<https://github.com/cofacts/rumors-site/pull/519|#519 Bump decode-uri-component from 0.2.0 to 0.2.2>

Bumps <https://github.com/SamVerschueren/decode-uri-component|decode-uri-component> from 0.2.0 to 0.2.2. Release notes _Sourced from <https://github.com/SamVerschueren/decode-uri-component/releases|decode-uri-component's releases>._ &gt; *v0.2.2* &gt; &gt; • Prevent overwriting previously decoded tokens 980e0bf &gt; &gt; <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2|SamVerschueren/decode-uri-component@v0.2.1...v0.2.2> &gt; &gt; *v0.2.1* &gt; &gt; • Switch to GitHub workflows 76abc93 &gt; • Fix issue where decode throws - fixes <https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6|#6> 746ca5d &gt; • Update license (<https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1|#1>) 486d7e2 &gt; • Tidelift tasks a650457 &gt; • Meta tweaks 66e1c28 &gt; &gt; <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1|SamVerschueren/decode-uri-component@v0.2.0...v0.2.1> Commits • <https://github.com/SamVerschueren/decode-uri-component/commit/a0eea469d26eb0df668b081672cdb9581feb78eb|`a0eea46`> 0.2.2 • <https://github.com/SamVerschueren/decode-uri-component/commit/980e0bf09b64d94f1aa79012f895816c30ffd152|`980e0bf`> Prevent overwriting previously decoded tokens • <https://github.com/SamVerschueren/decode-uri-component/commit/3c8a373dd4837e89b3f970e01295dd03e1405a33|`3c8a373`> 0.2.1 • <https://github.com/SamVerschueren/decode-uri-component/commit/76abc939783fe3900fadb7d384a74d324d5557f3|`76abc93`> Switch to GitHub workflows • <https://github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9|`746ca5d`> Fix issue where decode throws - fixes <https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6|#6> • <https://github.com/SamVerschueren/decode-uri-component/commit/486d7e26d3a8c0fbe860fb651fe1bc98c2f2be30|`486d7e2`> Update license (<https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1|#1>) • <https://github.com/SamVerschueren/decode-uri-component/commit/a65045724e6234acef87f31da499d4807b20b134|`a650457`> Tidelift tasks • <https://github.com/SamVerschueren/decode-uri-component/commit/66e1c2834c0e189201cb65196ec3101372459b02|`66e1c28`> Meta tweaks • See full diff in <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2|compare view> <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-site/network/alerts|Security Alerts page>.

:white_check_mark: All checks have passed

<https://github.com/cofacts/rumors-site/pull/519|#519 Bump decode-uri-component from 0.2.0 to 0.2.2>

Bumps <https://github.com/SamVerschueren/decode-uri-component|decode-uri-component> from 0.2.0 to 0.2.2. Release notes _Sourced from <https://github.com/SamVerschueren/decode-uri-component/releases|decode-uri-component's releases>._ &gt; *v0.2.2* &gt; &gt; • Prevent overwriting previously decoded tokens 980e0bf &gt; &gt; <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2|SamVerschueren/decode-uri-component@v0.2.1...v0.2.2> &gt; &gt; *v0.2.1* &gt; &gt; • Switch to GitHub workflows 76abc93 &gt; • Fix issue where decode throws - fixes <https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6|#6> 746ca5d &gt; • Update license (<https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1|#1>) 486d7e2 &gt; • Tidelift tasks a650457 &gt; • Meta tweaks 66e1c28 &gt; &gt; <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1|SamVerschueren/decode-uri-component@v0.2.0...v0.2.1> Commits • <https://github.com/SamVerschueren/decode-uri-component/commit/a0eea469d26eb0df668b081672cdb9581feb78eb|`a0eea46`> 0.2.2 • <https://github.com/SamVerschueren/decode-uri-component/commit/980e0bf09b64d94f1aa79012f895816c30ffd152|`980e0bf`> Prevent overwriting previously decoded tokens • <https://github.com/SamVerschueren/decode-uri-component/commit/3c8a373dd4837e89b3f970e01295dd03e1405a33|`3c8a373`> 0.2.1 • <https://github.com/SamVerschueren/decode-uri-component/commit/76abc939783fe3900fadb7d384a74d324d5557f3|`76abc93`> Switch to GitHub workflows • <https://github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9|`746ca5d`> Fix issue where decode throws - fixes <https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6|#6> • <https://github.com/SamVerschueren/decode-uri-component/commit/486d7e26d3a8c0fbe860fb651fe1bc98c2f2be30|`486d7e2`> Update license (<https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1|#1>) • <https://github.com/SamVerschueren/decode-uri-component/commit/a65045724e6234acef87f31da499d4807b20b134|`a650457`> Tidelift tasks • <https://github.com/SamVerschueren/decode-uri-component/commit/66e1c2834c0e189201cb65196ec3101372459b02|`66e1c28`> Meta tweaks • See full diff in <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2|compare view> <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-site/network/alerts|Security Alerts page>.

<https://github.com/cofacts/rumors-site/pull/519#issuecomment-1334651102|Comment on #519 Bump decode-uri-component from 0.2.0 to 0.2.2>

<https://coveralls.io/builds/54772106|Coverage Status> Coverage remained the same at 76.235% when pulling *<https://github.com/cofacts/rumors-site/commit/281c343a60c00bdabcde8f0c17250b244d58e713|281c343> on dependabot/npm_and_yarn/decode-uri-component-0.2.2* into *<https://github.com/cofacts/rumors-site/commit/bf0362a6f41dbed8331fafa20bbb1002bf55a029|bf0362a> on master*.

<https://github.com/cofacts/rumors-site/pull/519#issuecomment-1334651102|Comment on #519 Bump decode-uri-component from 0.2.0 to 0.2.2>

<https://coveralls.io/builds/54772106|Coverage Status> Coverage remained the same at 76.235% when pulling *<https://github.com/cofacts/rumors-site/commit/281c343a60c00bdabcde8f0c17250b244d58e713|281c343> on dependabot/npm_and_yarn/decode-uri-component-0.2.2* into *<https://github.com/cofacts/rumors-site/commit/bf0362a6f41dbed8331fafa20bbb1002bf55a029|bf0362a> on master*.

<https://github.com/cofacts/rumors-fb-bot/pull/40|#40 Bump decode-uri-component from 0.2.0 to 0.2.2>

Bumps <https://github.com/SamVerschueren/decode-uri-component|decode-uri-component> from 0.2.0 to 0.2.2. Release notes _Sourced from <https://github.com/SamVerschueren/decode-uri-component/releases|decode-uri-component's releases>._ &gt; *v0.2.2* &gt; &gt; • Prevent overwriting previously decoded tokens 980e0bf &gt; &gt; <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2|SamVerschueren/decode-uri-component@v0.2.1...v0.2.2> &gt; &gt; *v0.2.1* &gt; &gt; • Switch to GitHub workflows 76abc93 &gt; • Fix issue where decode throws - fixes <https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6|#6> 746ca5d &gt; • Update license (<https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1|#1>) 486d7e2 &gt; • Tidelift tasks a650457 &gt; • Meta tweaks 66e1c28 &gt; &gt; <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1|SamVerschueren/decode-uri-component@v0.2.0...v0.2.1> Commits • <https://github.com/SamVerschueren/decode-uri-component/commit/a0eea469d26eb0df668b081672cdb9581feb78eb|`a0eea46`> 0.2.2 • <https://github.com/SamVerschueren/decode-uri-component/commit/980e0bf09b64d94f1aa79012f895816c30ffd152|`980e0bf`> Prevent overwriting previously decoded tokens • <https://github.com/SamVerschueren/decode-uri-component/commit/3c8a373dd4837e89b3f970e01295dd03e1405a33|`3c8a373`> 0.2.1 • <https://github.com/SamVerschueren/decode-uri-component/commit/76abc939783fe3900fadb7d384a74d324d5557f3|`76abc93`> Switch to GitHub workflows • <https://github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9|`746ca5d`> Fix issue where decode throws - fixes <https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6|#6> • <https://github.com/SamVerschueren/decode-uri-component/commit/486d7e26d3a8c0fbe860fb651fe1bc98c2f2be30|`486d7e2`> Update license (<https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1|#1>) • <https://github.com/SamVerschueren/decode-uri-component/commit/a65045724e6234acef87f31da499d4807b20b134|`a650457`> Tidelift tasks • <https://github.com/SamVerschueren/decode-uri-component/commit/66e1c2834c0e189201cb65196ec3101372459b02|`66e1c28`> Meta tweaks • See full diff in <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2|compare view> <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-fb-bot/network/alerts|Security Alerts page>.

<https://github.com/cofacts/rumors-fb-bot/pull/40|#40 Bump decode-uri-component from 0.2.0 to 0.2.2>

Bumps <https://github.com/SamVerschueren/decode-uri-component|decode-uri-component> from 0.2.0 to 0.2.2. Release notes _Sourced from <https://github.com/SamVerschueren/decode-uri-component/releases|decode-uri-component's releases>._ &gt; *v0.2.2* &gt; &gt; • Prevent overwriting previously decoded tokens 980e0bf &gt; &gt; <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2|SamVerschueren/decode-uri-component@v0.2.1...v0.2.2> &gt; &gt; *v0.2.1* &gt; &gt; • Switch to GitHub workflows 76abc93 &gt; • Fix issue where decode throws - fixes <https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6|#6> 746ca5d &gt; • Update license (<https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1|#1>) 486d7e2 &gt; • Tidelift tasks a650457 &gt; • Meta tweaks 66e1c28 &gt; &gt; <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1|SamVerschueren/decode-uri-component@v0.2.0...v0.2.1> Commits • <https://github.com/SamVerschueren/decode-uri-component/commit/a0eea469d26eb0df668b081672cdb9581feb78eb|`a0eea46`> 0.2.2 • <https://github.com/SamVerschueren/decode-uri-component/commit/980e0bf09b64d94f1aa79012f895816c30ffd152|`980e0bf`> Prevent overwriting previously decoded tokens • <https://github.com/SamVerschueren/decode-uri-component/commit/3c8a373dd4837e89b3f970e01295dd03e1405a33|`3c8a373`> 0.2.1 • <https://github.com/SamVerschueren/decode-uri-component/commit/76abc939783fe3900fadb7d384a74d324d5557f3|`76abc93`> Switch to GitHub workflows • <https://github.com/SamVerschueren/decode-uri-component/commit/746ca5dcb6667c5d364e782d53c542830e4c10b9|`746ca5d`> Fix issue where decode throws - fixes <https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/6|#6> • <https://github.com/SamVerschueren/decode-uri-component/commit/486d7e26d3a8c0fbe860fb651fe1bc98c2f2be30|`486d7e2`> Update license (<https://github-redirect.dependabot.com/SamVerschueren/decode-uri-component/issues/1|#1>) • <https://github.com/SamVerschueren/decode-uri-component/commit/a65045724e6234acef87f31da499d4807b20b134|`a650457`> Tidelift tasks • <https://github.com/SamVerschueren/decode-uri-component/commit/66e1c2834c0e189201cb65196ec3101372459b02|`66e1c28`> Meta tweaks • See full diff in <https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.2|compare view> <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-fb-bot/network/alerts|Security Alerts page>.

<https://github.com/cofacts/rumors-api/pull/293|#293 Add status to article>

• Sync DB field • Creation API `CreateArticle`, `CreateMediaArticle` writes to `status` field • `ListArticles` adds `statuses` filter; do not list out `BLOCKED` articles by default • `relatedArticles` in `Article` do not list out `BLOCKED` articles by default • exception: for blocked articles, its `relatedArticles` will also include blocked articles

:white_check_mark: All checks have passed

<https://github.com/cofacts/rumors-api/pull/293|#293 Add status to article>

• Sync DB field • Creation API `CreateArticle`, `CreateMediaArticle` writes to `status` field • `ListArticles` adds `statuses` filter; do not list out `BLOCKED` articles by default • `relatedArticles` in `Article` do not list out `BLOCKED` articles by default • exception: for blocked articles, its `relatedArticles` will also include blocked articles

:white_check_mark: All checks have passed

<https://github.com/cofacts/rumors-api/pull/293#issuecomment-1336111362|Comment on #293 Add status to article>

<https://coveralls.io/builds/54809457|Coverage Status> Coverage increased (+0.03%) to 87.833% when pulling *<https://github.com/cofacts/rumors-api/commit/dad137bd014c970973c99a20fbcb7251f971a1d6|dad137b> on anti-seo-spam* into *<https://github.com/cofacts/rumors-api/commit/4f97b9f523fda6e90d9b8e4bb92630f838895980|4f97b9f> on master*.

<https://github.com/cofacts/rumors-api/pull/293#issuecomment-1336111362|Comment on #293 Add status to article>

<https://coveralls.io/builds/54809457|Coverage Status> Coverage increased (+0.03%) to 87.833% when pulling *<https://github.com/cofacts/rumors-api/commit/dad137bd014c970973c99a20fbcb7251f971a1d6|dad137b> on anti-seo-spam* into *<https://github.com/cofacts/rumors-api/commit/4f97b9f523fda6e90d9b8e4bb92630f838895980|4f97b9f> on master*.

• 2

mrorz 2022-12-04 13:49:32

酷 XDDD
ChatGPT 說 AI 分析訊息準確度有點太誇張囉 lol

<https://github.com/cofacts/community-builder/pull/15|#15 [WIP] Update MUI, Typescript, React-router and React>

WIP

:white_check_mark: No checks have passed

<https://github.com/cofacts/community-builder/pull/15|#15 [WIP] Update MUI, Typescript, React-router and React>

WIP

訊息澄清

針對媒體報導「竹圍遊艇碼頭出現損壞等情形」，桃園市政府農業局回應說明

針對媒體報導「竹圍遊艇碼頭出現損壞等情形」，桃園市政府農業局回應說明

<https://github.com/cofacts/rumors-api/pull/293#issuecomment-1339816673|Comment on #293 Add status to article>

Migration script: Add a status="NORMAL" to those articles which don't have a `status`. ``` curl -XPOST "{db_url}/articles/_update_by_query" -H 'Content-Type: application/json' -d' { "script": { "source": "ctx._source[\"status\"]=\"NORMAL\";", "lang": "painless" }, "query": { "bool": { "must_not": { "exists": { "field": "status" } } } } }' ```

<https://github.com/cofacts/rumors-api/pull/293#issuecomment-1339816673|Comment on #293 Add status to article>

Migration script: Add a status="NORMAL" to those articles which don't have a `status`. ``` curl -XPOST "{db_url}/articles/_update_by_query" -H 'Content-Type: application/json' -d' { "script": { "source": "ctx._source[\"status\"]=\"NORMAL\";", "lang": "painless" }, "query": { "bool": { "must_not": { "exists": { "field": "status" } } } } }' ```

• 1

NHKニュース

台湾 情報戦～市民によるファクトチェック最前線～ | NHK

【NHK】「手袋をして投票すると票は無効になる」「民進党は台湾の半導体メーカーをアメリカに売った」先月、台湾の統一地方選挙の期間中…

HackMD

Cofacts 會議記錄 - HackMD

# Cofacts 會議記錄 ## 2022 - [20221207 會議記錄](/VVIOZobARkegK3vxYdG52Q) - [20221130 會議記錄](/wO4db9f6QNSX

在電視上看到 cofacts 好興奮喔~~~~

• 5

zoee 2022-12-07 19:06:54

鄰鄰看起來很有魄力！

bil 2022-12-09 13:49:31

耶咿

<https://github.com/cofacts/rumors-fb-bot/pull/41|#41 Bump qs from 6.5.2 to 6.5.3>

Bumps <https://github.com/ljharb/qs|qs> from 6.5.2 to 6.5.3. Changelog _Sourced from <https://github.com/ljharb/qs/blob/main/CHANGELOG.md|qs's changelog>._ &gt; **6.5.3** &gt; &gt; • [Fix] `parse`: ignore `__proto__` keys (<https://github-redirect.dependabot.com/ljharb/qs/issues/428|#428>) &gt; • [Fix] `utils.merge`: avoid a crash with a null target and a truthy non-array source &gt; • [Fix] correctly parse nested arrays &gt; • [Fix] `stringify`: fix a crash with `strictNullHandling` and a custom `filter`/`serializeDate` (<https://github-redirect.dependabot.com/ljharb/qs/issues/279|#279>) &gt; • [Fix] `utils`: `merge`: fix crash when `source` is a truthy primitive &amp; no options are provided &gt; • [Fix] when `parseArrays` is false, properly handle keys ending in `[]` &gt; • [Fix] fix for an impossible situation: when the formatter is called with a non-string value &gt; • [Fix] `utils.merge`: avoid a crash with a null target and an array source &gt; • [Refactor] `utils`: reduce observable [[Get]]s &gt; • [Refactor] use cached `Array.isArray` &gt; • [Refactor] `stringify`: Avoid arr = arr.concat(...), push to the existing instance (<https://github-redirect.dependabot.com/ljharb/qs/issues/269|#269>) &gt; • [Refactor] `parse`: only need to reassign the var once &gt; • [Robustness] `stringify`: avoid relying on a global `undefined` (<https://github-redirect.dependabot.com/ljharb/qs/issues/427|#427>) &gt; • [readme] remove travis badge; add github actions/codecov badges; update URLs &gt; • [Docs] Clean up license text so it’s properly detected as BSD-3-Clause &gt; • [Docs] Clarify the need for "arrayLimit" option &gt; • [meta] fix README.md (<https://github-redirect.dependabot.com/ljharb/qs/issues/399|#399>) &gt; • [meta] add FUNDING.yml &gt; • [actions] backport actions from main &gt; • [Tests] always use `String(x)` over `x.toString()` &gt; • [Tests] remove nonexistent tape option &gt; • [Dev Deps] backport from main Commits • <https://github.com/ljharb/qs/commit/298bfa55d6db00ddea78dd0333509aadf9bb3077|`298bfa5`> v6.5.3 • <https://github.com/ljharb/qs/commit/ed0f5dcbef4b168a8ae299d78b1e4a2e9b1baf1f|`ed0f5dc`> [Fix] `parse`: ignore `__proto__` keys (<https://github-redirect.dependabot.com/ljharb/qs/issues/428|#428>) • <https://github.com/ljharb/qs/commit/691e739cfa40cd42604dc05a54e6154371a429ab|`691e739`> [Robustness] `stringify`: avoid relying on a global `undefined` (<https://github-redirect.dependabot.com/ljharb/qs/issues/427|#427>) • <https://github.com/ljharb/qs/commit/1072d57d38a690e1ad7616dced44390bffedcbb2|`1072d57`> [readme] remove travis badge; add github actions/codecov badges; update URLs • <https://github.com/ljharb/qs/commit/12ac1c403aaa04d1a34844f514ed9f9abfb76e64|`12ac1c4`> [meta] fix README.md (<https://github-redirect.dependabot.com/ljharb/qs/issues/399|#399>) • <https://github.com/ljharb/qs/commit/0338716b09fdbd4711823eeb0a14e556a2498e7a|`0338716`> [actions] backport actions from main • <https://github.com/ljharb/qs/commit/5639c20ce0a7c1332200a3181339331483e5a3a1|`5639c20`> Clean up license text so it’s properly detected as BSD-3-Clause • <https://github.com/ljharb/qs/commit/51b8a0b1b213596dd1702b837f5e7dec2229793d|`51b8a0b`> add FUNDING.yml • <https://github.com/ljharb/qs/commit/45f675936e742d92fac8d4dae5cfc385c576a977|`45f6759`> [Fix] fix for an impossible situation: when the formatter is called with a no... • <https://github.com/ljharb/qs/commit/f814a7f8f2af059f8158f7e4b2bf8b46aeb62cd3|`f814a7f`> [Dev Deps] backport from main • Additional commits viewable in <https://github.com/ljharb/qs/compare/v6.5.2...v6.5.3|compare view> <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-fb-bot/network/alerts|Security Alerts page>.

