{
  "history": [
    {
      "added": 0,
      "commit": "5c13a7ad8de9e6ccf64e18e46e3113af22697fcc",
      "date": "2026-11-01",
      "dependencies": 2041,
      "errors": [],
      "fixable": 261,
      "go_version": null,
      "in_binary": null,
      "new_vulnerabilities": 0,
      "osv_confirmed": 270,
      "osv_only": 100,
      "ref": "v0.167.4",
      "release_changed": false,
      "release_integrity": "no-assets",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 6.9,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 5,
        "High": 103,
        "Low": 26,
        "Medium": 130,
        "Negligible": 0,
        "Unknown": 6
      },
      "workflow": {
        "High": 24,
        "Low": 12,
        "Medium": 44,
        "files": 31
      }
    },
    {
      "added": 1032,
      "commit": "5c13a7ad8de9e6ccf64e18e46e3113af22697fcc",
      "date": "2026-11-02",
      "dependencies": 3073,
      "errors": [],
      "fixable": 386,
      "go_version": null,
      "in_binary": null,
      "kev": 0,
      "kev_new": 0,
      "new_vulnerabilities": 84,
      "osv_confirmed": 396,
      "osv_only": 3,
      "ref": "v0.167.4",
      "release_changed": false,
      "release_integrity": "no-assets",
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 6.9,
      "scorecard_date": "2026-11-02",
      "scorecard_note": null,
      "scorecard_source": "scorecard-cli",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 14,
        "High": 154,
        "Low": 36,
        "Medium": 186,
        "Negligible": 0,
        "Unknown": 6
      },
      "vulnerable_packages": 105,
      "workflow": {
        "High": 24,
        "Low": 12,
        "Medium": 44,
        "files": 31
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "Secret Management",
    "changes": {
      "added": [
        "@aashutoshrathi/word-wrap@1.2.6",
        "@adobe/css-tools@4.5.0",
        "@alloc/quick-lru@5.2.0",
        "@babel/code-frame@7.29.7",
        "@babel/compat-data@7.28.4",
        "@babel/core@7.28.4",
        "@babel/generator@7.29.8",
        "@babel/helper-compilation-targets@7.27.2",
        "@babel/helper-globals@7.29.7",
        "@babel/helper-module-transforms@7.28.3",
        "@babel/helper-plugin-utils@7.25.9",
        "@babel/helper-string-parser@7.29.7",
        "@babel/helper-validator-identifier@7.29.7",
        "@babel/helper-validator-option@7.27.1",
        "@babel/helpers@7.28.4",
        "@babel/parser@7.29.8",
        "@babel/plugin-syntax-jsx@7.25.9",
        "@babel/plugin-syntax-typescript@7.25.9",
        "@babel/template@7.29.7",
        "@babel/traverse@7.29.8",
        "@babel/types@7.29.8",
        "@emnapi/core@1.5.0",
        "@emnapi/runtime@1.5.0",
        "@emnapi/wasi-threads@1.1.0",
        "@esbuild/aix-ppc64@0.25.11",
        "@esbuild/aix-ppc64@0.25.12",
        "@esbuild/aix-ppc64@0.27.3",
        "@esbuild/aix-ppc64@0.27.7",
        "@esbuild/aix-ppc64@0.28.2",
        "@esbuild/android-arm@0.25.11",
        "@esbuild/android-arm@0.25.12",
        "@esbuild/android-arm@0.27.3",
        "@esbuild/android-arm@0.27.7",
        "@esbuild/android-arm@0.28.2",
        "@esbuild/android-arm64@0.25.11",
        "@esbuild/android-arm64@0.25.12",
        "@esbuild/android-arm64@0.27.3",
        "@esbuild/android-arm64@0.27.7",
        "@esbuild/android-arm64@0.28.2",
        "@esbuild/android-x64@0.25.11",
        "@esbuild/android-x64@0.25.12",
        "@esbuild/android-x64@0.27.3",
        "@esbuild/android-x64@0.27.7",
        "@esbuild/android-x64@0.28.2",
        "@esbuild/darwin-arm64@0.25.11",
        "@esbuild/darwin-arm64@0.25.12",
        "@esbuild/darwin-arm64@0.27.3",
        "@esbuild/darwin-arm64@0.27.7",
        "@esbuild/darwin-arm64@0.28.2",
        "@esbuild/darwin-x64@0.25.11",
        "@esbuild/darwin-x64@0.25.12",
        "@esbuild/darwin-x64@0.27.3",
        "@esbuild/darwin-x64@0.27.7",
        "@esbuild/darwin-x64@0.28.2",
        "@esbuild/freebsd-arm64@0.25.11",
        "@esbuild/freebsd-arm64@0.25.12",
        "@esbuild/freebsd-arm64@0.27.3",
        "@esbuild/freebsd-arm64@0.27.7",
        "@esbuild/freebsd-arm64@0.28.2",
        "@esbuild/freebsd-x64@0.25.11",
        "@esbuild/freebsd-x64@0.25.12",
        "@esbuild/freebsd-x64@0.27.3",
        "@esbuild/freebsd-x64@0.27.7",
        "@esbuild/freebsd-x64@0.28.2",
        "@esbuild/linux-arm@0.25.11",
        "@esbuild/linux-arm@0.25.12",
        "@esbuild/linux-arm@0.27.3",
        "@esbuild/linux-arm@0.27.7",
        "@esbuild/linux-arm@0.28.2",
        "@esbuild/linux-arm64@0.25.11",
        "@esbuild/linux-arm64@0.25.12",
        "@esbuild/linux-arm64@0.27.3",
        "@esbuild/linux-arm64@0.27.7",
        "@esbuild/linux-arm64@0.28.2",
        "@esbuild/linux-ia32@0.25.11",
        "@esbuild/linux-ia32@0.25.12",
        "@esbuild/linux-ia32@0.27.3",
        "@esbuild/linux-ia32@0.27.7",
        "@esbuild/linux-ia32@0.28.2",
        "@esbuild/linux-loong64@0.25.11",
        "@esbuild/linux-loong64@0.25.12",
        "@esbuild/linux-loong64@0.27.3",
        "@esbuild/linux-loong64@0.27.7",
        "@esbuild/linux-loong64@0.28.2",
        "@esbuild/linux-mips64el@0.25.11",
        "@esbuild/linux-mips64el@0.25.12",
        "@esbuild/linux-mips64el@0.27.3",
        "@esbuild/linux-mips64el@0.27.7",
        "@esbuild/linux-mips64el@0.28.2",
        "@esbuild/linux-ppc64@0.25.11",
        "@esbuild/linux-ppc64@0.25.12",
        "@esbuild/linux-ppc64@0.27.3",
        "@esbuild/linux-ppc64@0.27.7",
        "@esbuild/linux-ppc64@0.28.2",
        "@esbuild/linux-riscv64@0.25.11",
        "@esbuild/linux-riscv64@0.25.12",
        "@esbuild/linux-riscv64@0.27.3",
        "@esbuild/linux-riscv64@0.27.7",
        "@esbuild/linux-riscv64@0.28.2",
        "@esbuild/linux-s390x@0.25.11",
        "@esbuild/linux-s390x@0.25.12",
        "@esbuild/linux-s390x@0.27.3",
        "@esbuild/linux-s390x@0.27.7",
        "@esbuild/linux-s390x@0.28.2",
        "@esbuild/linux-x64@0.25.11",
        "@esbuild/linux-x64@0.25.12",
        "@esbuild/linux-x64@0.27.3",
        "@esbuild/linux-x64@0.27.7",
        "@esbuild/linux-x64@0.28.2",
        "@esbuild/netbsd-arm64@0.25.11",
        "@esbuild/netbsd-arm64@0.25.12",
        "@esbuild/netbsd-arm64@0.27.3",
        "@esbuild/netbsd-arm64@0.27.7",
        "@esbuild/netbsd-arm64@0.28.2",
        "@esbuild/netbsd-x64@0.25.11",
        "@esbuild/netbsd-x64@0.25.12",
        "@esbuild/netbsd-x64@0.27.3",
        "@esbuild/netbsd-x64@0.27.7",
        "@esbuild/netbsd-x64@0.28.2",
        "@esbuild/openbsd-arm64@0.25.11",
        "@esbuild/openbsd-arm64@0.25.12",
        "@esbuild/openbsd-arm64@0.27.3",
        "@esbuild/openbsd-arm64@0.27.7",
        "@esbuild/openbsd-arm64@0.28.2",
        "@esbuild/openbsd-x64@0.25.11",
        "@esbuild/openbsd-x64@0.25.12",
        "@esbuild/openbsd-x64@0.27.3",
        "@esbuild/openbsd-x64@0.27.7",
        "@esbuild/openbsd-x64@0.28.2",
        "@esbuild/openharmony-arm64@0.25.11",
        "@esbuild/openharmony-arm64@0.25.12",
        "@esbuild/openharmony-arm64@0.27.3",
        "@esbuild/openharmony-arm64@0.27.7",
        "@esbuild/openharmony-arm64@0.28.2",
        "@esbuild/sunos-x64@0.25.11",
        "@esbuild/sunos-x64@0.25.12",
        "@esbuild/sunos-x64@0.27.3",
        "@esbuild/sunos-x64@0.27.7",
        "@esbuild/sunos-x64@0.28.2",
        "@esbuild/win32-arm64@0.25.11",
        "@esbuild/win32-arm64@0.25.12",
        "@esbuild/win32-arm64@0.27.3",
        "@esbuild/win32-arm64@0.27.7",
        "@esbuild/win32-arm64@0.28.2",
        "@esbuild/win32-ia32@0.25.11",
        "@esbuild/win32-ia32@0.25.12",
        "@esbuild/win32-ia32@0.27.3",
        "@esbuild/win32-ia32@0.27.7",
        "@esbuild/win32-ia32@0.28.2",
        "@esbuild/win32-x64@0.25.11",
        "@esbuild/win32-x64@0.25.12",
        "@esbuild/win32-x64@0.27.3",
        "@esbuild/win32-x64@0.27.7",
        "@esbuild/win32-x64@0.28.2",
        "@eslint-community/eslint-utils@4.10.1",
        "@eslint-community/eslint-utils@4.4.0",
        "@eslint-community/eslint-utils@4.4.1",
        "@eslint-community/eslint-utils@4.9.1",
        "@eslint-community/regexpp@4.12.1",
        "@eslint-community/regexpp@4.12.2",
        "@eslint/config-array@0.21.2",
        "@eslint/config-helpers@0.4.2",
        "@eslint/core@0.17.0",
        "@eslint/eslintrc@2.1.4",
        "@eslint/eslintrc@3.3.7",
        "@eslint/js@8.57.1",
        "@eslint/js@9.39.5",
        "@eslint/object-schema@2.1.7",
        "@eslint/plugin-kit@0.4.1",
        "@humanfs/core@0.19.2",
        "@humanfs/node@0.16.8",
        "@humanfs/types@0.15.0",
        "@humanwhocodes/config-array@0.13.0",
        "@humanwhocodes/module-importer@1.0.1",
        "@humanwhocodes/object-schema@2.0.3",
        "@humanwhocodes/retry@0.4.3",
        "@img/colour@1.1.0",
        "@img/sharp-darwin-arm64@0.34.5",
        "@img/sharp-darwin-x64@0.34.5",
        "@img/sharp-libvips-darwin-arm64@1.2.4",
        "@img/sharp-libvips-darwin-x64@1.2.4",
        "@img/sharp-libvips-linux-arm@1.2.4",
        "@img/sharp-libvips-linux-arm64@1.2.4",
        "@img/sharp-libvips-linux-ppc64@1.2.4",
        "@img/sharp-libvips-linux-riscv64@1.2.4",
        "@img/sharp-libvips-linux-s390x@1.2.4",
        "@img/sharp-libvips-linux-x64@1.2.4",
        "@img/sharp-libvips-linuxmusl-arm64@1.2.4",
        "@img/sharp-libvips-linuxmusl-x64@1.2.4",
        "@img/sharp-linux-arm@0.34.5",
        "@img/sharp-linux-arm64@0.34.5",
        "@img/sharp-linux-ppc64@0.34.5",
        "@img/sharp-linux-riscv64@0.34.5",
        "@img/sharp-linux-s390x@0.34.5",
        "@img/sharp-linux-x64@0.34.5",
        "@img/sharp-linuxmusl-arm64@0.34.5",
        "@img/sharp-linuxmusl-x64@0.34.5",
        "@img/sharp-wasm32@0.34.5",
        "@img/sharp-win32-arm64@0.34.5",
        "@img/sharp-win32-ia32@0.34.5",
        "@img/sharp-win32-x64@0.34.5",
        "@joshwooding/vite-plugin-react-docgen-typescript@0.7.0",
        "@jridgewell/remapping@2.3.5",
        "@jridgewell/resolve-uri@3.1.1",
        "@jridgewell/trace-mapping@0.3.25",
        "@mdx-js/react@3.1.1",
        "@mswjs/interceptors@0.39.8",
        "@napi-rs/wasm-runtime@1.0.5",
        "@next/env@16.1.7",
        "@next/eslint-plugin-next@16.3.6",
        "@next/swc-darwin-arm64@16.1.7",
        "@next/swc-darwin-x64@16.1.7",
        "@next/swc-linux-arm64-gnu@16.1.7",
        "@next/swc-linux-arm64-musl@16.1.7",
        "@next/swc-linux-x64-gnu@16.1.7",
        "@next/swc-linux-x64-musl@16.1.7",
        "@next/swc-win32-arm64-msvc@16.1.7",
        "@next/swc-win32-x64-msvc@16.1.7",
        "@nodelib/fs.scandir@2.1.5",
        "@nodelib/fs.stat@2.0.5",
        "@nodelib/fs.walk@1.2.8",
        "@nolyfill/is-core-module@1.0.39",
        "@open-draft/deferred-promise@2.2.0",
        "@open-draft/logger@0.3.0",
        "@open-draft/until@2.1.0",
        "@oxc-project/types@0.148.0",
        "@oxc-project/types@0.151.0",
        "@pkgr/core@0.1.1",
        "@quansync/fs@1.1.0",
        "@react-email/preview-server@5.2.10",
        "@rolldown/binding-android-arm-eabi@1.2.11",
        "@rolldown/binding-android-arm-eabi@1.2.7",
        "@rolldown/binding-android-arm64@1.2.11",
        "@rolldown/binding-android-arm64@1.2.7",
        "@rolldown/binding-darwin-arm64@1.2.11",
        "@rolldown/binding-darwin-arm64@1.2.7",
        "@rolldown/binding-darwin-x64@1.2.11",
        "@rolldown/binding-darwin-x64@1.2.7",
        "@rolldown/binding-freebsd-x64@1.2.11",
        "@rolldown/binding-freebsd-x64@1.2.7",
        "@rolldown/binding-linux-arm-gnueabihf@1.2.11",
        "@rolldown/binding-linux-arm-gnueabihf@1.2.7",
        "@rolldown/binding-linux-arm64-gnu@1.2.11",
        "@rolldown/binding-linux-arm64-gnu@1.2.7",
        "@rolldown/binding-linux-arm64-musl@1.2.11",
        "@rolldown/binding-linux-arm64-musl@1.2.7",
        "@rolldown/binding-linux-ppc64-gnu@1.2.11",
        "@rolldown/binding-linux-ppc64-gnu@1.2.7",
        "@rolldown/binding-linux-s390x-gnu@1.2.11",
        "@rolldown/binding-linux-s390x-gnu@1.2.7",
        "@rolldown/binding-linux-x64-gnu@1.2.11",
        "@rolldown/binding-linux-x64-gnu@1.2.7",
        "@rolldown/binding-linux-x64-musl@1.2.11",
        "@rolldown/binding-linux-x64-musl@1.2.7",
        "@rolldown/binding-openharmony-arm64@1.2.11",
        "@rolldown/binding-openharmony-arm64@1.2.7",
        "@rolldown/binding-win32-arm64-msvc@1.2.11",
        "@rolldown/binding-win32-arm64-msvc@1.2.7",
        "@rolldown/binding-win32-x64-msvc@1.2.11",
        "@rolldown/binding-win32-x64-msvc@1.2.7",
        "@rolldown/pluginutils@1.0.1",
        "@rollup/plugin-inject@5.0.5",
        "@rollup/pluginutils@5.1.3",
        "@rollup/rollup-android-arm-eabi@4.60.1",
        "@rollup/rollup-android-arm-eabi@4.60.2",
        "@rollup/rollup-android-arm64@4.60.1",
        "@rollup/rollup-android-arm64@4.60.2",
        "@rollup/rollup-darwin-arm64@4.60.1",
        "@rollup/rollup-darwin-arm64@4.60.2",
        "@rollup/rollup-darwin-x64@4.60.1",
        "@rollup/rollup-darwin-x64@4.60.2",
        "@rollup/rollup-freebsd-arm64@4.60.1",
        "@rollup/rollup-freebsd-arm64@4.60.2",
        "@rollup/rollup-freebsd-x64@4.60.1",
        "@rollup/rollup-freebsd-x64@4.60.2",
        "@rollup/rollup-linux-arm-gnueabihf@4.60.1",
        "@rollup/rollup-linux-arm-gnueabihf@4.60.2",
        "@rollup/rollup-linux-arm-musleabihf@4.60.1",
        "@rollup/rollup-linux-arm-musleabihf@4.60.2",
        "@rollup/rollup-linux-arm64-gnu@4.60.1",
        "@rollup/rollup-linux-arm64-gnu@4.60.2",
        "@rollup/rollup-linux-arm64-musl@4.60.1",
        "@rollup/rollup-linux-arm64-musl@4.60.2",
        "@rollup/rollup-linux-loong64-gnu@4.60.1",
        "@rollup/rollup-linux-loong64-gnu@4.60.2",
        "@rollup/rollup-linux-loong64-musl@4.60.1",
        "@rollup/rollup-linux-loong64-musl@4.60.2",
        "@rollup/rollup-linux-ppc64-gnu@4.60.1",
        "@rollup/rollup-linux-ppc64-gnu@4.60.2",
        "@rollup/rollup-linux-ppc64-musl@4.60.1",
        "@rollup/rollup-linux-ppc64-musl@4.60.2",
        "@rollup/rollup-linux-riscv64-gnu@4.60.1",
        "@rollup/rollup-linux-riscv64-gnu@4.60.2",
        "@rollup/rollup-linux-riscv64-musl@4.60.1",
        "@rollup/rollup-linux-riscv64-musl@4.60.2",
        "@rollup/rollup-linux-s390x-gnu@4.60.1",
        "@rollup/rollup-linux-s390x-gnu@4.60.2",
        "@rollup/rollup-linux-x64-gnu@4.60.1",
        "@rollup/rollup-linux-x64-gnu@4.60.2",
        "@rollup/rollup-linux-x64-musl@4.60.1",
        "@rollup/rollup-linux-x64-musl@4.60.2",
        "@rollup/rollup-openbsd-x64@4.60.1",
        "@rollup/rollup-openbsd-x64@4.60.2",
        "@rollup/rollup-openharmony-arm64@4.60.1",
        "@rollup/rollup-openharmony-arm64@4.60.2",
        "@rollup/rollup-win32-arm64-msvc@4.60.1",
        "@rollup/rollup-win32-arm64-msvc@4.60.2",
        "@rollup/rollup-win32-ia32-msvc@4.60.1",
        "@rollup/rollup-win32-ia32-msvc@4.60.2",
        "@rollup/rollup-win32-x64-gnu@4.60.1",
        "@rollup/rollup-win32-x64-gnu@4.60.2",
        "@rollup/rollup-win32-x64-msvc@4.60.1",
        "@rollup/rollup-win32-x64-msvc@4.60.2",
        "@rtsao/scc@1.1.0",
        "@socket.io/component-emitter@3.1.2",
        "@storybook/addon-a11y@10.3.6",
        "@storybook/addon-docs@10.3.6",
        "@storybook/builder-vite@10.3.6",
        "@storybook/csf-plugin@10.3.6",
        "@storybook/global@5.0.0",
        "@storybook/icons@2.1.0",
        "@storybook/react@10.3.6",
        "@storybook/react-dom-shim@10.3.6",
        "@storybook/react-vite@10.3.6",
        "@stylistic/eslint-plugin@2.13.0",
        "@stylistic/eslint-plugin@5.10.0",
        "@tailwindcss/node@4.1.14",
        "@tailwindcss/oxide@4.1.14",
        "@tailwindcss/oxide-android-arm64@4.1.14",
        "@tailwindcss/oxide-darwin-arm64@4.1.14",
        "@tailwindcss/oxide-darwin-x64@4.1.14",
        "@tailwindcss/oxide-freebsd-x64@4.1.14",
        "@tailwindcss/oxide-linux-arm-gnueabihf@4.1.14",
        "@tailwindcss/oxide-linux-arm64-gnu@4.1.14",
        "@tailwindcss/oxide-linux-arm64-musl@4.1.14",
        "@tailwindcss/oxide-linux-x64-gnu@4.1.14",
        "@tailwindcss/oxide-linux-x64-musl@4.1.14",
        "@tailwindcss/oxide-wasm32-wasi@4.1.14",
        "@tailwindcss/oxide-win32-arm64-msvc@4.1.14",
        "@tailwindcss/oxide-win32-x64-msvc@4.1.14",
        "@tailwindcss/postcss@4.1.14",
        "@tanstack/eslint-plugin-router@1.120.17",
        "@tanstack/router-generator@1.95.1",
        "@tanstack/router-plugin@1.95.1",
        "@testing-library/dom@10.4.1",
        "@testing-library/jest-dom@6.9.1",
        "@testing-library/user-event@14.6.7",
        "@tybys/wasm-util@0.10.1",
        "@types/aria-query@5.0.4",
        "@types/babel__core@7.20.5",
        "@types/babel__generator@7.6.8",
        "@types/babel__template@7.4.4",
        "@types/babel__traverse@7.28.0",
        "@types/bcrypt@5.0.2",
        "@types/chai@5.2.3",
        "@types/cors@2.8.17",
        "@types/deep-eql@4.0.2",
        "@types/dns-packet@5.6.5",
        "@types/doctrine@0.0.9",
        "@types/estree@1.0.8",
        "@types/file-saver@2.0.7",
        "@types/json-schema@7.0.15",
        "@types/json5@0.0.29",
        "@types/jsrp@0.2.6",
        "@types/libsodium-wrappers@0.7.13",
        "@types/lodash@4.14.202",
        "@types/lodash.isequal@4.5.8",
        "@types/mdx@2.0.13",
        "@types/netmask@2.0.6",
        "@types/node@18.19.130",
        "@types/oauth@0.9.4",
        "@types/oracledb@6.10.0",
        "@types/passport-google-oauth20@2.0.14",
        "@types/passport-oauth2@1.4.15",
        "@types/pg@8.10.9",
        "@types/picomatch@2.3.3",
        "@types/picomatch@3.0.1",
        "@types/pkcs11js@1.0.4",
        "@types/prompt-sync@4.2.3",
        "@types/qrcode@1.5.5",
        "@types/react@19.1.2",
        "@types/react-helmet@6.1.11",
        "@types/resolve@1.20.6",
        "@types/safe-regex@1.1.6",
        "@types/sjcl@1.0.34",
        "@types/ssh2@1.15.5",
        "@types/uuid@9.0.7",
        "@typescript-eslint/eslint-plugin@8.70.1",
        "@typescript-eslint/eslint-plugin@8.71.0",
        "@typescript-eslint/parser@8.70.1",
        "@typescript-eslint/parser@8.71.0",
        "@typescript-eslint/project-service@8.70.1",
        "@typescript-eslint/project-service@8.71.0",
        "@typescript-eslint/scope-manager@8.70.1",
        "@typescript-eslint/scope-manager@8.71.0",
        "@typescript-eslint/tsconfig-utils@8.70.1",
        "@typescript-eslint/tsconfig-utils@8.71.0",
        "@typescript-eslint/type-utils@8.70.1",
        "@typescript-eslint/type-utils@8.71.0",
        "@typescript-eslint/types@8.70.1",
        "@typescript-eslint/types@8.71.0",
        "@typescript-eslint/typescript-estree@8.70.1",
        "@typescript-eslint/typescript-estree@8.71.0",
        "@typescript-eslint/utils@8.70.1",
        "@typescript-eslint/utils@8.71.0",
        "@typescript-eslint/visitor-keys@8.70.1",
        "@typescript-eslint/visitor-keys@8.71.0",
        "@ungap/structured-clone@1.2.0",
        "@unrs/resolver-binding-android-arm-eabi@1.12.2",
        "@unrs/resolver-binding-android-arm64@1.12.2",
        "@unrs/resolver-binding-darwin-arm64@1.12.2",
        "@unrs/resolver-binding-darwin-x64@1.12.2",
        "@unrs/resolver-binding-freebsd-x64@1.12.2",
        "@unrs/resolver-binding-linux-arm-gnueabihf@1.12.2",
        "@unrs/resolver-binding-linux-arm-musleabihf@1.12.2",
        "@unrs/resolver-binding-linux-arm64-gnu@1.12.2",
        "@unrs/resolver-binding-linux-arm64-musl@1.12.2",
        "@unrs/resolver-binding-linux-loong64-gnu@1.12.2",
        "@unrs/resolver-binding-linux-loong64-musl@1.12.2",
        "@unrs/resolver-binding-linux-ppc64-gnu@1.12.2",
        "@unrs/resolver-binding-linux-riscv64-gnu@1.12.2",
        "@unrs/resolver-binding-linux-riscv64-musl@1.12.2",
        "@unrs/resolver-binding-linux-s390x-gnu@1.12.2",
        "@unrs/resolver-binding-linux-x64-gnu@1.12.2",
        "@unrs/resolver-binding-linux-x64-musl@1.12.2",
        "@unrs/resolver-binding-openharmony-arm64@1.12.2",
        "@unrs/resolver-binding-wasm32-wasi@1.12.2",
        "@unrs/resolver-binding-win32-arm64-msvc@1.12.2",
        "@unrs/resolver-binding-win32-ia32-msvc@1.12.2",
        "@unrs/resolver-binding-win32-x64-msvc@1.12.2",
        "@vitejs/plugin-react@6.1.1",
        "@vitest/expect@3.2.4",
        "@vitest/expect@3.2.7",
        "@vitest/expect@4.1.11",
        "@vitest/mocker@3.2.4",
        "@vitest/mocker@3.2.7",
        "@vitest/mocker@4.1.11",
        "@vitest/pretty-format@3.2.4",
        "@vitest/pretty-format@3.2.7",
        "@vitest/pretty-format@4.1.11",
        "@vitest/runner@3.2.4",
        "@vitest/runner@3.2.7",
        "@vitest/runner@4.1.11",
        "@vitest/snapshot@3.2.4",
        "@vitest/snapshot@3.2.7",
        "@vitest/snapshot@4.1.11",
        "@vitest/spy@3.2.4",
        "@vitest/spy@3.2.7",
        "@vitest/spy@4.1.11",
        "@vitest/utils@3.2.4",
        "@vitest/utils@3.2.7",
        "@vitest/utils@4.1.11",
        "@webcontainer/env@1.1.1",
        "@yuku-codegen/binding-android-arm64@0.10.2",
        "@yuku-codegen/binding-darwin-arm64@0.10.2",
        "@yuku-codegen/binding-darwin-x64@0.10.2",
        "@yuku-codegen/binding-freebsd-x64@0.10.2",
        "@yuku-codegen/binding-linux-arm-gnu@0.10.2",
        "@yuku-codegen/binding-linux-arm-musl@0.10.2",
        "@yuku-codegen/binding-linux-arm64-gnu@0.10.2",
        "@yuku-codegen/binding-linux-arm64-musl@0.10.2",
        "@yuku-codegen/binding-linux-x64-gnu@0.10.2",
        "@yuku-codegen/binding-linux-x64-musl@0.10.2",
        "@yuku-codegen/binding-win32-arm64@0.10.2",
        "@yuku-codegen/binding-win32-x64@0.10.2",
        "@yuku-parser/binding-android-arm64@0.10.2",
        "@yuku-parser/binding-darwin-arm64@0.10.2",
        "@yuku-parser/binding-darwin-x64@0.10.2",
        "@yuku-parser/binding-freebsd-x64@0.10.2",
        "@yuku-parser/binding-linux-arm-gnu@0.10.2",
        "@yuku-parser/binding-linux-arm-musl@0.10.2",
        "@yuku-parser/binding-linux-arm64-gnu@0.10.2",
        "@yuku-parser/binding-linux-arm64-musl@0.10.2",
        "@yuku-parser/binding-linux-x64-gnu@0.10.2",
        "@yuku-parser/binding-linux-x64-musl@0.10.2",
        "@yuku-parser/binding-win32-arm64@0.10.2",
        "@yuku-parser/binding-win32-x64@0.10.2",
        "@yuku-toolchain/types@0.10.2",
        "acorn@8.14.0",
        "acorn@8.15.0",
        "acorn@8.18.0",
        "acorn-jsx@5.3.2",
        "ajv@6.14.0",
        "ansi-regex@4.1.1",
        "ansi-styles@5.2.0",
        "anymatch@3.1.3",
        "aria-query@5.3.0",
        "aria-query@5.3.2",
        "array-buffer-byte-length@1.0.2",
        "array-includes@3.2.0",
        "array.prototype.findlast@1.2.5",
        "array.prototype.findlastindex@1.2.6",
        "array.prototype.flat@1.3.3",
        "array.prototype.flatmap@1.3.3",
        "array.prototype.tosorted@1.1.4",
        "arraybuffer.prototype.slice@1.0.4",
        "asn1.js@4.10.1",
        "assert@2.1.0",
        "assertion-error@2.0.1",
        "ast-types@0.16.3",
        "ast-types-flow@0.0.8",
        "async-function@1.0.0",
        "atomically@2.1.0",
        "axe-core@4.10.2",
        "axobject-query@4.1.0",
        "babel-dead-code-elimination@1.0.8",
        "balanced-match@4.0.4",
        "base64id@2.0.0",
        "baseline-browser-mapping@2.11.19",
        "baseline-browser-mapping@2.8.19",
        "binary-extensions@2.3.0",
        "bn.js@5.2.3",
        "brace-expansion@1.1.14",
        "brace-expansion@1.1.21",
        "brace-expansion@2.1.0",
        "brace-expansion@5.0.12",
        "brace-expansion@5.0.9",
        "braces@3.0.3",
        "brorand@1.1.0",
        "browser-resolve@2.0.0",
        "browserify-aes@1.2.0",
        "browserify-cipher@1.0.1",
        "browserify-des@1.0.2",
        "browserify-rsa@4.1.1",
        "browserify-sign@4.2.5",
        "browserify-zlib@0.2.0",
        "browserslist@4.26.3",
        "buffer-xor@1.0.3",
        "builtin-status-codes@3.0.0",
        "cac@6.7.14",
        "cac@7.0.0",
        "call-bind@1.0.8",
        "caniuse-lite@1.0.30001751",
        "caniuse-lite@1.0.30001810",
        "chai@5.3.3",
        "chai@6.2.2",
        "chalk@5.3.0",
        "check-error@2.1.3",
        "chokidar@3.6.0",
        "chokidar@4.0.3",
        "cipher-base@1.0.6",
        "citty@0.1.6",
        "cli-cursor@5.0.0",
        "client-only@0.0.1",
        "colorette@2.0.20",
        "commander@13.1.0",
        "comment-parser@1.4.9",
        "concat-map@0.0.1",
        "conf@15.0.2",
        "confbox@0.2.2",
        "confusing-browser-globals@1.0.11",
        "consola@3.4.2",
        "console-browserify@1.2.0",
        "constants-browserify@1.0.0",
        "convert-source-map@2.0.0",
        "core-util-is@1.0.3",
        "cors@2.8.5",
        "create-ecdh@4.0.4",
        "create-hmac@1.1.7",
        "create-require@1.1.1",
        "crypto-browserify@3.12.1",
        "css.escape@1.5.1",
        "csstype@3.1.3",
        "damerau-levenshtein@1.0.8",
        "data-view-buffer@1.0.2",
        "data-view-byte-length@1.0.2",
        "data-view-byte-offset@1.0.1",
        "debounce@2.0.0",
        "debounce-fn@6.0.0",
        "debug@3.2.7",
        "deep-eql@5.0.2",
        "deep-is@0.1.4",
        "default-browser@5.5.1",
        "default-browser-id@5.0.1",
        "define-properties@1.2.1",
        "defu@6.1.7",
        "diffie-hellman@5.0.3",
        "doctrine@2.1.0",
        "doctrine@3.0.0",
        "dom-accessibility-api@0.5.16",
        "dom-accessibility-api@0.6.3",
        "domain-browser@4.22.0",
        "dot-prop@10.1.0",
        "dts-resolver@3.0.0",
        "electron-to-chromium@1.5.237",
        "elliptic@6.6.1",
        "emoji-regex@10.3.0",
        "empathic@2.0.1",
        "empathic@2.1.0",
        "engine.io@6.6.9",
        "engine.io-parser@5.2.3",
        "enhanced-resolve@5.18.3",
        "env-paths@3.0.0",
        "es-abstract@1.24.2",
        "es-abstract-get@1.0.0",
        "es-iterator-helpers@1.4.0",
        "es-module-lexer@1.7.0",
        "es-module-lexer@2.3.2",
        "es-shim-unscopables@1.1.0",
        "es-to-primitive@1.3.0",
        "es-to-primitive@1.3.4",
        "esbuild@0.25.11",
        "esbuild@0.25.12",
        "esbuild@0.27.3",
        "esbuild@0.27.7",
        "esbuild@0.28.2",
        "eslint@8.57.1",
        "eslint@9.39.5",
        "eslint-compat-utils@0.5.1",
        "eslint-config-airbnb-base@15.0.0",
        "eslint-config-airbnb-extended@3.2.0",
        "eslint-config-prettier@9.1.0",
        "eslint-import-context@0.1.9",
        "eslint-import-resolver-node@0.3.9",
        "eslint-import-resolver-typescript@3.10.1",
        "eslint-import-resolver-typescript@3.7.0",
        "eslint-import-resolver-typescript@4.4.5",
        "eslint-module-utils@2.14.0",
        "eslint-plugin-es-x@7.8.0",
        "eslint-plugin-import@2.32.0",
        "eslint-plugin-import-x@4.17.1",
        "eslint-plugin-jsx-a11y@6.10.2",
        "eslint-plugin-n@18.3.0",
        "eslint-plugin-prettier@5.1.3",
        "eslint-plugin-prettier@5.2.1",
        "eslint-plugin-react@7.37.5",
        "eslint-plugin-react-hooks@7.1.1",
        "eslint-plugin-react-refresh@0.4.16",
        "eslint-plugin-simple-import-sort@10.0.0",
        "eslint-plugin-simple-import-sort@12.1.1",
        "eslint-plugin-storybook@10.3.6",
        "eslint-scope@7.2.2",
        "eslint-scope@8.4.0",
        "eslint-visitor-keys@3.4.3",
        "eslint-visitor-keys@4.2.1",
        "eslint-visitor-keys@5.0.1",
        "espree@10.3.0",
        "espree@10.4.0",
        "espree@9.6.1",
        "esprima@4.0.1",
        "esquery@1.5.0",
        "esquery@1.6.0",
        "esrecurse@4.3.0",
        "estraverse@5.3.0",
        "estree-walker@2.0.2",
        "estree-walker@3.0.3",
        "esutils@2.0.3",
        "evp_bytestokey@1.0.3",
        "expect-type@1.2.2",
        "expect-type@1.3.0",
        "expect-type@1.4.0",
        "exsolve@1.0.7",
        "fast-copy@3.0.1",
        "fast-diff@1.3.0",
        "fast-glob@3.3.1",
        "fast-glob@3.3.2",
        "fast-json-stable-stringify@2.1.0",
        "fast-levenshtein@2.0.6",
        "fastq@1.14.0",
        "file-entry-cache@6.0.1",
        "file-entry-cache@8.0.0",
        "fill-range@7.1.1",
        "find-up@5.0.0",
        "flat-cache@3.0.4",
        "flat-cache@3.2.0",
        "flat-cache@4.0.1",
        "flatted@3.4.2",
        "flatted@3.4.4",
        "for-each@0.3.3",
        "fs.realpath@1.0.0",
        "fsevents@2.3.3",
        "function.prototype.name@1.2.0",
        "functions-have-names@1.2.3",
        "generator-function@2.0.1",
        "gensync@1.0.0-beta.2",
        "get-east-asian-width@1.4.0",
        "get-symbol-description@1.1.0",
        "get-tsconfig@4.13.0",
        "get-tsconfig@4.14.0",
        "get-tsconfig@4.14.3",
        "get-tsconfig@5.0.0-beta.6",
        "glob@11.1.0",
        "glob@13.0.6",
        "glob@7.2.3",
        "glob-parent@5.1.2",
        "glob-parent@6.0.2",
        "globals@13.23.0",
        "globals@13.24.0",
        "globals@14.0.0",
        "globals@15.13.0",
        "globals@17.12.0",
        "globalthis@1.0.4",
        "globrex@0.1.2",
        "graphemer@1.4.0",
        "has-bigints@1.0.2",
        "has-bigints@1.1.0",
        "has-proto@1.2.0",
        "hash-base@3.0.5",
        "hash-base@3.1.2",
        "hash.js@1.1.7",
        "help-me@4.2.0",
        "hermes-estree@0.25.1",
        "hermes-parser@0.25.1",
        "hmac-drbg@1.0.1",
        "hookable@6.1.2",
        "https-browserify@1.0.0",
        "husky@8.0.3",
        "ignore@5.3.0",
        "ignore@5.3.2",
        "ignore@7.0.10",
        "ignore@7.0.5",
        "import-without-cache@0.4.1",
        "imurmurhash@0.1.4",
        "inflight@1.0.6",
        "internal-slot@1.1.0",
        "is-arguments@1.2.0",
        "is-array-buffer@3.0.5",
        "is-async-function@2.1.1",
        "is-bigint@1.1.0",
        "is-binary-path@2.1.0",
        "is-boolean-object@1.2.2",
        "is-bun-module@1.3.0",
        "is-bun-module@2.0.0",
        "is-data-view@1.0.2",
        "is-date-object@1.1.0",
        "is-document.all@1.0.0",
        "is-extglob@2.1.1",
        "is-finalizationregistry@1.1.1",
        "is-generator-function@1.0.10",
        "is-generator-function@1.1.2",
        "is-glob@4.0.3",
        "is-interactive@2.0.0",
        "is-map@2.0.3",
        "is-nan@1.3.2",
        "is-negative-zero@2.0.3",
        "is-node-process@1.2.0",
        "is-number@7.0.0",
        "is-number-object@1.1.1",
        "is-path-inside@3.0.3",
        "is-regex@1.2.1",
        "is-set@2.0.3",
        "is-shared-array-buffer@1.0.4",
        "is-string@1.1.1",
        "is-symbol@1.1.1",
        "is-unicode-supported@1.3.0",
        "is-unicode-supported@2.1.0",
        "is-weakmap@2.0.2",
        "is-weakref@1.1.1",
        "is-weakset@2.0.4",
        "is-wsl@3.1.1",
        "isarray@1.0.0",
        "isomorphic-timers-promises@1.0.1",
        "iterator.prototype@1.1.5",
        "jackspeak@4.1.1",
        "jiti@2.4.2",
        "jiti@2.6.1",
        "js-tokens@9.0.1",
        "js-yaml@4.1.1",
        "json-buffer@3.0.1",
        "json-schema-traverse@0.4.1",
        "json-stable-stringify-without-jsonify@1.0.1",
        "json-stringify-safe@5.0.1",
        "json5@1.0.2",
        "json5@2.2.3",
        "jsx-ast-utils@3.3.5",
        "keyv@4.5.4",
        "kleur@3.0.3",
        "language-subtag-registry@0.3.23",
        "language-tags@1.0.9",
        "levn@0.4.1",
        "lightningcss@1.30.1",
        "lightningcss@1.33.0",
        "lightningcss-android-arm64@1.33.0",
        "lightningcss-darwin-arm64@1.30.1",
        "lightningcss-darwin-arm64@1.33.0",
        "lightningcss-darwin-x64@1.30.1",
        "lightningcss-darwin-x64@1.33.0",
        "lightningcss-freebsd-x64@1.30.1",
        "lightningcss-freebsd-x64@1.33.0",
        "lightningcss-linux-arm-gnueabihf@1.30.1",
        "lightningcss-linux-arm-gnueabihf@1.33.0",
        "lightningcss-linux-arm64-gnu@1.30.1",
        "lightningcss-linux-arm64-gnu@1.33.0",
        "lightningcss-linux-arm64-musl@1.30.1",
        "lightningcss-linux-arm64-musl@1.33.0",
        "lightningcss-linux-x64-gnu@1.30.1",
        "lightningcss-linux-x64-gnu@1.33.0",
        "lightningcss-linux-x64-musl@1.30.1",
        "lightningcss-linux-x64-musl@1.33.0",
        "lightningcss-win32-arm64-msvc@1.30.1",
        "lightningcss-win32-arm64-msvc@1.33.0",
        "lightningcss-win32-x64-msvc@1.30.1",
        "lightningcss-win32-x64-msvc@1.33.0",
        "locate-path@6.0.0",
        "lodash.merge@4.6.2",
        "log-symbols@6.0.0",
        "log-symbols@7.0.1",
        "loupe@3.2.1",
        "lru-cache@11.2.2",
        "lru-cache@11.5.2",
        "lru-cache@5.1.1",
        "lz-string@1.5.0",
        "magic-string@0.30.21",
        "map-or-similar@1.5.0",
        "memoizerific@1.11.3",
        "merge2@1.4.1",
        "micromatch@4.0.8",
        "miller-rabin@4.0.1",
        "mimic-function@5.0.1",
        "min-indent@1.0.1",
        "minimalistic-crypto-utils@1.0.1",
        "minimatch@10.2.5",
        "minimatch@10.2.6",
        "minimatch@3.1.5",
        "nanoid@3.3.11",
        "napi-postinstall@0.3.4",
        "natural-compare@1.4.0",
        "next@16.1.7",
        "nock@14.0.10",
        "node-releases@2.0.26",
        "node-stdlib-browser@1.3.1",
        "normalize-path@3.0.0",
        "nypm@0.6.0",
        "object-is@1.1.6",
        "object-keys@1.1.1",
        "object.assign@4.1.7",
        "object.entries@1.1.7",
        "object.entries@1.1.9",
        "object.fromentries@2.0.8",
        "object.groupby@1.0.3",
        "object.values@1.2.1",
        "obuf@1.1.2",
        "obug@2.2.1",
        "obug@3.0.0",
        "onetime@7.0.0",
        "open@10.2.0",
        "optionator@0.9.3",
        "optionator@0.9.4",
        "ora@8.2.0",
        "os-browserify@0.3.0",
        "outvariant@1.4.3",
        "own-keys@1.0.2",
        "p-locate@5.0.0",
        "pako@1.0.11",
        "parse-asn1@5.1.9",
        "path-browserify@1.0.1",
        "path-is-absolute@1.0.1",
        "path-scurry@2.0.0",
        "path-scurry@2.0.2",
        "pathe@2.0.3",
        "pathval@2.0.1",
        "pbkdf2@3.1.5",
        "pg-numeric@1.0.2",
        "pg-types@4.0.1",
        "picomatch@2.3.2",
        "pino-pretty@10.2.3",
        "pkg-dir@5.0.0",
        "pkg-types@2.3.0",
        "possible-typed-array-names@1.0.0",
        "postcss@8.4.31",
        "postcss@8.5.12",
        "postcss@8.5.26",
        "postcss@8.5.28",
        "postcss@8.5.6",
        "postgres-array@3.0.2",
        "postgres-bytea@3.0.0",
        "postgres-date@2.0.1",
        "postgres-interval@3.0.0",
        "postgres-range@1.1.3",
        "prelude-ls@1.2.1",
        "prettier@3.4.2",
        "prettier-linter-helpers@1.0.0",
        "prettier-plugin-tailwindcss@0.6.14",
        "pretty-format@27.5.1",
        "process-nextick-args@2.0.1",
        "prompt-sync@4.2.0",
        "prompts@2.4.2",
        "propagate@2.0.1",
        "public-encrypt@4.0.3",
        "punycode@1.4.1",
        "qs@6.15.0",
        "quansync@1.0.0",
        "querystring-es3@0.2.1",
        "queue-microtask@1.2.3",
        "randomfill@1.0.4",
        "react-docgen@8.0.2",
        "react-docgen-typescript@2.4.0",
        "react-email@5.0.6",
        "react-is@17.0.2",
        "readable-stream@2.3.8",
        "readdirp@3.6.0",
        "readdirp@4.1.2",
        "recast@0.23.21",
        "redent@3.0.0",
        "reflect.getprototypeof@1.0.10",
        "regexp.prototype.flags@1.5.4",
        "resolve@2.0.0-next.5",
        "resolve-pkg-maps@1.0.0",
        "restore-cursor@5.1.0",
        "ripemd160@2.0.3",
        "rolldown@1.2.11",
        "rolldown@1.2.7",
        "rolldown-plugin-dts@0.28.6",
        "rollup@4.60.1",
        "rollup@4.60.2",
        "run-applescript@7.1.0",
        "run-parallel@1.2.0",
        "safe-array-concat@1.1.3",
        "safe-array-concat@1.1.4",
        "safe-buffer@5.1.2",
        "safe-push-apply@1.0.0",
        "safe-regex-test@1.1.0",
        "secure-json-parse@2.7.0",
        "set-function-name@2.0.2",
        "set-proto@1.0.0",
        "setimmediate@1.0.5",
        "sharp@0.34.5",
        "siginfo@2.0.0",
        "sisteransi@1.0.5",
        "socket.io@4.8.1",
        "socket.io-adapter@2.5.5",
        "socket.io-parser@4.2.7",
        "source-map-js@1.2.1",
        "stable-hash@0.0.4",
        "stable-hash@0.0.5",
        "stable-hash-x@0.2.0",
        "stackback@0.0.2",
        "std-env@3.10.0",
        "std-env@4.2.0",
        "stdin-discarder@0.2.2",
        "stop-iteration-iterator@1.1.0",
        "storybook@10.3.6",
        "storybook-addon-tag-badges@3.1.0",
        "stream-browserify@3.0.0",
        "stream-http@3.2.0",
        "strict-event-emitter@0.5.1",
        "string-width@7.2.0",
        "string.prototype.includes@2.0.1",
        "string.prototype.matchall@4.1.0",
        "string.prototype.repeat@1.0.0",
        "string.prototype.trim@1.2.10",
        "string.prototype.trim@1.2.11",
        "string.prototype.trimend@1.0.10",
        "string.prototype.trimend@1.0.9",
        "string.prototype.trimstart@1.0.8",
        "string_decoder@1.1.1",
        "strip-ansi@5.2.0",
        "strip-indent@3.0.0",
        "strip-indent@4.1.1",
        "strip-literal@3.1.0",
        "stubborn-fs@2.0.0",
        "stubborn-utils@1.0.2",
        "styled-jsx@5.1.6",
        "synckit@0.8.8",
        "synckit@0.9.2",
        "tagged-tag@1.0.0",
        "tailwindcss@4.1.14",
        "tapable@2.2.1",
        "tar@7.5.13",
        "text-table@0.2.0",
        "timers-browserify@2.0.12",
        "tinybench@2.9.0",
        "tinyexec@0.3.2",
        "tinyexec@1.3.1",
        "tinyglobby@0.2.16",
        "tinyglobby@0.2.17",
        "tinypool@1.1.1",
        "tinyrainbow@2.0.0",
        "tinyrainbow@3.1.1",
        "tinyspy@4.0.4",
        "tinyspy@4.0.6",
        "to-regex-range@5.0.1",
        "tree-kill@1.2.2",
        "ts-api-utils@2.5.0",
        "ts-dedent@2.2.0",
        "tsconfck@3.1.6",
        "tsconfig-paths@3.15.0",
        "tsconfig-paths@4.2.0",
        "tsdown@0.23.0",
        "tsx@4.19.3",
        "tsx@4.21.0",
        "tsx@4.23.15",
        "tty-browserify@0.0.1",
        "tw-animate-css@1.4.0",
        "type-check@0.4.0",
        "type-fest@0.20.2",
        "type-fest@5.3.1",
        "typed-array-byte-length@1.0.3",
        "typed-array-byte-offset@1.0.5",
        "typed-array-length@1.0.7",
        "typed-array-length@1.0.8",
        "typescript@5.6.3",
        "typescript-eslint@8.70.1",
        "unbox-primitive@1.1.0",
        "unconfig-core@7.5.0",
        "unplugin@1.16.0",
        "unplugin@2.3.11",
        "unrs-resolver@1.12.2",
        "update-browserslist-db@1.1.3",
        "uri-js@4.4.1",
        "url@0.11.4",
        "util@0.12.5",
        "verkit@0.4.1",
        "vite@7.3.2",
        "vite@7.3.6",
        "vite@8.2.2",
        "vite-node@3.2.4",
        "vite-plugin-node-polyfills@0.28.0",
        "vite-plugin-wasm@3.6.0",
        "vite-tsconfig-paths@5.1.4",
        "vitest@3.2.4",
        "vitest@3.2.7",
        "vitest@4.1.11",
        "vm-browserify@1.1.2",
        "webpack-virtual-modules@0.6.2",
        "when-exit@2.1.5",
        "which-boxed-primitive@1.1.1",
        "which-builtin-type@1.2.1",
        "which-collection@1.0.2",
        "which-typed-array@1.1.16",
        "which-typed-array@1.1.24",
        "why-is-node-running@2.3.0",
        "word-wrap@1.2.5",
        "ws@8.21.3",
        "wsl-utils@0.1.0",
        "yallist@3.1.1",
        "yoctocolors@2.1.2",
        "yuku-ast@0.10.2",
        "yuku-codegen@0.10.2",
        "yuku-parser@0.10.2",
        "zod@4.6.5",
        "zod-validation-error@4.0.2"
      ],
      "any": true,
      "baseline": false,
      "integrity_drift": 0,
      "license_changes": [
        {
          "from": [],
          "package": "argparse",
          "to": [
            "Python-2.0"
          ]
        },
        {
          "from": [],
          "package": "base64-js",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "create-hash",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "emoji-regex",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "events",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "graceful-fs",
          "to": [
            "ISC"
          ]
        },
        {
          "from": [],
          "package": "ieee754",
          "to": [
            "BSD-3-Clause"
          ]
        },
        {
          "from": [],
          "package": "indent-string",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "is-callable",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "isarray",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "md5.js",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "minimist",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "process",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "punycode",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "randombytes",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "reusify",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "semver",
          "to": [
            "ISC"
          ]
        },
        {
          "from": [],
          "package": "signal-exit",
          "to": [
            "ISC"
          ]
        },
        {
          "from": [],
          "package": "source-map",
          "to": [
            "BSD-3-Clause"
          ]
        },
        {
          "from": [],
          "package": "string_decoder",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "strip-bom",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "strip-json-comments",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "util-deprecate",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "xtend",
          "to": [
            "MIT"
          ]
        },
        {
          "from": [],
          "package": "yocto-queue",
          "to": [
            "MIT"
          ]
        }
      ],
      "new_vulnerabilities": [
        {
          "aliases": [
            "CVE-2026-59873"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-59873",
            "percentile": 0.47807,
            "score": 0.00582
          },
          "fix_state": "fixed",
          "fixed_in": [
            "7.5.19"
          ],
          "id": "GHSA-23hp-3jrh-7fpw",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "tar",
          "severity": "Critical",
          "summary": "node-tar: Decompression/parse DoS via unlimited input",
          "url": "https://github.com/advisories/GHSA-23hp-3jrh-7fpw",
          "version": "7.5.13"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "16.4.1"
          ],
          "id": "GHSA-2464-fhr4-w9xw",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Critical",
          "summary": "Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used",
          "url": "https://github.com/advisories/GHSA-2464-fhr4-w9xw",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-44575"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44575",
            "percentile": 0.75717,
            "score": 0.01594
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-267c-6grr-h53f",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes",
          "url": "https://github.com/advisories/GHSA-267c-6grr-h53f",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-45109"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-45109",
            "percentile": 0.488,
            "score": 0.00602
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.6"
          ],
          "id": "GHSA-26hh-7cqf-hhc6",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up",
          "url": "https://github.com/advisories/GHSA-26hh-7cqf-hhc6",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-84375"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-84375",
            "percentile": 0.45503,
            "score": 0.00541
          },
          "fix_state": "fixed",
          "fixed_in": [
            "4.3.2"
          ],
          "id": "GHSA-2883-xcg3-v3hh",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "js-yaml",
          "severity": "High",
          "summary": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources",
          "url": "https://github.com/advisories/GHSA-2883-xcg3-v3hh",
          "version": "4.1.1"
        },
        {
          "aliases": [
            "CVE-2026-102599"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-102599",
            "percentile": 0.47509,
            "score": 0.00576
          },
          "fix_state": "fixed",
          "fixed_in": [
            "6.6.10"
          ],
          "id": "GHSA-2gc4-cqfq-p2gv",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "engine.io",
          "severity": "High",
          "summary": "Socket.IO: Engine.IO Protocol Revision Mismatch DoS",
          "url": "https://github.com/advisories/GHSA-2gc4-cqfq-p2gv",
          "version": "6.6.9"
        },
        {
          "aliases": [
            "CVE-2026-67213"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-67213",
            "percentile": 0.26279,
            "score": 0.00331
          },
          "fix_state": "fixed",
          "fixed_in": [
            "3.3.18"
          ],
          "id": "GHSA-2v37-7h3g-55p8",
          "kev": null,
          "location": "upgrade-impact/package-lock.json",
          "osv_confirmed": true,
          "package": "nanoid",
          "severity": "High",
          "summary": "nanoid: custom generators can loop indefinitely when size is zero",
          "url": "https://github.com/advisories/GHSA-2v37-7h3g-55p8",
          "version": "3.3.11"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "16.3.3"
          ],
          "id": "GHSA-2xp9-vwfh-vxw4",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Critical",
          "summary": "Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used",
          "url": "https://github.com/advisories/GHSA-2xp9-vwfh-vxw4",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-44573"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44573",
            "percentile": 0.56484,
            "score": 0.00796
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-36qx-fr4f-26g5",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n",
          "url": "https://github.com/advisories/GHSA-36qx-fr4f-26g5",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-94486"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-94486",
            "percentile": 0.01435,
            "score": 0.00114
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.3.8"
          ],
          "id": "GHSA-39w2-rjm5-chcv",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Low",
          "summary": "Next.js has information disclosure in development server's Model Context Protocol endpoint",
          "url": "https://github.com/advisories/GHSA-39w2-rjm5-chcv",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-44572"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44572",
            "percentile": 0.2093,
            "score": 0.00284
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-3g8h-86w9-wvmq",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Low",
          "summary": "Next.js's Middleware / Proxy redirects can be cache-poisoned",
          "url": "https://github.com/advisories/GHSA-3g8h-86w9-wvmq",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-13149"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-13149",
            "percentile": 0.3024,
            "score": 0.00364
          },
          "fix_state": "fixed",
          "fixed_in": [
            "2.1.2"
          ],
          "id": "GHSA-3jxr-9vmj-r5cp",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "brace-expansion",
          "severity": "High",
          "summary": "brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups",
          "url": "https://github.com/advisories/GHSA-3jxr-9vmj-r5cp",
          "version": "2.1.0"
        },
        {
          "aliases": [
            "CVE-2026-64647"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-64647",
            "percentile": 0.24677,
            "score": 0.00317
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.11"
          ],
          "id": "GHSA-4633-3j49-mh5q",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences",
          "url": "https://github.com/advisories/GHSA-4633-3j49-mh5q",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-102414"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-102414",
            "percentile": 0.28049,
            "score": 0.00345
          },
          "fix_state": "fixed",
          "fixed_in": [
            "3.1.7"
          ],
          "id": "GHSA-477h-4r7f-fvrx",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "pbkdf2",
          "severity": "Medium",
          "summary": "pbkdf2 rehashes long passwords on every iteration, enabling denial of service",
          "url": "https://github.com/advisories/GHSA-477h-4r7f-fvrx",
          "version": "3.1.5"
        },
        {
          "aliases": [
            "CVE-2026-44574"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44574",
            "percentile": 0.50508,
            "score": 0.00636
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-492v-c6pp-mqqv",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js has a Middleware / Proxy bypass through dynamic route parameter injection",
          "url": "https://github.com/advisories/GHSA-492v-c6pp-mqqv",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-64646"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-64646",
            "percentile": 0.44438,
            "score": 0.00524
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.11"
          ],
          "id": "GHSA-4c39-4ccg-62r3",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js: Unbounded Server Action payload in Edge runtime",
          "url": "https://github.com/advisories/GHSA-4c39-4ccg-62r3",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-94543"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-94543",
            "percentile": 0.43216,
            "score": 0.00506
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.3.8"
          ],
          "id": "GHSA-4jqv-mc3x-m676",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js has cache poisoning of SSG and ISR pages in self-hosted applications",
          "url": "https://github.com/advisories/GHSA-4jqv-mc3x-m676",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-49356"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-49356",
            "percentile": 0.04312,
            "score": 0.00152
          },
          "fix_state": "fixed",
          "fixed_in": [
            "7.29.6"
          ],
          "id": "GHSA-4x5r-pxfx-6jf8",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "@babel/core",
          "severity": "Low",
          "summary": "@babel/core: Arbitrary File Read via sourceMappingURL Comment",
          "url": "https://github.com/advisories/GHSA-4x5r-pxfx-6jf8",
          "version": "7.28.4"
        },
        {
          "aliases": [
            "CVE-2026-59869"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-59869",
            "percentile": 0.47992,
            "score": 0.00585
          },
          "fix_state": "fixed",
          "fixed_in": [
            "4.3.0"
          ],
          "id": "GHSA-52cp-r559-cp3m",
          "kev": null,
          "location": "package-lock.json",
          "osv_confirmed": true,
          "package": "js-yaml",
          "severity": "High",
          "summary": "js-yaml: YAML merge-key chains can force quadratic CPU consumption",
          "url": "https://github.com/advisories/GHSA-52cp-r559-cp3m",
          "version": "4.1.1"
        },
        {
          "aliases": [
            "CVE-2026-112942"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-112942",
            "percentile": 0.71406,
            "score": 0.01344
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.2.4"
          ],
          "id": "GHSA-587h-7wmj-h5pm",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "vite",
          "severity": "High",
          "summary": "launch-editor: `fs.existsSync()` existence check can be bypassed on Windows",
          "url": "https://github.com/advisories/GHSA-587h-7wmj-h5pm",
          "version": "8.2.2"
        },
        {
          "aliases": [
            "CVE-2026-104848"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-104848",
            "percentile": 0.42651,
            "score": 0.00497
          },
          "fix_state": "fixed",
          "fixed_in": [
            "2.1.1"
          ],
          "id": "GHSA-5gmw-xhrv-c9v3",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "tinypool",
          "severity": "Critical",
          "summary": "Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution",
          "url": "https://github.com/advisories/GHSA-5gmw-xhrv-c9v3",
          "version": "1.1.1"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "4.3.1"
          ],
          "id": "GHSA-5p4m-2wfm-xmqj",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "js-yaml",
          "severity": "High",
          "summary": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) \u2014 CVE-2026-59870 fix not backported",
          "url": "https://github.com/advisories/GHSA-5p4m-2wfm-xmqj",
          "version": "4.1.1"
        },
        {
          "aliases": [
            "CVE-2026-47429"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-47429",
            "percentile": 0.59014,
            "score": 0.00876
          },
          "fix_state": "fixed",
          "fixed_in": [
            "3.2.6"
          ],
          "id": "GHSA-5xrq-8626-4rwp",
          "kev": null,
          "location": "upgrade-impact/package-lock.json",
          "osv_confirmed": true,
          "package": "vitest",
          "severity": "Critical",
          "summary": "When Vitest UI server is listening, arbitrary file can be read and executed",
          "url": "https://github.com/advisories/GHSA-5xrq-8626-4rwp",
          "version": "3.2.4"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "16.4.1"
          ],
          "id": "GHSA-673q-mjm6-r5xr",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Critical",
          "summary": "Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays",
          "url": "https://github.com/advisories/GHSA-673q-mjm6-r5xr",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-93749"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-93749",
            "percentile": 0.39513,
            "score": 0.00455
          },
          "fix_state": "fixed",
          "fixed_in": [
            "1.2.2"
          ],
          "id": "GHSA-68fv-2mgg-jv7q",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "source-map-js",
          "severity": "High",
          "summary": "source-map-js allows event-loop denial of service through indexed source-map section offsets",
          "url": "https://github.com/advisories/GHSA-68fv-2mgg-jv7q",
          "version": "1.2.1"
        },
        {
          "aliases": [
            "CVE-2026-64648"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-64648",
            "percentile": 0.27241,
            "score": 0.00338
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.11"
          ],
          "id": "GHSA-68g3-v927-f742",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js: Cache confusion of response bodies for requests with bodies",
          "url": "https://github.com/advisories/GHSA-68g3-v927-f742",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-112943"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-112943",
            "percentile": 0.35737,
            "score": 0.00414
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.2.4"
          ],
          "id": "GHSA-698v-4r3x-3vcv",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "vite",
          "severity": "Medium",
          "summary": "launch-editor: escapeCmdArgs() omits % escaping on Windows",
          "url": "https://github.com/advisories/GHSA-698v-4r3x-3vcv",
          "version": "8.2.2"
        },
        {
          "aliases": [
            "CVE-2026-45623"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-45623",
            "percentile": 0.49087,
            "score": 0.00608
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.5.12"
          ],
          "id": "GHSA-6g55-p6wh-862q",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "postcss",
          "severity": "High",
          "summary": "PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments",
          "url": "https://github.com/advisories/GHSA-6g55-p6wh-862q",
          "version": "8.5.6"
        },
        {
          "aliases": [
            "CVE-2026-64642"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-64642",
            "percentile": 0.50441,
            "score": 0.00635
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.11"
          ],
          "id": "GHSA-6gpp-xcg3-4w24",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale",
          "url": "https://github.com/advisories/GHSA-6gpp-xcg3-4w24",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-102276"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-102276",
            "percentile": 0.39514,
            "score": 0.00455
          },
          "fix_state": "fixed",
          "fixed_in": [
            "5.0.10"
          ],
          "id": "GHSA-6j4f-fj2g-mc7p",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "brace-expansion",
          "severity": "High",
          "summary": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion",
          "url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p",
          "version": "5.0.9"
        },
        {
          "aliases": [
            "CVE-2026-73088"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-73088",
            "percentile": 0.51498,
            "score": 0.00658
          },
          "fix_state": "fixed",
          "fixed_in": [
            "4.28.7"
          ],
          "id": "GHSA-73wf-gq98-2v4g",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "browserslist",
          "severity": "High",
          "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)",
          "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g",
          "version": "4.26.3"
        },
        {
          "aliases": [
            "CVE-2026-84373"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-84373",
            "percentile": 0.44672,
            "score": 0.00527
          },
          "fix_state": "fixed",
          "fixed_in": [
            "4.1.11"
          ],
          "id": "GHSA-82fw-gwwq-j7x9",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "@vitest/mocker",
          "severity": "Medium",
          "summary": "Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock",
          "url": "https://github.com/advisories/GHSA-82fw-gwwq-j7x9",
          "version": "3.2.7"
        },
        {
          "aliases": [
            "CVE-2026-84373"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-84373",
            "percentile": 0.44672,
            "score": 0.00527
          },
          "fix_state": "fixed",
          "fixed_in": [
            "4.1.11"
          ],
          "id": "GHSA-82fw-gwwq-j7x9",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "vitest",
          "severity": "Medium",
          "summary": "Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock",
          "url": "https://github.com/advisories/GHSA-82fw-gwwq-j7x9",
          "version": "3.2.7"
        },
        {
          "aliases": [
            "CVE-2025-14505"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2025-14505",
            "percentile": 0.07579,
            "score": 0.0018
          },
          "fix_state": "not-fixed",
          "fixed_in": [],
          "id": "GHSA-848j-6mx2-7j84",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "elliptic",
          "severity": "Low",
          "summary": "Elliptic Uses a Cryptographic Primitive with a Risky Implementation",
          "url": "https://github.com/advisories/GHSA-848j-6mx2-7j84",
          "version": "6.6.1"
        },
        {
          "aliases": [
            "CVE-2026-104849"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-104849",
            "percentile": 0.41776,
            "score": 0.00485
          },
          "fix_state": "fixed",
          "fixed_in": [
            "2.1.2"
          ],
          "id": "GHSA-85c8-ppgw-ccpr",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "tinypool",
          "severity": "Critical",
          "summary": "Tinypool: Prototype Pollution Gadget to RCE in run() options",
          "url": "https://github.com/advisories/GHSA-85c8-ppgw-ccpr",
          "version": "1.1.1"
        },
        {
          "aliases": [
            "CVE-2026-64649"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-64649",
            "percentile": 0.39802,
            "score": 0.00459
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.11"
          ],
          "id": "GHSA-89xv-2m56-2m9x",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js: Server-Side Request Forgery in Server Actions on custom servers",
          "url": "https://github.com/advisories/GHSA-89xv-2m56-2m9x",
          "version": "16.1.7"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-8h8q-6873-q5fj",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js Vulnerable to Denial of Service with Server Components",
          "url": "https://github.com/advisories/GHSA-8h8q-6873-q5fj",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-59874"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-59874",
            "percentile": 0.37686,
            "score": 0.00434
          },
          "fix_state": "fixed",
          "fixed_in": [
            "7.5.18"
          ],
          "id": "GHSA-8x88-c5mf-7j5w",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "tar",
          "severity": "High",
          "summary": "node-tar: Negative tar entry size causes infinite loop in archive replace",
          "url": "https://github.com/advisories/GHSA-8x88-c5mf-7j5w",
          "version": "7.5.13"
        },
        {
          "aliases": [
            "CVE-2026-64643"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-64643",
            "percentile": 0.43515,
            "score": 0.0051
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.11"
          ],
          "id": "GHSA-955p-x3mx-jcvp",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js: Unauthenticated disclosure of internal Server Function endpoints",
          "url": "https://github.com/advisories/GHSA-955p-x3mx-jcvp",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-112945"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-112945",
            "percentile": 0.5207,
            "score": 0.00672
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.2.4"
          ],
          "id": "GHSA-9jrq-w75r-8gcw",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "vite",
          "severity": "Low",
          "summary": "Vite: Cross origin script execution through Vite custom middleware",
          "url": "https://github.com/advisories/GHSA-9jrq-w75r-8gcw",
          "version": "8.2.2"
        },
        {
          "aliases": [
            "CVE-2026-44578"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44578",
            "percentile": 0.98454,
            "score": 0.35539
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-c4j6-fc7j-m34r",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades",
          "url": "https://github.com/advisories/GHSA-c4j6-fc7j-m34r",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-73089"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-73089",
            "percentile": 0.51386,
            "score": 0.00655
          },
          "fix_state": "fixed",
          "fixed_in": [
            "4.28.7"
          ],
          "id": "GHSA-c83g-rgw3-j3cx",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "browserslist",
          "severity": "High",
          "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM",
          "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx",
          "version": "4.26.3"
        },
        {
          "aliases": [
            "CVE-2026-94483"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-94483",
            "percentile": 0.26157,
            "score": 0.0033
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.3.8"
          ],
          "id": "GHSA-cjq9-62q9-8jv4",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js has Server-Side Request Forgery in Image Optimization",
          "url": "https://github.com/advisories/GHSA-cjq9-62q9-8jv4",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-114125"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-114125",
            "percentile": 0.32565,
            "score": 0.00385
          },
          "fix_state": "fixed",
          "fixed_in": [
            "10.6.2"
          ],
          "id": "GHSA-f2ph-cmg5-wxc8",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "storybook",
          "severity": "Critical",
          "summary": "Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites",
          "url": "https://github.com/advisories/GHSA-f2ph-cmg5-wxc8",
          "version": "10.3.6"
        },
        {
          "aliases": [
            "CVE-2026-94485"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-94485",
            "percentile": 0.06693,
            "score": 0.00173
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.3.8"
          ],
          "id": "GHSA-f87g-xv8r-7p7x",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass",
          "url": "https://github.com/advisories/GHSA-f87g-xv8r-7p7x",
          "version": "16.1.7"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "0.35.0"
          ],
          "id": "GHSA-f88m-g3jw-g9cj",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "sharp",
          "severity": "High",
          "summary": "sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591",
          "url": "https://github.com/advisories/GHSA-f88m-g3jw-g9cj",
          "version": "0.34.5"
        },
        {
          "aliases": [
            "CVE-2026-44581"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44581",
            "percentile": 0.12886,
            "score": 0.00222
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-ffhc-5mcf-pf4q",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces",
          "url": "https://github.com/advisories/GHSA-ffhc-5mcf-pf4q",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-53571"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-53571",
            "percentile": 0.47541,
            "score": 0.00577
          },
          "fix_state": "fixed",
          "fixed_in": [
            "7.3.5"
          ],
          "id": "GHSA-fx2h-pf6j-xcff",
          "kev": null,
          "location": "upgrade-impact/package-lock.json",
          "osv_confirmed": true,
          "package": "vite",
          "severity": "Medium",
          "summary": "vite: `server.fs.deny` bypass on Windows alternate paths",
          "url": "https://github.com/advisories/GHSA-fx2h-pf6j-xcff",
          "version": "7.3.2"
        },
        {
          "aliases": [
            "CVE-2026-69153"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-69153",
            "percentile": 0.39208,
            "score": 0.00451
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.5.23"
          ],
          "id": "GHSA-fxqj-rqcc-2cmp",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "postcss",
          "severity": "Medium",
          "summary": "PostCSS: incomplete fix of GHSA-6g55-p6wh-862q \u2014 attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",
          "url": "https://github.com/advisories/GHSA-fxqj-rqcc-2cmp",
          "version": "8.5.6"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "0.28.1"
          ],
          "id": "GHSA-g7r4-m6w7-qqqr",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "esbuild",
          "severity": "Low",
          "summary": "esbuild allows arbitrary file read when running the development server on Windows",
          "url": "https://github.com/advisories/GHSA-g7r4-m6w7-qqqr",
          "version": "0.27.7"
        },
        {
          "aliases": [
            "CVE-2026-59875"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-59875",
            "percentile": 0.29158,
            "score": 0.00354
          },
          "fix_state": "fixed",
          "fixed_in": [
            "7.5.17"
          ],
          "id": "GHSA-gvwx-54wh-qm9j",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "tar",
          "severity": "Medium",
          "summary": "node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records",
          "url": "https://github.com/advisories/GHSA-gvwx-54wh-qm9j",
          "version": "7.5.13"
        },
        {
          "aliases": [
            "CVE-2026-44580"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44580",
            "percentile": 0.1048,
            "score": 0.00205
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-gx5p-jg67-6x7h",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js has cross-site scripting in beforeInteractive scripts with untrusted input",
          "url": "https://github.com/advisories/GHSA-gx5p-jg67-6x7h",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-44577"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44577",
            "percentile": 0.54562,
            "score": 0.00739
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-h64f-5h5j-jqjh",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js has a Denial of Service in the Image Optimization API",
          "url": "https://github.com/advisories/GHSA-h64f-5h5j-jqjh",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-53550"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-53550",
            "percentile": 0.35866,
            "score": 0.00415
          },
          "fix_state": "fixed",
          "fixed_in": [
            "4.2.0"
          ],
          "id": "GHSA-h67p-54hq-rp68",
          "kev": null,
          "location": "package-lock.json",
          "osv_confirmed": true,
          "package": "js-yaml",
          "severity": "Medium",
          "summary": "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
          "url": "https://github.com/advisories/GHSA-h67p-54hq-rp68",
          "version": "4.1.1"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "3.1.0"
          ],
          "id": "GHSA-jggr-w7fw-pc2j",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "fast-copy",
          "severity": "Medium",
          "summary": "fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values",
          "url": "https://github.com/advisories/GHSA-jggr-w7fw-pc2j",
          "version": "3.0.1"
        },
        {
          "aliases": [
            "CVE-2026-64641"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-64641",
            "percentile": 0.5839,
            "score": 0.00856
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.11"
          ],
          "id": "GHSA-m99w-x7hq-7vfj",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js: Denial of Service in App Router using Server Actions",
          "url": "https://github.com/advisories/GHSA-m99w-x7hq-7vfj",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-94484"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-94484",
            "percentile": 0.15708,
            "score": 0.00244
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.3.8"
          ],
          "id": "GHSA-mcj8-r9mp-w47p",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service",
          "url": "https://github.com/advisories/GHSA-mcj8-r9mp-w47p",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-44579"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44579",
            "percentile": 0.54822,
            "score": 0.00746
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-mg66-mrh9-m8jx",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components",
          "url": "https://github.com/advisories/GHSA-mg66-mrh9-m8jx",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-14257"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-14257",
            "percentile": 0.50816,
            "score": 0.00643
          },
          "fix_state": "fixed",
          "fixed_in": [
            "2.1.3"
          ],
          "id": "GHSA-mh99-v99m-4gvg",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "brace-expansion",
          "severity": "High",
          "summary": "brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash",
          "url": "https://github.com/advisories/GHSA-mh99-v99m-4gvg",
          "version": "2.1.0"
        },
        {
          "aliases": [
            "CVE-2026-75604"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-75604",
            "percentile": 0.81742,
            "score": 0.02105
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.3.3"
          ],
          "id": "GHSA-p293-qw3h-jr36",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Critical",
          "summary": "Next.js: Unauthenticated Remote Code Execution on windows-hosted servers",
          "url": "https://github.com/advisories/GHSA-p293-qw3h-jr36",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-94482"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-94482",
            "percentile": 0.32732,
            "score": 0.00386
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.4.1"
          ],
          "id": "GHSA-p3m5-59mp-jv5r",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js: Denial of Service in App Router using Server Actions",
          "url": "https://github.com/advisories/GHSA-p3m5-59mp-jv5r",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-64645"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-64645",
            "percentile": 0.35671,
            "score": 0.00414
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.11"
          ],
          "id": "GHSA-p9j2-gv94-2wf4",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname",
          "url": "https://github.com/advisories/GHSA-p9j2-gv94-2wf4",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-114126"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-114126",
            "percentile": 0.44775,
            "score": 0.00529
          },
          "fix_state": "fixed",
          "fixed_in": [
            "10.6.2"
          ],
          "id": "GHSA-px85-f4q5-jh77",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "storybook",
          "severity": "High",
          "summary": "Storybook dev server vulnerable to code injection from the local network",
          "url": "https://github.com/advisories/GHSA-px85-f4q5-jh77",
          "version": "10.3.6"
        },
        {
          "aliases": [
            "CVE-2026-102277"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-102277",
            "percentile": 0.37116,
            "score": 0.00428
          },
          "fix_state": "fixed",
          "fixed_in": [
            "5.0.12"
          ],
          "id": "GHSA-q2hr-2g5m-vwhr",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "brace-expansion",
          "severity": "Medium",
          "summary": "brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service",
          "url": "https://github.com/advisories/GHSA-q2hr-2g5m-vwhr",
          "version": "5.0.9"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.3"
          ],
          "id": "GHSA-q4gf-8mx6-v5v3",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "High",
          "summary": "Next.js has a Denial of Service with Server Components",
          "url": "https://github.com/advisories/GHSA-q4gf-8mx6-v5v3",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-64644"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-64644",
            "percentile": 0.5186,
            "score": 0.00666
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.11"
          ],
          "id": "GHSA-q8wf-6r8g-63ch",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js: Denial of Service in the Image Optimization API using SVGs",
          "url": "https://github.com/advisories/GHSA-q8wf-6r8g-63ch",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-102278"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-102278",
            "percentile": 0.42209,
            "score": 0.00491
          },
          "fix_state": "fixed",
          "fixed_in": [
            "5.0.11"
          ],
          "id": "GHSA-qhr7-859c-m2p7",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "brace-expansion",
          "severity": "High",
          "summary": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion",
          "url": "https://github.com/advisories/GHSA-qhr7-859c-m2p7",
          "version": "5.0.9"
        },
        {
          "aliases": [
            "CVE-2026-41305"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-41305",
            "percentile": 0.10477,
            "score": 0.00205
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.5.10"
          ],
          "id": "GHSA-qx2v-qp2m-jg93",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "postcss",
          "severity": "Medium",
          "summary": "PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
          "url": "https://github.com/advisories/GHSA-qx2v-qp2m-jg93",
          "version": "8.5.6"
        },
        {
          "aliases": [
            "CVE-2026-112949"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-112949",
            "percentile": 0.27043,
            "score": 0.00336
          },
          "fix_state": "fixed",
          "fixed_in": [
            "4.1.12"
          ],
          "id": "GHSA-qxg6-89mg-rqv8",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "@vitest/mocker",
          "severity": "Medium",
          "summary": "Vitest: Code injection via unauthenticated manual mock registration",
          "url": "https://github.com/advisories/GHSA-qxg6-89mg-rqv8",
          "version": "4.1.11"
        },
        {
          "aliases": [
            "CVE-2026-73646"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-73646",
            "percentile": 0.44814,
            "score": 0.0053
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.5.18"
          ],
          "id": "GHSA-r28c-9q8g-f849",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "postcss",
          "severity": "High",
          "summary": "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure",
          "url": "https://github.com/advisories/GHSA-r28c-9q8g-f849",
          "version": "8.5.6"
        },
        {
          "aliases": [
            "CVE-2026-73566"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-73566",
            "percentile": 0.44902,
            "score": 0.00531
          },
          "fix_state": "fixed",
          "fixed_in": [
            "7.5.21"
          ],
          "id": "GHSA-r292-9mhp-454m",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "tar",
          "severity": "High",
          "summary": "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection",
          "url": "https://github.com/advisories/GHSA-r292-9mhp-454m",
          "version": "7.5.13"
        },
        {
          "aliases": [
            "CVE-2026-112944"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-112944",
            "percentile": 0.5338,
            "score": 0.00705
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.2.4"
          ],
          "id": "GHSA-r825-w8mm-5pxw",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "vite",
          "severity": "Medium",
          "summary": "launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors",
          "url": "https://github.com/advisories/GHSA-r825-w8mm-5pxw",
          "version": "8.2.2"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "0.35.4"
          ],
          "id": "GHSA-rgj7-g3m4-5g8c",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "sharp",
          "severity": "High",
          "summary": "sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545",
          "url": "https://github.com/advisories/GHSA-rgj7-g3m4-5g8c",
          "version": "0.34.5"
        },
        {
          "aliases": [
            "CVE-2026-69152"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-69152",
            "percentile": 0.51004,
            "score": 0.00647
          },
          "fix_state": "fixed",
          "fixed_in": [
            "2.1.4"
          ],
          "id": "GHSA-rgw5-rvv9-x895",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "brace-expansion",
          "severity": "High",
          "summary": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
          "url": "https://github.com/advisories/GHSA-rgw5-rvv9-x895",
          "version": "2.1.0"
        },
        {
          "aliases": [
            "CVE-2026-112946"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-112946",
            "percentile": 0.58267,
            "score": 0.00852
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.2.4"
          ],
          "id": "GHSA-rq7h-c2jc-7f22",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "vite",
          "severity": "Medium",
          "summary": "Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine",
          "url": "https://github.com/advisories/GHSA-rq7h-c2jc-7f22",
          "version": "8.2.2"
        },
        {
          "aliases": [
            "CVE-2026-53632"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-53632",
            "percentile": 0.35125,
            "score": 0.00408
          },
          "fix_state": "fixed",
          "fixed_in": [
            "7.3.5"
          ],
          "id": "GHSA-v6wh-96g9-6wx3",
          "kev": null,
          "location": "upgrade-impact/package-lock.json",
          "osv_confirmed": true,
          "package": "vite",
          "severity": "Medium",
          "summary": "launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows",
          "url": "https://github.com/advisories/GHSA-v6wh-96g9-6wx3",
          "version": "7.3.2"
        },
        {
          "aliases": [
            "CVE-2026-112947"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-112947",
            "percentile": 0.42982,
            "score": 0.00502
          },
          "fix_state": "fixed",
          "fixed_in": [
            "8.2.4"
          ],
          "id": "GHSA-vfpm-58rq-9qcg",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "vite",
          "severity": "Medium",
          "summary": "Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`",
          "url": "https://github.com/advisories/GHSA-vfpm-58rq-9qcg",
          "version": "8.2.2"
        },
        {
          "aliases": [
            "CVE-2026-44582"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44582",
            "percentile": 0.11891,
            "score": 0.00215
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-vfv6-92ff-j949",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Low",
          "summary": "Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting",
          "url": "https://github.com/advisories/GHSA-vfv6-92ff-j949",
          "version": "16.1.7"
        },
        {
          "aliases": [
            "CVE-2026-53655"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-53655",
            "percentile": 0.04762,
            "score": 0.00156
          },
          "fix_state": "fixed",
          "fixed_in": [
            "7.5.16"
          ],
          "id": "GHSA-vmf3-w455-68vh",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "tar",
          "severity": "Medium",
          "summary": "node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)",
          "url": "https://github.com/advisories/GHSA-vmf3-w455-68vh",
          "version": "7.5.13"
        },
        {
          "aliases": [
            "CVE-2026-45819"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-45819",
            "percentile": 0.43259,
            "score": 0.00507
          },
          "fix_state": "fixed",
          "fixed_in": [
            "2.11.0"
          ],
          "id": "GHSA-w5vr-8v7q-w6rv",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "baseline-browser-mapping",
          "severity": "Medium",
          "summary": "baseline-browser-mapping process termination on invalid input causes denial of service",
          "url": "https://github.com/advisories/GHSA-w5vr-8v7q-w6rv",
          "version": "2.8.19"
        },
        {
          "aliases": [
            "CVE-2026-59871"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-59871",
            "percentile": 0.50871,
            "score": 0.00644
          },
          "fix_state": "fixed",
          "fixed_in": [
            "7.5.18"
          ],
          "id": "GHSA-w8wr-v893-vjvp",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "tar",
          "severity": "Medium",
          "summary": "node-tar: Process crash via PAX numeric path type confusion",
          "url": "https://github.com/advisories/GHSA-w8wr-v893-vjvp",
          "version": "7.5.13"
        },
        {
          "aliases": [
            "CVE-2026-44576"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-44576",
            "percentile": 0.2213,
            "score": 0.00295
          },
          "fix_state": "fixed",
          "fixed_in": [
            "16.2.5"
          ],
          "id": "GHSA-wfc6-r584-vfw7",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "next",
          "severity": "Medium",
          "summary": "Next.js vulnerable to cache poisoning in React Server Component responses",
          "url": "https://github.com/advisories/GHSA-wfc6-r584-vfw7",
          "version": "16.1.7"
        },
        {
          "aliases": [],
          "ecosystem": "npm",
          "epss": null,
          "fix_state": "fixed",
          "fixed_in": [
            "0.35.5"
          ],
          "id": "GHSA-wq5f-xc86-pv6w",
          "kev": null,
          "location": "backend/package-lock.json",
          "osv_confirmed": true,
          "package": "sharp",
          "severity": "High",
          "summary": "sharp : Vulnerability in librsvg dependency CVE-2026-96889",
          "url": "https://github.com/advisories/GHSA-wq5f-xc86-pv6w",
          "version": "0.34.5"
        },
        {
          "aliases": [
            "CVE-2026-112950"
          ],
          "ecosystem": "npm",
          "epss": {
            "cve": "CVE-2026-112950",
            "percentile": 0.4557,
            "score": 0.00542
          },
          "fix_state": "fixed",
          "fixed_in": [
            "4.1.12"
          ],
          "id": "GHSA-xp26-3454-mjgp",
          "kev": null,
          "location": "frontend/package-lock.json",
          "osv_confirmed": true,
          "package": "@vitest/mocker",
          "severity": "Medium",
          "summary": "Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix",
          "url": "https://github.com/advisories/GHSA-xp26-3454-mjgp",
          "version": "4.1.11"
        }
      ],
      "previous_ref": "v0.167.4",
      "release_changed": false,
      "removed": [],
      "resolved_vulnerabilities": [],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 0
    },
    "commit": "5c13a7ad8de9e6ccf64e18e46e3113af22697fcc",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-bdd-tests.yml",
        "name": "actions/cache",
        "purl": "pkg:github/actions/cache@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-be-ts-and-lint.yml",
        "name": "actions/cache",
        "purl": "pkg:github/actions/cache@v4.3.0",
        "version": "v4.3.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-api-for-breaking-changes.yml",
        "name": "actions/cache/restore",
        "purl": "pkg:github/actions/cache@v6.1.0#restore",
        "version": "v6.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-api-for-breaking-changes.yml",
        "name": "actions/cache/save",
        "purl": "pkg:github/actions/cache@v6.1.0#save",
        "version": "v6.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/helm-release-infisical-core.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v2",
        "version": "v2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-api-for-breaking-changes.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-be-ts-and-lint.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v4.2.2",
        "version": "v4.2.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/issue-labeler.yml",
        "name": "actions/github-script",
        "purl": "pkg:github/actions/github-script@v7.1.0",
        "version": "v7.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-api-for-breaking-changes.yml",
        "name": "actions/github-script",
        "purl": "pkg:github/actions/github-script@v8",
        "version": "v8"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-go-tests.yml",
        "name": "actions/setup-go",
        "purl": "pkg:github/actions/setup-go@v5.5.0",
        "version": "v5.5.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/validate-db-schemas.yml",
        "name": "actions/setup-node",
        "purl": "pkg:github/actions/setup-node@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-bdd-tests.yml",
        "name": "actions/setup-node",
        "purl": "pkg:github/actions/setup-node@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-be-ts-and-lint.yml",
        "name": "actions/setup-node",
        "purl": "pkg:github/actions/setup-node@v4.4.0",
        "version": "v4.4.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/helm-release-infisical-core.yml",
        "name": "actions/setup-python",
        "purl": "pkg:github/actions/setup-python@v5.3.0",
        "version": "v5.3.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/generate-release-changelog.yml",
        "name": "actions/setup-python",
        "purl": "pkg:github/actions/setup-python@v5.6.0",
        "version": "v5.6.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-bdd-tests.yml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/trivy-image-scan/action.yml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v4.6.2",
        "version": "v4.6.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/trivy-image-scan/action.yml",
        "name": "aquasecurity/trivy-action",
        "purl": "pkg:github/aquasecurity/trivy-action@v0.36.0",
        "version": "v0.36.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-bdd-tests.yml",
        "name": "astral-sh/setup-uv",
        "purl": "pkg:github/astral-sh/setup-uv@v5",
        "version": "v5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
        "name": "aws-actions/configure-aws-credentials",
        "purl": "pkg:github/aws-actions/configure-aws-credentials@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/helm-release-infisical-core.yml",
        "name": "azure/setup-helm",
        "purl": "pkg:github/azure/setup-helm@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/helm-release-infisical-core.yml",
        "name": "azure/setup-helm",
        "purl": "pkg:github/azure/setup-helm@v4.2.0",
        "version": "v4.2.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-storybook-chromatic.yml",
        "name": "chromaui/action",
        "purl": "pkg:github/chromaui/action@v18.7.2",
        "version": "v18.7.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
        "name": "depot/build-push-action",
        "purl": "pkg:github/depot/build-push-action@v1",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
        "name": "depot/setup-action",
        "purl": "pkg:github/depot/setup-action@v1.7.1",
        "version": "v1.7.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-bdd-tests.yml",
        "name": "docker/bake-action",
        "purl": "pkg:github/docker/bake-action@v5",
        "version": "v5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/generate-openapi-spec/action.yml",
        "name": "docker/build-push-action",
        "purl": "pkg:github/docker/build-push-action@v6.19.2",
        "version": "v6.19.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/publish-fips-toolchain.yml",
        "name": "docker/login-action",
        "purl": "pkg:github/docker/login-action@v3.7.0",
        "version": "v3.7.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-api-for-breaking-changes.yml",
        "name": "docker/setup-buildx-action",
        "purl": "pkg:github/docker/setup-buildx-action@v3.12.0",
        "version": "v3.12.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-go-tests.yml",
        "name": "golangci/golangci-lint-action",
        "purl": "pkg:github/golangci/golangci-lint-action@v8.0.0",
        "version": "v8.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/helm-release-infisical-core.yml",
        "name": "helm/chart-testing-action",
        "purl": "pkg:github/helm/chart-testing-action@v2.7.0",
        "version": "v2.7.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/helm-release-infisical-core.yml",
        "name": "helm/kind-action",
        "purl": "pkg:github/helm/kind-action@v1.12.0",
        "version": "v1.12.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-tests.yml",
        "name": "jlumbroso/free-disk-space",
        "purl": "pkg:github/jlumbroso/free-disk-space@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/check-api-for-breaking-changes.yml",
        "name": "KengoTODA/actions-setup-docker-compose",
        "purl": "pkg:github/KengoTODA/actions-setup-docker-compose@v1",
        "version": "v1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-bdd-tests.yml",
        "name": "KengoTODA/actions-setup-docker-compose",
        "purl": "pkg:github/KengoTODA/actions-setup-docker-compose@v1.2.4",
        "version": "v1.2.4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/run-backend-bdd-tests.yml",
        "name": "nick-fields/retry",
        "purl": "pkg:github/nick-fields/retry@v3.0.2",
        "version": "v3.0.2"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
        "name": "snyk/actions/docker",
        "purl": "pkg:github/snyk/actions@2026#docker",
        "version": "2026"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "cloud.google.com/go",
        "purl": "pkg:golang/cloud.google.com/go@v0.123.0",
        "version": "v0.123.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "cloud.google.com/go/auth",
        "purl": "pkg:golang/cloud.google.com/go/auth@v0.20.0",
        "version": "v0.20.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "cloud.google.com/go/auth/oauth2adapt",
        "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8",
        "version": "v0.2.8"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "cloud.google.com/go/compute/metadata",
        "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "cloud.google.com/go/iam",
        "purl": "pkg:golang/cloud.google.com/go/iam@v1.7.0",
        "version": "v1.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "cloud.google.com/go/kms",
        "purl": "pkg:golang/cloud.google.com/go/kms@v1.31.0",
        "version": "v1.31.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "cloud.google.com/go/longrunning",
        "purl": "pkg:golang/cloud.google.com/go/longrunning@v0.9.0",
        "version": "v0.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "dario.cat/mergo",
        "purl": "pkg:golang/dario.cat/mergo@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.41.7",
        "version": "v1.41.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/config",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.18",
        "version": "v1.32.18"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/credentials",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.17",
        "version": "v1.19.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.23",
        "version": "v1.18.23"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/configsources",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.23",
        "version": "v1.4.23"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.23",
        "version": "v2.7.23"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/internal/v4a",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.24",
        "version": "v1.4.24"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.9",
        "version": "v1.13.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.23",
        "version": "v1.13.23"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/kms",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/kms@v1.52.0",
        "version": "v1.52.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/signin",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.0.11",
        "version": "v1.0.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sso",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.30.17",
        "version": "v1.30.17"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.36.0",
        "version": "v1.36.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/aws-sdk-go-v2/service/sts",
        "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.42.1",
        "version": "v1.42.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/aws/smithy-go",
        "purl": "pkg:golang/github.com/aws/smithy-go@v1.25.1",
        "version": "v1.25.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/Azure/go-ansiterm",
        "purl": "pkg:golang/github.com/Azure/go-ansiterm@v0.0.0-20250102033503-faa5f7b0171c",
        "version": "v0.0.0-20250102033503-faa5f7b0171c"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/bahlo/generic-list-go",
        "purl": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/bmatcuk/doublestar/v4",
        "purl": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.10.0",
        "version": "v4.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/buger/jsonparser",
        "purl": "pkg:golang/github.com/buger/jsonparser@v1.1.2",
        "version": "v1.1.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/cenkalti/backoff/v4",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v4@v4.3.0",
        "version": "v4.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/cenkalti/backoff/v5",
        "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3",
        "version": "v5.0.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/cespare/xxhash/v2",
        "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/containerd/errdefs",
        "purl": "pkg:golang/github.com/containerd/errdefs@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/containerd/errdefs/pkg",
        "purl": "pkg:golang/github.com/containerd/errdefs/pkg@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/containerd/log",
        "purl": "pkg:golang/github.com/containerd/log@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/containerd/platforms",
        "purl": "pkg:golang/github.com/containerd/platforms@v1.0.0-rc.2",
        "version": "v1.0.0-rc.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/cpuguy83/dockercfg",
        "purl": "pkg:golang/github.com/cpuguy83/dockercfg@v0.3.2",
        "version": "v0.3.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/creack/pty",
        "purl": "pkg:golang/github.com/creack/pty@v1.1.24",
        "version": "v1.1.24"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "ISC"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/davecgh/go-spew",
        "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc",
        "version": "v1.1.2-0.20180830191138-d8f796af33cc"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/dgryski/go-rendezvous",
        "purl": "pkg:golang/github.com/dgryski/go-rendezvous@v0.0.0-20200823014737-9f7001d12a5f",
        "version": "v0.0.0-20200823014737-9f7001d12a5f"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/distribution/reference",
        "purl": "pkg:golang/github.com/distribution/reference@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/docker/docker",
        "purl": "pkg:golang/github.com/docker/docker@v28.5.2%2Bincompatible",
        "version": "v28.5.2+incompatible"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/docker/go-connections",
        "purl": "pkg:golang/github.com/docker/go-connections@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/docker/go-units",
        "purl": "pkg:golang/github.com/docker/go-units@v0.5.0",
        "version": "v0.5.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "sha256:8bd4ed8a1bf98aa57c6fb86aa284dc30f49398d6456fa971d632d460e47d393d"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/doordash-oss/oapi-codegen-dd/v3",
        "purl": "pkg:golang/github.com/doordash-oss/oapi-codegen-dd/v3@v3.75.5",
        "version": "v3.75.5"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/ebitengine/purego",
        "purl": "pkg:golang/github.com/ebitengine/purego@v0.10.0",
        "version": "v0.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/felixge/httpsnoop",
        "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4",
        "version": "v1.0.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/gabriel-vasile/mimetype",
        "purl": "pkg:golang/github.com/gabriel-vasile/mimetype@v1.4.13",
        "version": "v1.4.13"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/go-chi/chi/v5",
        "purl": "pkg:golang/github.com/go-chi/chi/v5@v5.2.4",
        "version": "v5.2.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/go-chi/httprate",
        "purl": "pkg:golang/github.com/go-chi/httprate@v0.15.0",
        "version": "v0.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/go-logr/logr",
        "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3",
        "version": "v1.4.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/go-logr/stdr",
        "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2",
        "version": "v1.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/go-ole/go-ole",
        "purl": "pkg:golang/github.com/go-ole/go-ole@v1.2.6",
        "version": "v1.2.6"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/go-playground/assert/v2",
        "purl": "pkg:golang/github.com/go-playground/assert/v2@v2.2.0",
        "version": "v2.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/go-playground/locales",
        "purl": "pkg:golang/github.com/go-playground/locales@v0.14.1",
        "version": "v0.14.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/go-playground/universal-translator",
        "purl": "pkg:golang/github.com/go-playground/universal-translator@v0.18.1",
        "version": "v0.18.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/go-playground/validator/v10",
        "purl": "pkg:golang/github.com/go-playground/validator/v10@v10.30.1",
        "version": "v10.30.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/go-resty/resty/v2",
        "purl": "pkg:golang/github.com/go-resty/resty/v2@v2.17.2",
        "version": "v2.17.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/golang-jwt/jwt/v5",
        "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1",
        "version": "v5.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/google/go-cmp",
        "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0",
        "version": "v0.7.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/google/s2a-go",
        "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9",
        "version": "v0.1.9"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/google/uuid",
        "purl": "pkg:golang/github.com/google/uuid@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/googleapis/enterprise-certificate-proxy",
        "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.16",
        "version": "v0.3.16"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/googleapis/gax-go/v2",
        "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.22.0",
        "version": "v2.22.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/grpc-ecosystem/grpc-gateway/v2",
        "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.28.0",
        "version": "v2.28.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/hibiken/asynq",
        "purl": "pkg:golang/github.com/hibiken/asynq@v0.26.0",
        "version": "v0.26.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/iancoleman/strcase",
        "purl": "pkg:golang/github.com/iancoleman/strcase@v0.3.0",
        "version": "v0.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/infisical/gocasl",
        "purl": "pkg:golang/github.com/infisical/gocasl@v0.0.7",
        "version": "v0.0.7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/jackc/pgpassfile",
        "purl": "pkg:golang/github.com/jackc/pgpassfile@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/jackc/pgservicefile",
        "purl": "pkg:golang/github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761",
        "version": "v0.0.0-20240606120523-5a60cdf6a761"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/jackc/pgx/v5",
        "purl": "pkg:golang/github.com/jackc/pgx/v5@v5.9.2",
        "version": "v5.9.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/jackc/puddle/v2",
        "purl": "pkg:golang/github.com/jackc/puddle/v2@v2.2.2",
        "version": "v2.2.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/klauspost/compress",
        "purl": "pkg:golang/github.com/klauspost/compress@v1.18.3",
        "version": "v1.18.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/klauspost/cpuid/v2",
        "purl": "pkg:golang/github.com/klauspost/cpuid/v2@v2.2.10",
        "version": "v2.2.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/leodido/go-urn",
        "purl": "pkg:golang/github.com/leodido/go-urn@v1.4.0",
        "version": "v1.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/lufia/plan9stats",
        "purl": "pkg:golang/github.com/lufia/plan9stats@v0.0.0-20211012122336-39d0f177ccd0",
        "version": "v0.0.0-20211012122336-39d0f177ccd0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/magiconair/properties",
        "purl": "pkg:golang/github.com/magiconair/properties@v1.8.10",
        "version": "v1.8.10"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/Microsoft/go-winio",
        "purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.2",
        "version": "v0.6.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/miekg/pkcs11",
        "purl": "pkg:golang/github.com/miekg/pkcs11@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/moby/docker-image-spec",
        "purl": "pkg:golang/github.com/moby/docker-image-spec@v1.3.1",
        "version": "v1.3.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/moby/go-archive",
        "purl": "pkg:golang/github.com/moby/go-archive@v0.2.0",
        "version": "v0.2.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/moby/patternmatcher",
        "purl": "pkg:golang/github.com/moby/patternmatcher@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/moby/sys/sequential",
        "purl": "pkg:golang/github.com/moby/sys/sequential@v0.6.0",
        "version": "v0.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/moby/sys/user",
        "purl": "pkg:golang/github.com/moby/sys/user@v0.4.0",
        "version": "v0.4.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/moby/sys/userns",
        "purl": "pkg:golang/github.com/moby/sys/userns@v0.1.0",
        "version": "v0.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/moby/term",
        "purl": "pkg:golang/github.com/moby/term@v0.5.2",
        "version": "v0.5.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/morikuni/aec",
        "purl": "pkg:golang/github.com/morikuni/aec@v1.1.0",
        "version": "v1.1.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/opencontainers/go-digest",
        "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/opencontainers/image-spec",
        "purl": "pkg:golang/github.com/opencontainers/image-spec@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/pb33f/jsonpath",
        "purl": "pkg:golang/github.com/pb33f/jsonpath@v0.8.1",
        "version": "v0.8.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT",
          "sha256:10b2feaff7970ee4cafdb8067c3316302050f615dcbe944e76dc6bb1d234b479",
          "sha256:5ef750d9998008fcc3e7fc107a2caff239b058cf268b1b2f6869aac82a56f284",
          "sha256:8a777586e29ea8a4d95cfd5d8169dcbf87d6fab10f88497b90eac06004ab9102",
          "sha256:8b3c0103d7f51960a3389d8641d8870bd73d93ddc22462a9df45cfe6d5df9969",
          "sha256:b286d2dfaad5eae310687bd7c71cd321bce1e5bb34651b871374b8ee07dba12b",
          "sha256:c17086340414e4b6a28fdd07bc77e427e68a385593155acc75a94237d9846ff5"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/pb33f/libopenapi",
        "purl": "pkg:golang/github.com/pb33f/libopenapi@v0.34.3",
        "version": "v0.34.3"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/pb33f/ordered-map/v2",
        "purl": "pkg:golang/github.com/pb33f/ordered-map/v2@v2.3.0",
        "version": "v2.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/pkg/errors",
        "purl": "pkg:golang/github.com/pkg/errors@v0.9.1",
        "version": "v0.9.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/pmezard/go-difflib",
        "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2",
        "version": "v1.0.1-0.20181226105442-5d4384ee4fb2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/power-devops/perfstat",
        "purl": "pkg:golang/github.com/power-devops/perfstat@v0.0.0-20240221224432-82ca36839d55",
        "version": "v0.0.0-20240221224432-82ca36839d55"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/redis/go-redis/v9",
        "purl": "pkg:golang/github.com/redis/go-redis/v9@v9.18.0",
        "version": "v9.18.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/robfig/cron/v3",
        "purl": "pkg:golang/github.com/robfig/cron/v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/shirou/gopsutil/v4",
        "purl": "pkg:golang/github.com/shirou/gopsutil/v4@v4.26.2",
        "version": "v4.26.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/sirupsen/logrus",
        "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4",
        "version": "v1.9.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/spf13/cast",
        "purl": "pkg:golang/github.com/spf13/cast@v1.10.0",
        "version": "v1.10.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "github.com/stretchr/testify",
        "purl": "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "version": "v1.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/testcontainers/testcontainers-go",
        "purl": "pkg:golang/github.com/testcontainers/testcontainers-go@v0.41.0",
        "version": "v0.41.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/thales-e-security/pool",
        "purl": "pkg:golang/github.com/thales-e-security/pool@v0.0.2",
        "version": "v0.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/ThalesGroup/crypto11",
        "purl": "pkg:golang/github.com/ThalesGroup/crypto11@v1.6.0",
        "version": "v1.6.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/tklauser/go-sysconf",
        "purl": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.16",
        "version": "v0.3.16"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/tklauser/numcpus",
        "purl": "pkg:golang/github.com/tklauser/numcpus@v0.11.0",
        "version": "v0.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/yusufpapurcu/wmi",
        "purl": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4",
        "version": "v1.2.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "github.com/zeebo/xxh3",
        "purl": "pkg:golang/github.com/zeebo/xxh3@v1.0.2",
        "version": "v1.0.2"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.opentelemetry.io/auto/sdk",
        "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1",
        "version": "v1.2.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.67.0",
        "version": "v0.67.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
        "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.67.0",
        "version": "v0.67.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.opentelemetry.io/otel",
        "purl": "pkg:golang/go.opentelemetry.io/otel@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.41.0",
        "version": "v1.41.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.opentelemetry.io/otel/metric",
        "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.opentelemetry.io/otel/trace",
        "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0",
        "version": "v1.44.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.opentelemetry.io/proto/otlp",
        "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.9.0",
        "version": "v1.9.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.uber.org/atomic",
        "purl": "pkg:golang/go.uber.org/atomic@v1.11.0",
        "version": "v1.11.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "go.uber.org/goleak",
        "purl": "pkg:golang/go.uber.org/goleak@v1.3.0",
        "version": "v1.3.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "sha256:257bb2d062ee0b9226e3b5f9c3c5d6aa3d38a450df27a9e060f061d4d4a4eb6f"
        ],
        "location": "backend-go/go.mod",
        "name": "go.yaml.in/yaml/v4",
        "purl": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.4",
        "version": "v4.0.0-rc.4"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "golang.org/x/crypto",
        "purl": "pkg:golang/golang.org/x/crypto@v0.53.0",
        "version": "v0.53.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "golang.org/x/mod",
        "purl": "pkg:golang/golang.org/x/mod@v0.37.0",
        "version": "v0.37.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "golang.org/x/net",
        "purl": "pkg:golang/golang.org/x/net@v0.56.0",
        "version": "v0.56.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "golang.org/x/oauth2",
        "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0",
        "version": "v0.36.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "golang.org/x/sync",
        "purl": "pkg:golang/golang.org/x/sync@v0.21.0",
        "version": "v0.21.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "golang.org/x/sys",
        "purl": "pkg:golang/golang.org/x/sys@v0.46.0",
        "version": "v0.46.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "golang.org/x/text",
        "purl": "pkg:golang/golang.org/x/text@v0.39.0",
        "version": "v0.39.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "golang.org/x/time",
        "purl": "pkg:golang/golang.org/x/time@v0.15.0",
        "version": "v0.15.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend-go/go.mod",
        "name": "golang.org/x/tools",
        "purl": "pkg:golang/golang.org/x/tools@v0.47.0",
        "version": "v0.47.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "google.golang.org/api",
        "purl": "pkg:golang/google.golang.org/api@v0.281.0",
        "version": "v0.281.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "google.golang.org/genproto",
        "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260319201613-d00831a3d3e7",
        "version": "v0.0.0-20260319201613-d00831a3d3e7"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "google.golang.org/genproto/googleapis/api",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa",
        "version": "v0.0.0-20260526163538-3dc84a4a5aaa"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "google.golang.org/genproto/googleapis/rpc",
        "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa",
        "version": "v0.0.0-20260526163538-3dc84a4a5aaa"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "google.golang.org/grpc",
        "purl": "pkg:golang/google.golang.org/grpc@v1.83.1",
        "version": "v1.83.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "backend-go/go.mod",
        "name": "google.golang.org/protobuf",
        "purl": "pkg:golang/google.golang.org/protobuf@v1.36.11",
        "version": "v1.36.11"
      },
      {
        "ecosystem": "golang",
        "licenses": [
          "Apache-2.0",
          "MIT"
        ],
        "location": "backend-go/go.mod",
        "name": "gopkg.in/yaml.v3",
        "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@aashutoshrathi/word-wrap",
        "purl": "pkg:npm/%40aashutoshrathi/word-wrap@1.2.6",
        "version": "1.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@adobe/css-tools",
        "purl": "pkg:npm/%40adobe/css-tools@4.5.0",
        "version": "4.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@ai-sdk/anthropic",
        "purl": "pkg:npm/%40ai-sdk/anthropic@3.0.68",
        "version": "3.0.68"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@ai-sdk/gateway",
        "purl": "pkg:npm/%40ai-sdk/gateway@3.0.94",
        "version": "3.0.94"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@ai-sdk/provider",
        "purl": "pkg:npm/%40ai-sdk/provider@3.0.8",
        "version": "3.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@ai-sdk/provider-utils",
        "purl": "pkg:npm/%40ai-sdk/provider-utils@4.0.23",
        "version": "4.0.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@alloc/quick-lru",
        "purl": "pkg:npm/%40alloc/quick-lru@5.2.0",
        "version": "5.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@asamuzakjp/css-color",
        "purl": "pkg:npm/%40asamuzakjp/css-color@2.8.3",
        "version": "2.8.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@aws-crypto/sha256-browser",
        "purl": "pkg:npm/%40aws-crypto/sha256-browser@5.2.0",
        "version": "5.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@aws-crypto/sha256-js",
        "purl": "pkg:npm/%40aws-crypto/sha256-js@5.2.0",
        "version": "5.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@aws-crypto/supports-web-crypto",
        "purl": "pkg:npm/%40aws-crypto/supports-web-crypto@5.2.0",
        "version": "5.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@aws-crypto/util",
        "purl": "pkg:npm/%40aws-crypto/util@5.2.0",
        "version": "5.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/checksums",
        "purl": "pkg:npm/%40aws-sdk/checksums@3.1001.1",
        "version": "3.1001.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-acm",
        "purl": "pkg:npm/%40aws-sdk/client-acm@3.1031.0",
        "version": "3.1031.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-acm-pca",
        "purl": "pkg:npm/%40aws-sdk/client-acm-pca@3.992.0",
        "version": "3.992.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-cloudformation",
        "purl": "pkg:npm/%40aws-sdk/client-cloudformation@3.1038.0",
        "version": "3.1038.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-elastic-load-balancing-v2",
        "purl": "pkg:npm/%40aws-sdk/client-elastic-load-balancing-v2@3.1038.0",
        "version": "3.1038.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-elasticache",
        "purl": "pkg:npm/%40aws-sdk/client-elasticache@3.1020.0",
        "version": "3.1020.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-iam",
        "purl": "pkg:npm/%40aws-sdk/client-iam@3.1020.0",
        "version": "3.1020.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-kms",
        "purl": "pkg:npm/%40aws-sdk/client-kms@3.1020.0",
        "version": "3.1020.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-memorydb",
        "purl": "pkg:npm/%40aws-sdk/client-memorydb@3.1041.0",
        "version": "3.1041.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-route-53",
        "purl": "pkg:npm/%40aws-sdk/client-route-53@3.1020.0",
        "version": "3.1020.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-s3",
        "purl": "pkg:npm/%40aws-sdk/client-s3@3.1143.0",
        "version": "3.1143.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-secrets-manager",
        "purl": "pkg:npm/%40aws-sdk/client-secrets-manager@3.1020.0",
        "version": "3.1020.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-ssm",
        "purl": "pkg:npm/%40aws-sdk/client-ssm@3.1038.0",
        "version": "3.1038.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/client-sts",
        "purl": "pkg:npm/%40aws-sdk/client-sts@3.1143.0",
        "version": "3.1143.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/core",
        "purl": "pkg:npm/%40aws-sdk/core@3.978.1",
        "version": "3.978.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-provider-cognito-identity",
        "purl": "pkg:npm/%40aws-sdk/credential-provider-cognito-identity@3.972.68",
        "version": "3.972.68"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-provider-env",
        "purl": "pkg:npm/%40aws-sdk/credential-provider-env@3.972.72",
        "version": "3.972.72"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-provider-http",
        "purl": "pkg:npm/%40aws-sdk/credential-provider-http@3.972.74",
        "version": "3.972.74"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-provider-ini",
        "purl": "pkg:npm/%40aws-sdk/credential-provider-ini@3.973.17",
        "version": "3.973.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-provider-login",
        "purl": "pkg:npm/%40aws-sdk/credential-provider-login@3.972.79",
        "version": "3.972.79"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-provider-node",
        "purl": "pkg:npm/%40aws-sdk/credential-provider-node@3.972.84",
        "version": "3.972.84"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-provider-process",
        "purl": "pkg:npm/%40aws-sdk/credential-provider-process@3.972.72",
        "version": "3.972.72"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-provider-sso",
        "purl": "pkg:npm/%40aws-sdk/credential-provider-sso@3.973.16",
        "version": "3.973.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-provider-web-identity",
        "purl": "pkg:npm/%40aws-sdk/credential-provider-web-identity@3.972.78",
        "version": "3.972.78"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/credential-providers",
        "purl": "pkg:npm/%40aws-sdk/credential-providers@3.1111.0",
        "version": "3.1111.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/ec2-metadata-service",
        "purl": "pkg:npm/%40aws-sdk/ec2-metadata-service@3.1143.0",
        "version": "3.1143.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/middleware-host-header",
        "purl": "pkg:npm/%40aws-sdk/middleware-host-header@3.972.10",
        "version": "3.972.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/middleware-logger",
        "purl": "pkg:npm/%40aws-sdk/middleware-logger@3.972.10",
        "version": "3.972.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/middleware-recursion-detection",
        "purl": "pkg:npm/%40aws-sdk/middleware-recursion-detection@3.972.11",
        "version": "3.972.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/middleware-sdk-route53",
        "purl": "pkg:npm/%40aws-sdk/middleware-sdk-route53@3.972.10",
        "version": "3.972.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/middleware-sdk-s3",
        "purl": "pkg:npm/%40aws-sdk/middleware-sdk-s3@3.972.77",
        "version": "3.972.77"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/middleware-user-agent",
        "purl": "pkg:npm/%40aws-sdk/middleware-user-agent@3.972.38",
        "version": "3.972.38"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/nested-clients",
        "purl": "pkg:npm/%40aws-sdk/nested-clients@3.997.46",
        "version": "3.997.46"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/rds-signer",
        "purl": "pkg:npm/%40aws-sdk/rds-signer@3.1111.0",
        "version": "3.1111.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/region-config-resolver",
        "purl": "pkg:npm/%40aws-sdk/region-config-resolver@3.972.13",
        "version": "3.972.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/s3-request-presigner",
        "purl": "pkg:npm/%40aws-sdk/s3-request-presigner@3.1143.0",
        "version": "3.1143.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/signature-v4-multi-region",
        "purl": "pkg:npm/%40aws-sdk/signature-v4-multi-region@3.996.47",
        "version": "3.996.47"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/token-providers",
        "purl": "pkg:npm/%40aws-sdk/token-providers@3.1138.0",
        "version": "3.1138.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/types",
        "purl": "pkg:npm/%40aws-sdk/types@3.974.6",
        "version": "3.974.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/util-endpoints",
        "purl": "pkg:npm/%40aws-sdk/util-endpoints@3.992.0",
        "version": "3.992.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/util-endpoints",
        "purl": "pkg:npm/%40aws-sdk/util-endpoints@3.996.8",
        "version": "3.996.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/util-locate-window",
        "purl": "pkg:npm/%40aws-sdk/util-locate-window@3.465.0",
        "version": "3.465.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/util-user-agent-browser",
        "purl": "pkg:npm/%40aws-sdk/util-user-agent-browser@3.972.10",
        "version": "3.972.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/util-user-agent-node",
        "purl": "pkg:npm/%40aws-sdk/util-user-agent-node@3.973.24",
        "version": "3.973.24"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws-sdk/xml-builder",
        "purl": "pkg:npm/%40aws-sdk/xml-builder@3.972.41",
        "version": "3.972.41"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws/lambda-invoke-store",
        "purl": "pkg:npm/%40aws/lambda-invoke-store@0.2.3",
        "version": "0.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@aws/lambda-invoke-store",
        "purl": "pkg:npm/%40aws/lambda-invoke-store@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure-rest/core-client",
        "purl": "pkg:npm/%40azure-rest/core-client@2.9.0",
        "version": "2.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@azure/abort-controller",
        "purl": "pkg:npm/%40azure/abort-controller@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/abort-controller",
        "purl": "pkg:npm/%40azure/abort-controller@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/abort-controller",
        "purl": "pkg:npm/%40azure/abort-controller@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/core-auth",
        "purl": "pkg:npm/%40azure/core-auth@1.11.0",
        "version": "1.11.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@azure/core-client",
        "purl": "pkg:npm/%40azure/core-client@1.9.2",
        "version": "1.9.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/core-http",
        "purl": "pkg:npm/%40azure/core-http@3.0.4",
        "version": "3.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@azure/core-http-compat",
        "purl": "pkg:npm/%40azure/core-http-compat@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@azure/core-lro",
        "purl": "pkg:npm/%40azure/core-lro@2.7.2",
        "version": "2.7.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@azure/core-paging",
        "purl": "pkg:npm/%40azure/core-paging@1.6.2",
        "version": "1.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/core-process",
        "purl": "pkg:npm/%40azure/core-process@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/core-rest-pipeline",
        "purl": "pkg:npm/%40azure/core-rest-pipeline@1.25.0",
        "version": "1.25.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/core-tracing",
        "purl": "pkg:npm/%40azure/core-tracing@1.0.0-preview.13",
        "version": "1.0.0-preview.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/core-tracing",
        "purl": "pkg:npm/%40azure/core-tracing@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/core-util",
        "purl": "pkg:npm/%40azure/core-util@1.14.0",
        "version": "1.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/core-xml",
        "purl": "pkg:npm/%40azure/core-xml@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/identity",
        "purl": "pkg:npm/%40azure/identity@4.13.3",
        "version": "4.13.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/keyvault-common",
        "purl": "pkg:npm/%40azure/keyvault-common@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/keyvault-keys",
        "purl": "pkg:npm/%40azure/keyvault-keys@4.10.2",
        "version": "4.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/logger",
        "purl": "pkg:npm/%40azure/logger@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/msal-browser",
        "purl": "pkg:npm/%40azure/msal-browser@5.23.0",
        "version": "5.23.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/msal-common",
        "purl": "pkg:npm/%40azure/msal-common@14.16.0",
        "version": "14.16.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/msal-common",
        "purl": "pkg:npm/%40azure/msal-common@16.14.1",
        "version": "16.14.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/msal-node",
        "purl": "pkg:npm/%40azure/msal-node@2.16.2",
        "version": "2.16.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/msal-node",
        "purl": "pkg:npm/%40azure/msal-node@6.0.1",
        "version": "6.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@azure/storage-blob",
        "purl": "pkg:npm/%40azure/storage-blob@12.26.0",
        "version": "12.26.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/code-frame",
        "purl": "pkg:npm/%40babel/code-frame@7.27.1",
        "version": "7.27.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/code-frame",
        "purl": "pkg:npm/%40babel/code-frame@7.29.7",
        "version": "7.29.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/compat-data",
        "purl": "pkg:npm/%40babel/compat-data@7.28.4",
        "version": "7.28.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/core",
        "purl": "pkg:npm/%40babel/core@7.28.4",
        "version": "7.28.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/generator",
        "purl": "pkg:npm/%40babel/generator@7.28.3",
        "version": "7.28.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/generator",
        "purl": "pkg:npm/%40babel/generator@7.29.8",
        "version": "7.29.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/helper-compilation-targets",
        "purl": "pkg:npm/%40babel/helper-compilation-targets@7.27.2",
        "version": "7.27.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/helper-globals",
        "purl": "pkg:npm/%40babel/helper-globals@7.28.0",
        "version": "7.28.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/helper-globals",
        "purl": "pkg:npm/%40babel/helper-globals@7.29.7",
        "version": "7.29.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/helper-module-imports",
        "purl": "pkg:npm/%40babel/helper-module-imports@7.27.1",
        "version": "7.27.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/helper-module-transforms",
        "purl": "pkg:npm/%40babel/helper-module-transforms@7.28.3",
        "version": "7.28.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/helper-plugin-utils",
        "purl": "pkg:npm/%40babel/helper-plugin-utils@7.25.9",
        "version": "7.25.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/helper-string-parser",
        "purl": "pkg:npm/%40babel/helper-string-parser@7.27.1",
        "version": "7.27.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/helper-string-parser",
        "purl": "pkg:npm/%40babel/helper-string-parser@7.29.7",
        "version": "7.29.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/helper-validator-identifier",
        "purl": "pkg:npm/%40babel/helper-validator-identifier@7.27.1",
        "version": "7.27.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/helper-validator-identifier",
        "purl": "pkg:npm/%40babel/helper-validator-identifier@7.29.7",
        "version": "7.29.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/helper-validator-option",
        "purl": "pkg:npm/%40babel/helper-validator-option@7.27.1",
        "version": "7.27.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/helpers",
        "purl": "pkg:npm/%40babel/helpers@7.28.4",
        "version": "7.28.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/parser",
        "purl": "pkg:npm/%40babel/parser@7.28.4",
        "version": "7.28.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/parser",
        "purl": "pkg:npm/%40babel/parser@7.29.8",
        "version": "7.29.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/plugin-syntax-jsx",
        "purl": "pkg:npm/%40babel/plugin-syntax-jsx@7.25.9",
        "version": "7.25.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/plugin-syntax-typescript",
        "purl": "pkg:npm/%40babel/plugin-syntax-typescript@7.25.9",
        "version": "7.25.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/runtime",
        "purl": "pkg:npm/%40babel/runtime@7.26.10",
        "version": "7.26.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/runtime",
        "purl": "pkg:npm/%40babel/runtime@7.29.2",
        "version": "7.29.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/runtime",
        "purl": "pkg:npm/%40babel/runtime@7.29.7",
        "version": "7.29.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/runtime-corejs3",
        "purl": "pkg:npm/%40babel/runtime-corejs3@7.29.2",
        "version": "7.29.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/template",
        "purl": "pkg:npm/%40babel/template@7.27.2",
        "version": "7.27.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/template",
        "purl": "pkg:npm/%40babel/template@7.29.7",
        "version": "7.29.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/traverse",
        "purl": "pkg:npm/%40babel/traverse@7.28.4",
        "version": "7.28.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/traverse",
        "purl": "pkg:npm/%40babel/traverse@7.29.8",
        "version": "7.29.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@babel/types",
        "purl": "pkg:npm/%40babel/types@7.28.4",
        "version": "7.28.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@babel/types",
        "purl": "pkg:npm/%40babel/types@7.29.8",
        "version": "7.29.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@base-ui/react",
        "purl": "pkg:npm/%40base-ui/react@1.7.0",
        "version": "1.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@base-ui/utils",
        "purl": "pkg:npm/%40base-ui/utils@0.3.2",
        "version": "0.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@borewit/text-codec",
        "purl": "pkg:npm/%40borewit/text-codec@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@casl/ability",
        "purl": "pkg:npm/%40casl/ability@6.8.0",
        "version": "6.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@casl/react",
        "purl": "pkg:npm/%40casl/react@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@clickhouse/client",
        "purl": "pkg:npm/%40clickhouse/client@1.17.0",
        "version": "1.17.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@clickhouse/client-common",
        "purl": "pkg:npm/%40clickhouse/client-common@1.17.0",
        "version": "1.17.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@codemirror/autocomplete",
        "purl": "pkg:npm/%40codemirror/autocomplete@6.20.1",
        "version": "6.20.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@codemirror/commands",
        "purl": "pkg:npm/%40codemirror/commands@6.10.3",
        "version": "6.10.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@codemirror/lang-sql",
        "purl": "pkg:npm/%40codemirror/lang-sql@6.10.0",
        "version": "6.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@codemirror/language",
        "purl": "pkg:npm/%40codemirror/language@6.12.3",
        "version": "6.12.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@codemirror/state",
        "purl": "pkg:npm/%40codemirror/state@6.6.0",
        "version": "6.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@codemirror/view",
        "purl": "pkg:npm/%40codemirror/view@6.41.0",
        "version": "6.41.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@colors/colors",
        "purl": "pkg:npm/%40colors/colors@1.6.0",
        "version": "1.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@csstools/color-helpers",
        "purl": "pkg:npm/%40csstools/color-helpers@5.0.2",
        "version": "5.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@csstools/css-calc",
        "purl": "pkg:npm/%40csstools/css-calc@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@csstools/css-color-parser",
        "purl": "pkg:npm/%40csstools/css-color-parser@3.0.8",
        "version": "3.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@csstools/css-parser-algorithms",
        "purl": "pkg:npm/%40csstools/css-parser-algorithms@3.0.4",
        "version": "3.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@csstools/css-tokenizer",
        "purl": "pkg:npm/%40csstools/css-tokenizer@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@dabh/diagnostics",
        "purl": "pkg:npm/%40dabh/diagnostics@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dagrejs/dagre",
        "purl": "pkg:npm/%40dagrejs/dagre@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dagrejs/graphlib",
        "purl": "pkg:npm/%40dagrejs/graphlib@2.2.4",
        "version": "2.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@datadog/libdatadog",
        "purl": "pkg:npm/%40datadog/libdatadog@0.21.0",
        "version": "0.21.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@datadog/libdatadog-extras",
        "purl": "pkg:npm/%40datadog/libdatadog-extras@0.21.0",
        "version": "0.21.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@datadog/libdatadog-wasm",
        "purl": "pkg:npm/%40datadog/libdatadog-wasm@0.21.0",
        "version": "0.21.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@datadog/native-appsec",
        "purl": "pkg:npm/%40datadog/native-appsec@11.0.2",
        "version": "11.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@datadog/native-iast-taint-tracking",
        "purl": "pkg:npm/%40datadog/native-iast-taint-tracking@4.2.1",
        "version": "4.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@datadog/native-metrics",
        "purl": "pkg:npm/%40datadog/native-metrics@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@datadog/pprof",
        "purl": "pkg:npm/%40datadog/pprof@5.19.0",
        "version": "5.19.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@datadog/wasm-js-rewriter",
        "purl": "pkg:npm/%40datadog/wasm-js-rewriter@5.0.4",
        "version": "5.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@date-fns/tz",
        "purl": "pkg:npm/%40date-fns/tz@1.4.1",
        "version": "1.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "@devolutions/iron-remote-desktop",
        "purl": "pkg:npm/%40devolutions/iron-remote-desktop@0.10.1",
        "version": "0.10.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "@devolutions/iron-remote-desktop-rdp",
        "purl": "pkg:npm/%40devolutions/iron-remote-desktop-rdp@0.6.1",
        "version": "0.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/abstract",
        "purl": "pkg:npm/%40dnd-kit/abstract@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/accessibility",
        "purl": "pkg:npm/%40dnd-kit/accessibility@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/collision",
        "purl": "pkg:npm/%40dnd-kit/collision@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/core",
        "purl": "pkg:npm/%40dnd-kit/core@6.3.1",
        "version": "6.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/dom",
        "purl": "pkg:npm/%40dnd-kit/dom@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/geometry",
        "purl": "pkg:npm/%40dnd-kit/geometry@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/modifiers",
        "purl": "pkg:npm/%40dnd-kit/modifiers@9.0.0",
        "version": "9.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/react",
        "purl": "pkg:npm/%40dnd-kit/react@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/sortable",
        "purl": "pkg:npm/%40dnd-kit/sortable@10.0.0",
        "version": "10.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/state",
        "purl": "pkg:npm/%40dnd-kit/state@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@dnd-kit/utilities",
        "purl": "pkg:npm/%40dnd-kit/utilities@3.2.2",
        "version": "3.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@elastic/elasticsearch",
        "purl": "pkg:npm/%40elastic/elasticsearch@9.1.1",
        "version": "9.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@elastic/transport",
        "purl": "pkg:npm/%40elastic/transport@9.2.0",
        "version": "9.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@emnapi/core",
        "purl": "pkg:npm/%40emnapi/core@1.10.0",
        "version": "1.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emnapi/core",
        "purl": "pkg:npm/%40emnapi/core@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@emnapi/runtime",
        "purl": "pkg:npm/%40emnapi/runtime@1.10.0",
        "version": "1.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emnapi/runtime",
        "purl": "pkg:npm/%40emnapi/runtime@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emnapi/wasi-threads",
        "purl": "pkg:npm/%40emnapi/wasi-threads@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@emnapi/wasi-threads",
        "purl": "pkg:npm/%40emnapi/wasi-threads@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/babel-plugin",
        "purl": "pkg:npm/%40emotion/babel-plugin@11.13.5",
        "version": "11.13.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/cache",
        "purl": "pkg:npm/%40emotion/cache@11.14.0",
        "version": "11.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/hash",
        "purl": "pkg:npm/%40emotion/hash@0.9.2",
        "version": "0.9.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/memoize",
        "purl": "pkg:npm/%40emotion/memoize@0.9.0",
        "version": "0.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/react",
        "purl": "pkg:npm/%40emotion/react@11.14.0",
        "version": "11.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/serialize",
        "purl": "pkg:npm/%40emotion/serialize@1.3.3",
        "version": "1.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/sheet",
        "purl": "pkg:npm/%40emotion/sheet@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/unitless",
        "purl": "pkg:npm/%40emotion/unitless@0.10.0",
        "version": "0.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/use-insertion-effect-with-fallbacks",
        "purl": "pkg:npm/%40emotion/use-insertion-effect-with-fallbacks@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/utils",
        "purl": "pkg:npm/%40emotion/utils@1.4.2",
        "version": "1.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@emotion/weak-memoize",
        "purl": "pkg:npm/%40emotion/weak-memoize@0.4.0",
        "version": "0.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@epic-web/invariant",
        "purl": "pkg:npm/%40epic-web/invariant@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/aix-ppc64",
        "purl": "pkg:npm/%40esbuild/aix-ppc64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/aix-ppc64",
        "purl": "pkg:npm/%40esbuild/aix-ppc64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/aix-ppc64",
        "purl": "pkg:npm/%40esbuild/aix-ppc64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/aix-ppc64",
        "purl": "pkg:npm/%40esbuild/aix-ppc64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/aix-ppc64",
        "purl": "pkg:npm/%40esbuild/aix-ppc64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/android-arm",
        "purl": "pkg:npm/%40esbuild/android-arm@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/android-arm",
        "purl": "pkg:npm/%40esbuild/android-arm@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/android-arm",
        "purl": "pkg:npm/%40esbuild/android-arm@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/android-arm",
        "purl": "pkg:npm/%40esbuild/android-arm@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/android-arm",
        "purl": "pkg:npm/%40esbuild/android-arm@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/android-arm64",
        "purl": "pkg:npm/%40esbuild/android-arm64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/android-arm64",
        "purl": "pkg:npm/%40esbuild/android-arm64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/android-arm64",
        "purl": "pkg:npm/%40esbuild/android-arm64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/android-arm64",
        "purl": "pkg:npm/%40esbuild/android-arm64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/android-arm64",
        "purl": "pkg:npm/%40esbuild/android-arm64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/android-x64",
        "purl": "pkg:npm/%40esbuild/android-x64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/android-x64",
        "purl": "pkg:npm/%40esbuild/android-x64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/android-x64",
        "purl": "pkg:npm/%40esbuild/android-x64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/android-x64",
        "purl": "pkg:npm/%40esbuild/android-x64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/android-x64",
        "purl": "pkg:npm/%40esbuild/android-x64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/darwin-arm64",
        "purl": "pkg:npm/%40esbuild/darwin-arm64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/darwin-arm64",
        "purl": "pkg:npm/%40esbuild/darwin-arm64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/darwin-arm64",
        "purl": "pkg:npm/%40esbuild/darwin-arm64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/darwin-arm64",
        "purl": "pkg:npm/%40esbuild/darwin-arm64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/darwin-arm64",
        "purl": "pkg:npm/%40esbuild/darwin-arm64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/darwin-x64",
        "purl": "pkg:npm/%40esbuild/darwin-x64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/darwin-x64",
        "purl": "pkg:npm/%40esbuild/darwin-x64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/darwin-x64",
        "purl": "pkg:npm/%40esbuild/darwin-x64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/darwin-x64",
        "purl": "pkg:npm/%40esbuild/darwin-x64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/darwin-x64",
        "purl": "pkg:npm/%40esbuild/darwin-x64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/freebsd-arm64",
        "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/freebsd-arm64",
        "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/freebsd-arm64",
        "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/freebsd-arm64",
        "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/freebsd-arm64",
        "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/freebsd-x64",
        "purl": "pkg:npm/%40esbuild/freebsd-x64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/freebsd-x64",
        "purl": "pkg:npm/%40esbuild/freebsd-x64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/freebsd-x64",
        "purl": "pkg:npm/%40esbuild/freebsd-x64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/freebsd-x64",
        "purl": "pkg:npm/%40esbuild/freebsd-x64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/freebsd-x64",
        "purl": "pkg:npm/%40esbuild/freebsd-x64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-arm",
        "purl": "pkg:npm/%40esbuild/linux-arm@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-arm",
        "purl": "pkg:npm/%40esbuild/linux-arm@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-arm",
        "purl": "pkg:npm/%40esbuild/linux-arm@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-arm",
        "purl": "pkg:npm/%40esbuild/linux-arm@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-arm",
        "purl": "pkg:npm/%40esbuild/linux-arm@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-arm64",
        "purl": "pkg:npm/%40esbuild/linux-arm64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-arm64",
        "purl": "pkg:npm/%40esbuild/linux-arm64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-arm64",
        "purl": "pkg:npm/%40esbuild/linux-arm64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-arm64",
        "purl": "pkg:npm/%40esbuild/linux-arm64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-arm64",
        "purl": "pkg:npm/%40esbuild/linux-arm64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-ia32",
        "purl": "pkg:npm/%40esbuild/linux-ia32@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-ia32",
        "purl": "pkg:npm/%40esbuild/linux-ia32@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-ia32",
        "purl": "pkg:npm/%40esbuild/linux-ia32@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-ia32",
        "purl": "pkg:npm/%40esbuild/linux-ia32@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-ia32",
        "purl": "pkg:npm/%40esbuild/linux-ia32@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-loong64",
        "purl": "pkg:npm/%40esbuild/linux-loong64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-loong64",
        "purl": "pkg:npm/%40esbuild/linux-loong64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-loong64",
        "purl": "pkg:npm/%40esbuild/linux-loong64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-loong64",
        "purl": "pkg:npm/%40esbuild/linux-loong64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-loong64",
        "purl": "pkg:npm/%40esbuild/linux-loong64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-mips64el",
        "purl": "pkg:npm/%40esbuild/linux-mips64el@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-mips64el",
        "purl": "pkg:npm/%40esbuild/linux-mips64el@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-mips64el",
        "purl": "pkg:npm/%40esbuild/linux-mips64el@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-mips64el",
        "purl": "pkg:npm/%40esbuild/linux-mips64el@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-mips64el",
        "purl": "pkg:npm/%40esbuild/linux-mips64el@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-ppc64",
        "purl": "pkg:npm/%40esbuild/linux-ppc64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-ppc64",
        "purl": "pkg:npm/%40esbuild/linux-ppc64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-ppc64",
        "purl": "pkg:npm/%40esbuild/linux-ppc64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-ppc64",
        "purl": "pkg:npm/%40esbuild/linux-ppc64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-ppc64",
        "purl": "pkg:npm/%40esbuild/linux-ppc64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-riscv64",
        "purl": "pkg:npm/%40esbuild/linux-riscv64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-riscv64",
        "purl": "pkg:npm/%40esbuild/linux-riscv64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-riscv64",
        "purl": "pkg:npm/%40esbuild/linux-riscv64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-riscv64",
        "purl": "pkg:npm/%40esbuild/linux-riscv64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-riscv64",
        "purl": "pkg:npm/%40esbuild/linux-riscv64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-s390x",
        "purl": "pkg:npm/%40esbuild/linux-s390x@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-s390x",
        "purl": "pkg:npm/%40esbuild/linux-s390x@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-s390x",
        "purl": "pkg:npm/%40esbuild/linux-s390x@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-s390x",
        "purl": "pkg:npm/%40esbuild/linux-s390x@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-s390x",
        "purl": "pkg:npm/%40esbuild/linux-s390x@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-x64",
        "purl": "pkg:npm/%40esbuild/linux-x64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-x64",
        "purl": "pkg:npm/%40esbuild/linux-x64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-x64",
        "purl": "pkg:npm/%40esbuild/linux-x64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/linux-x64",
        "purl": "pkg:npm/%40esbuild/linux-x64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/linux-x64",
        "purl": "pkg:npm/%40esbuild/linux-x64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/netbsd-arm64",
        "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/netbsd-arm64",
        "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/netbsd-arm64",
        "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/netbsd-arm64",
        "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/netbsd-arm64",
        "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/netbsd-x64",
        "purl": "pkg:npm/%40esbuild/netbsd-x64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/netbsd-x64",
        "purl": "pkg:npm/%40esbuild/netbsd-x64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/netbsd-x64",
        "purl": "pkg:npm/%40esbuild/netbsd-x64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/netbsd-x64",
        "purl": "pkg:npm/%40esbuild/netbsd-x64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/netbsd-x64",
        "purl": "pkg:npm/%40esbuild/netbsd-x64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/openbsd-arm64",
        "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/openbsd-arm64",
        "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/openbsd-arm64",
        "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/openbsd-arm64",
        "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/openbsd-arm64",
        "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/openbsd-x64",
        "purl": "pkg:npm/%40esbuild/openbsd-x64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/openbsd-x64",
        "purl": "pkg:npm/%40esbuild/openbsd-x64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/openbsd-x64",
        "purl": "pkg:npm/%40esbuild/openbsd-x64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/openbsd-x64",
        "purl": "pkg:npm/%40esbuild/openbsd-x64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/openbsd-x64",
        "purl": "pkg:npm/%40esbuild/openbsd-x64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/openharmony-arm64",
        "purl": "pkg:npm/%40esbuild/openharmony-arm64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/openharmony-arm64",
        "purl": "pkg:npm/%40esbuild/openharmony-arm64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/openharmony-arm64",
        "purl": "pkg:npm/%40esbuild/openharmony-arm64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/openharmony-arm64",
        "purl": "pkg:npm/%40esbuild/openharmony-arm64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/openharmony-arm64",
        "purl": "pkg:npm/%40esbuild/openharmony-arm64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/sunos-x64",
        "purl": "pkg:npm/%40esbuild/sunos-x64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/sunos-x64",
        "purl": "pkg:npm/%40esbuild/sunos-x64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/sunos-x64",
        "purl": "pkg:npm/%40esbuild/sunos-x64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/sunos-x64",
        "purl": "pkg:npm/%40esbuild/sunos-x64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/sunos-x64",
        "purl": "pkg:npm/%40esbuild/sunos-x64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/win32-arm64",
        "purl": "pkg:npm/%40esbuild/win32-arm64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/win32-arm64",
        "purl": "pkg:npm/%40esbuild/win32-arm64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/win32-arm64",
        "purl": "pkg:npm/%40esbuild/win32-arm64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/win32-arm64",
        "purl": "pkg:npm/%40esbuild/win32-arm64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/win32-arm64",
        "purl": "pkg:npm/%40esbuild/win32-arm64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/win32-ia32",
        "purl": "pkg:npm/%40esbuild/win32-ia32@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/win32-ia32",
        "purl": "pkg:npm/%40esbuild/win32-ia32@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/win32-ia32",
        "purl": "pkg:npm/%40esbuild/win32-ia32@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/win32-ia32",
        "purl": "pkg:npm/%40esbuild/win32-ia32@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/win32-ia32",
        "purl": "pkg:npm/%40esbuild/win32-ia32@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/win32-x64",
        "purl": "pkg:npm/%40esbuild/win32-x64@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/win32-x64",
        "purl": "pkg:npm/%40esbuild/win32-x64@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/win32-x64",
        "purl": "pkg:npm/%40esbuild/win32-x64@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@esbuild/win32-x64",
        "purl": "pkg:npm/%40esbuild/win32-x64@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@esbuild/win32-x64",
        "purl": "pkg:npm/%40esbuild/win32-x64@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@eslint-community/eslint-utils",
        "purl": "pkg:npm/%40eslint-community/eslint-utils@4.10.1",
        "version": "4.10.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@eslint-community/eslint-utils",
        "purl": "pkg:npm/%40eslint-community/eslint-utils@4.4.0",
        "version": "4.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "package-lock.json",
        "name": "@eslint-community/eslint-utils",
        "purl": "pkg:npm/%40eslint-community/eslint-utils@4.4.1",
        "version": "4.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@eslint-community/eslint-utils",
        "purl": "pkg:npm/%40eslint-community/eslint-utils@4.9.1",
        "version": "4.9.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "package-lock.json",
        "name": "@eslint-community/regexpp",
        "purl": "pkg:npm/%40eslint-community/regexpp@4.12.1",
        "version": "4.12.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@eslint-community/regexpp",
        "purl": "pkg:npm/%40eslint-community/regexpp@4.12.2",
        "version": "4.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@eslint/config-array",
        "purl": "pkg:npm/%40eslint/config-array@0.21.2",
        "version": "0.21.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@eslint/config-helpers",
        "purl": "pkg:npm/%40eslint/config-helpers@0.4.2",
        "version": "0.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@eslint/core",
        "purl": "pkg:npm/%40eslint/core@0.17.0",
        "version": "0.17.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@eslint/eslintrc",
        "purl": "pkg:npm/%40eslint/eslintrc@2.1.4",
        "version": "2.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@eslint/eslintrc",
        "purl": "pkg:npm/%40eslint/eslintrc@3.3.7",
        "version": "3.3.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@eslint/js",
        "purl": "pkg:npm/%40eslint/js@8.57.1",
        "version": "8.57.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@eslint/js",
        "purl": "pkg:npm/%40eslint/js@9.39.5",
        "version": "9.39.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@eslint/object-schema",
        "purl": "pkg:npm/%40eslint/object-schema@2.1.7",
        "version": "2.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@eslint/plugin-kit",
        "purl": "pkg:npm/%40eslint/plugin-kit@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/accept-negotiator",
        "purl": "pkg:npm/%40fastify/accept-negotiator@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/ajv-compiler",
        "purl": "pkg:npm/%40fastify/ajv-compiler@4.0.5",
        "version": "4.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/busboy",
        "purl": "pkg:npm/%40fastify/busboy@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/cookie",
        "purl": "pkg:npm/%40fastify/cookie@11.0.2",
        "version": "11.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/cors",
        "purl": "pkg:npm/%40fastify/cors@11.2.0",
        "version": "11.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/deepmerge",
        "purl": "pkg:npm/%40fastify/deepmerge@3.2.1",
        "version": "3.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/error",
        "purl": "pkg:npm/%40fastify/error@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/etag",
        "purl": "pkg:npm/%40fastify/etag@6.1.0",
        "version": "6.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/fast-json-stringify-compiler",
        "purl": "pkg:npm/%40fastify/fast-json-stringify-compiler@5.0.3",
        "version": "5.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/flash",
        "purl": "pkg:npm/%40fastify/flash@6.0.3",
        "version": "6.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/formbody",
        "purl": "pkg:npm/%40fastify/formbody@8.0.2",
        "version": "8.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/forwarded",
        "purl": "pkg:npm/%40fastify/forwarded@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/helmet",
        "purl": "pkg:npm/%40fastify/helmet@13.0.2",
        "version": "13.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/merge-json-schemas",
        "purl": "pkg:npm/%40fastify/merge-json-schemas@0.2.1",
        "version": "0.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/multipart",
        "purl": "pkg:npm/%40fastify/multipart@10.0.0",
        "version": "10.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/passport",
        "purl": "pkg:npm/%40fastify/passport@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/proxy-addr",
        "purl": "pkg:npm/%40fastify/proxy-addr@5.1.0",
        "version": "5.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/rate-limit",
        "purl": "pkg:npm/%40fastify/rate-limit@10.3.0",
        "version": "10.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/reply-from",
        "purl": "pkg:npm/%40fastify/reply-from@12.6.2",
        "version": "12.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/request-context",
        "purl": "pkg:npm/%40fastify/request-context@6.2.1",
        "version": "6.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/send",
        "purl": "pkg:npm/%40fastify/send@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/session",
        "purl": "pkg:npm/%40fastify/session@11.1.1",
        "version": "11.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/static",
        "purl": "pkg:npm/%40fastify/static@9.1.3",
        "version": "9.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/swagger",
        "purl": "pkg:npm/%40fastify/swagger@9.7.0",
        "version": "9.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/swagger-ui",
        "purl": "pkg:npm/%40fastify/swagger-ui@5.2.6",
        "version": "5.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@fastify/websocket",
        "purl": "pkg:npm/%40fastify/websocket@11.2.0",
        "version": "11.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@floating-ui/core",
        "purl": "pkg:npm/%40floating-ui/core@1.8.0",
        "version": "1.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@floating-ui/dom",
        "purl": "pkg:npm/%40floating-ui/dom@1.8.0",
        "version": "1.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@floating-ui/react",
        "purl": "pkg:npm/%40floating-ui/react@0.26.28",
        "version": "0.26.28"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@floating-ui/react-dom",
        "purl": "pkg:npm/%40floating-ui/react-dom@2.1.9",
        "version": "2.1.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@floating-ui/utils",
        "purl": "pkg:npm/%40floating-ui/utils@0.2.12",
        "version": "0.2.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "OFL-1.1"
        ],
        "location": "frontend/package-lock.json",
        "name": "@fontsource/ibm-plex-sans",
        "purl": "pkg:npm/%40fontsource/ibm-plex-sans@5.3.0",
        "version": "5.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "OFL-1.1"
        ],
        "location": "frontend/package-lock.json",
        "name": "@fontsource/jetbrains-mono",
        "purl": "pkg:npm/%40fontsource/jetbrains-mono@5.2.8",
        "version": "5.2.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@fortawesome/fontawesome-common-types",
        "purl": "pkg:npm/%40fortawesome/fontawesome-common-types@6.7.1",
        "version": "6.7.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@fortawesome/fontawesome-svg-core",
        "purl": "pkg:npm/%40fortawesome/fontawesome-svg-core@6.7.1",
        "version": "6.7.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "CC-BY-4.0 AND MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@fortawesome/free-brands-svg-icons",
        "purl": "pkg:npm/%40fortawesome/free-brands-svg-icons@6.7.1",
        "version": "6.7.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "CC-BY-4.0 AND MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@fortawesome/free-regular-svg-icons",
        "purl": "pkg:npm/%40fortawesome/free-regular-svg-icons@6.7.1",
        "version": "6.7.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "CC-BY-4.0 AND MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@fortawesome/free-solid-svg-icons",
        "purl": "pkg:npm/%40fortawesome/free-solid-svg-icons@6.7.1",
        "version": "6.7.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@fortawesome/react-fontawesome",
        "purl": "pkg:npm/%40fortawesome/react-fontawesome@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@gitbeaker/core",
        "purl": "pkg:npm/%40gitbeaker/core@42.5.0",
        "version": "42.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@gitbeaker/requester-utils",
        "purl": "pkg:npm/%40gitbeaker/requester-utils@42.5.0",
        "version": "42.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@gitbeaker/rest",
        "purl": "pkg:npm/%40gitbeaker/rest@42.5.0",
        "version": "42.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@google-cloud/kms",
        "purl": "pkg:npm/%40google-cloud/kms@5.4.0",
        "version": "5.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@grpc/grpc-js",
        "purl": "pkg:npm/%40grpc/grpc-js@1.14.5",
        "version": "1.14.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@grpc/proto-loader",
        "purl": "pkg:npm/%40grpc/proto-loader@0.8.0",
        "version": "0.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@hapi/bourne",
        "purl": "pkg:npm/%40hapi/bourne@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@hcaptcha/loader",
        "purl": "pkg:npm/%40hcaptcha/loader@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@hcaptcha/react-hcaptcha",
        "purl": "pkg:npm/%40hcaptcha/react-hcaptcha@1.11.0",
        "version": "1.11.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@headlessui/react",
        "purl": "pkg:npm/%40headlessui/react@2.2.10",
        "version": "2.2.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@hexagon/base64",
        "purl": "pkg:npm/%40hexagon/base64@1.1.28",
        "version": "1.1.28"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@hono/node-server",
        "purl": "pkg:npm/%40hono/node-server@1.19.14",
        "version": "1.19.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@hookform/resolvers",
        "purl": "pkg:npm/%40hookform/resolvers@3.9.1",
        "version": "3.9.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@humanfs/core",
        "purl": "pkg:npm/%40humanfs/core@0.19.2",
        "version": "0.19.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@humanfs/node",
        "purl": "pkg:npm/%40humanfs/node@0.16.8",
        "version": "0.16.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@humanfs/types",
        "purl": "pkg:npm/%40humanfs/types@0.15.0",
        "version": "0.15.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@humanwhocodes/config-array",
        "purl": "pkg:npm/%40humanwhocodes/config-array@0.13.0",
        "version": "0.13.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@humanwhocodes/module-importer",
        "purl": "pkg:npm/%40humanwhocodes/module-importer@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@humanwhocodes/object-schema",
        "purl": "pkg:npm/%40humanwhocodes/object-schema@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@humanwhocodes/retry",
        "purl": "pkg:npm/%40humanwhocodes/retry@0.4.3",
        "version": "0.4.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/colour",
        "purl": "pkg:npm/%40img/colour@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-darwin-arm64",
        "purl": "pkg:npm/%40img/sharp-darwin-arm64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-darwin-x64",
        "purl": "pkg:npm/%40img/sharp-darwin-x64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-darwin-arm64",
        "purl": "pkg:npm/%40img/sharp-libvips-darwin-arm64@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-darwin-x64",
        "purl": "pkg:npm/%40img/sharp-libvips-darwin-x64@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-linux-arm",
        "purl": "pkg:npm/%40img/sharp-libvips-linux-arm@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-linux-arm64",
        "purl": "pkg:npm/%40img/sharp-libvips-linux-arm64@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-linux-ppc64",
        "purl": "pkg:npm/%40img/sharp-libvips-linux-ppc64@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-linux-riscv64",
        "purl": "pkg:npm/%40img/sharp-libvips-linux-riscv64@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-linux-s390x",
        "purl": "pkg:npm/%40img/sharp-libvips-linux-s390x@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-linux-x64",
        "purl": "pkg:npm/%40img/sharp-libvips-linux-x64@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-linuxmusl-arm64",
        "purl": "pkg:npm/%40img/sharp-libvips-linuxmusl-arm64@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-libvips-linuxmusl-x64",
        "purl": "pkg:npm/%40img/sharp-libvips-linuxmusl-x64@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-linux-arm",
        "purl": "pkg:npm/%40img/sharp-linux-arm@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-linux-arm64",
        "purl": "pkg:npm/%40img/sharp-linux-arm64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-linux-ppc64",
        "purl": "pkg:npm/%40img/sharp-linux-ppc64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-linux-riscv64",
        "purl": "pkg:npm/%40img/sharp-linux-riscv64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-linux-s390x",
        "purl": "pkg:npm/%40img/sharp-linux-s390x@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-linux-x64",
        "purl": "pkg:npm/%40img/sharp-linux-x64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-linuxmusl-arm64",
        "purl": "pkg:npm/%40img/sharp-linuxmusl-arm64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-linuxmusl-x64",
        "purl": "pkg:npm/%40img/sharp-linuxmusl-x64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0 AND LGPL-3.0-or-later AND MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-wasm32",
        "purl": "pkg:npm/%40img/sharp-wasm32@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0 AND LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-win32-arm64",
        "purl": "pkg:npm/%40img/sharp-win32-arm64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0 AND LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-win32-ia32",
        "purl": "pkg:npm/%40img/sharp-win32-ia32@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0 AND LGPL-3.0-or-later"
        ],
        "location": "backend/package-lock.json",
        "name": "@img/sharp-win32-x64",
        "purl": "pkg:npm/%40img/sharp-win32-x64@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@infisical/ldapjs",
        "purl": "pkg:npm/%40infisical/ldapjs@3.0.11",
        "version": "3.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@infisical/pg-view-generator",
        "purl": "pkg:npm/%40infisical/pg-view-generator@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "upgrade-impact/package-lock.json",
        "name": "@infisical/upgrade-impact",
        "purl": "pkg:npm/%40infisical/upgrade-impact@0.0.0",
        "version": "0.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@inquirer/external-editor",
        "purl": "pkg:npm/%40inquirer/external-editor@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@internationalized/date",
        "purl": "pkg:npm/%40internationalized/date@3.12.4",
        "version": "3.12.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@internationalized/number",
        "purl": "pkg:npm/%40internationalized/number@3.6.9",
        "version": "3.6.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@internationalized/string",
        "purl": "pkg:npm/%40internationalized/string@3.2.10",
        "version": "3.2.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@ioredis/commands",
        "purl": "pkg:npm/%40ioredis/commands@1.5.1",
        "version": "1.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@isaacs/cliui",
        "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
        "version": "8.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "@isaacs/fs-minipass",
        "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@joshwooding/vite-plugin-react-docgen-typescript",
        "purl": "pkg:npm/%40joshwooding/vite-plugin-react-docgen-typescript@0.7.0",
        "version": "0.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@jridgewell/gen-mapping",
        "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13",
        "version": "0.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@jridgewell/remapping",
        "purl": "pkg:npm/%40jridgewell/remapping@2.3.5",
        "version": "2.3.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@jridgewell/resolve-uri",
        "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@jridgewell/resolve-uri",
        "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
        "version": "3.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@jridgewell/sourcemap-codec",
        "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5",
        "version": "1.5.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@jridgewell/trace-mapping",
        "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.25",
        "version": "0.3.25"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@jridgewell/trace-mapping",
        "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
        "version": "0.3.31"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@js-joda/core",
        "purl": "pkg:npm/%40js-joda/core@6.1.0",
        "version": "6.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@js-sdsl/ordered-map",
        "purl": "pkg:npm/%40js-sdsl/ordered-map@4.4.2",
        "version": "4.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "@koa/cors",
        "purl": "pkg:npm/%40koa/cors@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "@koa/router",
        "purl": "pkg:npm/%40koa/router@14.0.0",
        "version": "14.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ldapjs/asn1",
        "purl": "pkg:npm/%40ldapjs/asn1@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ldapjs/asn1",
        "purl": "pkg:npm/%40ldapjs/asn1@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ldapjs/attribute",
        "purl": "pkg:npm/%40ldapjs/attribute@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ldapjs/change",
        "purl": "pkg:npm/%40ldapjs/change@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ldapjs/controls",
        "purl": "pkg:npm/%40ldapjs/controls@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ldapjs/dn",
        "purl": "pkg:npm/%40ldapjs/dn@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ldapjs/filter",
        "purl": "pkg:npm/%40ldapjs/filter@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ldapjs/messages",
        "purl": "pkg:npm/%40ldapjs/messages@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ldapjs/protocol",
        "purl": "pkg:npm/%40ldapjs/protocol@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@leichtgewicht/ip-codec",
        "purl": "pkg:npm/%40leichtgewicht/ip-codec@2.0.5",
        "version": "2.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@levischuck/tiny-cbor",
        "purl": "pkg:npm/%40levischuck/tiny-cbor@0.2.11",
        "version": "0.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/clipboard",
        "purl": "pkg:npm/%40lexical/clipboard@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/code",
        "purl": "pkg:npm/%40lexical/code@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/devtools-core",
        "purl": "pkg:npm/%40lexical/devtools-core@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/dragon",
        "purl": "pkg:npm/%40lexical/dragon@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/hashtag",
        "purl": "pkg:npm/%40lexical/hashtag@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/history",
        "purl": "pkg:npm/%40lexical/history@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/html",
        "purl": "pkg:npm/%40lexical/html@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/link",
        "purl": "pkg:npm/%40lexical/link@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/list",
        "purl": "pkg:npm/%40lexical/list@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/mark",
        "purl": "pkg:npm/%40lexical/mark@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/markdown",
        "purl": "pkg:npm/%40lexical/markdown@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/offset",
        "purl": "pkg:npm/%40lexical/offset@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/overflow",
        "purl": "pkg:npm/%40lexical/overflow@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/plain-text",
        "purl": "pkg:npm/%40lexical/plain-text@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/react",
        "purl": "pkg:npm/%40lexical/react@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/rich-text",
        "purl": "pkg:npm/%40lexical/rich-text@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/selection",
        "purl": "pkg:npm/%40lexical/selection@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/table",
        "purl": "pkg:npm/%40lexical/table@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/text",
        "purl": "pkg:npm/%40lexical/text@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/utils",
        "purl": "pkg:npm/%40lexical/utils@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lexical/yjs",
        "purl": "pkg:npm/%40lexical/yjs@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lezer/common",
        "purl": "pkg:npm/%40lezer/common@1.5.1",
        "version": "1.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lezer/highlight",
        "purl": "pkg:npm/%40lezer/highlight@1.2.3",
        "version": "1.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lezer/lr",
        "purl": "pkg:npm/%40lezer/lr@1.4.8",
        "version": "1.4.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lottiefiles/dotlottie-react",
        "purl": "pkg:npm/%40lottiefiles/dotlottie-react@0.12.0",
        "version": "0.12.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@lottiefiles/dotlottie-web",
        "purl": "pkg:npm/%40lottiefiles/dotlottie-web@0.38.2",
        "version": "0.38.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@lukeed/ms",
        "purl": "pkg:npm/%40lukeed/ms@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@mapbox/node-pre-gyp",
        "purl": "pkg:npm/%40mapbox/node-pre-gyp@1.0.11",
        "version": "1.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@marijn/find-cluster-break",
        "purl": "pkg:npm/%40marijn/find-cluster-break@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@mdx-js/react",
        "purl": "pkg:npm/%40mdx-js/react@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@modelcontextprotocol/sdk",
        "purl": "pkg:npm/%40modelcontextprotocol/sdk@1.29.0",
        "version": "1.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@mongodb-js/saslprep",
        "purl": "pkg:npm/%40mongodb-js/saslprep@1.1.9",
        "version": "1.1.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@msgpackr-extract/msgpackr-extract-darwin-arm64",
        "purl": "pkg:npm/%40msgpackr-extract/msgpackr-extract-darwin-arm64@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@msgpackr-extract/msgpackr-extract-darwin-x64",
        "purl": "pkg:npm/%40msgpackr-extract/msgpackr-extract-darwin-x64@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@msgpackr-extract/msgpackr-extract-linux-arm",
        "purl": "pkg:npm/%40msgpackr-extract/msgpackr-extract-linux-arm@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@msgpackr-extract/msgpackr-extract-linux-arm64",
        "purl": "pkg:npm/%40msgpackr-extract/msgpackr-extract-linux-arm64@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@msgpackr-extract/msgpackr-extract-linux-x64",
        "purl": "pkg:npm/%40msgpackr-extract/msgpackr-extract-linux-x64@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@msgpackr-extract/msgpackr-extract-win32-x64",
        "purl": "pkg:npm/%40msgpackr-extract/msgpackr-extract-win32-x64@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@mswjs/interceptors",
        "purl": "pkg:npm/%40mswjs/interceptors@0.39.8",
        "version": "0.39.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@napi-rs/wasm-runtime",
        "purl": "pkg:npm/%40napi-rs/wasm-runtime@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@napi-rs/wasm-runtime",
        "purl": "pkg:npm/%40napi-rs/wasm-runtime@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@next/env",
        "purl": "pkg:npm/%40next/env@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@next/eslint-plugin-next",
        "purl": "pkg:npm/%40next/eslint-plugin-next@16.3.6",
        "version": "16.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@next/swc-darwin-arm64",
        "purl": "pkg:npm/%40next/swc-darwin-arm64@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@next/swc-darwin-x64",
        "purl": "pkg:npm/%40next/swc-darwin-x64@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@next/swc-linux-arm64-gnu",
        "purl": "pkg:npm/%40next/swc-linux-arm64-gnu@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@next/swc-linux-arm64-musl",
        "purl": "pkg:npm/%40next/swc-linux-arm64-musl@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@next/swc-linux-x64-gnu",
        "purl": "pkg:npm/%40next/swc-linux-x64-gnu@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@next/swc-linux-x64-musl",
        "purl": "pkg:npm/%40next/swc-linux-x64-musl@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@next/swc-win32-arm64-msvc",
        "purl": "pkg:npm/%40next/swc-win32-arm64-msvc@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@next/swc-win32-x64-msvc",
        "purl": "pkg:npm/%40next/swc-win32-x64-msvc@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@noble/hashes",
        "purl": "pkg:npm/%40noble/hashes@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@nodable/entities",
        "purl": "pkg:npm/%40nodable/entities@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32",
        "purl": "pkg:npm/%40node-rs/crc32@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-android-arm-eabi",
        "purl": "pkg:npm/%40node-rs/crc32-android-arm-eabi@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-android-arm64",
        "purl": "pkg:npm/%40node-rs/crc32-android-arm64@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-darwin-arm64",
        "purl": "pkg:npm/%40node-rs/crc32-darwin-arm64@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-darwin-x64",
        "purl": "pkg:npm/%40node-rs/crc32-darwin-x64@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-freebsd-x64",
        "purl": "pkg:npm/%40node-rs/crc32-freebsd-x64@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-linux-arm-gnueabihf",
        "purl": "pkg:npm/%40node-rs/crc32-linux-arm-gnueabihf@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-linux-arm64-gnu",
        "purl": "pkg:npm/%40node-rs/crc32-linux-arm64-gnu@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-linux-arm64-musl",
        "purl": "pkg:npm/%40node-rs/crc32-linux-arm64-musl@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-linux-x64-gnu",
        "purl": "pkg:npm/%40node-rs/crc32-linux-x64-gnu@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-linux-x64-musl",
        "purl": "pkg:npm/%40node-rs/crc32-linux-x64-musl@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-win32-arm64-msvc",
        "purl": "pkg:npm/%40node-rs/crc32-win32-arm64-msvc@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-win32-ia32-msvc",
        "purl": "pkg:npm/%40node-rs/crc32-win32-ia32-msvc@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-rs/crc32-win32-x64-msvc",
        "purl": "pkg:npm/%40node-rs/crc32-win32-x64-msvc@1.10.8",
        "version": "1.10.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-saml/node-saml",
        "purl": "pkg:npm/%40node-saml/node-saml@5.1.0",
        "version": "5.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@node-saml/passport-saml",
        "purl": "pkg:npm/%40node-saml/passport-saml@5.1.0",
        "version": "5.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@nodelib/fs.scandir",
        "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5",
        "version": "2.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@nodelib/fs.stat",
        "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5",
        "version": "2.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@nodelib/fs.walk",
        "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8",
        "version": "1.2.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@nolyfill/is-core-module",
        "purl": "pkg:npm/%40nolyfill/is-core-module@1.0.39",
        "version": "1.0.39"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-app",
        "purl": "pkg:npm/%40octokit/auth-app@6.1.2",
        "version": "6.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-app",
        "purl": "pkg:npm/%40octokit/auth-app@7.1.1",
        "version": "7.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-oauth-app",
        "purl": "pkg:npm/%40octokit/auth-oauth-app@7.1.0",
        "version": "7.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-oauth-app",
        "purl": "pkg:npm/%40octokit/auth-oauth-app@8.1.1",
        "version": "8.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-oauth-device",
        "purl": "pkg:npm/%40octokit/auth-oauth-device@6.1.0",
        "version": "6.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-oauth-device",
        "purl": "pkg:npm/%40octokit/auth-oauth-device@7.1.1",
        "version": "7.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-oauth-user",
        "purl": "pkg:npm/%40octokit/auth-oauth-user@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-oauth-user",
        "purl": "pkg:npm/%40octokit/auth-oauth-user@5.1.1",
        "version": "5.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-token",
        "purl": "pkg:npm/%40octokit/auth-token@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/auth-unauthenticated",
        "purl": "pkg:npm/%40octokit/auth-unauthenticated@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/core",
        "purl": "pkg:npm/%40octokit/core@5.2.1",
        "version": "5.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/endpoint",
        "purl": "pkg:npm/%40octokit/endpoint@10.1.4",
        "version": "10.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/endpoint",
        "purl": "pkg:npm/%40octokit/endpoint@9.0.6",
        "version": "9.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/graphql",
        "purl": "pkg:npm/%40octokit/graphql@7.1.1",
        "version": "7.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/oauth-authorization-url",
        "purl": "pkg:npm/%40octokit/oauth-authorization-url@6.0.2",
        "version": "6.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/oauth-authorization-url",
        "purl": "pkg:npm/%40octokit/oauth-authorization-url@7.1.1",
        "version": "7.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/oauth-methods",
        "purl": "pkg:npm/%40octokit/oauth-methods@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/oauth-methods",
        "purl": "pkg:npm/%40octokit/oauth-methods@5.1.2",
        "version": "5.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/openapi-types",
        "purl": "pkg:npm/%40octokit/openapi-types@18.1.1",
        "version": "18.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/openapi-types",
        "purl": "pkg:npm/%40octokit/openapi-types@20.0.0",
        "version": "20.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/openapi-types",
        "purl": "pkg:npm/%40octokit/openapi-types@22.2.0",
        "version": "22.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/openapi-types",
        "purl": "pkg:npm/%40octokit/openapi-types@24.2.0",
        "version": "24.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/openapi-types",
        "purl": "pkg:npm/%40octokit/openapi-types@25.1.0",
        "version": "25.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/plugin-enterprise-compatibility",
        "purl": "pkg:npm/%40octokit/plugin-enterprise-compatibility@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/plugin-paginate-graphql",
        "purl": "pkg:npm/%40octokit/plugin-paginate-graphql@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/plugin-paginate-rest",
        "purl": "pkg:npm/%40octokit/plugin-paginate-rest@9.2.2",
        "version": "9.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/plugin-request-log",
        "purl": "pkg:npm/%40octokit/plugin-request-log@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/plugin-rest-endpoint-methods",
        "purl": "pkg:npm/%40octokit/plugin-rest-endpoint-methods@10.2.0",
        "version": "10.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/plugin-retry",
        "purl": "pkg:npm/%40octokit/plugin-retry@5.0.5",
        "version": "5.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/plugin-retry",
        "purl": "pkg:npm/%40octokit/plugin-retry@6.0.1",
        "version": "6.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/plugin-throttling",
        "purl": "pkg:npm/%40octokit/plugin-throttling@8.2.0",
        "version": "8.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/request",
        "purl": "pkg:npm/%40octokit/request@8.4.1",
        "version": "8.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/request",
        "purl": "pkg:npm/%40octokit/request@9.2.4",
        "version": "9.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/request-error",
        "purl": "pkg:npm/%40octokit/request-error@5.1.1",
        "version": "5.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/rest",
        "purl": "pkg:npm/%40octokit/rest@20.0.2",
        "version": "20.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/types",
        "purl": "pkg:npm/%40octokit/types@10.0.0",
        "version": "10.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/types",
        "purl": "pkg:npm/%40octokit/types@12.6.0",
        "version": "12.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/types",
        "purl": "pkg:npm/%40octokit/types@13.10.0",
        "version": "13.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/types",
        "purl": "pkg:npm/%40octokit/types@13.6.1",
        "version": "13.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@octokit/types",
        "purl": "pkg:npm/%40octokit/types@14.1.0",
        "version": "14.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/webhooks",
        "purl": "pkg:npm/%40octokit/webhooks@12.0.11",
        "version": "12.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/webhooks-methods",
        "purl": "pkg:npm/%40octokit/webhooks-methods@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/webhooks-types",
        "purl": "pkg:npm/%40octokit/webhooks-types@7.1.0",
        "version": "7.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@octokit/webhooks-types",
        "purl": "pkg:npm/%40octokit/webhooks-types@7.3.1",
        "version": "7.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@octopusdeploy/api-client",
        "purl": "pkg:npm/%40octopusdeploy/api-client@3.11.6",
        "version": "3.11.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@open-draft/deferred-promise",
        "purl": "pkg:npm/%40open-draft/deferred-promise@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@open-draft/logger",
        "purl": "pkg:npm/%40open-draft/logger@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@open-draft/until",
        "purl": "pkg:npm/%40open-draft/until@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@openai/agents",
        "purl": "pkg:npm/%40openai/agents@0.8.5",
        "version": "0.8.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@openai/agents-core",
        "purl": "pkg:npm/%40openai/agents-core@0.8.5",
        "version": "0.8.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@openai/agents-openai",
        "purl": "pkg:npm/%40openai/agents-openai@0.8.5",
        "version": "0.8.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@openai/agents-realtime",
        "purl": "pkg:npm/%40openai/agents-realtime@0.8.5",
        "version": "0.8.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/api",
        "purl": "pkg:npm/%40opentelemetry/api@1.9.0",
        "version": "1.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/api-logs",
        "purl": "pkg:npm/%40opentelemetry/api-logs@0.208.0",
        "version": "0.208.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/api-logs",
        "purl": "pkg:npm/%40opentelemetry/api-logs@0.220.0",
        "version": "0.220.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/api-logs",
        "purl": "pkg:npm/%40opentelemetry/api-logs@0.223.0",
        "version": "0.223.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/core",
        "purl": "pkg:npm/%40opentelemetry/core@2.12.0",
        "version": "2.12.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/core",
        "purl": "pkg:npm/%40opentelemetry/core@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/core",
        "purl": "pkg:npm/%40opentelemetry/core@2.6.0",
        "version": "2.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/core",
        "purl": "pkg:npm/%40opentelemetry/core@2.9.0",
        "version": "2.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/exporter-logs-otlp-http",
        "purl": "pkg:npm/%40opentelemetry/exporter-logs-otlp-http@0.208.0",
        "version": "0.208.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/exporter-metrics-otlp-http",
        "purl": "pkg:npm/%40opentelemetry/exporter-metrics-otlp-http@0.220.0",
        "version": "0.220.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/exporter-metrics-otlp-proto",
        "purl": "pkg:npm/%40opentelemetry/exporter-metrics-otlp-proto@0.220.0",
        "version": "0.220.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/exporter-prometheus",
        "purl": "pkg:npm/%40opentelemetry/exporter-prometheus@0.220.0",
        "version": "0.220.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/instrumentation",
        "purl": "pkg:npm/%40opentelemetry/instrumentation@0.220.0",
        "version": "0.220.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/instrumentation-http",
        "purl": "pkg:npm/%40opentelemetry/instrumentation-http@0.220.0",
        "version": "0.220.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/instrumentation-runtime-node",
        "purl": "pkg:npm/%40opentelemetry/instrumentation-runtime-node@0.33.0",
        "version": "0.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/otlp-exporter-base",
        "purl": "pkg:npm/%40opentelemetry/otlp-exporter-base@0.208.0",
        "version": "0.208.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/otlp-exporter-base",
        "purl": "pkg:npm/%40opentelemetry/otlp-exporter-base@0.220.0",
        "version": "0.220.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/otlp-transformer",
        "purl": "pkg:npm/%40opentelemetry/otlp-transformer@0.208.0",
        "version": "0.208.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/otlp-transformer",
        "purl": "pkg:npm/%40opentelemetry/otlp-transformer@0.220.0",
        "version": "0.220.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/resources",
        "purl": "pkg:npm/%40opentelemetry/resources@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/resources",
        "purl": "pkg:npm/%40opentelemetry/resources@2.6.0",
        "version": "2.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/resources",
        "purl": "pkg:npm/%40opentelemetry/resources@2.9.0",
        "version": "2.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/sdk-logs",
        "purl": "pkg:npm/%40opentelemetry/sdk-logs@0.208.0",
        "version": "0.208.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/sdk-logs",
        "purl": "pkg:npm/%40opentelemetry/sdk-logs@0.220.0",
        "version": "0.220.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/sdk-metrics",
        "purl": "pkg:npm/%40opentelemetry/sdk-metrics@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/sdk-metrics",
        "purl": "pkg:npm/%40opentelemetry/sdk-metrics@2.9.0",
        "version": "2.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/sdk-trace",
        "purl": "pkg:npm/%40opentelemetry/sdk-trace@2.9.0",
        "version": "2.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/sdk-trace-base",
        "purl": "pkg:npm/%40opentelemetry/sdk-trace-base@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@opentelemetry/semantic-conventions",
        "purl": "pkg:npm/%40opentelemetry/semantic-conventions@1.40.0",
        "version": "1.40.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@opentelemetry/semantic-conventions",
        "purl": "pkg:npm/%40opentelemetry/semantic-conventions@1.43.0",
        "version": "1.43.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@otplib/core",
        "purl": "pkg:npm/%40otplib/core@12.0.1",
        "version": "12.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@otplib/plugin-crypto",
        "purl": "pkg:npm/%40otplib/plugin-crypto@12.0.1",
        "version": "12.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@otplib/plugin-thirty-two",
        "purl": "pkg:npm/%40otplib/plugin-thirty-two@12.0.1",
        "version": "12.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@otplib/preset-default",
        "purl": "pkg:npm/%40otplib/preset-default@12.0.1",
        "version": "12.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@otplib/preset-v11",
        "purl": "pkg:npm/%40otplib/preset-v11@12.0.1",
        "version": "12.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-android-arm-eabi",
        "purl": "pkg:npm/%40oxc-parser/binding-android-arm-eabi@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-android-arm64",
        "purl": "pkg:npm/%40oxc-parser/binding-android-arm64@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-darwin-arm64",
        "purl": "pkg:npm/%40oxc-parser/binding-darwin-arm64@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-darwin-x64",
        "purl": "pkg:npm/%40oxc-parser/binding-darwin-x64@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-freebsd-x64",
        "purl": "pkg:npm/%40oxc-parser/binding-freebsd-x64@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-arm-gnueabihf",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-arm-gnueabihf@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-arm-musleabihf",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-arm-musleabihf@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-arm64-gnu",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-arm64-gnu@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-arm64-musl",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-arm64-musl@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-ppc64-gnu",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-ppc64-gnu@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-riscv64-gnu",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-riscv64-gnu@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-riscv64-musl",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-riscv64-musl@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-s390x-gnu",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-s390x-gnu@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-x64-gnu",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-x64-gnu@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-linux-x64-musl",
        "purl": "pkg:npm/%40oxc-parser/binding-linux-x64-musl@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-openharmony-arm64",
        "purl": "pkg:npm/%40oxc-parser/binding-openharmony-arm64@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-wasm32-wasi",
        "purl": "pkg:npm/%40oxc-parser/binding-wasm32-wasi@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-win32-arm64-msvc",
        "purl": "pkg:npm/%40oxc-parser/binding-win32-arm64-msvc@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-win32-ia32-msvc",
        "purl": "pkg:npm/%40oxc-parser/binding-win32-ia32-msvc@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-parser/binding-win32-x64-msvc",
        "purl": "pkg:npm/%40oxc-parser/binding-win32-x64-msvc@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-project/types",
        "purl": "pkg:npm/%40oxc-project/types@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@oxc-project/types",
        "purl": "pkg:npm/%40oxc-project/types@0.148.0",
        "version": "0.148.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@oxc-project/types",
        "purl": "pkg:npm/%40oxc-project/types@0.151.0",
        "version": "0.151.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-android",
        "purl": "pkg:npm/%40peculiar/asn1-android@2.6.0",
        "version": "2.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-cms",
        "purl": "pkg:npm/%40peculiar/asn1-cms@2.3.13",
        "version": "2.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-cms",
        "purl": "pkg:npm/%40peculiar/asn1-cms@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-csr",
        "purl": "pkg:npm/%40peculiar/asn1-csr@2.3.13",
        "version": "2.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-csr",
        "purl": "pkg:npm/%40peculiar/asn1-csr@2.6.0",
        "version": "2.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-ecc",
        "purl": "pkg:npm/%40peculiar/asn1-ecc@2.3.14",
        "version": "2.3.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-ecc",
        "purl": "pkg:npm/%40peculiar/asn1-ecc@2.6.0",
        "version": "2.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-pfx",
        "purl": "pkg:npm/%40peculiar/asn1-pfx@2.3.13",
        "version": "2.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-pfx",
        "purl": "pkg:npm/%40peculiar/asn1-pfx@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-pkcs8",
        "purl": "pkg:npm/%40peculiar/asn1-pkcs8@2.3.13",
        "version": "2.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-pkcs8",
        "purl": "pkg:npm/%40peculiar/asn1-pkcs8@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-pkcs9",
        "purl": "pkg:npm/%40peculiar/asn1-pkcs9@2.3.13",
        "version": "2.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-pkcs9",
        "purl": "pkg:npm/%40peculiar/asn1-pkcs9@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-rsa",
        "purl": "pkg:npm/%40peculiar/asn1-rsa@2.3.13",
        "version": "2.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-rsa",
        "purl": "pkg:npm/%40peculiar/asn1-rsa@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-schema",
        "purl": "pkg:npm/%40peculiar/asn1-schema@2.3.13",
        "version": "2.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-schema",
        "purl": "pkg:npm/%40peculiar/asn1-schema@2.6.0",
        "version": "2.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-x509",
        "purl": "pkg:npm/%40peculiar/asn1-x509@2.3.13",
        "version": "2.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-x509",
        "purl": "pkg:npm/%40peculiar/asn1-x509@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/asn1-x509-attr",
        "purl": "pkg:npm/%40peculiar/asn1-x509-attr@2.3.13",
        "version": "2.3.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/asn1-x509-attr",
        "purl": "pkg:npm/%40peculiar/asn1-x509-attr@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@peculiar/x509",
        "purl": "pkg:npm/%40peculiar/x509@1.12.3",
        "version": "1.12.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@peculiar/x509",
        "purl": "pkg:npm/%40peculiar/x509@1.14.0",
        "version": "1.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@pgsql/types",
        "purl": "pkg:npm/%40pgsql/types@17.6.2",
        "version": "17.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@phc/format",
        "purl": "pkg:npm/%40phc/format@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@pinojs/redact",
        "purl": "pkg:npm/%40pinojs/redact@0.4.0",
        "version": "0.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@pkgjs/parseargs",
        "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
        "version": "0.11.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@pkgr/core",
        "purl": "pkg:npm/%40pkgr/core@0.1.1",
        "version": "0.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@platformatic/dynamic-buffer",
        "purl": "pkg:npm/%40platformatic/dynamic-buffer@0.3.1",
        "version": "0.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@platformatic/kafka",
        "purl": "pkg:npm/%40platformatic/kafka@2.12.1",
        "version": "2.12.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@platformatic/wasm-utils",
        "purl": "pkg:npm/%40platformatic/wasm-utils@0.2.1",
        "version": "0.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@posthog/core",
        "purl": "pkg:npm/%40posthog/core@1.23.3",
        "version": "1.23.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@posthog/types",
        "purl": "pkg:npm/%40posthog/types@1.360.1",
        "version": "1.360.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@preact/signals-core",
        "purl": "pkg:npm/%40preact/signals-core@1.13.0",
        "version": "1.13.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@probot/get-private-key",
        "purl": "pkg:npm/%40probot/get-private-key@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@probot/octokit-plugin-config",
        "purl": "pkg:npm/%40probot/octokit-plugin-config@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@probot/pino",
        "purl": "pkg:npm/%40probot/pino@2.5.0",
        "version": "2.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@protobufjs/aspromise",
        "purl": "pkg:npm/%40protobufjs/aspromise@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@protobufjs/base64",
        "purl": "pkg:npm/%40protobufjs/base64@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@protobufjs/codegen",
        "purl": "pkg:npm/%40protobufjs/codegen@2.0.5",
        "version": "2.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "@protobufjs/eventemitter",
        "purl": "pkg:npm/%40protobufjs/eventemitter@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@protobufjs/eventemitter",
        "purl": "pkg:npm/%40protobufjs/eventemitter@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "@protobufjs/fetch",
        "purl": "pkg:npm/%40protobufjs/fetch@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@protobufjs/fetch",
        "purl": "pkg:npm/%40protobufjs/fetch@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@protobufjs/float",
        "purl": "pkg:npm/%40protobufjs/float@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "@protobufjs/inquire",
        "purl": "pkg:npm/%40protobufjs/inquire@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@protobufjs/path",
        "purl": "pkg:npm/%40protobufjs/path@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@protobufjs/pool",
        "purl": "pkg:npm/%40protobufjs/pool@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "@protobufjs/utf8",
        "purl": "pkg:npm/%40protobufjs/utf8@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@quansync/fs",
        "purl": "pkg:npm/%40quansync/fs@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/number",
        "purl": "pkg:npm/%40radix-ui/number@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/primitive",
        "purl": "pkg:npm/%40radix-ui/primitive@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/primitive",
        "purl": "pkg:npm/%40radix-ui/primitive@1.1.7",
        "version": "1.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-accessible-icon",
        "purl": "pkg:npm/%40radix-ui/react-accessible-icon@1.1.15",
        "version": "1.1.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-accordion",
        "purl": "pkg:npm/%40radix-ui/react-accordion@1.2.20",
        "version": "1.2.20"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-alert-dialog",
        "purl": "pkg:npm/%40radix-ui/react-alert-dialog@1.1.23",
        "version": "1.1.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-arrow",
        "purl": "pkg:npm/%40radix-ui/react-arrow@1.1.15",
        "version": "1.1.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-aspect-ratio",
        "purl": "pkg:npm/%40radix-ui/react-aspect-ratio@1.1.15",
        "version": "1.1.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-avatar",
        "purl": "pkg:npm/%40radix-ui/react-avatar@1.2.6",
        "version": "1.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-checkbox",
        "purl": "pkg:npm/%40radix-ui/react-checkbox@1.3.11",
        "version": "1.3.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-collapsible",
        "purl": "pkg:npm/%40radix-ui/react-collapsible@1.1.20",
        "version": "1.1.20"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-collection",
        "purl": "pkg:npm/%40radix-ui/react-collection@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-collection",
        "purl": "pkg:npm/%40radix-ui/react-collection@1.1.15",
        "version": "1.1.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-compose-refs",
        "purl": "pkg:npm/%40radix-ui/react-compose-refs@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-compose-refs",
        "purl": "pkg:npm/%40radix-ui/react-compose-refs@1.1.5",
        "version": "1.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-context",
        "purl": "pkg:npm/%40radix-ui/react-context@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-context",
        "purl": "pkg:npm/%40radix-ui/react-context@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-context-menu",
        "purl": "pkg:npm/%40radix-ui/react-context-menu@2.3.7",
        "version": "2.3.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-dialog",
        "purl": "pkg:npm/%40radix-ui/react-dialog@1.1.23",
        "version": "1.1.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-direction",
        "purl": "pkg:npm/%40radix-ui/react-direction@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-direction",
        "purl": "pkg:npm/%40radix-ui/react-direction@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-dismissable-layer",
        "purl": "pkg:npm/%40radix-ui/react-dismissable-layer@1.1.19",
        "version": "1.1.19"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-dropdown-menu",
        "purl": "pkg:npm/%40radix-ui/react-dropdown-menu@2.1.24",
        "version": "2.1.24"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-focus-guards",
        "purl": "pkg:npm/%40radix-ui/react-focus-guards@1.1.6",
        "version": "1.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-focus-scope",
        "purl": "pkg:npm/%40radix-ui/react-focus-scope@1.1.16",
        "version": "1.1.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-form",
        "purl": "pkg:npm/%40radix-ui/react-form@0.1.16",
        "version": "0.1.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-hover-card",
        "purl": "pkg:npm/%40radix-ui/react-hover-card@1.1.23",
        "version": "1.1.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-id",
        "purl": "pkg:npm/%40radix-ui/react-id@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-id",
        "purl": "pkg:npm/%40radix-ui/react-id@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-label",
        "purl": "pkg:npm/%40radix-ui/react-label@2.1.15",
        "version": "2.1.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-menu",
        "purl": "pkg:npm/%40radix-ui/react-menu@2.1.24",
        "version": "2.1.24"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-menubar",
        "purl": "pkg:npm/%40radix-ui/react-menubar@1.1.24",
        "version": "1.1.24"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-navigation-menu",
        "purl": "pkg:npm/%40radix-ui/react-navigation-menu@1.2.22",
        "version": "1.2.22"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-one-time-password-field",
        "purl": "pkg:npm/%40radix-ui/react-one-time-password-field@0.1.16",
        "version": "0.1.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-password-toggle-field",
        "purl": "pkg:npm/%40radix-ui/react-password-toggle-field@0.1.11",
        "version": "0.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-popover",
        "purl": "pkg:npm/%40radix-ui/react-popover@1.1.23",
        "version": "1.1.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-popper",
        "purl": "pkg:npm/%40radix-ui/react-popper@1.3.7",
        "version": "1.3.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-portal",
        "purl": "pkg:npm/%40radix-ui/react-portal@1.1.17",
        "version": "1.1.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-presence",
        "purl": "pkg:npm/%40radix-ui/react-presence@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-presence",
        "purl": "pkg:npm/%40radix-ui/react-presence@1.1.10",
        "version": "1.1.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-primitive",
        "purl": "pkg:npm/%40radix-ui/react-primitive@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-primitive",
        "purl": "pkg:npm/%40radix-ui/react-primitive@2.1.10",
        "version": "2.1.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-progress",
        "purl": "pkg:npm/%40radix-ui/react-progress@1.1.16",
        "version": "1.1.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-radio-group",
        "purl": "pkg:npm/%40radix-ui/react-radio-group@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-radio-group",
        "purl": "pkg:npm/%40radix-ui/react-radio-group@1.4.7",
        "version": "1.4.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-roving-focus",
        "purl": "pkg:npm/%40radix-ui/react-roving-focus@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-roving-focus",
        "purl": "pkg:npm/%40radix-ui/react-roving-focus@1.1.19",
        "version": "1.1.19"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-scroll-area",
        "purl": "pkg:npm/%40radix-ui/react-scroll-area@1.2.18",
        "version": "1.2.18"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-select",
        "purl": "pkg:npm/%40radix-ui/react-select@2.3.7",
        "version": "2.3.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-separator",
        "purl": "pkg:npm/%40radix-ui/react-separator@1.1.15",
        "version": "1.1.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-slider",
        "purl": "pkg:npm/%40radix-ui/react-slider@1.4.7",
        "version": "1.4.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-slot",
        "purl": "pkg:npm/%40radix-ui/react-slot@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-slot",
        "purl": "pkg:npm/%40radix-ui/react-slot@1.3.3",
        "version": "1.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-switch",
        "purl": "pkg:npm/%40radix-ui/react-switch@1.3.7",
        "version": "1.3.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-tabs",
        "purl": "pkg:npm/%40radix-ui/react-tabs@1.1.21",
        "version": "1.1.21"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-toast",
        "purl": "pkg:npm/%40radix-ui/react-toast@1.2.23",
        "version": "1.2.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-toggle",
        "purl": "pkg:npm/%40radix-ui/react-toggle@1.1.18",
        "version": "1.1.18"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-toggle-group",
        "purl": "pkg:npm/%40radix-ui/react-toggle-group@1.1.19",
        "version": "1.1.19"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-toolbar",
        "purl": "pkg:npm/%40radix-ui/react-toolbar@1.1.19",
        "version": "1.1.19"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-tooltip",
        "purl": "pkg:npm/%40radix-ui/react-tooltip@1.2.16",
        "version": "1.2.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-use-callback-ref",
        "purl": "pkg:npm/%40radix-ui/react-use-callback-ref@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-use-callback-ref",
        "purl": "pkg:npm/%40radix-ui/react-use-callback-ref@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-use-controllable-state",
        "purl": "pkg:npm/%40radix-ui/react-use-controllable-state@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-use-controllable-state",
        "purl": "pkg:npm/%40radix-ui/react-use-controllable-state@1.2.6",
        "version": "1.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-use-effect-event",
        "purl": "pkg:npm/%40radix-ui/react-use-effect-event@0.0.5",
        "version": "0.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-use-escape-keydown",
        "purl": "pkg:npm/%40radix-ui/react-use-escape-keydown@1.1.5",
        "version": "1.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-use-is-hydrated",
        "purl": "pkg:npm/%40radix-ui/react-use-is-hydrated@0.1.3",
        "version": "0.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-use-layout-effect",
        "purl": "pkg:npm/%40radix-ui/react-use-layout-effect@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-use-layout-effect",
        "purl": "pkg:npm/%40radix-ui/react-use-layout-effect@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-use-previous",
        "purl": "pkg:npm/%40radix-ui/react-use-previous@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-use-previous",
        "purl": "pkg:npm/%40radix-ui/react-use-previous@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-use-rect",
        "purl": "pkg:npm/%40radix-ui/react-use-rect@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "@radix-ui/react-use-size",
        "purl": "pkg:npm/%40radix-ui/react-use-size@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-use-size",
        "purl": "pkg:npm/%40radix-ui/react-use-size@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/react-visually-hidden",
        "purl": "pkg:npm/%40radix-ui/react-visually-hidden@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@radix-ui/rect",
        "purl": "pkg:npm/%40radix-ui/rect@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@react-aria/focus",
        "purl": "pkg:npm/%40react-aria/focus@3.22.1",
        "version": "3.22.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@react-aria/interactions",
        "purl": "pkg:npm/%40react-aria/interactions@3.28.1",
        "version": "3.28.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/body",
        "purl": "pkg:npm/%40react-email/body@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/button",
        "purl": "pkg:npm/%40react-email/button@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/code-block",
        "purl": "pkg:npm/%40react-email/code-block@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/code-inline",
        "purl": "pkg:npm/%40react-email/code-inline@0.0.5",
        "version": "0.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/column",
        "purl": "pkg:npm/%40react-email/column@0.0.13",
        "version": "0.0.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/components",
        "purl": "pkg:npm/%40react-email/components@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/container",
        "purl": "pkg:npm/%40react-email/container@0.0.15",
        "version": "0.0.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/font",
        "purl": "pkg:npm/%40react-email/font@0.0.9",
        "version": "0.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/head",
        "purl": "pkg:npm/%40react-email/head@0.0.12",
        "version": "0.0.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/heading",
        "purl": "pkg:npm/%40react-email/heading@0.0.15",
        "version": "0.0.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/hr",
        "purl": "pkg:npm/%40react-email/hr@0.0.11",
        "version": "0.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/html",
        "purl": "pkg:npm/%40react-email/html@0.0.11",
        "version": "0.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/img",
        "purl": "pkg:npm/%40react-email/img@0.0.11",
        "version": "0.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/link",
        "purl": "pkg:npm/%40react-email/link@0.0.12",
        "version": "0.0.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/markdown",
        "purl": "pkg:npm/%40react-email/markdown@0.0.17",
        "version": "0.0.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/preview",
        "purl": "pkg:npm/%40react-email/preview@0.0.13",
        "version": "0.0.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/preview-server",
        "purl": "pkg:npm/%40react-email/preview-server@5.2.10",
        "version": "5.2.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/render",
        "purl": "pkg:npm/%40react-email/render@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/row",
        "purl": "pkg:npm/%40react-email/row@0.0.12",
        "version": "0.0.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/section",
        "purl": "pkg:npm/%40react-email/section@0.0.16",
        "version": "0.0.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/tailwind",
        "purl": "pkg:npm/%40react-email/tailwind@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@react-email/text",
        "purl": "pkg:npm/%40react-email/text@0.1.5",
        "version": "0.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@react-types/shared",
        "purl": "pkg:npm/%40react-types/shared@3.37.0",
        "version": "3.37.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@reduxjs/toolkit",
        "purl": "pkg:npm/%40reduxjs/toolkit@2.11.2",
        "version": "2.11.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-android-arm-eabi",
        "purl": "pkg:npm/%40rolldown/binding-android-arm-eabi@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-android-arm-eabi",
        "purl": "pkg:npm/%40rolldown/binding-android-arm-eabi@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-android-arm64",
        "purl": "pkg:npm/%40rolldown/binding-android-arm64@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-android-arm64",
        "purl": "pkg:npm/%40rolldown/binding-android-arm64@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-darwin-arm64",
        "purl": "pkg:npm/%40rolldown/binding-darwin-arm64@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-darwin-arm64",
        "purl": "pkg:npm/%40rolldown/binding-darwin-arm64@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-darwin-x64",
        "purl": "pkg:npm/%40rolldown/binding-darwin-x64@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-darwin-x64",
        "purl": "pkg:npm/%40rolldown/binding-darwin-x64@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-freebsd-x64",
        "purl": "pkg:npm/%40rolldown/binding-freebsd-x64@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-freebsd-x64",
        "purl": "pkg:npm/%40rolldown/binding-freebsd-x64@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-linux-arm-gnueabihf",
        "purl": "pkg:npm/%40rolldown/binding-linux-arm-gnueabihf@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-linux-arm-gnueabihf",
        "purl": "pkg:npm/%40rolldown/binding-linux-arm-gnueabihf@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-linux-arm64-gnu",
        "purl": "pkg:npm/%40rolldown/binding-linux-arm64-gnu@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-linux-arm64-gnu",
        "purl": "pkg:npm/%40rolldown/binding-linux-arm64-gnu@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-linux-arm64-musl",
        "purl": "pkg:npm/%40rolldown/binding-linux-arm64-musl@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-linux-arm64-musl",
        "purl": "pkg:npm/%40rolldown/binding-linux-arm64-musl@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-linux-ppc64-gnu",
        "purl": "pkg:npm/%40rolldown/binding-linux-ppc64-gnu@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-linux-ppc64-gnu",
        "purl": "pkg:npm/%40rolldown/binding-linux-ppc64-gnu@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-linux-s390x-gnu",
        "purl": "pkg:npm/%40rolldown/binding-linux-s390x-gnu@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-linux-s390x-gnu",
        "purl": "pkg:npm/%40rolldown/binding-linux-s390x-gnu@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-linux-x64-gnu",
        "purl": "pkg:npm/%40rolldown/binding-linux-x64-gnu@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-linux-x64-gnu",
        "purl": "pkg:npm/%40rolldown/binding-linux-x64-gnu@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-linux-x64-musl",
        "purl": "pkg:npm/%40rolldown/binding-linux-x64-musl@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-linux-x64-musl",
        "purl": "pkg:npm/%40rolldown/binding-linux-x64-musl@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-openharmony-arm64",
        "purl": "pkg:npm/%40rolldown/binding-openharmony-arm64@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-openharmony-arm64",
        "purl": "pkg:npm/%40rolldown/binding-openharmony-arm64@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-win32-arm64-msvc",
        "purl": "pkg:npm/%40rolldown/binding-win32-arm64-msvc@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-win32-arm64-msvc",
        "purl": "pkg:npm/%40rolldown/binding-win32-arm64-msvc@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/binding-win32-x64-msvc",
        "purl": "pkg:npm/%40rolldown/binding-win32-x64-msvc@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rolldown/binding-win32-x64-msvc",
        "purl": "pkg:npm/%40rolldown/binding-win32-x64-msvc@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rolldown/pluginutils",
        "purl": "pkg:npm/%40rolldown/pluginutils@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rollup/plugin-inject",
        "purl": "pkg:npm/%40rollup/plugin-inject@5.0.5",
        "version": "5.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@rollup/pluginutils",
        "purl": "pkg:npm/%40rollup/pluginutils@5.1.3",
        "version": "5.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-android-arm-eabi",
        "purl": "pkg:npm/%40rollup/rollup-android-arm-eabi@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-android-arm-eabi",
        "purl": "pkg:npm/%40rollup/rollup-android-arm-eabi@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-android-arm64",
        "purl": "pkg:npm/%40rollup/rollup-android-arm64@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-android-arm64",
        "purl": "pkg:npm/%40rollup/rollup-android-arm64@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-darwin-arm64",
        "purl": "pkg:npm/%40rollup/rollup-darwin-arm64@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-darwin-arm64",
        "purl": "pkg:npm/%40rollup/rollup-darwin-arm64@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-darwin-x64",
        "purl": "pkg:npm/%40rollup/rollup-darwin-x64@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-darwin-x64",
        "purl": "pkg:npm/%40rollup/rollup-darwin-x64@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-freebsd-arm64",
        "purl": "pkg:npm/%40rollup/rollup-freebsd-arm64@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-freebsd-arm64",
        "purl": "pkg:npm/%40rollup/rollup-freebsd-arm64@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-freebsd-x64",
        "purl": "pkg:npm/%40rollup/rollup-freebsd-x64@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-freebsd-x64",
        "purl": "pkg:npm/%40rollup/rollup-freebsd-x64@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-arm-gnueabihf",
        "purl": "pkg:npm/%40rollup/rollup-linux-arm-gnueabihf@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-arm-gnueabihf",
        "purl": "pkg:npm/%40rollup/rollup-linux-arm-gnueabihf@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-arm-musleabihf",
        "purl": "pkg:npm/%40rollup/rollup-linux-arm-musleabihf@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-arm-musleabihf",
        "purl": "pkg:npm/%40rollup/rollup-linux-arm-musleabihf@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-arm64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-arm64-gnu@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-arm64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-arm64-gnu@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-arm64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-arm64-musl@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-arm64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-arm64-musl@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-loong64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-loong64-gnu@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-loong64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-loong64-gnu@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-loong64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-loong64-musl@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-loong64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-loong64-musl@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-ppc64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-ppc64-gnu@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-ppc64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-ppc64-gnu@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-ppc64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-ppc64-musl@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-ppc64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-ppc64-musl@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-riscv64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-riscv64-gnu@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-riscv64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-riscv64-gnu@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-riscv64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-riscv64-musl@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-riscv64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-riscv64-musl@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-s390x-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-s390x-gnu@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-s390x-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-s390x-gnu@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-x64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-x64-gnu@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-x64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-linux-x64-gnu@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-linux-x64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-x64-musl@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-linux-x64-musl",
        "purl": "pkg:npm/%40rollup/rollup-linux-x64-musl@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-openbsd-x64",
        "purl": "pkg:npm/%40rollup/rollup-openbsd-x64@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-openbsd-x64",
        "purl": "pkg:npm/%40rollup/rollup-openbsd-x64@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-openharmony-arm64",
        "purl": "pkg:npm/%40rollup/rollup-openharmony-arm64@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-openharmony-arm64",
        "purl": "pkg:npm/%40rollup/rollup-openharmony-arm64@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-win32-arm64-msvc",
        "purl": "pkg:npm/%40rollup/rollup-win32-arm64-msvc@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-win32-arm64-msvc",
        "purl": "pkg:npm/%40rollup/rollup-win32-arm64-msvc@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-win32-ia32-msvc",
        "purl": "pkg:npm/%40rollup/rollup-win32-ia32-msvc@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-win32-ia32-msvc",
        "purl": "pkg:npm/%40rollup/rollup-win32-ia32-msvc@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-win32-x64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-win32-x64-gnu@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-win32-x64-gnu",
        "purl": "pkg:npm/%40rollup/rollup-win32-x64-gnu@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rollup/rollup-win32-x64-msvc",
        "purl": "pkg:npm/%40rollup/rollup-win32-x64-msvc@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@rollup/rollup-win32-x64-msvc",
        "purl": "pkg:npm/%40rollup/rollup-win32-x64-msvc@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@rtsao/scc",
        "purl": "pkg:npm/%40rtsao/scc@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@selderee/plugin-htmlparser2",
        "purl": "pkg:npm/%40selderee/plugin-htmlparser2@0.11.0",
        "version": "0.11.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@sentry-internal/tracing",
        "purl": "pkg:npm/%40sentry-internal/tracing@7.119.2",
        "version": "7.119.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@sentry/core",
        "purl": "pkg:npm/%40sentry/core@7.119.2",
        "version": "7.119.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@sentry/integrations",
        "purl": "pkg:npm/%40sentry/integrations@7.119.2",
        "version": "7.119.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@sentry/node",
        "purl": "pkg:npm/%40sentry/node@7.119.2",
        "version": "7.119.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@sentry/types",
        "purl": "pkg:npm/%40sentry/types@7.119.2",
        "version": "7.119.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@sentry/utils",
        "purl": "pkg:npm/%40sentry/utils@7.119.2",
        "version": "7.119.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@simplewebauthn/browser",
        "purl": "pkg:npm/%40simplewebauthn/browser@13.2.2",
        "version": "13.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@simplewebauthn/server",
        "purl": "pkg:npm/%40simplewebauthn/server@13.2.2",
        "version": "13.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@sindresorhus/is",
        "purl": "pkg:npm/%40sindresorhus/is@4.6.0",
        "version": "4.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@sindresorhus/slugify",
        "purl": "pkg:npm/%40sindresorhus/slugify@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@sindresorhus/slugify",
        "purl": "pkg:npm/%40sindresorhus/slugify@2.2.1",
        "version": "2.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@sindresorhus/transliterate",
        "purl": "pkg:npm/%40sindresorhus/transliterate@0.1.2",
        "version": "0.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@sindresorhus/transliterate",
        "purl": "pkg:npm/%40sindresorhus/transliterate@1.6.0",
        "version": "1.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@slack/logger",
        "purl": "pkg:npm/%40slack/logger@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@slack/oauth",
        "purl": "pkg:npm/%40slack/oauth@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@slack/types",
        "purl": "pkg:npm/%40slack/types@2.14.0",
        "version": "2.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@slack/web-api",
        "purl": "pkg:npm/%40slack/web-api@7.8.0",
        "version": "7.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/config-resolver",
        "purl": "pkg:npm/%40smithy/config-resolver@4.4.17",
        "version": "4.4.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/core",
        "purl": "pkg:npm/%40smithy/core@3.35.0",
        "version": "3.35.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/credential-provider-imds",
        "purl": "pkg:npm/%40smithy/credential-provider-imds@4.5.2",
        "version": "4.5.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/fetch-http-handler",
        "purl": "pkg:npm/%40smithy/fetch-http-handler@5.8.0",
        "version": "5.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/hash-node",
        "purl": "pkg:npm/%40smithy/hash-node@4.2.14",
        "version": "4.2.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/invalid-dependency",
        "purl": "pkg:npm/%40smithy/invalid-dependency@4.2.14",
        "version": "4.2.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@smithy/is-array-buffer",
        "purl": "pkg:npm/%40smithy/is-array-buffer@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/is-array-buffer",
        "purl": "pkg:npm/%40smithy/is-array-buffer@4.2.2",
        "version": "4.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/middleware-content-length",
        "purl": "pkg:npm/%40smithy/middleware-content-length@4.2.14",
        "version": "4.2.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/middleware-endpoint",
        "purl": "pkg:npm/%40smithy/middleware-endpoint@4.4.32",
        "version": "4.4.32"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/middleware-retry",
        "purl": "pkg:npm/%40smithy/middleware-retry@4.5.7",
        "version": "4.5.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/middleware-serde",
        "purl": "pkg:npm/%40smithy/middleware-serde@4.2.20",
        "version": "4.2.20"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/middleware-stack",
        "purl": "pkg:npm/%40smithy/middleware-stack@4.2.14",
        "version": "4.2.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/node-config-provider",
        "purl": "pkg:npm/%40smithy/node-config-provider@4.3.14",
        "version": "4.3.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/node-http-handler",
        "purl": "pkg:npm/%40smithy/node-http-handler@4.12.1",
        "version": "4.12.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/property-provider",
        "purl": "pkg:npm/%40smithy/property-provider@4.2.14",
        "version": "4.2.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/protocol-http",
        "purl": "pkg:npm/%40smithy/protocol-http@5.3.14",
        "version": "5.3.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/querystring-parser",
        "purl": "pkg:npm/%40smithy/querystring-parser@4.2.14",
        "version": "4.2.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/service-error-classification",
        "purl": "pkg:npm/%40smithy/service-error-classification@4.3.1",
        "version": "4.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/shared-ini-file-loader",
        "purl": "pkg:npm/%40smithy/shared-ini-file-loader@4.4.9",
        "version": "4.4.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/signature-v4",
        "purl": "pkg:npm/%40smithy/signature-v4@5.7.4",
        "version": "5.7.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/smithy-client",
        "purl": "pkg:npm/%40smithy/smithy-client@4.12.13",
        "version": "4.12.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/types",
        "purl": "pkg:npm/%40smithy/types@4.19.0",
        "version": "4.19.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/url-parser",
        "purl": "pkg:npm/%40smithy/url-parser@4.2.14",
        "version": "4.2.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-base64",
        "purl": "pkg:npm/%40smithy/util-base64@4.3.2",
        "version": "4.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-body-length-browser",
        "purl": "pkg:npm/%40smithy/util-body-length-browser@4.2.2",
        "version": "4.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-body-length-node",
        "purl": "pkg:npm/%40smithy/util-body-length-node@4.2.3",
        "version": "4.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-buffer-from",
        "purl": "pkg:npm/%40smithy/util-buffer-from@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-buffer-from",
        "purl": "pkg:npm/%40smithy/util-buffer-from@4.2.2",
        "version": "4.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-config-provider",
        "purl": "pkg:npm/%40smithy/util-config-provider@4.2.2",
        "version": "4.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-defaults-mode-browser",
        "purl": "pkg:npm/%40smithy/util-defaults-mode-browser@4.3.49",
        "version": "4.3.49"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-defaults-mode-node",
        "purl": "pkg:npm/%40smithy/util-defaults-mode-node@4.2.54",
        "version": "4.2.54"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-endpoints",
        "purl": "pkg:npm/%40smithy/util-endpoints@3.4.2",
        "version": "3.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-hex-encoding",
        "purl": "pkg:npm/%40smithy/util-hex-encoding@4.2.2",
        "version": "4.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-middleware",
        "purl": "pkg:npm/%40smithy/util-middleware@4.2.14",
        "version": "4.2.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-retry",
        "purl": "pkg:npm/%40smithy/util-retry@4.3.6",
        "version": "4.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-stream",
        "purl": "pkg:npm/%40smithy/util-stream@4.5.25",
        "version": "4.5.25"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-utf8",
        "purl": "pkg:npm/%40smithy/util-utf8@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-utf8",
        "purl": "pkg:npm/%40smithy/util-utf8@4.2.2",
        "version": "4.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/util-waiter",
        "purl": "pkg:npm/%40smithy/util-waiter@4.3.0",
        "version": "4.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@smithy/uuid",
        "purl": "pkg:npm/%40smithy/uuid@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@socket.io/component-emitter",
        "purl": "pkg:npm/%40socket.io/component-emitter@3.1.2",
        "version": "3.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@standard-schema/spec",
        "purl": "pkg:npm/%40standard-schema/spec@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@standard-schema/utils",
        "purl": "pkg:npm/%40standard-schema/utils@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@storybook/addon-a11y",
        "purl": "pkg:npm/%40storybook/addon-a11y@10.3.6",
        "version": "10.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@storybook/addon-docs",
        "purl": "pkg:npm/%40storybook/addon-docs@10.3.6",
        "version": "10.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@storybook/builder-vite",
        "purl": "pkg:npm/%40storybook/builder-vite@10.3.6",
        "version": "10.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@storybook/csf-plugin",
        "purl": "pkg:npm/%40storybook/csf-plugin@10.3.6",
        "version": "10.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@storybook/global",
        "purl": "pkg:npm/%40storybook/global@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@storybook/icons",
        "purl": "pkg:npm/%40storybook/icons@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@storybook/react",
        "purl": "pkg:npm/%40storybook/react@10.3.6",
        "version": "10.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@storybook/react-dom-shim",
        "purl": "pkg:npm/%40storybook/react-dom-shim@10.3.6",
        "version": "10.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@storybook/react-vite",
        "purl": "pkg:npm/%40storybook/react-vite@10.3.6",
        "version": "10.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@stylistic/eslint-plugin",
        "purl": "pkg:npm/%40stylistic/eslint-plugin@2.13.0",
        "version": "2.13.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@stylistic/eslint-plugin",
        "purl": "pkg:npm/%40stylistic/eslint-plugin@5.10.0",
        "version": "5.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@swc/helpers",
        "purl": "pkg:npm/%40swc/helpers@0.5.15",
        "version": "0.5.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@swc/helpers",
        "purl": "pkg:npm/%40swc/helpers@0.5.23",
        "version": "0.5.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/node",
        "purl": "pkg:npm/%40tailwindcss/node@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide",
        "purl": "pkg:npm/%40tailwindcss/oxide@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-android-arm64",
        "purl": "pkg:npm/%40tailwindcss/oxide-android-arm64@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-darwin-arm64",
        "purl": "pkg:npm/%40tailwindcss/oxide-darwin-arm64@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-darwin-x64",
        "purl": "pkg:npm/%40tailwindcss/oxide-darwin-x64@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-freebsd-x64",
        "purl": "pkg:npm/%40tailwindcss/oxide-freebsd-x64@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-linux-arm-gnueabihf",
        "purl": "pkg:npm/%40tailwindcss/oxide-linux-arm-gnueabihf@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-linux-arm64-gnu",
        "purl": "pkg:npm/%40tailwindcss/oxide-linux-arm64-gnu@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-linux-arm64-musl",
        "purl": "pkg:npm/%40tailwindcss/oxide-linux-arm64-musl@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-linux-x64-gnu",
        "purl": "pkg:npm/%40tailwindcss/oxide-linux-x64-gnu@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-linux-x64-musl",
        "purl": "pkg:npm/%40tailwindcss/oxide-linux-x64-musl@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-wasm32-wasi",
        "purl": "pkg:npm/%40tailwindcss/oxide-wasm32-wasi@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-win32-arm64-msvc",
        "purl": "pkg:npm/%40tailwindcss/oxide-win32-arm64-msvc@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/oxide-win32-x64-msvc",
        "purl": "pkg:npm/%40tailwindcss/oxide-win32-x64-msvc@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tailwindcss/postcss",
        "purl": "pkg:npm/%40tailwindcss/postcss@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/eslint-plugin-router",
        "purl": "pkg:npm/%40tanstack/eslint-plugin-router@1.120.17",
        "version": "1.120.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/history",
        "purl": "pkg:npm/%40tanstack/history@1.95.0",
        "version": "1.95.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/query-core",
        "purl": "pkg:npm/%40tanstack/query-core@5.62.7",
        "version": "5.62.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/react-query",
        "purl": "pkg:npm/%40tanstack/react-query@5.62.7",
        "version": "5.62.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/react-router",
        "purl": "pkg:npm/%40tanstack/react-router@1.95.1",
        "version": "1.95.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/react-store",
        "purl": "pkg:npm/%40tanstack/react-store@0.7.0",
        "version": "0.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/react-table",
        "purl": "pkg:npm/%40tanstack/react-table@8.21.3",
        "version": "8.21.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/react-virtual",
        "purl": "pkg:npm/%40tanstack/react-virtual@3.13.23",
        "version": "3.13.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/router-generator",
        "purl": "pkg:npm/%40tanstack/router-generator@1.95.1",
        "version": "1.95.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/router-plugin",
        "purl": "pkg:npm/%40tanstack/router-plugin@1.95.1",
        "version": "1.95.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/store",
        "purl": "pkg:npm/%40tanstack/store@0.7.0",
        "version": "0.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/table-core",
        "purl": "pkg:npm/%40tanstack/table-core@8.21.3",
        "version": "8.21.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/virtual-core",
        "purl": "pkg:npm/%40tanstack/virtual-core@3.13.23",
        "version": "3.13.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/virtual-file-routes",
        "purl": "pkg:npm/%40tanstack/virtual-file-routes@1.87.6",
        "version": "1.87.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tanstack/zod-adapter",
        "purl": "pkg:npm/%40tanstack/zod-adapter@1.91.0",
        "version": "1.91.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@techteamer/ocsp",
        "purl": "pkg:npm/%40techteamer/ocsp@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@testing-library/dom",
        "purl": "pkg:npm/%40testing-library/dom@10.4.1",
        "version": "10.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@testing-library/jest-dom",
        "purl": "pkg:npm/%40testing-library/jest-dom@6.9.1",
        "version": "6.9.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@testing-library/user-event",
        "purl": "pkg:npm/%40testing-library/user-event@14.6.7",
        "version": "14.6.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@tokenizer/inflate",
        "purl": "pkg:npm/%40tokenizer/inflate@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@tokenizer/token",
        "purl": "pkg:npm/%40tokenizer/token@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@tybys/wasm-util",
        "purl": "pkg:npm/%40tybys/wasm-util@0.10.1",
        "version": "0.10.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@tybys/wasm-util",
        "purl": "pkg:npm/%40tybys/wasm-util@0.10.4",
        "version": "0.10.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/aria-query",
        "purl": "pkg:npm/%40types/aria-query@5.0.4",
        "version": "5.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/babel__core",
        "purl": "pkg:npm/%40types/babel__core@7.20.5",
        "version": "7.20.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/babel__generator",
        "purl": "pkg:npm/%40types/babel__generator@7.6.8",
        "version": "7.6.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/babel__template",
        "purl": "pkg:npm/%40types/babel__template@7.4.4",
        "version": "7.4.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/babel__traverse",
        "purl": "pkg:npm/%40types/babel__traverse@7.28.0",
        "version": "7.28.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/bcrypt",
        "purl": "pkg:npm/%40types/bcrypt@5.0.2",
        "version": "5.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/body-parser",
        "purl": "pkg:npm/%40types/body-parser@1.19.5",
        "version": "1.19.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/btoa-lite",
        "purl": "pkg:npm/%40types/btoa-lite@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/chai",
        "purl": "pkg:npm/%40types/chai@5.2.3",
        "version": "5.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/command-line-args",
        "purl": "pkg:npm/%40types/command-line-args@5.2.3",
        "version": "5.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/command-line-usage",
        "purl": "pkg:npm/%40types/command-line-usage@5.0.4",
        "version": "5.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/connect",
        "purl": "pkg:npm/%40types/connect@3.4.38",
        "version": "3.4.38"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/cors",
        "purl": "pkg:npm/%40types/cors@2.8.17",
        "version": "2.8.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-array",
        "purl": "pkg:npm/%40types/d3-array@3.2.2",
        "version": "3.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-color",
        "purl": "pkg:npm/%40types/d3-color@3.1.3",
        "version": "3.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-drag",
        "purl": "pkg:npm/%40types/d3-drag@3.0.7",
        "version": "3.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-ease",
        "purl": "pkg:npm/%40types/d3-ease@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-interpolate",
        "purl": "pkg:npm/%40types/d3-interpolate@3.0.4",
        "version": "3.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-path",
        "purl": "pkg:npm/%40types/d3-path@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-scale",
        "purl": "pkg:npm/%40types/d3-scale@4.0.9",
        "version": "4.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-selection",
        "purl": "pkg:npm/%40types/d3-selection@3.0.11",
        "version": "3.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-shape",
        "purl": "pkg:npm/%40types/d3-shape@3.1.8",
        "version": "3.1.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-time",
        "purl": "pkg:npm/%40types/d3-time@3.0.4",
        "version": "3.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-timer",
        "purl": "pkg:npm/%40types/d3-timer@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-transition",
        "purl": "pkg:npm/%40types/d3-transition@3.0.9",
        "version": "3.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/d3-zoom",
        "purl": "pkg:npm/%40types/d3-zoom@3.0.8",
        "version": "3.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/dagre",
        "purl": "pkg:npm/%40types/dagre@0.7.52",
        "version": "0.7.52"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/debug",
        "purl": "pkg:npm/%40types/debug@4.1.12",
        "version": "4.1.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/deep-eql",
        "purl": "pkg:npm/%40types/deep-eql@4.0.2",
        "version": "4.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/dns-packet",
        "purl": "pkg:npm/%40types/dns-packet@5.6.5",
        "version": "5.6.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/doctrine",
        "purl": "pkg:npm/%40types/doctrine@0.0.9",
        "version": "0.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/estree",
        "purl": "pkg:npm/%40types/estree@1.0.8",
        "version": "1.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/estree",
        "purl": "pkg:npm/%40types/estree@1.0.9",
        "version": "1.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "@types/estree-jsx",
        "purl": "pkg:npm/%40types/estree-jsx@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/express",
        "purl": "pkg:npm/%40types/express@4.17.23",
        "version": "4.17.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/express-serve-static-core",
        "purl": "pkg:npm/%40types/express-serve-static-core@4.17.41",
        "version": "4.17.41"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/file-saver",
        "purl": "pkg:npm/%40types/file-saver@2.0.7",
        "version": "2.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "@types/hast",
        "purl": "pkg:npm/%40types/hast@3.0.4",
        "version": "3.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/http-errors",
        "purl": "pkg:npm/%40types/http-errors@2.0.4",
        "version": "2.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/isomorphic-fetch",
        "purl": "pkg:npm/%40types/isomorphic-fetch@0.0.35",
        "version": "0.0.35"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/json-schema",
        "purl": "pkg:npm/%40types/json-schema@7.0.15",
        "version": "7.0.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/json5",
        "purl": "pkg:npm/%40types/json5@0.0.29",
        "version": "0.0.29"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/jsonwebtoken",
        "purl": "pkg:npm/%40types/jsonwebtoken@9.0.0",
        "version": "9.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/jsonwebtoken",
        "purl": "pkg:npm/%40types/jsonwebtoken@9.0.6",
        "version": "9.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/jsrp",
        "purl": "pkg:npm/%40types/jsrp@0.2.6",
        "version": "0.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/jssha",
        "purl": "pkg:npm/%40types/jssha@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/ldapjs",
        "purl": "pkg:npm/%40types/ldapjs@2.2.5",
        "version": "2.2.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/libsodium-wrappers",
        "purl": "pkg:npm/%40types/libsodium-wrappers@0.7.13",
        "version": "0.7.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/lodash",
        "purl": "pkg:npm/%40types/lodash@4.14.202",
