pipecraft / pipes Goto Github PK

We would like to add the following maven projects to maven central repo:

• pipes-core
• pipes-google-cs
• pipes-google-bq
• pipes-amazon-s3

Their versions should be aligned

Hi :)
Is there a plan anytime soon to support Parquet files as input?

Hi, @eyalschneider, I'd like to report a vulnerability issue in org.pipecraft.pipes:pipes-core:0.9.1.

Issue Description

I noticed that org.pipecraft.pipes:pipes-core:0.9.1 directly depends on com.github.luben:zstd-jni:v1.4.4-2 in the pom. However, as shown in the following dependency graph, com.github.luben:zstd-jni:v1.4.4-2 sufferes from the vulnerability which the C library zstd(version:1.4.4) exposed: CVE-2021-24032.

Dependency Graph between Java and Shared Libraries

Suggested Vulnerability Patch Versions

com.github.luben:zstd-jni:v1.4.9-1 (>=v1.4.9-1) has upgraded this vulnerable C library zstd to the patch version 1.4.9.

Java build tools cannot report vulnerable C libraries, which may induce potential security issues to many downstream Java projects. Could you please upgrade this vulnerable dependency?

Thanks for your help~
Best regards,
Helen Parr