Repository: fylein/comment-test-coverage
Pull request #6: feat: add EOL scan
Author: login: suyashpatil78
Created: 2025-05-02T08:28:46Z | Merged: 2025-05-06T08:15:33Z



Diff:
diff --git a/.github/workflows/eol-outdated-js-scan.yml b/.github/workflows/eol-outdated-js-scan.yml
new file mode 100644
index 0000000..807f6c4
--- /dev/null
+++ b/.github/workflows/eol-outdated-js-scan.yml
@@ -0,0 +1,62 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  filter:
+    if: ${{ github.event.pull_request.draft == false }}
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            dependencies:
+              - 'package-lock.json'
+
+  scan:
+    name: Run scanner
+    timeout-minutes: 15
+    runs-on: ubuntu-latest
+    needs: filter
+    if: needs.filter.outputs.run-scan == 'true'
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20.17.0
+
+      - name: Cache dependencies
+        id: node-cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            node_modules
+          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-node-
+
+      - name: Install modules
+        if: steps.node-cache.outputs.cache-hit != 'true'
+        run: npm ci
+
+      - name: Depcheck
+        timeout-minutes: 10
+        uses: fylein/eol-outdated-js-scan-action@master
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
diff --git a/package-lock.json b/package-lock.json
index c4f8939..25320d8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,220 +1,290 @@
 {
   "name": "output-test-coverage",
   "version": "2.0.0",
-  "lockfileVersion": 1,
+  "lockfileVersion": 3,
   "requires": true,
-  "dependencies": {
-    "@actions/core": {
+  "packages": {
+    "": {
+      "name": "output-test-coverage",
+      "version": "2.0.0",
+      "license": "ISC",
+      "dependencies": {
+        "@actions/core": "^1.10.1",
+        "@actions/github": "^6.0.0"
+      },
+      "devDependencies": {
+        "@vercel/ncc": "^0.38.1"
+      }
+    },
+    "node_modules/@actions/core": {
       "version": "1.11.1",
       "resolved": "https://registry.npmjs.org/@actions/core/-/core-1.11.1.tgz",
       "integrity": "sha512-hXJCSrkwfA46Vd9Z3q4cpEpHB1rL5NG04+/rbqW9d3+CSvtB1tYe8UTpAlixa1vj0m/ULglfEK2UKxMGxCxv5A==",
-      "requires": {
+      "dependencies": {
         "@actions/exec": "^1.1.1",
         "@actions/http-client": "^2.0.1"
       }
     },
-    "@actions/exec": {
+    "node_modules/@actions/exec": {
       "version": "1.1.1",
       "resolved": "https://registry.npmjs.org/@actions/exec/-/exec-1.1.1.tgz",
       "integrity": "sha512-+sCcHHbVdk93a0XT19ECtO/gIXoxvdsgQLzb2fE2/5sIZmWQuluYyjPQtrtTHdU1YzTZ7bAPN4sITq2xi1679w==",
-      "requires": {
+      "dependencies": {
         "@actions/io": "^1.0.1"
       }
     },
-    "@actions/github": {
+    "node_modules/@actions/github": {
       "version": "6.0.0",
       "resolved": "https://registry.npmjs.org/@actions/github/-/github-6.0.0.tgz",
       "integrity": "sha512-alScpSVnYmjNEXboZjarjukQEzgCRmjMv6Xj47fsdnqGS73bjJNDpiiXmp8jr0UZLdUB6d9jW63IcmddUP+l0g==",
-      "requires": {
+      "license": "MIT",
+      "dependencies": {
         "@actions/http-client": "^2.2.0",
         "@octokit/core": "^5.0.1",
         "@octokit/plugin-paginate-rest": "^9.0.0",
         "@octokit/plugin-rest-endpoint-methods": "^10.0.0"
