Sign upLogin

jbender/motion-pods

View on GitHub
Star

Showing 21 of 21 total issues

json Gem for Ruby Unsafe Object Creation Vulnerability (additional fix)
Open

    json (1.8.3)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Advisory: CVE-2020-10663

Criticality: High

URL: https://www.ruby-lang.org/en/news/2020/03/19/json-dos-cve-2020-10663/

Solution: upgrade to >= 2.3.0

Potentially unintended unmarshalling of user-provided objects in MemCacheStore and RedisCacheStore
Open

    activesupport (4.2.6)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Advisory: CVE-2020-8165

Criticality: Critical

URL: https://groups.google.com/forum/#!topic/rubyonrails-security/bv6fW4S0Y1c

Solution: upgrade to >= 5.2.4.3, ~> 5.2.4, >= 6.0.3.1

OS Command Injection in Rake
Open

    rake (11.1.2)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Advisory: CVE-2020-8130

Criticality: High

URL: https://github.com/advisories/GHSA-jppv-gw3r-w3q8

Solution: upgrade to >= 12.3.3

ReDoS based DoS vulnerability in Active Support’s underscore
Open

    activesupport (4.2.6)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Advisory: CVE-2023-22796

URL: https://github.com/rails/rails/releases/tag/v7.0.4.1

Solution: upgrade to >= 5.2.8.15, ~> 5.2.8, >= 6.1.7.1, ~> 6.1.7, >= 7.0.4.1

Class has too many lines. [270/250]
Open

  class Pods
    PODS_ROOT = 'vendor/Pods'
    TARGET_NAME = 'RubyMotion'
    PUBLIC_HEADERS_ROOT = File.join(PODS_ROOT, 'Headers/Public')
    PODS_ROOT_MATCHER = /(\$\(PODS_ROOT\))|(\$\{PODS_ROOT\})/
Severity: Minor
Found in lib/motion/pods/main.rb by rubocop

This cop checks if the length a class exceeds some maximum value. Comment lines can optionally be ignored. The maximum allowed length is configurable.

Command injection in cocoapods-downloader
Open

    cocoapods-downloader (1.0.0.beta.2)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Advisory: CVE-2022-24440

Criticality: High

URL: https://github.com/CocoaPods/cocoapods-downloader/pull/124

Solution: upgrade to = 1.6.0, >= 1.6.3

Command injection in cocoapods-downloader
Open

    cocoapods-downloader (1.0.0.beta.2)
Severity: Critical
Found in Gemfile.lock by bundler-audit

Advisory: CVE-2022-21223

Criticality: High

URL: https://github.com/CocoaPods/cocoapods-downloader/pull/127

Solution: upgrade to >= 1.6.2

i18n Gem for Ruby lib/i18n/core_ext/hash.rb Hash#slice() Function Hash Handling DoS
Open

    i18n (0.7.0)
Severity: Minor
Found in Gemfile.lock by bundler-audit

Advisory: CVE-2014-10077

URL: https://github.com/svenfuchs/i18n/pull/289

Solution: upgrade to >= 0.8.0

Class Pods has 30 methods (exceeds 20 allowed). Consider refactoring.
Open

  class Pods
    PODS_ROOT = 'vendor/Pods'
    TARGET_NAME = 'RubyMotion'
    PUBLIC_HEADERS_ROOT = File.join(PODS_ROOT, 'Headers/Public')
    PODS_ROOT_MATCHER = /(\$\(PODS_ROOT\))|(\$\{PODS_ROOT\})/
Severity: Minor
Found in lib/motion/pods/main.rb - About 3 hrs to fix

    File main.rb has 274 lines of code (exceeds 250 allowed). Consider refactoring.
    Open

    module Motion
  class Pods
    PODS_ROOT = 'vendor/Pods'
    TARGET_NAME = 'RubyMotion'
    PUBLIC_HEADERS_ROOT = File.join(PODS_ROOT, 'Headers/Public')
    Severity: Minor
    Found in lib/motion/pods/main.rb - About 2 hrs to fix

      Method resources has a Cognitive Complexity of 9 (exceeds 5 allowed). Consider refactoring.
      Open

          def resources
      resources = []
      resource_path =
        Pathname.new(@config.project_dir) +
        SUPPORT_FILES +
      Severity: Minor
      Found in lib/motion/pods/main.rb - About 55 mins to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      TZInfo relative path traversal vulnerability allows loading of arbitrary files
      Open

          tzinfo (1.2.2)
      Severity: Critical
      Found in Gemfile.lock by bundler-audit

      Advisory: CVE-2022-31163

      Criticality: High

      URL: https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx

      Solution: upgrade to ~> 0.3.61, >= 1.2.10

      Method framework_search_paths has a Cognitive Complexity of 8 (exceeds 5 allowed). Consider refactoring.
      Open

          def framework_search_paths
      search_paths = xcconfig_hash["FRAMEWORK_SEARCH_PATHS"]

      return [] unless search_paths
      Severity: Minor
      Found in lib/motion/pods/main.rb - About 45 mins to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Method install_resource has a Cognitive Complexity of 6 (exceeds 5 allowed). Consider refactoring.
      Open

          def install_resource(file, resources_dir)
      FileUtils.cp_r(file, resources_dir) if file.exist?
    rescue ArgumentError => exc
      raise unless exc.message =~ /same file/
    end
      Severity: Minor
      Found in lib/motion/pods/main.rb - About 25 mins to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Method parsed_library_path has a Cognitive Complexity of 6 (exceeds 5 allowed). Consider refactoring.
      Open

          def parsed_library_path(library, lib_search_path_flags)
      lib_name = library[0]

      return unless lib_name
      Severity: Minor
      Found in lib/motion/pods/main.rb - About 25 mins to fix

      Cognitive Complexity

      Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

      A method's cognitive complexity is based on a few simple rules:

      • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
      • Code is considered more complex for each "break in the linear flow of the code"
      • Code is considered more complex when "flow breaking structures are nested"

      Further reading

      Use == if you meant to do a comparison or wrap the expression in parentheses to indicate you meant to assign in a condition.
      Open

            if cocoapods_config.verbose = !!ENV["COCOAPODS_VERBOSE"]
      Severity: Minor
      Found in lib/motion/pods/main.rb by rubocop

      This cop checks for assignments in the conditions of if/while/until.

      Example:

      # bad

if some_var = true
  do_something
end

      Example:

      # good

if some_var == true
  do_something
end

      TODO found
      Open

          # TODO: Should ideally not have to be controller manually.
      Severity: Minor
      Found in lib/tasks/pod.rb by fixme

      TODO found
      Open

          # TODO: fix this, see https://git.io/vae3Z
      Severity: Minor
      Found in lib/tasks/pod.rb by fixme

      TODO found
      Open

          # TODO: this probably breaks in cases like resource bundles etc, need to test.
      Severity: Minor
      Found in lib/motion/pods/main.rb by fixme

      TODO found
      Open

          # TODO: Should ideally not have to be controller manually.
      Severity: Minor
      Found in lib/tasks/pod.rb by fixme
      Severity
      Category
      Status
      Source
      Language