<https://github.com/cofacts/rumors-fb-bot/pull/41|#41 Bump qs from 6.5.2 to 6.5.3>

Bumps <https://github.com/ljharb/qs|qs> from 6.5.2 to 6.5.3. Changelog _Sourced from <https://github.com/ljharb/qs/blob/main/CHANGELOG.md|qs's changelog>._ &gt; **6.5.3** &gt; &gt; • [Fix] `parse`: ignore `__proto__` keys (<https://github-redirect.dependabot.com/ljharb/qs/issues/428|#428>) &gt; • [Fix] `utils.merge`: avoid a crash with a null target and a truthy non-array source &gt; • [Fix] correctly parse nested arrays &gt; • [Fix] `stringify`: fix a crash with `strictNullHandling` and a custom `filter`/`serializeDate` (<https://github-redirect.dependabot.com/ljharb/qs/issues/279|#279>) &gt; • [Fix] `utils`: `merge`: fix crash when `source` is a truthy primitive &amp; no options are provided &gt; • [Fix] when `parseArrays` is false, properly handle keys ending in `[]` &gt; • [Fix] fix for an impossible situation: when the formatter is called with a non-string value &gt; • [Fix] `utils.merge`: avoid a crash with a null target and an array source &gt; • [Refactor] `utils`: reduce observable [[Get]]s &gt; • [Refactor] use cached `Array.isArray` &gt; • [Refactor] `stringify`: Avoid arr = arr.concat(...), push to the existing instance (<https://github-redirect.dependabot.com/ljharb/qs/issues/269|#269>) &gt; • [Refactor] `parse`: only need to reassign the var once &gt; • [Robustness] `stringify`: avoid relying on a global `undefined` (<https://github-redirect.dependabot.com/ljharb/qs/issues/427|#427>) &gt; • [readme] remove travis badge; add github actions/codecov badges; update URLs &gt; • [Docs] Clean up license text so it’s properly detected as BSD-3-Clause &gt; • [Docs] Clarify the need for "arrayLimit" option &gt; • [meta] fix README.md (<https://github-redirect.dependabot.com/ljharb/qs/issues/399|#399>) &gt; • [meta] add FUNDING.yml &gt; • [actions] backport actions from main &gt; • [Tests] always use `String(x)` over `x.toString()` &gt; • [Tests] remove nonexistent tape option &gt; • [Dev Deps] backport from main Commits • <https://github.com/ljharb/qs/commit/298bfa55d6db00ddea78dd0333509aadf9bb3077|`298bfa5`> v6.5.3 • <https://github.com/ljharb/qs/commit/ed0f5dcbef4b168a8ae299d78b1e4a2e9b1baf1f|`ed0f5dc`> [Fix] `parse`: ignore `__proto__` keys (<https://github-redirect.dependabot.com/ljharb/qs/issues/428|#428>) • <https://github.com/ljharb/qs/commit/691e739cfa40cd42604dc05a54e6154371a429ab|`691e739`> [Robustness] `stringify`: avoid relying on a global `undefined` (<https://github-redirect.dependabot.com/ljharb/qs/issues/427|#427>) • <https://github.com/ljharb/qs/commit/1072d57d38a690e1ad7616dced44390bffedcbb2|`1072d57`> [readme] remove travis badge; add github actions/codecov badges; update URLs • <https://github.com/ljharb/qs/commit/12ac1c403aaa04d1a34844f514ed9f9abfb76e64|`12ac1c4`> [meta] fix README.md (<https://github-redirect.dependabot.com/ljharb/qs/issues/399|#399>) • <https://github.com/ljharb/qs/commit/0338716b09fdbd4711823eeb0a14e556a2498e7a|`0338716`> [actions] backport actions from main • <https://github.com/ljharb/qs/commit/5639c20ce0a7c1332200a3181339331483e5a3a1|`5639c20`> Clean up license text so it’s properly detected as BSD-3-Clause • <https://github.com/ljharb/qs/commit/51b8a0b1b213596dd1702b837f5e7dec2229793d|`51b8a0b`> add FUNDING.yml • <https://github.com/ljharb/qs/commit/45f675936e742d92fac8d4dae5cfc385c576a977|`45f6759`> [Fix] fix for an impossible situation: when the formatter is called with a no... • <https://github.com/ljharb/qs/commit/f814a7f8f2af059f8158f7e4b2bf8b46aeb62cd3|`f814a7f`> [Dev Deps] backport from main • Additional commits viewable in <https://github.com/ljharb/qs/compare/v6.5.2...v6.5.3|compare view> <https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores|Dependabot compatibility score> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. * * * Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: • `@dependabot rebase` will rebase this PR • `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it • `@dependabot merge` will merge this PR after your CI passes on it • `@dependabot squash and merge` will squash and merge this PR after your CI passes on it • `@dependabot cancel merge` will cancel a previously requested merge and block automerging • `@dependabot reopen` will reopen this PR if it is closed • `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually • `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) • `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) • `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language • `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language • `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language • `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the <https://github.com/cofacts/rumors-fb-bot/network/alerts|Security Alerts page>.

