Build log
host
fitbit 0.0.1 · fail · run fitbit-0.0.1-1791183946974
86 of 86 lines
1Resolving Hex dependencies...2Resolution completed in 0.13s3Unchanged:4 certifi 0.3.05 circular_buffer 1.1.06 elixir_make 0.10.07 fitbit 0.0.18 hackney 1.4.10 VULNERABLE!9 EEF-CVE-2026-47076 (MEDIUM)10 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq11 SSRF allowlist bypass via percent-encoded host in hackney12 https://osv.dev/vulnerability/EEF-CVE-2026-470761314 GHSA-vq52-99r9-h5pw (LOW)15 aka: CVE-2025-121116 Server-side Request Forgery (SSRF) in hackney17 https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw1819 EEF-CVE-2026-47071 (HIGH)20 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr21 SOCKS5 TLS upgrade ignores caller timeout in hackney22 https://osv.dev/vulnerability/EEF-CVE-2026-470712324 EEF-CVE-2026-47075 (MEDIUM)25 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf26 CR/LF injection in query parameter in hackney27 https://osv.dev/vulnerability/EEF-CVE-2026-470752829 EEF-CVE-2026-47069 (LOW)30 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw231 CRLF injection in cookie domain/path options in hackney32 https://osv.dev/vulnerability/EEF-CVE-2026-470693334 GHSA-9fm9-hp7p-53mf (LOW)35 aka: CVE-2025-386436 Hackney fails to properly release HTTP connections to the pool37 https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf38 httpoison 0.8.139 idna 1.1.040 interactive_cmd 0.1.441 mimerl 1.0.242 nerves 2.0.0-pre.243 nerves_discovery 0.1.544 nerves_logging 0.2.445 nerves_runtime 0.13.1346 nerves_system_bbb 2.30.247 nerves_system_br 1.34.448 nerves_system_mangopi_mq_pro 0.17.249 nerves_system_qemu_aarch64 0.4.250 nerves_system_rpi0 2.1.251 nerves_system_rpi4 2.1.252 nerves_system_rpi5 2.1.253 nerves_system_trellis 0.5.054 nerves_system_x86_64 1.34.255 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.156 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.157 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.158 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.159 nerves_toolchain_x86_64_nerves_linux_musl 15.3.160 nerves_uevent 0.1.761 poison 1.5.262 property_table 0.3.463 ring_logger 0.11.764 ssl_verify_hostname 1.0.565 tablet 0.3.366 toolshed 0.5.067 uboot_env 1.0.268Found packages with security advisories, see above for details69All dependencies have been fetched70 warning: found quoted keyword "coveralls" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes71 │72 15 │ preferred_cli_env: ["coveralls": :test, "coveralls.detail": :test, "coveralls.post": :test]73 │ ~74 │75 └─ /work/proj/deps/fitbit/mix.exs:15:277677 error: undefined variable "package"78 │79 10 │ package: package,80 │ ^^^^^^^81 │82 └─ /work/proj/deps/fitbit/mix.exs:10:16: Fitbit.Mixfile.project/08384Error while loading project :fitbit at /work/proj/deps/fitbit85** (CompileError) deps/fitbit/mix.exs: cannot compile module Fitbit.Mixfile (errors have been logged)86