       }
     },
-    "@actions/http-client": {
+    "node_modules/@actions/http-client": {
       "version": "2.2.3",
       "resolved": "https://registry.npmjs.org/@actions/http-client/-/http-client-2.2.3.tgz",
       "integrity": "sha512-mx8hyJi/hjFvbPokCg4uRd4ZX78t+YyRPtnKWwIl+RzNaVuFpQHfmlGVfsKEJN8LwTCvL+DfVgAM04XaHkm6bA==",
-      "requires": {
+      "dependencies": {
         "tunnel": "^0.0.6",
         "undici": "^5.25.4"
       }
     },
-    "@actions/io": {
+    "node_modules/@actions/io": {
       "version": "1.1.3",
       "resolved": "https://registry.npmjs.org/@actions/io/-/io-1.1.3.tgz",
       "integrity": "sha512-wi9JjgKLYS7U/z8PPbco+PvTb/nRWjeoFlJ1Qer83k/3C5PHQi28hiVdeE2kHXmIL99mQFawx8qt/JPjZilJ8Q=="
     },
-    "@fastify/busboy": {
+    "node_modules/@fastify/busboy": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/@fastify/busboy/-/busboy-2.1.1.tgz",
-      "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA=="
+      "integrity": "sha512-vBZP4NlzfOlerQTnba4aqZoMhE/a9HY7HRqoOPaETQcSQuWEIyZMHGfVu6w9wGtGK5fED5qRs2DteVCjOH60sA==",
+      "engines": {
+        "node": ">=14"
+      }
     },
-    "@octokit/auth-token": {
+    "node_modules/@octokit/auth-token": {
       "version": "4.0.0",
       "resolved": "https://registry.npmjs.org/@octokit/auth-token/-/auth-token-4.0.0.tgz",
-      "integrity": "sha512-tY/msAuJo6ARbK6SPIxZrPBms3xPbfwBrulZe0Wtr/DIY9lje2HeV1uoebShn6mx7SjCHif6EjMvoREj+gZ+SA=="
+      "integrity": "sha512-tY/msAuJo6ARbK6SPIxZrPBms3xPbfwBrulZe0Wtr/DIY9lje2HeV1uoebShn6mx7SjCHif6EjMvoREj+gZ+SA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 18"
+      }
     },
-    "@octokit/core": {
-      "version": "5.2.0",
-      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.2.0.tgz",
-      "integrity": "sha512-1LFfa/qnMQvEOAdzlQymH0ulepxbxnCYAKJZfMci/5XJyIHWgEYnDmgnKakbTh7CH2tFQ5O60oYDvns4i9RAIg==",
-      "requires": {
+    "node_modules/@octokit/core": {
+      "version": "5.2.1",
+      "resolved": "https://registry.npmjs.org/@octokit/core/-/core-5.2.1.tgz",
+      "integrity": "sha512-dKYCMuPO1bmrpuogcjQ8z7ICCH3FP6WmxpwC03yjzGfZhj9fTJg6+bS1+UAplekbN2C+M61UNllGOOoAfGCrdQ==",
+      "license": "MIT",
+      "dependencies": {
         "@octokit/auth-token": "^4.0.0",
         "@octokit/graphql": "^7.1.0",
-        "@octokit/request": "^8.3.1",
-        "@octokit/request-error": "^5.1.0",
+        "@octokit/request": "^8.4.1",
+        "@octokit/request-error": "^5.1.1",
         "@octokit/types": "^13.0.0",
         "before-after-hook": "^2.2.0",
         "universal-user-agent": "^6.0.0"
+      },
+      "engines": {
+        "node": ">= 18"
       }
     },
-    "@octokit/endpoint": {
+    "node_modules/@octokit/endpoint": {
       "version": "9.0.6",
       "resolved": "https://registry.npmjs.org/@octokit/endpoint/-/endpoint-9.0.6.tgz",
       "integrity": "sha512-H1fNTMA57HbkFESSt3Y9+FBICv+0jFceJFPWDePYlR/iMGrwM5ph+Dd4XRQs+8X+PUFURLQgX9ChPfhJ/1uNQw==",
-      "requires": {
+      "license": "MIT",
+      "dependencies": {
         "@octokit/types": "^13.1.0",
         "universal-user-agent": "^6.0.0"
+      },
+      "engines": {
+        "node": ">= 18"
       }
     },
-    "@octokit/graphql": {
+    "node_modules/@octokit/graphql": {
       "version": "7.1.1",
