en.cofacts.tw
Cofacts - Message reporting chatbot and crowd-sourced fact-checking community
Cofacts is a collaborative system connecting instant messages and fact-check reports or different opinions together. It's a grass-root effort fighting mis/disinformation in Taiwan.
![]()
cofact.org
Cofact - พื้นที่เปิดให้ทุกคนมาช่วยกันตรวจสอบข่าวลวง
คนใกล้ชิดของคุณ อาจตกเป็นเหยื่อของข่าวลวง หรือ ส่งต่อข่าวลวงบนอินเทอร์เน็ตโดยไม่รู้ตัว
![]()
YouTube
John-Daisuke Initial meeting about Taiwanese Gov-Zero Cofacts
HackMD
【真的假的】其他相關新聞 ====== 2021-03-24 研究:2020總統大選前 候選人粉專藏2成假帳號 <https://www.cna.com.tw/news/firstnews/202>
ja.cofacts.tw
Cofacts デマ探偵隊 - 情報に対してリプライするチャットボットと協働検証をするコミュニティです
「Cofacts デマ探偵隊」はインターネット情報及びデマ検証・報告に関する市民協働とリンクするシステムです。デマ情報に対して、一人一人が積極的に参加するような草の根の力で対応策を作り上げるのを目指しています。
![]()
• Include Japanese translation in codebase • Build & push script • Relax landing page style so that it also works for Japanese version
Deploy `site-ja` and setup `api`'s CORS domain
#251 Support japanese version of Cofacts
TBA
Comment on #251 Support japanese version of Cofacts
*Pull Request Test Coverage Report for <https://coveralls.io/builds/39290812|Build 1315>* • *0* of *0* changed or added relevant lines in *0* files are covered. • No unchanged relevant lines lost coverage. • Overall coverage remained the same at *86.629%* * * * * * * *:yellow_heart: - <https://coveralls.io|Coveralls>*
m.facebook.com
【聊聊產品遊戲化中的雙循環理論】 「遊戲化」到底是不是一個偽命題一直有些爭論。贊成者認為遊戲中對於人性誘因的設計,適用於各種產品如拼多多、Dulingo、Orangetheory Fitness等都有不錯的成績;反對者則認為很多打著遊戲化的產品大多流於表面,短期內可能帶來不錯的成效,但長線看來對產品的收入沒有太大幫助。...
![]()
#258 Remove reply content in removeArticleReply.js script
Per <https://g0v.hackmd.io/6ZwH7NANRqG6s-CCIy9IYw?both#yegogo-%E8%99%95%E7%90%86|20210428 discussion>, since we backup original reply text in the spreadsheet, we can consider removing spammer's reply text entirely. We can modify `removeArticleReply.js` so that it optionally take a CLI argument that replaces the reply text with specified text. We can provide link to the spreadsheet or takedown note in the replaced text.