        "version": "4.14.202"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/lodash.isequal",
        "purl": "pkg:npm/%40types/lodash.isequal@4.5.8",
        "version": "4.5.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "@types/mdast",
        "purl": "pkg:npm/%40types/mdast@4.0.4",
        "version": "4.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/mdx",
        "purl": "pkg:npm/%40types/mdx@2.0.13",
        "version": "2.0.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/mime",
        "purl": "pkg:npm/%40types/mime@1.3.5",
        "version": "1.3.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/ms",
        "purl": "pkg:npm/%40types/ms@0.7.34",
        "version": "0.7.34"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/ms",
        "purl": "pkg:npm/%40types/ms@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/netmask",
        "purl": "pkg:npm/%40types/netmask@2.0.6",
        "version": "2.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/node",
        "purl": "pkg:npm/%40types/node@18.19.130",
        "version": "18.19.130"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/node",
        "purl": "pkg:npm/%40types/node@18.19.47",
        "version": "18.19.47"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/node",
        "purl": "pkg:npm/%40types/node@20.19.39",
        "version": "20.19.39"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@types/node",
        "purl": "pkg:npm/%40types/node@22.19.17",
        "version": "22.19.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/node",
        "purl": "pkg:npm/%40types/node@22.20.1",
        "version": "22.20.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/node",
        "purl": "pkg:npm/%40types/node@26.6.3",
        "version": "26.6.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/node-fetch",
        "purl": "pkg:npm/%40types/node-fetch@2.6.11",
        "version": "2.6.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/node-forge",
        "purl": "pkg:npm/%40types/node-forge@1.3.14",
        "version": "1.3.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/nprogress",
        "purl": "pkg:npm/%40types/nprogress@0.2.3",
        "version": "0.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/oauth",
        "purl": "pkg:npm/%40types/oauth@0.9.4",
        "version": "0.9.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/opossum",
        "purl": "pkg:npm/%40types/opossum@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/oracledb",
        "purl": "pkg:npm/%40types/oracledb@6.10.0",
        "version": "6.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/parse-json",
        "purl": "pkg:npm/%40types/parse-json@4.0.2",
        "version": "4.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/passport",
        "purl": "pkg:npm/%40types/passport@1.0.17",
        "version": "1.0.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/passport-google-oauth20",
        "purl": "pkg:npm/%40types/passport-google-oauth20@2.0.14",
        "version": "2.0.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/passport-oauth2",
        "purl": "pkg:npm/%40types/passport-oauth2@1.4.15",
        "version": "1.4.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/passport-strategy",
        "purl": "pkg:npm/%40types/passport-strategy@0.2.38",
        "version": "0.2.38"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/pg",
        "purl": "pkg:npm/%40types/pg@8.10.9",
        "version": "8.10.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/picomatch",
        "purl": "pkg:npm/%40types/picomatch@2.3.3",
        "version": "2.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/picomatch",
        "purl": "pkg:npm/%40types/picomatch@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/pkcs11js",
        "purl": "pkg:npm/%40types/pkcs11js@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/prompt-sync",
        "purl": "pkg:npm/%40types/prompt-sync@4.2.3",
        "version": "4.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/qrcode",
        "purl": "pkg:npm/%40types/qrcode@1.5.5",
        "version": "1.5.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/qs",
        "purl": "pkg:npm/%40types/qs@6.15.1",
        "version": "6.15.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/range-parser",
        "purl": "pkg:npm/%40types/range-parser@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/react",
        "purl": "pkg:npm/%40types/react@19.1.2",
        "version": "19.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/react",
        "purl": "pkg:npm/%40types/react@19.3.0",
        "version": "19.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/react-dom",
        "purl": "pkg:npm/%40types/react-dom@19.3.0",
        "version": "19.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/react-helmet",
        "purl": "pkg:npm/%40types/react-helmet@6.1.11",
        "version": "6.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/react-transition-group",
        "purl": "pkg:npm/%40types/react-transition-group@4.4.12",
        "version": "4.4.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/readable-stream",
        "purl": "pkg:npm/%40types/readable-stream@4.0.25",
        "version": "4.0.25"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/resolve",
        "purl": "pkg:npm/%40types/resolve@1.20.6",
        "version": "1.20.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/retry",
        "purl": "pkg:npm/%40types/retry@0.12.0",
        "version": "0.12.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/safe-regex",
        "purl": "pkg:npm/%40types/safe-regex@1.1.6",
        "version": "1.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/send",
        "purl": "pkg:npm/%40types/send@0.17.4",
        "version": "0.17.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/serve-static",
        "purl": "pkg:npm/%40types/serve-static@1.15.5",
        "version": "1.15.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/sjcl",
        "purl": "pkg:npm/%40types/sjcl@1.0.34",
        "version": "1.0.34"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/ssh2",
        "purl": "pkg:npm/%40types/ssh2@1.15.5",
        "version": "1.15.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/sshpk",
        "purl": "pkg:npm/%40types/sshpk@1.10.3",
        "version": "1.10.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/triple-beam",
        "purl": "pkg:npm/%40types/triple-beam@1.3.5",
        "version": "1.3.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/trusted-types",
        "purl": "pkg:npm/%40types/trusted-types@2.0.7",
        "version": "2.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/tunnel",
        "purl": "pkg:npm/%40types/tunnel@0.0.3",
        "version": "0.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "@types/unist",
        "purl": "pkg:npm/%40types/unist@2.0.11",
        "version": "2.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "@types/unist",
        "purl": "pkg:npm/%40types/unist@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@types/use-sync-external-store",
        "purl": "pkg:npm/%40types/use-sync-external-store@0.0.6",
        "version": "0.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/uuid",
        "purl": "pkg:npm/%40types/uuid@9.0.7",
        "version": "9.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/webidl-conversions",
        "purl": "pkg:npm/%40types/webidl-conversions@7.0.3",
        "version": "7.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@types/whatwg-url",
        "purl": "pkg:npm/%40types/whatwg-url@11.0.5",
        "version": "11.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/ws",
        "purl": "pkg:npm/%40types/ws@6.0.4",
        "version": "6.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/ws",
        "purl": "pkg:npm/%40types/ws@8.18.1",
        "version": "8.18.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/xml-encryption",
        "purl": "pkg:npm/%40types/xml-encryption@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@types/xml2js",
        "purl": "pkg:npm/%40types/xml2js@0.4.14",
        "version": "0.4.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/eslint-plugin",
        "purl": "pkg:npm/%40typescript-eslint/eslint-plugin@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/eslint-plugin",
        "purl": "pkg:npm/%40typescript-eslint/eslint-plugin@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/parser",
        "purl": "pkg:npm/%40typescript-eslint/parser@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/parser",
        "purl": "pkg:npm/%40typescript-eslint/parser@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/project-service",
        "purl": "pkg:npm/%40typescript-eslint/project-service@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/project-service",
        "purl": "pkg:npm/%40typescript-eslint/project-service@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/scope-manager",
        "purl": "pkg:npm/%40typescript-eslint/scope-manager@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/scope-manager",
        "purl": "pkg:npm/%40typescript-eslint/scope-manager@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/tsconfig-utils",
        "purl": "pkg:npm/%40typescript-eslint/tsconfig-utils@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/tsconfig-utils",
        "purl": "pkg:npm/%40typescript-eslint/tsconfig-utils@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/type-utils",
        "purl": "pkg:npm/%40typescript-eslint/type-utils@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/type-utils",
        "purl": "pkg:npm/%40typescript-eslint/type-utils@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/types",
        "purl": "pkg:npm/%40typescript-eslint/types@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/types",
        "purl": "pkg:npm/%40typescript-eslint/types@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/typescript-estree",
        "purl": "pkg:npm/%40typescript-eslint/typescript-estree@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/typescript-estree",
        "purl": "pkg:npm/%40typescript-eslint/typescript-estree@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/utils",
        "purl": "pkg:npm/%40typescript-eslint/utils@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/utils",
        "purl": "pkg:npm/%40typescript-eslint/utils@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@typescript-eslint/visitor-keys",
        "purl": "pkg:npm/%40typescript-eslint/visitor-keys@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typescript-eslint/visitor-keys",
        "purl": "pkg:npm/%40typescript-eslint/visitor-keys@8.71.0",
        "version": "8.71.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@typespec/ts-http-runtime",
        "purl": "pkg:npm/%40typespec/ts-http-runtime@0.3.9",
        "version": "0.3.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@ucast/core",
        "purl": "pkg:npm/%40ucast/core@1.10.2",
        "version": "1.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ucast/js",
        "purl": "pkg:npm/%40ucast/js@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "@ucast/js",
        "purl": "pkg:npm/%40ucast/js@3.0.4",
        "version": "3.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@ucast/mongo",
        "purl": "pkg:npm/%40ucast/mongo@2.4.3",
        "version": "2.4.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@ucast/mongo2js",
        "purl": "pkg:npm/%40ucast/mongo2js@1.3.4",
        "version": "1.3.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "@ungap/structured-clone",
        "purl": "pkg:npm/%40ungap/structured-clone@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "@ungap/structured-clone",
        "purl": "pkg:npm/%40ungap/structured-clone@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-android-arm-eabi",
        "purl": "pkg:npm/%40unrs/resolver-binding-android-arm-eabi@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-android-arm64",
        "purl": "pkg:npm/%40unrs/resolver-binding-android-arm64@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-darwin-arm64",
        "purl": "pkg:npm/%40unrs/resolver-binding-darwin-arm64@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-darwin-x64",
        "purl": "pkg:npm/%40unrs/resolver-binding-darwin-x64@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-freebsd-x64",
        "purl": "pkg:npm/%40unrs/resolver-binding-freebsd-x64@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-arm-gnueabihf",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-arm-gnueabihf@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-arm-musleabihf",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-arm-musleabihf@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-arm64-gnu",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-arm64-gnu@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-arm64-musl",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-arm64-musl@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-loong64-gnu",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-loong64-gnu@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-loong64-musl",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-loong64-musl@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-ppc64-gnu",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-ppc64-gnu@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-riscv64-gnu",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-riscv64-gnu@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-riscv64-musl",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-riscv64-musl@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-s390x-gnu",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-s390x-gnu@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-x64-gnu",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-x64-gnu@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-linux-x64-musl",
        "purl": "pkg:npm/%40unrs/resolver-binding-linux-x64-musl@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-openharmony-arm64",
        "purl": "pkg:npm/%40unrs/resolver-binding-openharmony-arm64@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-wasm32-wasi",
        "purl": "pkg:npm/%40unrs/resolver-binding-wasm32-wasi@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-win32-arm64-msvc",
        "purl": "pkg:npm/%40unrs/resolver-binding-win32-arm64-msvc@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-win32-ia32-msvc",
        "purl": "pkg:npm/%40unrs/resolver-binding-win32-ia32-msvc@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@unrs/resolver-binding-win32-x64-msvc",
        "purl": "pkg:npm/%40unrs/resolver-binding-win32-x64-msvc@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "@vercel/oidc",
        "purl": "pkg:npm/%40vercel/oidc@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitejs/plugin-react",
        "purl": "pkg:npm/%40vitejs/plugin-react@6.1.1",
        "version": "6.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/expect",
        "purl": "pkg:npm/%40vitest/expect@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@vitest/expect",
        "purl": "pkg:npm/%40vitest/expect@3.2.7",
        "version": "3.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/expect",
        "purl": "pkg:npm/%40vitest/expect@4.1.11",
        "version": "4.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@vitest/mocker",
        "purl": "pkg:npm/%40vitest/mocker@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@vitest/mocker",
        "purl": "pkg:npm/%40vitest/mocker@3.2.7",
        "version": "3.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/mocker",
        "purl": "pkg:npm/%40vitest/mocker@4.1.11",
        "version": "4.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/pretty-format",
        "purl": "pkg:npm/%40vitest/pretty-format@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@vitest/pretty-format",
        "purl": "pkg:npm/%40vitest/pretty-format@3.2.7",
        "version": "3.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/pretty-format",
        "purl": "pkg:npm/%40vitest/pretty-format@4.1.11",
        "version": "4.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@vitest/runner",
        "purl": "pkg:npm/%40vitest/runner@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@vitest/runner",
        "purl": "pkg:npm/%40vitest/runner@3.2.7",
        "version": "3.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/runner",
        "purl": "pkg:npm/%40vitest/runner@4.1.11",
        "version": "4.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "@vitest/snapshot",
        "purl": "pkg:npm/%40vitest/snapshot@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@vitest/snapshot",
        "purl": "pkg:npm/%40vitest/snapshot@3.2.7",
        "version": "3.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/snapshot",
        "purl": "pkg:npm/%40vitest/snapshot@4.1.11",
        "version": "4.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/spy",
        "purl": "pkg:npm/%40vitest/spy@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@vitest/spy",
        "purl": "pkg:npm/%40vitest/spy@3.2.7",
        "version": "3.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/spy",
        "purl": "pkg:npm/%40vitest/spy@4.1.11",
        "version": "4.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/utils",
        "purl": "pkg:npm/%40vitest/utils@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@vitest/utils",
        "purl": "pkg:npm/%40vitest/utils@3.2.7",
        "version": "3.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@vitest/utils",
        "purl": "pkg:npm/%40vitest/utils@4.1.11",
        "version": "4.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@webcontainer/env",
        "purl": "pkg:npm/%40webcontainer/env@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@xmldom/is-dom-node",
        "purl": "pkg:npm/%40xmldom/is-dom-node@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@xmldom/xmldom",
        "purl": "pkg:npm/%40xmldom/xmldom@0.8.15",
        "version": "0.8.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@xterm/addon-fit",
        "purl": "pkg:npm/%40xterm/addon-fit@0.10.0",
        "version": "0.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@xterm/addon-web-links",
        "purl": "pkg:npm/%40xterm/addon-web-links@0.12.0",
        "version": "0.12.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@xterm/xterm",
        "purl": "pkg:npm/%40xterm/xterm@5.5.0",
        "version": "5.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@xyflow/react",
        "purl": "pkg:npm/%40xyflow/react@12.4.4",
        "version": "12.4.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "@xyflow/system",
        "purl": "pkg:npm/%40xyflow/system@0.0.52",
        "version": "0.0.52"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-android-arm64",
        "purl": "pkg:npm/%40yuku-codegen/binding-android-arm64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-darwin-arm64",
        "purl": "pkg:npm/%40yuku-codegen/binding-darwin-arm64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-darwin-x64",
        "purl": "pkg:npm/%40yuku-codegen/binding-darwin-x64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-freebsd-x64",
        "purl": "pkg:npm/%40yuku-codegen/binding-freebsd-x64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-linux-arm-gnu",
        "purl": "pkg:npm/%40yuku-codegen/binding-linux-arm-gnu@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-linux-arm-musl",
        "purl": "pkg:npm/%40yuku-codegen/binding-linux-arm-musl@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-linux-arm64-gnu",
        "purl": "pkg:npm/%40yuku-codegen/binding-linux-arm64-gnu@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-linux-arm64-musl",
        "purl": "pkg:npm/%40yuku-codegen/binding-linux-arm64-musl@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-linux-x64-gnu",
        "purl": "pkg:npm/%40yuku-codegen/binding-linux-x64-gnu@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-linux-x64-musl",
        "purl": "pkg:npm/%40yuku-codegen/binding-linux-x64-musl@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-win32-arm64",
        "purl": "pkg:npm/%40yuku-codegen/binding-win32-arm64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-codegen/binding-win32-x64",
        "purl": "pkg:npm/%40yuku-codegen/binding-win32-x64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-android-arm64",
        "purl": "pkg:npm/%40yuku-parser/binding-android-arm64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-darwin-arm64",
        "purl": "pkg:npm/%40yuku-parser/binding-darwin-arm64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-darwin-x64",
        "purl": "pkg:npm/%40yuku-parser/binding-darwin-x64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-freebsd-x64",
        "purl": "pkg:npm/%40yuku-parser/binding-freebsd-x64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-linux-arm-gnu",
        "purl": "pkg:npm/%40yuku-parser/binding-linux-arm-gnu@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-linux-arm-musl",
        "purl": "pkg:npm/%40yuku-parser/binding-linux-arm-musl@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-linux-arm64-gnu",
        "purl": "pkg:npm/%40yuku-parser/binding-linux-arm64-gnu@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-linux-arm64-musl",
        "purl": "pkg:npm/%40yuku-parser/binding-linux-arm64-musl@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-linux-x64-gnu",
        "purl": "pkg:npm/%40yuku-parser/binding-linux-x64-gnu@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-linux-x64-musl",
        "purl": "pkg:npm/%40yuku-parser/binding-linux-x64-musl@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-win32-arm64",
        "purl": "pkg:npm/%40yuku-parser/binding-win32-arm64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-parser/binding-win32-x64",
        "purl": "pkg:npm/%40yuku-parser/binding-win32-x64@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "@yuku-toolchain/types",
        "purl": "pkg:npm/%40yuku-toolchain/types@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "abbrev",
        "purl": "pkg:npm/abbrev@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "abbrev",
        "purl": "pkg:npm/abbrev@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "abort-controller",
        "purl": "pkg:npm/abort-controller@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "abstract-logging",
        "purl": "pkg:npm/abstract-logging@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "accepts",
        "purl": "pkg:npm/accepts@1.3.8",
        "version": "1.3.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "accepts",
        "purl": "pkg:npm/accepts@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "acme-client",
        "purl": "pkg:npm/acme-client@5.4.0",
        "version": "5.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "package-lock.json",
        "name": "acorn",
        "purl": "pkg:npm/acorn@8.14.0",
        "version": "8.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "acorn",
        "purl": "pkg:npm/acorn@8.15.0",
        "version": "8.15.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "acorn",
        "purl": "pkg:npm/acorn@8.18.0",
        "version": "8.18.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "acorn-jsx",
        "purl": "pkg:npm/acorn-jsx@5.3.2",
        "version": "5.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "adaptivecards",
        "purl": "pkg:npm/adaptivecards@1.2.3",
        "version": "1.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "adm-zip",
        "purl": "pkg:npm/adm-zip@0.6.1",
        "version": "0.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "agent-base",
        "purl": "pkg:npm/agent-base@6.0.2",
        "version": "6.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "agent-base",
        "purl": "pkg:npm/agent-base@7.1.1",
        "version": "7.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "agent-base",
        "purl": "pkg:npm/agent-base@7.1.3",
        "version": "7.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "agent-base",
        "purl": "pkg:npm/agent-base@7.1.4",
        "version": "7.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "aggregate-error",
        "purl": "pkg:npm/aggregate-error@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "ai",
        "purl": "pkg:npm/ai@6.0.154",
        "version": "6.0.154"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ajv",
        "purl": "pkg:npm/ajv@6.14.0",
        "version": "6.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ajv",
        "purl": "pkg:npm/ajv@8.18.0",
        "version": "8.18.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "ajv",
        "purl": "pkg:npm/ajv@8.20.0",
        "version": "8.20.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ajv-draft-04",
        "purl": "pkg:npm/ajv-draft-04@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ajv-formats",
        "purl": "pkg:npm/ajv-formats@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ansi-escapes",
        "purl": "pkg:npm/ansi-escapes@4.3.2",
        "version": "4.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ansi-regex",
        "purl": "pkg:npm/ansi-regex@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ansi-regex",
        "purl": "pkg:npm/ansi-regex@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ansi-regex",
        "purl": "pkg:npm/ansi-regex@6.0.1",
        "version": "6.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ansi-styles",
        "purl": "pkg:npm/ansi-styles@3.2.1",
        "version": "3.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ansi-styles",
        "purl": "pkg:npm/ansi-styles@4.3.0",
        "version": "4.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "ansi-styles",
        "purl": "pkg:npm/ansi-styles@5.2.0",
        "version": "5.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ansi-styles",
        "purl": "pkg:npm/ansi-styles@6.2.1",
        "version": "6.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "anymatch",
        "purl": "pkg:npm/anymatch@3.1.3",
        "version": "3.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "apache-arrow",
        "purl": "pkg:npm/apache-arrow@20.0.0",
        "version": "20.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "aproba",
        "purl": "pkg:npm/aproba@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "are-we-there-yet",
        "purl": "pkg:npm/are-we-there-yet@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "argon2",
        "purl": "pkg:npm/argon2@0.45.1",
        "version": "0.45.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Python-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "argparse",
        "purl": "pkg:npm/argparse@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "args",
        "purl": "pkg:npm/args@5.0.3",
        "version": "5.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "aria-hidden",
        "purl": "pkg:npm/aria-hidden@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "aria-query",
        "purl": "pkg:npm/aria-query@5.3.0",
        "version": "5.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "aria-query",
        "purl": "pkg:npm/aria-query@5.3.2",
        "version": "5.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "array-back",
        "purl": "pkg:npm/array-back@6.2.2",
        "version": "6.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "array-buffer-byte-length",
        "purl": "pkg:npm/array-buffer-byte-length@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "array-flatten",
        "purl": "pkg:npm/array-flatten@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "array-includes",
        "purl": "pkg:npm/array-includes@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "array.prototype.findlast",
        "purl": "pkg:npm/array.prototype.findlast@1.2.5",
        "version": "1.2.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "array.prototype.findlastindex",
        "purl": "pkg:npm/array.prototype.findlastindex@1.2.6",
        "version": "1.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "array.prototype.flat",
        "purl": "pkg:npm/array.prototype.flat@1.3.3",
        "version": "1.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "array.prototype.flatmap",
        "purl": "pkg:npm/array.prototype.flatmap@1.3.3",
        "version": "1.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "array.prototype.tosorted",
        "purl": "pkg:npm/array.prototype.tosorted@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "arraybuffer.prototype.slice",
        "purl": "pkg:npm/arraybuffer.prototype.slice@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "asap",
        "purl": "pkg:npm/asap@2.0.6",
        "version": "2.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "asn1",
        "purl": "pkg:npm/asn1@0.2.6",
        "version": "0.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "asn1.js",
        "purl": "pkg:npm/asn1.js@4.10.1",
        "version": "4.10.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "asn1.js",
        "purl": "pkg:npm/asn1.js@5.4.1",
        "version": "5.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "asn1.js-rfc2560",
        "purl": "pkg:npm/asn1.js-rfc2560@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "asn1.js-rfc5280",
        "purl": "pkg:npm/asn1.js-rfc5280@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "asn1js",
        "purl": "pkg:npm/asn1js@3.0.5",
        "version": "3.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "asn1js",
        "purl": "pkg:npm/asn1js@3.0.6",
        "version": "3.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "assert",
        "purl": "pkg:npm/assert@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "assert-plus",
        "purl": "pkg:npm/assert-plus@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "assertion-error",
        "purl": "pkg:npm/assertion-error@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "ast-types",
        "purl": "pkg:npm/ast-types@0.16.3",
        "version": "0.16.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "ast-types-flow",
        "purl": "pkg:npm/ast-types-flow@0.0.8",
        "version": "0.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "async",
        "purl": "pkg:npm/async@3.2.6",
        "version": "3.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "async-function",
        "purl": "pkg:npm/async-function@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "asynckit",
        "purl": "pkg:npm/asynckit@0.4.0",
        "version": "0.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "atomic-sleep",
        "purl": "pkg:npm/atomic-sleep@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "atomically",
        "purl": "pkg:npm/atomically@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "available-typed-arrays",
        "purl": "pkg:npm/available-typed-arrays@1.0.7",
        "version": "1.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "avsc",
        "purl": "pkg:npm/avsc@5.7.9",
        "version": "5.7.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "avvio",
        "purl": "pkg:npm/avvio@9.2.0",
        "version": "9.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "aws-ssl-profiles",
        "purl": "pkg:npm/aws-ssl-profiles@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "axe-core",
        "purl": "pkg:npm/axe-core@4.10.2",
        "version": "4.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "axios",
        "purl": "pkg:npm/axios@1.15.0",
        "version": "1.15.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "axios",
        "purl": "pkg:npm/axios@1.16.1",
        "version": "1.16.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "axios",
        "purl": "pkg:npm/axios@1.18.1",
        "version": "1.18.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "axios-ntlm",
        "purl": "pkg:npm/axios-ntlm@1.4.4",
        "version": "1.4.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "axios-retry",
        "purl": "pkg:npm/axios-retry@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "axobject-query",
        "purl": "pkg:npm/axobject-query@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "babel-dead-code-elimination",
        "purl": "pkg:npm/babel-dead-code-elimination@1.0.8",
        "version": "1.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "babel-plugin-macros",
        "purl": "pkg:npm/babel-plugin-macros@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "backend",
        "purl": "pkg:npm/backend@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "backoff",
        "purl": "pkg:npm/backoff@2.5.0",
        "version": "2.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "bail",
        "purl": "pkg:npm/bail@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "balanced-match",
        "purl": "pkg:npm/balanced-match@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "balanced-match",
        "purl": "pkg:npm/balanced-match@4.0.4",
        "version": "4.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "base64-js",
        "purl": "pkg:npm/base64-js@1.5.1",
        "version": "1.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "base64id",
        "purl": "pkg:npm/base64id@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "base64url",
        "purl": "pkg:npm/base64url@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "baseline-browser-mapping",
        "purl": "pkg:npm/baseline-browser-mapping@2.11.19",
        "version": "2.11.19"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "baseline-browser-mapping",
        "purl": "pkg:npm/baseline-browser-mapping@2.8.19",
        "version": "2.8.19"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "bcrypt",
        "purl": "pkg:npm/bcrypt@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "bcrypt-pbkdf",
        "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "bcryptjs",
        "purl": "pkg:npm/bcryptjs@2.4.3",
        "version": "2.4.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "before-after-hook",
        "purl": "pkg:npm/before-after-hook@2.2.3",
        "version": "2.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Unlicense"
        ],
        "location": "backend/package-lock.json",
        "name": "big-integer",
        "purl": "pkg:npm/big-integer@1.6.52",
        "version": "1.6.52"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "bignumber.js",
        "purl": "pkg:npm/bignumber.js@9.1.2",
        "version": "9.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "binary-extensions",
        "purl": "pkg:npm/binary-extensions@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "bl",
        "purl": "pkg:npm/bl@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "bl",
        "purl": "pkg:npm/bl@6.1.6",
        "version": "6.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "bn.js",
        "purl": "pkg:npm/bn.js@4.12.3",
        "version": "4.12.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "bn.js",
        "purl": "pkg:npm/bn.js@5.2.3",
        "version": "5.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "body-parser",
        "purl": "pkg:npm/body-parser@1.20.3",
        "version": "1.20.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "body-parser",
        "purl": "pkg:npm/body-parser@1.20.6",
        "version": "1.20.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "body-parser",
        "purl": "pkg:npm/body-parser@2.2.2",
        "version": "2.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "botbuilder",
        "purl": "pkg:npm/botbuilder@4.23.2",
        "version": "4.23.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "botbuilder-core",
        "purl": "pkg:npm/botbuilder-core@4.23.2",
        "version": "4.23.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "botbuilder-dialogs-adaptive-runtime-core",
        "purl": "pkg:npm/botbuilder-dialogs-adaptive-runtime-core@4.23.2-preview",
        "version": "4.23.2-preview"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "botbuilder-stdlib",
        "purl": "pkg:npm/botbuilder-stdlib@4.23.2-internal",
        "version": "4.23.2-internal"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "botframework-connector",
        "purl": "pkg:npm/botframework-connector@4.23.2",
        "version": "4.23.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "botframework-schema",
        "purl": "pkg:npm/botframework-schema@4.23.2",
        "version": "4.23.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "botframework-streaming",
        "purl": "pkg:npm/botframework-streaming@4.23.2",
        "version": "4.23.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "bottleneck",
        "purl": "pkg:npm/bottleneck@2.19.5",
        "version": "2.19.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "bowser",
        "purl": "pkg:npm/bowser@2.11.0",
        "version": "2.11.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "brace-expansion",
        "purl": "pkg:npm/brace-expansion@1.1.14",
        "version": "1.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "brace-expansion",
        "purl": "pkg:npm/brace-expansion@1.1.21",
        "version": "1.1.21"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "brace-expansion",
        "purl": "pkg:npm/brace-expansion@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "brace-expansion",
        "purl": "pkg:npm/brace-expansion@2.1.7",
        "version": "2.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "brace-expansion",
        "purl": "pkg:npm/brace-expansion@5.0.12",
        "version": "5.0.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "brace-expansion",
        "purl": "pkg:npm/brace-expansion@5.0.9",
        "version": "5.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "braces",
        "purl": "pkg:npm/braces@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "brorand",
        "purl": "pkg:npm/brorand@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "browser-resolve",
        "purl": "pkg:npm/browser-resolve@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "browserify-aes",
        "purl": "pkg:npm/browserify-aes@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "browserify-cipher",
        "purl": "pkg:npm/browserify-cipher@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "browserify-des",
        "purl": "pkg:npm/browserify-des@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "browserify-rsa",
        "purl": "pkg:npm/browserify-rsa@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "browserify-sign",
        "purl": "pkg:npm/browserify-sign@4.2.5",
        "version": "4.2.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "browserify-zlib",
        "purl": "pkg:npm/browserify-zlib@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "browserslist",
        "purl": "pkg:npm/browserslist@4.26.3",
        "version": "4.26.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "bson",
        "purl": "pkg:npm/bson@6.8.0",
        "version": "6.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "btoa-lite",
        "purl": "pkg:npm/btoa-lite@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "buffer",
        "purl": "pkg:npm/buffer@5.7.1",
        "version": "5.7.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "buffer",
        "purl": "pkg:npm/buffer@6.0.3",
        "version": "6.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "buffer-equal-constant-time",
        "purl": "pkg:npm/buffer-equal-constant-time@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "buffer-xor",
        "purl": "pkg:npm/buffer-xor@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "buildcheck",
        "purl": "pkg:npm/buildcheck@0.0.6",
        "version": "0.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "builtin-status-codes",
        "purl": "pkg:npm/builtin-status-codes@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "bullmq",
        "purl": "pkg:npm/bullmq@5.72.0",
        "version": "5.72.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "bundle-name",
        "purl": "pkg:npm/bundle-name@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "bytes",
        "purl": "pkg:npm/bytes@3.1.2",
        "version": "3.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "bytestreamjs",
        "purl": "pkg:npm/bytestreamjs@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cac",
        "purl": "pkg:npm/cac@6.7.14",
        "version": "6.7.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cac",
        "purl": "pkg:npm/cac@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "call-bind",
        "purl": "pkg:npm/call-bind@1.0.8",
        "version": "1.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "call-bind",
        "purl": "pkg:npm/call-bind@1.0.9",
        "version": "1.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "call-bind-apply-helpers",
        "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "call-bound",
        "purl": "pkg:npm/call-bound@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "callsites",
        "purl": "pkg:npm/callsites@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "camelcase",
        "purl": "pkg:npm/camelcase@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "camelcase",
        "purl": "pkg:npm/camelcase@5.3.1",
        "version": "5.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "CC-BY-4.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "caniuse-lite",
        "purl": "pkg:npm/caniuse-lite@1.0.30001751",
        "version": "1.0.30001751"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "CC-BY-4.0"
        ],
        "location": "backend/package-lock.json",
        "name": "caniuse-lite",
        "purl": "pkg:npm/caniuse-lite@1.0.30001810",
        "version": "1.0.30001810"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "cassandra-driver",
        "purl": "pkg:npm/cassandra-driver@4.10.0",
        "version": "4.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "ccount",
        "purl": "pkg:npm/ccount@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "chai",
        "purl": "pkg:npm/chai@5.3.3",
        "version": "5.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "chai",
        "purl": "pkg:npm/chai@6.2.2",
        "version": "6.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "chalk",
        "purl": "pkg:npm/chalk@2.4.2",
        "version": "2.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "chalk",
        "purl": "pkg:npm/chalk@4.1.2",
        "version": "4.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "chalk",
        "purl": "pkg:npm/chalk@5.3.0",
        "version": "5.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "chalk-template",
        "purl": "pkg:npm/chalk-template@0.4.0",
        "version": "0.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "character-entities",
        "purl": "pkg:npm/character-entities@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "character-entities-html4",
        "purl": "pkg:npm/character-entities-html4@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "character-entities-legacy",
        "purl": "pkg:npm/character-entities-legacy@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "character-reference-invalid",
        "purl": "pkg:npm/character-reference-invalid@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "chardet",
        "purl": "pkg:npm/chardet@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "check-error",
        "purl": "pkg:npm/check-error@2.1.3",
        "version": "2.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "chokidar",
        "purl": "pkg:npm/chokidar@3.6.0",
        "version": "3.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "chokidar",
        "purl": "pkg:npm/chokidar@4.0.3",
        "version": "4.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "chownr",
        "purl": "pkg:npm/chownr@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cipher-base",
        "purl": "pkg:npm/cipher-base@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "cipher-base",
        "purl": "pkg:npm/cipher-base@1.0.6",
        "version": "1.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "citty",
        "purl": "pkg:npm/citty@0.1.6",
        "version": "0.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cjs-module-lexer",
        "purl": "pkg:npm/cjs-module-lexer@2.2.1",
        "version": "2.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "class-variance-authority",
        "purl": "pkg:npm/class-variance-authority@0.7.1",
        "version": "0.7.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "classcat",
        "purl": "pkg:npm/classcat@5.0.5",
        "version": "5.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "clean-stack",
        "purl": "pkg:npm/clean-stack@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cli-cursor",
        "purl": "pkg:npm/cli-cursor@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cli-cursor",
        "purl": "pkg:npm/cli-cursor@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "cli-spinners",
        "purl": "pkg:npm/cli-spinners@2.9.2",
        "version": "2.9.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "cli-width",
        "purl": "pkg:npm/cli-width@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "client-only",
        "purl": "pkg:npm/client-only@0.0.1",
        "version": "0.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "cliui",
        "purl": "pkg:npm/cliui@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "cliui",
        "purl": "pkg:npm/cliui@8.0.1",
        "version": "8.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "clone",
        "purl": "pkg:npm/clone@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "clsx",
        "purl": "pkg:npm/clsx@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "cluster-key-slot",
        "purl": "pkg:npm/cluster-key-slot@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "cmdk",
        "purl": "pkg:npm/cmdk@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "color",
        "purl": "pkg:npm/color@3.2.1",
        "version": "3.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "color-convert",
        "purl": "pkg:npm/color-convert@1.9.3",
        "version": "1.9.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "color-convert",
        "purl": "pkg:npm/color-convert@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "color-name",
        "purl": "pkg:npm/color-name@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "color-name",
        "purl": "pkg:npm/color-name@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "color-string",
        "purl": "pkg:npm/color-string@1.9.1",
        "version": "1.9.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "color-support",
        "purl": "pkg:npm/color-support@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "colorette",
        "purl": "pkg:npm/colorette@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "colorette",
        "purl": "pkg:npm/colorette@2.0.19",
        "version": "2.0.19"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "colorette",
        "purl": "pkg:npm/colorette@2.0.20",
        "version": "2.0.20"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "colorspace",
        "purl": "pkg:npm/colorspace@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "combined-stream",
        "purl": "pkg:npm/combined-stream@1.0.8",
        "version": "1.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "comma-separated-tokens",
        "purl": "pkg:npm/comma-separated-tokens@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "command-line-args",
        "purl": "pkg:npm/command-line-args@6.0.1",
        "version": "6.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "command-line-usage",
        "purl": "pkg:npm/command-line-usage@7.0.3",
        "version": "7.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "commander",
        "purl": "pkg:npm/commander@10.0.1",
        "version": "10.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "commander",
        "purl": "pkg:npm/commander@11.1.0",
        "version": "11.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "commander",
        "purl": "pkg:npm/commander@12.1.0",
        "version": "12.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "commander",
        "purl": "pkg:npm/commander@13.1.0",
        "version": "13.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "commander",
        "purl": "pkg:npm/commander@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "comment-parser",
        "purl": "pkg:npm/comment-parser@1.4.9",
        "version": "1.4.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "concat-map",
        "purl": "pkg:npm/concat-map@0.0.1",
        "version": "0.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "conf",
        "purl": "pkg:npm/conf@15.0.2",
        "version": "15.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "confbox",
        "purl": "pkg:npm/confbox@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "confusing-browser-globals",
        "purl": "pkg:npm/confusing-browser-globals@1.0.11",
        "version": "1.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "connect-redis",
        "purl": "pkg:npm/connect-redis@7.1.1",
        "version": "7.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "consola",
        "purl": "pkg:npm/consola@3.4.2",
        "version": "3.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "console-browserify",
        "purl": "pkg:npm/console-browserify@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "console-control-strings",
        "purl": "pkg:npm/console-control-strings@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "constants-browserify",
        "purl": "pkg:npm/constants-browserify@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "content-disposition",
        "purl": "pkg:npm/content-disposition@0.5.4",
        "version": "0.5.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "content-disposition",
        "purl": "pkg:npm/content-disposition@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "content-disposition",
        "purl": "pkg:npm/content-disposition@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "content-type",
        "purl": "pkg:npm/content-type@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "convert-source-map",
        "purl": "pkg:npm/convert-source-map@1.9.0",
        "version": "1.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "convert-source-map",
        "purl": "pkg:npm/convert-source-map@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "cookie",
        "purl": "pkg:npm/cookie@0.7.1",
        "version": "0.7.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cookie",
        "purl": "pkg:npm/cookie@0.7.2",
        "version": "0.7.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cookie",
        "purl": "pkg:npm/cookie@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cookie-signature",
        "purl": "pkg:npm/cookie-signature@1.0.6",
        "version": "1.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "cookie-signature",
        "purl": "pkg:npm/cookie-signature@1.0.7",
        "version": "1.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "cookie-signature",
        "purl": "pkg:npm/cookie-signature@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "cookies",
        "purl": "pkg:npm/cookies@0.9.1",
        "version": "0.9.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "core-js",
        "purl": "pkg:npm/core-js@3.39.0",
        "version": "3.39.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "core-js",
        "purl": "pkg:npm/core-js@3.49.0",
        "version": "3.49.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "core-js-pure",
        "purl": "pkg:npm/core-js-pure@3.49.0",
        "version": "3.49.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "core-util-is",
        "purl": "pkg:npm/core-util-is@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "core-util-is",
        "purl": "pkg:npm/core-util-is@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cors",
        "purl": "pkg:npm/cors@2.8.5",
        "version": "2.8.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "cors",
        "purl": "pkg:npm/cors@2.8.6",
        "version": "2.8.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "cosmiconfig",
        "purl": "pkg:npm/cosmiconfig@7.1.0",
        "version": "7.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "cpu-features",
        "purl": "pkg:npm/cpu-features@0.0.10",
        "version": "0.0.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "create-ecdh",
        "purl": "pkg:npm/create-ecdh@4.0.4",
        "version": "4.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "create-hash",
        "purl": "pkg:npm/create-hash@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "create-hmac",
        "purl": "pkg:npm/create-hmac@1.1.7",
        "version": "1.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "create-require",
        "purl": "pkg:npm/create-require@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "crelt",
        "purl": "pkg:npm/crelt@1.0.6",
        "version": "1.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cron-parser",
        "purl": "pkg:npm/cron-parser@4.9.0",
        "version": "4.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cron-parser",
        "purl": "pkg:npm/cron-parser@5.5.0",
        "version": "5.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cross-env",
        "purl": "pkg:npm/cross-env@10.1.0",
        "version": "10.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "cross-fetch",
        "purl": "pkg:npm/cross-fetch@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cross-fetch",
        "purl": "pkg:npm/cross-fetch@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "cross-spawn",
        "purl": "pkg:npm/cross-spawn@7.0.6",
        "version": "7.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "crypto-browserify",
        "purl": "pkg:npm/crypto-browserify@3.12.1",
        "version": "3.12.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "csprng",
        "purl": "pkg:npm/csprng@0.1.2",
        "version": "0.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "css.escape",
        "purl": "pkg:npm/css.escape@1.5.1",
        "version": "1.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "cssstyle",
        "purl": "pkg:npm/cssstyle@4.2.1",
        "version": "4.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "csstype",
        "purl": "pkg:npm/csstype@3.1.3",
        "version": "3.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "csstype",
        "purl": "pkg:npm/csstype@3.2.3",
        "version": "3.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "csv-parse",
        "purl": "pkg:npm/csv-parse@5.6.0",
        "version": "5.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "csv-stringify",
        "purl": "pkg:npm/csv-stringify@6.7.0",
        "version": "6.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-array",
        "purl": "pkg:npm/d3-array@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-color",
        "purl": "pkg:npm/d3-color@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-dispatch",
        "purl": "pkg:npm/d3-dispatch@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-drag",
        "purl": "pkg:npm/d3-drag@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-ease",
        "purl": "pkg:npm/d3-ease@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-format",
        "purl": "pkg:npm/d3-format@3.1.2",
        "version": "3.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-interpolate",
        "purl": "pkg:npm/d3-interpolate@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-path",
        "purl": "pkg:npm/d3-path@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-scale",
        "purl": "pkg:npm/d3-scale@4.0.2",
        "version": "4.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-selection",
        "purl": "pkg:npm/d3-selection@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-shape",
        "purl": "pkg:npm/d3-shape@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-time",
        "purl": "pkg:npm/d3-time@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-time-format",
        "purl": "pkg:npm/d3-time-format@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-timer",
        "purl": "pkg:npm/d3-timer@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-transition",
        "purl": "pkg:npm/d3-transition@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "d3-zoom",
        "purl": "pkg:npm/d3-zoom@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "damerau-levenshtein",
        "purl": "pkg:npm/damerau-levenshtein@1.0.8",
        "version": "1.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dashdash",
        "purl": "pkg:npm/dashdash@1.14.1",
        "version": "1.14.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "data-uri-to-buffer",
        "purl": "pkg:npm/data-uri-to-buffer@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "data-urls",
        "purl": "pkg:npm/data-urls@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "data-view-buffer",
        "purl": "pkg:npm/data-view-buffer@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "data-view-byte-length",
        "purl": "pkg:npm/data-view-byte-length@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "data-view-byte-offset",
        "purl": "pkg:npm/data-view-byte-offset@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "date-fns",
        "purl": "pkg:npm/date-fns@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "date-fns-jalali",
        "purl": "pkg:npm/date-fns-jalali@4.1.0-0",
        "version": "4.1.0-0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "dateformat",
        "purl": "pkg:npm/dateformat@4.6.3",
        "version": "4.6.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dayjs",
        "purl": "pkg:npm/dayjs@1.11.13",
        "version": "1.11.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dc-polyfill",
        "purl": "pkg:npm/dc-polyfill@0.1.11",
        "version": "0.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0 OR BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "dd-trace",
        "purl": "pkg:npm/dd-trace@5.129.0",
        "version": "5.129.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "debounce",
        "purl": "pkg:npm/debounce@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "debounce-fn",
        "purl": "pkg:npm/debounce-fn@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "debug",
        "purl": "pkg:npm/debug@2.6.9",
        "version": "2.6.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "debug",
        "purl": "pkg:npm/debug@3.2.7",
        "version": "3.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "debug",
        "purl": "pkg:npm/debug@4.3.4",
        "version": "4.3.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "debug",
        "purl": "pkg:npm/debug@4.3.5",
        "version": "4.3.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "debug",
        "purl": "pkg:npm/debug@4.3.7",
        "version": "4.3.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "debug",
        "purl": "pkg:npm/debug@4.4.0",
        "version": "4.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "debug",
        "purl": "pkg:npm/debug@4.4.1",
        "version": "4.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "debug",
        "purl": "pkg:npm/debug@4.4.3",
        "version": "4.4.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "decamelize",
        "purl": "pkg:npm/decamelize@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "decimal.js",
        "purl": "pkg:npm/decimal.js@10.5.0",
        "version": "10.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "decimal.js-light",
        "purl": "pkg:npm/decimal.js-light@2.5.1",
        "version": "2.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "decode-named-character-reference",
        "purl": "pkg:npm/decode-named-character-reference@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "deep-eql",
        "purl": "pkg:npm/deep-eql@5.0.2",
        "version": "5.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "deep-equal",
        "purl": "pkg:npm/deep-equal@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "deep-is",
        "purl": "pkg:npm/deep-is@0.1.4",
        "version": "0.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "deepmerge",
        "purl": "pkg:npm/deepmerge@4.3.1",
        "version": "4.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "default-browser",
        "purl": "pkg:npm/default-browser@5.2.1",
        "version": "5.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "default-browser",
        "purl": "pkg:npm/default-browser@5.5.1",
        "version": "5.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "default-browser-id",
        "purl": "pkg:npm/default-browser-id@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "default-browser-id",
        "purl": "pkg:npm/default-browser-id@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "defaults",
        "purl": "pkg:npm/defaults@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "define-data-property",
        "purl": "pkg:npm/define-data-property@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "define-lazy-prop",
        "purl": "pkg:npm/define-lazy-prop@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "define-properties",
        "purl": "pkg:npm/define-properties@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "defu",
        "purl": "pkg:npm/defu@6.1.7",
        "version": "6.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "delayed-stream",
        "purl": "pkg:npm/delayed-stream@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "delegates",
        "purl": "pkg:npm/delegates@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "denque",
        "purl": "pkg:npm/denque@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "depd",
        "purl": "pkg:npm/depd@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "depd",
        "purl": "pkg:npm/depd@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dependency-graph",
        "purl": "pkg:npm/dependency-graph@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "deprecation",
        "purl": "pkg:npm/deprecation@2.3.1",
        "version": "2.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dequal",
        "purl": "pkg:npm/dequal@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "des.js",
        "purl": "pkg:npm/des.js@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "destroy",
        "purl": "pkg:npm/destroy@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "detect-libc",
        "purl": "pkg:npm/detect-libc@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "detect-node-es",
        "purl": "pkg:npm/detect-node-es@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dev-null",
        "purl": "pkg:npm/dev-null@0.1.1",
        "version": "0.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "devlop",
        "purl": "pkg:npm/devlop@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "diff",
        "purl": "pkg:npm/diff@8.0.3",
        "version": "8.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "diffie-hellman",
        "purl": "pkg:npm/diffie-hellman@5.0.3",
        "version": "5.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "dijkstrajs",
        "purl": "pkg:npm/dijkstrajs@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dns-packet",
        "purl": "pkg:npm/dns-packet@5.6.1",
        "version": "5.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "doctrine",
        "purl": "pkg:npm/doctrine@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "doctrine",
        "purl": "pkg:npm/doctrine@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "dom-accessibility-api",
        "purl": "pkg:npm/dom-accessibility-api@0.5.16",
        "version": "0.5.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "dom-accessibility-api",
        "purl": "pkg:npm/dom-accessibility-api@0.6.3",
        "version": "0.6.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "dom-helpers",
        "purl": "pkg:npm/dom-helpers@5.2.1",
        "version": "5.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dom-serializer",
        "purl": "pkg:npm/dom-serializer@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "domain-browser",
        "purl": "pkg:npm/domain-browser@4.22.0",
        "version": "4.22.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "domelementtype",
        "purl": "pkg:npm/domelementtype@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "domhandler",
        "purl": "pkg:npm/domhandler@5.0.3",
        "version": "5.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0 OR Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "dompurify",
        "purl": "pkg:npm/dompurify@3.3.3",
        "version": "3.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0 OR Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "dompurify",
        "purl": "pkg:npm/dompurify@3.4.16",
        "version": "3.4.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "domutils",
        "purl": "pkg:npm/domutils@3.2.2",
        "version": "3.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dot-prop",
        "purl": "pkg:npm/dot-prop@10.1.0",
        "version": "10.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "dotenv",
        "purl": "pkg:npm/dotenv@16.4.1",
        "version": "16.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "dotenv",
        "purl": "pkg:npm/dotenv@16.4.7",
        "version": "16.4.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "drange",
        "purl": "pkg:npm/drange@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dts-resolver",
        "purl": "pkg:npm/dts-resolver@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "dunder-proto",
        "purl": "pkg:npm/dunder-proto@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "duplexify",
        "purl": "pkg:npm/duplexify@4.1.3",
        "version": "4.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "eastasianwidth",
        "purl": "pkg:npm/eastasianwidth@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ecc-jsbn",
        "purl": "pkg:npm/ecc-jsbn@0.1.2",
        "version": "0.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ecdsa-sig-formatter",
        "purl": "pkg:npm/ecdsa-sig-formatter@1.0.11",
        "version": "1.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ee-first",
        "purl": "pkg:npm/ee-first@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "electron-to-chromium",
        "purl": "pkg:npm/electron-to-chromium@1.5.237",
        "version": "1.5.237"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "elliptic",
        "purl": "pkg:npm/elliptic@6.6.1",
        "version": "6.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "emoji-regex",
        "purl": "pkg:npm/emoji-regex@10.3.0",
        "version": "10.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "emoji-regex",
        "purl": "pkg:npm/emoji-regex@8.0.0",
        "version": "8.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "emoji-regex",
        "purl": "pkg:npm/emoji-regex@9.2.2",
        "version": "9.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "empathic",
        "purl": "pkg:npm/empathic@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "empathic",
        "purl": "pkg:npm/empathic@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "enabled",
        "purl": "pkg:npm/enabled@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "encodeurl",
        "purl": "pkg:npm/encodeurl@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "encodeurl",
        "purl": "pkg:npm/encodeurl@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "end-of-stream",
        "purl": "pkg:npm/end-of-stream@1.4.4",
        "version": "1.4.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "engine.io",
        "purl": "pkg:npm/engine.io@6.6.9",
        "version": "6.6.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "engine.io-parser",
        "purl": "pkg:npm/engine.io-parser@5.2.3",
        "version": "5.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "enhanced-resolve",
        "purl": "pkg:npm/enhanced-resolve@5.18.3",
        "version": "5.18.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "entities",
        "purl": "pkg:npm/entities@4.5.0",
        "version": "4.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "env-paths",
        "purl": "pkg:npm/env-paths@2.2.1",
        "version": "2.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "env-paths",
        "purl": "pkg:npm/env-paths@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "error-ex",
        "purl": "pkg:npm/error-ex@1.3.2",
        "version": "1.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-abstract",
        "purl": "pkg:npm/es-abstract@1.24.2",
        "version": "1.24.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-abstract-get",
        "purl": "pkg:npm/es-abstract-get@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-define-property",
        "purl": "pkg:npm/es-define-property@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-errors",
        "purl": "pkg:npm/es-errors@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "es-iterator-helpers",
        "purl": "pkg:npm/es-iterator-helpers@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-module-lexer",
        "purl": "pkg:npm/es-module-lexer@1.7.0",
        "version": "1.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "es-module-lexer",
        "purl": "pkg:npm/es-module-lexer@2.3.2",
        "version": "2.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-module-lexer",
        "purl": "pkg:npm/es-module-lexer@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "es-object-atoms",
        "purl": "pkg:npm/es-object-atoms@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-object-atoms",
        "purl": "pkg:npm/es-object-atoms@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-set-tostringtag",
        "purl": "pkg:npm/es-set-tostringtag@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-shim-unscopables",
        "purl": "pkg:npm/es-shim-unscopables@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "es-to-primitive",
        "purl": "pkg:npm/es-to-primitive@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es-to-primitive",
        "purl": "pkg:npm/es-to-primitive@1.3.4",
        "version": "1.3.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "es-toolkit",
        "purl": "pkg:npm/es-toolkit@1.45.1",
        "version": "1.45.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "es6-promise",
        "purl": "pkg:npm/es6-promise@4.2.6",
        "version": "4.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "esbuild",
        "purl": "pkg:npm/esbuild@0.25.11",
        "version": "0.25.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "esbuild",
        "purl": "pkg:npm/esbuild@0.25.12",
        "version": "0.25.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "esbuild",
        "purl": "pkg:npm/esbuild@0.27.3",
        "version": "0.27.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "esbuild",
        "purl": "pkg:npm/esbuild@0.27.7",
        "version": "0.27.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "esbuild",
        "purl": "pkg:npm/esbuild@0.28.2",
        "version": "0.28.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "escalade",
        "purl": "pkg:npm/escalade@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "escape-html",
        "purl": "pkg:npm/escape-html@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "escape-string-regexp",
        "purl": "pkg:npm/escape-string-regexp@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "escape-string-regexp",
        "purl": "pkg:npm/escape-string-regexp@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "escape-string-regexp",
        "purl": "pkg:npm/escape-string-regexp@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "escape-string-regexp",
        "purl": "pkg:npm/escape-string-regexp@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "eslint",
        "purl": "pkg:npm/eslint@8.57.1",
        "version": "8.57.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint",
        "purl": "pkg:npm/eslint@9.39.5",
        "version": "9.39.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-compat-utils",
        "purl": "pkg:npm/eslint-compat-utils@0.5.1",
        "version": "0.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "eslint-config-airbnb-base",
        "purl": "pkg:npm/eslint-config-airbnb-base@15.0.0",
        "version": "15.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-config-airbnb-extended",
        "purl": "pkg:npm/eslint-config-airbnb-extended@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "eslint-config-prettier",
        "purl": "pkg:npm/eslint-config-prettier@9.1.0",
        "version": "9.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-import-context",
        "purl": "pkg:npm/eslint-import-context@0.1.9",
        "version": "0.1.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "eslint-import-resolver-node",
        "purl": "pkg:npm/eslint-import-resolver-node@0.3.9",
        "version": "0.3.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "eslint-import-resolver-typescript",
        "purl": "pkg:npm/eslint-import-resolver-typescript@3.10.1",
        "version": "3.10.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-import-resolver-typescript",
        "purl": "pkg:npm/eslint-import-resolver-typescript@3.7.0",
        "version": "3.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-import-resolver-typescript",
        "purl": "pkg:npm/eslint-import-resolver-typescript@4.4.5",
        "version": "4.4.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "eslint-module-utils",
        "purl": "pkg:npm/eslint-module-utils@2.14.0",
        "version": "2.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-es-x",
        "purl": "pkg:npm/eslint-plugin-es-x@7.8.0",
        "version": "7.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "eslint-plugin-import",
        "purl": "pkg:npm/eslint-plugin-import@2.32.0",
        "version": "2.32.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-import-x",
        "purl": "pkg:npm/eslint-plugin-import-x@4.17.1",
        "version": "4.17.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-jsx-a11y",
        "purl": "pkg:npm/eslint-plugin-jsx-a11y@6.10.2",
        "version": "6.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-n",
        "purl": "pkg:npm/eslint-plugin-n@18.3.0",
        "version": "18.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "eslint-plugin-prettier",
        "purl": "pkg:npm/eslint-plugin-prettier@5.1.3",
        "version": "5.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-prettier",
        "purl": "pkg:npm/eslint-plugin-prettier@5.2.1",
        "version": "5.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-react",
        "purl": "pkg:npm/eslint-plugin-react@7.37.5",
        "version": "7.37.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-react-hooks",
        "purl": "pkg:npm/eslint-plugin-react-hooks@7.1.1",
        "version": "7.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-react-refresh",
        "purl": "pkg:npm/eslint-plugin-react-refresh@0.4.16",
        "version": "0.4.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "eslint-plugin-simple-import-sort",
        "purl": "pkg:npm/eslint-plugin-simple-import-sort@10.0.0",
        "version": "10.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-simple-import-sort",
        "purl": "pkg:npm/eslint-plugin-simple-import-sort@12.1.1",
        "version": "12.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-plugin-storybook",
        "purl": "pkg:npm/eslint-plugin-storybook@10.3.6",
        "version": "10.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "eslint-scope",
        "purl": "pkg:npm/eslint-scope@7.2.2",
        "version": "7.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-scope",
        "purl": "pkg:npm/eslint-scope@8.4.0",
        "version": "8.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "eslint-visitor-keys",
        "purl": "pkg:npm/eslint-visitor-keys@3.4.3",
        "version": "3.4.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "eslint-visitor-keys",
        "purl": "pkg:npm/eslint-visitor-keys@4.2.1",
        "version": "4.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "eslint-visitor-keys",
        "purl": "pkg:npm/eslint-visitor-keys@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "esm",
        "purl": "pkg:npm/esm@3.2.25",
        "version": "3.2.25"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "espree",
        "purl": "pkg:npm/espree@10.3.0",
        "version": "10.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "espree",
        "purl": "pkg:npm/espree@10.4.0",
        "version": "10.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "espree",
        "purl": "pkg:npm/espree@9.6.1",
        "version": "9.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "esprima",
        "purl": "pkg:npm/esprima@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "esquery",
        "purl": "pkg:npm/esquery@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "esquery",
        "purl": "pkg:npm/esquery@1.6.0",
        "version": "1.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "esrecurse",
        "purl": "pkg:npm/esrecurse@4.3.0",
        "version": "4.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "estraverse",
        "purl": "pkg:npm/estraverse@5.3.0",
        "version": "5.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "estree-util-is-identifier-name",
        "purl": "pkg:npm/estree-util-is-identifier-name@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "estree-walker",
        "purl": "pkg:npm/estree-walker@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "estree-walker",
        "purl": "pkg:npm/estree-walker@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "esutils",
        "purl": "pkg:npm/esutils@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "eta",
        "purl": "pkg:npm/eta@3.5.0",
        "version": "3.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "etag",
        "purl": "pkg:npm/etag@1.8.1",
        "version": "1.8.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "event-target-shim",
        "purl": "pkg:npm/event-target-shim@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "eventemitter3",
        "purl": "pkg:npm/eventemitter3@4.0.7",
        "version": "4.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "eventemitter3",
        "purl": "pkg:npm/eventemitter3@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "eventemitter3",
        "purl": "pkg:npm/eventemitter3@5.0.4",
        "version": "5.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "events",
        "purl": "pkg:npm/events@3.3.0",
        "version": "3.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "eventsource",
        "purl": "pkg:npm/eventsource@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "eventsource",
        "purl": "pkg:npm/eventsource@3.0.7",
        "version": "3.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "eventsource-parser",
        "purl": "pkg:npm/eventsource-parser@3.0.6",
        "version": "3.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "eventsource-parser",
        "purl": "pkg:npm/eventsource-parser@3.0.8",
        "version": "3.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "evp_bytestokey",
        "purl": "pkg:npm/evp_bytestokey@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "expand-tilde",
        "purl": "pkg:npm/expand-tilde@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "expect-type",
        "purl": "pkg:npm/expect-type@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "expect-type",
        "purl": "pkg:npm/expect-type@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "expect-type",
        "purl": "pkg:npm/expect-type@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "exponential-backoff",
        "purl": "pkg:npm/exponential-backoff@3.1.3",
        "version": "3.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "express",
        "purl": "pkg:npm/express@4.21.2",
        "version": "4.21.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "express",
        "purl": "pkg:npm/express@4.22.1",
        "version": "4.22.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "express",
        "purl": "pkg:npm/express@5.2.1",
        "version": "5.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "express-rate-limit",
        "purl": "pkg:npm/express-rate-limit@8.4.1",
        "version": "8.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "express-session",
        "purl": "pkg:npm/express-session@1.19.0",
        "version": "1.19.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "exsolve",
        "purl": "pkg:npm/exsolve@1.0.7",
        "version": "1.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "extend",
        "purl": "pkg:npm/extend@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "extsprintf",
        "purl": "pkg:npm/extsprintf@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "extsprintf",
        "purl": "pkg:npm/extsprintf@1.4.1",
        "version": "1.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-content-type-parse",
        "purl": "pkg:npm/fast-content-type-parse@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-content-type-parse",
        "purl": "pkg:npm/fast-content-type-parse@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "fast-copy",
        "purl": "pkg:npm/fast-copy@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "fast-decode-uri-component",
        "purl": "pkg:npm/fast-decode-uri-component@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-deep-equal",
        "purl": "pkg:npm/fast-deep-equal@3.1.3",
        "version": "3.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-diff",
        "purl": "pkg:npm/fast-diff@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "fast-glob",
        "purl": "pkg:npm/fast-glob@3.3.1",
        "version": "3.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "fast-glob",
        "purl": "pkg:npm/fast-glob@3.3.2",
        "version": "3.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-json-stable-stringify",
        "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-json-stringify",
        "purl": "pkg:npm/fast-json-stringify@6.4.0",
        "version": "6.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-levenshtein",
        "purl": "pkg:npm/fast-levenshtein@2.0.6",
        "version": "2.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "fast-querystring",
        "purl": "pkg:npm/fast-querystring@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "fast-redact",
        "purl": "pkg:npm/fast-redact@3.3.0",
        "version": "3.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "fast-safe-stringify",
        "purl": "pkg:npm/fast-safe-stringify@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "fast-uri",
        "purl": "pkg:npm/fast-uri@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-uri",
        "purl": "pkg:npm/fast-uri@3.1.8",
        "version": "3.1.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-xml-builder",
        "purl": "pkg:npm/fast-xml-builder@1.3.1",
        "version": "1.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fast-xml-parser",
        "purl": "pkg:npm/fast-xml-parser@5.7.2",
        "version": "5.7.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fastest-levenshtein",
        "purl": "pkg:npm/fastest-levenshtein@1.0.16",
        "version": "1.0.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fastify",
        "purl": "pkg:npm/fastify@5.8.5",
        "version": "5.8.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fastify-plugin",
        "purl": "pkg:npm/fastify-plugin@5.1.0",
        "version": "5.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "fastq",
        "purl": "pkg:npm/fastq@1.14.0",
        "version": "1.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "fastq",
        "purl": "pkg:npm/fastq@1.17.1",
        "version": "1.17.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "fastq",
        "purl": "pkg:npm/fastq@1.20.3",
        "version": "1.20.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "faye",
        "purl": "pkg:npm/faye@1.4.1",
        "version": "1.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "faye-websocket",
        "purl": "pkg:npm/faye-websocket@0.11.4",
        "version": "0.11.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fdir",
        "purl": "pkg:npm/fdir@6.5.0",
        "version": "6.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fecha",
        "purl": "pkg:npm/fecha@4.2.3",
        "version": "4.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fetch-blob",
        "purl": "pkg:npm/fetch-blob@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "fflate",
        "purl": "pkg:npm/fflate@0.4.8",
        "version": "0.4.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "figures",
        "purl": "pkg:npm/figures@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "file-entry-cache",
        "purl": "pkg:npm/file-entry-cache@6.0.1",
        "version": "6.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "file-entry-cache",
        "purl": "pkg:npm/file-entry-cache@8.0.0",
        "version": "8.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "file-saver",
        "purl": "pkg:npm/file-saver@2.0.5",
        "version": "2.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "file-type",
        "purl": "pkg:npm/file-type@22.0.0",
        "version": "22.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "filename-reserved-regex",
