SmartTrader Redesign #660

prince-deriv · 2024-06-21T10:49:06Z

Key Changes:

Focused Refactoring:

Targeted specific UI components and interactions for enhancement without extensive changes to the entire codebase.

Localization and Translation:

Integrated the localize function across UI components to support dynamic content localization.
Updated string references to utilize localize, ensuring all text elements adhere to localization requirements.

Event Emitters:

Implemented event emitters to facilitate communication and state updates between legacy and modern components.

Quill initial configuration

github-actions · 2024-06-21T10:49:23Z

Dependency Review

The following issues were found:

✅ 0 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 2 package(s) with unknown licenses.
⚠️ 2 packages with OpenSSF Scorecard issues.

See the Details below.

License Issues

package-lock.json

Package	Version	License	Issue Type
@deriv-com/quill-ui	1.10.27	Null	Unknown License

package.json

Package	Version	License	Issue Type
@deriv-com/quill-ui	^1.10.27	Null	Unknown License

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@deriv-com/quill-ui

1.10.27

Unknown

npm/@deriv/quill-icons

1.22.10

Unknown

npm/@headlessui/react

1.7.19

🟢 5.7

Details

Check	Score	Reason
Code-Review	🟢 6	Found 18/30 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 8	2 existing vulnerabilities detected

npm/@rollup/rollup-linux-x64-gnu

4.18.0

🟢 5.4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 5/17 approved changesets -- score normalized to 2
Maintained	🟢 10	30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Packaging	⚠️ -1	packaging workflow not detected
Branch-Protection	🟢 8	branch protection is not maximal on development and all release branches
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	⚠️ 0	security policy file not detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 2	dependency not pinned by hash detected -- score normalized to 2
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/@tanstack/react-virtual

3.5.1

Unknown

npm/@tanstack/virtual-core

3.5.1

Unknown

npm/@wojtekmaj/date-utils

1.5.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/29 approved changesets -- score normalized to 0
Maintained	🟢 10	12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing	⚠️ 0	project is not fuzzed
Packaging	🟢 10	packaging workflow detected
Security-Policy	⚠️ 0	security policy file not detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/client-only

0.0.1

🟢 5.1

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Code-Review	🟢 6	Found 18/29 approved changesets -- score normalized to 6
License	🟢 10	license file detected
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	🟢 9	binaries present in source code
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	187 existing vulnerabilities detected

npm/clsx

2.1.1

🟢 3.7

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 7/30 approved changesets -- score normalized to 2
Maintained	⚠️ 1	2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
Security-Policy	⚠️ 0	security policy file not detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/dom-serializer

2.0.0

🟢 7.1

Details

Check	Score	Reason
Code-Review	⚠️ -1	Found no human activity in the last 30 changesets
Maintained	🟢 10	20 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 4	dependency not pinned by hash detected -- score normalized to 4
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 9	1 existing vulnerabilities detected

npm/domelementtype

2.3.0

🟢 6.7

Details

Check	Score	Reason
Code-Review	🟢 3	GitHub code reviews found for 9 commits out of the last 30 -- score normalized to 3
Maintained	⚠️ 1	2 commit(s) out of 30 and 0 issue activity out of 8 found in the last 90 days -- score normalized to 1
CII-Best-Practices	⚠️ 0	no badge detected
Vulnerabilities	🟢 10	no vulnerabilities detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
Token-Permissions	🟢 10	tokens are read-only in GitHub workflows
Packaging	⚠️ -1	no published package detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	⚠️ 0	project is not fuzzed

npm/domhandler

5.0.3

🟢 6.8

Details

Check	Score	Reason
Code-Review	🟢 10	all last 30 commits are reviewed through GitHub
Maintained	🟢 10	30 commit(s) out of 30 and 1 issue activity out of 30 found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no badge detected
Vulnerabilities	🟢 10	no vulnerabilities detected
Dependency-Update-Tool	🟢 10	update tool detected
License	🟢 10	license file detected
Token-Permissions	⚠️ 0	non read-only tokens detected in GitHub workflows
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	no published package detected
Pinned-Dependencies	🟢 7	dependency not pinned by hash detected -- score normalized to 7
Security-Policy	⚠️ 0	security policy file not detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
Fuzzing	⚠️ 0	project is not fuzzed