       "resolved": "https://registry.npmjs.org/@octokit/graphql/-/graphql-7.1.1.tgz",
       "integrity": "sha512-3mkDltSfcDUoa176nlGoA32RGjeWjl3K7F/BwHwRMJUW/IteSa4bnSV8p2ThNkcIcZU2umkZWxwETSSCJf2Q7g==",
-      "requires": {
+      "license": "MIT",
+      "dependencies": {
         "@octokit/request": "^8.4.1",
         "@octokit/types": "^13.0.0",
         "universal-user-agent": "^6.0.0"
+      },
+      "engines": {
+        "node": ">= 18"
       }
     },
-    "@octokit/openapi-types": {
-      "version": "23.0.1",
-      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-23.0.1.tgz",
-      "integrity": "sha512-izFjMJ1sir0jn0ldEKhZ7xegCTj/ObmEDlEfpFrx4k/JyZSMRHbO3/rBwgE7f3m2DHt+RrNGIVw4wSmwnm3t/g=="
+    "node_modules/@octokit/openapi-types": {
+      "version": "24.2.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-24.2.0.tgz",
+      "integrity": "sha512-9sIH3nSUttelJSXUrmGzl7QUBFul0/mB8HRYl3fOlgHbIWG+WnYDXU3v/2zMtAvuzZ/ed00Ei6on975FhBfzrg==",
+      "license": "MIT"
     },
-    "@octokit/plugin-paginate-rest": {
+    "node_modules/@octokit/plugin-paginate-rest": {
       "version": "9.2.2",
       "resolved": "https://registry.npmjs.org/@octokit/plugin-paginate-rest/-/plugin-paginate-rest-9.2.2.tgz",
       "integrity": "sha512-u3KYkGF7GcZnSD/3UP0S7K5XUFT2FkOQdcfXZGZQPGv3lm4F2Xbf71lvjldr8c1H3nNbF+33cLEkWYbokGWqiQ==",
-      "requires": {
+      "license": "MIT",
+      "dependencies": {
         "@octokit/types": "^12.6.0"
       },
+      "engines": {
+        "node": ">= 18"
+      },
+      "peerDependencies": {
+        "@octokit/core": "5"
+      }
+    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/openapi-types": {
+      "version": "20.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+      "license": "MIT"
+    },
+    "node_modules/@octokit/plugin-paginate-rest/node_modules/@octokit/types": {
+      "version": "12.6.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/openapi-types": {
-          "version": "20.0.0",
-          "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
-          "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA=="
-        },
-        "@octokit/types": {
-          "version": "12.6.0",
-          "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
-          "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
-          "requires": {
-            "@octokit/openapi-types": "^20.0.0"
-          }
-        }
-      }
-    },
-    "@octokit/plugin-rest-endpoint-methods": {
+        "@octokit/openapi-types": "^20.0.0"
+      }
+    },
+    "node_modules/@octokit/plugin-rest-endpoint-methods": {
       "version": "10.4.1",
       "resolved": "https://registry.npmjs.org/@octokit/plugin-rest-endpoint-methods/-/plugin-rest-endpoint-methods-10.4.1.tgz",
       "integrity": "sha512-xV1b+ceKV9KytQe3zCVqjg+8GTGfDYwaT1ATU5isiUyVtlVAO3HNdzpS4sr4GBx4hxQ46s7ITtZrAsxG22+rVg==",
-      "requires": {
+      "license": "MIT",
+      "dependencies": {
         "@octokit/types": "^12.6.0"
       },
+      "engines": {
+        "node": ">= 18"
+      },
+      "peerDependencies": {
+        "@octokit/core": "5"
+      }
+    },
+    "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/openapi-types": {
+      "version": "20.0.0",
+      "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