        "purl": "pkg:npm/filename-reserved-regex@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "filenamify",
        "purl": "pkg:npm/filenamify@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "fill-range",
        "purl": "pkg:npm/fill-range@7.1.1",
        "version": "7.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "finalhandler",
        "purl": "pkg:npm/finalhandler@1.3.1",
        "version": "1.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "finalhandler",
        "purl": "pkg:npm/finalhandler@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "find-my-way",
        "purl": "pkg:npm/find-my-way@9.9.0",
        "version": "9.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "find-replace",
        "purl": "pkg:npm/find-replace@5.0.2",
        "version": "5.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "find-root",
        "purl": "pkg:npm/find-root@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "find-up",
        "purl": "pkg:npm/find-up@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "find-up",
        "purl": "pkg:npm/find-up@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "find-up",
        "purl": "pkg:npm/find-up@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "flat-cache",
        "purl": "pkg:npm/flat-cache@3.0.4",
        "version": "3.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "flat-cache",
        "purl": "pkg:npm/flat-cache@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "flat-cache",
        "purl": "pkg:npm/flat-cache@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "flatbuffers",
        "purl": "pkg:npm/flatbuffers@25.9.23",
        "version": "25.9.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "flatted",
        "purl": "pkg:npm/flatted@3.4.2",
        "version": "3.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "flatted",
        "purl": "pkg:npm/flatted@3.4.4",
        "version": "3.4.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fn.name",
        "purl": "pkg:npm/fn.name@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "follow-redirects",
        "purl": "pkg:npm/follow-redirects@1.16.0",
        "version": "1.16.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "for-each",
        "purl": "pkg:npm/for-each@0.3.3",
        "version": "0.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "for-each",
        "purl": "pkg:npm/for-each@0.3.5",
        "version": "0.3.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "foreground-child",
        "purl": "pkg:npm/foreground-child@3.3.1",
        "version": "3.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "form-data",
        "purl": "pkg:npm/form-data@4.0.5",
        "version": "4.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "form-data",
        "purl": "pkg:npm/form-data@4.0.6",
        "version": "4.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "formdata-polyfill",
        "purl": "pkg:npm/formdata-polyfill@4.0.10",
        "version": "4.0.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "forwarded",
        "purl": "pkg:npm/forwarded@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "forwarded-parse",
        "purl": "pkg:npm/forwarded-parse@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "framer-motion",
        "purl": "pkg:npm/framer-motion@13.2.0",
        "version": "13.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fresh",
        "purl": "pkg:npm/fresh@0.5.2",
        "version": "0.5.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "fresh",
        "purl": "pkg:npm/fresh@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "frontend-v2",
        "purl": "pkg:npm/frontend-v2@0.0.0",
        "version": "0.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fs-extra",
        "purl": "pkg:npm/fs-extra@11.3.0",
        "version": "11.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "fs.realpath",
        "purl": "pkg:npm/fs.realpath@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "fsevents",
        "purl": "pkg:npm/fsevents@2.3.3",
        "version": "2.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "function-bind",
        "purl": "pkg:npm/function-bind@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "function.prototype.name",
        "purl": "pkg:npm/function.prototype.name@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "functions-have-names",
        "purl": "pkg:npm/functions-have-names@1.2.3",
        "version": "1.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "gauge",
        "purl": "pkg:npm/gauge@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "gaxios",
        "purl": "pkg:npm/gaxios@6.5.0",
        "version": "6.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "gaxios",
        "purl": "pkg:npm/gaxios@7.1.3",
        "version": "7.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "gaxios",
        "purl": "pkg:npm/gaxios@7.1.4",
        "version": "7.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "gcp-metadata",
        "purl": "pkg:npm/gcp-metadata@6.1.0",
        "version": "6.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "gcp-metadata",
        "purl": "pkg:npm/gcp-metadata@8.1.2",
        "version": "8.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "generate-function",
        "purl": "pkg:npm/generate-function@2.3.1",
        "version": "2.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "generator-function",
        "purl": "pkg:npm/generator-function@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "generic-pool",
        "purl": "pkg:npm/generic-pool@3.9.0",
        "version": "3.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "gensync",
        "purl": "pkg:npm/gensync@1.0.0-beta.2",
        "version": "1.0.0-beta.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "get-caller-file",
        "purl": "pkg:npm/get-caller-file@2.0.5",
        "version": "2.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "get-east-asian-width",
        "purl": "pkg:npm/get-east-asian-width@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "get-intrinsic",
        "purl": "pkg:npm/get-intrinsic@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "get-nonce",
        "purl": "pkg:npm/get-nonce@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "get-package-type",
        "purl": "pkg:npm/get-package-type@0.1.0",
        "version": "0.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "get-proto",
        "purl": "pkg:npm/get-proto@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "get-symbol-description",
        "purl": "pkg:npm/get-symbol-description@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "get-tsconfig",
        "purl": "pkg:npm/get-tsconfig@4.13.0",
        "version": "4.13.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "get-tsconfig",
        "purl": "pkg:npm/get-tsconfig@4.14.0",
        "version": "4.14.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "get-tsconfig",
        "purl": "pkg:npm/get-tsconfig@4.14.3",
        "version": "4.14.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "get-tsconfig",
        "purl": "pkg:npm/get-tsconfig@5.0.0-beta.6",
        "version": "5.0.0-beta.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "getopts",
        "purl": "pkg:npm/getopts@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "getpass",
        "purl": "pkg:npm/getpass@0.1.7",
        "version": "0.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "glob",
        "purl": "pkg:npm/glob@10.5.0",
        "version": "10.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "glob",
        "purl": "pkg:npm/glob@11.1.0",
        "version": "11.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "glob",
        "purl": "pkg:npm/glob@13.0.6",
        "version": "13.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "glob",
        "purl": "pkg:npm/glob@7.2.3",
        "version": "7.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "glob-parent",
        "purl": "pkg:npm/glob-parent@5.1.2",
        "version": "5.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "glob-parent",
        "purl": "pkg:npm/glob-parent@6.0.2",
        "version": "6.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "globals",
        "purl": "pkg:npm/globals@13.23.0",
        "version": "13.23.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "package-lock.json",
        "name": "globals",
        "purl": "pkg:npm/globals@13.24.0",
        "version": "13.24.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "globals",
        "purl": "pkg:npm/globals@14.0.0",
        "version": "14.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "globals",
        "purl": "pkg:npm/globals@15.13.0",
        "version": "15.13.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "globals",
        "purl": "pkg:npm/globals@17.12.0",
        "version": "17.12.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "globalthis",
        "purl": "pkg:npm/globalthis@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "globrex",
        "purl": "pkg:npm/globrex@0.1.2",
        "version": "0.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "google-auth-library",
        "purl": "pkg:npm/google-auth-library@10.5.0",
        "version": "10.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "google-auth-library",
        "purl": "pkg:npm/google-auth-library@10.6.2",
        "version": "10.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "google-auth-library",
        "purl": "pkg:npm/google-auth-library@9.9.0",
        "version": "9.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "google-gax",
        "purl": "pkg:npm/google-gax@5.0.6",
        "version": "5.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "google-logging-utils",
        "purl": "pkg:npm/google-logging-utils@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "gopd",
        "purl": "pkg:npm/gopd@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "graceful-fs",
        "purl": "pkg:npm/graceful-fs@4.2.11",
        "version": "4.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "graphemer",
        "purl": "pkg:npm/graphemer@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "gtoken",
        "purl": "pkg:npm/gtoken@7.1.0",
        "version": "7.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "gtoken",
        "purl": "pkg:npm/gtoken@8.0.0",
        "version": "8.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "handlebars",
        "purl": "pkg:npm/handlebars@4.7.10",
        "version": "4.7.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "has-bigints",
        "purl": "pkg:npm/has-bigints@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "has-bigints",
        "purl": "pkg:npm/has-bigints@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "has-flag",
        "purl": "pkg:npm/has-flag@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "has-flag",
        "purl": "pkg:npm/has-flag@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "has-property-descriptors",
        "purl": "pkg:npm/has-property-descriptors@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "has-proto",
        "purl": "pkg:npm/has-proto@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "has-symbols",
        "purl": "pkg:npm/has-symbols@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "has-tostringtag",
        "purl": "pkg:npm/has-tostringtag@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "has-unicode",
        "purl": "pkg:npm/has-unicode@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "hash-base",
        "purl": "pkg:npm/hash-base@3.0.5",
        "version": "3.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "hash-base",
        "purl": "pkg:npm/hash-base@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "hash-base",
        "purl": "pkg:npm/hash-base@3.1.2",
        "version": "3.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "hash.js",
        "purl": "pkg:npm/hash.js@1.1.7",
        "version": "1.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "hasown",
        "purl": "pkg:npm/hasown@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "hasown",
        "purl": "pkg:npm/hasown@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "hasown",
        "purl": "pkg:npm/hasown@2.0.4",
        "version": "2.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "hast-util-from-parse5",
        "purl": "pkg:npm/hast-util-from-parse5@8.0.3",
        "version": "8.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "hast-util-parse-selector",
        "purl": "pkg:npm/hast-util-parse-selector@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "hast-util-raw",
        "purl": "pkg:npm/hast-util-raw@9.1.0",
        "version": "9.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "hast-util-to-jsx-runtime",
        "purl": "pkg:npm/hast-util-to-jsx-runtime@2.3.5",
        "version": "2.3.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "hast-util-to-parse5",
        "purl": "pkg:npm/hast-util-to-parse5@8.0.0",
        "version": "8.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "hast-util-whitespace",
        "purl": "pkg:npm/hast-util-whitespace@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "hastscript",
        "purl": "pkg:npm/hastscript@9.0.1",
        "version": "9.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "hdb",
        "purl": "pkg:npm/hdb@0.19.10",
        "version": "0.19.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "helmet",
        "purl": "pkg:npm/helmet@8.2.0",
        "version": "8.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "help-me",
        "purl": "pkg:npm/help-me@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "hermes-estree",
        "purl": "pkg:npm/hermes-estree@0.25.1",
        "version": "0.25.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "hermes-parser",
        "purl": "pkg:npm/hermes-parser@0.25.1",
        "version": "0.25.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "hmac-drbg",
        "purl": "pkg:npm/hmac-drbg@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "hoist-non-react-statics",
        "purl": "pkg:npm/hoist-non-react-statics@3.3.2",
        "version": "3.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "homedir-polyfill",
        "purl": "pkg:npm/homedir-polyfill@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "hono",
        "purl": "pkg:npm/hono@4.12.16",
        "version": "4.12.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "hookable",
        "purl": "pkg:npm/hookable@6.1.2",
        "version": "6.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "hpagent",
        "purl": "pkg:npm/hpagent@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "html-encoding-sniffer",
        "purl": "pkg:npm/html-encoding-sniffer@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "html-parse-stringify",
        "purl": "pkg:npm/html-parse-stringify@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "html-to-text",
        "purl": "pkg:npm/html-to-text@9.0.5",
        "version": "9.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "html-url-attributes",
        "purl": "pkg:npm/html-url-attributes@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "html-void-elements",
        "purl": "pkg:npm/html-void-elements@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "htmlparser2",
        "purl": "pkg:npm/htmlparser2@8.0.2",
        "version": "8.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "htmlparser2",
        "purl": "pkg:npm/htmlparser2@9.1.0",
        "version": "9.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "http-assert",
        "purl": "pkg:npm/http-assert@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "http-errors",
        "purl": "pkg:npm/http-errors@1.8.1",
        "version": "1.8.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "http-errors",
        "purl": "pkg:npm/http-errors@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "http-errors",
        "purl": "pkg:npm/http-errors@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "http-parser-js",
        "purl": "pkg:npm/http-parser-js@0.5.10",
        "version": "0.5.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "http-proxy-agent",
        "purl": "pkg:npm/http-proxy-agent@7.0.2",
        "version": "7.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "http-signature",
        "purl": "pkg:npm/http-signature@1.3.1",
        "version": "1.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "https-browserify",
        "purl": "pkg:npm/https-browserify@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "https-proxy-agent",
        "purl": "pkg:npm/https-proxy-agent@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "https-proxy-agent",
        "purl": "pkg:npm/https-proxy-agent@7.0.4",
        "version": "7.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "https-proxy-agent",
        "purl": "pkg:npm/https-proxy-agent@7.0.5",
        "version": "7.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "https-proxy-agent",
        "purl": "pkg:npm/https-proxy-agent@7.0.6",
        "version": "7.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "husky",
        "purl": "pkg:npm/husky@8.0.3",
        "version": "8.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "i18next",
        "purl": "pkg:npm/i18next@24.1.0",
        "version": "24.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "i18next-http-backend",
        "purl": "pkg:npm/i18next-http-backend@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "iconv-lite",
        "purl": "pkg:npm/iconv-lite@0.4.24",
        "version": "0.4.24"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "iconv-lite",
        "purl": "pkg:npm/iconv-lite@0.6.3",
        "version": "0.6.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "iconv-lite",
        "purl": "pkg:npm/iconv-lite@0.7.2",
        "version": "0.7.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "iconv-lite",
        "purl": "pkg:npm/iconv-lite@0.7.3",
        "version": "0.7.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "ieee754",
        "purl": "pkg:npm/ieee754@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ignore",
        "purl": "pkg:npm/ignore@5.3.0",
        "version": "5.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "ignore",
        "purl": "pkg:npm/ignore@5.3.2",
        "version": "5.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ignore",
        "purl": "pkg:npm/ignore@7.0.10",
        "version": "7.0.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "ignore",
        "purl": "pkg:npm/ignore@7.0.5",
        "version": "7.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "immediate",
        "purl": "pkg:npm/immediate@3.0.6",
        "version": "3.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "immer",
        "purl": "pkg:npm/immer@10.2.0",
        "version": "10.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "immer",
        "purl": "pkg:npm/immer@11.1.4",
        "version": "11.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "import-fresh",
        "purl": "pkg:npm/import-fresh@3.3.0",
        "version": "3.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "import-in-the-middle",
        "purl": "pkg:npm/import-in-the-middle@3.5.1",
        "version": "3.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "import-without-cache",
        "purl": "pkg:npm/import-without-cache@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "imurmurhash",
        "purl": "pkg:npm/imurmurhash@0.1.4",
        "version": "0.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "indent-string",
        "purl": "pkg:npm/indent-string@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "package-lock.json",
        "name": "infisical",
        "purl": "pkg:npm/infisical",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "inflight",
        "purl": "pkg:npm/inflight@1.0.6",
        "version": "1.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "inherits",
        "purl": "pkg:npm/inherits@2.0.4",
        "version": "2.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "inline-style-parser",
        "purl": "pkg:npm/inline-style-parser@0.2.4",
        "version": "0.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "inquirer",
        "purl": "pkg:npm/inquirer@8.2.7",
        "version": "8.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "install-artifact-from-github",
        "purl": "pkg:npm/install-artifact-from-github@1.8.1",
        "version": "1.8.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "internal-slot",
        "purl": "pkg:npm/internal-slot@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "internmap",
        "purl": "pkg:npm/internmap@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "interpret",
        "purl": "pkg:npm/interpret@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ioredis",
        "purl": "pkg:npm/ioredis@5.10.1",
        "version": "5.10.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "ip-address",
        "purl": "pkg:npm/ip-address@10.1.0",
        "version": "10.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ipaddr.js",
        "purl": "pkg:npm/ipaddr.js@1.9.1",
        "version": "1.9.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "ipaddr.js",
        "purl": "pkg:npm/ipaddr.js@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ipaddr.js",
        "purl": "pkg:npm/ipaddr.js@2.4.0",
        "version": "2.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "is-alphabetical",
        "purl": "pkg:npm/is-alphabetical@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "is-alphanumerical",
        "purl": "pkg:npm/is-alphanumerical@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "is-arguments",
        "purl": "pkg:npm/is-arguments@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-array-buffer",
        "purl": "pkg:npm/is-array-buffer@3.0.5",
        "version": "3.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-arrayish",
        "purl": "pkg:npm/is-arrayish@0.2.1",
        "version": "0.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-arrayish",
        "purl": "pkg:npm/is-arrayish@0.3.2",
        "version": "0.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-async-function",
        "purl": "pkg:npm/is-async-function@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-bigint",
        "purl": "pkg:npm/is-bigint@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "is-binary-path",
        "purl": "pkg:npm/is-binary-path@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-boolean-object",
        "purl": "pkg:npm/is-boolean-object@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "is-bun-module",
        "purl": "pkg:npm/is-bun-module@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-bun-module",
        "purl": "pkg:npm/is-bun-module@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-callable",
        "purl": "pkg:npm/is-callable@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-core-module",
        "purl": "pkg:npm/is-core-module@2.17.0",
        "version": "2.17.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-data-view",
        "purl": "pkg:npm/is-data-view@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-date-object",
        "purl": "pkg:npm/is-date-object@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "is-decimal",
        "purl": "pkg:npm/is-decimal@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "is-docker",
        "purl": "pkg:npm/is-docker@2.2.1",
        "version": "2.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-docker",
        "purl": "pkg:npm/is-docker@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-document.all",
        "purl": "pkg:npm/is-document.all@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-electron",
        "purl": "pkg:npm/is-electron@2.2.2",
        "version": "2.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-extglob",
        "purl": "pkg:npm/is-extglob@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-finalizationregistry",
        "purl": "pkg:npm/is-finalizationregistry@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-fullwidth-code-point",
        "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "is-generator-function",
        "purl": "pkg:npm/is-generator-function@1.0.10",
        "version": "1.0.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-generator-function",
        "purl": "pkg:npm/is-generator-function@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-glob",
        "purl": "pkg:npm/is-glob@4.0.3",
        "version": "4.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "is-hexadecimal",
        "purl": "pkg:npm/is-hexadecimal@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-inside-container",
        "purl": "pkg:npm/is-inside-container@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-interactive",
        "purl": "pkg:npm/is-interactive@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "is-interactive",
        "purl": "pkg:npm/is-interactive@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-map",
        "purl": "pkg:npm/is-map@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "is-nan",
        "purl": "pkg:npm/is-nan@1.3.2",
        "version": "1.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-negative-zero",
        "purl": "pkg:npm/is-negative-zero@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-node-process",
        "purl": "pkg:npm/is-node-process@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "is-number",
        "purl": "pkg:npm/is-number@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-number-object",
        "purl": "pkg:npm/is-number-object@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "is-path-inside",
        "purl": "pkg:npm/is-path-inside@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "is-plain-obj",
        "purl": "pkg:npm/is-plain-obj@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "is-potential-custom-element-name",
        "purl": "pkg:npm/is-potential-custom-element-name@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "is-promise",
        "purl": "pkg:npm/is-promise@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "is-property",
        "purl": "pkg:npm/is-property@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-regex",
        "purl": "pkg:npm/is-regex@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "is-retry-allowed",
        "purl": "pkg:npm/is-retry-allowed@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-set",
        "purl": "pkg:npm/is-set@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-shared-array-buffer",
        "purl": "pkg:npm/is-shared-array-buffer@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-stream",
        "purl": "pkg:npm/is-stream@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-string",
        "purl": "pkg:npm/is-string@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-symbol",
        "purl": "pkg:npm/is-symbol@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-typed-array",
        "purl": "pkg:npm/is-typed-array@1.1.15",
        "version": "1.1.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-unicode-supported",
        "purl": "pkg:npm/is-unicode-supported@0.1.0",
        "version": "0.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-unicode-supported",
        "purl": "pkg:npm/is-unicode-supported@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-unicode-supported",
        "purl": "pkg:npm/is-unicode-supported@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-weakmap",
        "purl": "pkg:npm/is-weakmap@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-weakref",
        "purl": "pkg:npm/is-weakref@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-weakset",
        "purl": "pkg:npm/is-weakset@2.0.4",
        "version": "2.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "is-wsl",
        "purl": "pkg:npm/is-wsl@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "is-wsl",
        "purl": "pkg:npm/is-wsl@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "is-wsl",
        "purl": "pkg:npm/is-wsl@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "isarray",
        "purl": "pkg:npm/isarray@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "isarray",
        "purl": "pkg:npm/isarray@2.0.5",
        "version": "2.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "isexe",
        "purl": "pkg:npm/isexe@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "isexe",
        "purl": "pkg:npm/isexe@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "isomorphic-dompurify",
        "purl": "pkg:npm/isomorphic-dompurify@2.22.0",
        "version": "2.22.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "isomorphic-fetch",
        "purl": "pkg:npm/isomorphic-fetch@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "isomorphic-timers-promises",
        "purl": "pkg:npm/isomorphic-timers-promises@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "isomorphic.js",
        "purl": "pkg:npm/isomorphic.js@0.2.5",
        "version": "0.2.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "iterator.prototype",
        "purl": "pkg:npm/iterator.prototype@1.1.5",
        "version": "1.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "jackspeak",
        "purl": "pkg:npm/jackspeak@3.4.3",
        "version": "3.4.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "jackspeak",
        "purl": "pkg:npm/jackspeak@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jiti",
        "purl": "pkg:npm/jiti@2.4.2",
        "version": "2.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "jiti",
        "purl": "pkg:npm/jiti@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "jmespath",
        "purl": "pkg:npm/jmespath@0.15.0",
        "version": "0.15.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jose",
        "purl": "pkg:npm/jose@4.15.9",
        "version": "4.15.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "jose",
        "purl": "pkg:npm/jose@6.1.0",
        "version": "6.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jose",
        "purl": "pkg:npm/jose@6.1.3",
        "version": "6.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "jose",
        "purl": "pkg:npm/jose@6.2.3",
        "version": "6.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "joycon",
        "purl": "pkg:npm/joycon@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "js-md4",
        "purl": "pkg:npm/js-md4@0.3.2",
        "version": "0.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "js-tokens",
        "purl": "pkg:npm/js-tokens@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "js-tokens",
        "purl": "pkg:npm/js-tokens@9.0.1",
        "version": "9.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "js-yaml",
        "purl": "pkg:npm/js-yaml@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "js-yaml",
        "purl": "pkg:npm/js-yaml@4.3.2",
        "version": "4.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jsbn",
        "purl": "pkg:npm/jsbn@0.1.1",
        "version": "0.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "jsbn",
        "purl": "pkg:npm/jsbn@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "jsdom",
        "purl": "pkg:npm/jsdom@26.0.0",
        "version": "26.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jsesc",
        "purl": "pkg:npm/jsesc@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jsforce",
        "purl": "pkg:npm/jsforce@3.10.14",
        "version": "3.10.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "json-bigint",
        "purl": "pkg:npm/json-bigint@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "json-bignum",
        "purl": "pkg:npm/json-bignum@0.0.3",
        "version": "0.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "json-buffer",
        "purl": "pkg:npm/json-buffer@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "json-parse-better-errors",
        "purl": "pkg:npm/json-parse-better-errors@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "json-parse-even-better-errors",
        "purl": "pkg:npm/json-parse-even-better-errors@2.3.1",
        "version": "2.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "AFL-2.1 OR BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "json-schema",
        "purl": "pkg:npm/json-schema@0.4.0",
        "version": "0.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "json-schema-ref-resolver",
        "purl": "pkg:npm/json-schema-ref-resolver@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "json-schema-resolver",
        "purl": "pkg:npm/json-schema-resolver@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "json-schema-traverse",
        "purl": "pkg:npm/json-schema-traverse@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "json-schema-traverse",
        "purl": "pkg:npm/json-schema-traverse@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "json-schema-typed",
        "purl": "pkg:npm/json-schema-typed@8.0.2",
        "version": "8.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "json-stable-stringify-without-jsonify",
        "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "json-stringify-safe",
        "purl": "pkg:npm/json-stringify-safe@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "json5",
        "purl": "pkg:npm/json5@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "json5",
        "purl": "pkg:npm/json5@2.2.3",
        "version": "2.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "jsonfile",
        "purl": "pkg:npm/jsonfile@6.1.0",
        "version": "6.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jsonwebtoken",
        "purl": "pkg:npm/jsonwebtoken@9.0.0",
        "version": "9.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jsonwebtoken",
        "purl": "pkg:npm/jsonwebtoken@9.0.3",
        "version": "9.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jsprim",
        "purl": "pkg:npm/jsprim@1.4.2",
        "version": "1.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "jsrp",
        "purl": "pkg:npm/jsrp@0.2.4",
        "version": "0.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "jssha",
        "purl": "pkg:npm/jssha@2.4.1",
        "version": "2.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "jsx-ast-utils",
        "purl": "pkg:npm/jsx-ast-utils@3.3.5",
        "version": "3.3.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jwa",
        "purl": "pkg:npm/jwa@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "jwks-rsa",
        "purl": "pkg:npm/jwks-rsa@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "jws",
        "purl": "pkg:npm/jws@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "jwt-decode",
        "purl": "pkg:npm/jwt-decode@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "keygrip",
        "purl": "pkg:npm/keygrip@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "keyv",
        "purl": "pkg:npm/keyv@4.5.4",
        "version": "4.5.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "kleur",
        "purl": "pkg:npm/kleur@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "knex",
        "purl": "pkg:npm/knex@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "koa",
        "purl": "pkg:npm/koa@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "koa-compose",
        "purl": "pkg:npm/koa-compose@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "kuler",
        "purl": "pkg:npm/kuler@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "CC0-1.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "language-subtag-registry",
        "purl": "pkg:npm/language-subtag-registry@0.3.23",
        "version": "0.3.23"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "language-tags",
        "purl": "pkg:npm/language-tags@1.0.9",
        "version": "1.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ldap-filter",
        "purl": "pkg:npm/ldap-filter@0.3.3",
        "version": "0.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ldapauth-fork",
        "purl": "pkg:npm/ldapauth-fork@5.0.5",
        "version": "5.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ldapjs",
        "purl": "pkg:npm/ldapjs@2.3.3",
        "version": "2.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ldif",
        "purl": "pkg:npm/ldif@0.5.1",
        "version": "0.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "leac",
        "purl": "pkg:npm/leac@0.6.0",
        "version": "0.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "leven",
        "purl": "pkg:npm/leven@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "levn",
        "purl": "pkg:npm/levn@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "lexical",
        "purl": "pkg:npm/lexical@0.29.0",
        "version": "0.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "lib0",
        "purl": "pkg:npm/lib0@0.2.102",
        "version": "0.2.102"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "libpg-query",
        "purl": "pkg:npm/libpg-query@17.7.3",
        "version": "17.7.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "libsodium",
        "purl": "pkg:npm/libsodium@0.7.13",
        "version": "0.7.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "libsodium-wrappers",
        "purl": "pkg:npm/libsodium-wrappers@0.7.13",
        "version": "0.7.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "lie",
        "purl": "pkg:npm/lie@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "light-my-request",
        "purl": "pkg:npm/light-my-request@6.6.0",
        "version": "6.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss",
        "purl": "pkg:npm/lightningcss@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss",
        "purl": "pkg:npm/lightningcss@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-android-arm64",
        "purl": "pkg:npm/lightningcss-android-arm64@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-darwin-arm64",
        "purl": "pkg:npm/lightningcss-darwin-arm64@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-darwin-arm64",
        "purl": "pkg:npm/lightningcss-darwin-arm64@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-darwin-x64",
        "purl": "pkg:npm/lightningcss-darwin-x64@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-darwin-x64",
        "purl": "pkg:npm/lightningcss-darwin-x64@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-freebsd-x64",
        "purl": "pkg:npm/lightningcss-freebsd-x64@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-freebsd-x64",
        "purl": "pkg:npm/lightningcss-freebsd-x64@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-arm-gnueabihf",
        "purl": "pkg:npm/lightningcss-linux-arm-gnueabihf@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-arm-gnueabihf",
        "purl": "pkg:npm/lightningcss-linux-arm-gnueabihf@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-arm64-gnu",
        "purl": "pkg:npm/lightningcss-linux-arm64-gnu@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-arm64-gnu",
        "purl": "pkg:npm/lightningcss-linux-arm64-gnu@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-arm64-musl",
        "purl": "pkg:npm/lightningcss-linux-arm64-musl@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-arm64-musl",
        "purl": "pkg:npm/lightningcss-linux-arm64-musl@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-x64-gnu",
        "purl": "pkg:npm/lightningcss-linux-x64-gnu@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-x64-gnu",
        "purl": "pkg:npm/lightningcss-linux-x64-gnu@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-x64-musl",
        "purl": "pkg:npm/lightningcss-linux-x64-musl@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-linux-x64-musl",
        "purl": "pkg:npm/lightningcss-linux-x64-musl@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-win32-arm64-msvc",
        "purl": "pkg:npm/lightningcss-win32-arm64-msvc@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-win32-arm64-msvc",
        "purl": "pkg:npm/lightningcss-win32-arm64-msvc@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-win32-x64-msvc",
        "purl": "pkg:npm/lightningcss-win32-x64-msvc@1.30.1",
        "version": "1.30.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MPL-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lightningcss-win32-x64-msvc",
        "purl": "pkg:npm/lightningcss-win32-x64-msvc@1.33.0",
        "version": "1.33.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "limiter",
        "purl": "pkg:npm/limiter@1.1.5",
        "version": "1.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "lines-and-columns",
        "purl": "pkg:npm/lines-and-columns@1.2.4",
        "version": "1.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "load-json-file",
        "purl": "pkg:npm/load-json-file@5.3.0",
        "version": "5.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "localforage",
        "purl": "pkg:npm/localforage@1.10.0",
        "version": "1.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "locate-path",
        "purl": "pkg:npm/locate-path@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "locate-path",
        "purl": "pkg:npm/locate-path@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "locate-path",
        "purl": "pkg:npm/locate-path@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "lodash",
        "purl": "pkg:npm/lodash@4.18.1",
        "version": "4.18.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.camelcase",
        "purl": "pkg:npm/lodash.camelcase@4.3.0",
        "version": "4.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.clonedeep",
        "purl": "pkg:npm/lodash.clonedeep@4.5.0",
        "version": "4.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.deburr",
        "purl": "pkg:npm/lodash.deburr@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.defaults",
        "purl": "pkg:npm/lodash.defaults@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.includes",
        "purl": "pkg:npm/lodash.includes@4.3.0",
        "version": "4.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.isarguments",
        "purl": "pkg:npm/lodash.isarguments@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.isboolean",
        "purl": "pkg:npm/lodash.isboolean@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.isequal",
        "purl": "pkg:npm/lodash.isequal@4.5.0",
        "version": "4.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.isinteger",
        "purl": "pkg:npm/lodash.isinteger@4.0.4",
        "version": "4.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.isnumber",
        "purl": "pkg:npm/lodash.isnumber@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.isplainobject",
        "purl": "pkg:npm/lodash.isplainobject@4.0.6",
        "version": "4.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.isstring",
        "purl": "pkg:npm/lodash.isstring@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "lodash.merge",
        "purl": "pkg:npm/lodash.merge@4.6.2",
        "version": "4.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lodash.once",
        "purl": "pkg:npm/lodash.once@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "log-symbols",
        "purl": "pkg:npm/log-symbols@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "log-symbols",
        "purl": "pkg:npm/log-symbols@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "log-symbols",
        "purl": "pkg:npm/log-symbols@7.0.1",
        "version": "7.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "logform",
        "purl": "pkg:npm/logform@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "long",
        "purl": "pkg:npm/long@5.2.3",
        "version": "5.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "long",
        "purl": "pkg:npm/long@5.3.2",
        "version": "5.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "longest-streak",
        "purl": "pkg:npm/longest-streak@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "loose-envify",
        "purl": "pkg:npm/loose-envify@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "loupe",
        "purl": "pkg:npm/loupe@3.2.1",
        "version": "3.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lru-cache",
        "purl": "pkg:npm/lru-cache@10.2.0",
        "version": "10.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "lru-cache",
        "purl": "pkg:npm/lru-cache@10.4.3",
        "version": "10.4.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "lru-cache",
        "purl": "pkg:npm/lru-cache@11.2.2",
        "version": "11.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "lru-cache",
        "purl": "pkg:npm/lru-cache@11.5.2",
        "version": "11.5.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "lru-cache",
        "purl": "pkg:npm/lru-cache@5.1.1",
        "version": "5.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lru-cache",
        "purl": "pkg:npm/lru-cache@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "lru-cache",
        "purl": "pkg:npm/lru-cache@7.18.3",
        "version": "7.18.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "lru-memoizer",
        "purl": "pkg:npm/lru-memoizer@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "lru.min",
        "purl": "pkg:npm/lru.min@1.1.5",
        "version": "1.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "lucide-react",
        "purl": "pkg:npm/lucide-react@0.544.0",
        "version": "0.544.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "luxon",
        "purl": "pkg:npm/luxon@3.4.4",
        "version": "3.4.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "luxon",
        "purl": "pkg:npm/luxon@3.7.2",
        "version": "3.7.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "lz-string",
        "purl": "pkg:npm/lz-string@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "magic-string",
        "purl": "pkg:npm/magic-string@0.30.21",
        "version": "0.30.21"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "make-dir",
        "purl": "pkg:npm/make-dir@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "map-or-similar",
        "purl": "pkg:npm/map-or-similar@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "marked",
        "purl": "pkg:npm/marked@15.0.12",
        "version": "15.0.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "math-intrinsics",
        "purl": "pkg:npm/math-intrinsics@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "md5.js",
        "purl": "pkg:npm/md5.js@1.3.5",
        "version": "1.3.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "mdast-util-from-markdown",
        "purl": "pkg:npm/mdast-util-from-markdown@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "mdast-util-mdx-expression",
        "purl": "pkg:npm/mdast-util-mdx-expression@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "mdast-util-mdx-jsx",
        "purl": "pkg:npm/mdast-util-mdx-jsx@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "mdast-util-mdxjs-esm",
        "purl": "pkg:npm/mdast-util-mdxjs-esm@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "mdast-util-phrasing",
        "purl": "pkg:npm/mdast-util-phrasing@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "mdast-util-to-hast",
        "purl": "pkg:npm/mdast-util-to-hast@13.2.1",
        "version": "13.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "mdast-util-to-markdown",
        "purl": "pkg:npm/mdast-util-to-markdown@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "mdast-util-to-string",
        "purl": "pkg:npm/mdast-util-to-string@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "media-typer",
        "purl": "pkg:npm/media-typer@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "media-typer",
        "purl": "pkg:npm/media-typer@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "memoize-one",
        "purl": "pkg:npm/memoize-one@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "memoizerific",
        "purl": "pkg:npm/memoizerific@1.11.3",
        "version": "1.11.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "memory-pager",
        "purl": "pkg:npm/memory-pager@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "merge-descriptors",
        "purl": "pkg:npm/merge-descriptors@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "merge-descriptors",
        "purl": "pkg:npm/merge-descriptors@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "merge2",
        "purl": "pkg:npm/merge2@1.4.1",
        "version": "1.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "methods",
        "purl": "pkg:npm/methods@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark",
        "purl": "pkg:npm/micromark@4.0.2",
        "version": "4.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-core-commonmark",
        "purl": "pkg:npm/micromark-core-commonmark@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-factory-destination",
        "purl": "pkg:npm/micromark-factory-destination@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-factory-label",
        "purl": "pkg:npm/micromark-factory-label@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-factory-space",
        "purl": "pkg:npm/micromark-factory-space@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-factory-title",
        "purl": "pkg:npm/micromark-factory-title@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-factory-whitespace",
        "purl": "pkg:npm/micromark-factory-whitespace@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-character",
        "purl": "pkg:npm/micromark-util-character@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-chunked",
        "purl": "pkg:npm/micromark-util-chunked@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-classify-character",
        "purl": "pkg:npm/micromark-util-classify-character@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-combine-extensions",
        "purl": "pkg:npm/micromark-util-combine-extensions@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-decode-numeric-character-reference",
        "purl": "pkg:npm/micromark-util-decode-numeric-character-reference@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-decode-string",
        "purl": "pkg:npm/micromark-util-decode-string@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-encode",
        "purl": "pkg:npm/micromark-util-encode@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-html-tag-name",
        "purl": "pkg:npm/micromark-util-html-tag-name@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-normalize-identifier",
        "purl": "pkg:npm/micromark-util-normalize-identifier@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-resolve-all",
        "purl": "pkg:npm/micromark-util-resolve-all@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-sanitize-uri",
        "purl": "pkg:npm/micromark-util-sanitize-uri@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-subtokenize",
        "purl": "pkg:npm/micromark-util-subtokenize@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-symbol",
        "purl": "pkg:npm/micromark-util-symbol@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "micromark-util-types",
        "purl": "pkg:npm/micromark-util-types@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "micromatch",
        "purl": "pkg:npm/micromatch@4.0.8",
        "version": "4.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "miller-rabin",
        "purl": "pkg:npm/miller-rabin@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mime",
        "purl": "pkg:npm/mime@1.6.0",
        "version": "1.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mime",
        "purl": "pkg:npm/mime@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mime-db",
        "purl": "pkg:npm/mime-db@1.52.0",
        "version": "1.52.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mime-db",
        "purl": "pkg:npm/mime-db@1.54.0",
        "version": "1.54.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mime-types",
        "purl": "pkg:npm/mime-types@2.1.35",
        "version": "2.1.35"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mime-types",
        "purl": "pkg:npm/mime-types@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "mime-types",
        "purl": "pkg:npm/mime-types@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mimic-fn",
        "purl": "pkg:npm/mimic-fn@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mimic-function",
        "purl": "pkg:npm/mimic-function@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "min-indent",
        "purl": "pkg:npm/min-indent@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "minimalistic-assert",
        "purl": "pkg:npm/minimalistic-assert@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "minimalistic-crypto-utils",
        "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "minimatch",
        "purl": "pkg:npm/minimatch@10.2.5",
        "version": "10.2.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "minimatch",
        "purl": "pkg:npm/minimatch@10.2.6",
        "version": "10.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "minimatch",
        "purl": "pkg:npm/minimatch@3.1.5",
        "version": "3.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "minimatch",
        "purl": "pkg:npm/minimatch@9.0.9",
        "version": "9.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "minimist",
        "purl": "pkg:npm/minimist@1.2.8",
        "version": "1.2.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "minipass",
        "purl": "pkg:npm/minipass@7.1.3",
        "version": "7.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "minizlib",
        "purl": "pkg:npm/minizlib@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mnemonist",
        "purl": "pkg:npm/mnemonist@0.40.5",
        "version": "0.40.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "module-details-from-path",
        "purl": "pkg:npm/module-details-from-path@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "moment",
        "purl": "pkg:npm/moment@2.31.0",
        "version": "2.31.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "moment-timezone",
        "purl": "pkg:npm/moment-timezone@0.5.46",
        "version": "0.5.46"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "mongodb",
        "purl": "pkg:npm/mongodb@6.8.1",
        "version": "6.8.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "mongodb-connection-string-url",
        "purl": "pkg:npm/mongodb-connection-string-url@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "motion",
        "purl": "pkg:npm/motion@13.2.0",
        "version": "13.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "motion-dom",
        "purl": "pkg:npm/motion-dom@13.2.0",
        "version": "13.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "motion-utils",
        "purl": "pkg:npm/motion-utils@13.0.0",
        "version": "13.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "mri",
        "purl": "pkg:npm/mri@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ms",
        "purl": "pkg:npm/ms@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ms",
        "purl": "pkg:npm/ms@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ms",
        "purl": "pkg:npm/ms@2.1.3",
        "version": "2.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "msgpackr",
        "purl": "pkg:npm/msgpackr@1.11.5",
        "version": "1.11.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "msgpackr-extract",
        "purl": "pkg:npm/msgpackr-extract@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "multistream",
        "purl": "pkg:npm/multistream@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "mute-stream",
        "purl": "pkg:npm/mute-stream@0.0.8",
        "version": "0.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "mysql2",
        "purl": "pkg:npm/mysql2@3.24.5",
        "version": "3.24.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "named-placeholders",
        "purl": "pkg:npm/named-placeholders@1.1.6",
        "version": "1.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "nan",
        "purl": "pkg:npm/nan@2.29.0",
        "version": "2.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "nanoid",
        "purl": "pkg:npm/nanoid@3.3.11",
        "version": "3.3.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "nanoid",
        "purl": "pkg:npm/nanoid@3.3.18",
        "version": "3.3.18"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "nanoid",
        "purl": "pkg:npm/nanoid@5.1.6",
        "version": "5.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "napi-postinstall",
        "purl": "pkg:npm/napi-postinstall@0.3.4",
        "version": "0.3.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "native-duplexpair",
        "purl": "pkg:npm/native-duplexpair@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "natural-compare",
        "purl": "pkg:npm/natural-compare@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "negotiator",
        "purl": "pkg:npm/negotiator@0.6.3",
        "version": "0.6.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "negotiator",
        "purl": "pkg:npm/negotiator@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "neo-async",
        "purl": "pkg:npm/neo-async@2.6.2",
        "version": "2.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "netmask",
        "purl": "pkg:npm/netmask@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "next",
        "purl": "pkg:npm/next@16.1.7",
        "version": "16.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "nock",
        "purl": "pkg:npm/nock@14.0.10",
        "version": "14.0.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "node-abort-controller",
        "purl": "pkg:npm/node-abort-controller@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-addon-api",
        "purl": "pkg:npm/node-addon-api@3.2.1",
        "version": "3.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-addon-api",
        "purl": "pkg:npm/node-addon-api@6.1.0",
        "version": "6.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-addon-api",
        "purl": "pkg:npm/node-addon-api@8.9.2",
        "version": "8.9.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-domexception",
        "purl": "pkg:npm/node-domexception@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-fetch",
        "purl": "pkg:npm/node-fetch@2.7.0",
        "version": "2.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-fetch",
        "purl": "pkg:npm/node-fetch@3.3.2",
        "version": "3.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause OR GPL-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "node-forge",
        "purl": "pkg:npm/node-forge@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-gyp",
        "purl": "pkg:npm/node-gyp@13.0.2",
        "version": "13.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-gyp-build",
        "purl": "pkg:npm/node-gyp-build@3.9.0",
        "version": "3.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-gyp-build",
        "purl": "pkg:npm/node-gyp-build@4.8.4",
        "version": "4.8.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "node-gyp-build-optional-packages",
        "purl": "pkg:npm/node-gyp-build-optional-packages@5.2.2",
        "version": "5.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "node-releases",
        "purl": "pkg:npm/node-releases@2.0.26",
        "version": "2.0.26"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "node-stdlib-browser",
        "purl": "pkg:npm/node-stdlib-browser@1.3.1",
        "version": "1.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT-0"
        ],
        "location": "backend/package-lock.json",
        "name": "nodemailer",
        "purl": "pkg:npm/nodemailer@10.0.16",
        "version": "10.0.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "nopt",
        "purl": "pkg:npm/nopt@10.0.1",
        "version": "10.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "nopt",
        "purl": "pkg:npm/nopt@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "normalize-path",
        "purl": "pkg:npm/normalize-path@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "npmlog",
        "purl": "pkg:npm/npmlog@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "nprogress",
        "purl": "pkg:npm/nprogress@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "nwsapi",
        "purl": "pkg:npm/nwsapi@2.2.18",
        "version": "2.2.18"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "nypm",
        "purl": "pkg:npm/nypm@0.6.0",
        "version": "0.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "oauth",
        "purl": "pkg:npm/oauth@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "oauth4webapi",
        "purl": "pkg:npm/oauth4webapi@3.8.3",
        "version": "3.8.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "object-assign",
        "purl": "pkg:npm/object-assign@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "object-hash",
        "purl": "pkg:npm/object-hash@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "object-hash",
        "purl": "pkg:npm/object-hash@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "object-inspect",
        "purl": "pkg:npm/object-inspect@1.13.4",
        "version": "1.13.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "object-is",
        "purl": "pkg:npm/object-is@1.1.6",
        "version": "1.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "object-keys",
        "purl": "pkg:npm/object-keys@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "object.assign",
        "purl": "pkg:npm/object.assign@4.1.7",
        "version": "4.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "object.entries",
        "purl": "pkg:npm/object.entries@1.1.7",
        "version": "1.1.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "object.entries",
        "purl": "pkg:npm/object.entries@1.1.9",
        "version": "1.1.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "object.fromentries",
        "purl": "pkg:npm/object.fromentries@2.0.8",
        "version": "2.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "object.groupby",
        "purl": "pkg:npm/object.groupby@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "object.values",
        "purl": "pkg:npm/object.values@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "obliterator",
        "purl": "pkg:npm/obliterator@2.0.5",
        "version": "2.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "obuf",
        "purl": "pkg:npm/obuf@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "obug",
        "purl": "pkg:npm/obug@2.2.1",
        "version": "2.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "obug",
        "purl": "pkg:npm/obug@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "UPL-1.0 OR Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "oci-common",
        "purl": "pkg:npm/oci-common@2.108.0",
        "version": "2.108.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "UPL-1.0 OR Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "oci-identity",
        "purl": "pkg:npm/oci-identity@2.108.0",
        "version": "2.108.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "UPL-1.0 OR Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "oci-keymanagement",
        "purl": "pkg:npm/oci-keymanagement@2.108.0",
        "version": "2.108.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "UPL-1.0 OR Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "oci-secrets",
        "purl": "pkg:npm/oci-secrets@2.108.0",
        "version": "2.108.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "UPL-1.0 OR Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "oci-vault",
        "purl": "pkg:npm/oci-vault@2.108.0",
        "version": "2.108.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "UPL-1.0 OR Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "oci-workrequests",
        "purl": "pkg:npm/oci-workrequests@2.108.0",
        "version": "2.108.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "octokit-auth-probot",
        "purl": "pkg:npm/octokit-auth-probot@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "odbc",
        "purl": "pkg:npm/odbc@2.4.9",
        "version": "2.4.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "oidc-provider",
        "purl": "pkg:npm/oidc-provider@9.5.1",
        "version": "9.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "oidc-server",
        "purl": "pkg:npm/oidc-server@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "oidc-token-hash",
        "purl": "pkg:npm/oidc-token-hash@5.0.3",
        "version": "5.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "on-exit-leak-free",
        "purl": "pkg:npm/on-exit-leak-free@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "on-finished",
        "purl": "pkg:npm/on-finished@2.4.1",
        "version": "2.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "on-headers",
        "purl": "pkg:npm/on-headers@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "once",
        "purl": "pkg:npm/once@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "one-time",
        "purl": "pkg:npm/one-time@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "onetime",
        "purl": "pkg:npm/onetime@5.1.2",
        "version": "5.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "onetime",
        "purl": "pkg:npm/onetime@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "open",
        "purl": "pkg:npm/open@10.1.1",
        "version": "10.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "open",
        "purl": "pkg:npm/open@10.2.0",
        "version": "10.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "open",
        "purl": "pkg:npm/open@7.4.2",
        "version": "7.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "openai",
        "purl": "pkg:npm/openai@6.35.0",
        "version": "6.35.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "openapi-types",
        "purl": "pkg:npm/openapi-types@12.1.3",
        "version": "12.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "openid-client",
        "purl": "pkg:npm/openid-client@5.6.5",
        "version": "5.6.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "openssl-wrapper",
        "purl": "pkg:npm/openssl-wrapper@0.3.4",
        "version": "0.3.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "opentracing",
        "purl": "pkg:npm/opentracing@0.14.7",
        "version": "0.14.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "opossum",
        "purl": "pkg:npm/opossum@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "optionator",
        "purl": "pkg:npm/optionator@0.9.3",
        "version": "0.9.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "optionator",
        "purl": "pkg:npm/optionator@0.9.4",
        "version": "0.9.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ora",
        "purl": "pkg:npm/ora@5.4.1",
        "version": "5.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ora",
        "purl": "pkg:npm/ora@8.2.0",
        "version": "8.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0 OR UPL-1.0"
        ],
        "location": "backend/package-lock.json",
        "name": "oracledb",
        "purl": "pkg:npm/oracledb@6.10.0",
        "version": "6.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "os-browserify",
        "purl": "pkg:npm/os-browserify@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "otplib",
        "purl": "pkg:npm/otplib@12.0.1",
        "version": "12.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "outvariant",
        "purl": "pkg:npm/outvariant@1.4.3",
        "version": "1.4.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "own-keys",
        "purl": "pkg:npm/own-keys@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "oxc-parser",
        "purl": "pkg:npm/oxc-parser@0.132.0",
        "version": "0.132.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "p-finally",
        "purl": "pkg:npm/p-finally@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "p-limit",
        "purl": "pkg:npm/p-limit@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "p-limit",
        "purl": "pkg:npm/p-limit@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "p-locate",
        "purl": "pkg:npm/p-locate@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "p-locate",
        "purl": "pkg:npm/p-locate@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "p-locate",
        "purl": "pkg:npm/p-locate@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "p-queue",
        "purl": "pkg:npm/p-queue@6.6.2",
        "version": "6.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "p-retry",
        "purl": "pkg:npm/p-retry@4.6.2",
        "version": "4.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "p-timeout",
        "purl": "pkg:npm/p-timeout@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "p-try",
        "purl": "pkg:npm/p-try@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "package-json-from-dist",
        "purl": "pkg:npm/package-json-from-dist@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT AND Zlib"
        ],
        "location": "frontend/package-lock.json",
        "name": "pako",
        "purl": "pkg:npm/pako@1.0.11",
        "version": "1.0.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "parent-module",
        "purl": "pkg:npm/parent-module@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "parse-asn1",
        "purl": "pkg:npm/parse-asn1@5.1.9",
        "version": "5.1.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "parse-entities",
        "purl": "pkg:npm/parse-entities@4.0.2",
        "version": "4.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "parse-json",
        "purl": "pkg:npm/parse-json@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "parse-json",
        "purl": "pkg:npm/parse-json@5.2.0",
        "version": "5.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "parse-passwd",
        "purl": "pkg:npm/parse-passwd@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "parse5",
        "purl": "pkg:npm/parse5@7.2.1",
        "version": "7.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "parseley",
        "purl": "pkg:npm/parseley@0.12.1",
        "version": "0.12.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "parseurl",
        "purl": "pkg:npm/parseurl@1.3.3",
        "version": "1.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "passport",
        "purl": "pkg:npm/passport@0.7.0",
        "version": "0.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "passport-gitlab2",
        "purl": "pkg:npm/passport-gitlab2@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "passport-google-oauth20",
        "purl": "pkg:npm/passport-google-oauth20@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "passport-ldapauth",
        "purl": "pkg:npm/passport-ldapauth@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "passport-oauth2",
        "purl": "pkg:npm/passport-oauth2@1.8.0",
        "version": "1.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "passport-strategy",
        "purl": "pkg:npm/passport-strategy@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "path-browserify",
        "purl": "pkg:npm/path-browserify@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "path-exists",
        "purl": "pkg:npm/path-exists@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "path-exists",
        "purl": "pkg:npm/path-exists@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "path-expression-matcher",
        "purl": "pkg:npm/path-expression-matcher@1.6.2",
        "version": "1.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "path-is-absolute",
        "purl": "pkg:npm/path-is-absolute@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "path-key",
        "purl": "pkg:npm/path-key@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "path-parse",
        "purl": "pkg:npm/path-parse@1.0.7",
        "version": "1.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "path-scurry",
        "purl": "pkg:npm/path-scurry@1.11.1",
        "version": "1.11.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "path-scurry",
        "purl": "pkg:npm/path-scurry@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "path-scurry",
        "purl": "pkg:npm/path-scurry@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "path-to-regexp",
        "purl": "pkg:npm/path-to-regexp@0.1.13",
        "version": "0.1.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "path-to-regexp",
        "purl": "pkg:npm/path-to-regexp@8.4.2",
        "version": "8.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "path-type",
        "purl": "pkg:npm/path-type@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pathe",
        "purl": "pkg:npm/pathe@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pathval",
        "purl": "pkg:npm/pathval@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pause",
        "purl": "pkg:npm/pause@0.0.1",
        "version": "0.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "pbkdf2",
        "purl": "pkg:npm/pbkdf2@3.1.5",
        "version": "3.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "peberminta",
        "purl": "pkg:npm/peberminta@0.9.0",
        "version": "0.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg",
        "purl": "pkg:npm/pg@8.13.1",
        "version": "8.13.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg-cloudflare",
        "purl": "pkg:npm/pg-cloudflare@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg-connection-string",
        "purl": "pkg:npm/pg-connection-string@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg-connection-string",
        "purl": "pkg:npm/pg-connection-string@2.7.0",
        "version": "2.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pg-cursor",
        "purl": "pkg:npm/pg-cursor@2.19.0",
        "version": "2.19.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg-int8",
        "purl": "pkg:npm/pg-int8@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg-numeric",
        "purl": "pkg:npm/pg-numeric@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg-pool",
        "purl": "pkg:npm/pg-pool@3.7.0",
        "version": "3.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg-protocol",
        "purl": "pkg:npm/pg-protocol@1.7.0",
        "version": "1.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg-query-stream",
        "purl": "pkg:npm/pg-query-stream@4.5.3",
        "version": "4.5.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pg-types",
        "purl": "pkg:npm/pg-types@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pg-types",
        "purl": "pkg:npm/pg-types@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pgpass",
        "purl": "pkg:npm/pgpass@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "picocolors",
        "purl": "pkg:npm/picocolors@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "picomatch",
        "purl": "pkg:npm/picomatch@2.3.2",
        "version": "2.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "picomatch",
        "purl": "pkg:npm/picomatch@4.0.4",
        "version": "4.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "picomatch",
        "purl": "pkg:npm/picomatch@4.0.7",
        "version": "4.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "picomatch-browser",
        "purl": "pkg:npm/picomatch-browser@2.2.6",
        "version": "2.2.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pify",
        "purl": "pkg:npm/pify@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pino",
        "purl": "pkg:npm/pino@10.3.1",
        "version": "10.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pino",
        "purl": "pkg:npm/pino@8.17.2",
        "version": "8.17.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pino",
        "purl": "pkg:npm/pino@9.4.0",
        "version": "9.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pino-abstract-transport",
        "purl": "pkg:npm/pino-abstract-transport@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pino-abstract-transport",
        "purl": "pkg:npm/pino-abstract-transport@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pino-abstract-transport",
        "purl": "pkg:npm/pino-abstract-transport@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pino-http",
        "purl": "pkg:npm/pino-http@10.3.0",
        "version": "10.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pino-pretty",
        "purl": "pkg:npm/pino-pretty@10.2.3",
        "version": "10.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pino-pretty",
        "purl": "pkg:npm/pino-pretty@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pino-std-serializers",
        "purl": "pkg:npm/pino-std-serializers@6.2.2",
        "version": "6.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pino-std-serializers",
        "purl": "pkg:npm/pino-std-serializers@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pino-std-serializers",
        "purl": "pkg:npm/pino-std-serializers@7.1.0",
        "version": "7.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "pkce-challenge",
        "purl": "pkg:npm/pkce-challenge@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pkcs11js",
        "purl": "pkg:npm/pkcs11js@2.1.6",
        "version": "2.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pkg-conf",
        "purl": "pkg:npm/pkg-conf@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "pkg-dir",
        "purl": "pkg:npm/pkg-dir@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pkg-types",
        "purl": "pkg:npm/pkg-types@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pkijs",
        "purl": "pkg:npm/pkijs@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "pngjs",
        "purl": "pkg:npm/pngjs@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "possible-typed-array-names",
        "purl": "pkg:npm/possible-typed-array-names@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "possible-typed-array-names",
        "purl": "pkg:npm/possible-typed-array-names@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "postcss",
        "purl": "pkg:npm/postcss@8.4.31",
        "version": "8.4.31"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "postcss",
        "purl": "pkg:npm/postcss@8.5.12",
        "version": "8.5.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "postcss",
        "purl": "pkg:npm/postcss@8.5.26",
        "version": "8.5.26"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "postcss",
        "purl": "pkg:npm/postcss@8.5.28",
        "version": "8.5.28"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "postcss",
        "purl": "pkg:npm/postcss@8.5.6",
        "version": "8.5.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "postgres-array",
        "purl": "pkg:npm/postgres-array@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "postgres-array",
        "purl": "pkg:npm/postgres-array@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "postgres-bytea",
        "purl": "pkg:npm/postgres-bytea@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "postgres-bytea",
        "purl": "pkg:npm/postgres-bytea@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "postgres-date",
        "purl": "pkg:npm/postgres-date@1.0.7",
        "version": "1.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "postgres-date",
        "purl": "pkg:npm/postgres-date@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "postgres-interval",
        "purl": "pkg:npm/postgres-interval@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "postgres-interval",
        "purl": "pkg:npm/postgres-interval@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "postgres-range",
        "purl": "pkg:npm/postgres-range@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "SEE LICENSE IN LICENSE"
        ],
        "location": "frontend/package-lock.json",
        "name": "posthog-js",
        "purl": "pkg:npm/posthog-js@1.360.1",
        "version": "1.360.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "posthog-node",
        "purl": "pkg:npm/posthog-node@5.28.1",
        "version": "5.28.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pprof-format",
        "purl": "pkg:npm/pprof-format@2.3.1",
        "version": "2.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "preact",
        "purl": "pkg:npm/preact@10.29.0",
        "version": "10.29.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "precond",
        "purl": "pkg:npm/precond@0.2.3",
        "version": "0.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "prelude-ls",
        "purl": "pkg:npm/prelude-ls@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "prettier",
        "purl": "pkg:npm/prettier@3.4.2",
        "version": "3.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "prettier",
        "purl": "pkg:npm/prettier@3.5.3",
        "version": "3.5.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "prettier-linter-helpers",
        "purl": "pkg:npm/prettier-linter-helpers@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "prettier-plugin-tailwindcss",
        "purl": "pkg:npm/prettier-plugin-tailwindcss@0.6.14",
        "version": "0.6.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "pretty-format",
        "purl": "pkg:npm/pretty-format@27.5.1",
        "version": "27.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "prismjs",
        "purl": "pkg:npm/prismjs@1.30.0",
        "version": "1.30.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "probot",
        "purl": "pkg:npm/probot@13.3.8",
        "version": "13.3.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "proc-log",
        "purl": "pkg:npm/proc-log@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "process",
        "purl": "pkg:npm/process@0.11.10",
        "version": "0.11.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "process-nextick-args",
        "purl": "pkg:npm/process-nextick-args@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "process-warning",
        "purl": "pkg:npm/process-warning@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "process-warning",
        "purl": "pkg:npm/process-warning@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "process-warning",
        "purl": "pkg:npm/process-warning@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "process-warning",
        "purl": "pkg:npm/process-warning@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "process-warning",
        "purl": "pkg:npm/process-warning@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "prompt-sync",
        "purl": "pkg:npm/prompt-sync@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "prompts",
        "purl": "pkg:npm/prompts@2.4.2",
        "version": "2.4.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "prop-types",
        "purl": "pkg:npm/prop-types@15.8.1",
        "version": "15.8.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "propagate",
        "purl": "pkg:npm/propagate@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "property-information",
        "purl": "pkg:npm/property-information@6.5.0",
        "version": "6.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "property-information",
        "purl": "pkg:npm/property-information@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "proto3-json-serializer",
        "purl": "pkg:npm/proto3-json-serializer@3.0.4",
        "version": "3.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "protobufjs",
        "purl": "pkg:npm/protobufjs@7.5.6",
        "version": "7.5.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "protobufjs",
        "purl": "pkg:npm/protobufjs@7.6.6",
        "version": "7.6.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "proxy-addr",
        "purl": "pkg:npm/proxy-addr@2.0.7",
        "version": "2.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "proxy-from-env",
        "purl": "pkg:npm/proxy-from-env@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "public-encrypt",
        "purl": "pkg:npm/public-encrypt@4.0.3",
        "version": "4.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "pump",
        "purl": "pkg:npm/pump@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "punycode",
        "purl": "pkg:npm/punycode@1.4.1",
        "version": "1.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "punycode",
        "purl": "pkg:npm/punycode@2.3.1",
        "version": "2.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pvtsutils",
        "purl": "pkg:npm/pvtsutils@1.3.6",
        "version": "1.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "pvutils",
        "purl": "pkg:npm/pvutils@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "qrcode",
        "purl": "pkg:npm/qrcode@1.5.4",
        "version": "1.5.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "qs",
        "purl": "pkg:npm/qs@6.15.0",
        "version": "6.15.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "qs",
        "purl": "pkg:npm/qs@6.15.1",
        "version": "6.15.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "qs",
        "purl": "pkg:npm/qs@6.16.0",
        "version": "6.16.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "quansync",
        "purl": "pkg:npm/quansync@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "query-selector-shadow-dom",
        "purl": "pkg:npm/query-selector-shadow-dom@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "querystring-es3",
        "purl": "pkg:npm/querystring-es3@0.2.1",
        "version": "0.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "queue-microtask",
        "purl": "pkg:npm/queue-microtask@1.2.3",
        "version": "1.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "quick-format-unescaped",
        "purl": "pkg:npm/quick-format-unescaped@4.0.4",
        "version": "4.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "quick-lru",
        "purl": "pkg:npm/quick-lru@7.2.0",
        "version": "7.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "radix-ui",
        "purl": "pkg:npm/radix-ui@1.6.7",
        "version": "1.6.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "randexp",
        "purl": "pkg:npm/randexp@0.5.3",
