Skip to content

False 'bugs' verification #22

@Paul-Reed

Description

@Paul-Reed

Authors appear to be able to 'mislead' the scorecard by providing a generic 'git' url in the package.json such as;

"bugs": {
"url": "https://github.com/paul-reed/node-red-contrib-mynode"
},

Instead of the 'bug's' url - https://github.com/paul-reed/node-red-contrib-mynode/issues
But then disabling issues in the git rep settings, so bugs cannot be reported, but gains a point in the scorecard...

I assume that there is access to the url in the package.json, if so, couldn't a regex determine if the url was suffixed with /issues (or the equivalent gitlab etc suffix).
Taking it a step further, maybe a further check could determine in the url actually existed.

Example - https://github.com/Supergiovane/node-red-contrib-tts-ultimate

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions