Hello all, didn't find a better place to open this issue, sorry if it is not the best fit. Anyway, as you can see from here: https://registry.jsonresume.org/AlessandroBagnoli there is the default profile pic even if i set up my own into the gist: https://gist.github.com/AlessandroBagnoli/c3ec522b56fc2be93522c2da61d93ab5

Any advice?

Vulnerabilities

DepShield reports that this application's usage of kind-of:3.2.2 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Occurrences

kind-of:3.2.2 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ jest-extended:0.11.5
              └─ expect:24.9.0
                    └─ jest-message-util:24.9.0
                          └─ micromatch:3.1.10
                                └─ extglob:2.0.4
                                      └─ expand-brackets:2.1.4
                                            └─ define-property:0.2.5
                                                  └─ is-descriptor:0.1.6
                                                        └─ is-accessor-descriptor:0.1.6
                                                              └─ kind-of:3.2.2
                                                        └─ is-data-descriptor:0.1.4
                                                              └─ kind-of:3.2.2
                                └─ braces:2.3.2
                                      └─ fill-range:4.0.0
                                            └─ is-number:3.0.0
                                                  └─ kind-of:3.2.2
                                      └─ snapdragon-node:2.1.1
                                            └─ snapdragon-util:3.0.1
                                                  └─ kind-of:3.2.2
                                └─ snapdragon:0.8.2
                                      └─ base:0.11.2
                                            └─ cache-base:1.0.1
                                                  └─ has-value:1.0.0
                                                        └─ has-values:1.0.0
                                                              └─ is-number:3.0.0
                                                                    └─ kind-of:3.2.2
                                                  └─ to-object-path:0.3.0
                                                        └─ kind-of:3.2.2
                                            └─ class-utils:0.3.6
                                                  └─ define-property:0.2.5
                                                        └─ is-descriptor:0.1.6
                                                              └─ is-accessor-descriptor:0.1.6
                                                                    └─ kind-of:3.2.2
                                                              └─ is-data-descriptor:0.1.4
                                                                    └─ kind-of:3.2.2
                                                  └─ static-extend:0.1.2
                                                        └─ object-copy:0.1.0
                                                              └─ define-property:0.2.5
                                                                    └─ is-descriptor:0.1.6
                                                                          └─ is-accessor-descriptor:0.1.6
                                                                                └─ kind-of:3.2.2
                                                                          └─ is-data-descriptor:0.1.4
                                                                                └─ kind-of:3.2.2
                                                              └─ kind-of:3.2.2
                                                        └─ define-property:0.2.5
                                                              └─ is-descriptor:0.1.6
                                                                    └─ is-accessor-descriptor:0.1.6
                                                                          └─ kind-of:3.2.2
                                                                    └─ is-data-descriptor:0.1.4
                                                                          └─ kind-of:3.2.2
                                      └─ define-property:0.2.5
                                            └─ is-descriptor:0.1.6
                                                  └─ is-accessor-descriptor:0.1.6
                                                        └─ kind-of:3.2.2
                                                  └─ is-data-descriptor:0.1.4
                                                        └─ kind-of:3.2.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Sections such as languages or interests and volunteer work do not appear in this theme (v.0.0.13).
eg this is my json:

"languages": [
    {
      "language": "Greek",
  "fluency": "Native speaker"
},
{
  "language": "English",
  "fluency": "C2 Level - Very fluent"
}
   ],
  "interests": [
{
  "name": "Boxing",
  "keywords": []
}
  ],
  "references": []

and the end result can be found here: http://registry.jsonresume.org/klipitkas

Vulnerabilities

DepShield reports that this application's usage of socket.io-parser:3.3.2 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2020-36049] socket.io-parser before 3.4.1 allows attackers to cause a denial of service (mem...

Occurrences

socket.io-parser:3.3.2 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ browser-sync:2.27.4
              └─ browser-sync-ui:2.27.4
                    └─ socket.io-client:2.4.0
                          └─ socket.io-parser:3.3.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of engine.io:3.5.0 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2020-36048] Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource c...

Occurrences

engine.io:3.5.0 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ browser-sync:2.27.4
              └─ socket.io:2.4.0
                    └─ engine.io:3.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

This theme server http://bootswatch.com/lumen/bootstrap.min.css which breaks the template when served over HTTPS (like https://registry.jsonresume.org/igorkulman). Should be changed to //bootswatch.com/lumen/bootstrap.min.css

@thomasdavis I updated my theme, jsonresume-theme-tan-responsive, to include certificates and published it to the npm site. However, I don't see the updates reflected when I open my resume.

Vulnerabilities

DepShield reports that this application's usage of object-path:0.11.5 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

object-path:0.11.5 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ object-path-immutable:4.1.1
              └─ object-path:0.11.5

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of tar:2.2.1 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2018-20834] Improper Link Resolution Before File Access ("Link Following")
• (CVSS 7.5) CWE-62: UNIX Hard Link

Occurrences

tar:2.2.1 is a transitive dependency introduced by the following direct dependency(s):

• tarball-extract:0.0.6
        └─ tar:2.2.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of http-proxy:1.18.1 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

http-proxy:1.18.1 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ browser-sync:2.27.4
              └─ http-proxy:1.18.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.get:4.4.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.get:4.4.2 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ resume-schema:1.0.0
              └─ z-schema:4.2.4
                    └─ lodash.get:4.4.2
        └─ z-schema:5.0.1
              └─ lodash.get:4.4.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of btoa:1.2.1 results in the following vulnerability(s):