        "version": "0.5.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "random-bytes",
        "purl": "pkg:npm/random-bytes@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "randombytes",
        "purl": "pkg:npm/randombytes@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "randomfill",
        "purl": "pkg:npm/randomfill@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "range-parser",
        "purl": "pkg:npm/range-parser@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "rate-limiter-flexible",
        "purl": "pkg:npm/rate-limiter-flexible@4.0.1",
        "version": "4.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "raw-body",
        "purl": "pkg:npm/raw-body@2.5.2",
        "version": "2.5.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "raw-body",
        "purl": "pkg:npm/raw-body@2.5.3",
        "version": "2.5.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "raw-body",
        "purl": "pkg:npm/raw-body@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "raw-body",
        "purl": "pkg:npm/raw-body@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "re2",
        "purl": "pkg:npm/re2@1.27.0",
        "version": "1.27.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "react",
        "purl": "pkg:npm/react@18.2.0",
        "version": "18.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "react",
        "purl": "pkg:npm/react@19.1.4",
        "version": "19.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react",
        "purl": "pkg:npm/react@19.3.0",
        "version": "19.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-aria",
        "purl": "pkg:npm/react-aria@3.53.0",
        "version": "3.53.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-colorful",
        "purl": "pkg:npm/react-colorful@5.6.1",
        "version": "5.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-complex-tree",
        "purl": "pkg:npm/react-complex-tree@2.6.1",
        "version": "2.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-day-picker",
        "purl": "pkg:npm/react-day-picker@9.13.0",
        "version": "9.13.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-docgen",
        "purl": "pkg:npm/react-docgen@8.0.2",
        "version": "8.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-docgen-typescript",
        "purl": "pkg:npm/react-docgen-typescript@2.4.0",
        "version": "2.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "react-dom",
        "purl": "pkg:npm/react-dom@18.2.0",
        "version": "18.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "react-dom",
        "purl": "pkg:npm/react-dom@19.1.4",
        "version": "19.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-dom",
        "purl": "pkg:npm/react-dom@19.3.0",
        "version": "19.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "react-email",
        "purl": "pkg:npm/react-email@5.0.6",
        "version": "5.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-error-boundary",
        "purl": "pkg:npm/react-error-boundary@3.1.4",
        "version": "3.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-fast-compare",
        "purl": "pkg:npm/react-fast-compare@3.2.2",
        "version": "3.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-helmet",
        "purl": "pkg:npm/react-helmet@6.1.0",
        "version": "6.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-hook-form",
        "purl": "pkg:npm/react-hook-form@7.56.3",
        "version": "7.56.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-i18next",
        "purl": "pkg:npm/react-i18next@15.2.0",
        "version": "15.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-icons",
        "purl": "pkg:npm/react-icons@5.4.0",
        "version": "5.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-is",
        "purl": "pkg:npm/react-is@16.13.1",
        "version": "16.13.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-is",
        "purl": "pkg:npm/react-is@17.0.2",
        "version": "17.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-is",
        "purl": "pkg:npm/react-is@19.3.0",
        "version": "19.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "react-markdown",
        "purl": "pkg:npm/react-markdown@10.0.1",
        "version": "10.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-redux",
        "purl": "pkg:npm/react-redux@9.2.0",
        "version": "9.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-remove-scroll",
        "purl": "pkg:npm/react-remove-scroll@2.7.2",
        "version": "2.7.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-remove-scroll-bar",
        "purl": "pkg:npm/react-remove-scroll-bar@2.3.8",
        "version": "2.3.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-select",
        "purl": "pkg:npm/react-select@5.9.0",
        "version": "5.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-side-effect",
        "purl": "pkg:npm/react-side-effect@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-stately",
        "purl": "pkg:npm/react-stately@3.51.0",
        "version": "3.51.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-style-singleton",
        "purl": "pkg:npm/react-style-singleton@2.2.3",
        "version": "2.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "react-transition-group",
        "purl": "pkg:npm/react-transition-group@4.4.5",
        "version": "4.4.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "readable-stream",
        "purl": "pkg:npm/readable-stream@2.3.8",
        "version": "2.3.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "readable-stream",
        "purl": "pkg:npm/readable-stream@3.6.2",
        "version": "3.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "readable-stream",
        "purl": "pkg:npm/readable-stream@4.5.2",
        "version": "4.5.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "readdirp",
        "purl": "pkg:npm/readdirp@3.6.0",
        "version": "3.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "readdirp",
        "purl": "pkg:npm/readdirp@4.1.2",
        "version": "4.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "real-require",
        "purl": "pkg:npm/real-require@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "real-require",
        "purl": "pkg:npm/real-require@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "recast",
        "purl": "pkg:npm/recast@0.23.21",
        "version": "0.23.21"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "recharts",
        "purl": "pkg:npm/recharts@3.8.1",
        "version": "3.8.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "rechoir",
        "purl": "pkg:npm/rechoir@0.8.0",
        "version": "0.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "redent",
        "purl": "pkg:npm/redent@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "redis-errors",
        "purl": "pkg:npm/redis-errors@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "redis-parser",
        "purl": "pkg:npm/redis-parser@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "redux",
        "purl": "pkg:npm/redux@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "redux-thunk",
        "purl": "pkg:npm/redux-thunk@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "reflect-metadata",
        "purl": "pkg:npm/reflect-metadata@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "reflect.getprototypeof",
        "purl": "pkg:npm/reflect.getprototypeof@1.0.10",
        "version": "1.0.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "regenerator-runtime",
        "purl": "pkg:npm/regenerator-runtime@0.14.1",
        "version": "0.14.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "regexp-tree",
        "purl": "pkg:npm/regexp-tree@0.1.27",
        "version": "0.1.27"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "regexp.prototype.flags",
        "purl": "pkg:npm/regexp.prototype.flags@1.5.4",
        "version": "1.5.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "rehype-raw",
        "purl": "pkg:npm/rehype-raw@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "remark-parse",
        "purl": "pkg:npm/remark-parse@11.0.0",
        "version": "11.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "remark-rehype",
        "purl": "pkg:npm/remark-rehype@11.1.1",
        "version": "11.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "require-directory",
        "purl": "pkg:npm/require-directory@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "require-from-string",
        "purl": "pkg:npm/require-from-string@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "require-in-the-middle",
        "purl": "pkg:npm/require-in-the-middle@8.0.1",
        "version": "8.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "require-main-filename",
        "purl": "pkg:npm/require-main-filename@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "reselect",
        "purl": "pkg:npm/reselect@5.1.1",
        "version": "5.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "reselect",
        "purl": "pkg:npm/reselect@5.2.0",
        "version": "5.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "resolve",
        "purl": "pkg:npm/resolve@1.22.8",
        "version": "1.22.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "resolve",
        "purl": "pkg:npm/resolve@2.0.0-next.5",
        "version": "2.0.0-next.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "resolve-from",
        "purl": "pkg:npm/resolve-from@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "resolve-from",
        "purl": "pkg:npm/resolve-from@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "resolve-pkg-maps",
        "purl": "pkg:npm/resolve-pkg-maps@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "restore-cursor",
        "purl": "pkg:npm/restore-cursor@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "restore-cursor",
        "purl": "pkg:npm/restore-cursor@5.1.0",
        "version": "5.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ret",
        "purl": "pkg:npm/ret@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ret",
        "purl": "pkg:npm/ret@0.5.0",
        "version": "0.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "retry",
        "purl": "pkg:npm/retry@0.13.1",
        "version": "0.13.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "retry-request",
        "purl": "pkg:npm/retry-request@8.0.2",
        "version": "8.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "reusify",
        "purl": "pkg:npm/reusify@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "rfdc",
        "purl": "pkg:npm/rfdc@1.4.1",
        "version": "1.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "rimraf",
        "purl": "pkg:npm/rimraf@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "rimraf",
        "purl": "pkg:npm/rimraf@5.0.5",
        "version": "5.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ripemd160",
        "purl": "pkg:npm/ripemd160@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "ripemd160",
        "purl": "pkg:npm/ripemd160@2.0.3",
        "version": "2.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "rolldown",
        "purl": "pkg:npm/rolldown@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "rolldown",
        "purl": "pkg:npm/rolldown@1.2.7",
        "version": "1.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "rolldown-plugin-dts",
        "purl": "pkg:npm/rolldown-plugin-dts@0.28.6",
        "version": "0.28.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "rollup",
        "purl": "pkg:npm/rollup@4.60.1",
        "version": "4.60.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "rollup",
        "purl": "pkg:npm/rollup@4.60.2",
        "version": "4.60.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "router",
        "purl": "pkg:npm/router@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "rrweb-cssom",
        "purl": "pkg:npm/rrweb-cssom@0.8.0",
        "version": "0.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "rsa-pem-from-mod-exp",
        "purl": "pkg:npm/rsa-pem-from-mod-exp@0.8.6",
        "version": "0.8.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "run-applescript",
        "purl": "pkg:npm/run-applescript@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "run-applescript",
        "purl": "pkg:npm/run-applescript@7.1.0",
        "version": "7.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "run-async",
        "purl": "pkg:npm/run-async@2.4.1",
        "version": "2.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "run-parallel",
        "purl": "pkg:npm/run-parallel@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "rxjs",
        "purl": "pkg:npm/rxjs@7.8.2",
        "version": "7.8.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "safe-array-concat",
        "purl": "pkg:npm/safe-array-concat@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "safe-array-concat",
        "purl": "pkg:npm/safe-array-concat@1.1.4",
        "version": "1.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "safe-buffer",
        "purl": "pkg:npm/safe-buffer@5.1.2",
        "version": "5.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "safe-buffer",
        "purl": "pkg:npm/safe-buffer@5.2.1",
        "version": "5.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "safe-push-apply",
        "purl": "pkg:npm/safe-push-apply@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "safe-regex",
        "purl": "pkg:npm/safe-regex@2.1.1",
        "version": "2.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "safe-regex-test",
        "purl": "pkg:npm/safe-regex-test@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "safe-regex2",
        "purl": "pkg:npm/safe-regex2@5.1.1",
        "version": "5.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "safe-stable-stringify",
        "purl": "pkg:npm/safe-stable-stringify@2.4.3",
        "version": "2.4.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "safer-buffer",
        "purl": "pkg:npm/safer-buffer@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "sax",
        "purl": "pkg:npm/sax@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "saxes",
        "purl": "pkg:npm/saxes@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "package-lock.json",
        "name": "scheduler",
        "purl": "pkg:npm/scheduler@0.23.0",
        "version": "0.23.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "scheduler",
        "purl": "pkg:npm/scheduler@0.26.0",
        "version": "0.26.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "scheduler",
        "purl": "pkg:npm/scheduler@0.28.0",
        "version": "0.28.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Unlicense"
        ],
        "location": "backend/package-lock.json",
        "name": "scim-patch",
        "purl": "pkg:npm/scim-patch@0.9.2",
        "version": "0.9.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "scim2-parse-filter",
        "purl": "pkg:npm/scim2-parse-filter@0.2.10",
        "version": "0.2.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Unlicense"
        ],
        "location": "backend/package-lock.json",
        "name": "scim2-parse-filter",
        "purl": "pkg:npm/scim2-parse-filter@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "scule",
        "purl": "pkg:npm/scule@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "package-lock.json",
        "name": "secrets.js-grempe",
        "purl": "pkg:npm/secrets.js-grempe@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "secure-json-parse",
        "purl": "pkg:npm/secure-json-parse@2.7.0",
        "version": "2.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "secure-json-parse",
        "purl": "pkg:npm/secure-json-parse@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "selderee",
        "purl": "pkg:npm/selderee@0.11.0",
        "version": "0.11.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "semver",
        "purl": "pkg:npm/semver@6.3.1",
        "version": "6.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "semver",
        "purl": "pkg:npm/semver@7.7.4",
        "version": "7.7.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "send",
        "purl": "pkg:npm/send@0.19.0",
        "version": "0.19.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "send",
        "purl": "pkg:npm/send@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "sequin",
        "purl": "pkg:npm/sequin@0.1.1",
        "version": "0.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "serve-static",
        "purl": "pkg:npm/serve-static@1.16.2",
        "version": "1.16.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "serve-static",
        "purl": "pkg:npm/serve-static@2.2.1",
        "version": "2.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "set-blocking",
        "purl": "pkg:npm/set-blocking@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "set-cookie-parser",
        "purl": "pkg:npm/set-cookie-parser@2.7.2",
        "version": "2.7.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "set-function-length",
        "purl": "pkg:npm/set-function-length@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "set-function-name",
        "purl": "pkg:npm/set-function-name@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "set-proto",
        "purl": "pkg:npm/set-proto@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "setimmediate",
        "purl": "pkg:npm/setimmediate@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "setprototypeof",
        "purl": "pkg:npm/setprototypeof@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT AND BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "sha.js",
        "purl": "pkg:npm/sha.js@2.4.12",
        "version": "2.4.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "sharp",
        "purl": "pkg:npm/sharp@0.34.5",
        "version": "0.34.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "shebang-command",
        "purl": "pkg:npm/shebang-command@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "shebang-regex",
        "purl": "pkg:npm/shebang-regex@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "side-channel",
        "purl": "pkg:npm/side-channel@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "side-channel",
        "purl": "pkg:npm/side-channel@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "side-channel-list",
        "purl": "pkg:npm/side-channel-list@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "side-channel-list",
        "purl": "pkg:npm/side-channel-list@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "side-channel-map",
        "purl": "pkg:npm/side-channel-map@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "side-channel-weakmap",
        "purl": "pkg:npm/side-channel-weakmap@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "siginfo",
        "purl": "pkg:npm/siginfo@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "signal-exit",
        "purl": "pkg:npm/signal-exit@3.0.7",
        "version": "3.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "signal-exit",
        "purl": "pkg:npm/signal-exit@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "simple-lru-cache",
        "purl": "pkg:npm/simple-lru-cache@0.0.2",
        "version": "0.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "simple-swizzle",
        "purl": "pkg:npm/simple-swizzle@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "sisteransi",
        "purl": "pkg:npm/sisteransi@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause OR GPL-2.0-only"
        ],
        "location": "backend/package-lock.json",
        "name": "sjcl",
        "purl": "pkg:npm/sjcl@1.0.9",
        "version": "1.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "smee-client",
        "purl": "pkg:npm/smee-client@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "snowflake-sdk",
        "purl": "pkg:npm/snowflake-sdk@3.4.0",
        "version": "3.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "socket.io",
        "purl": "pkg:npm/socket.io@4.8.1",
        "version": "4.8.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "socket.io-adapter",
        "purl": "pkg:npm/socket.io-adapter@2.5.5",
        "version": "2.5.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "socket.io-parser",
        "purl": "pkg:npm/socket.io-parser@4.2.7",
        "version": "4.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "sonic-boom",
        "purl": "pkg:npm/sonic-boom@3.7.0",
        "version": "3.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "sonic-boom",
        "purl": "pkg:npm/sonic-boom@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "sonic-boom",
        "purl": "pkg:npm/sonic-boom@4.2.1",
        "version": "4.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "sonner",
        "purl": "pkg:npm/sonner@2.0.7",
        "version": "2.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "frontend/package-lock.json",
        "name": "source-map",
        "purl": "pkg:npm/source-map@0.5.7",
        "version": "0.5.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "source-map",
        "purl": "pkg:npm/source-map@0.6.1",
        "version": "0.6.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "source-map",
        "purl": "pkg:npm/source-map@0.8.0",
        "version": "0.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-3-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "source-map-js",
        "purl": "pkg:npm/source-map-js@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "space-separated-tokens",
        "purl": "pkg:npm/space-separated-tokens@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "sparse-bitfield",
        "purl": "pkg:npm/sparse-bitfield@3.0.3",
        "version": "3.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "split2",
        "purl": "pkg:npm/split2@3.2.2",
        "version": "3.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "split2",
        "purl": "pkg:npm/split2@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "sprintf-js",
        "purl": "pkg:npm/sprintf-js@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "sql-escaper",
        "purl": "pkg:npm/sql-escaper@1.5.2",
        "version": "1.5.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "ssh2",
        "purl": "pkg:npm/ssh2@1.17.0",
        "version": "1.17.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "sshpk",
        "purl": "pkg:npm/sshpk@1.16.1",
        "version": "1.16.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "stable-hash",
        "purl": "pkg:npm/stable-hash@0.0.4",
        "version": "0.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "stable-hash",
        "purl": "pkg:npm/stable-hash@0.0.5",
        "version": "0.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "stable-hash-x",
        "purl": "pkg:npm/stable-hash-x@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "stack-trace",
        "purl": "pkg:npm/stack-trace@0.0.10",
        "version": "0.0.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "stackback",
        "purl": "pkg:npm/stackback@0.0.2",
        "version": "0.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "standard-as-callback",
        "purl": "pkg:npm/standard-as-callback@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "statuses",
        "purl": "pkg:npm/statuses@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "statuses",
        "purl": "pkg:npm/statuses@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "statuses",
        "purl": "pkg:npm/statuses@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "std-env",
        "purl": "pkg:npm/std-env@3.10.0",
        "version": "3.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "std-env",
        "purl": "pkg:npm/std-env@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "stdin-discarder",
        "purl": "pkg:npm/stdin-discarder@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "stop-iteration-iterator",
        "purl": "pkg:npm/stop-iteration-iterator@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "storybook",
        "purl": "pkg:npm/storybook@10.3.6",
        "version": "10.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "storybook-addon-tag-badges",
        "purl": "pkg:npm/storybook-addon-tag-badges@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "stream-browserify",
        "purl": "pkg:npm/stream-browserify@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "stream-events",
        "purl": "pkg:npm/stream-events@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "stream-http",
        "purl": "pkg:npm/stream-http@3.2.0",
        "version": "3.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "stream-shift",
        "purl": "pkg:npm/stream-shift@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "strict-event-emitter",
        "purl": "pkg:npm/strict-event-emitter@0.5.1",
        "version": "0.5.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "string-width",
        "purl": "pkg:npm/string-width@4.2.3",
        "version": "4.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "string-width",
        "purl": "pkg:npm/string-width@5.1.2",
        "version": "5.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "string-width",
        "purl": "pkg:npm/string-width@7.2.0",
        "version": "7.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "string.prototype.includes",
        "purl": "pkg:npm/string.prototype.includes@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "string.prototype.matchall",
        "purl": "pkg:npm/string.prototype.matchall@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "string.prototype.repeat",
        "purl": "pkg:npm/string.prototype.repeat@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "string.prototype.trim",
        "purl": "pkg:npm/string.prototype.trim@1.2.10",
        "version": "1.2.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "string.prototype.trim",
        "purl": "pkg:npm/string.prototype.trim@1.2.11",
        "version": "1.2.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "string.prototype.trimend",
        "purl": "pkg:npm/string.prototype.trimend@1.0.10",
        "version": "1.0.10"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "string.prototype.trimend",
        "purl": "pkg:npm/string.prototype.trimend@1.0.9",
        "version": "1.0.9"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "string.prototype.trimstart",
        "purl": "pkg:npm/string.prototype.trimstart@1.0.8",
        "version": "1.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "string_decoder",
        "purl": "pkg:npm/string_decoder@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "string_decoder",
        "purl": "pkg:npm/string_decoder@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "stringify-entities",
        "purl": "pkg:npm/stringify-entities@4.0.4",
        "version": "4.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "strip-ansi",
        "purl": "pkg:npm/strip-ansi@5.2.0",
        "version": "5.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "strip-ansi",
        "purl": "pkg:npm/strip-ansi@6.0.1",
        "version": "6.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "strip-ansi",
        "purl": "pkg:npm/strip-ansi@7.1.0",
        "version": "7.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "strip-bom",
        "purl": "pkg:npm/strip-bom@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "strip-indent",
        "purl": "pkg:npm/strip-indent@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "strip-indent",
        "purl": "pkg:npm/strip-indent@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "strip-json-comments",
        "purl": "pkg:npm/strip-json-comments@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "strip-literal",
        "purl": "pkg:npm/strip-literal@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "strnum",
        "purl": "pkg:npm/strnum@2.2.3",
        "version": "2.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "strtok3",
        "purl": "pkg:npm/strtok3@10.3.5",
        "version": "10.3.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "stubborn-fs",
        "purl": "pkg:npm/stubborn-fs@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "stubborn-utils",
        "purl": "pkg:npm/stubborn-utils@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "stubs",
        "purl": "pkg:npm/stubs@3.0.0",
        "version": "3.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "style-mod",
        "purl": "pkg:npm/style-mod@4.1.3",
        "version": "4.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "style-to-object",
        "purl": "pkg:npm/style-to-object@1.0.8",
        "version": "1.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "styled-jsx",
        "purl": "pkg:npm/styled-jsx@5.1.6",
        "version": "5.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "stylis",
        "purl": "pkg:npm/stylis@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "supports-color",
        "purl": "pkg:npm/supports-color@5.5.0",
        "version": "5.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "supports-color",
        "purl": "pkg:npm/supports-color@7.2.0",
        "version": "7.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "supports-preserve-symlinks-flag",
        "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "symbol-tree",
        "purl": "pkg:npm/symbol-tree@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "synckit",
        "purl": "pkg:npm/synckit@0.8.8",
        "version": "0.8.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "synckit",
        "purl": "pkg:npm/synckit@0.9.2",
        "version": "0.9.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tabbable",
        "purl": "pkg:npm/tabbable@6.5.0",
        "version": "6.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "table-layout",
        "purl": "pkg:npm/table-layout@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tagged-tag",
        "purl": "pkg:npm/tagged-tag@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tailwind-merge",
        "purl": "pkg:npm/tailwind-merge@2.5.5",
        "version": "2.5.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tailwindcss",
        "purl": "pkg:npm/tailwindcss@4.1.14",
        "version": "4.1.14"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tailwindcss",
        "purl": "pkg:npm/tailwindcss@4.1.17",
        "version": "4.1.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tapable",
        "purl": "pkg:npm/tapable@2.2.1",
        "version": "2.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "tar",
        "purl": "pkg:npm/tar@7.5.13",
        "version": "7.5.13"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "tar",
        "purl": "pkg:npm/tar@7.5.22",
        "version": "7.5.22"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "tarn",
        "purl": "pkg:npm/tarn@3.0.2",
        "version": "3.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tedious",
        "purl": "pkg:npm/tedious@20.2.3",
        "version": "20.2.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "teeny-request",
        "purl": "pkg:npm/teeny-request@10.1.2",
        "version": "10.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "text-hex",
        "purl": "pkg:npm/text-hex@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "text-table",
        "purl": "pkg:npm/text-table@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "thirty-two",
        "purl": "pkg:npm/thirty-two@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "thread-stream",
        "purl": "pkg:npm/thread-stream@2.4.1",
        "version": "2.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "thread-stream",
        "purl": "pkg:npm/thread-stream@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "thread-stream",
        "purl": "pkg:npm/thread-stream@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "through",
        "purl": "pkg:npm/through@2.3.8",
        "version": "2.3.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "tildify",
        "purl": "pkg:npm/tildify@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "timers-browserify",
        "purl": "pkg:npm/timers-browserify@2.0.12",
        "version": "2.0.12"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tiny-invariant",
        "purl": "pkg:npm/tiny-invariant@1.3.3",
        "version": "1.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tiny-warning",
        "purl": "pkg:npm/tiny-warning@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tinybench",
        "purl": "pkg:npm/tinybench@2.9.0",
        "version": "2.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tinyexec",
        "purl": "pkg:npm/tinyexec@0.3.2",
        "version": "0.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tinyexec",
        "purl": "pkg:npm/tinyexec@1.3.1",
        "version": "1.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tinyglobby",
        "purl": "pkg:npm/tinyglobby@0.2.15",
        "version": "0.2.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "tinyglobby",
        "purl": "pkg:npm/tinyglobby@0.2.16",
        "version": "0.2.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tinyglobby",
        "purl": "pkg:npm/tinyglobby@0.2.17",
        "version": "0.2.17"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tinypool",
        "purl": "pkg:npm/tinypool@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tinyrainbow",
        "purl": "pkg:npm/tinyrainbow@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tinyrainbow",
        "purl": "pkg:npm/tinyrainbow@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tinyspy",
        "purl": "pkg:npm/tinyspy@4.0.4",
        "version": "4.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tinyspy",
        "purl": "pkg:npm/tinyspy@4.0.6",
        "version": "4.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tldts",
        "purl": "pkg:npm/tldts@6.1.86",
        "version": "6.1.86"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tldts-core",
        "purl": "pkg:npm/tldts-core@6.1.86",
        "version": "6.1.86"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "to-buffer",
        "purl": "pkg:npm/to-buffer@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "to-regex-range",
        "purl": "pkg:npm/to-regex-range@5.0.1",
        "version": "5.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "toad-cache",
        "purl": "pkg:npm/toad-cache@3.7.0",
        "version": "3.7.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "toidentifier",
        "purl": "pkg:npm/toidentifier@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "token-types",
        "purl": "pkg:npm/token-types@6.1.2",
        "version": "6.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "toml",
        "purl": "pkg:npm/toml@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "tough-cookie",
        "purl": "pkg:npm/tough-cookie@5.1.2",
        "version": "5.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tr46",
        "purl": "pkg:npm/tr46@0.0.3",
        "version": "0.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "tr46",
        "purl": "pkg:npm/tr46@4.1.1",
        "version": "4.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "tr46",
        "purl": "pkg:npm/tr46@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "tree-kill",
        "purl": "pkg:npm/tree-kill@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "trim-lines",
        "purl": "pkg:npm/trim-lines@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "triple-beam",
        "purl": "pkg:npm/triple-beam@1.4.1",
        "version": "1.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "trough",
        "purl": "pkg:npm/trough@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ts-api-utils",
        "purl": "pkg:npm/ts-api-utils@2.5.0",
        "version": "2.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "ts-dedent",
        "purl": "pkg:npm/ts-dedent@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tsconfck",
        "purl": "pkg:npm/tsconfck@3.1.6",
        "version": "3.1.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tsconfig-paths",
        "purl": "pkg:npm/tsconfig-paths@3.15.0",
        "version": "3.15.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tsconfig-paths",
        "purl": "pkg:npm/tsconfig-paths@4.2.0",
        "version": "4.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tsdown",
        "purl": "pkg:npm/tsdown@0.23.0",
        "version": "0.23.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "0BSD"
        ],
        "location": "backend/package-lock.json",
        "name": "tslib",
        "purl": "pkg:npm/tslib@1.14.1",
        "version": "1.14.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "0BSD"
        ],
        "location": "backend/package-lock.json",
        "name": "tslib",
        "purl": "pkg:npm/tslib@2.8.1",
        "version": "2.8.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "tsscmp",
        "purl": "pkg:npm/tsscmp@1.0.6",
        "version": "1.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tsx",
        "purl": "pkg:npm/tsx@4.19.3",
        "version": "4.19.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "tsx",
        "purl": "pkg:npm/tsx@4.21.0",
        "version": "4.21.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tsx",
        "purl": "pkg:npm/tsx@4.23.15",
        "version": "4.23.15"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tsyringe",
        "purl": "pkg:npm/tsyringe@4.10.0",
        "version": "4.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tsyringe",
        "purl": "pkg:npm/tsyringe@4.8.0",
        "version": "4.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tty-browserify",
        "purl": "pkg:npm/tty-browserify@0.0.1",
        "version": "0.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "tunnel",
        "purl": "pkg:npm/tunnel@0.0.6",
        "version": "0.0.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "tunnel-agent",
        "purl": "pkg:npm/tunnel-agent@0.6.0",
        "version": "0.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "tw-animate-css",
        "purl": "pkg:npm/tw-animate-css@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Unlicense"
        ],
        "location": "backend/package-lock.json",
        "name": "tweetnacl",
        "purl": "pkg:npm/tweetnacl@0.14.5",
        "version": "0.14.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Unlicense"
        ],
        "location": "backend/package-lock.json",
        "name": "tweetnacl",
        "purl": "pkg:npm/tweetnacl@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Unlicense"
        ],
        "location": "backend/package-lock.json",
        "name": "tweetnacl-util",
        "purl": "pkg:npm/tweetnacl-util@0.15.1",
        "version": "0.15.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "type-check",
        "purl": "pkg:npm/type-check@0.4.0",
        "version": "0.4.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT OR CC0-1.0"
        ],
        "location": "backend/package-lock.json",
        "name": "type-fest",
        "purl": "pkg:npm/type-fest@0.20.2",
        "version": "0.20.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT OR CC0-1.0"
        ],
        "location": "backend/package-lock.json",
        "name": "type-fest",
        "purl": "pkg:npm/type-fest@0.21.3",
        "version": "0.21.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "type-fest",
        "purl": "pkg:npm/type-fest@0.3.1",
        "version": "0.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT OR CC0-1.0"
        ],
        "location": "backend/package-lock.json",
        "name": "type-fest",
        "purl": "pkg:npm/type-fest@5.3.1",
        "version": "5.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "type-is",
        "purl": "pkg:npm/type-is@1.6.18",
        "version": "1.6.18"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "sink/oidc-server/package-lock.json",
        "name": "type-is",
        "purl": "pkg:npm/type-is@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "typed-array-buffer",
        "purl": "pkg:npm/typed-array-buffer@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "typed-array-byte-length",
        "purl": "pkg:npm/typed-array-byte-length@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "typed-array-byte-offset",
        "purl": "pkg:npm/typed-array-byte-offset@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "typed-array-length",
        "purl": "pkg:npm/typed-array-length@1.0.7",
        "version": "1.0.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "typed-array-length",
        "purl": "pkg:npm/typed-array-length@1.0.8",
        "version": "1.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "typescript",
        "purl": "pkg:npm/typescript@5.6.3",
        "version": "5.6.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "typescript",
        "purl": "pkg:npm/typescript@5.9.3",
        "version": "5.9.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "typescript-eslint",
        "purl": "pkg:npm/typescript-eslint@8.70.1",
        "version": "8.70.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "typical",
        "purl": "pkg:npm/typical@7.3.0",
        "version": "7.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "uglify-js",
        "purl": "pkg:npm/uglify-js@3.17.4",
        "version": "3.17.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "uid-safe",
        "purl": "pkg:npm/uid-safe@2.1.5",
        "version": "2.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "uid2",
        "purl": "pkg:npm/uid2@0.0.4",
        "version": "0.0.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "uint8array-extras",
        "purl": "pkg:npm/uint8array-extras@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "unbox-primitive",
        "purl": "pkg:npm/unbox-primitive@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "unconfig-core",
        "purl": "pkg:npm/unconfig-core@7.5.0",
        "version": "7.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "undici",
        "purl": "pkg:npm/undici@7.30.0",
        "version": "7.30.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "undici-types",
        "purl": "pkg:npm/undici-types@5.26.5",
        "version": "5.26.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "undici-types",
        "purl": "pkg:npm/undici-types@6.21.0",
        "version": "6.21.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "undici-types",
        "purl": "pkg:npm/undici-types@8.9.0",
        "version": "8.9.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "unified",
        "purl": "pkg:npm/unified@11.0.5",
        "version": "11.0.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "unist-util-is",
        "purl": "pkg:npm/unist-util-is@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "unist-util-position",
        "purl": "pkg:npm/unist-util-position@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "unist-util-stringify-position",
        "purl": "pkg:npm/unist-util-stringify-position@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "unist-util-visit",
        "purl": "pkg:npm/unist-util-visit@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "unist-util-visit-parents",
        "purl": "pkg:npm/unist-util-visit-parents@6.0.1",
        "version": "6.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "universal-github-app-jwt",
        "purl": "pkg:npm/universal-github-app-jwt@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "universal-github-app-jwt",
        "purl": "pkg:npm/universal-github-app-jwt@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "universal-user-agent",
        "purl": "pkg:npm/universal-user-agent@6.0.1",
        "version": "6.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "universal-user-agent",
        "purl": "pkg:npm/universal-user-agent@7.0.3",
        "version": "7.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "universalify",
        "purl": "pkg:npm/universalify@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "unpipe",
        "purl": "pkg:npm/unpipe@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "unplugin",
        "purl": "pkg:npm/unplugin@1.16.0",
        "version": "1.16.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "unplugin",
        "purl": "pkg:npm/unplugin@2.3.11",
        "version": "2.3.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "unrs-resolver",
        "purl": "pkg:npm/unrs-resolver@1.12.2",
        "version": "1.12.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "update-browserslist-db",
        "purl": "pkg:npm/update-browserslist-db@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "update-dotenv",
        "purl": "pkg:npm/update-dotenv@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "uri-js",
        "purl": "pkg:npm/uri-js@4.4.1",
        "version": "4.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "urijs",
        "purl": "pkg:npm/urijs@1.19.11",
        "version": "1.19.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "url",
        "purl": "pkg:npm/url@0.11.4",
        "version": "0.11.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "use-callback-ref",
        "purl": "pkg:npm/use-callback-ref@1.3.3",
        "version": "1.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "use-isomorphic-layout-effect",
        "purl": "pkg:npm/use-isomorphic-layout-effect@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "use-sidecar",
        "purl": "pkg:npm/use-sidecar@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "use-sync-external-store",
        "purl": "pkg:npm/use-sync-external-store@1.6.0",
        "version": "1.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "util",
        "purl": "pkg:npm/util@0.12.5",
        "version": "0.12.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "util-deprecate",
        "purl": "pkg:npm/util-deprecate@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "utils-merge",
        "purl": "pkg:npm/utils-merge@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "uuid",
        "purl": "pkg:npm/uuid@10.0.0",
        "version": "10.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "uuid",
        "purl": "pkg:npm/uuid@11.1.0",
        "version": "11.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "uuid",
        "purl": "pkg:npm/uuid@11.1.1",
        "version": "11.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "uuid",
        "purl": "pkg:npm/uuid@3.3.3",
        "version": "3.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "uuid",
        "purl": "pkg:npm/uuid@8.3.2",
        "version": "8.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "uuid",
        "purl": "pkg:npm/uuid@9.0.1",
        "version": "9.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "validator",
        "purl": "pkg:npm/validator@13.15.26",
        "version": "13.15.26"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "vary",
        "purl": "pkg:npm/vary@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "vasync",
        "purl": "pkg:npm/vasync@2.2.1",
        "version": "2.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "verkit",
        "purl": "pkg:npm/verkit@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "verror",
        "purl": "pkg:npm/verror@1.10.0",
        "version": "1.10.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "verror",
        "purl": "pkg:npm/verror@1.10.1",
        "version": "1.10.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "vfile",
        "purl": "pkg:npm/vfile@6.0.3",
        "version": "6.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "vfile-location",
        "purl": "pkg:npm/vfile-location@5.0.3",
        "version": "5.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "vfile-message",
        "purl": "pkg:npm/vfile-message@4.0.2",
        "version": "4.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT AND ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "victory-vendor",
        "purl": "pkg:npm/victory-vendor@37.3.6",
        "version": "37.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "vite",
        "purl": "pkg:npm/vite@7.3.2",
        "version": "7.3.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "vite",
        "purl": "pkg:npm/vite@7.3.6",
        "version": "7.3.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "vite",
        "purl": "pkg:npm/vite@8.2.2",
        "version": "8.2.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "vite-node",
        "purl": "pkg:npm/vite-node@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "vite-plugin-node-polyfills",
        "purl": "pkg:npm/vite-plugin-node-polyfills@0.28.0",
        "version": "0.28.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "vite-plugin-wasm",
        "purl": "pkg:npm/vite-plugin-wasm@3.6.0",
        "version": "3.6.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "vite-tsconfig-paths",
        "purl": "pkg:npm/vite-tsconfig-paths@5.1.4",
        "version": "5.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "vitest",
        "purl": "pkg:npm/vitest@3.2.4",
        "version": "3.2.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "vitest",
        "purl": "pkg:npm/vitest@3.2.7",
        "version": "3.2.7"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "vitest",
        "purl": "pkg:npm/vitest@4.1.11",
        "version": "4.1.11"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "vm-browserify",
        "purl": "pkg:npm/vm-browserify@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "void-elements",
        "purl": "pkg:npm/void-elements@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "w3c-keyname",
        "purl": "pkg:npm/w3c-keyname@2.2.8",
        "version": "2.2.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "w3c-xmlserializer",
        "purl": "pkg:npm/w3c-xmlserializer@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "wcwidth",
        "purl": "pkg:npm/wcwidth@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "web-namespaces",
        "purl": "pkg:npm/web-namespaces@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "web-streams-polyfill",
        "purl": "pkg:npm/web-streams-polyfill@3.3.3",
        "version": "3.3.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "frontend/package-lock.json",
        "name": "web-vitals",
        "purl": "pkg:npm/web-vitals@5.1.0",
        "version": "5.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BSD-2-Clause"
        ],
        "location": "backend/package-lock.json",
        "name": "webidl-conversions",
        "purl": "pkg:npm/webidl-conversions@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "webidl-conversions",
        "purl": "pkg:npm/webidl-conversions@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "webpack-virtual-modules",
        "purl": "pkg:npm/webpack-virtual-modules@0.6.2",
        "version": "0.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "websocket-driver",
        "purl": "pkg:npm/websocket-driver@0.7.5",
        "version": "0.7.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "Apache-2.0"
        ],
        "location": "backend/package-lock.json",
        "name": "websocket-extensions",
        "purl": "pkg:npm/websocket-extensions@0.1.4",
        "version": "0.1.4"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "whatwg-encoding",
        "purl": "pkg:npm/whatwg-encoding@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "whatwg-fetch",
        "purl": "pkg:npm/whatwg-fetch@3.6.20",
        "version": "3.6.20"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "whatwg-mimetype",
        "purl": "pkg:npm/whatwg-mimetype@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "whatwg-url",
        "purl": "pkg:npm/whatwg-url@13.0.0",
        "version": "13.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "whatwg-url",
        "purl": "pkg:npm/whatwg-url@14.1.1",
        "version": "14.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "whatwg-url",
        "purl": "pkg:npm/whatwg-url@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "when-exit",
        "purl": "pkg:npm/when-exit@2.1.5",
        "version": "2.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "which",
        "purl": "pkg:npm/which@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "which",
        "purl": "pkg:npm/which@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "which-boxed-primitive",
        "purl": "pkg:npm/which-boxed-primitive@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "which-builtin-type",
        "purl": "pkg:npm/which-builtin-type@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "which-collection",
        "purl": "pkg:npm/which-collection@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "which-module",
        "purl": "pkg:npm/which-module@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "which-typed-array",
        "purl": "pkg:npm/which-typed-array@1.1.16",
        "version": "1.1.16"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "which-typed-array",
        "purl": "pkg:npm/which-typed-array@1.1.19",
        "version": "1.1.19"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "which-typed-array",
        "purl": "pkg:npm/which-typed-array@1.1.24",
        "version": "1.1.24"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "why-is-node-running",
        "purl": "pkg:npm/why-is-node-running@2.3.0",
        "version": "2.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "wide-align",
        "purl": "pkg:npm/wide-align@1.1.5",
        "version": "1.1.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "winston",
        "purl": "pkg:npm/winston@3.15.0",
        "version": "3.15.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "winston-transport",
        "purl": "pkg:npm/winston-transport@4.8.0",
        "version": "4.8.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "word-wrap",
        "purl": "pkg:npm/word-wrap@1.2.5",
        "version": "1.2.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "wordwrap",
        "purl": "pkg:npm/wordwrap@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "wordwrapjs",
        "purl": "pkg:npm/wordwrapjs@5.1.0",
        "version": "5.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "wrap-ansi",
        "purl": "pkg:npm/wrap-ansi@6.2.0",
        "version": "6.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "wrap-ansi",
        "purl": "pkg:npm/wrap-ansi@7.0.0",
        "version": "7.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "wrap-ansi",
        "purl": "pkg:npm/wrap-ansi@8.1.0",
        "version": "8.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "wrappy",
        "purl": "pkg:npm/wrappy@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "ws",
        "purl": "pkg:npm/ws@8.20.0",
        "version": "8.20.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "ws",
        "purl": "pkg:npm/ws@8.21.0",
        "version": "8.21.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "ws",
        "purl": "pkg:npm/ws@8.21.3",
        "version": "8.21.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "wsl-utils",
        "purl": "pkg:npm/wsl-utils@0.1.0",
        "version": "0.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xcase",
        "purl": "pkg:npm/xcase@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xml-crypto",
        "purl": "pkg:npm/xml-crypto@6.1.2",
        "version": "6.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xml-encryption",
        "purl": "pkg:npm/xml-encryption@3.1.0",
        "version": "3.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "xml-name-validator",
        "purl": "pkg:npm/xml-name-validator@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xml-naming",
        "purl": "pkg:npm/xml-naming@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "xml2js",
        "purl": "pkg:npm/xml2js@0.5.0",
        "version": "0.5.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xml2js",
        "purl": "pkg:npm/xml2js@0.6.2",
        "version": "0.6.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xmlbuilder",
        "purl": "pkg:npm/xmlbuilder@11.0.1",
        "version": "11.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xmlbuilder",
        "purl": "pkg:npm/xmlbuilder@15.1.1",
        "version": "15.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "xmlchars",
        "purl": "pkg:npm/xmlchars@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xpath",
        "purl": "pkg:npm/xpath@0.0.32",
        "version": "0.0.32"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xpath",
        "purl": "pkg:npm/xpath@0.0.33",
        "version": "0.0.33"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xpath",
        "purl": "pkg:npm/xpath@0.0.34",
        "version": "0.0.34"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "xtend",
        "purl": "pkg:npm/xtend@4.0.2",
        "version": "4.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "xterm-readline",
        "purl": "pkg:npm/xterm-readline@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "y18n",
        "purl": "pkg:npm/y18n@4.0.3",
        "version": "4.0.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "y18n",
        "purl": "pkg:npm/y18n@5.0.8",
        "version": "5.0.8"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "yallist",
        "purl": "pkg:npm/yallist@3.1.1",
        "version": "3.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "backend/package-lock.json",
        "name": "yallist",
        "purl": "pkg:npm/yallist@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "BlueOak-1.0.0"
        ],
        "location": "backend/package-lock.json",
        "name": "yallist",
        "purl": "pkg:npm/yallist@5.0.0",
        "version": "5.0.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "yaml",
        "purl": "pkg:npm/yaml@1.10.3",
        "version": "1.10.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "yaml",
        "purl": "pkg:npm/yaml@2.8.3",
        "version": "2.8.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "yargs",
        "purl": "pkg:npm/yargs@15.4.1",
        "version": "15.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "yargs",
        "purl": "pkg:npm/yargs@17.7.2",
        "version": "17.7.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "frontend/package-lock.json",
        "name": "yargs-parser",
        "purl": "pkg:npm/yargs-parser@18.1.3",
        "version": "18.1.3"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "yargs-parser",
        "purl": "pkg:npm/yargs-parser@21.1.1",
        "version": "21.1.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "yjs",
        "purl": "pkg:npm/yjs@13.6.24",
        "version": "13.6.24"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "yocto-queue",
        "purl": "pkg:npm/yocto-queue@0.1.0",
        "version": "0.1.0"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "yoctocolors",
        "purl": "pkg:npm/yoctocolors@2.1.2",
        "version": "2.1.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "yuku-ast",
        "purl": "pkg:npm/yuku-ast@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "yuku-codegen",
        "purl": "pkg:npm/yuku-codegen@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "yuku-parser",
        "purl": "pkg:npm/yuku-parser@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "zod",
        "purl": "pkg:npm/zod@3.24.1",
        "version": "3.24.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "backend/package-lock.json",
        "name": "zod",
        "purl": "pkg:npm/zod@3.25.76",
        "version": "3.25.76"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "zod",
        "purl": "pkg:npm/zod@4.4.1",
        "version": "4.4.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "zod",
        "purl": "pkg:npm/zod@4.6.5",
        "version": "4.6.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "backend/package-lock.json",
        "name": "zod-to-json-schema",
        "purl": "pkg:npm/zod-to-json-schema@3.24.5",
        "version": "3.24.5"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "ISC"
        ],
        "location": "upgrade-impact/package-lock.json",
        "name": "zod-to-json-schema",
        "purl": "pkg:npm/zod-to-json-schema@3.25.2",
        "version": "3.25.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "zod-validation-error",
        "purl": "pkg:npm/zod-validation-error@4.0.2",
        "version": "4.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "zustand",
        "purl": "pkg:npm/zustand@4.5.6",
        "version": "4.5.6"
      },
      {
        "ecosystem": "npm",
        "licenses": [
          "MIT"
        ],
        "location": "frontend/package-lock.json",
        "name": "zustand",
        "purl": "pkg:npm/zustand@5.0.2",
        "version": "5.0.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "frontend/package-lock.json",
        "name": "zwitch",
        "purl": "pkg:npm/zwitch@2.0.4",
        "version": "2.0.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "acme",
        "purl": "pkg:pypi/acme@5.1.0",
        "version": "5.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "anyio",
        "purl": "pkg:pypi/anyio@4.11.0",
        "version": "4.11.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "attrs",
        "purl": "pkg:pypi/attrs@25.4.0",
        "version": "25.4.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "bdd",
        "purl": "pkg:pypi/bdd@0.1.0",
        "version": "0.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "behave",
        "purl": "pkg:pypi/behave@1.3.3",
        "version": "1.3.3"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "boltons",
        "purl": "pkg:pypi/boltons@25.0.0",
        "version": "25.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "certifi",
        "purl": "pkg:pypi/certifi@2025.10.5",
        "version": "2025.10.5"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "cffi",
        "purl": "pkg:pypi/cffi@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "charset-normalizer",
        "purl": "pkg:pypi/charset-normalizer@3.4.4",
        "version": "3.4.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "colorama",
        "purl": "pkg:pypi/colorama@0.4.6",
        "version": "0.4.6"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "cryptography",
        "purl": "pkg:pypi/cryptography@46.0.7",
        "version": "46.0.7"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "cucumber-expressions",
        "purl": "pkg:pypi/cucumber-expressions@18.0.1",
        "version": "18.0.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "cucumber-tag-expressions",
        "purl": "pkg:pypi/cucumber-tag-expressions@8.0.0",
        "version": "8.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "dotenv",
        "purl": "pkg:pypi/dotenv@0.9.9",
        "version": "0.9.9"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "face",
        "purl": "pkg:pypi/face@24.0.0",
        "version": "24.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "faker",
        "purl": "pkg:pypi/faker@37.12.0",
        "version": "37.12.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "glom",
        "purl": "pkg:pypi/glom@24.11.0",
        "version": "24.11.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "h11",
        "purl": "pkg:pypi/h11@0.16.0",
        "version": "0.16.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "httpcore",
        "purl": "pkg:pypi/httpcore@1.0.9",
        "version": "1.0.9"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "httpx",
        "purl": "pkg:pypi/httpx@0.28.1",
        "version": "0.28.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "idna",
        "purl": "pkg:pypi/idna@3.11",
        "version": "3.11"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "josepy",
        "purl": "pkg:pypi/josepy@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "jq",
        "purl": "pkg:pypi/jq@1.10.0",
        "version": "1.10.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "parse",
        "purl": "pkg:pypi/parse@1.20.2",
        "version": "1.20.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "parse-type",
        "purl": "pkg:pypi/parse-type@0.6.6",
        "version": "0.6.6"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "pycparser",
        "purl": "pkg:pypi/pycparser@2.23",
        "version": "2.23"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "pyopenssl",
        "purl": "pkg:pypi/pyopenssl@26.0.0",
        "version": "26.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "pyrfc3339",
        "purl": "pkg:pypi/pyrfc3339@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "python-dotenv",
        "purl": "pkg:pypi/python-dotenv@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "requests",
        "purl": "pkg:pypi/requests@2.33.1",
        "version": "2.33.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": ".github/resources/requirements.txt",
        "name": "requests",
        "purl": "pkg:pypi/requests@2.34.2",
        "version": "2.34.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "six",
        "purl": "pkg:pypi/six@1.17.0",
        "version": "1.17.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "sniffio",
        "purl": "pkg:pypi/sniffio@1.3.1",
        "version": "1.3.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "typing-extensions",
        "purl": "pkg:pypi/typing-extensions@4.15.0",
        "version": "4.15.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "tzdata",
        "purl": "pkg:pypi/tzdata@2025.2",
        "version": "2025.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "backend/bdd/uv.lock",
        "name": "urllib3",
        "purl": "pkg:pypi/urllib3@2.6.3",
        "version": "2.6.3"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/check-api-for-breaking-changes.yml",
        "name": "./.github/actions/generate-openapi-spec",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
        "name": "./.github/actions/trivy-image-scan",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
        "name": "./.github/workflows/generate-upgrade-impact.yml",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/generate-release-changelog.yml",
        "name": "./.github/workflows/release-freeze-check.yml",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
        "name": "./.github/workflows/run-backend-tests.yml",
        "purl": "",
        "version": "UNKNOWN"
      }
    ],
    "description": "Manage application secrets with automation integrations",
    "errors": [],
    "id": "Infisical__infisical",
    "manifests": [
      ".github/actions/generate-openapi-spec/action.yml",
      ".github/actions/trivy-image-scan/action.yml",
      ".github/resources/requirements.txt",
      ".github/workflows/check-api-for-breaking-changes.yml",
      ".github/workflows/check-be-ts-and-lint.yml",
      ".github/workflows/check-dockerfile-pins.yml",
      ".github/workflows/check-docs-style.yml",
      ".github/workflows/check-fe-ts-and-lint.yml",
      ".github/workflows/check-migration-file-edited.yml",
      ".github/workflows/check-non-re2-regex.yml",
      ".github/workflows/generate-release-changelog.yml",
      ".github/workflows/generate-upgrade-impact.yml",
      ".github/workflows/helm-docs.yml",
      ".github/workflows/helm-release-infisical-core.yml",
      ".github/workflows/helm-release-infisical-nkp.yml",
      ".github/workflows/issue-labeler.yml",
      ".github/workflows/publish-fips-toolchain.yml",
      ".github/workflows/publish-openapi-spec.yml",
      ".github/workflows/publish-storybook-chromatic.yml",
      ".github/workflows/release-freeze-check.yml",
      ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
      ".github/workflows/release_helm_gateway.yaml",
      ".github/workflows/run-backend-bdd-tests.yml",
      ".github/workflows/run-backend-go-tests.yml",
      ".github/workflows/run-backend-tests.yml",
      ".github/workflows/run-blackbox-tests.yml",
      ".github/workflows/run-helm-chart-tests-infisical-gateway.yml",
      ".github/workflows/run-helm-chart-tests-infisical-standalone-postgres.yml",
      ".github/workflows/validate-db-schemas.yml",
      ".github/workflows/validate-pr-description.yml",
      ".github/workflows/validate-pr-title.yml",
      ".github/workflows/validate-upgrade-impact.yml",
      "backend-go/go.mod",
      "backend-go/go.sum",
      "backend/bdd/pyproject.toml",
      "backend/bdd/uv.lock",
      "backend/package-lock.json",
      "backend/package.json",
      "frontend/package-lock.json",
      "frontend/package.json",
      "package-lock.json",
      "package.json",
      "sink/oidc-server/package-lock.json",
      "sink/oidc-server/package.json",
      "upgrade-impact/package-lock.json",
      "upgrade-impact/package.json",
      "wasm/ironrdp-decoder/Cargo.toml"
    ],
    "name": "infisical",
    "osv": {
      "advisories": 443,
      "available": true,
      "confirmed": 396,
      "osv_only": [
        {
          "ecosystem": "PyPI",
          "ids": [
            "GHSA-6q48-6c7w-9gw2",
            "PYSEC-2026-4320"
          ],
          "package": "certifi",
          "score": "9.1",
          "severity": "Critical",
          "version": "2026.7.22"
        },
        {
          "ecosystem": "PyPI",
          "ids": [
            "CVE-2026-45409",
            "GHSA-65pc-fj4g-8rjx",
            "PYSEC-2026-215"
          ],
          "package": "idna",
          "score": "6.9",
          "severity": "Medium",
          "version": "3.9.0"
        },
        {
          "ecosystem": "npm",
          "ids": [
            "CVE-2026-114142",
            "GHSA-h895-cgqg-jf52"
          ],
          "package": "toml",
          "score": "8.8",
          "severity": "High",
          "version": "5.0.0"
        }
      ],
      "warning": null
    },
    "ref": "v0.167.4",
    "ref_kind": "release",
    "release_integrity": {
      "assets": 0,
      "checksums_published": false,
      "methods": [],
      "provenance_published": false,
      "sbom_published": false,
      "signatures_published": false,
      "verdict": "no-assets"
    },
    "released_at": "2026-10-26T20:03:31Z",
    "repository": "Infisical/infisical",
    "sbomlyze_diff": {
      "added": 648,
      "changed": 54,
      "drift": {
        "integrity_drift": 0,
        "metadata_drift": 11,
        "version_drift": 43
      },
      "findings": [
        "Attack surface: +1451 packages (60.5%)",
        "39 version downgrades detected: @emnapi/wasi-threads 1.2.1\u21921.1.0, @jridgewell/resolve-uri 3.1.2\u21923.1.1, @jridgewell/trace-mapping 0.3.31\u21920.3.25, @napi-rs/wasm-runtime 1.2.4\u21921.0.5, @tybys/wasm-util 0.10.4\u21920.10.1 + 34 more",
        "4 version upgrades (3 major, 1 patch) among 2,399 shared packages",
        "Core system packages stable: golang (133), github (101), file (37), pypi (36) unchanged",
        "License shift: copyleft +38, permissive +1227"
      ],
      "html": "sbomlyze-diff.html",
      "removed": 0
    },
    "scanned_at": "2026-11-02T03:07:26+00:00",
    "scorecard": {
      "checks": [
        {
          "name": "CII-Best-Practices",
          "reason": "no effort to earn an OpenSSF best practices badge detected",
          "score": 0
        },
        {
          "name": "Fuzzing",
          "reason": "project is not fuzzed",
          "score": 0
        },
        {
          "name": "Token-Permissions",
          "reason": "detected GitHub workflow tokens with excessive permissions",
          "score": 0
        },
        {
          "name": "Vulnerabilities",
          "reason": "267 existing vulnerabilities detected",
          "score": 0
        },
        {
          "name": "Branch-Protection",
          "reason": "branch protection is not maximal on development and all release branches",
          "score": 5
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "dependency not pinned by hash detected -- score normalized to 5",
          "score": 5
        },
        {
          "name": "Binary-Artifacts",
          "reason": "binaries present in source code",
          "score": 9
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 9
        },
        {
          "name": "CI-Tests",
          "reason": "14 out of 14 merged PRs checked by a CI test -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Code-Review",
          "reason": "all changesets reviewed",
          "score": 10
        },
        {
          "name": "Contributors",
          "reason": "project has 17 contributing companies or organizations",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "Dependency-Update-Tool",
          "reason": "update tool detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow detected",
          "score": 10
        },
        {
          "name": "SAST",
          "reason": "SAST tool detected",
          "score": 10
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file detected",
          "score": 10
        },
        {
          "name": "Signed-Releases",
          "reason": "no releases found",
          "score": -1
        }
      ],
      "date": "2026-11-02",
      "score": 6.9,
      "source": "scorecard-cli",
      "version": "v5.6.0"
    },
    "vulnerabilities": [
      {
        "aliases": [
          "CVE-2026-63374"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-63374",
          "percentile": 0.21495,
          "score": 0.00289
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.14.2"
        ],
        "id": "GHSA-82r6-8w77-94w6",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "anyio",
        "severity": "Critical",
        "summary": "AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing",
        "url": "https://github.com/advisories/GHSA-82r6-8w77-94w6",
        "version": "4.11.0"
      },
      {
        "aliases": [],
        "ecosystem": "pypi",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "2026.10.18"
        ],
        "id": "GHSA-6q48-6c7w-9gw2",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "certifi",
        "severity": "Critical",
        "summary": "certifi bundles emSign root CAs with compromised intermediate CA keys",
        "url": "https://github.com/advisories/GHSA-6q48-6c7w-9gw2",
        "version": "2025.10.5"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.17"
        ],
        "id": "GHSA-cg2g-xh64-v4q7",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Critical",
        "summary": "DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes",
        "url": "https://github.com/advisories/GHSA-cg2g-xh64-v4q7",
        "version": "3.4.16"
      },
      {
        "aliases": [
          "CVE-2026-78663"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78663",
          "percentile": 0.49813,
          "score": 0.00622
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6612",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Critical",
        "summary": "The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configure",
        "url": "https://go.dev/cl/847187",
        "version": "v0.56.0"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "16.4.1"
        ],
        "id": "GHSA-2464-fhr4-w9xw",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Critical",
        "summary": "Next.js: Unauthenticated Remote Code Execution in Image Optimization API when SVG files are used",
        "url": "https://github.com/advisories/GHSA-2464-fhr4-w9xw",
        "version": "16.1.7"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "16.3.3"
        ],
        "id": "GHSA-2xp9-vwfh-vxw4",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Critical",
        "summary": "Next.js: Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used",
        "url": "https://github.com/advisories/GHSA-2xp9-vwfh-vxw4",
        "version": "16.1.7"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "16.4.1"
        ],
        "id": "GHSA-673q-mjm6-r5xr",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Critical",
        "summary": "Next.js: Unauthenticated Remote Code Execution in `use cache` functions returning typed arrays",
        "url": "https://github.com/advisories/GHSA-673q-mjm6-r5xr",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-75604"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-75604",
          "percentile": 0.81742,
          "score": 0.02105
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.3.3"
        ],
        "id": "GHSA-p293-qw3h-jr36",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Critical",
        "summary": "Next.js: Unauthenticated Remote Code Execution on windows-hosted servers",
        "url": "https://github.com/advisories/GHSA-p293-qw3h-jr36",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-90711"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-90711",
          "percentile": 0.177,
          "score": 0.0026
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.0.8"
        ],
        "id": "GHSA-jqcg-44mw-7w3h",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "proxy-addr",
        "severity": "Critical",
        "summary": "proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet",
        "url": "https://github.com/advisories/GHSA-jqcg-44mw-7w3h",
        "version": "2.0.7"
      },
      {
        "aliases": [
          "CVE-2026-114125"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-114125",
          "percentile": 0.32565,
          "score": 0.00385
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.6.2"
        ],
        "id": "GHSA-f2ph-cmg5-wxc8",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "storybook",
        "severity": "Critical",
        "summary": "Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites",
        "url": "https://github.com/advisories/GHSA-f2ph-cmg5-wxc8",
        "version": "10.3.6"
      },
      {
        "aliases": [
          "CVE-2026-59873"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-59873",
          "percentile": 0.47807,
          "score": 0.00582
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.5.19"
        ],
        "id": "GHSA-23hp-3jrh-7fpw",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "tar",
        "severity": "Critical",
        "summary": "node-tar: Decompression/parse DoS via unlimited input",
        "url": "https://github.com/advisories/GHSA-23hp-3jrh-7fpw",
        "version": "7.5.13"
      },
      {
        "aliases": [
          "CVE-2026-104848"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-104848",
          "percentile": 0.42651,
          "score": 0.00497
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.1.1"
        ],
        "id": "GHSA-5gmw-xhrv-c9v3",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "tinypool",
        "severity": "Critical",
        "summary": "Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution",
        "url": "https://github.com/advisories/GHSA-5gmw-xhrv-c9v3",
        "version": "1.1.1"
      },
      {
        "aliases": [
          "CVE-2026-104849"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-104849",
          "percentile": 0.41776,
          "score": 0.00485
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.1.2"
        ],
        "id": "GHSA-85c8-ppgw-ccpr",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "tinypool",
        "severity": "Critical",
        "summary": "Tinypool: Prototype Pollution Gadget to RCE in run() options",
        "url": "https://github.com/advisories/GHSA-85c8-ppgw-ccpr",
        "version": "1.1.1"
      },
      {
        "aliases": [
          "CVE-2026-47429"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-47429",
          "percentile": 0.59014,
          "score": 0.00876
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.2.6"
        ],
        "id": "GHSA-5xrq-8626-4rwp",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "vitest",
        "severity": "Critical",
        "summary": "When Vitest UI server is listening, arbitrary file can be read and executed",
        "url": "https://github.com/advisories/GHSA-5xrq-8626-4rwp",
        "version": "3.2.4"
      },
      {
        "aliases": [
          "CVE-2026-109461"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-109461",
          "percentile": 0.29963,
          "score": 0.00361
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.1.0"
        ],
        "id": "GHSA-xcx6-jx8p-x3h5",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@azure/msal-node",
        "severity": "High",
        "summary": "MSAL Node authorization code flow may disclose parameters to an attacker-controlled endpoint",
        "url": "https://github.com/advisories/GHSA-xcx6-jx8p-x3h5",
        "version": "6.0.1"
      },
      {
        "aliases": [
          "CVE-2026-19481"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-19481",
          "percentile": 0.42376,
          "score": 0.00493
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.2.1"
        ],
        "id": "GHSA-x8mw-p69m-v3mx",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@fastify/busboy",
        "severity": "High",
        "summary": "@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header",
        "url": "https://github.com/advisories/GHSA-x8mw-p69m-v3mx",
        "version": "3.1.1"
      },
      {
        "aliases": [
          "CVE-2026-19484"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-19484",
          "percentile": 0.49449,
          "score": 0.00615
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.2.1"
        ],
        "id": "GHSA-xjh9-v7x6-24jw",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@fastify/busboy",
        "severity": "High",
        "summary": "@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary",
        "url": "https://github.com/advisories/GHSA-xjh9-v7x6-24jw",
        "version": "3.1.1"
      },
      {
        "aliases": [
          "CVE-2026-15074"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-15074",
          "percentile": 0.52058,
          "score": 0.00672
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.1.1"
        ],
        "id": "GHSA-83w8-p2f5-377r",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@fastify/static",
        "severity": "High",
        "summary": "@fastify/static vulnerable to route guard bypass via path traversal",
        "url": "https://github.com/advisories/GHSA-83w8-p2f5-377r",
        "version": "9.1.3"
      },
      {
        "aliases": [
          "CVE-2026-111767"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-111767",
          "percentile": 0.28045,
          "score": 0.00345
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.32.0"
        ],
        "id": "GHSA-22jm-h49p-29qw",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@modelcontextprotocol/sdk",
        "severity": "High",
        "summary": "MCP TypeScript SDK: Experimental tasks were not tied to the session that created them",
        "url": "https://github.com/advisories/GHSA-22jm-h49p-29qw",
        "version": "1.29.0"
      },
      {
        "aliases": [
          "CVE-2026-111768"
        ],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "1.32.0"
        ],
        "id": "GHSA-46jr-4wx8-v453",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@modelcontextprotocol/sdk",
        "severity": "High",
        "summary": "MCP TypeScript SDK: One HTTP request within the default size limit could exhaust server memory during validation",
        "url": "https://github.com/advisories/GHSA-46jr-4wx8-v453",
        "version": "1.29.0"
      },
      {
        "aliases": [
          "CVE-2026-104850"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-104850",
          "percentile": 0.13291,
          "score": 0.00226
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.31.0"
        ],
        "id": "GHSA-6qxp-vccf-f47h",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@modelcontextprotocol/sdk",
        "severity": "High",
        "summary": "MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server",
        "url": "https://github.com/advisories/GHSA-6qxp-vccf-f47h",
        "version": "1.29.0"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "1.30.1"
        ],
        "id": "GHSA-f897-62hf-6gxq",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@modelcontextprotocol/sdk",
        "severity": "High",
        "summary": "MCP TypeScript SDK: HTTP server transports and handlers did not limit request body size or JSON-RPC batch length",
        "url": "https://github.com/advisories/GHSA-f897-62hf-6gxq",
        "version": "1.29.0"
      },
      {
        "aliases": [
          "CVE-2026-44494"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44494",
          "percentile": 0.6447,
          "score": 0.01057
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.0"
        ],
        "id": "GHSA-35jp-ww65-95wh",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`",
        "url": "https://github.com/advisories/GHSA-35jp-ww65-95wh",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-44495"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44495",
          "percentile": 0.58327,
          "score": 0.00854
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.2"
        ],
        "id": "GHSA-3g43-6gmg-66jw",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge",
        "url": "https://github.com/advisories/GHSA-3g43-6gmg-66jw",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101898"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101898",
          "percentile": 0.45765,
          "score": 0.00545
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-3pq3-5fj3-cg6v",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls",
        "url": "https://github.com/advisories/GHSA-3pq3-5fj3-cg6v",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101898"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101898",
          "percentile": 0.45765,
          "score": 0.00545
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-3pq3-5fj3-cg6v",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls",
        "url": "https://github.com/advisories/GHSA-3pq3-5fj3-cg6v",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101898"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101898",
          "percentile": 0.45765,
          "score": 0.00545
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-3pq3-5fj3-cg6v",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls",
        "url": "https://github.com/advisories/GHSA-3pq3-5fj3-cg6v",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-101901"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101901",
          "percentile": 0.45207,
          "score": 0.00536
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-542g-h47m-68v8",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization",
        "url": "https://github.com/advisories/GHSA-542g-h47m-68v8",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101901"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101901",
          "percentile": 0.45207,
          "score": 0.00536
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-542g-h47m-68v8",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization",
        "url": "https://github.com/advisories/GHSA-542g-h47m-68v8",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101901"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101901",
          "percentile": 0.45207,
          "score": 0.00536
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-542g-h47m-68v8",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization",
        "url": "https://github.com/advisories/GHSA-542g-h47m-68v8",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-42035"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42035",
          "percentile": 0.3452,
          "score": 0.00403
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-6chq-wfr3-2hj9",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Header Injection via Prototype Pollution",
        "url": "https://github.com/advisories/GHSA-6chq-wfr3-2hj9",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-44488"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44488",
          "percentile": 0.51966,
          "score": 0.00669
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.0"
        ],
        "id": "GHSA-777c-7fjr-54vf",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Allocation of Resources Without Limits or Throttling in Axios",
        "url": "https://github.com/advisories/GHSA-777c-7fjr-54vf",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101903"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101903",
          "percentile": 0.37877,
          "score": 0.00436
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-c29m-xwm3-cm6r",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)",
        "url": "https://github.com/advisories/GHSA-c29m-xwm3-cm6r",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101903"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101903",
          "percentile": 0.37877,
          "score": 0.00436
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-c29m-xwm3-cm6r",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)",
        "url": "https://github.com/advisories/GHSA-c29m-xwm3-cm6r",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-67320"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67320",
          "percentile": 0.44365,
          "score": 0.00523
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-gcfj-64vw-6mp9",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios Node HTTP adapter can use an inherited proxy after interceptor config cloning",
        "url": "https://github.com/advisories/GHSA-gcfj-64vw-6mp9",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-44496"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44496",
          "percentile": 0.92685,
          "score": 0.05405
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.0"
        ],
        "id": "GHSA-hfxv-24rg-xrqf",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection",
        "url": "https://github.com/advisories/GHSA-hfxv-24rg-xrqf",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-44486"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44486",
          "percentile": 0.46141,
          "score": 0.00552
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.0"
        ],
        "id": "GHSA-j5f8-grm9-p9fc",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection",
        "url": "https://github.com/advisories/GHSA-j5f8-grm9-p9fc",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101905"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101905",
          "percentile": 0.36122,
          "score": 0.00418
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-m8m8-qj5v-23w3",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection",
        "url": "https://github.com/advisories/GHSA-m8m8-qj5v-23w3",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101905"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101905",
          "percentile": 0.36122,
          "score": 0.00418
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-m8m8-qj5v-23w3",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection",
        "url": "https://github.com/advisories/GHSA-m8m8-qj5v-23w3",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-101906"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101906",
          "percentile": 0.39677,
          "score": 0.00457
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-mghh-pgcx-3jjj",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: ReDoS (O(N\u00b2)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location",
        "url": "https://github.com/advisories/GHSA-mghh-pgcx-3jjj",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101906"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101906",
          "percentile": 0.39677,
          "score": 0.00457
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-mghh-pgcx-3jjj",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: ReDoS (O(N\u00b2)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location",
        "url": "https://github.com/advisories/GHSA-mghh-pgcx-3jjj",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101906"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101906",
          "percentile": 0.39677,
          "score": 0.00457
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-mghh-pgcx-3jjj",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: ReDoS (O(N\u00b2)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location",
        "url": "https://github.com/advisories/GHSA-mghh-pgcx-3jjj",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-44487"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44487",
          "percentile": 0.5275,
          "score": 0.00689
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.0"
        ],
        "id": "GHSA-p92q-9vqr-4j8v",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter",
        "url": "https://github.com/advisories/GHSA-p92q-9vqr-4j8v",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-42033"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42033",
          "percentile": 0.58738,
          "score": 0.00867
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-pf86-5x62-jrwf",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Prototype Pollution Gadgets - Response Tampering, Data Exfiltration, and Request Hijacking",
        "url": "https://github.com/advisories/GHSA-pf86-5x62-jrwf",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-44492"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44492",
          "percentile": 0.96185,
          "score": 0.1228
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.0"
        ],
        "id": "GHSA-pjwm-pj3p-43mv",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "axios's shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)",
        "url": "https://github.com/advisories/GHSA-pjwm-pj3p-43mv",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-42043"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42043",
          "percentile": 0.53585,
          "score": 0.00711
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-pmwg-cvhr-8vh7",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Incomplete Fix for CVE-2025-62718 \u2014 NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0",
        "url": "https://github.com/advisories/GHSA-pmwg-cvhr-8vh7",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-42264"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42264",
          "percentile": 0.56506,
          "score": 0.00797
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.2"
        ],
        "id": "GHSA-q8qp-cvcw-x6jj",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios has prototype pollution read-side gadgets in HTTP adapter that allow credential injection and request hijacking",
        "url": "https://github.com/advisories/GHSA-q8qp-cvcw-x6jj",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101907"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101907",
          "percentile": 0.40789,
          "score": 0.00471
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-r4gj-5m52-g5wh",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF",
        "url": "https://github.com/advisories/GHSA-r4gj-5m52-g5wh",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-101909"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101909",
          "percentile": 0.42646,
          "score": 0.00497
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-x97p-jq2g-jp4f",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Prototype Pollution Gadget in axios toFormData Options",
        "url": "https://github.com/advisories/GHSA-x97p-jq2g-jp4f",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101909"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101909",
          "percentile": 0.42646,
          "score": 0.00497
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-x97p-jq2g-jp4f",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "High",
        "summary": "Axios: Prototype Pollution Gadget in axios toFormData Options",
        "url": "https://github.com/advisories/GHSA-x97p-jq2g-jp4f",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-111181"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-111181",
          "percentile": 0.32919,
          "score": 0.00388
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.9"
        ],
        "id": "GHSA-27r3-jxmh-p828",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "body-parser",
        "severity": "High",
        "summary": "body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body",
        "url": "https://github.com/advisories/GHSA-27r3-jxmh-p828",
        "version": "1.20.3"
      },
      {
        "aliases": [
          "CVE-2026-111181"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-111181",
          "percentile": 0.32919,
          "score": 0.00388
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.9"
        ],
        "id": "GHSA-27r3-jxmh-p828",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "body-parser",
        "severity": "High",
        "summary": "body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body",
        "url": "https://github.com/advisories/GHSA-27r3-jxmh-p828",
        "version": "1.20.6"
      },
      {
        "aliases": [
          "CVE-2026-111181"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-111181",
          "percentile": 0.32919,
          "score": 0.00388
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.4.0"
        ],
        "id": "GHSA-27r3-jxmh-p828",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "body-parser",
        "severity": "High",
        "summary": "body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body",
        "url": "https://github.com/advisories/GHSA-27r3-jxmh-p828",
        "version": "2.2.2"
      },
      {
        "aliases": [
          "CVE-2026-13149"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-13149",
          "percentile": 0.3024,
          "score": 0.00364
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.1.16"
        ],
        "id": "GHSA-3jxr-9vmj-r5cp",
        "kev": null,
        "location": "package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups",
        "url": "https://github.com/advisories/GHSA-3jxr-9vmj-r5cp",
        "version": "1.1.14"
      },
      {
        "aliases": [
          "CVE-2026-13149"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-13149",
          "percentile": 0.3024,
          "score": 0.00364
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.1.2"
        ],
        "id": "GHSA-3jxr-9vmj-r5cp",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups",
        "url": "https://github.com/advisories/GHSA-3jxr-9vmj-r5cp",
        "version": "2.1.0"
      },
      {
        "aliases": [
          "CVE-2026-102276"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102276",
          "percentile": 0.39514,
          "score": 0.00455
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.1.19"
        ],
        "id": "GHSA-6j4f-fj2g-mc7p",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion",
        "url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p",
        "version": "1.1.14"
      },
      {
        "aliases": [
          "CVE-2026-102276"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102276",
          "percentile": 0.39514,
          "score": 0.00455
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.1.5"
        ],
        "id": "GHSA-6j4f-fj2g-mc7p",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion",
        "url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p",
        "version": "2.1.0"
      },
      {
        "aliases": [
          "CVE-2026-102276"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102276",
          "percentile": 0.39514,
          "score": 0.00455
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.0.10"
        ],
        "id": "GHSA-6j4f-fj2g-mc7p",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion",
        "url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p",
        "version": "5.0.9"
      },
      {
        "aliases": [
          "CVE-2026-14257"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-14257",
          "percentile": 0.50816,
          "score": 0.00643
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.1.17"
        ],
        "id": "GHSA-mh99-v99m-4gvg",
        "kev": null,
        "location": "package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash",
        "url": "https://github.com/advisories/GHSA-mh99-v99m-4gvg",
        "version": "1.1.14"
      },
      {
        "aliases": [
          "CVE-2026-14257"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-14257",
          "percentile": 0.50816,
          "score": 0.00643
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.1.3"
        ],
        "id": "GHSA-mh99-v99m-4gvg",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash",
        "url": "https://github.com/advisories/GHSA-mh99-v99m-4gvg",
        "version": "2.1.0"
      },
      {
        "aliases": [
          "CVE-2026-102278"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102278",
          "percentile": 0.42209,
          "score": 0.00491
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.1.20"
        ],
        "id": "GHSA-qhr7-859c-m2p7",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion",
        "url": "https://github.com/advisories/GHSA-qhr7-859c-m2p7",
        "version": "1.1.14"
      },
      {
        "aliases": [
          "CVE-2026-102278"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102278",
          "percentile": 0.42209,
          "score": 0.00491
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.1.6"
        ],
        "id": "GHSA-qhr7-859c-m2p7",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion",
        "url": "https://github.com/advisories/GHSA-qhr7-859c-m2p7",
        "version": "2.1.0"
      },
      {
        "aliases": [
          "CVE-2026-102278"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102278",
          "percentile": 0.42209,
          "score": 0.00491
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.0.11"
        ],
        "id": "GHSA-qhr7-859c-m2p7",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion",
        "url": "https://github.com/advisories/GHSA-qhr7-859c-m2p7",
        "version": "5.0.9"
      },
      {
        "aliases": [
          "CVE-2026-69152"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-69152",
          "percentile": 0.51004,
          "score": 0.00647
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.1.18"
        ],
        "id": "GHSA-rgw5-rvv9-x895",
        "kev": null,
        "location": "package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
        "url": "https://github.com/advisories/GHSA-rgw5-rvv9-x895",
        "version": "1.1.14"
      },
      {
        "aliases": [
          "CVE-2026-69152"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-69152",
          "percentile": 0.51004,
          "score": 0.00647
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.1.4"
        ],
        "id": "GHSA-rgw5-rvv9-x895",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "High",
        "summary": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation",
        "url": "https://github.com/advisories/GHSA-rgw5-rvv9-x895",
        "version": "2.1.0"
      },
      {
        "aliases": [
          "CVE-2026-73088"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-73088",
          "percentile": 0.51498,
          "score": 0.00658
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.28.7"
        ],
        "id": "GHSA-73wf-gq98-2v4g",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "browserslist",
        "severity": "High",
        "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)",
        "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g",
        "version": "4.26.3"
      },
      {
        "aliases": [
          "CVE-2026-73089"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-73089",
          "percentile": 0.51386,
          "score": 0.00655
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.28.7"
        ],
        "id": "GHSA-c83g-rgw3-j3cx",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "browserslist",
        "severity": "High",
        "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM",
        "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx",
        "version": "4.26.3"
      },
      {
        "aliases": [],
        "ecosystem": "pypi",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "48.0.1"
        ],
        "id": "GHSA-537c-gmf6-5ccf",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "cryptography",
        "severity": "High",
        "summary": "Vulnerable OpenSSL included in cryptography wheels",
        "url": "https://github.com/advisories/GHSA-537c-gmf6-5ccf",
        "version": "46.0.7"
      },
      {
        "aliases": [
          "CVE-2026-69247"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-69247",
          "percentile": 0.19874,
          "score": 0.00274
        },
        "fix_state": "fixed",
        "fixed_in": [
          "50.0.0"
        ],
        "id": "GHSA-g6cj-pr64-35w5",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "cryptography",
        "severity": "High",
        "summary": "cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing",
        "url": "https://github.com/advisories/GHSA-g6cj-pr64-35w5",
        "version": "46.0.7"
      },
      {
        "aliases": [
          "CVE-2026-69249"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-69249",
          "percentile": 0.17998,
          "score": 0.00262
        },
        "fix_state": "fixed",
        "fixed_in": [
          "49.0.0"
        ],
        "id": "GHSA-jwv3-5hgf-82ww",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "cryptography",
        "severity": "High",
        "summary": "python-cryptography: Duplicate self-signed intermediates can cause exponential path-building",
        "url": "https://github.com/advisories/GHSA-jwv3-5hgf-82ww",
        "version": "46.0.7"
      },
      {
        "aliases": [
          "CVE-2026-116693"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-116693",
          "percentile": 0.39039,
          "score": 0.00449
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.131.1"
        ],
        "id": "GHSA-x94g-w73q-hpcw",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "dd-trace",
        "severity": "High",
        "summary": "dd-trace: ReDOS in URL query string obfuscation",
        "url": "https://github.com/advisories/GHSA-x94g-w73q-hpcw",
        "version": "5.129.0"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.17"
        ],
        "id": "GHSA-mrv2-3pqr-j5jr",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "High",
        "summary": "DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)",
        "url": "https://github.com/advisories/GHSA-mrv2-3pqr-j5jr",
        "version": "3.3.3"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.17"
        ],
        "id": "GHSA-mrv2-3pqr-j5jr",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "High",
        "summary": "DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)",
        "url": "https://github.com/advisories/GHSA-mrv2-3pqr-j5jr",
        "version": "3.4.16"
      },
      {
        "aliases": [
          "CVE-2026-102599"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102599",
          "percentile": 0.47509,
          "score": 0.00576
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.6.10"
        ],
        "id": "GHSA-2gc4-cqfq-p2gv",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "engine.io",
        "severity": "High",
        "summary": "Socket.IO: Engine.IO Protocol Revision Mismatch DoS",
        "url": "https://github.com/advisories/GHSA-2gc4-cqfq-p2gv",
        "version": "6.6.9"
      },
      {
        "aliases": [
          "CVE-2026-13676"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-13676",
          "percentile": 0.52904,
          "score": 0.00692
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.3"
        ],
        "id": "GHSA-4c8g-83qw-93j6",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "High",
        "summary": "fast-uri vulnerable to host confusion via failed IDN canonicalization",
        "url": "https://github.com/advisories/GHSA-4c8g-83qw-93j6",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-18446"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-18446",
          "percentile": 0.32004,
          "score": 0.0038
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.5"
        ],
        "id": "GHSA-7p8r-x3mc-p8w7",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "High",
        "summary": "fast-uri vulnerable to host confusion via backslash authority introducer",
        "url": "https://github.com/advisories/GHSA-7p8r-x3mc-p8w7",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-75975"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-75975",
          "percentile": 0.12576,
          "score": 0.0022
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.6"
        ],
        "id": "GHSA-f65p-4m7j-42xc",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "High",
        "summary": "fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization",
        "url": "https://github.com/advisories/GHSA-f65p-4m7j-42xc",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-76172"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-76172",
          "percentile": 0.14134,
          "score": 0.00232
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.6"
        ],
        "id": "GHSA-jqff-g426-hqxp",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "High",
        "summary": "fast-uri vulnerable to host confusion via percent-encoded scheme normalization",
        "url": "https://github.com/advisories/GHSA-jqff-g426-hqxp",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-6321"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-6321",
          "percentile": 0.50395,
          "score": 0.00634
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.1"
        ],
        "id": "GHSA-q3j6-qgpj-74h6",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "High",
        "summary": "fast-uri vulnerable to path traversal via percent-encoded dot segments",
        "url": "https://github.com/advisories/GHSA-q3j6-qgpj-74h6",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-84292"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84292",
          "percentile": 0.15041,
          "score": 0.00239
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.7"
        ],
        "id": "GHSA-qw65-cvwx-89v3",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "High",
        "summary": "fast-uri vulnerable to authority injection via an unvalidated port in serialize",
        "url": "https://github.com/advisories/GHSA-qw65-cvwx-89v3",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-16221"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-16221",
          "percentile": 0.37862,
          "score": 0.00436
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.4"
        ],
        "id": "GHSA-v2hh-gcrm-f6hx",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "High",
        "summary": "fast-uri vulnerable to host confusion via literal backslash authority delimiter",
        "url": "https://github.com/advisories/GHSA-v2hh-gcrm-f6hx",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-6322"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-6322",
          "percentile": 0.43672,
          "score": 0.00512
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.2"
        ],
        "id": "GHSA-v39h-62p7-jpjc",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "High",
        "summary": "fast-uri vulnerable to host confusion via percent-encoded authority delimiters",
        "url": "https://github.com/advisories/GHSA-v39h-62p7-jpjc",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-84504"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84504",
          "percentile": 0.371,
          "score": 0.00428
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.12.2"
        ],
        "id": "GHSA-667r-xxjv-c9mm",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fastify",
        "severity": "High",
        "summary": "fastify vulnerable to request body replacement via an async validation result collision",
        "url": "https://github.com/advisories/GHSA-667r-xxjv-c9mm",
        "version": "5.8.5"
      },
      {
        "aliases": [
          "CVE-2026-84428"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84428",
          "percentile": 0.44487,
          "score": 0.00524
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.12.2"
        ],
        "id": "GHSA-9q9j-q6p8-xq58",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fastify",
        "severity": "High",
        "summary": "fastify vulnerable to header validation bypass via incomplete schema case normalization",
        "url": "https://github.com/advisories/GHSA-9q9j-q6p8-xq58",
        "version": "5.8.5"
      },
      {
        "aliases": [
          "CVE-2026-84469"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84469",
          "percentile": 0.42289,
          "score": 0.00492
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.12.2"
        ],
        "id": "GHSA-hwr6-493r-vm6h",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fastify",
        "severity": "High",
        "summary": "fastify vulnerable to request validation bypass via skipped boolean false schemas",
        "url": "https://github.com/advisories/GHSA-hwr6-493r-vm6h",
        "version": "5.8.5"
      },
      {
        "aliases": [
          "CVE-2026-76169"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-76169",
          "percentile": 0.44851,
          "score": 0.0053
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.12.2"
        ],
        "id": "GHSA-p68q-wchp-6fh7",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fastify",
        "severity": "High",
        "summary": "fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers",
        "url": "https://github.com/advisories/GHSA-p68q-wchp-6fh7",
        "version": "5.8.5"
      },
      {
        "aliases": [
          "CVE-2026-111755"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-111755",
          "percentile": 0.40761,
          "score": 0.00471
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.1"
        ],
        "id": "GHSA-8r9p-f939-6h3c",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "follow-redirects",
        "severity": "High",
        "summary": "follow-redirects sensitiveHeaders regex escaping can expose credential headers",
        "url": "https://github.com/advisories/GHSA-8r9p-f939-6h3c",
        "version": "1.16.0"
      },
      {
        "aliases": [
          "CVE-2026-116689"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-116689",
          "percentile": 0.18802,
          "score": 0.00266
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.2"
        ],
        "id": "GHSA-mrwp-f3q8-3g9p",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "follow-redirects",
        "severity": "High",
        "summary": "follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects",
        "url": "https://github.com/advisories/GHSA-mrwp-f3q8-3g9p",
        "version": "1.16.0"
      },
      {
        "aliases": [
          "CVE-2026-111756"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-111756",
          "percentile": 0.40762,
          "score": 0.00471
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.1"
        ],
        "id": "GHSA-q3jh-wrc6-jgq8",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "follow-redirects",
        "severity": "High",
        "summary": "follow-redirects array-form headers bypass cross-origin credential stripping",
        "url": "https://github.com/advisories/GHSA-q3jh-wrc6-jgq8",
        "version": "1.16.0"
      },
      {
        "aliases": [
          "CVE-2026-12143"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-12143",
          "percentile": 0.51965,
          "score": 0.00669
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.0.6"
        ],
        "id": "GHSA-hmw2-7cc7-3qxx",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "form-data",
        "severity": "High",
        "summary": "form-data: CRLF injection in form-data via unescaped multipart field names and filenames",
        "url": "https://github.com/advisories/GHSA-hmw2-7cc7-3qxx",
        "version": "4.0.5"
      },
      {
        "aliases": [
          "CVE-2026-42306"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-42306",
          "percentile": 0.01018,
          "score": 0.00104
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-rg2x-37c3-w2rh",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Docker: Race condition in docker cp allows bind mount redirection to host path",
        "url": "https://github.com/advisories/GHSA-rg2x-37c3-w2rh",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-41567"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-41567",
          "percentile": 0.04603,
          "score": 0.00155
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-x86f-5xw2-fm2r",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Docker: `PUT /containers/{id}/archive` executes container binary on the host",
        "url": "https://github.com/advisories/GHSA-x86f-5xw2-fm2r",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-34040",
          "GHSA-x744-4wpc-v9h2"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-34040",
          "percentile": 0.95361,
          "score": 0.0927
        },
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-4887",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "High",
        "summary": "Moby has AuthZ plugin bypass when provided oversized request bodies in github.com/docker/docker",
        "url": "https://github.com/moby/moby/security/advisories/GHSA-x744-4wpc-v9h2",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-63209"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-63209",
          "percentile": 0.47329,
          "score": 0.00572
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.7"
        ],
        "id": "GHSA-259r-337f-4rfw",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/klauspost/compress",
        "severity": "High",
        "summary": "Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compress",
        "url": "https://github.com/advisories/GHSA-259r-337f-4rfw",
        "version": "v1.18.3"
      },
      {
        "aliases": [
          "CVE-2026-17106"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-17106",
          "percentile": 0.38288,
          "score": 0.0044
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.3.0"
        ],
        "id": "GHSA-hfg8-hc9c-6c3h",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/moby/go-archive",
        "severity": "High",
        "summary": "moby/go-archive: Crafted tar archive can write outside the extraction directory",
        "url": "https://github.com/advisories/GHSA-hfg8-hc9c-6c3h",
        "version": "v0.2.0"
      },
      {
        "aliases": [
          "CVE-2026-56854"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56854",
          "percentile": 0.38024,
          "score": 0.00437
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.55.0"
        ],
        "id": "GO-2026-6303",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "High",
        "summary": "The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. Permissions returned by the PasswordCallback, KeyboardInteractiveCallback, NoClientAuthC",
        "url": "https://go.dev/issue/80213",
        "version": "v0.53.0"
      },
      {
        "aliases": [
          "CVE-2026-78662"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78662",
          "percentile": 0.37388,
          "score": 0.00431
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.56.0"
        ],
        "id": "GO-2026-6354",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "High",
        "summary": "Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time, handlePacket",
        "url": "https://go.dev/issue/81316",
        "version": "v0.53.0"
      },
      {
        "aliases": [
          "CVE-2026-56855"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56855",
          "percentile": 0.42867,
          "score": 0.005
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.56.0"
        ],
        "id": "GO-2026-6355",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "High",
        "summary": "Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection d",
        "url": "https://go.dev/issue/81317",
        "version": "v0.53.0"
      },
      {
        "aliases": [
          "CVE-2026-56865"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56865",
          "percentile": 0.02533,
          "score": 0.00129
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.40.0"
        ],
        "id": "GO-2026-6179",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/mod",
        "severity": "High",
        "summary": "A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. This attack allows for a malicious GOPROXY to serve malicious module content that canno",
        "url": "https://go.dev/issue/80744",
        "version": "v0.37.0"
      },
      {
        "aliases": [
          "CVE-2026-56864"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56864",
          "percentile": 0.22506,
          "score": 0.00298
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.40.0"
        ],
        "id": "GO-2026-6180",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/mod",
        "severity": "High",
        "summary": "A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. This attack allows for a coordinating GOPROXY and GOSUMDB to serve a client malicious module content that cannot be detected by evaluating the transparency log. In order to determine if you",
        "url": "https://go.dev/issue/80745",
        "version": "v0.37.0"
      },
      {
        "aliases": [
          "CVE-2026-78659"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78659",
          "percentile": 0.50082,
          "score": 0.00627
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6603",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"",
        "url": "https://go.dev/cl/847185",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-78660"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78660",
          "percentile": 0.36838,
          "score": 0.00425
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6610",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a re",
        "url": "https://go.dev/cl/835145",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-78669"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78669",
          "percentile": 0.49426,
          "score": 0.00614
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6611",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.",
        "url": "https://go.dev/cl/847186",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-97032"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-97032",
          "percentile": 0.42154,
          "score": 0.0049
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.60.0"
        ],
        "id": "GO-2026-6617",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "High",
        "summary": "HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the ot",
        "url": "https://go.dev/cl/847188",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-56851"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-56851",
          "percentile": 0.40313,
          "score": 0.00466
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.41.0"
        ],
        "id": "GO-2026-6629",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/text",
        "severity": "High",
        "summary": "The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.",
        "url": "https://go.dev/cl/793360",
        "version": "v0.39.0"
      },
      {
        "aliases": [
          "CVE-2026-84445"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-84445",
          "percentile": 0.5072,
          "score": 0.00641
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.83.2"
        ],
        "id": "GHSA-2v4p-qf9q-27wj",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "google.golang.org/grpc",
        "severity": "High",
        "summary": "gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers",
        "url": "https://github.com/advisories/GHSA-2v4p-qf9q-27wj",
        "version": "v1.83.1"
      },
      {
        "aliases": [
          "CVE-2026-54290"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-54290",
          "percentile": 0.25976,
          "score": 0.00328
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.25"
        ],
        "id": "GHSA-88fw-hqm2-52qc",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "High",
        "summary": "hono: CORS Middleware reflects any Origin with credentials when `origin` defaults to the wildcard",
        "url": "https://github.com/advisories/GHSA-88fw-hqm2-52qc",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-69192"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-69192",
          "percentile": 0.40267,
          "score": 0.00465
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.3.1"
        ],
        "id": "GHSA-mwp4-54f8-5fhr",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "ip-address",
        "severity": "High",
        "summary": "ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass",
        "url": "https://github.com/advisories/GHSA-mwp4-54f8-5fhr",
        "version": "10.1.0"
      },
      {
        "aliases": [
          "CVE-2026-84375"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84375",
          "percentile": 0.45503,
          "score": 0.00541
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.3.2"
        ],
        "id": "GHSA-2883-xcg3-v3hh",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "js-yaml",
        "severity": "High",
        "summary": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources",
        "url": "https://github.com/advisories/GHSA-2883-xcg3-v3hh",
        "version": "4.1.1"
      },
      {
        "aliases": [
          "CVE-2026-59869"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-59869",
          "percentile": 0.47992,
          "score": 0.00585
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.3.0"
        ],
        "id": "GHSA-52cp-r559-cp3m",
        "kev": null,
        "location": "package-lock.json",
        "osv_confirmed": true,
        "package": "js-yaml",
        "severity": "High",
        "summary": "js-yaml: YAML merge-key chains can force quadratic CPU consumption",
        "url": "https://github.com/advisories/GHSA-52cp-r559-cp3m",
        "version": "4.1.1"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.3.1"
        ],
        "id": "GHSA-5p4m-2wfm-xmqj",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "js-yaml",
        "severity": "High",
        "summary": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) \u2014 CVE-2026-59870 fix not backported",
        "url": "https://github.com/advisories/GHSA-5p4m-2wfm-xmqj",
        "version": "4.1.1"
      },
      {
        "aliases": [
          "CVE-2026-67214"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67214",
          "percentile": 0.26147,
          "score": 0.0033
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.3.16"
        ],
        "id": "GHSA-28wg-ghj8-5hjv",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "nanoid",
        "severity": "High",
        "summary": "nanoid: non-secure generators can loop indefinitely with negative size",
        "url": "https://github.com/advisories/GHSA-28wg-ghj8-5hjv",
        "version": "3.3.11"
      },
      {
        "aliases": [
          "CVE-2026-67214"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67214",
          "percentile": 0.26147,
          "score": 0.0033
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.1.16"
        ],
        "id": "GHSA-28wg-ghj8-5hjv",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "nanoid",
        "severity": "High",
        "summary": "nanoid: non-secure generators can loop indefinitely with negative size",
        "url": "https://github.com/advisories/GHSA-28wg-ghj8-5hjv",
        "version": "5.1.6"
      },
      {
        "aliases": [
          "CVE-2026-67213"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67213",
          "percentile": 0.26279,
          "score": 0.00331
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.3.18"
        ],
        "id": "GHSA-2v37-7h3g-55p8",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "nanoid",
        "severity": "High",
        "summary": "nanoid: custom generators can loop indefinitely when size is zero",
        "url": "https://github.com/advisories/GHSA-2v37-7h3g-55p8",
        "version": "3.3.11"
      },
      {
        "aliases": [
          "CVE-2026-73086"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-73086",
          "percentile": 0.2234,
          "score": 0.00296
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.3.12"
        ],
        "id": "GHSA-xwg4-73v4-xw9w",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "nanoid",
        "severity": "High",
        "summary": "nanoid: Integer Overflow or Wraparound",
        "url": "https://github.com/advisories/GHSA-xwg4-73v4-xw9w",
        "version": "3.3.11"
      },
      {
        "aliases": [
          "CVE-2026-73086"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-73086",
          "percentile": 0.2234,
          "score": 0.00296
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.1.11"
        ],
        "id": "GHSA-xwg4-73v4-xw9w",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "nanoid",
        "severity": "High",
        "summary": "nanoid: Integer Overflow or Wraparound",
        "url": "https://github.com/advisories/GHSA-xwg4-73v4-xw9w",
        "version": "5.1.6"
      },
      {
        "aliases": [
          "CVE-2026-44575"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44575",
          "percentile": 0.75717,
          "score": 0.01594
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-267c-6grr-h53f",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes",
        "url": "https://github.com/advisories/GHSA-267c-6grr-h53f",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-45109"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-45109",
          "percentile": 0.488,
          "score": 0.00602
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.6"
        ],
        "id": "GHSA-26hh-7cqf-hhc6",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js has a Middleware / Proxy bypass in App Router applications via segment-prefetch routes - Incomplete Fix Follow-Up",
        "url": "https://github.com/advisories/GHSA-26hh-7cqf-hhc6",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44573"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44573",
          "percentile": 0.56484,
          "score": 0.00796
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-36qx-fr4f-26g5",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js has a Middleware / Proxy bypass in Pages Router applications using i18n",
        "url": "https://github.com/advisories/GHSA-36qx-fr4f-26g5",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44574"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44574",
          "percentile": 0.50508,
          "score": 0.00636
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-492v-c6pp-mqqv",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js has a Middleware / Proxy bypass through dynamic route parameter injection",
        "url": "https://github.com/advisories/GHSA-492v-c6pp-mqqv",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-64642"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-64642",
          "percentile": 0.50441,
          "score": 0.00635
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.11"
        ],
        "id": "GHSA-6gpp-xcg3-4w24",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale",
        "url": "https://github.com/advisories/GHSA-6gpp-xcg3-4w24",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-64649"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-64649",
          "percentile": 0.39802,
          "score": 0.00459
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.11"
        ],
        "id": "GHSA-89xv-2m56-2m9x",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js: Server-Side Request Forgery in Server Actions on custom servers",
        "url": "https://github.com/advisories/GHSA-89xv-2m56-2m9x",
        "version": "16.1.7"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-8h8q-6873-q5fj",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js Vulnerable to Denial of Service with Server Components",
        "url": "https://github.com/advisories/GHSA-8h8q-6873-q5fj",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44578"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44578",
          "percentile": 0.98454,
          "score": 0.35539
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-c4j6-fc7j-m34r",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades",
        "url": "https://github.com/advisories/GHSA-c4j6-fc7j-m34r",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-94483"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-94483",
          "percentile": 0.26157,
          "score": 0.0033
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.3.8"
        ],
        "id": "GHSA-cjq9-62q9-8jv4",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js has Server-Side Request Forgery in Image Optimization",
        "url": "https://github.com/advisories/GHSA-cjq9-62q9-8jv4",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-64641"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-64641",
          "percentile": 0.5839,
          "score": 0.00856
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.11"
        ],
        "id": "GHSA-m99w-x7hq-7vfj",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js: Denial of Service in App Router using Server Actions",
        "url": "https://github.com/advisories/GHSA-m99w-x7hq-7vfj",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44579"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44579",
          "percentile": 0.54822,
          "score": 0.00746
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-mg66-mrh9-m8jx",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js vulnerable to Denial of Service via connection exhaustion in applications using Cache Components",
        "url": "https://github.com/advisories/GHSA-mg66-mrh9-m8jx",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-94482"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-94482",
          "percentile": 0.32732,
          "score": 0.00386
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.4.1"
        ],
        "id": "GHSA-p3m5-59mp-jv5r",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js: Denial of Service in App Router using Server Actions",
        "url": "https://github.com/advisories/GHSA-p3m5-59mp-jv5r",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-64645"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-64645",
          "percentile": 0.35671,
          "score": 0.00414
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.11"
        ],
        "id": "GHSA-p9j2-gv94-2wf4",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname",
        "url": "https://github.com/advisories/GHSA-p9j2-gv94-2wf4",
        "version": "16.1.7"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.3"
        ],
        "id": "GHSA-q4gf-8mx6-v5v3",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "High",
        "summary": "Next.js has a Denial of Service with Server Components",
        "url": "https://github.com/advisories/GHSA-q4gf-8mx6-v5v3",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-119190"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-119190",
          "percentile": 0.15892,
          "score": 0.00246
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-5x38-2vff-x55p",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "High",
        "summary": "Forge: X.509 basicConstraints bypass in verifyCertificateChain() via deprecated extension OIDs 2.5.29.10 and 2.5.29.13",
        "url": "https://github.com/advisories/GHSA-5x38-2vff-x55p",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-118779"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118779",
          "percentile": 0.46398,
          "score": 0.00556
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-7wch-p9px-956x",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "High",
        "summary": "Forge: Regular expression denial of service in PEM decoding (pem.decode)",
        "url": "https://github.com/advisories/GHSA-7wch-p9px-956x",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-85393"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-85393",
          "percentile": 0.16151,
          "score": 0.00248
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-86w9-cpqp-85rv",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "High",
        "summary": "node-forge RSA PKCS#1 v1.5 signature verification accepts extra nested DigestAlgorithm elements",
        "url": "https://github.com/advisories/GHSA-86w9-cpqp-85rv",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-119188"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-119188",
          "percentile": 0.35414,
          "score": 0.00411
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-8hrf-8g6f-7xwp",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "High",
        "summary": "Forge: Denial of service in TLS record processing via a record interleaved with a fragmented handshake message",
        "url": "https://github.com/advisories/GHSA-8hrf-8g6f-7xwp",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-119187"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-119187",
          "percentile": 0.35799,
          "score": 0.00415
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-hqq3-7jhf-c5jx",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "High",
        "summary": "Forge: Denial of service in TLS record processing via call stack exhaustion",
        "url": "https://github.com/advisories/GHSA-hqq3-7jhf-c5jx",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-118782"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118782",
          "percentile": 0.02195,
          "score": 0.00125
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-jc66-7q78-782g",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "High",
        "summary": "Forge: PKCS#12 MAC forgery and constant-key PBE via zero iteration count",
        "url": "https://github.com/advisories/GHSA-jc66-7q78-782g",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-45623"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-45623",
          "percentile": 0.49087,
          "score": 0.00608
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.12"
        ],
        "id": "GHSA-6g55-p6wh-862q",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "High",
        "summary": "PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments",
        "url": "https://github.com/advisories/GHSA-6g55-p6wh-862q",
        "version": "8.4.31"
      },
      {
        "aliases": [
          "CVE-2026-45623"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-45623",
          "percentile": 0.49087,
          "score": 0.00608
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.12"
        ],
        "id": "GHSA-6g55-p6wh-862q",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "High",
        "summary": "PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments",
        "url": "https://github.com/advisories/GHSA-6g55-p6wh-862q",
        "version": "8.5.6"
      },
      {
        "aliases": [
          "CVE-2026-73646"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-73646",
          "percentile": 0.44814,
          "score": 0.0053
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.18"
        ],
        "id": "GHSA-r28c-9q8g-f849",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "High",
        "summary": "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure",
        "url": "https://github.com/advisories/GHSA-r28c-9q8g-f849",
        "version": "8.4.31"
      },
      {
        "aliases": [
          "CVE-2026-73646"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-73646",
          "percentile": 0.44814,
          "score": 0.0053
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.18"
        ],
        "id": "GHSA-r28c-9q8g-f849",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "High",
        "summary": "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure",
        "url": "https://github.com/advisories/GHSA-r28c-9q8g-f849",
        "version": "8.5.12"
      },
      {
        "aliases": [
          "CVE-2026-73646"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-73646",
          "percentile": 0.44814,
          "score": 0.0053
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.18"
        ],
        "id": "GHSA-r28c-9q8g-f849",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "High",
        "summary": "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure",
        "url": "https://github.com/advisories/GHSA-r28c-9q8g-f849",
        "version": "8.5.6"
      },
      {
        "aliases": [
          "CVE-2026-48712"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-48712",
          "percentile": 0.39891,
          "score": 0.0046
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.6.1"
        ],
        "id": "GHSA-wcpc-wj8m-hjx6",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "protobufjs",
        "severity": "High",
        "summary": "protobufjs: Denial of service through unbounded Any expansion during JSON conversion",
        "url": "https://github.com/advisories/GHSA-wcpc-wj8m-hjx6",
        "version": "7.5.6"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "0.35.0"
        ],
        "id": "GHSA-f88m-g3jw-g9cj",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "sharp",
        "severity": "High",
        "summary": "sharp inherited vulnerabilities in libvips: CVE-2026-33327, CVE-2026-33328, CVE-2026-35590, CVE-2026-35591",
        "url": "https://github.com/advisories/GHSA-f88m-g3jw-g9cj",
        "version": "0.34.5"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "0.35.4"
        ],
        "id": "GHSA-rgj7-g3m4-5g8c",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "sharp",
        "severity": "High",
        "summary": "sharp: Vulnerabilities in libheif: GHSA-g89c-p67h-r497 and GHSA-2jg2-4ch7-h545",
        "url": "https://github.com/advisories/GHSA-rgj7-g3m4-5g8c",
        "version": "0.34.5"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "0.35.5"
        ],
        "id": "GHSA-wq5f-xc86-pv6w",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "sharp",
        "severity": "High",
        "summary": "sharp : Vulnerability in librsvg dependency CVE-2026-96889",
        "url": "https://github.com/advisories/GHSA-wq5f-xc86-pv6w",
        "version": "0.34.5"
      },
      {
        "aliases": [
          "CVE-2026-93749"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-93749",
          "percentile": 0.39513,
          "score": 0.00455
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.2.2"
        ],
        "id": "GHSA-68fv-2mgg-jv7q",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "source-map-js",
        "severity": "High",
        "summary": "source-map-js allows event-loop denial of service through indexed source-map section offsets",
        "url": "https://github.com/advisories/GHSA-68fv-2mgg-jv7q",
        "version": "1.2.1"
      },
      {
        "aliases": [
          "CVE-2026-114126"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-114126",
          "percentile": 0.44775,
          "score": 0.00529
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.6.2"
        ],
        "id": "GHSA-px85-f4q5-jh77",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "storybook",
        "severity": "High",
        "summary": "Storybook dev server vulnerable to code injection from the local network",
        "url": "https://github.com/advisories/GHSA-px85-f4q5-jh77",
        "version": "10.3.6"
      },
      {
        "aliases": [
          "CVE-2026-59874"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-59874",
          "percentile": 0.37686,
          "score": 0.00434
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.5.18"
        ],
        "id": "GHSA-8x88-c5mf-7j5w",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "tar",
        "severity": "High",
        "summary": "node-tar: Negative tar entry size causes infinite loop in archive replace",
        "url": "https://github.com/advisories/GHSA-8x88-c5mf-7j5w",
        "version": "7.5.13"
      },
      {
        "aliases": [
          "CVE-2026-73566"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-73566",
          "percentile": 0.44902,
          "score": 0.00531
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.5.21"
        ],
        "id": "GHSA-r292-9mhp-454m",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "tar",
        "severity": "High",
        "summary": "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection",
        "url": "https://github.com/advisories/GHSA-r292-9mhp-454m",
        "version": "7.5.13"
      },
      {
        "aliases": [
          "CVE-2026-114141"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-114141",
          "percentile": 0.40891,
          "score": 0.00473
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.0.1"
        ],
        "id": "GHSA-4qx8-w7c3-pj3p",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "toml",
        "severity": "High",
        "summary": "toml-node: Quadratic-complexity DoS via many array-of-tables headers in toml.parse()",
        "url": "https://github.com/advisories/GHSA-4qx8-w7c3-pj3p",
        "version": "5.0.0"
      },
      {
        "aliases": [
          "CVE-2026-114143"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-114143",
          "percentile": 0.4089,
          "score": 0.00473
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.0.1"
        ],
        "id": "GHSA-9j65-hcg3-gc64",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "toml",
        "severity": "High",
        "summary": "toml-node: Quadratic-complexity DoS via long dotted keys or table paths in toml.parse()",
        "url": "https://github.com/advisories/GHSA-9j65-hcg3-gc64",
        "version": "5.0.0"
      },
      {
        "aliases": [
          "CVE-2026-114144"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-114144",
          "percentile": 0.38278,
          "score": 0.0044
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.0.1"
        ],
        "id": "GHSA-9qmh-m7c6-f92p",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "toml",
        "severity": "High",
        "summary": "toml-node: Uncontrolled resource consumption (CPU DoS) via unbounded-length integer literals in toml.parse()",
        "url": "https://github.com/advisories/GHSA-9qmh-m7c6-f92p",
        "version": "5.0.0"
      },
      {
        "aliases": [
          "CVE-2026-109383"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-109383",
          "percentile": 0.08019,
          "score": 0.00184
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.30.1"
        ],
        "id": "GHSA-2m5v-pch6-74hx",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "undici",
        "severity": "High",
        "summary": "undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent",
        "url": "https://github.com/advisories/GHSA-2m5v-pch6-74hx",
        "version": "7.30.0"
      },
      {
        "aliases": [
          "CVE-2026-109829"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-109829",
          "percentile": 0.04067,
          "score": 0.00149
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.30.1"
        ],
        "id": "GHSA-4w7w-5xrc-9h26",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "undici",
        "severity": "High",
        "summary": "undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects",
        "url": "https://github.com/advisories/GHSA-4w7w-5xrc-9h26",
        "version": "7.30.0"
      },
      {
        "aliases": [
          "CVE-2026-87018"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-87018",
          "percentile": 0.08361,
          "score": 0.00187
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.30.1"
        ],
        "id": "GHSA-qrxm-fqhp-jwvm",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "undici",
        "severity": "High",
        "summary": "undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation",
        "url": "https://github.com/advisories/GHSA-qrxm-fqhp-jwvm",
        "version": "7.30.0"
      },
      {
        "aliases": [
          "CVE-2026-109869"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-109869",
          "percentile": 0.27938,
          "score": 0.00344
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.30.1"
        ],
        "id": "GHSA-xjj6-f33q-929c",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "undici",
        "severity": "High",
        "summary": "undici vulnerable to Denial of Service via unhandled error on excessive content-encodings",
        "url": "https://github.com/advisories/GHSA-xjj6-f33q-929c",
        "version": "7.30.0"
      },
      {
        "aliases": [
          "CVE-2026-97687"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-97687",
          "percentile": 0.10658,
          "score": 0.00206
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.8.0"
        ],
        "id": "GHSA-8988-9cw3-xx77",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "urllib3",
        "severity": "High",
        "summary": "urllib3: HTTPS proxy TLS configuration may be ignored or overridden",
        "url": "https://github.com/advisories/GHSA-8988-9cw3-xx77",
        "version": "2.6.3"
      },
      {
        "aliases": [
          "CVE-2026-44432"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-44432",
          "percentile": 0.52397,
          "score": 0.0068
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.7.0"
        ],
        "id": "GHSA-mf9v-mfxr-j63j",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "urllib3",
        "severity": "High",
        "summary": "urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API",
        "url": "https://github.com/advisories/GHSA-mf9v-mfxr-j63j",
        "version": "2.6.3"
      },
      {
        "aliases": [
          "CVE-2026-44431"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-44431",
          "percentile": 0.26325,
          "score": 0.00331
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.7.0"
        ],
        "id": "GHSA-qccp-gfcp-xxvc",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "urllib3",
        "severity": "High",
        "summary": "urllib3: Sensitive headers forwarded across origins in proxied low-level redirects",
        "url": "https://github.com/advisories/GHSA-qccp-gfcp-xxvc",
        "version": "2.6.3"
      },
      {
        "aliases": [
          "CVE-2026-97689"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-97689",
          "percentile": 0.26853,
          "score": 0.00335
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.8.0"
        ],
        "id": "GHSA-vxq7-64xx-v4gw",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "urllib3",
        "severity": "High",
        "summary": "urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory",
        "url": "https://github.com/advisories/GHSA-vxq7-64xx-v4gw",
        "version": "2.6.3"
      },
      {
        "aliases": [
          "CVE-2026-112942"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112942",
          "percentile": 0.71406,
          "score": 0.01344
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-587h-7wmj-h5pm",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "High",
        "summary": "launch-editor: `fs.existsSync()` existence check can be bypassed on Windows",
        "url": "https://github.com/advisories/GHSA-587h-7wmj-h5pm",
        "version": "7.3.2"
      },
      {
        "aliases": [
          "CVE-2026-112942"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112942",
          "percentile": 0.71406,
          "score": 0.01344
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-587h-7wmj-h5pm",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "High",
        "summary": "launch-editor: `fs.existsSync()` existence check can be bypassed on Windows",
        "url": "https://github.com/advisories/GHSA-587h-7wmj-h5pm",
        "version": "7.3.6"
      },
      {
        "aliases": [
          "CVE-2026-112942"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112942",
          "percentile": 0.71406,
          "score": 0.01344
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.2.4"
        ],
        "id": "GHSA-587h-7wmj-h5pm",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "High",
        "summary": "launch-editor: `fs.existsSync()` existence check can be bypassed on Windows",
        "url": "https://github.com/advisories/GHSA-587h-7wmj-h5pm",
        "version": "8.2.2"
      },
      {
        "aliases": [
          "CVE-2026-48779"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-48779",
          "percentile": 0.72944,
          "score": 0.01426
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.21.0"
        ],
        "id": "GHSA-96hv-2xvq-fx4p",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "ws",
        "severity": "High",
        "summary": "ws: Memory exhaustion DoS from tiny fragments and data chunks",
        "url": "https://github.com/advisories/GHSA-96hv-2xvq-fx4p",
        "version": "8.20.0"
      },
      {
        "aliases": [
          "CVE-2023-54404"
        ],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.6.6"
        ],
        "id": "GHSA-mrhx-c7xc-m3w5",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "zod",
        "severity": "High",
        "summary": "Zod can exhaust memory while validating oversized constrained collections",
        "url": "https://github.com/advisories/GHSA-mrhx-c7xc-m3w5",
        "version": "3.24.1"
      },
      {
        "aliases": [
          "CVE-2023-54404"
        ],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.6.6"
        ],
        "id": "GHSA-mrhx-c7xc-m3w5",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "zod",
        "severity": "High",
        "summary": "Zod can exhaust memory while validating oversized constrained collections",
        "url": "https://github.com/advisories/GHSA-mrhx-c7xc-m3w5",
        "version": "3.25.76"
      },
      {
        "aliases": [
          "CVE-2023-54404"
        ],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.6.6"
        ],
        "id": "GHSA-mrhx-c7xc-m3w5",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "zod",
        "severity": "High",
        "summary": "Zod can exhaust memory while validating oversized constrained collections",
        "url": "https://github.com/advisories/GHSA-mrhx-c7xc-m3w5",
        "version": "4.4.1"
      },
      {
        "aliases": [
          "CVE-2023-54404"
        ],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "4.6.6"
        ],
        "id": "GHSA-mrhx-c7xc-m3w5",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "zod",
        "severity": "High",
        "summary": "Zod can exhaust memory while validating oversized constrained collections",
        "url": "https://github.com/advisories/GHSA-mrhx-c7xc-m3w5",
        "version": "4.6.5"
      },
      {
        "aliases": [
          "CVE-2026-74866"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-74866",
          "percentile": 0.25722,
          "score": 0.00326
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.2.2"
        ],
        "id": "GHSA-gxm5-99cw-xjw9",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@fastify/busboy",
        "severity": "Medium",
        "summary": "@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name",
        "url": "https://github.com/advisories/GHSA-gxm5-99cw-xjw9",
        "version": "3.1.1"
      },
      {
        "aliases": [
          "CVE-2026-7120"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-7120",
          "percentile": 0.30802,
          "score": 0.00369
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.1.2"
        ],
        "id": "GHSA-8pvw-jcv7-9cmj",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@fastify/static",
        "severity": "Medium",
        "summary": "@fastify/static vulnerable to Authorization Bypass via Non-Canonical URL Paths",
        "url": "https://github.com/advisories/GHSA-8pvw-jcv7-9cmj",
        "version": "9.1.3"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "1.19.15"
        ],
        "id": "GHSA-frvp-7c67-39w9",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@hono/node-server",
        "severity": "Medium",
        "summary": "Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)",
        "url": "https://github.com/advisories/GHSA-frvp-7c67-39w9",
        "version": "1.19.14"
      },
      {
        "aliases": [
          "CVE-2026-118663"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118663",
          "percentile": 0.28979,
          "score": 0.00353
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.1.3"
        ],
        "id": "GHSA-rmxm-3fg6-px4f",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@hono/node-server",
        "severity": "Medium",
        "summary": "@hono/node-server: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths",
        "url": "https://github.com/advisories/GHSA-rmxm-3fg6-px4f",
        "version": "1.19.14"
      },
      {
        "aliases": [
          "CVE-2026-9495"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-9495",
          "percentile": 0.29798,
          "score": 0.0036
        },
        "fix_state": "fixed",
        "fixed_in": [
          "15.0.0"
        ],
        "id": "GHSA-47p6-69vm-vw6v",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "@koa/router",
        "severity": "Medium",
        "summary": "@koa/router has an Access Control Bypass",
        "url": "https://github.com/advisories/GHSA-47p6-69vm-vw6v",
        "version": "14.0.0"
      },
      {
        "aliases": [
          "CVE-2026-111769"
        ],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "1.32.0"
        ],
        "id": "GHSA-6prh-2h8m-c8cw",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@modelcontextprotocol/sdk",
        "severity": "Medium",
        "summary": "MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies",
        "url": "https://github.com/advisories/GHSA-6prh-2h8m-c8cw",
        "version": "1.29.0"
      },
      {
        "aliases": [
          "CVE-2026-111771"
        ],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "1.32.0"
        ],
        "id": "GHSA-rvq5-wwqv-78pq",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@modelcontextprotocol/sdk",
        "severity": "Medium",
        "summary": "MCP TypeScript SDK: Server bearer authentication accepted tokens issued for another service",
        "url": "https://github.com/advisories/GHSA-rvq5-wwqv-78pq",
        "version": "1.29.0"
      },
      {
        "aliases": [
          "CVE-2026-54285"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-54285",
          "percentile": 0.34479,
          "score": 0.00402
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.8.0"
        ],
        "id": "GHSA-8988-4f7v-96qf",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "@opentelemetry/core",
        "severity": "Medium",
        "summary": "OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation",
        "url": "https://github.com/advisories/GHSA-8988-4f7v-96qf",
        "version": "2.2.0"
      },
      {
        "aliases": [
          "CVE-2026-54285"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-54285",
          "percentile": 0.34479,
          "score": 0.00402
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.8.0"
        ],
        "id": "GHSA-8988-4f7v-96qf",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "@opentelemetry/core",
        "severity": "Medium",
        "summary": "OpenTelemetry Core: Unbounded memory allocation in W3C Baggage propagation",
        "url": "https://github.com/advisories/GHSA-8988-4f7v-96qf",
        "version": "2.6.0"
      },
      {
        "aliases": [
          "CVE-2026-84373"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84373",
          "percentile": 0.44672,
          "score": 0.00527
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.11"
        ],
        "id": "GHSA-82fw-gwwq-j7x9",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@vitest/mocker",
        "severity": "Medium",
        "summary": "Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock",
        "url": "https://github.com/advisories/GHSA-82fw-gwwq-j7x9",
        "version": "3.2.4"
      },
      {
        "aliases": [
          "CVE-2026-84373"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84373",
          "percentile": 0.44672,
          "score": 0.00527
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.11"
        ],
        "id": "GHSA-82fw-gwwq-j7x9",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@vitest/mocker",
        "severity": "Medium",
        "summary": "Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock",
        "url": "https://github.com/advisories/GHSA-82fw-gwwq-j7x9",
        "version": "3.2.7"
      },
      {
        "aliases": [
          "CVE-2026-112949"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112949",
          "percentile": 0.27043,
          "score": 0.00336
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.12"
        ],
        "id": "GHSA-qxg6-89mg-rqv8",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "@vitest/mocker",
        "severity": "Medium",
        "summary": "Vitest: Code injection via unauthenticated manual mock registration",
        "url": "https://github.com/advisories/GHSA-qxg6-89mg-rqv8",
        "version": "3.2.4"
      },
      {
        "aliases": [
          "CVE-2026-112949"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112949",
          "percentile": 0.27043,
          "score": 0.00336
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.12"
        ],
        "id": "GHSA-qxg6-89mg-rqv8",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@vitest/mocker",
        "severity": "Medium",
        "summary": "Vitest: Code injection via unauthenticated manual mock registration",
        "url": "https://github.com/advisories/GHSA-qxg6-89mg-rqv8",
        "version": "3.2.7"
      },
      {
        "aliases": [
          "CVE-2026-112949"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112949",
          "percentile": 0.27043,
          "score": 0.00336
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.12"
        ],
        "id": "GHSA-qxg6-89mg-rqv8",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "@vitest/mocker",
        "severity": "Medium",
        "summary": "Vitest: Code injection via unauthenticated manual mock registration",
        "url": "https://github.com/advisories/GHSA-qxg6-89mg-rqv8",
        "version": "4.1.11"
      },
      {
        "aliases": [
          "CVE-2026-112950"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112950",
          "percentile": 0.4557,
          "score": 0.00542
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.12"
        ],
        "id": "GHSA-xp26-3454-mjgp",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "@vitest/mocker",
        "severity": "Medium",
        "summary": "Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix",
        "url": "https://github.com/advisories/GHSA-xp26-3454-mjgp",
        "version": "4.1.11"
      },
      {
        "aliases": [
          "CVE-2026-64847"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-64847",
          "percentile": 0.04787,
          "score": 0.00157
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.14.2"
        ],
        "id": "GHSA-5p39-cfhj-2xmp",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "anyio",
        "severity": "Medium",
        "summary": "AnyIO process-pool workers can block indefinitely on undrained stderr",
        "url": "https://github.com/advisories/GHSA-5p39-cfhj-2xmp",
        "version": "4.11.0"
      },
      {
        "aliases": [
          "CVE-2026-42044"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42044",
          "percentile": 0.49613,
          "score": 0.00618
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.2"
        ],
        "id": "GHSA-3w6x-2g7m-8v23",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget in `parseReviver`",
        "url": "https://github.com/advisories/GHSA-3w6x-2g7m-8v23",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67313"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67313",
          "percentile": 0.44261,
          "score": 0.00521
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-42h9-826w-cgv3",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Excessive recursion in formDataToJSON can cause denial of service",
        "url": "https://github.com/advisories/GHSA-42h9-826w-cgv3",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67313"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67313",
          "percentile": 0.44261,
          "score": 0.00521
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-42h9-826w-cgv3",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Excessive recursion in formDataToJSON can cause denial of service",
        "url": "https://github.com/advisories/GHSA-42h9-826w-cgv3",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-42037"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42037",
          "percentile": 0.22115,
          "score": 0.00294
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-445q-vr5w-6q77",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: CRLF Injection in multipart/form-data body via unsanitized blob.type in formDataToStream",
        "url": "https://github.com/advisories/GHSA-445q-vr5w-6q77",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101899"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101899",
          "percentile": 0.4369,
          "score": 0.00512
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-44g4-m2mj-wpvx",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges",
        "url": "https://github.com/advisories/GHSA-44g4-m2mj-wpvx",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101899"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101899",
          "percentile": 0.4369,
          "score": 0.00512
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-44g4-m2mj-wpvx",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges",
        "url": "https://github.com/advisories/GHSA-44g4-m2mj-wpvx",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101899"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101899",
          "percentile": 0.4369,
          "score": 0.00512
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-44g4-m2mj-wpvx",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges",
        "url": "https://github.com/advisories/GHSA-44g4-m2mj-wpvx",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-101900"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101900",
          "percentile": 0.45807,
          "score": 0.00546
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-4hqw-qxg8-jxx2",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders",
        "url": "https://github.com/advisories/GHSA-4hqw-qxg8-jxx2",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101900"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101900",
          "percentile": 0.45807,
          "score": 0.00546
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-4hqw-qxg8-jxx2",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders",
        "url": "https://github.com/advisories/GHSA-4hqw-qxg8-jxx2",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101900"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101900",
          "percentile": 0.45807,
          "score": 0.00546
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-4hqw-qxg8-jxx2",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders",
        "url": "https://github.com/advisories/GHSA-4hqw-qxg8-jxx2",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-42034"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42034",
          "percentile": 0.25848,
          "score": 0.00327
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-5c9x-8gcm-mpgx",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios' HTTP adapter-streamed uploads bypass maxBodyLength when maxRedirects: 0",
        "url": "https://github.com/advisories/GHSA-5c9x-8gcm-mpgx",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-42039"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42039",
          "percentile": 0.55694,
          "score": 0.00772
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-62hf-57xw-28j9",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: unbounded recursion in toFormData causes DoS via deeply nested request data",
        "url": "https://github.com/advisories/GHSA-62hf-57xw-28j9",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67319"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67319",
          "percentile": 0.24739,
          "score": 0.00318
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-7q8q-rj6j-mhjq",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Nested axios option objects can consume polluted prototype values",
        "url": "https://github.com/advisories/GHSA-7q8q-rj6j-mhjq",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67319"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67319",
          "percentile": 0.24739,
          "score": 0.00318
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-7q8q-rj6j-mhjq",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Nested axios option objects can consume polluted prototype values",
        "url": "https://github.com/advisories/GHSA-7q8q-rj6j-mhjq",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-44490"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44490",
          "percentile": 0.2647,
          "score": 0.00332
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.16.0"
        ],
        "id": "GHSA-898c-q2cr-xwhg",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "axios has DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions",
        "url": "https://github.com/advisories/GHSA-898c-q2cr-xwhg",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101902"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101902",
          "percentile": 0.35667,
          "score": 0.00414
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-9fr6-4gfg-395g",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method",
        "url": "https://github.com/advisories/GHSA-9fr6-4gfg-395g",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101902"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101902",
          "percentile": 0.35667,
          "score": 0.00414