npm/domutils

3.1.0

🟢 6.8

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) out of 30 and 1 issue activity out of 30 found in the last 90 days -- score normalized to 10
Code-Review	🟢 10	all last 30 commits are reviewed through GitHub
CII-Best-Practices	⚠️ 0	no badge detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
Token-Permissions	⚠️ 0	non read-only tokens detected in GitHub workflows
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
License	🟢 10	license file detected
Dependency-Update-Tool	🟢 10	update tool detected
Packaging	⚠️ -1	no published package detected
Pinned-Dependencies	🟢 7	dependency not pinned by hash detected -- score normalized to 7
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	🟢 10	no vulnerabilities detected
Security-Policy	⚠️ 0	security policy file not detected

npm/entities

4.5.0

🟢 6.8

Details

Check	Score	Reason
Code-Review	⚠️ -1	Found no human activity in the last 30 changesets
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 8	dependency not pinned by hash detected -- score normalized to 8
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Security-Policy	⚠️ 0	security policy file not detected
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/get-user-locale

2.3.2

🟢 5.2

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/29 approved changesets -- score normalized to 0
Maintained	🟢 10	13 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Security-Policy	⚠️ 0	security policy file not detected
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/html-dom-parser

5.0.8

🟢 6.3

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/1 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Packaging	🟢 10	packaging workflow detected
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 6	4 existing vulnerabilities detected

npm/html-react-parser

5.1.10

🟢 6.4

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/5 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 4	dependency not pinned by hash detected -- score normalized to 4
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ -1	no releases found
Packaging	🟢 10	packaging workflow detected
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/htmlparser2

9.1.0

🟢 7.2

Details

Check	Score	Reason
Code-Review	⚠️ -1	Found no human activity in the last 30 changesets
Maintained	🟢 10	27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 4	dependency not pinned by hash detected -- score normalized to 4
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/inline-style-parser

0.2.3

🟢 6.8

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/4 approved changesets -- score normalized to 0
Maintained	🟢 10	28 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Fuzzing	⚠️ 0	project is not fuzzed
Packaging	🟢 10	packaging workflow detected
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/lodash.debounce

4.0.8

🟢 5.8

Details

Check	Score	Reason
Code-Review	🟢 6	Found 20/30 approved changesets -- score normalized to 6
Maintained	⚠️ 1	1 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 1
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 9	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	🟢 10	project is fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 9	1 existing vulnerabilities detected

npm/mem

8.1.1

Unknown

npm/mimic-fn

3.1.0

Unknown

npm/react-calendar

5.0.0

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	24 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Code-Review	⚠️ 0	Found 0/27 approved changesets -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Signed-Releases	⚠️ -1	no releases found
Security-Policy	⚠️ 0	security policy file not detected
Packaging	🟢 10	packaging workflow detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/react-property

2.0.2

🟢 6.1

Details

Check	Score	Reason
Code-Review	⚠️ -1	Found no human activity in the last 30 changesets
Maintained	🟢 10	26 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
License	⚠️ 0	license file not detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 6	4 existing vulnerabilities detected

npm/react-swipeable

6.2.2

🟢 3.1

Details

Check	Score	Reason
Code-Review	⚠️ 1	Found 4/23 approved changesets -- score normalized to 1
Maintained	⚠️ 2	3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ -1	no releases found
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Security-Policy	⚠️ 0	security policy file not detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	⚠️ 0	34 existing vulnerabilities detected

npm/react-tiny-popover

8.0.4

⚠️ 2.8

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 2/22 approved changesets -- score normalized to 0
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Pinned-Dependencies	⚠️ -1	no dependencies found
Binary-Artifacts	🟢 10	no binaries found in the repo
Dangerous-Workflow	⚠️ -1	no workflows found
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ -1	No tokens found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Fuzzing	⚠️ 0	project is not fuzzed
Security-Policy	⚠️ 0	security policy file not detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 8	2 existing vulnerabilities detected

npm/style-to-js

1.1.12

🟢 6.5

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/1 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging	🟢 10	packaging workflow detected
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/style-to-object

