LavaMoat/LavaMoat

Issues

• Dependency Dashboard

  #780 opened 6 months ago by renovate
  0

• [tracking] webpack plugin feature checklist

  #1170 opened a month ago by naugtur
  0

• [tracking] endomoat feature parity with lavamoat-node

  #1168 opened a month ago by naugtur
  0

• webpack bundling targeting node - customize builtins detection

  #1157 opened 2 months ago by naugtur
  0

• status of Scenarios, reusable test fixtures, etc.

  #1137 opened 2 months ago by boneskull
  0

• lavamoat-core: modularize test utils

  #1136 opened 2 months ago by boneskull
  0

• aa: flaky symlink test

  #1134 opened 2 months ago by boneskull
  0

• browserify: getting super tired of updating test/fixtures/secureBundling/lavamoat/node/policy.json

  #1103 opened 2 months ago by boneskull
  1

• release-please: update lockfile

  #1010 opened 4 months ago by boneskull
  3

• viz: snapshot test

  #975 opened 2 months ago by boneskull
  1

• tofu: support class properties

  #1098 opened 3 months ago by boneskull
  0

• allow async resolver in aa

  #1073 opened 3 months ago by naugtur
  0

• browserify: flakey macOS test timeout

  #1039 opened 3 months ago by leotm
  1

• organise imports via eslint

  #1040 opened 3 months ago by leotm
  1

• policy generation: handle modern node.js module resolution

  #763 opened 3 months ago by boneskull
  11

• endomoat: implement native module loading & policy gen

  #1060 opened 3 months ago by boneskull
  1

• laverna fails on packages with a single version published

  #1047 opened 3 months ago by legobeat
  1

• oops :)

  #1058 opened 3 months ago by thisisjoshford
  0

• Turn off `localeTaming` in lockdown by default to avoid confusing users

  #1029 opened 3 months ago by naugtur
  0

• Attempting to change configurable attribute of unconfigurable property

  #956 opened 4 months ago by au2001
  4

• ci: fail if working tree is dirty

  #721 opened 4 months ago by boneskull
  2

• fix lavamoat-tofu/lavamoat-core cyclic dependency of types

  #995 opened 4 months ago by boneskull
  2

• `npm run test` fails locally

  #991 opened 4 months ago by legobeat
  1

• allow-scripts: config reader does not normalize paths

  #993 opened 4 months ago by boneskull
  0

• Support binding.gyp as a lifecycle script in allow-scripts

  #979 opened 4 months ago by naugtur
  1

• LavaMoat allow-scripts confuses npm repo with yarn when yarnrc file exists

  #983 opened 4 months ago by weizman
  3

• refactor scuttling in core for consumption by the webpack plugin and lavamoat-endo

  #731 opened 4 months ago by naugtur
  0

• mistake delete issue

  #982 opened 4 months ago by weizman
  0

• docs: the READMEs need updating

  #703 opened 9 months ago by boneskull
  0

• allow-scripts workspace support

  #948 opened 4 months ago by naugtur
  0

• drop cross-env once Node.js v18.x support dropped

  #906 opened 4 months ago by boneskull
  0

• migrate to CodeQL v3

  #877 opened 5 months ago by boneskull
  1

• tofu: use ses' whitelist directly

  #814 opened 5 months ago by boneskull
  0

• consider auto-labeler

  #817 opened 5 months ago by boneskull
  0

• Allow setting lockdown options for lavapack/lavamoat-browserify

  #693 opened 9 months ago by naugtur
  0

• Generate policy file

  #807 opened 5 months ago by CarmelaFanucci
  1

• allow-scripts: npm ignore-scripts is a sledgehammer

  #717 opened 9 months ago by boneskull
  0

• replace depcheck

  #793 opened 6 months ago by boneskull
  0

• [Metamask] With scuttling disabled I see chrome.session.local but not chrome.session.session. Why?

  #736 opened 6 months ago by tim-eucalyptus
  1

• Best Practice

  #774 opened 6 months ago by heheda1212138
  0

• Error: LavaMoat - required package not in allowlist: package "gulp-livereload>chalk>ansi-styles>color-convert"

  #754 opened 6 months ago by th0masi
  2

• consider a stalebot

  #768 opened 6 months ago by boneskull
  1

• consolidate more policy parsing code

  #764 opened 6 months ago by boneskull
  0

• root allow-scripts config is of dubious value

  #707 opened 7 months ago by boneskull
  2

• allow-scripts: pipe stdout/stderr

  #705 opened 9 months ago by boneskull
  0

• create CONTRIBUTING.md

  #746 opened 7 months ago by boneskull
  0

• core: consumers should not need to reference source files by path

  #734 opened 8 months ago by boneskull
  0

• ditch lerna

  #704 opened 7 months ago by boneskull
  1

• release-please should update package-lock.json

  #741 opened 7 months ago by boneskull
  0

• lerna setup broken

  #713 opened 9 months ago by boneskull
  0