chore/nx 16

[bradtaniguchi]

What changes did you make? (Give an overview)

• chore: run lnx latest
• chore: add npm install
• chore: ran migrations

Which issue (if any) does this pull request address?

Closes #

[socket-security]

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
eslint-config-next	13.1.1	None	+66	8.58 MB	vercel-release-bot
next	13.3.0	eval, network, filesystem, shell, environment	+19	963 MB	vercel-release-bot
@pmmmwh/react-refresh-webpack-plugin	0.5.10	None	+30	10.2 MB	pmmmwh
@nx/webpack	16.5.0	filesystem, environment	+206	111 MB	nrwl-jason
@nx/js	16.5.0	filesystem, shell, environment	+96	85.1 MB	nrwl-jason
@nx/react	16.5.0	filesystem, shell, environment	+139	96.5 MB	nrwl-jason
@nx/next	16.5.0	filesystem, shell, environment	+167	1.06 GB	nrwl-jason
storybook	7.0.26	None	+229	264 MB	shilman
css-loader	6.8.1	None	+15	7 MB	evilebottnawi
@nrwl/rollup	16.5.0	None	+116	94.1 MB	nrwl-jason
@nrwl/webpack	16.5.0	None	+206	111 MB	nrwl-jason
@nx/jest	16.5.0	None	+104	89 MB	nrwl-jason
@storybook/react-webpack5	7.0.26	None	+149	228 MB	shilman
@nx/eslint-plugin	16.5.0	filesystem	+99	85.3 MB	nrwl-jason
@nx/workspace	16.5.0	filesystem, shell, environment	+26	76.1 MB	nrwl-jason
eslint-plugin-storybook	0.6.12	None	+4	270 kB	yannbf
@nx/linter	16.5.0	shell	+98	85.2 MB	nrwl-jason
webpack-merge	5.9.0	None	+1	57 kB	bebraw
@nx/plugin	16.5.0	filesystem, shell, environment	+108	89.3 MB	nrwl-jason
stylus-loader	7.1.3	None	+11	6.59 MB	evilebottnawi
@nx/storybook	16.5.0	filesystem, environment	+102	85.7 MB	nrwl-jason
style-loader	3.3.3	None	+11	6.61 MB	evilebottnawi
@nx/web	16.5.0	None	+101	85.4 MB	nrwl-jason
@nx/node	16.5.0	None	+108	89.2 MB	nrwl-jason
@storybook/core-server	6.5.9...7.0.26	None	+112/-505	239 MB	shilman
@types/node	18.7.18...18.14.2	None	+0/-0	3.61 MB	types
nx	15.2.1...16.5.0	filesystem, shell	+18/-8	70.7 MB	nrwl-jason
@testing-library/react	13.4.0...14.0.0	eval, environment	+27/-10	9.19 MB	testing-library-bot
babel-jest	28.1.3...29.4.3	None	+20/-42	7.25 MB	simenb
@emotion/styled	11.10.5...11.11.0	None	+20/-36	3.98 MB	emotion-release-bot
jest-environment-jsdom	29.3.1...29.4.3	None	+4/-20	3.71 MB	simenb
react-router-dom	6.4.1...6.11.2	None	+2/-2	3.32 MB	mjackson
jest	28.1.3...29.4.3	None	+25/-104	7.41 MB	simenb
@storybook/react	6.5.9...7.0.26	None	+81/-528	215 MB	shilman
@emotion/react	11.10.5...11.11.1	None	+18/-34	3.78 MB	emotion-release-bot
@types/jest	28.1.8...29.4.4	None	+4/-20	3.77 MB	types
@nrwl/js	15.2.1...16.5.0	None	+96/-116	85.1 MB	nrwl-jason
postcss	8.4.16...8.4.21	None	+1/-1	210 kB	ai
@storybook/jest	0.0.10...0.1.0	None	+31/-54	9.33 MB	yannbf
@storybook/testing-library	0.0.11...0.2.0	None	+28/-41	4.39 MB	yannbf
autoprefixer	10.4.12...10.4.13	None	+7/-7	2.81 MB	ai
eslint-plugin-jsx-a11y	6.6.1...6.7.1	None	+27/-18	5.48 MB	ljharb
@storybook/addon-essentials	6.5.9...7.0.26	None	+138/-458	241 MB	shilman
tailwindcss	3.1.8...3.2.7	None	+7/-7	8.8 MB	adamwathan
styled-components	5.3.5...5.3.6	None	+15/-18	6.52 MB	probablyup
storybook-dark-mode	1.1.0...3.0.0	None	+37/-44	14.6 MB	alisowski
eslint-plugin-react	7.31.8...7.32.2	None	+27/-17	3.01 MB	ljharb
eslint-plugin-import	2.26.0...2.27.5	None	+26/-21	3.38 MB	ljharb
prettier	2.7.1...2.8.8	None	+0/-0	11.2 MB	prettier-bot
@storybook/addon-controls	6.5.9...7.0.26	None	+89/-362	221 MB	shilman
@storybook/addon-a11y	6.4.22...7.0.26	None	+38/-63	17.2 MB	shilman

🚮 Removed packages: @nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @storybook/[email protected], @storybook/[email protected], @typescript-eslint/[email protected], @typescript-eslint/[email protected], [email protected], [email protected], [email protected], [email protected]

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Issue	Package	Version	Note	Source
Install scripts	nx	16.5.0	Install script: postinstall Source: node ./bin/post-install	@nrwl/[email protected], @nrwl/[email protected], @nrwl/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected], @nx/[email protected] via package.json package.json
Install scripts	esbuild	0.17.19	Install script: postinstall Source: node install.js	@storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], @storybook/[email protected], [email protected] via package.json
Telemetry	next	13.3.0	Note: Can be disabled by setting the environment variable NEXT_TELEMETRY_DISABLED=1	@nx/[email protected], @sentry/[email protected] via package.json package.json

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

What is telemetry?

This package contains telemetry which tracks you.

Most telemetry comes with settings to disable it. Consider disabling telemetry if you do not want to be tracked.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] bar@* or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]