,code/addons/interactions/package.json via @storybook/testing-library@0.0.14-next.0, @testing-library/user-event@13.5.0, @testing-library/dom@7.31.2, aria-query@4.2.2, @babel/runtime-corejs3@7.20.6,code/ui/manager/package.json via @testing-library/react@11.2.7, @testing-library/dom@7.31.2, aria-query@4.2.2, @babel/runtime-corejs3@7.20.6,scripts/package.json via @testing-library/dom@7.31.2, aria-query@4.2.2, @babel/runtime-corejs3@7.20.6,test-storybooks/external-docs/package.json via @testing-library/dom@7.31.2, aria-query@4.2.2, @babel/runtime-corejs3@7.20.6

Pull request report summary

Issue	Status
Install scripts	⚠️ 1 issue
Native code	✅ 0 issues
Bin script confusion	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@2.4.2

• @SocketSecurity ignore core-js-pure@3.26.1

⚠️ Please accept the latest app permissions to ensure bot commands work properly. Accept the new permissions here.

Powered by socket.dev

[ndelangen]

self merging @shilman