+      "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA==",
+      "license": "MIT"
+    },
+    "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/types": {
+      "version": "12.6.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
+      "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
+      "license": "MIT",
       "dependencies": {
-        "@octokit/openapi-types": {
-          "version": "20.0.0",
-          "resolved": "https://registry.npmjs.org/@octokit/openapi-types/-/openapi-types-20.0.0.tgz",
-          "integrity": "sha512-EtqRBEjp1dL/15V7WiX5LJMIxxkdiGJnabzYx5Apx4FkQIFgAfKumXeYAqqJCj1s+BMX4cPFIFC4OLCR6stlnA=="
-        },
-        "@octokit/types": {
-          "version": "12.6.0",
-          "resolved": "https://registry.npmjs.org/@octokit/types/-/types-12.6.0.tgz",
-          "integrity": "sha512-1rhSOfRa6H9w4YwK0yrf5faDaDTb+yLyBUKOCV4xtCDB5VmIPqd/v9yr9o6SAzOAlRxMiRiCic6JVM1/kunVkw==",
-          "requires": {
-            "@octokit/openapi-types": "^20.0.0"
-          }
-        }
-      }
-    },
-    "@octokit/request": {
+        "@octokit/openapi-types": "^20.0.0"
+      }
+    },
+    "node_modules/@octokit/request": {
       "version": "8.4.1",
       "resolved": "https://registry.npmjs.org/@octokit/request/-/request-8.4.1.tgz",
       "integrity": "sha512-qnB2+SY3hkCmBxZsR/MPCybNmbJe4KAlfWErXq+rBKkQJlbjdJeS85VI9r8UqeLYLvnAenU8Q1okM/0MBsAGXw==",
-      "requires": {
+      "license": "MIT",
+      "dependencies": {
         "@octokit/endpoint": "^9.0.6",
         "@octokit/request-error": "^5.1.1",
         "@octokit/types": "^13.1.0",
         "universal-user-agent": "^6.0.0"
+      },
+      "engines": {
+        "node": ">= 18"
       }
     },
-    "@octokit/request-error": {
+    "node_modules/@octokit/request-error": {
       "version": "5.1.1",
       "resolved": "https://registry.npmjs.org/@octokit/request-error/-/request-error-5.1.1.tgz",
       "integrity": "sha512-v9iyEQJH6ZntoENr9/yXxjuezh4My67CBSu9r6Ve/05Iu5gNgnisNWOsoJHTP6k0Rr0+HQIpnH+kyammu90q/g==",
-      "requires": {
+      "license": "MIT",
+      "dependencies": {
         "@octokit/types": "^13.1.0",
         "deprecation": "^2.0.0",
         "once": "^1.4.0"
+      },
+      "engines": {
+        "node": ">= 18"
       }
     },
-    "@octokit/types": {
-      "version": "13.8.0",
-      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.8.0.tgz",
-      "integrity": "sha512-x7DjTIbEpEWXK99DMd01QfWy0hd5h4EN+Q7shkdKds3otGQP+oWE/y0A76i1OvH9fygo4ddvNf7ZvF0t78P98A==",
-      "requires": {
-        "@octokit/openapi-types": "^23.0.1"
+    "node_modules/@octokit/types": {
+      "version": "13.10.0",
+      "resolved": "https://registry.npmjs.org/@octokit/types/-/types-13.10.0.tgz",
+      "integrity": "sha512-ifLaO34EbbPj0Xgro4G5lP5asESjwHracYJvVaPIyXMuiuXLlhic3S47cBdTb+jfODkTE5YtGCLt3Ay3+J97sA==",
+      "license": "MIT",
+      "dependencies": {
+        "@octokit/openapi-types": "^24.2.0"
       }
     },
-    "@vercel/ncc": {
+    "node_modules/@vercel/ncc": {
       "version": "0.38.3",
       "resolved": "https://registry.npmjs.org/@vercel/ncc/-/ncc-0.38.3.tgz",
       "integrity": "sha512-rnK6hJBS6mwc+Bkab+PGPs9OiS0i/3kdTO+CkI8V0/VrW3vmz7O2Pxjw/owOlmo6PKEIxRSeZKv/kuL9itnpYA==",
-      "dev": true
+      "dev": true,
+      "bin": {