Comment on #432 Japanese version
Seems that there are missing kanji font in our current font selection <https://user-images.githubusercontent.com/108608/117100608-b8b55500-ada6-11eb-8b4e-8fe32bb6b6c0.png|image>
![]()
#433 Bump lodash from 4.17.19 to 4.17.21
Bumps <https://github.com/lodash/lodash|lodash> from 4.17.19 to 4.17.21. Commits • <https://github.com/lodash/lodash/commit/f299b52f39486275a9e6483b60a410e06520c538|`f299b52`> Bump to v4.17.21 • <https://github.com/lodash/lodash/commit/c4847ebe7d14540bb28a8b932a9ce1b9ecbfee1a|`c4847eb`> Improve performance of `toNumber`, `trim` and `trimEnd` on large input strings • <https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c|`3469357`> Prevent command injection through `_.template`'s `variable` option • <https://github.com/lodash/lodash/commit/ded9bc66583ed0b4e3b7dc906206d40757b4a90a|`ded9bc6`> Bump to v4.17.20. • <https://github.com/lodash/lodash/commit/63150ef7645ac07961b63a86490f419f356429aa|`63150ef`> Documentation fixes. • <https://github.com/lodash/lodash/commit/00f0f62a979d2f5fa0287c06eae70cf9a62d8794|`00f0f62`> test.js: Remove trailing comma. • <https://github.com/lodash/lodash/commit/846e434c7a5b5692c55ebf5715ed677b70a32389|`846e434`> Temporarily use a custom fork of `lodash-cli`. • <https://github.com/lodash/lodash/commit/5d046f39cbd27f573914768e3b36eeefcc4f1229|`5d046f3`> Re-enable Travis tests on `4.17` branch. • <https://github.com/lodash/lodash/commit/aa816b36d402a1ad9385142ce7188f17dae514fd|`aa816b3`> Remove `/npm-package`. • See full diff in <https://github.com/lodash/lodash/compare/4.17.19...4.17.21|compare view> Maintainer changes This version was pushed to npm by <https://www.npmjs.com/~bnjmnt4n|bnjmnt4n>, a new releaser for lodash since your current version. <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-site/network/alerts|Security Alerts page>.
#22 Bump handlebars from 4.5.1 to 4.7.7
Bumps <https://github.com/wycats/handlebars.js|handlebars> from 4.5.1 to 4.7.7. Changelog _Sourced from <https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md|handlebars's changelog>._ > *v4.7.7 - February 15th, 2021* > > • fix weird error in integration tests - eb860c0 > • fix: check prototype property access in strict-mode (<https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736|#1736>) - b6d3de7 > • fix: escape property names in compat mode (<https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736|#1736>) - f058970 > • refactor: In spec tests, use expectTemplate over equals and shouldThrow (<https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1683|#1683>) - 77825f8 > • chore: start testing on Node.js 12 and 13 - 3789a30 > > (POSSIBLY) BREAKING CHANGES: > > • the changes from version <https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md#v460---january-8th-2020|4.6.0> now also apply in when using the compile-option "strict: true". Access to prototype properties is forbidden completely by default, specific properties or methods can be allowed via runtime-options. See <https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1633|#1633> for details. If you are using Handlebars as documented, you should not be accessing prototype properties from your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build. > > That is why we only bump the patch version despite mentioning breaking changes. > > <https://github.com/wycats/handlebars.js/compare/v4.7.6...v4.7.7|Commits> > > *v4.7.6 - April 3rd, 2020* > > Chore/Housekeeping: > > • <https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1672|#1672> - Switch cmd parser to latest minimist (<https://api.github.com/users/dougwilson|`@dougwilson`> > > Compatibility notes: > > • Restored Node.js compatibility > > <https://github.com/wycats/handlebars.js/compare/v4.7.5...v4.7.6|Commits> > > *v4.7.5 - April 2nd, 2020* > > Chore/Housekeeping: > > • ~Node.js version support has been changed to v6+~ Reverted in 4.7.6 > > Compatibility notes: > > • ~Node.js < v6 is no longer supported~ Reverted in 4.7.6 > > <https://github.com/wycats/handlebars.js/compare/v4.7.4...v4.7.5|Commits> > > *v4.7.4 - April 1st, 2020* > > Chore/Housekeeping: > > • <https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1666|#1666> - Replaced minimist with yargs for handlebars CLI (<https://api.github.com/users/aorinevo|`@aorinevo`>, <https://api.github.com/users/AviVahl|`@AviVahl`> & <https://api.github.com/users/fabb|`@fabb`>) > > Compatibility notes: ... (truncated) Commits • <https://github.com/handlebars-lang/handlebars.js/commit/a9a8e403213583ca90cb7c872d3a22796c37d961|`a9a8e40`> v4.7.7 • <https://github.com/handlebars-lang/handlebars.js/commit/e66aed5b99c1b6c93564f37d627e34e5d60eb76e|`e66aed5`> Update release notes • <https://github.com/handlebars-lang/handlebars.js/commit/7d4d170ce46a53084a41920c5c7387c131357989|`7d4d170`> disable IE in Saucelabs tests • <https://github.com/handlebars-lang/handlebars.js/commit/eb860c08998f8f506360d305d89e1f4b40f72a0a|`eb860c0`> fix weird error in integration tests • <https://github.com/handlebars-lang/handlebars.js/commit/b6d3de7123eebba603e321f04afdbae608e8fea8|`b6d3de7`> fix: check prototype property access in strict-mode (<https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736|#1736>) • <https://github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427|`f058970`> fix: escape property names in compat mode (<https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736|#1736>) • <https://github.com/handlebars-lang/handlebars.js/commit/77825f8d3522356feb8e4160fac16344104d192b|`77825f8`> refator: In spec tests, use expectTemplate over equals and shouldThrow (<https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1683|#1683>) • <https://github.com/handlebars-lang/handlebars.js/commit/3789a309554fd600caeae442f40881cf93eb3b54|`3789a30`> chore: start testing on Node.js 12 and 13 • <https://github.com/handlebars-lang/handlebars.js/commit/e6ad93ea01bcde1f8ddaa4b4ebe572dd616abfaa|`e6ad93e`> v4.7.6 • <https://github.com/handlebars-lang/handlebars.js/commit/2bf4fc6fd3ae3d8f076d628653f284d85faebeb4|`2bf4fc6`> Update release notes • Additional commits viewable in <https://github.com/wycats/handlebars.js/compare/v4.5.1...v4.7.7|compare view> <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-fb-bot/network/alerts|Security Alerts page>.
Comment on #15 Bump handlebars from 4.5.1 to 4.7.6
Superseded by <https://github.com/cofacts/rumors-fb-bot/pull/22|#22>.
#23 Bump lodash from 4.17.10 to 4.17.21
Bumps <https://github.com/lodash/lodash|lodash> from 4.17.10 to 4.17.21. Commits • <https://github.com/lodash/lodash/commit/f299b52f39486275a9e6483b60a410e06520c538|`f299b52`> Bump to v4.17.21 • <https://github.com/lodash/lodash/commit/c4847ebe7d14540bb28a8b932a9ce1b9ecbfee1a|`c4847eb`> Improve performance of `toNumber`, `trim` and `trimEnd` on large input strings • <https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c|`3469357`> Prevent command injection through `_.template`'s `variable` option • <https://github.com/lodash/lodash/commit/ded9bc66583ed0b4e3b7dc906206d40757b4a90a|`ded9bc6`> Bump to v4.17.20. • <https://github.com/lodash/lodash/commit/63150ef7645ac07961b63a86490f419f356429aa|`63150ef`> Documentation fixes. • <https://github.com/lodash/lodash/commit/00f0f62a979d2f5fa0287c06eae70cf9a62d8794|`00f0f62`> test.js: Remove trailing comma. • <https://github.com/lodash/lodash/commit/846e434c7a5b5692c55ebf5715ed677b70a32389|`846e434`> Temporarily use a custom fork of `lodash-cli`. • <https://github.com/lodash/lodash/commit/5d046f39cbd27f573914768e3b36eeefcc4f1229|`5d046f3`> Re-enable Travis tests on `4.17` branch. • <https://github.com/lodash/lodash/commit/aa816b36d402a1ad9385142ce7188f17dae514fd|`aa816b3`> Remove `/npm-package`. • <https://github.com/lodash/lodash/commit/d7fbc52ee0466a6d248f047b5d5c3e6d1e099056|`d7fbc52`> Bump to v4.17.19 • Additional commits viewable in <https://github.com/lodash/lodash/compare/4.17.10...4.17.21|compare view> Maintainer changes This version was pushed to npm by <https://www.npmjs.com/~bnjmnt4n|bnjmnt4n>, a new releaser for lodash since your current version. <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-fb-bot/network/alerts|Security Alerts page>.