factcheckcenter.jp

日本ファクトチェックセンター（JFC）

Japan Fact-check Center(JFC)は、ファクトチェック（事実の検証）を専門とする非営利組織です。民主主義の基盤となるインターネット上の言論空間の健全性を維持、向上させることを目的として活動します。

bil 2022-12-09 13:49:52

不一樣唷

tfdp.com.tw

闢謠專區

闢謠專區

facebook.com

Log in or sign up to view

See posts, photos and more on Facebook.

• 👍2

cai 2022-12-11 22:41:02

行政院
https://www.ey.gov.tw/Page/9277F759E41CCD91//7cdeb686-ddf6-4b88-85a2-a4d8d224c109
食藥署
https://www.mohw.gov.tw/cp-16-72755-1.html
https://news.pts.org.tw/article/613529

mrorz 2022-12-12 01:12:49

水產相關訊息彙整
https://cofacts.tw/article/2w96zbdq4xs
https://cofacts.tw/article/3a8b0i8dd5bml
https://cofacts.tw/article/1enjcusocqjs8
https://cofacts.tw/article/19bf5pgn5gq2f
https://cofacts.tw/article/3lcvgad98mcey
https://cofacts.tw/article/fk2h3jjeny92
https://cofacts.tw/article/2fnd4u472m6lk
https://cofacts.tw/article/6vifc16vbk6h
https://cofacts.tw/article/5h5hvsn6qc1s
https://cofacts.tw/article/15cfygarilb2l

推查核協作者的回應，翻過去的新聞完全正確

mrorz 2022-12-12 01:15:05

不過新聞裡面的「2021年4月12日發布進口新制」跟盛傳有 2020 年底就走 TBT 公告的，到底是不是同一件事，我可能還要比對一下農委會的說法

https://www.foodnext.net/news/newsnation/paper/5111639112

我覺得農委會的時間軸做得不錯，不過如果能針對這些政府 claim 補上舊新聞的話，應該會更有說服力
有空再來找找 @@

cai 2022-12-14 14:30:13

12/12
https://www.mohw.gov.tw/cp-5275-72760-1.html
https://www.mohw.gov.tw/cp-5275-72786-1.html
12/14
https://www.fda.gov.tw/TC/newsContent.aspx?cid=4&id=28409
附件列表好多

mrorz 2022-12-14 14:45:20

資訊看起來很有用，感謝感謝

cai 2022-12-15 00:17:20

12/14 竟然出了三篇
https://www.fda.gov.tw/TC/newsContent.aspx?cid=4&id=28411
https://www.fda.gov.tw/TC/newsContent.aspx?cid=4&id=t601376

cai 2022-12-15 21:31:51

https://www.facebook.com/moea.gov.tw/posts/pfbid031oNNVf6GEBPDXzczys1FkZahWcwjxYALuP5dTMjQk1jsPfLjmytiyBBBBoKgAjeQl
經濟部的