+        "ncc": "dist/ncc/cli.js"
+      }
     },
-    "before-after-hook": {
+    "node_modules/before-after-hook": {
       "version": "2.2.3",
       "resolved": "https://registry.npmjs.org/before-after-hook/-/before-after-hook-2.2.3.tgz",
-      "integrity": "sha512-NzUnlZexiaH/46WDhANlyR2bXRopNg4F/zuSA3OpZnllCUgRaOF2znDioDWrmbNVsuZk6l9pMquQB38cfBZwkQ=="
+      "integrity": "sha512-NzUnlZexiaH/46WDhANlyR2bXRopNg4F/zuSA3OpZnllCUgRaOF2znDioDWrmbNVsuZk6l9pMquQB38cfBZwkQ==",
+      "license": "Apache-2.0"
     },
-    "deprecation": {
+    "node_modules/deprecation": {
       "version": "2.3.1",
       "resolved": "https://registry.npmjs.org/deprecation/-/deprecation-2.3.1.tgz",
-      "integrity": "sha512-xmHIy4F3scKVwMsQ4WnVaS8bHOx0DmVwRywosKhaILI0ywMDWPtBSku2HNxRvF7jtwDRsoEwYQSfbxj8b7RlJQ=="
+      "integrity": "sha512-xmHIy4F3scKVwMsQ4WnVaS8bHOx0DmVwRywosKhaILI0ywMDWPtBSku2HNxRvF7jtwDRsoEwYQSfbxj8b7RlJQ==",
+      "license": "ISC"
     },
-    "once": {
+    "node_modules/once": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
       "integrity": "sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==",
-      "requires": {
+      "license": "ISC",
+      "dependencies": {
         "wrappy": "1"
       }
     },
-    "tunnel": {
+    "node_modules/tunnel": {
       "version": "0.0.6",
       "resolved": "https://registry.npmjs.org/tunnel/-/tunnel-0.0.6.tgz",
-      "integrity": "sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg=="
+      "integrity": "sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg==",
+      "engines": {
+        "node": ">=0.6.11 <=0.7.0 || >=0.7.3"
+      }
     },
-    "undici": {
+    "node_modules/undici": {
       "version": "5.28.5",
       "resolved": "https://registry.npmjs.org/undici/-/undici-5.28.5.tgz",
       "integrity": "sha512-zICwjrDrcrUE0pyyJc1I2QzBkLM8FINsgOrt6WjA+BgajVq9Nxu2PbFFXUrAggLfDXlZGZBVZYw7WNV5KiBiBA==",
-      "requires": {
+      "dependencies": {
         "@fastify/busboy": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=14.0"
       }
     },
-    "universal-user-agent": {
+    "node_modules/universal-user-agent": {
       "version": "6.0.1",
       "resolved": "https://registry.npmjs.org/universal-user-agent/-/universal-user-agent-6.0.1.tgz",
-      "integrity": "sha512-yCzhz6FN2wU1NiiQRogkTQszlQSlpWaw8SvVegAc+bDxbzHgh1vX8uIe8OYyMH6DwH+sdTJsgMl36+mSMdRJIQ=="
+      "integrity": "sha512-yCzhz6FN2wU1NiiQRogkTQszlQSlpWaw8SvVegAc+bDxbzHgh1vX8uIe8OYyMH6DwH+sdTJsgMl36+mSMdRJIQ==",
+      "license": "ISC"
     },
-    "wrappy": {
+    "node_modules/wrappy": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
-      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ=="
+      "integrity": "sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==",
+      "license": "ISC"
     }
   }
 }


Reviews:
user: login: abhishek1234321
state: CHANGES_REQUESTED
author_association: NONE
submitted_at: 2025-05-02T09:06:35Z
user: login: suyashpatil78
state: COMMENTED
author_association: NONE
submitted_at: 2025-05-02T09:14:41Z
user: login: suyashpatil78
state: COMMENTED
author_association: NONE
submitted_at: 2025-05-02T09:16:18Z
user: login: suyashpatil78
state: COMMENTED
author_association: NONE
submitted_at: 2025-05-02T09:27:50Z
user: login: suyashpatil78
state: COMMENTED
author_association: NONE
submitted_at: 2025-05-02T09:36:01Z
user: login: suyashpatil78
state: COMMENTED
author_association: NONE
submitted_at: 2025-05-06T04:47:31Z
user: login: abhishek1234321
state: APPROVED
author_association: NONE
submitted_at: 2025-05-06T08:01:39Z

Review comments:
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
path: .github/workflows/eol-outdated-js-scan.yml
user: login: abhishek1234321
body: will this run in DRAFT PRs? it shouldn't
created_at: 2025-05-02T09:04:40Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  filter:
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
path: .github/workflows/eol-outdated-js-scan.yml
user: login: abhishek1234321
body: is this the latest one? Is this what is used in other repos?
created_at: 2025-05-02T09:05:15Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  filter:
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            dependencies:
+              - 'package-lock.json'
path: .github/workflows/eol-outdated-js-scan.yml
user: login: abhishek1234321
body: what if certain repos do not have package-lock.json?
created_at: 2025-05-02T09:05:31Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  filter:
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            dependencies:
+              - 'package-lock.json'
path: .github/workflows/eol-outdated-js-scan.yml
user: login: abhishek1234321
body: what if package.json changed but lock didn't?
created_at: 2025-05-02T09:05:44Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  filter:
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            dependencies:
+              - 'package-lock.json'
+
+  scan:
+    name: Run scanner
+    runs-on: ubuntu-latest
+    needs: filter
+    if: needs.filter.outputs.run-scan == 'true'
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
path: .github/workflows/eol-outdated-js-scan.yml
user: login: abhishek1234321
body: you sure of lts? what if this breaks in a newer version of node? what's recommeneded?
created_at: 2025-05-02T09:06:12Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  filter:
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            dependencies:
+              - 'package-lock.json'
+
+  scan:
+    name: Run scanner
+    runs-on: ubuntu-latest
+    needs: filter
+    if: needs.filter.outputs.run-scan == 'true'
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+
+      - name: Cache dependencies
+        id: node-cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            node_modules
+          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-node-
+
+      - name: Install modules
+        if: steps.node-cache.outputs.cache-hit != 'true'
+        run: npm ci
+
+      - name: Depcheck
+        uses: fylein/eol-outdated-js-scan-action@master
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
path: .github/workflows/eol-outdated-js-scan.yml
user: login: abhishek1234321
body: what is this token about?
created_at: 2025-05-02T09:06:32Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  filter:
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
path: .github/workflows/eol-outdated-js-scan.yml
user: login: suyashpatil78
body: Yes, v3 is the latest stable major version of [dorny/paths-filter](https://github.com/dorny/paths-filter/releases).