Comment on #12 Bump lodash from 4.17.10 to 4.17.19
Superseded by <https://github.com/cofacts/rumors-fb-bot/pull/23|#23>.
Figma
Created with Figma
![]()
#434 Incorrect "Similar replies" title
In reply page, the sidebar title should be "Similar replies" rather than "Similar messages". <https://user-images.githubusercontent.com/108608/117537599-96386b80-b034-11eb-8cdc-f3f0de947d41.png|image>
![]()
#252 Ask user not to trust the message just yet when no reply is available
Discussions: <https://g0v.hackmd.io/BRQtYUVzTU2vNxainshnMQ#%E4%BD%BF%E7%94%A8%E8%80%85%E8%AE%8A%E5%A4%9A|https://g0v.hackmd.io/BRQtYUVzTU2vNxainshnMQ#%E4%BD%BF%E7%94%A8%E8%80%85%E8%AE%8A%E5%A4%9A> *Screenshots* *Message not in DB* <https://user-images.githubusercontent.com/108608/117537838-127f7e80-b036-11eb-923d-6990ebc6e375.png|image> *There are similar messages in DB but not what user want* <https://user-images.githubusercontent.com/108608/117537856-29be6c00-b036-11eb-826f-d1e080ea28a5.png|image> *Message in DB but not replied yet* <https://user-images.githubusercontent.com/108608/117537875-38a51e80-b036-11eb-94f6-158893f5c36f.png|image>
![]()
Comment on #252 Ask user not to trust the message just yet when no reply is available
*Pull Request Test Coverage Report for <https://coveralls.io/builds/39483780|Build 1320>* • *0* of *0* changed or added relevant lines in *0* files are covered. • No unchanged relevant lines lost coverage. • Overall coverage remained the same at *86.629%* * * * * * * *:yellow_heart: - <https://coveralls.io|Coveralls>*
TODO: • tesseract support • automatic build & push in Github Actions with `.env` as secret (<https://docs.docker.com/ci-cd/github-actions/|https://docs.docker.com/ci-cd/github-actions/>)
*Pull Request Test Coverage Report for <https://coveralls.io/builds/39487586|Build 1326>* • *0* of *0* changed or added relevant lines in *0* files are covered. • No unchanged relevant lines lost coverage. • Overall coverage remained the same at *86.629%* * * * * * * *:yellow_heart: - <https://coveralls.io|Coveralls>*
#435 Bump hosted-git-info from 2.8.4 to 2.8.9
Bumps <https://github.com/npm/hosted-git-info|hosted-git-info> from 2.8.4 to 2.8.9. Changelog _Sourced from <https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md|hosted-git-info's changelog>._ > *<https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9|2.8.9> (2021-04-07)* > *Bug Fixes* > > • backport regex fix from <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76|#76> (<https://github.com/npm/hosted-git-info/commit/29adfe5|29adfe5>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/84|#84> > > *<https://github.com/npm/hosted-git-info/compare/v2.8.7...v2.8.8|2.8.8> (2020-02-29)* > *Bug Fixes* > > • <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61|#61> & <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65|#65> addressing issues w/ url.URL implmentation which regressed node 6 support (<https://github.com/npm/hosted-git-info/commit/5038b18|5038b18>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/66|#66> > > *<https://github.com/npm/hosted-git-info/compare/v2.8.6...v2.8.7|2.8.7> (2020-02-26)* > *Bug Fixes* > > • Do not attempt to use url.URL when unavailable (<https://github.com/npm/hosted-git-info/commit/2d0bb66|2d0bb66>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61|#61> <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/62|#62> > • Do not pass scp-style URLs to the WhatWG url.URL (<https://github.com/npm/hosted-git-info/commit/f2cdfcf|f2cdfcf>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/60|#60> > > *<https://github.com/npm/hosted-git-info/compare/v2.8.5...v2.8.6|2.8.6> (2020-02-25)* > > *<https://github.com/npm/hosted-git-info/compare/v2.8.4...v2.8.5|2.8.5> (2019-10-07)* > *Bug Fixes* > > • updated pathmatch for gitlab (<https://github.com/npm/hosted-git-info/commit/e8325b5|e8325b5>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/51|#51> > • updated pathmatch for gitlab (<https://github.com/npm/hosted-git-info/commit/ffe056f|ffe056f>) Commits • <https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01|`8d4b369`> chore(release): 2.8.9 • <https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7|`29adfe5`> fix: backport regex fix from <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76|#76> • <https://github.com/npm/hosted-git-info/commit/afeaefdd86ba9bb5044be3c1554a666d007cf19a|`afeaefd`> chore(release): 2.8.8 • <https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb|`5038b18`> fix: <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61|#61> & <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65|#65> addressing issues w/ url.URL implmentation which regressed nod... • <https://github.com/npm/hosted-git-info/commit/7440afa859162051c191e55d8ecfaf69a193b026|`7440afa`> chore(release): 2.8.7 • <https://github.com/npm/hosted-git-info/commit/2d0bb6615ecb8f9ef1019bc0737aab7f6449641f|`2d0bb66`> fix: Do not attempt to use url.URL when unavailable • <https://github.com/npm/hosted-git-info/commit/f2cdfcf33ad2bd3bd1acdba0326281089f53c5b1|`f2cdfcf`> fix: Do not pass scp-style URLs to the WhatWG url.URL • <https://github.com/npm/hosted-git-info/commit/e1b83df5d9cb1f8bb220352e20565560548d2292|`e1b83df`> chore(release): 2.8.6 • <https://github.com/npm/hosted-git-info/commit/ff259a6117c62df488e927820e30bec2f7ee453f|`ff259a6`> Ensure passwords in hosted Git URLs are correctly escaped • <https://github.com/npm/hosted-git-info/commit/624fd6f301dd5a1fd7ad1b333d6f8921a12ff98c|`624fd6f`> chore(release): 2.8.5 • Additional commits viewable in <https://github.com/npm/hosted-git-info/compare/v2.8.4...v2.8.9|compare view> Maintainer changes This version was pushed to npm by <https://www.npmjs.com/~nlf|nlf>, a new releaser for hosted-git-info since your current version. <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-site/network/alerts|Security Alerts page>.
#24 Bump hosted-git-info from 2.7.1 to 2.8.9
Bumps <https://github.com/npm/hosted-git-info|hosted-git-info> from 2.7.1 to 2.8.9. Changelog _Sourced from <https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md|hosted-git-info's changelog>._ > *<https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9|2.8.9> (2021-04-07)* > *Bug Fixes* > > • backport regex fix from <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76|#76> (<https://github.com/npm/hosted-git-info/commit/29adfe5|29adfe5>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/84|#84> > > *<https://github.com/npm/hosted-git-info/compare/v2.8.7...v2.8.8|2.8.8> (2020-02-29)* > *Bug Fixes* > > • <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61|#61> & <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65|#65> addressing issues w/ url.URL implmentation which regressed node 6 support (<https://github.com/npm/hosted-git-info/commit/5038b18|5038b18>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/66|#66> > > *<https://github.com/npm/hosted-git-info/compare/v2.8.6...v2.8.7|2.8.7> (2020-02-26)* > *Bug Fixes* > > • Do not attempt to use url.URL when