Build log
nerves_system_rpi4
fitbit 0.0.1 · fail · run fitbit-0.0.1-1791183946974
120 of 120 lines
1Resolving Hex dependencies...2Resolution completed in 0.16s3Unchanged:4 certifi 0.3.05 circular_buffer 1.1.06 elixir_make 0.10.07 fitbit 0.0.18 hackney 1.4.10 VULNERABLE!9 EEF-CVE-2026-47076 (MEDIUM)10 aka: CVE-2026-47076, GHSA-pj7v-xfvx-wmjq11 SSRF allowlist bypass via percent-encoded host in hackney12 https://osv.dev/vulnerability/EEF-CVE-2026-470761314 GHSA-vq52-99r9-h5pw (LOW)15 aka: CVE-2025-121116 Server-side Request Forgery (SSRF) in hackney17 https://osv.dev/vulnerability/GHSA-vq52-99r9-h5pw1819 EEF-CVE-2026-47071 (HIGH)20 aka: CVE-2026-47071, GHSA-gp9c-pm5m-5cxr21 SOCKS5 TLS upgrade ignores caller timeout in hackney22 https://osv.dev/vulnerability/EEF-CVE-2026-470712324 EEF-CVE-2026-47075 (MEDIUM)25 aka: CVE-2026-47075, GHSA-j9wq-vxxc-94wf26 CR/LF injection in query parameter in hackney27 https://osv.dev/vulnerability/EEF-CVE-2026-470752829 EEF-CVE-2026-47069 (LOW)30 aka: CVE-2026-47069, GHSA-mp55-p8c9-rfw231 CRLF injection in cookie domain/path options in hackney32 https://osv.dev/vulnerability/EEF-CVE-2026-470693334 GHSA-9fm9-hp7p-53mf (LOW)35 aka: CVE-2025-386436 Hackney fails to properly release HTTP connections to the pool37 https://osv.dev/vulnerability/GHSA-9fm9-hp7p-53mf38 httpoison 0.8.139 idna 1.1.040 interactive_cmd 0.1.441 mimerl 1.0.242 nerves 2.0.0-pre.243 nerves_discovery 0.1.544 nerves_logging 0.2.445 nerves_runtime 0.13.1346 nerves_system_bbb 2.30.247 nerves_system_br 1.34.448 nerves_system_mangopi_mq_pro 0.17.249 nerves_system_qemu_aarch64 0.4.250 nerves_system_rpi0 2.1.251 nerves_system_rpi4 2.1.252 nerves_system_rpi5 2.1.253 nerves_system_trellis 0.5.054 nerves_system_x86_64 1.34.255 nerves_toolchain_aarch64_nerves_linux_gnu 15.3.156 nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.157 nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.158 nerves_toolchain_riscv64_nerves_linux_gnu 15.3.159 nerves_toolchain_x86_64_nerves_linux_musl 15.3.160 nerves_uevent 0.1.761 poison 1.5.262 property_table 0.3.463 ring_logger 0.11.764 ssl_verify_hostname 1.0.565 tablet 0.3.366 toolshed 0.5.067 uboot_env 1.0.268* Getting fitbit (Hex package)69* Getting nerves (Hex package)70* Getting ring_logger (Hex package)71* Getting toolshed (Hex package)72* Getting nerves_runtime (Hex package)73* Getting nerves_system_bbb (Hex package)74* Getting nerves_system_mangopi_mq_pro (Hex package)75* Getting nerves_system_qemu_aarch64 (Hex package)76* Getting nerves_system_rpi0 (Hex package)77* Getting nerves_system_rpi4 (Hex package)78* Getting nerves_system_rpi5 (Hex package)79* Getting nerves_system_trellis (Hex package)80* Getting nerves_system_x86_64 (Hex package)81* Getting nerves_system_br (Hex package)82* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)83* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)84* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)85* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)86* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)87* Getting nerves_logging (Hex package)88* Getting nerves_uevent (Hex package)89* Getting uboot_env (Hex package)90* Getting elixir_make (Hex package)91* Getting property_table (Hex package)92* Getting circular_buffer (Hex package)93* Getting interactive_cmd (Hex package)94* Getting nerves_discovery (Hex package)95* Getting tablet (Hex package)96* Getting hackney (Hex package)97* Getting httpoison (Hex package)98* Getting poison (Hex package)99* Getting certifi (Hex package)100* Getting idna (Hex package)101* Getting mimerl (Hex package)102* Getting ssl_verify_hostname (Hex package)103Found packages with security advisories, see above for details104 warning: found quoted keyword "coveralls" but the quotes are not required. Note that keywords are always atoms, even when quoted. Similar to atoms, keywords made exclusively of ASCII letters, numbers, and underscores and not beginning with a number do not require quotes105 │106 15 │ preferred_cli_env: ["coveralls": :test, "coveralls.detail": :test, "coveralls.post": :test]107 │ ~108 │109 └─ /work/proj/deps_rpi4/fitbit/mix.exs:15:27110111 error: undefined variable "package"112 │113 10 │ package: package,114 │ ^^^^^^^115 │116 └─ /work/proj/deps_rpi4/fitbit/mix.exs:10:16: Fitbit.Mixfile.project/0117118Error while loading project :fitbit at /work/proj/deps_rpi4/fitbit119** (CompileError) deps_rpi4/fitbit/mix.exs: cannot compile module Fitbit.Mixfile (errors have been logged)120