1.0.6

🟢 6.8

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/1 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Security-Policy	🟢 10	security policy file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Signed-Releases	⚠️ -1	no releases found
Pinned-Dependencies	🟢 5	dependency not pinned by hash detected -- score normalized to 5
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging	🟢 10	packaging workflow detected
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/usehooks-ts

3.1.0

Unknown

npm/uuid

9.0.1

🟢 5.2

Details

Check	Score	Reason
Code-Review	🟢 8	Found 24/30 approved changesets -- score normalized to 8
Maintained	🟢 10	14 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 3	security policy file detected
Pinned-Dependencies	⚠️ 2	dependency not pinned by hash detected -- score normalized to 2
Fuzzing	⚠️ 0	project is not fuzzed
SAST	🟢 4	SAST tool is not run on all commits -- score normalized to 4
Vulnerabilities	⚠️ 0	12 existing vulnerabilities detected

npm/warning

4.0.3

⚠️ 1.9

Details

Check	Score	Reason
Code-Review	⚠️ 1	Found 1/6 approved changesets -- score normalized to 1
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Dangerous-Workflow	⚠️ -1	no workflows found
Packaging	⚠️ -1	packaging workflow not detected
Token-Permissions	⚠️ -1	No tokens found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ -1	no dependencies found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Security-Policy	⚠️ 0	security policy file not detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	⚠️ 0	51 existing vulnerabilities detected

npm/@deriv-com/quill-ui

^1.10.27

Unknown

npm/html-react-parser

^5.1.10

🟢 6.4

Details

Check	Score	Reason
Code-Review	⚠️ 0	Found 0/5 approved changesets -- score normalized to 0
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Security-Policy	🟢 10	security policy file detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies	🟢 4	dependency not pinned by hash detected -- score normalized to 4
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	🟢 3	branch protection is not maximal on development and all release branches
Signed-Releases	⚠️ -1	no releases found
Packaging	🟢 10	packaging workflow detected
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

Scanned Manifest Files

package-lock.json

package.json

@deriv-com/quill-ui@^1.10.27
css-loader@^7.1.2
html-react-parser@^5.1.10
style-loader@^4.0.0

* chore: implemented quill in bottom tabs * chore: undo render.js changes * chore: add event triggers * fix: initial object data * fix: added localize in tabs * fix: removed object key mapping * fix: added parse for localized * fix: removed invisible class for image * fix: fixed eslint errors * fix: added escape character for using double quotes * fix: moved localize to data file * chore: fix translation issues * fix: removed backslash and added localize fot titles under explain * fix: removed extra spaces * fix: add eslint comment for unused var * fix: test issues * fix: fixed conflicts * fix: fixed conflict * fix: tab change reload chart * chore: refactor handling selected contract * fix: added selected tab in session storage and refactored code * fix: added market change for explanation * chore: variable improvement --------- Co-authored-by: prince-deriv <[email protected]>

* chore: draft market dropdown container * chore: undo unnecessary change * chore: undo unnecessary change * chore: undo unnecessary change * chore: undo unnecessary change * chore: undo unnecessary change * chore: no sticky * chore: fully working UI * chore: clean and fix errors * chore: fix onboarding * chore: fix eslint errors * chore: responsive view * chore: added responsive dropdowns * fix: remove unnecessary export * chore: purchase section * chore: long messages content hug * chore: improve market selector * chore: unnecessary change cleanup * fix: onboarding issue * chore: fix ui * fix: eslint errors

* fix: updated dropdown size and added default value * empty: empty commit * fix: fixed sorting issue