unavailable (<https://github.com/npm/hosted-git-info/commit/2d0bb66|2d0bb66>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61|#61> <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/62|#62> > • Do not pass scp-style URLs to the WhatWG url.URL (<https://github.com/npm/hosted-git-info/commit/f2cdfcf|f2cdfcf>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/60|#60> > > *<https://github.com/npm/hosted-git-info/compare/v2.8.5...v2.8.6|2.8.6> (2020-02-25)* > > *<https://github.com/npm/hosted-git-info/compare/v2.8.4...v2.8.5|2.8.5> (2019-10-07)* > *Bug Fixes* > > • updated pathmatch for gitlab (<https://github.com/npm/hosted-git-info/commit/e8325b5|e8325b5>), closes <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/51|#51> > • updated pathmatch for gitlab (<https://github.com/npm/hosted-git-info/commit/ffe056f|ffe056f>) > > *<https://github.com/npm/hosted-git-info/compare/v2.8.3...v2.8.4|2.8.4> (2019-08-12)* ... (truncated) Commits • <https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01|`8d4b369`> chore(release): 2.8.9 • <https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7|`29adfe5`> fix: backport regex fix from <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76|#76> • <https://github.com/npm/hosted-git-info/commit/afeaefdd86ba9bb5044be3c1554a666d007cf19a|`afeaefd`> chore(release): 2.8.8 • <https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb|`5038b18`> fix: <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61|#61> & <https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65|#65> addressing issues w/ url.URL implmentation which regressed nod... • <https://github.com/npm/hosted-git-info/commit/7440afa859162051c191e55d8ecfaf69a193b026|`7440afa`> chore(release): 2.8.7 • <https://github.com/npm/hosted-git-info/commit/2d0bb6615ecb8f9ef1019bc0737aab7f6449641f|`2d0bb66`> fix: Do not attempt to use url.URL when unavailable • <https://github.com/npm/hosted-git-info/commit/f2cdfcf33ad2bd3bd1acdba0326281089f53c5b1|`f2cdfcf`> fix: Do not pass scp-style URLs to the WhatWG url.URL • <https://github.com/npm/hosted-git-info/commit/e1b83df5d9cb1f8bb220352e20565560548d2292|`e1b83df`> chore(release): 2.8.6 • <https://github.com/npm/hosted-git-info/commit/ff259a6117c62df488e927820e30bec2f7ee453f|`ff259a6`> Ensure passwords in hosted Git URLs are correctly escaped • <https://github.com/npm/hosted-git-info/commit/624fd6f301dd5a1fd7ad1b333d6f8921a12ff98c|`624fd6f`> chore(release): 2.8.5 • Additional commits viewable in <https://github.com/npm/hosted-git-info/compare/v2.7.1...v2.8.9|compare view> Maintainer changes This version was pushed to npm by <https://www.npmjs.com/~nlf|nlf>, a new releaser for hosted-git-info since your current version. <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-fb-bot/network/alerts|Security Alerts page>.
• Update dockerfile • Multi-stage build to make docker image smaller • apply `.env` file in build process (which is consistent to Heroku build environment) • npm scripts: Move build process to `heroku-postbuild` • so that it runs on heroku only, not in docker builds • heroku build should still work • .travis.yml updated accordingly • Categorize env vars into "Build time variables" and "Runtime secrets" • "Build time variables" are used by webpack and will be built into docker image • "Runtime secrets" are given when running docker container • Cofacts API introspection script makes sure `data/` folder exist so that it works in docker build • Local `data/` folder contains mongodb garbage so it is ignored in docker • Thus we need to build our own `data/` folder within docker • README documentation • `tmp_image_process` does not trigger pm2 watch since it watches only `/src` folder. Paragraph in README removed. TODO: ☑︎ tesseract support ☑︎ Deploy to staging - <https://lin.ee/1QUzEX4nI|https://lin.ee/1QUzEX4nI> ☐ automatic build & push in Github Actions with `.env` as secret (<https://docs.docker.com/ci-cd/github-actions/|https://docs.docker.com/ci-cd/github-actions/> , <https://stackoverflow.com/a/59482124|https://stackoverflow.com/a/59482124>) ☐ README for docker image build ☐ Log drain
Comment on #220 TypeError: Cannot read property 'split' of undefined
Another instance is reported today by Robin, MyGoPen ``` 刷樂,依必朗,3M漱口水有含那成份Chlorhexidine <https://www.worldjournal.com/wj/story/121471/5394313?fbclid=IwAR1HowY-Wq-5szf51JMVqrkN5tM053M9-qCtEEjj-bSiIXT2JBGH7H9Ea> ``` <https://user-images.githubusercontent.com/108608/118162903-e4de6f00-b453-11eb-974c-b9a473b2ebaf.png|image> <https://user-images.githubusercontent.com/108608/118163066-1e16df00-b454-11eb-9c8f-e239744c91f6.png|image> Its variant will not trigger such error. No fbclid --> OK <https://user-images.githubusercontent.com/108608/118162947-f0319a80-b453-11eb-83c0-56e32ff67f35.png|image> URL only with fbclid --> OK <https://user-images.githubusercontent.com/108608/118162983-fb84c600-b453-11eb-934e-f1538aaa7407.png|image> Text only ---> OK <https://user-images.githubusercontent.com/108608/118163007-05a6c480-b454-11eb-853e-d117c18c6a39.png|image>
![]()
HackMD
COVID-19 疫情資訊野生整合平台 powered by g0v.tw - HackMD
本平台為 g0v 貢獻者彙整而成,非政府官方所設,所有內容僅供參考。轉傳資訊前,請注意資訊來源,勿協助傳遞不實資訊。
HackMD
# 確診足跡太極鍵譜 2021 年 5 月以來,網傳確診者足跡訊息大爆發。然而,我們也知道這些網傳的足跡常常未經證實,也不符合「[個案活動地點公布考慮原則](#「疫調流程」與「個案活動地點公布考
#436 [LandingPage] include messages that has been replied
*As-is* Currently the landing page only shows messages that is not replied yet. This may give new comer an initial impression that all messages are not getting replied in this website. <https://user-images.githubusercontent.com/108608/118363137-80dbb800-b5c5-11eb-866a-b934180bbd04.png|image> *The fix* Include messages that is being replied in landing page. <https://user-images.githubusercontent.com/108608/118363184-c304f980-b5c5-11eb-9789-2c085617cc96.png|image>
![]()
#254 Sending more than 500 LINE ids to /message/multicast
According to <https://developers.line.biz/en/reference/messaging-api/#send-multicast-message|API documentation>, we cannot send more than 500 users at once when multicasting. However, recently we are sending update messages to more than 500 users at once. Related Rollbar error: <https://rollbar.com/mrorz/rumors-line-bot/items/376/occurrences/164470118640/|https://rollbar.com/mrorz/rumors-line-bot/items/376/occurrences/164470118640/> We should batch these requests and re-send the notifications.
gather.town
Gather is a video-calling space that lets multiple people hold separate conversations in parallel, walking in and out of those conversations just as easily as they would in real life.
![]()
Batch multicast to send messages to 500 users each time.
Comment on #255 Batch multicast
*Pull Request Test Coverage Report for <https://coveralls.io/builds/39790390|Build 1338>* • *8* of *8* *(100.0%)* changed or added relevant lines in *1* file are covered. • No unchanged relevant lines lost coverage. • Overall coverage increased (+*0.4%*) to *87.005%* * * * * * * *:yellow_heart: - <https://coveralls.io|Coveralls>*
Review on #255 Batch multicast
LGTM!