We are using the same version in other repos
created_at: 2025-05-02T09:14:41Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
path: .github/workflows/eol-outdated-js-scan.yml
user: login: suyashpatil78
body: added condition for draft PRs
created_at: 2025-05-02T09:16:18Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  filter:
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            dependencies:
+              - 'package-lock.json'
+
+  scan:
+    name: Run scanner
+    runs-on: ubuntu-latest
+    needs: filter
+    if: needs.filter.outputs.run-scan == 'true'
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
path: .github/workflows/eol-outdated-js-scan.yml
user: login: suyashpatil78
body: As per Grok - It is mostly safe to use lts/* but there is always a risk for it to break on newer versions on node
We can use node-version: 20.17.0 to pin to specific version, we are doing it for `fyle-app`
created_at: 2025-05-02T09:27:50Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  filter:
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            dependencies:
+              - 'package-lock.json'
+
+  scan:
+    name: Run scanner
+    runs-on: ubuntu-latest
+    needs: filter
+    if: needs.filter.outputs.run-scan == 'true'
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: lts/*
+
+      - name: Cache dependencies
+        id: node-cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            node_modules
+          key: ${{ runner.os }}-node-${{ hashFiles('**/package-lock.json') }}
+          restore-keys: |
+            ${{ runner.os }}-node-
+
+      - name: Install modules
+        if: steps.node-cache.outputs.cache-hit != 'true'
+        run: npm ci
+
+      - name: Depcheck
+        uses: fylein/eol-outdated-js-scan-action@master
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
path: .github/workflows/eol-outdated-js-scan.yml
user: login: suyashpatil78
body: It is required to comment down the vulns report
created_at: 2025-05-02T09:36:01Z
author_association: NONE
diff_hunk: @@ -0,0 +1,55 @@
+name: End of Life and Outdated JS Scan
+on:
+  pull_request:
+    branches: [master]
+    types: [opened, synchronize, reopened, ready_for_review]
+
+jobs:
+  filter:
+    name: Get changed files
+    runs-on: ubuntu-latest
+
+    outputs:
+      run-scan: ${{ steps.filter.outputs.dependencies }}
+
+    steps:
+      - name: Filter paths
+        id: filter
+        uses: dorny/paths-filter@v3
+        with:
+          filters: |
+            dependencies:
+              - 'package-lock.json'
path: .github/workflows/eol-outdated-js-scan.yml
user: login: suyashpatil78
body: discussed here - https://fylein.slack.com/archives/C08N7G03VPA/p1746505838809659?thread_ts=1745835895.230789&cid=C08N7G03VPA
created_at: 2025-05-06T04:47:31Z
author_association: NONE

PR comments:
user: login: github-actions[bot]
created_at: 2025-05-02T09:31:54Z
body: ### 🔍 End of Life and Outdated JS Scan Results

Found 1 total vulnerabilities
| Dependency Path | Dependency Name |   CVE   |   Severity   |
|-----------------|-----------------|---------|--------------|
| package-lock.json?/undici:5.28.5 | undici:5.28.5 | CVE-2024-24750 | MEDIUM 🟡 |
### Remediation
- Update vulnerable packages to their fixed versions where available
- Run `dependency-check` locally to see more details
author_association: NONE
user: login: github-actions[bot]
created_at: 2025-05-06T08:13:37Z
body: <!--json:{"commentFrom":"Comment Test Coverage as table"}-->
|Test Coverage| %                           | values                                                              |
|---------------|:---------------------------:|:-------------------------------------------------------------------:|
|Statements     |100%|( 10 / 10 )|
|Branches       |100%  |( 1 / 1 )    |
|Functions      |100% |( 3 / 3 )  |
|Lines          |10%     |( 9 / 10 )          |

author_association: NONE
user: login: github-actions[bot]
created_at: 2025-05-06T08:13:46Z
body: <!--json:{"commentFrom":"Comment Test Coverage as table"}-->
|End to End Test Coverage| %                           | values                                                              |
|---------------|:---------------------------:|:-------------------------------------------------------------------:|
|Statements     |100%|( 10 / 10 )|
|Branches       |100%  |( 1 / 1 )    |
|Functions      |100% |( 3 / 3 )  |
|Lines          |19%     |( 9 / 10 )          |

author_association: NONE