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error

src/javascript/app/base/clock.js

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error * chore: hide popup

* fix: updated dropdown size and added default value * empty: empty commit * fix: fixed sorting issue * fix: fixed scroll upward issue * fix: fixed scroll to selected element * fix: updated classname * fix: removed upward scroll fixes

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error * chore: hide popup * chore: ui fixes

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error * chore: hide popup * chore: ui fixes * chore: fix sell and audit clash

* fix: added parser for section msg notes * fix: added parser for texts * fix: removed optional check for data * fix: refactor function * fix: refactor

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error * chore: hide popup * chore: ui fixes * chore: fix sell and audit clash * chore: language fixes * chore: audit and qa test fixes * chore: fixed all around issues

* chore: draft form for stock indices touch/no-touch * chore: rise-and-fall, touch-notouch forms with config * chore: separate form component and fix issues * chore: simplified config and higherlower added * fix: formname condtion for touchnotouch * chore: forms for all the contracts of forex, stock-indices * chore: store start dates in sessionStorage to update the form based on market * chore: update quill-ui * chore: added forms for digits * chore: fix reset css * chore: trade forms until synthetics * chore: trademanager and hook * chore: update starttime, expire type form fields * chore: update old fields based on new selection * chore: remove unused variable * chore: one form for all contracts * chore: data hanlde until exprity type duration fields * chore: setting expirydate in datepicker and update expiry date on change

* fix: startime hasnow condition fixed * fix: remove console logs * fix: empty commit

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error * chore: hide popup * chore: ui fixes * chore: fix sell and audit clash * chore: language fixes * chore: audit and qa test fixes * chore: fixed all around issues * fix: error title

…#692) * fix: market selector not returning to default value when empty search * chore: remove unused code

* fix: last digit tab * fix: removed unused imports * fix: dropdown not being selected properly on digit info * fix: digits chart title * fix: added last digit tab and fixed height * fix: updated quill in explanation and refactored tabs * fix: removed unused vars * fix: refactored tabs * fix: fixed graph on refreshing * fix: updated dropdown size as md * fix: added localize --------- Co-authored-by: prince-deriv <[email protected]>

* fix: footer css breakage after installing quill * chore: remove unused code * fix: purchase section peek text align * chore: add padding fix

* chore: fix all formName dependencies * chore: unused vars

src/sass/_common/reskin.scss

src/javascript/app/pages/user/view_popup/view_popup.js

src/javascript/app/pages/trade/purchase/purchase.jsx

src/javascript/app/pages/trade/purchase/contract-table.jsx

src/javascript/app/pages/trade/purchase/contract-details.jsx

src/javascript/app/pages/trade/price.js

maryia-deriv

please check review comments🙏🏻

maryia-deriv · 2024-08-07T14:56:36Z

src/javascript/app/pages/trade/markets/markets-dropdown.jsx

+                                    return (
+                                        <React.Fragment key={sk}>
+                                            <DropdownTitle label={name} />
+                                            {Object.keys(symbols).map((yk) => {


please check this suggestion.
*same for sk above, and ik at L259 above 🙏🏻

src/javascript/app/pages/trade/markets/markets-dropdown.jsx

src/javascript/app/pages/trade/common.js

src/javascript/app/pages/trade/charts/highchart.js

src/javascript/app/pages/trade/barriers.js

src/javascript/app/pages/trade/purchase/contract-details.jsx

src/javascript/app/pages/bottom/tabs.jsx

* fix: empty field issues when changing trade * fix: amount empty issue

* fix: digit chart loading * Update src/javascript/app/pages/trade/digit_ticker.js Co-authored-by: Nuzhy-Deriv <[email protected]> * fix: return for arrow function --------- Co-authored-by: Nuzhy-Deriv <[email protected]>

* fix: firefox input type number spin button issue * fix: allow datepicker actionsheet to full height

* fix: all fixable nitpicks * fix: comments * fix: nit

src/javascript/app/pages/user/view_popup/view_popup.js

* fix: fixed audit page * fix: refactor * fix: refcactor purchase function * fix: refactor function * fix: refactor purchase function * fix: rename func

…782) * chore: assist with timout cleanups & nit-picks * refactor: 1 more timer cleanup and more nit-picks * fix: more nit-picks

src/javascript/app/pages/form/barrier-fields.jsx

* fix: update formName prop in barrier-fields * fix: translte now in starttime

* fix: updated quill version * fix: changed key name * fix: updated variable name

* fix: pr-nitpicks * fix: undo changes * fix: undo changes

github-actions · 2024-08-12T07:27:32Z

Preview Link: https://pr-660.smarttrader-preview.pages.dev

Name	Result
Build status	Completed ✅
Preview URL	Visit Preview
Action URL	Visit Action

prince-deriv and others added 4 commits June 12, 2024 15:20

chore: initial setup for redesign

8c5a82d

fix: path update mistake

2310f3b

chore: update quill version

76acf5e

Merge pull request #658 from prince-deriv/redesign

76462d1

Quill initial configuration

prince-deriv requested a review from a team as a code owner June 21, 2024 10:49

prince-deriv changed the title ~~Smart Trader Redesign~~ SmartTrader Redesign Jun 21, 2024

meenakshi-deriv and others added 4 commits June 26, 2024 12:34

Meenu market section subtask (#678)

e850770

* fix: updated dropdown size and added default value * empty: empty commit * fix: fixed sorting issue

Purchase section improvements (#675)

cb052f2

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error

github-advanced-security bot found potential problems Jul 17, 2024

View reviewed changes

src/javascript/app/base/clock.js Fixed Show fixed Hide fixed

prince-deriv and others added 18 commits July 17, 2024 17:39

Purchase section improvements (#680)

8233c67

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error * chore: hide popup

Meenu market scroll section (#679)

f2e85ba

* fix: updated dropdown size and added default value * empty: empty commit * fix: fixed sorting issue * fix: fixed scroll upward issue * fix: fixed scroll to selected element * fix: updated classname * fix: removed upward scroll fixes

Purchase section improvements (#681)

361a172

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error * chore: hide popup * chore: ui fixes

Merge branch 'master' into redesign

35477b9

Purchase section improvements (#683)

a9f1c18

* chore: initial trade results dev * chore: results and error messages * chore: popup load * chore: contract end * chore: add login error * chore: hide popup * chore: ui fixes * chore: fix sell and audit clash

Meenu add parser for section message (#682)

669e559

* fix: added parser for section msg notes * fix: added parser for texts * fix: removed optional check for data * fix: refactor function * fix: refactor

fix: added offset (#684)

d2ca4cd

Nuzhy/starttime now option issue (#690)

16bb30c

* fix: startime hasnow condition fixed * fix: remove console logs * fix: empty commit

fix: market selector not returning to default value when empty search (…

bd3a615

…#692) * fix: market selector not returning to default value when empty search * chore: remove unused code

Jia/QUILL-1783/Fix the UI issues brought by Quill CSS (#694)

21a08cd

* fix: footer css breakage after installing quill * chore: remove unused code * fix: purchase section peek text align * chore: add padding fix

Prince/Contract type forname fixes (#696)

e28b94f

* chore: fix all formName dependencies * chore: unused vars

fix: responsive fix for purchase section (#695)

e1a4143

fix: fixes for purchase responsive (#698)

992b154

fix: fixed width for contract details (#699)

855796f

maryia-deriv reviewed Aug 7, 2024

View reviewed changes

src/sass/_common/reskin.scss Outdated Show resolved Hide resolved

maryia-deriv suggested changes Aug 7, 2024

View reviewed changes

maryia-deriv reviewed Aug 7, 2024

View reviewed changes

src/javascript/app/pages/trade/purchase/contract-details.jsx Outdated Show resolved Hide resolved

kate-deriv reviewed Aug 7, 2024

View reviewed changes

src/javascript/app/pages/bottom/tabs.jsx Outdated Show resolved Hide resolved

kate-deriv reviewed Aug 7, 2024

View reviewed changes

src/javascript/app/pages/bottom/tabs.jsx Outdated Show resolved Hide resolved

kate-deriv reviewed Aug 7, 2024

View reviewed changes

src/javascript/app/pages/bottom/tabs.jsx Show resolved Hide resolved

Nuzhy-Deriv and others added 6 commits August 8, 2024 11:57

Nuzhy/_/empty field issue (#776)

761dcbe

* fix: empty field issues when changing trade * fix: amount empty issue

Merge branch 'master' into redesign

35871d0

Prince/fix digit chart issue (#778)

31b23db

* fix: digit chart loading * Update src/javascript/app/pages/trade/digit_ticker.js Co-authored-by: Nuzhy-Deriv <[email protected]> * fix: return for arrow function --------- Co-authored-by: Nuzhy-Deriv <[email protected]>

nuzhy/firefox input type number spin button issue (#780)

70793ea

* fix: firefox input type number spin button issue * fix: allow datepicker actionsheet to full height

Prince/Code cleanup (#777)

68ef580

* fix: all fixable nitpicks * fix: comments * fix: nit

fix: added box-shadow to custom dropdowns (#781)

d6758db

maryia-deriv reviewed Aug 8, 2024

View reviewed changes

src/javascript/app/pages/user/view_popup/view_popup.js Show resolved Hide resolved

meenakshi-deriv and others added 2 commits August 8, 2024 16:38

Meenu/fix: fixed audit page (#779)

44fd237

* fix: fixed audit page * fix: refactor * fix: refcactor purchase function * fix: refactor function * fix: refactor purchase function * fix: rename func

Maryia/refactor: Add timeout cleanups & assist with nit-picks fixes (#…

9d53f1e

…782) * chore: assist with timout cleanups & nit-picks * refactor: 1 more timer cleanup and more nit-picks * fix: more nit-picks

balakrishna-deriv reviewed Aug 9, 2024

View reviewed changes

src/javascript/app/pages/form/barrier-fields.jsx Show resolved Hide resolved

Nuzhy-Deriv and others added 9 commits August 9, 2024 09:47

fix: purchase issue on startime change (#783)

d45fd8d

Nuzhy/QUILL-1934/barrier fields issue (#784)

249b7ec

* fix: update formName prop in barrier-fields * fix: translte now in starttime

fix: enddate value format (#785)

dd87956

fix: table alignment on other language (#789)

92d1f49

fix: selected enddate issue on market change (#788)

b6563fe

fix: close the dropdown for same contract selection (#786)

dc685ea

Meenu/fix: updated quill version (#787)

c6b9022

* fix: updated quill version * fix: changed key name * fix: updated variable name

fix: guide issue on purchase error (#790)

56e07e6

Nuzhy/nit picks (#791)

a832e61

* fix: pr-nitpicks * fix: undo changes * fix: undo changes

balakrishna-deriv approved these changes Aug 12, 2024

View reviewed changes

maryia-deriv approved these changes Aug 12, 2024

View reviewed changes

ahmadtaimoor-deriv merged commit b11f6ad into master Aug 12, 2024
6 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

SmartTrader Redesign #660

SmartTrader Redesign #660

prince-deriv commented Jun 21, 2024 •

edited

Loading

github-actions bot commented Jun 21, 2024 •

edited

Loading

maryia-deriv left a comment

maryia-deriv Aug 7, 2024

github-actions bot commented Aug 12, 2024

SmartTrader Redesign #660

SmartTrader Redesign #660

Conversation

prince-deriv commented Jun 21, 2024 • edited Loading

Key Changes:

github-actions bot commented Jun 21, 2024 • edited Loading

Dependency Review

License Issues

package-lock.json

package.json

OpenSSF Scorecard

Scanned Manifest Files

maryia-deriv left a comment

Choose a reason for hiding this comment

maryia-deriv Aug 7, 2024

Choose a reason for hiding this comment

github-actions bot commented Aug 12, 2024

prince-deriv commented Jun 21, 2024 •

edited

Loading

github-actions bot commented Jun 21, 2024 •

edited

Loading