g0v.hackmd.io
關於 COVID-19 病毒、防疫需要知道的事 What You Need to Know about COVID-19 - HackMD
![]()
#256 Fix console to better track progress of notification sending process
1. Comment out logging `JSON.stringify(result)` as it will crash the terminal when there are 10000 users to send 2. Send incremental `console.log`s so that we can track the processing status
Comment on #256 Fix console to better track progress of notification sending process
*Pull Request Test Coverage Report for <https://coveralls.io/builds/39843825|Build 1342>* • *2* of *2* *(100.0%)* changed or added relevant lines in *2* files are covered. • No unchanged relevant lines lost coverage. • Overall coverage increased (+*0.008%*) to *87.013%* * * * * * * *:yellow_heart: - <https://coveralls.io|Coveralls>*
Facebook Groups
本社團主要宗旨為:傳遞正確的疫情消息 由民眾提問 - 醫師解惑 - 將資訊彙整。 「實證醫學救台灣」來自台灣各地的住院醫師組成的團隊,在疫情期間持續翻譯國際防疫相關文獻,協助解答疫情迷思,幫助台灣挺過疫情。 :speaking_head_in_silhouette: 民眾提問 歡迎民眾提出任何關於疫情相關的疑問 :female-doctor::skin-tone-2:醫師解惑 我們將邀請有專業醫療背景的醫生解惑 :bookmark_tabs:資訊彙整 彙整現有的疫情相關資訊,持續傳遞正確消息.
#20 Deploy LINE bot in docker-compose
Change deploy script to reflect <https://github.com/cofacts/rumors-line-bot/pull/253|cofacts/rumors-line-bot#253>
Log into Facebook to start sharing and connecting with your friends, family, and people you know.
Comment on #229 Highlight improvements
<https://g0v-slack-archive.g0v.ronny.tw/index/channel/C2PPMRQGP#ts-1622023244.0592|https://g0v-slack-archive.g0v.ronny.tw/index/channel/C2PPMRQGP#ts-1622023244.0592> Text: > 【印度的變種病毒】 > 印度工作的中國人,由印度經尼泊爾返回國內,抵達重慶市時,初部檢測都是陰性. > 但醫生仍有懷疑,於是幫他們進行CT電腦掃描,發現他們的肺部有病變,並確診是印度的三重變種病毒,証明這種印度超級變種病毒,可以避過現在的檢測,而大部份的關口都只是靠一般普通測試 > 而香港及大部份的國家,不會強制入境人士進行CT掃描,亦沒有足夠時間及資源去做。 > 如果估計正確、相信第五波超級病毒大爆發,即將出現在香港及全球! > 自新加坡傳來的訊息:_病毒回來了_。 > 這次有更強的精力、戰術和偽裝。感染者不咳嗽,沒有發燒。 > _這次症狀是關節疼痛、無力、食慾不振。_ > 死亡率更高,達到危急的時間更短。有時沒有症狀...要小心...! > 該病毒株不在我們的鼻咽區域內匿居!所以不再有嗅覺或味覺喪失等前驅症狀,它直接攻擊肺部,縮短了發病時間。 > 許多不發燒的患者,但是X光檢查顯示中度胸腔肺炎!鼻黏膜篩試常顯示COVID19陰性!越來越多的假性咽喉鼻腔檢查結果。 > 這意味著病毒直接傳播到肺部,由病毒性肺炎而引起急性呼吸窘迫(缺氧)! > 這解釋了為什麼它變得急性和致命得多!發燒時可能已變成重症。 > 請注意:_避免到擁擠的地方_,_保持社交距離_,_戴上口罩_,_經常用洗手乳或肥皂洗手_。這次疫情比上一波更致命,必須小心謹慎,_不可輕忽_! Highlight: <https://user-images.githubusercontent.com/108608/119642692-9070c180-be4d-11eb-8fb1-7a02ef03a239.png|image> Improvements: 1. All matching text should be highlighted 2. Should show high density of highlights
![]()
#257 Make most redis keys volatile
In this PR, we make most keys volatile and to `lastScannedAt` key is persistent. After deploy, we can change Redis `maxmemory-policy` from `allkeys-lru` to `volatile-lru` to ensure that `maxmemory-policy` is never evicted. This PR also handles the case when postback actions are called after the search session is removed from Redis. This should fix <https://rollbar.com/mrorz/rumors-line-bot/items/220/|https://rollbar.com/mrorz/rumors-line-bot/items/220/> .