• (CVSS 6.5) CWE-125: Out-of-bounds Read

Occurrences

btoa:1.2.1 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ btoa:1.2.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

• (CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ browser-sync:2.27.4
              └─ connect:3.6.6
                    └─ debug:2.6.9
                    └─ finalhandler:1.1.0
                          └─ debug:2.6.9
              └─ resp-modifier:6.0.2
                    └─ debug:2.6.9
              └─ send:0.16.2
                    └─ debug:2.6.9
              └─ serve-index:1.9.1
                    └─ debug:2.6.9
        └─ jest-extended:0.11.5
              └─ expect:24.9.0
                    └─ jest-message-util:24.9.0
                          └─ micromatch:3.1.10
                                └─ extglob:2.0.4
                                      └─ expand-brackets:2.1.4
                                            └─ debug:2.6.9
                                └─ snapdragon:0.8.2
                                      └─ debug:2.6.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

The project could not be analyzed because of maven build errors. Please review the error messages here. Another build will be scheduled within 24 hours. If the build is successful this issue will be closed, otherwise the error message will be updated.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

🚨 You need to enable Continuous Integration on all branches of this repository. 🚨

To enable Greenkeeper, you need to make sure that a commit status is reported on all branches. This is required by Greenkeeper because it uses your CI build statuses to figure out when to notify you about breaking changes.

Since we didn’t receive a CI status on the greenkeeper/initial branch, it’s possible that you don’t have CI set up yet. We recommend using Travis CI, but Greenkeeper will work with every other CI service as well.

If you have already set up a CI for this repository, you might need to check how it’s configured. Make sure it is set to run on all new branches. If you don’t want it to run on absolutely every branch, you can whitelist branches starting with greenkeeper/.

Once you have installed and configured CI on this repository correctly, you’ll need to re-trigger Greenkeeper’s initial pull request. To do this, please delete the greenkeeper/initial branch in this repository, and then remove and re-add this repository to the Greenkeeper integration’s white list on Github. You'll find this list on your repo or organization’s settings page, under Installed GitHub Apps.

Error loading bootstrap from the site below which I assume is completely breaking the layout

Browser
Google Chrome Version 96.0.4664.55 - MacOS 11.04 BigSur

Error
Mixed Content: The page at 'https://themes.jsonresume.org/theme/modern' was loaded over HTTPS, but requested an insecure stylesheet 'http://bootswatch.com/lumen/bootstrap.min.css'. This request has been blocked; the content must be served over HTTPS.

Vulnerabilities

DepShield reports that this application's usage of underscore:1.6.0 results in the following vulnerability(s):

• (CVSS 7.2) [CVE-2021-23358] The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before ...

Occurrences

underscore:1.6.0 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ jsonlint:1.6.3
              └─ nomnom:1.8.1
                    └─ underscore:1.6.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of kind-of:4.0.0 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Occurrences

kind-of:4.0.0 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ jest-extended:0.11.5
              └─ expect:24.9.0
                    └─ jest-message-util:24.9.0
                          └─ micromatch:3.1.10
                                └─ snapdragon:0.8.2
                                      └─ base:0.11.2
                                            └─ cache-base:1.0.1
                                                  └─ has-value:1.0.0
                                                        └─ has-values:1.0.0
                                                              └─ kind-of:4.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.isfinite:3.3.2 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
• (CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.isfinite:3.3.2 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ browser-sync:2.27.4
              └─ portscanner:2.1.1
                    └─ is-number-like:1.0.8
                          └─ lodash.isfinite:3.3.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

The way view is generated, it leaves a comma if any (or both) of area and studyType is absent. This gives a bad first impression to people trying it out for the first time especially because they are optional.

Vulnerabilities

DepShield reports that this application's usage of bl:4.1.0 results in the following vulnerability(s):

• (CVSS 4.3) CWE-200: Information Exposure

Occurrences

bl:4.1.0 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ puppeteer:5.5.0
              └─ tar-fs:2.1.1
                    └─ tar-stream:2.2.0
                          └─ bl:4.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of kind-of:5.1.0 results in the following vulnerability(s):

• (CVSS 5.3) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Occurrences

kind-of:5.1.0 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ jest-extended:0.11.5
              └─ expect:24.9.0
                    └─ jest-message-util:24.9.0
                          └─ micromatch:3.1.10
                                └─ extglob:2.0.4
                                      └─ expand-brackets:2.1.4
                                            └─ define-property:0.2.5
                                                  └─ is-descriptor:0.1.6
                                                        └─ kind-of:5.1.0
                                └─ snapdragon:0.8.2
                                      └─ base:0.11.2
                                            └─ class-utils:0.3.6
                                                  └─ define-property:0.2.5
                                                        └─ is-descriptor:0.1.6
                                                              └─ kind-of:5.1.0
                                                  └─ static-extend:0.1.2
                                                        └─ object-copy:0.1.0
                                                              └─ define-property:0.2.5
                                                                    └─ is-descriptor:0.1.6
                                                                          └─ kind-of:5.1.0
                                                        └─ define-property:0.2.5
                                                              └─ is-descriptor:0.1.6
                                                                    └─ kind-of:5.1.0
                                      └─ define-property:0.2.5
                                            └─ is-descriptor:0.1.6
                                                  └─ kind-of:5.1.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of lodash.isequal:4.5.0 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

lodash.isequal:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• resume-cli:3.0.5
        └─ resume-schema:1.0.0
              └─ z-schema:4.2.4
                    └─ lodash.isequal:4.5.0
        └─ z-schema:5.0.1
              └─ lodash.isequal:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}