cai 2022-12-15 21:37:12

副線佳德
https://www.facebook.com/ChiateBakery/posts/pfbid0N3i2AdCFgxukXyah7rhVByEzqpsth8p65cL7M1cE7Bqq9LJzXtAJJQMCn68n5DCwl
> 佳德糕餅體諒顧客需求，若需銷往海外，在能力範圍內額外配合海外代購業者順利通關而註冊。
又有人拿2014年的食安新聞來問
https://cofacts.tw/article/m0p2k0dx3b8m
https://cofacts.tw/article/2clufdtf7f13o
https://cofacts.tw/article/tvouEYUBC7Q3lHuUIL31

mrorz 2022-12-16 11:43:42

這則新聞在消基會網站上面沒資料噎
想找源頭裡面寫什麼都找不到
https://www.ettoday.net/news/20141003/409186.htm

我想知道塑化劑來源是包裝滲出，還是摻入塑化劑

mrorz 2022-12-16 11:44:54

再加一個 https://cofacts.tw/article/3a3djv0ffrn2o

cai 2022-12-16 13:28:23

https://www.iqc.tw/30846
https://web.archive.org/web/20141004183054/http://www.consumers.org.tw/unit412.aspx?id=1851
> 詳細內容請見「消費者報導雜誌」第402期29~39頁
要去圖書館翻囉~~

mrorz 2022-12-16 13:30:03

直接用當時新聞來拼湊吧
每家都節錄不同部分，拼起來應該就完整了（？
https://cofacts.tw/reply/W_pjGYUBC7Q3lHuUEsXN

mrorz 2022-12-16 14:04:02

喔喔有完整報告更好

cai 2022-12-19 00:18:40

一系列下來越看越混亂 😵‍💫

mrorz 2022-12-19 14:50:23

簡單來說就是
週末的時候 PTT 網友查詢中國的分類，發現根本有糕餅，而且糕餅重送就過了，所以認為政府送錯

政府的回應就是上面那個新聞稿，說台灣用包餡麵食送出之後，中國才開放系統，多了高點的分類

mrorz 2022-12-19 14:52:03

這裡查核的難處在於，因為現在上去中國海關看，就是有糕點那個分類
我們很難查核政府說的，過去沒有糕點這件事情

cai 2022-12-20 22:08:02

看到新的就放上來
食藥署公布通聯電郵內容：中國明確回覆我國食品業者註冊補件期限為2022/6/30 【發布日期：2022-12-20】 發布單位：食品組
https://www.fda.gov.tw/TC/newsContent.aspx?cid=4&id=28423

• 👍1

<https://github.com/cofacts/rumors-api/pull/293|#293 Add status to article>

• Sync DB field • Creation API `CreateArticle`, `CreateMediaArticle` writes to `status` field • `ListArticles` adds `statuses` filter; do not list out `BLOCKED` articles by default • `relatedArticles` in `Article` do not list out `BLOCKED` articles by default • exception: for blocked articles, its `relatedArticles` will also include blocked articles

:white_check_mark: All checks have passed

@null 2022-12-13 02:17:06

github2 2022-12-13 02:32:07

<https://github.com/cofacts/rumors-api/pull/293|#293 Add status to article>

• Sync DB field • Creation API `CreateArticle`, `CreateMediaArticle` writes to `status` field • `ListArticles` adds `statuses` filter; do not list out `BLOCKED` articles by default • `relatedArticles` in `Article` do not list out `BLOCKED` articles by default • exception: for blocked articles, its `relatedArticles` will also include blocked articles

:white_check_mark: All checks have passed

@null 2022-12-13 02:17:06

github2 2022-12-13 02:32:07

<https://github.com/cofacts/rumors-api/pull/293|#293 Add status to article>

@null 2022-12-13 02:17:06

github2 2022-12-13 02:32:07

• 🙌5
• 4
• 1

• 😮1

mrorz 2022-12-14 11:43:11

Cofacts 臉書社團不知道是否 OK

facebook.com

Log in or sign up to view

See posts, photos and more on Facebook.

<https://github.com/cofacts/rumors-site/issues/520|#520 Add links to website footer>

From <https://g0v.hackmd.io/VVIOZobARkegK3vxYdG52Q?view#%E7%B6%B2%E7%AB%99%E8%A8%B1%E9%A1%98|https://g0v.hackmd.io/VVIOZobARkegK3vxYdG52Q?view#%E7%B6%B2%E7%AB%99%E8%A8%B1%E9%A1%98> Add the following links Duplicates <https://github.com/cofacts/rumors-site/issues/430|#430>

<https://github.com/cofacts/rumors-site/issues/520|#520 Add links to website footer>

From <https://g0v.hackmd.io/VVIOZobARkegK3vxYdG52Q?view#%E7%B6%B2%E7%AB%99%E8%A8%B1%E9%A1%98|https://g0v.hackmd.io/VVIOZobARkegK3vxYdG52Q?view#%E7%B6%B2%E7%AB%99%E8%A8%B1%E9%A1%98> Add the following links to website footer <https://user-images.githubusercontent.com/108608/207518672-d9cf7031-e0fe-4635-b891-5e17d8ec3149.png|圖片> Duplicates <https://github.com/cofacts/rumors-site/issues/430|#430>

