Page MenuHomePhabricator
Create Task
Maniphest T203749

marvin: critical severity security vulnerability detected in macaddress < 0.2.9 defined in package-lock.json.
Closed, DeclinedPublic
Actions

Description

From Github:

Known critical severity security vulnerability detected in macaddress < 0.2.9 defined in package-lock.json.
package-lock.json update suggested: macaddress ~> 0.2.9.

Related Objects

Event Timeline

hashar created this task.Sep 7 2018, 7:39 AM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 7 2018, 7:39 AM
hashar added a project: Marvin.Sep 7 2018, 7:40 AM
hashar added subscribers: • Sniedzielski, • Jhernandez.
Legoktm subscribed.Sep 21 2018, 3:29 AM

I don't think marvin is being actively developed / maintained, and would recommend archiving it.

hashar edited subscribers, added: • Niedzielski; removed: • Sniedzielski.Sep 21 2018, 9:26 AM

@Sniedzielski -> @Niedzielski

It seems Stephen and Joaquin did the last patches on marvin.git, the last ones being from ~ January 2018. Is Marvin still a thing or should we look at archiving the git repository / phabricator project etc?

• Niedzielski added a comment.Sep 21 2018, 1:35 PM

Yes, the project is stalled for the foreseeable future and should be archived. I've updated the project description in Phabricator.

Aklapper added a comment.Sep 21 2018, 2:53 PM
In T203749#4605708, @Niedzielski wrote:

Yes, the project is stalled for the foreseeable future and should be archived. I've updated the project description in Phabricator.

Will someone update https://www.mediawiki.org/wiki/Reading/Web/Projects/NewMobileWebsite ? Like {{Historical}} or such?

• Niedzielski added a comment.Sep 21 2018, 3:08 PM

{{Historical}}

Done

Legoktm closed this task as Declined.Sep 22 2018, 12:10 AM
Legoktm mentioned this in T205170: Archive marvin.

Filed T205170 for the archival effort, I'll decline this.

Legoktm changed the visibility from "Custom Policy" to "Public (No Login Required)".Sep 22 2018, 12:11 AM
Aklapper mentioned this in T158902: Test Performance of Marvin (SSR CapEX).May 14 2019, 1:10 PM
Aklapper mentioned this in T184954: Scroll offset is wrong for URL fragments visited from the Marvin client.May 14 2019, 1:11 PM
Aklapper mentioned this in T183152: Use Wikimedia standards for linting and formatting CSS files.
Aklapper mentioned this in T179493: Add immediate, short, long, and failure page transitions.
Aklapper mentioned this in T179437: Split page library output by transform.
Aklapper mentioned this in T179489: Add support for page transitions.
Aklapper mentioned this in T179433: Add image lazy loading.
Aklapper mentioned this in T179381: Add NPM dependency security audit CI job.
Aklapper mentioned this in T177681: Page URL should update on redirect.
Aklapper mentioned this in T178407: Define navigation scenarios to test and measure.
Aklapper mentioned this in T177531: Review and update documentation.
Aklapper mentioned this in T178403: Gather information about devices, network speeds to run tests about.
Aklapper mentioned this in T177503: Add WithContext tests.
Aklapper mentioned this in T177058: Set up performance tooling & dashboards.
Aklapper mentioned this in T177057: Clarify production deployment requirements, outline and blockers.
Aklapper mentioned this in T177222: Add Link component tests.
Aklapper mentioned this in T177010: Improve style guide structure.
Aklapper mentioned this in T177004: Page switching interaction.
Aklapper mentioned this in T177006: Optimize the size of the SVG en-wordmark.
Aklapper mentioned this in T176980: Article namespace must display last edited information.
Aklapper mentioned this in T177000: Create generic Error Page template.
Aklapper mentioned this in T176962: Upstreaming efforts.
Aklapper mentioned this in T176961: EOQ1 house cleaning.
Aklapper mentioned this in T175806: Implement grid & responsive system.
Aklapper mentioned this in T176959: Display proper section collapsing within article namespace.
Aklapper mentioned this in T176958: Display article content within article namespace.
Aklapper mentioned this in T173331: Inform PCS development efforts.
Aklapper mentioned this in T177464: Submit an RFC and discuss it with TechCom.
Aklapper mentioned this in T173317: Initial version of article rendering.
• chasemp added a project: Security.Feb 10 2020, 10:51 PM
• chasemp removed a project: acl*security.Feb 20 2020, 8:12 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL