[sh1pt-actions-fleet]

Updates @profullstack/profile to 0.1.8. The release maps OpenProfile Web, Website, Homepage, and Site identities into the company website field and continues through invalid company-name candidates when a valid website is available.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​profullstack/​profile@​0.1.7 ⏵ 0.1.8	+1		+1	+1

View full report

[github-actions]

ThreatCrush Security Scan

18 finding(s)

MEDIUM: 16 | LOW: 2

Severity	Rule	Location
MEDIUM	js-unescaped-html-sink	apps/web/app/about/page.tsx:40
MEDIUM	sql-template-interpolation	apps/web/app/api/admin/media/[id]/route.ts:30
MEDIUM	sql-template-interpolation	apps/web/app/api/admin/tags/[id]/route.ts:22
MEDIUM	sql-template-interpolation	apps/web/app/api/admin/users/[id]/route.ts:23
MEDIUM	js-unescaped-html-sink	apps/web/app/layout.tsx:58
MEDIUM	js-unescaped-html-sink	apps/web/app/library/[slug]/page.tsx:36
MEDIUM	js-unescaped-html-sink	apps/web/app/pricing/page.tsx:17
MEDIUM	js-unescaped-html-sink	apps/web/components/NewsletterComposer.tsx:87
MEDIUM	js-open-redirect	apps/web/components/PaymentUI.tsx:46
MEDIUM	js-open-redirect	apps/web/components/SponsorUI.tsx:44
MEDIUM	sql-template-interpolation	apps/web/lib/library-grants.ts:74
MEDIUM	sql-template-interpolation	apps/web/lib/library.ts:83
MEDIUM	sql-template-interpolation	apps/web/lib/library.ts:86
MEDIUM	sql-template-interpolation	apps/web/lib/library.ts:98
MEDIUM	sql-template-interpolation	apps/web/lib/queries.ts:169
MEDIUM	sql-template-interpolation	apps/web/lib/rewards.ts:198
LOW	sql-template-interpolation	apps/web/lib/rewards.test.ts:86
LOW	js-unescaped-html-sink	docs/design_handoff_aiornot_vote/image-slot.js:455

Snippets are redacted; ThreatCrush never prints matched credential material.