Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Dependency vulnerabilities

Description

mod-ncip ships with dependencies that have security vulnerabilities:

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Checklist

hide

TestRail: Results

Activity

Show:

David Crossley September 6, 2024 at 1:18 AM

See new ticket FOLIO-4056 -- Create standalone repository of the NCIP2-Toolkit fork

Michelle Suranofsky August 26, 2024 at 12:22 PM

I have no objection. thank you!

Jakub Skoczen August 26, 2024 at 7:41 AM

The upstream NCIP2-Toolkit is inactive and looks abandonded. I think we should turn the FOLIO fork’s master branch into a proper trunk and merge all FOLIO changes (and versions) there. This will enable other projects outside of FOLIO to benefit from the changes, currently it’s very confusing how the releases are maintained in the fork. Any objections to this approach?

Michelle Suranofsky August 23, 2024 at 12:42 PM

- this Jira explains it - but FOLIO’s branch is folio-2441-internal-deploy

https://folio-org.atlassian.net/browse/FOLIO-2441
…also another explanation from David in the readme:
https://github.com/eXtensibleCatalog/NCIP2-Toolkit/blob/212d463d22fcf728bc629a97a7f6436ba1bf9fa4/README-FOLIO.md

Jakub Skoczen August 23, 2024 at 11:22 AM

It looks like those changes were released as version 4.0.0 but never merged back to master. Do you know why? We need to make changes to NCIP2-Toolkit and we’d like to do this starting from master but it looks like master is missing 18 commits compared to this branch.

Done

Details

Assignee

Reporter

Labels

Priority

Development Team

EBSCO - FSE

Parent

Fix versions

RCA Group

TBD

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs
Created March 25, 2022 at 6:21 PM
Updated September 6, 2024 at 1:18 AM
Resolved August 29, 2022 at 9:16 PM
TestRail: Cases
TestRail: Runs

Flag notifications