<https://github.com/cofacts/rumors-site/issues/430|#430 Put Call to Donation Information on website>

We should put donation information on the index, article pages. Reference: <https://donate.wikimedia.org/|https://donate.wikimedia.org/>

github2 2022-12-14 14:03:18

github2 2022-12-14 14:03:18

@null 2022-12-14 14:03:18

<https://github.com/cofacts/rumors-site/issues/430|#430 Put Call to Donation Information on website>

We should put donation information on the index, article pages. Reference: <https://donate.wikimedia.org/|https://donate.wikimedia.org/>

github2 2022-12-14 14:03:18

github2 2022-12-14 14:03:18

@null 2022-12-14 14:03:18

<https://github.com/cofacts/rumors-site/issues/430|#430 Put Call to Donation Information on website>

github2 2022-12-14 14:03:18

github2 2022-12-14 14:03:18

@null 2022-12-14 14:03:18

<https://github.com/cofacts/rumors-site/issues/521|#521 Add filter to search page>

From <https://g0v.hackmd.io/VVIOZobARkegK3vxYdG52Q#%E7%B6%B2%E7%AB%99%E8%A8%B1%E9%A1%98|https://g0v.hackmd.io/VVIOZobARkegK3vxYdG52Q#%E7%B6%B2%E7%AB%99%E8%A8%B1%E9%A1%98> : <https://user-images.githubusercontent.com/108608/207519514-f5376163-08d3-4bc2-9633-dfb5d8bb0bcc.png|圖片> Add the following new filters to article search page: • No useful reply yet • No any replies

github2 2022-12-28 20:07:55

<https://github.com/cofacts/rumors-site/issues/521|#521 Add filter to search page>

From <https://g0v.hackmd.io/VVIOZobARkegK3vxYdG52Q#%E7%B6%B2%E7%AB%99%E8%A8%B1%E9%A1%98|https://g0v.hackmd.io/VVIOZobARkegK3vxYdG52Q#%E7%B6%B2%E7%AB%99%E8%A8%B1%E9%A1%98> : <https://user-images.githubusercontent.com/108608/207519514-f5376163-08d3-4bc2-9633-dfb5d8bb0bcc.png|圖片> Add the following new filters to article search page: • No useful reply yet • No any replies

github2 2022-12-28 20:07:55

<https://github.com/cofacts/takedowns/pull/86|#86 Create 1221-swear-word.md>

github2 2022-12-21 15:37:26

github2 2022-12-21 15:39:36

@null 2022-12-21 20:06:43

<https://github.com/cofacts/takedowns/pull/86|#86 Create 1221-swear-word.md>

github2 2022-12-21 15:37:26

github2 2022-12-21 15:39:36

@null 2022-12-21 20:06:43

<https://github.com/cofacts/rumors-site/issues/522|#522 Show comments without upvote only after login>

In <https://g0v.hackmd.io/qWt5V0kYSJCyJxO8epITnw#%E6%AA%A2%E8%88%89%E8%99%95%E7%90%86|20221214 discussion>, we discussed the issue that comments are often leveraged by spammers to show message in popular pages for SEO reasons. It is proposed that we 1. Hide comments with `(upvote - downvote) &lt;= 0` from non-logged in users; show all comments only after the user logs in the website 2. Don't allow user to vote on their own comment.

<https://github.com/cofacts/rumors-site/issues/522|#522 Show comments without upvote only after login>

In <https://g0v.hackmd.io/qWt5V0kYSJCyJxO8epITnw#%E6%AA%A2%E8%88%89%E8%99%95%E7%90%86|20221214 discussion>, we discussed the issue that comments are often leveraged by spammers to show message in popular pages for SEO reasons. It is proposed that we 1. Hide comments with `(upvote - downvote) &lt;= 0` from non-logged in users; show all comments only after the user logs in the website 2. Don't allow user to vote on their own comment.

g0v.hackmd.io

20221221 會議記錄 - HackMD

cai 2022-12-21 22:29:18

來源應該是批踢踢這篇，不是ek21那網站
https://www.ptt.cc/bbs/Gossiping/M.1671561740.A.82C.html

<https://github.com/cofacts/takedowns/pull/86|#86 Create 1221-swear-word.md>

HackMD

Cofacts 會議記錄 - HackMD

# Cofacts 會議記錄 ## 2022 - [20221228 會議記錄](/6c3CpKXhQwOtFX8kf31ePA) - [20221221 會議記錄](/yQkG7XW7TXaB

• 2