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-9fr6-4gfg-395g",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method",
        "url": "https://github.com/advisories/GHSA-9fr6-4gfg-395g",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101902"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101902",
          "percentile": 0.35667,
          "score": 0.00414
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-9fr6-4gfg-395g",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method",
        "url": "https://github.com/advisories/GHSA-9fr6-4gfg-395g",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-67315"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67315",
          "percentile": 0.39472,
          "score": 0.00455
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-f4gw-2p7v-4548",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios",
        "url": "https://github.com/advisories/GHSA-f4gw-2p7v-4548",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67315"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67315",
          "percentile": 0.39472,
          "score": 0.00455
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-f4gw-2p7v-4548",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios",
        "url": "https://github.com/advisories/GHSA-f4gw-2p7v-4548",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-67321"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67321",
          "percentile": 0.45095,
          "score": 0.00534
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-hcpx-6fm6-wx23",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios form serializer maxDepth bypass via {} metatoken",
        "url": "https://github.com/advisories/GHSA-hcpx-6fm6-wx23",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101904"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101904",
          "percentile": 0.42037,
          "score": 0.00488
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-j8rh-479h-cp32",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Header Injection via Inherited headers After Minimal Interceptor",
        "url": "https://github.com/advisories/GHSA-j8rh-479h-cp32",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101904"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101904",
          "percentile": 0.42037,
          "score": 0.00488
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-j8rh-479h-cp32",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Header Injection via Inherited headers After Minimal Interceptor",
        "url": "https://github.com/advisories/GHSA-j8rh-479h-cp32",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101904"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101904",
          "percentile": 0.42037,
          "score": 0.00488
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-j8rh-479h-cp32",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Header Injection via Inherited headers After Minimal Interceptor",
        "url": "https://github.com/advisories/GHSA-j8rh-479h-cp32",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-67317"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67317",
          "percentile": 0.48789,
          "score": 0.00602
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-jqh4-m9w3-8hp9",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`",
        "url": "https://github.com/advisories/GHSA-jqh4-m9w3-8hp9",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67317"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67317",
          "percentile": 0.48789,
          "score": 0.00602
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-jqh4-m9w3-8hp9",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`",
        "url": "https://github.com/advisories/GHSA-jqh4-m9w3-8hp9",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-42038"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42038",
          "percentile": 0.25438,
          "score": 0.00324
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-m7pr-hjqh-92cm",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: no_proxy bypass via IP alias allows SSRF",
        "url": "https://github.com/advisories/GHSA-m7pr-hjqh-92cm",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67316"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67316",
          "percentile": 0.36729,
          "score": 0.00424
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-mmx7-hfxf-jppx",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Prototype pollution gadgets can alter axios request construction",
        "url": "https://github.com/advisories/GHSA-mmx7-hfxf-jppx",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67316"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67316",
          "percentile": 0.36729,
          "score": 0.00424
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-mmx7-hfxf-jppx",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Prototype pollution gadgets can alter axios request construction",
        "url": "https://github.com/advisories/GHSA-mmx7-hfxf-jppx",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-67318"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67318",
          "percentile": 0.49539,
          "score": 0.00616
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-mwf2-3pr3-8698",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: HTTP/2 streamed uploads bypass `maxBodyLength`",
        "url": "https://github.com/advisories/GHSA-mwf2-3pr3-8698",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67318"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67318",
          "percentile": 0.49539,
          "score": 0.00616
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-mwf2-3pr3-8698",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: HTTP/2 streamed uploads bypass `maxBodyLength`",
        "url": "https://github.com/advisories/GHSA-mwf2-3pr3-8698",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-67312"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67312",
          "percentile": 0.44262,
          "score": 0.00521
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-pmv8-rq9r-6j72",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Deep formToJSON Key Recursion Can Cause Denial of Service",
        "url": "https://github.com/advisories/GHSA-pmv8-rq9r-6j72",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67312"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67312",
          "percentile": 0.44262,
          "score": 0.00521
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-pmv8-rq9r-6j72",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Deep formToJSON Key Recursion Can Cause Denial of Service",
        "url": "https://github.com/advisories/GHSA-pmv8-rq9r-6j72",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-42036"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42036",
          "percentile": 0.25849,
          "score": 0.00327
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-vf2m-468p-8v99",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: HTTP adapter streamed responses bypass maxContentLength",
        "url": "https://github.com/advisories/GHSA-vf2m-468p-8v99",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101908"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101908",
          "percentile": 0.40711,
          "score": 0.00471
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-vh66-26gq-q6x8",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Prototype pollution gadget in fetch adapter can alter outbound requests",
        "url": "https://github.com/advisories/GHSA-vh66-26gq-q6x8",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-101908"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101908",
          "percentile": 0.40711,
          "score": 0.00471
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-vh66-26gq-q6x8",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Prototype pollution gadget in fetch adapter can alter outbound requests",
        "url": "https://github.com/advisories/GHSA-vh66-26gq-q6x8",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-101908"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101908",
          "percentile": 0.40711,
          "score": 0.00471
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.0"
        ],
        "id": "GHSA-vh66-26gq-q6x8",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Prototype pollution gadget in fetch adapter can alter outbound requests",
        "url": "https://github.com/advisories/GHSA-vh66-26gq-q6x8",
        "version": "1.18.1"
      },
      {
        "aliases": [
          "CVE-2026-42041"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42041",
          "percentile": 0.51425,
          "score": 0.00656
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-w9j2-pvgh-6h63",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy",
        "url": "https://github.com/advisories/GHSA-w9j2-pvgh-6h63",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-67314"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-67314",
          "percentile": 0.35383,
          "score": 0.00411
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.18.0"
        ],
        "id": "GHSA-xj6q-8x83-jv6g",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: Prototype pollution auth subfields can inject Basic auth",
        "url": "https://github.com/advisories/GHSA-xj6q-8x83-jv6g",
        "version": "1.16.1"
      },
      {
        "aliases": [
          "CVE-2026-42042"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42042",
          "percentile": 0.1118,
          "score": 0.0021
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-xx6v-rp6x-q39c",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Medium",
        "summary": "Axios: XSRF Token Cross-Origin Leakage via Prototype Pollution Gadget in `withXSRFToken` Boolean Coercion",
        "url": "https://github.com/advisories/GHSA-xx6v-rp6x-q39c",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-45819"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-45819",
          "percentile": 0.43259,
          "score": 0.00507
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.11.0"
        ],
        "id": "GHSA-w5vr-8v7q-w6rv",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "baseline-browser-mapping",
        "severity": "Medium",
        "summary": "baseline-browser-mapping process termination on invalid input causes denial of service",
        "url": "https://github.com/advisories/GHSA-w5vr-8v7q-w6rv",
        "version": "2.8.19"
      },
      {
        "aliases": [
          "CVE-2026-102277"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102277",
          "percentile": 0.37116,
          "score": 0.00428
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.1.21"
        ],
        "id": "GHSA-q2hr-2g5m-vwhr",
        "kev": null,
        "location": "package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "Medium",
        "summary": "brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service",
        "url": "https://github.com/advisories/GHSA-q2hr-2g5m-vwhr",
        "version": "1.1.14"
      },
      {
        "aliases": [
          "CVE-2026-102277"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102277",
          "percentile": 0.37116,
          "score": 0.00428
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.1.7"
        ],
        "id": "GHSA-q2hr-2g5m-vwhr",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "Medium",
        "summary": "brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service",
        "url": "https://github.com/advisories/GHSA-q2hr-2g5m-vwhr",
        "version": "2.1.0"
      },
      {
        "aliases": [
          "CVE-2026-102277"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102277",
          "percentile": 0.37116,
          "score": 0.00428
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.0.12"
        ],
        "id": "GHSA-q2hr-2g5m-vwhr",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "brace-expansion",
        "severity": "Medium",
        "summary": "brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service",
        "url": "https://github.com/advisories/GHSA-q2hr-2g5m-vwhr",
        "version": "5.0.9"
      },
      {
        "aliases": [
          "CVE-2026-69248"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-69248",
          "percentile": 0.15614,
          "score": 0.00244
        },
        "fix_state": "fixed",
        "fixed_in": [
          "49.0.0"
        ],
        "id": "GHSA-m2h6-j472-rp4c",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "cryptography",
        "severity": "Medium",
        "summary": "python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees",
        "url": "https://github.com/advisories/GHSA-m2h6-j472-rp4c",
        "version": "46.0.7"
      },
      {
        "aliases": [
          "CVE-2026-85063"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-85063",
          "percentile": 0.46969,
          "score": 0.00566
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.0.2"
        ],
        "id": "GHSA-8cw4-87c7-c6xx",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "csv-parse",
        "severity": "Medium",
        "summary": "node-csv: Prototype replacement still reachable via columns path",
        "url": "https://github.com/advisories/GHSA-8cw4-87c7-c6xx",
        "version": "5.6.0"
      },
      {
        "aliases": [
          "CVE-2026-65903"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-65903",
          "percentile": 0.25567,
          "score": 0.00325
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.0"
        ],
        "id": "GHSA-39q2-94rc-95cp",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify's ADD_TAGS function form bypasses FORBID_TAGS due to short-circuit evaluation",
        "url": "https://github.com/advisories/GHSA-39q2-94rc-95cp",
        "version": "3.3.3"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.13"
        ],
        "id": "GHSA-55q2-fjhq-7xh7",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS",
        "url": "https://github.com/advisories/GHSA-55q2-fjhq-7xh7",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-65902"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-65902",
          "percentile": 0.29253,
          "score": 0.00355
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.7"
        ],
        "id": "GHSA-76mc-f452-cxcm",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently pollutes `DEFAULT_ALLOWED_TAGS` / `DEFAULT_ALLOWED_ATTR`",
        "url": "https://github.com/advisories/GHSA-76mc-f452-cxcm",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-65898"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-65898",
          "percentile": 0.11529,
          "score": 0.00212
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.11"
        ],
        "id": "GHSA-cmwh-pvxp-8882",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify: Permanent `ALLOWED_ATTR` pollution via `setConfig()` bypassing the hook clone-guard (incomplete fix of the 3.4.7 hook-pollution patch)",
        "url": "https://github.com/advisories/GHSA-cmwh-pvxp-8882",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-41239"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41239",
          "percentile": 0.16179,
          "score": 0.00248
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.0"
        ],
        "id": "GHSA-crv5-9vww-q3g8",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify has a SAFE_FOR_TEMPLATES bypass in RETURN_DOM mode",
        "url": "https://github.com/advisories/GHSA-crv5-9vww-q3g8",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-41240"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41240",
          "percentile": 0.24218,
          "score": 0.00313
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.0"
        ],
        "id": "GHSA-h7mw-gpvr-xq4m",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)",
        "url": "https://github.com/advisories/GHSA-h7mw-gpvr-xq4m",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-49458"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-49458",
          "percentile": 0.34691,
          "score": 0.00404
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.6"
        ],
        "id": "GHSA-hpcv-96wg-7vj8",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via realm-bound `instanceof` checks",
        "url": "https://github.com/advisories/GHSA-hpcv-96wg-7vj8",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-49459"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-49459",
          "percentile": 0.30326,
          "score": 0.00365
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.6"
        ],
        "id": "GHSA-r47g-fvhr-h676",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify: IN_PLACE mode preserves attributes of a clobbered root element, allowing XSS via attacker-controlled root DOM",
        "url": "https://github.com/advisories/GHSA-r47g-fvhr-h676",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-49978"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-49978",
          "percentile": 0.34691,
          "score": 0.00404
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.7"
        ],
        "id": "GHSA-rp9w-3fw7-7cwq",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content",
        "url": "https://github.com/advisories/GHSA-rp9w-3fw7-7cwq",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-41238"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41238",
          "percentile": 0.19199,
          "score": 0.0027
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.0"
        ],
        "id": "GHSA-v9jr-rg53-9pgp",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Medium",
        "summary": "DOMPurify: Prototype Pollution to XSS Bypass via CUSTOM_ELEMENT_HANDLING Fallback",
        "url": "https://github.com/advisories/GHSA-v9jr-rg53-9pgp",
        "version": "3.3.3"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.0"
        ],
        "id": "GHSA-jggr-w7fw-pc2j",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-copy",
        "severity": "Medium",
        "summary": "fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values",
        "url": "https://github.com/advisories/GHSA-jggr-w7fw-pc2j",
        "version": "3.0.1"
      },
      {
        "aliases": [
          "CVE-2026-86472"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-86472",
          "percentile": 0.16796,
          "score": 0.00253
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.8"
        ],
        "id": "GHSA-hrr3-gc8f-f4qj",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "Medium",
        "summary": "fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets",
        "url": "https://github.com/advisories/GHSA-hrr3-gc8f-f4qj",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-110306"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110306",
          "percentile": 0.1635,
          "score": 0.0025
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.9"
        ],
        "id": "GHSA-w74x-v6f9-j3xg",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "Medium",
        "summary": "fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding",
        "url": "https://github.com/advisories/GHSA-w74x-v6f9-j3xg",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-110306"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110306",
          "percentile": 0.1635,
          "score": 0.0025
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.9"
        ],
        "id": "GHSA-w74x-v6f9-j3xg",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "Medium",
        "summary": "fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding",
        "url": "https://github.com/advisories/GHSA-w74x-v6f9-j3xg",
        "version": "3.1.8"
      },
      {
        "aliases": [
          "CVE-2026-110180"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110180",
          "percentile": 0.17118,
          "score": 0.00255
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.9"
        ],
        "id": "GHSA-wjr9-j795-jxcr",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "Medium",
        "summary": "fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization",
        "url": "https://github.com/advisories/GHSA-wjr9-j795-jxcr",
        "version": "3.1.8"
      },
      {
        "aliases": [
          "CVE-2026-16732"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-16732",
          "percentile": 0.04908,
          "score": 0.00158
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.12.1"
        ],
        "id": "GHSA-3m5p-2c4r-xxw2",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fastify",
        "severity": "Medium",
        "summary": "fastify vulnerable to X-Forwarded-* spoofing under trustProxy hop-count",
        "url": "https://github.com/advisories/GHSA-3m5p-2c4r-xxw2",
        "version": "5.8.5"
      },
      {
        "aliases": [
          "CVE-2026-92081"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-92081",
          "percentile": 0.35491,
          "score": 0.00412
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.12.5"
        ],
        "id": "GHSA-4mh8-r7rc-xpvc",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fastify",
        "severity": "Medium",
        "summary": "fastify vulnerable to Denial of Service via unhandled exception on HTTP/2 trailer responses",
        "url": "https://github.com/advisories/GHSA-4mh8-r7rc-xpvc",
        "version": "5.8.5"
      },
      {
        "aliases": [
          "CVE-2026-18504"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-18504",
          "percentile": 0.20544,
          "score": 0.0028
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.12.1"
        ],
        "id": "GHSA-w2qp-rph6-63g4",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fastify",
        "severity": "Medium",
        "summary": "fastify vulnerable to schema validation bypass via root primitive coercion mismatch",
        "url": "https://github.com/advisories/GHSA-w2qp-rph6-63g4",
        "version": "5.8.5"
      },
      {
        "aliases": [
          "CVE-2026-45820"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-45820",
          "percentile": 0.20377,
          "score": 0.00279
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.4.9"
        ],
        "id": "GHSA-px8p-9vwx-vf98",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "fflate",
        "severity": "Medium",
        "summary": "fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives",
        "url": "https://github.com/advisories/GHSA-px8p-9vwx-vf98",
        "version": "0.4.8"
      },
      {
        "aliases": [
          "CVE-2026-33997"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-33997",
          "percentile": 0.34433,
          "score": 0.00402
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-pxq6-2prw-chj9",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "Medium",
        "summary": "Moby has an Off-by-one error in its plugin privilege validation",
        "url": "https://github.com/advisories/GHSA-pxq6-2prw-chj9",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-41568"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-41568",
          "percentile": 0.01188,
          "score": 0.00108
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-vp62-88p7-qqf5",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/docker/docker",
        "severity": "Medium",
        "summary": "Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swap",
        "url": "https://github.com/advisories/GHSA-vp62-88p7-qqf5",
        "version": "v28.5.2+incompatible"
      },
      {
        "aliases": [
          "CVE-2026-114437"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-114437",
          "percentile": 0.02563,
          "score": 0.00129
        },
        "fix_state": "fixed",
        "fixed_in": [
          "5.4.0"
        ],
        "id": "GHSA-j6qf-3m9c-vwj3",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-chi/chi/v5",
        "severity": "Medium",
        "summary": "chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For",
        "url": "https://github.com/advisories/GHSA-j6qf-3m9c-vwj3",
        "version": "v5.2.4"
      },
      {
        "aliases": [
          "CVE-2026-61801"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-61801",
          "percentile": 0.01634,
          "score": 0.00117
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.4.1"
        ],
        "id": "GHSA-mjcv-p78q-w5fw",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/moby/sys/user",
        "severity": "Medium",
        "summary": "github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database files",
        "url": "https://github.com/advisories/GHSA-mjcv-p78q-w5fw",
        "version": "v0.4.0"
      },
      {
        "aliases": [
          "CVE-2026-118773"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118773",
          "percentile": 0.28707,
          "score": 0.0035
        },
        "fix_state": "fixed",
        "fixed_in": [
          "14.0.2"
        ],
        "id": "GHSA-3g3m-2fjr-6pw4",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "glob",
        "severity": "Medium",
        "summary": "Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal",
        "url": "https://github.com/advisories/GHSA-3g3m-2fjr-6pw4",
        "version": "10.5.0"
      },
      {
        "aliases": [
          "CVE-2026-118773"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118773",
          "percentile": 0.28707,
          "score": 0.0035
        },
        "fix_state": "fixed",
        "fixed_in": [
          "14.0.2"
        ],
        "id": "GHSA-3g3m-2fjr-6pw4",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "glob",
        "severity": "Medium",
        "summary": "Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal",
        "url": "https://github.com/advisories/GHSA-3g3m-2fjr-6pw4",
        "version": "11.1.0"
      },
      {
        "aliases": [
          "CVE-2026-118773"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118773",
          "percentile": 0.28707,
          "score": 0.0035
        },
        "fix_state": "fixed",
        "fixed_in": [
          "14.0.2"
        ],
        "id": "GHSA-3g3m-2fjr-6pw4",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "glob",
        "severity": "Medium",
        "summary": "Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal",
        "url": "https://github.com/advisories/GHSA-3g3m-2fjr-6pw4",
        "version": "13.0.6"
      },
      {
        "aliases": [
          "CVE-2026-47676"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-47676",
          "percentile": 0.17698,
          "score": 0.0026
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.21"
        ],
        "id": "GHSA-2gcr-mfcq-wcc3",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths",
        "url": "https://github.com/advisories/GHSA-2gcr-mfcq-wcc3",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-47675"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-47675",
          "percentile": 0.12055,
          "score": 0.00216
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.21"
        ],
        "id": "GHSA-3hrh-pfw6-9m5x",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: Cookie helper does not sanitize sameSite and priority, allowing Set-Cookie injection",
        "url": "https://github.com/advisories/GHSA-3hrh-pfw6-9m5x",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-71848"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-71848",
          "percentile": 0.43257,
          "score": 0.00507
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.34"
        ],
        "id": "GHSA-54fx-42gc-7vw4",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: Algorithmic Complexity DoS in Language Middleware",
        "url": "https://github.com/advisories/GHSA-54fx-42gc-7vw4",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-111757"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-111757",
          "percentile": 0.23883,
          "score": 0.0031
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.13.11"
        ],
        "id": "GHSA-5r4p-p66f-jhc7",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths",
        "url": "https://github.com/advisories/GHSA-5r4p-p66f-jhc7",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-69207"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-69207",
          "percentile": 0.49166,
          "score": 0.00609
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.34"
        ],
        "id": "GHSA-8j4g-w8fx-2239",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: ReDoS in CORS middleware via Access-Control-Request-Headers",
        "url": "https://github.com/advisories/GHSA-8j4g-w8fx-2239",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-84363"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84363",
          "percentile": 0.38981,
          "score": 0.00448
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.13.5"
        ],
        "id": "GHSA-crvj-82cr-hjcx",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials",
        "url": "https://github.com/advisories/GHSA-crvj-82cr-hjcx",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-71850"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-71850",
          "percentile": 0.18884,
          "score": 0.00267
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.34"
        ],
        "id": "GHSA-f23p-vx2j-j53r",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: `memo()` retains SSR output across requests, leading to cross-user data disclosure",
        "url": "https://github.com/advisories/GHSA-f23p-vx2j-j53r",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-47673"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-47673",
          "percentile": 0.09704,
          "score": 0.00199
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.21"
        ],
        "id": "GHSA-f577-qrjj-4474",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: JWT middleware accepts any Authorization scheme, not only Bearer",
        "url": "https://github.com/advisories/GHSA-f577-qrjj-4474",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-84364"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84364",
          "percentile": 0.44776,
          "score": 0.00529
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.13.5"
        ],
        "id": "GHSA-g6gw-c38x-mqfc",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: Unbounded dot-notation nesting in `parseBody()` can cause memory exhaustion",
        "url": "https://github.com/advisories/GHSA-g6gw-c38x-mqfc",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-84365"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84365",
          "percentile": 0.38018,
          "score": 0.00437
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.13.5"
        ],
        "id": "GHSA-gqvv-2mrq-wpjv",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: Incomplete fix for CVE-2026-39408: `toSSG()` still writes files outside the output directory",
        "url": "https://github.com/advisories/GHSA-gqvv-2mrq-wpjv",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-59896"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-59896",
          "percentile": 0.22608,
          "score": 0.00299
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.27"
        ],
        "id": "GHSA-hvrm-45r6-mjfj",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "hono/jsx does not isolate context per request, leading to cross-request data disclosure",
        "url": "https://github.com/advisories/GHSA-hvrm-45r6-mjfj",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-93981"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-93981",
          "percentile": 0.13534,
          "score": 0.00227
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.13.7"
        ],
        "id": "GHSA-hxh3-vqpv-xpqv",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "hono/jsx renders plain strings unescaped in boundary components, leading to XSS",
        "url": "https://github.com/advisories/GHSA-hxh3-vqpv-xpqv",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-54287"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-54287",
          "percentile": 0.23916,
          "score": 0.0031
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.25"
        ],
        "id": "GHSA-j6c9-x7qj-28xf",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "hono: AWS Lambda adapter merges multiple `Set-Cookie` headers into one value, dropping cookies on ALB single-header and Lattice",
        "url": "https://github.com/advisories/GHSA-j6c9-x7qj-28xf",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-44457"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44457",
          "percentile": 0.09536,
          "score": 0.00198
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.18"
        ],
        "id": "GHSA-p77w-8qqv-26rm",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono's Cache Middleware ignores Vary: Authorization / Vary: Cookie leading to cross-user cache leakage",
        "url": "https://github.com/advisories/GHSA-p77w-8qqv-26rm",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-44458"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44458",
          "percentile": 0.09497,
          "score": 0.00197
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.18"
        ],
        "id": "GHSA-qp7p-654g-cw7p",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono has CSS Declaration Injection via Style Object Values in JSX SSR",
        "url": "https://github.com/advisories/GHSA-qp7p-654g-cw7p",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-54288"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-54288",
          "percentile": 0.03907,
          "score": 0.00147
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.25"
        ],
        "id": "GHSA-rv63-4mwf-qqc2",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "hono: Body Limit Middleware can be bypassed on AWS Lambda by understating `Content-Length`",
        "url": "https://github.com/advisories/GHSA-rv63-4mwf-qqc2",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-59895"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-59895",
          "percentile": 0.25806,
          "score": 0.00327
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.27"
        ],
        "id": "GHSA-w62v-xxxg-mg59",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: Server-Side XSS via JSX Escaping Bypass in cx() Utility",
        "url": "https://github.com/advisories/GHSA-w62v-xxxg-mg59",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-54289"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-54289",
          "percentile": 0.07423,
          "score": 0.00178
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.25"
        ],
        "id": "GHSA-wgpf-jwqj-8h8p",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "hono: Lambda@Edge adapter keeps only the last value of a repeated request header, dropping the rest",
        "url": "https://github.com/advisories/GHSA-wgpf-jwqj-8h8p",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-54286"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-54286",
          "percentile": 0.37611,
          "score": 0.00433
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.25"
        ],
        "id": "GHSA-wwfh-h76j-fc44",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)",
        "url": "https://github.com/advisories/GHSA-wwfh-h76j-fc44",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-59897"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-59897",
          "percentile": 0.07536,
          "score": 0.0018
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.27"
        ],
        "id": "GHSA-xgm2-5f3f-mvvc",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: API Gateway v1 adapter can drop a distinct repeated request header value during de-duplication",
        "url": "https://github.com/advisories/GHSA-xgm2-5f3f-mvvc",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-47674"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-47674",
          "percentile": 0.15655,
          "score": 0.00244
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.21"
        ],
        "id": "GHSA-xrhx-7g5j-rcj5",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Medium",
        "summary": "Hono: IP Restriction bypasses static deny rules for non-canonical IPv6",
        "url": "https://github.com/advisories/GHSA-xrhx-7g5j-rcj5",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-41691"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41691",
          "percentile": 0.24294,
          "score": 0.00313
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.0.5"
        ],
        "id": "GHSA-q89c-q3h5-w34g",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "i18next-http-backend",
        "severity": "Medium",
        "summary": "i18next-http-backend has Path Traversal & URL Injection via Unsanitised lng/ns",
        "url": "https://github.com/advisories/GHSA-q89c-q3h5-w34g",
        "version": "3.0.1"
      },
      {
        "aliases": [
          "CVE-2026-45409"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-45409",
          "percentile": 0.35091,
          "score": 0.00408
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.15"
        ],
        "id": "GHSA-65pc-fj4g-8rjx",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "idna",
        "severity": "Medium",
        "summary": "Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix",
        "url": "https://github.com/advisories/GHSA-65pc-fj4g-8rjx",
        "version": "3.11"
      },
      {
        "aliases": [
          "CVE-2026-101911"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101911",
          "percentile": 0.32357,
          "score": 0.00383
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.7.1"
        ],
        "id": "GHSA-h3mg-xc3c-68pw",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "ip-address",
        "severity": "Medium",
        "summary": "ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process",
        "url": "https://github.com/advisories/GHSA-h3mg-xc3c-68pw",
        "version": "10.1.0"
      },
      {
        "aliases": [
          "CVE-2026-101912"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101912",
          "percentile": 0.30994,
          "score": 0.0037
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.7.1"
        ],
        "id": "GHSA-j6r3-76f7-8jcv",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "ip-address",
        "severity": "Medium",
        "summary": "ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range",
        "url": "https://github.com/advisories/GHSA-j6r3-76f7-8jcv",
        "version": "10.1.0"
      },
      {
        "aliases": [
          "CVE-2026-101913"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-101913",
          "percentile": 0.32683,
          "score": 0.00386
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.5.1"
        ],
        "id": "GHSA-rpw4-54j3-4h4q",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "ip-address",
        "severity": "Medium",
        "summary": "ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts",
        "url": "https://github.com/advisories/GHSA-rpw4-54j3-4h4q",
        "version": "10.1.0"
      },
      {
        "aliases": [
          "CVE-2026-111997"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-111997",
          "percentile": 0.24409,
          "score": 0.00315
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.7.4"
        ],
        "id": "GHSA-rxp7-6hxx-x8q5",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "ip-address",
        "severity": "Medium",
        "summary": "ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process",
        "url": "https://github.com/advisories/GHSA-rxp7-6hxx-x8q5",
        "version": "10.1.0"
      },
      {
        "aliases": [
          "CVE-2026-42338"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42338",
          "percentile": 0.40732,
          "score": 0.00471
        },
        "fix_state": "fixed",
        "fixed_in": [
          "10.1.1"
        ],
        "id": "GHSA-v2v4-37r5-5v8g",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "ip-address",
        "severity": "Medium",
        "summary": "ip-address has XSS in Address6 HTML-emitting methods",
        "url": "https://github.com/advisories/GHSA-v2v4-37r5-5v8g",
        "version": "10.1.0"
      },
      {
        "aliases": [
          "CVE-2026-53550"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-53550",
          "percentile": 0.35866,
          "score": 0.00415
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.2.0"
        ],
        "id": "GHSA-h67p-54hq-rp68",
        "kev": null,
        "location": "package-lock.json",
        "osv_confirmed": true,
        "package": "js-yaml",
        "severity": "Medium",
        "summary": "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases",
        "url": "https://github.com/advisories/GHSA-h67p-54hq-rp68",
        "version": "4.1.1"
      },
      {
        "aliases": [
          "CVE-2026-118764"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118764",
          "percentile": 0.21751,
          "score": 0.00291
        },
        "fix_state": "fixed",
        "fixed_in": [
          "11.0.1"
        ],
        "id": "GHSA-g3hv-75wg-m249",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "minimatch",
        "severity": "Medium",
        "summary": "minimatch has potential denial of service via globparts amplification",
        "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249",
        "version": "10.2.5"
      },
      {
        "aliases": [
          "CVE-2026-118764"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118764",
          "percentile": 0.21751,
          "score": 0.00291
        },
        "fix_state": "fixed",
        "fixed_in": [
          "11.0.1"
        ],
        "id": "GHSA-g3hv-75wg-m249",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "minimatch",
        "severity": "Medium",
        "summary": "minimatch has potential denial of service via globparts amplification",
        "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249",
        "version": "10.2.6"
      },
      {
        "aliases": [
          "CVE-2026-118764"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118764",
          "percentile": 0.21751,
          "score": 0.00291
        },
        "fix_state": "fixed",
        "fixed_in": [
          "11.0.1"
        ],
        "id": "GHSA-g3hv-75wg-m249",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "minimatch",
        "severity": "Medium",
        "summary": "minimatch has potential denial of service via globparts amplification",
        "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249",
        "version": "3.1.5"
      },
      {
        "aliases": [
          "CVE-2026-118764"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118764",
          "percentile": 0.21751,
          "score": 0.00291
        },
        "fix_state": "fixed",
        "fixed_in": [
          "11.0.1"
        ],
        "id": "GHSA-g3hv-75wg-m249",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "minimatch",
        "severity": "Medium",
        "summary": "minimatch has potential denial of service via globparts amplification",
        "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249",
        "version": "9.0.9"
      },
      {
        "aliases": [
          "CVE-2026-64647"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-64647",
          "percentile": 0.24677,
          "score": 0.00317
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.11"
        ],
        "id": "GHSA-4633-3j49-mh5q",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js: Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences",
        "url": "https://github.com/advisories/GHSA-4633-3j49-mh5q",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-64646"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-64646",
          "percentile": 0.44438,
          "score": 0.00524
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.11"
        ],
        "id": "GHSA-4c39-4ccg-62r3",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js: Unbounded Server Action payload in Edge runtime",
        "url": "https://github.com/advisories/GHSA-4c39-4ccg-62r3",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-94543"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-94543",
          "percentile": 0.43216,
          "score": 0.00506
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.3.8"
        ],
        "id": "GHSA-4jqv-mc3x-m676",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js has cache poisoning of SSG and ISR pages in self-hosted applications",
        "url": "https://github.com/advisories/GHSA-4jqv-mc3x-m676",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-64648"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-64648",
          "percentile": 0.27241,
          "score": 0.00338
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.11"
        ],
        "id": "GHSA-68g3-v927-f742",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js: Cache confusion of response bodies for requests with bodies",
        "url": "https://github.com/advisories/GHSA-68g3-v927-f742",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-64643"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-64643",
          "percentile": 0.43515,
          "score": 0.0051
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.11"
        ],
        "id": "GHSA-955p-x3mx-jcvp",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js: Unauthenticated disclosure of internal Server Function endpoints",
        "url": "https://github.com/advisories/GHSA-955p-x3mx-jcvp",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-94485"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-94485",
          "percentile": 0.06693,
          "score": 0.00173
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.3.8"
        ],
        "id": "GHSA-f87g-xv8r-7p7x",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass",
        "url": "https://github.com/advisories/GHSA-f87g-xv8r-7p7x",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44581"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44581",
          "percentile": 0.12886,
          "score": 0.00222
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-ffhc-5mcf-pf4q",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js vulnerable to cross-site scripting in App Router applications using CSP nonces",
        "url": "https://github.com/advisories/GHSA-ffhc-5mcf-pf4q",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44580"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44580",
          "percentile": 0.1048,
          "score": 0.00205
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-gx5p-jg67-6x7h",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js has cross-site scripting in beforeInteractive scripts with untrusted input",
        "url": "https://github.com/advisories/GHSA-gx5p-jg67-6x7h",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44577"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44577",
          "percentile": 0.54562,
          "score": 0.00739
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-h64f-5h5j-jqjh",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js has a Denial of Service in the Image Optimization API",
        "url": "https://github.com/advisories/GHSA-h64f-5h5j-jqjh",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-94484"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-94484",
          "percentile": 0.15708,
          "score": 0.00244
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.3.8"
        ],
        "id": "GHSA-mcj8-r9mp-w47p",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of service",
        "url": "https://github.com/advisories/GHSA-mcj8-r9mp-w47p",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-64644"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-64644",
          "percentile": 0.5186,
          "score": 0.00666
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.11"
        ],
        "id": "GHSA-q8wf-6r8g-63ch",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js: Denial of Service in the Image Optimization API using SVGs",
        "url": "https://github.com/advisories/GHSA-q8wf-6r8g-63ch",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44576"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44576",
          "percentile": 0.2213,
          "score": 0.00295
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-wfc6-r584-vfw7",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Medium",
        "summary": "Next.js vulnerable to cache poisoning in React Server Component responses",
        "url": "https://github.com/advisories/GHSA-wfc6-r584-vfw7",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-118778"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118778",
          "percentile": 0.10363,
          "score": 0.00204
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-525v-9gp9-w22h",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "Medium",
        "summary": "Forge: TLS client crash when the server sends no certificate",
        "url": "https://github.com/advisories/GHSA-525v-9gp9-w22h",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-119186"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-119186",
          "percentile": 0.1069,
          "score": 0.00206
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-5cwg-6vw7-rj6p",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "Medium",
        "summary": "Forge: AES-GCM authentication bypass via unvalidated tagLength option",
        "url": "https://github.com/advisories/GHSA-5cwg-6vw7-rj6p",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-118777"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118777",
          "percentile": 0.17154,
          "score": 0.00255
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-6wvx-3r32-xmcg",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "Medium",
        "summary": "Forge: Prototype Pollution in forge.http cookie handling via a malicious Set-Cookie",
        "url": "https://github.com/advisories/GHSA-6wvx-3r32-xmcg",
        "version": "1.4.0"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "10.1.4"
        ],
        "id": "GHSA-85x2-q946-cp5h",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "nodemailer",
        "severity": "Medium",
        "summary": "Nodemailer: A \">\" inside a quoted local part ends an angle-addr early in addressparser, delivering to a domain the header does not name",
        "url": "https://github.com/advisories/GHSA-85x2-q946-cp5h",
        "version": "10.0.16"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "10.1.4"
        ],
        "id": "GHSA-8c8m-p3m8-cjg8",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "nodemailer",
        "severity": "Medium",
        "summary": "Nodemailer: A nested comment ends early in addressparser, releasing the rest of the comment as a recipient",
        "url": "https://github.com/advisories/GHSA-8c8m-p3m8-cjg8",
        "version": "10.0.16"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "10.1.4"
        ],
        "id": "GHSA-m943-m63m-w62w",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "nodemailer",
        "severity": "Medium",
        "summary": "Nodemailer: A \";\" inside a quoted string or comment ends an address group early in addressparser, turning display text into a recipient",
        "url": "https://github.com/advisories/GHSA-m943-m63m-w62w",
        "version": "10.0.16"
      },
      {
        "aliases": [
          "CVE-2026-102414"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-102414",
          "percentile": 0.28049,
          "score": 0.00345
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.7"
        ],
        "id": "GHSA-477h-4r7f-fvrx",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "pbkdf2",
        "severity": "Medium",
        "summary": "pbkdf2 rehashes long passwords on every iteration, enabling denial of service",
        "url": "https://github.com/advisories/GHSA-477h-4r7f-fvrx",
        "version": "3.1.5"
      },
      {
        "aliases": [
          "CVE-2026-69153"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-69153",
          "percentile": 0.39208,
          "score": 0.00451
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.23"
        ],
        "id": "GHSA-fxqj-rqcc-2cmp",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "Medium",
        "summary": "PostCSS: incomplete fix of GHSA-6g55-p6wh-862q \u2014 attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",
        "url": "https://github.com/advisories/GHSA-fxqj-rqcc-2cmp",
        "version": "8.4.31"
      },
      {
        "aliases": [
          "CVE-2026-69153"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-69153",
          "percentile": 0.39208,
          "score": 0.00451
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.23"
        ],
        "id": "GHSA-fxqj-rqcc-2cmp",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "Medium",
        "summary": "PostCSS: incomplete fix of GHSA-6g55-p6wh-862q \u2014 attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",
        "url": "https://github.com/advisories/GHSA-fxqj-rqcc-2cmp",
        "version": "8.5.12"
      },
      {
        "aliases": [
          "CVE-2026-69153"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-69153",
          "percentile": 0.39208,
          "score": 0.00451
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.23"
        ],
        "id": "GHSA-fxqj-rqcc-2cmp",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "Medium",
        "summary": "PostCSS: incomplete fix of GHSA-6g55-p6wh-862q \u2014 attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset",
        "url": "https://github.com/advisories/GHSA-fxqj-rqcc-2cmp",
        "version": "8.5.6"
      },
      {
        "aliases": [
          "CVE-2026-41305"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41305",
          "percentile": 0.10477,
          "score": 0.00205
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.10"
        ],
        "id": "GHSA-qx2v-qp2m-jg93",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "Medium",
        "summary": "PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
        "url": "https://github.com/advisories/GHSA-qx2v-qp2m-jg93",
        "version": "8.4.31"
      },
      {
        "aliases": [
          "CVE-2026-41305"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41305",
          "percentile": 0.10477,
          "score": 0.00205
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.5.10"
        ],
        "id": "GHSA-qx2v-qp2m-jg93",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "postcss",
        "severity": "Medium",
        "summary": "PostCSS has XSS via Unescaped </style> in its CSS Stringify Output",
        "url": "https://github.com/advisories/GHSA-qx2v-qp2m-jg93",
        "version": "8.5.6"
      },
      {
        "aliases": [
          "CVE-2026-54269"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-54269",
          "percentile": 0.34477,
          "score": 0.00402
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.6.3"
        ],
        "id": "GHSA-f38q-mgvj-vph7",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "protobufjs",
        "severity": "Medium",
        "summary": "protobufjs : Schema-derived names can shadow runtime-significant properties",
        "url": "https://github.com/advisories/GHSA-f38q-mgvj-vph7",
        "version": "7.5.6"
      },
      {
        "aliases": [
          "CVE-2026-59877"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-59877",
          "percentile": 0.3041,
          "score": 0.00365
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.6.5"
        ],
        "id": "GHSA-j3f2-48v5-ccww",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "protobufjs",
        "severity": "Medium",
        "summary": "protobufjs: Denial of Service via infinite loop in .proto option parsing",
        "url": "https://github.com/advisories/GHSA-j3f2-48v5-ccww",
        "version": "7.5.6"
      },
      {
        "aliases": [
          "CVE-2026-45740"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-45740",
          "percentile": 0.18166,
          "score": 0.00263
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.5.8"
        ],
        "id": "GHSA-jggg-4jg4-v7c6",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "protobufjs",
        "severity": "Medium",
        "summary": "protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion",
        "url": "https://github.com/advisories/GHSA-jggg-4jg4-v7c6",
        "version": "7.5.6"
      },
      {
        "aliases": [
          "CVE-2026-28684"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-28684",
          "percentile": 0.16768,
          "score": 0.00252
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.2.2"
        ],
        "id": "GHSA-mf9w-mj56-hr94",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "python-dotenv",
        "severity": "Medium",
        "summary": "python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback",
        "url": "https://github.com/advisories/GHSA-mf9w-mj56-hr94",
        "version": "1.2.1"
      },
      {
        "aliases": [
          "CVE-2026-82417"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-82417",
          "percentile": 0.33809,
          "score": 0.00396
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.16.0"
        ],
        "id": "GHSA-4mjr-xmp4-gh2g",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "qs",
        "severity": "Medium",
        "summary": "qs: Denial of Service via Attacker Controlled isBuffer",
        "url": "https://github.com/advisories/GHSA-4mjr-xmp4-gh2g",
        "version": "6.15.0"
      },
      {
        "aliases": [
          "CVE-2026-82417"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-82417",
          "percentile": 0.33809,
          "score": 0.00396
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.16.0"
        ],
        "id": "GHSA-4mjr-xmp4-gh2g",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "qs",
        "severity": "Medium",
        "summary": "qs: Denial of Service via Attacker Controlled isBuffer",
        "url": "https://github.com/advisories/GHSA-4mjr-xmp4-gh2g",
        "version": "6.15.1"
      },
      {
        "aliases": [
          "CVE-2026-110816"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110816",
          "percentile": 0.30708,
          "score": 0.00368
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.16.1"
        ],
        "id": "GHSA-6pq8-jhm2-2vcw",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "qs",
        "severity": "Medium",
        "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)",
        "url": "https://github.com/advisories/GHSA-6pq8-jhm2-2vcw",
        "version": "6.15.0"
      },
      {
        "aliases": [
          "CVE-2026-110816"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110816",
          "percentile": 0.30708,
          "score": 0.00368
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.16.1"
        ],
        "id": "GHSA-6pq8-jhm2-2vcw",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "qs",
        "severity": "Medium",
        "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)",
        "url": "https://github.com/advisories/GHSA-6pq8-jhm2-2vcw",
        "version": "6.15.1"
      },
      {
        "aliases": [
          "CVE-2026-110816"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110816",
          "percentile": 0.30708,
          "score": 0.00368
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.16.1"
        ],
        "id": "GHSA-6pq8-jhm2-2vcw",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "qs",
        "severity": "Medium",
        "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)",
        "url": "https://github.com/advisories/GHSA-6pq8-jhm2-2vcw",
        "version": "6.16.0"
      },
      {
        "aliases": [
          "CVE-2026-8723"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-8723",
          "percentile": 0.34217,
          "score": 0.00399
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.15.2"
        ],
        "id": "GHSA-q8mj-m7cp-5q26",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "qs",
        "severity": "Medium",
        "summary": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
        "url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26",
        "version": "6.15.0"
      },
      {
        "aliases": [
          "CVE-2026-8723"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-8723",
          "percentile": 0.34217,
          "score": 0.00399
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.15.2"
        ],
        "id": "GHSA-q8mj-m7cp-5q26",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "qs",
        "severity": "Medium",
        "summary": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set",
        "url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26",
        "version": "6.15.1"
      },
      {
        "aliases": [
          "CVE-2026-82562"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-82562",
          "percentile": 0.45453,
          "score": 0.0054
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.16.0"
        ],
        "id": "GHSA-x5fp-wj9c-mxmx",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "qs",
        "severity": "Medium",
        "summary": "qs array-limit bypass via bracket-key comma parsing",
        "url": "https://github.com/advisories/GHSA-x5fp-wj9c-mxmx",
        "version": "6.15.0"
      },
      {
        "aliases": [
          "CVE-2026-82562"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-82562",
          "percentile": 0.45453,
          "score": 0.0054
        },
        "fix_state": "fixed",
        "fixed_in": [
          "6.16.0"
        ],
        "id": "GHSA-x5fp-wj9c-mxmx",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "qs",
        "severity": "Medium",
        "summary": "qs array-limit bypass via bracket-key comma parsing",
        "url": "https://github.com/advisories/GHSA-x5fp-wj9c-mxmx",
        "version": "6.15.1"
      },
      {
        "aliases": [
          "CVE-2026-59875"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-59875",
          "percentile": 0.29158,
          "score": 0.00354
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.5.17"
        ],
        "id": "GHSA-gvwx-54wh-qm9j",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "tar",
        "severity": "Medium",
        "summary": "node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records",
        "url": "https://github.com/advisories/GHSA-gvwx-54wh-qm9j",
        "version": "7.5.13"
      },
      {
        "aliases": [
          "CVE-2026-53655"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-53655",
          "percentile": 0.04762,
          "score": 0.00156
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.5.16"
        ],
        "id": "GHSA-vmf3-w455-68vh",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "tar",
        "severity": "Medium",
        "summary": "node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)",
        "url": "https://github.com/advisories/GHSA-vmf3-w455-68vh",
        "version": "7.5.13"
      },
      {
        "aliases": [
          "CVE-2026-59871"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-59871",
          "percentile": 0.50871,
          "score": 0.00644
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.5.18"
        ],
        "id": "GHSA-w8wr-v893-vjvp",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "tar",
        "severity": "Medium",
        "summary": "node-tar: Process crash via PAX numeric path type confusion",
        "url": "https://github.com/advisories/GHSA-w8wr-v893-vjvp",
        "version": "7.5.13"
      },
      {
        "aliases": [
          "CVE-2026-109924"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-109924",
          "percentile": 0.25125,
          "score": 0.00321
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.30.1"
        ],
        "id": "GHSA-4qv8-2p9j-2685",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "undici",
        "severity": "Medium",
        "summary": "undici vulnerable to Denial of Service via unbounded memory in the EventSource parser",
        "url": "https://github.com/advisories/GHSA-4qv8-2p9j-2685",
        "version": "7.30.0"
      },
      {
        "aliases": [
          "CVE-2026-87029"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-87029",
          "percentile": 0.178,
          "score": 0.0026
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.30.1"
        ],
        "id": "GHSA-55wc-3pg8-jfw6",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "undici",
        "severity": "Medium",
        "summary": "undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor",
        "url": "https://github.com/advisories/GHSA-55wc-3pg8-jfw6",
        "version": "7.30.0"
      },
      {
        "aliases": [
          "CVE-2026-109932"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-109932",
          "percentile": 0.25126,
          "score": 0.00321
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.30.1"
        ],
        "id": "GHSA-9fm3-97px-rjf6",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "undici",
        "severity": "Medium",
        "summary": "undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering",
        "url": "https://github.com/advisories/GHSA-9fm3-97px-rjf6",
        "version": "7.30.0"
      },
      {
        "aliases": [
          "CVE-2026-109841"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-109841",
          "percentile": 0.16687,
          "score": 0.00252
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.30.1"
        ],
        "id": "GHSA-f72v-6w45-q472",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "undici",
        "severity": "Medium",
        "summary": "undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens",
        "url": "https://github.com/advisories/GHSA-f72v-6w45-q472",
        "version": "7.30.0"
      },
      {
        "aliases": [
          "CVE-2026-97688"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2026-97688",
          "percentile": 0.21778,
          "score": 0.00292
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.8.0"
        ],
        "id": "GHSA-gh4c-6fx4-qh6g",
        "kev": null,
        "location": "backend/bdd/uv.lock",
        "osv_confirmed": true,
        "package": "urllib3",
        "severity": "Medium",
        "summary": "urllib3: Chunked Deflate streaming can enter an infinite loop",
        "url": "https://github.com/advisories/GHSA-gh4c-6fx4-qh6g",
        "version": "2.6.3"
      },
      {
        "aliases": [
          "CVE-2026-41907"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41907",
          "percentile": 0.28633,
          "score": 0.0035
        },
        "fix_state": "fixed",
        "fixed_in": [
          "11.1.1"
        ],
        "id": "GHSA-w5hq-g745-h8pq",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "uuid",
        "severity": "Medium",
        "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
        "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq",
        "version": "10.0.0"
      },
      {
        "aliases": [
          "CVE-2026-41907"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41907",
          "percentile": 0.28633,
          "score": 0.0035
        },
        "fix_state": "fixed",
        "fixed_in": [
          "11.1.1"
        ],
        "id": "GHSA-w5hq-g745-h8pq",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "uuid",
        "severity": "Medium",
        "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
        "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq",
        "version": "11.1.0"
      },
      {
        "aliases": [
          "CVE-2026-41907"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41907",
          "percentile": 0.28633,
          "score": 0.0035
        },
        "fix_state": "fixed",
        "fixed_in": [
          "11.1.1"
        ],
        "id": "GHSA-w5hq-g745-h8pq",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "uuid",
        "severity": "Medium",
        "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
        "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-41907"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41907",
          "percentile": 0.28633,
          "score": 0.0035
        },
        "fix_state": "fixed",
        "fixed_in": [
          "11.1.1"
        ],
        "id": "GHSA-w5hq-g745-h8pq",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "uuid",
        "severity": "Medium",
        "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
        "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq",
        "version": "8.3.2"
      },
      {
        "aliases": [
          "CVE-2026-41907"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-41907",
          "percentile": 0.28633,
          "score": 0.0035
        },
        "fix_state": "fixed",
        "fixed_in": [
          "11.1.1"
        ],
        "id": "GHSA-w5hq-g745-h8pq",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "uuid",
        "severity": "Medium",
        "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided",
        "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq",
        "version": "9.0.1"
      },
      {
        "aliases": [
          "CVE-2026-112943"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112943",
          "percentile": 0.35737,
          "score": 0.00414
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-698v-4r3x-3vcv",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "launch-editor: escapeCmdArgs() omits % escaping on Windows",
        "url": "https://github.com/advisories/GHSA-698v-4r3x-3vcv",
        "version": "7.3.2"
      },
      {
        "aliases": [
          "CVE-2026-112943"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112943",
          "percentile": 0.35737,
          "score": 0.00414
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-698v-4r3x-3vcv",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "launch-editor: escapeCmdArgs() omits % escaping on Windows",
        "url": "https://github.com/advisories/GHSA-698v-4r3x-3vcv",
        "version": "7.3.6"
      },
      {
        "aliases": [
          "CVE-2026-112943"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112943",
          "percentile": 0.35737,
          "score": 0.00414
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.2.4"
        ],
        "id": "GHSA-698v-4r3x-3vcv",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "launch-editor: escapeCmdArgs() omits % escaping on Windows",
        "url": "https://github.com/advisories/GHSA-698v-4r3x-3vcv",
        "version": "8.2.2"
      },
      {
        "aliases": [
          "CVE-2026-53571"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-53571",
          "percentile": 0.47541,
          "score": 0.00577
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.5"
        ],
        "id": "GHSA-fx2h-pf6j-xcff",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "vite: `server.fs.deny` bypass on Windows alternate paths",
        "url": "https://github.com/advisories/GHSA-fx2h-pf6j-xcff",
        "version": "7.3.2"
      },
      {
        "aliases": [
          "CVE-2026-112944"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112944",
          "percentile": 0.5338,
          "score": 0.00705
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-r825-w8mm-5pxw",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors",
        "url": "https://github.com/advisories/GHSA-r825-w8mm-5pxw",
        "version": "7.3.2"
      },
      {
        "aliases": [
          "CVE-2026-112944"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112944",
          "percentile": 0.5338,
          "score": 0.00705
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-r825-w8mm-5pxw",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors",
        "url": "https://github.com/advisories/GHSA-r825-w8mm-5pxw",
        "version": "7.3.6"
      },
      {
        "aliases": [
          "CVE-2026-112944"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112944",
          "percentile": 0.5338,
          "score": 0.00705
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.2.4"
        ],
        "id": "GHSA-r825-w8mm-5pxw",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors",
        "url": "https://github.com/advisories/GHSA-r825-w8mm-5pxw",
        "version": "8.2.2"
      },
      {
        "aliases": [
          "CVE-2026-112946"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112946",
          "percentile": 0.58267,
          "score": 0.00852
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-rq7h-c2jc-7f22",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine",
        "url": "https://github.com/advisories/GHSA-rq7h-c2jc-7f22",
        "version": "7.3.2"
      },
      {
        "aliases": [
          "CVE-2026-112946"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112946",
          "percentile": 0.58267,
          "score": 0.00852
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-rq7h-c2jc-7f22",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine",
        "url": "https://github.com/advisories/GHSA-rq7h-c2jc-7f22",
        "version": "7.3.6"
      },
      {
        "aliases": [
          "CVE-2026-112946"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112946",
          "percentile": 0.58267,
          "score": 0.00852
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.2.4"
        ],
        "id": "GHSA-rq7h-c2jc-7f22",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine",
        "url": "https://github.com/advisories/GHSA-rq7h-c2jc-7f22",
        "version": "8.2.2"
      },
      {
        "aliases": [
          "CVE-2026-53632"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-53632",
          "percentile": 0.35125,
          "score": 0.00408
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.5"
        ],
        "id": "GHSA-v6wh-96g9-6wx3",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows",
        "url": "https://github.com/advisories/GHSA-v6wh-96g9-6wx3",
        "version": "7.3.2"
      },
      {
        "aliases": [
          "CVE-2026-112947"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112947",
          "percentile": 0.42982,
          "score": 0.00502
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.2.4"
        ],
        "id": "GHSA-vfpm-58rq-9qcg",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Medium",
        "summary": "Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`",
        "url": "https://github.com/advisories/GHSA-vfpm-58rq-9qcg",
        "version": "8.2.2"
      },
      {
        "aliases": [
          "CVE-2026-84373"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84373",
          "percentile": 0.44672,
          "score": 0.00527
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.11"
        ],
        "id": "GHSA-82fw-gwwq-j7x9",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "vitest",
        "severity": "Medium",
        "summary": "Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock",
        "url": "https://github.com/advisories/GHSA-82fw-gwwq-j7x9",
        "version": "3.2.4"
      },
      {
        "aliases": [
          "CVE-2026-84373"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-84373",
          "percentile": 0.44672,
          "score": 0.00527
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.1.11"
        ],
        "id": "GHSA-82fw-gwwq-j7x9",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "vitest",
        "severity": "Medium",
        "summary": "Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock",
        "url": "https://github.com/advisories/GHSA-82fw-gwwq-j7x9",
        "version": "3.2.7"
      },
      {
        "aliases": [
          "CVE-2026-45736"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-45736",
          "percentile": 0.54801,
          "score": 0.00745
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.20.1"
        ],
        "id": "GHSA-58qx-3vcg-4xpx",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "ws",
        "severity": "Medium",
        "summary": "ws: Uninitialized memory disclosure",
        "url": "https://github.com/advisories/GHSA-58qx-3vcg-4xpx",
        "version": "8.20.0"
      },
      {
        "aliases": [
          "CVE-2026-8769"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-8769",
          "percentile": 0.46653,
          "score": 0.00561
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.0.33"
        ],
        "id": "GHSA-866g-f22w-33x8",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@ai-sdk/provider-utils",
        "severity": "Low",
        "summary": "@ai-sdk/provider-utils has an Uncontrolled Resource Consumption issue",
        "url": "https://github.com/advisories/GHSA-866g-f22w-33x8",
        "version": "4.0.23"
      },
      {
        "aliases": [
          "CVE-2026-49356"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-49356",
          "percentile": 0.04312,
          "score": 0.00152
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.29.6"
        ],
        "id": "GHSA-4x5r-pxfx-6jf8",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "@babel/core",
        "severity": "Low",
        "summary": "@babel/core: Arbitrary File Read via sourceMappingURL Comment",
        "url": "https://github.com/advisories/GHSA-4x5r-pxfx-6jf8",
        "version": "7.28.4"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "13.3.2"
        ],
        "id": "GHSA-6hxq-p678-4hr2",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "@simplewebauthn/server",
        "severity": "Low",
        "summary": "SimpleWebAuthn: Registration verification does not sufficiently ensure that attestation certificates chain to a trust anchor",
        "url": "https://github.com/advisories/GHSA-6hxq-p678-4hr2",
        "version": "13.2.2"
      },
      {
        "aliases": [
          "CVE-2026-42040"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-42040",
          "percentile": 0.12184,
          "score": 0.00217
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.15.1"
        ],
        "id": "GHSA-xhjh-pmcv-23jw",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "axios",
        "severity": "Low",
        "summary": "Axios: Null Byte Injection via Reverse-Encoding in AxiosURLSearchParams",
        "url": "https://github.com/advisories/GHSA-xhjh-pmcv-23jw",
        "version": "1.15.0"
      },
      {
        "aliases": [
          "CVE-2026-12590"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-12590",
          "percentile": 0.3549,
          "score": 0.00412
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.20.6"
        ],
        "id": "GHSA-v422-hmwv-36x6",
        "kev": null,
        "location": "sink/oidc-server/package-lock.json",
        "osv_confirmed": true,
        "package": "body-parser",
        "severity": "Low",
        "summary": "body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement",
        "url": "https://github.com/advisories/GHSA-v422-hmwv-36x6",
        "version": "1.20.3"
      },
      {
        "aliases": [
          "CVE-2026-12590"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-12590",
          "percentile": 0.3549,
          "score": 0.00412
        },
        "fix_state": "fixed",
        "fixed_in": [
          "2.3.0"
        ],
        "id": "GHSA-v422-hmwv-36x6",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "body-parser",
        "severity": "Low",
        "summary": "body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement",
        "url": "https://github.com/advisories/GHSA-v422-hmwv-36x6",
        "version": "2.2.2"
      },
      {
        "aliases": [
          "CVE-2026-93753"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-93753",
          "percentile": 0.43819,
          "score": 0.00514
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-gcqx-w48m-w2h4",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "deepmerge",
        "severity": "Low",
        "summary": "deepmerge mergeObject() allows prototype poisoning of returned objects",
        "url": "https://github.com/advisories/GHSA-gcqx-w48m-w2h4",
        "version": "4.3.1"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.16"
        ],
        "id": "GHSA-6688-9rhm-gjv2",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Low",
        "summary": "DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup \u2014 pure HTML reparse executes",
        "url": "https://github.com/advisories/GHSA-6688-9rhm-gjv2",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-66010"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-66010",
          "percentile": 0.11964,
          "score": 0.00215
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.12"
        ],
        "id": "GHSA-c2j3-45gr-mqc4",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Low",
        "summary": "DOMPurify: `CUSTOM_ELEMENT_HANDLING` bypasses `afterSanitizeElements` for allowed custom elements.",
        "url": "https://github.com/advisories/GHSA-c2j3-45gr-mqc4",
        "version": "3.3.3"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.17"
        ],
        "id": "GHSA-c6gr-qvv4-5v3f",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Low",
        "summary": "DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml",
        "url": "https://github.com/advisories/GHSA-c6gr-qvv4-5v3f",
        "version": "3.3.3"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.17"
        ],
        "id": "GHSA-c6gr-qvv4-5v3f",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Low",
        "summary": "DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml",
        "url": "https://github.com/advisories/GHSA-c6gr-qvv4-5v3f",
        "version": "3.4.16"
      },
      {
        "aliases": [
          "CVE-2026-65900"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-65900",
          "percentile": 0.23865,
          "score": 0.0031
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.8"
        ],
        "id": "GHSA-gvmj-g25r-r7wr",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Low",
        "summary": "DOMPurify: SAFE_FOR_TEMPLATES bypass - template expressions survive sanitization inside <template> content when using DOM output modes",
        "url": "https://github.com/advisories/GHSA-gvmj-g25r-r7wr",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-65899"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-65899",
          "percentile": 0.35552,
          "score": 0.00413
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.4.9"
        ],
        "id": "GHSA-vxr8-fq34-vvx9",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Low",
        "summary": "DOMPurify: Trusted Types policy survives `clearConfig()` and can poison later `RETURN_TRUSTED_TYPE` output",
        "url": "https://github.com/advisories/GHSA-vxr8-fq34-vvx9",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2026-65901"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-65901",
          "percentile": 0.21114,
          "score": 0.00285
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-x4vx-rjvf-j5p4",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "dompurify",
        "severity": "Low",
        "summary": "DOMPurify: `IN_PLACE` mode trusts attacker-controlled `nodeName` on live non-form nodes, allowing script retention and XSS via attacker-supplied DOM objects",
        "url": "https://github.com/advisories/GHSA-x4vx-rjvf-j5p4",
        "version": "3.3.3"
      },
      {
        "aliases": [
          "CVE-2025-14505"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2025-14505",
          "percentile": 0.07579,
          "score": 0.0018
        },
        "fix_state": "not-fixed",
        "fixed_in": [],
        "id": "GHSA-848j-6mx2-7j84",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "elliptic",
        "severity": "Low",
        "summary": "Elliptic Uses a Cryptographic Primitive with a Risky Implementation",
        "url": "https://github.com/advisories/GHSA-848j-6mx2-7j84",
        "version": "6.6.1"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "0.28.1"
        ],
        "id": "GHSA-g7r4-m6w7-qqqr",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "esbuild",
        "severity": "Low",
        "summary": "esbuild allows arbitrary file read when running the development server on Windows",
        "url": "https://github.com/advisories/GHSA-g7r4-m6w7-qqqr",
        "version": "0.27.3"
      },
      {
        "aliases": [],
        "ecosystem": "npm",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "0.28.1"
        ],
        "id": "GHSA-g7r4-m6w7-qqqr",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "esbuild",
        "severity": "Low",
        "summary": "esbuild allows arbitrary file read when running the development server on Windows",
        "url": "https://github.com/advisories/GHSA-g7r4-m6w7-qqqr",
        "version": "0.27.7"
      },
      {
        "aliases": [
          "CVE-2026-110725"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110725",
          "percentile": 0.22997,
          "score": 0.00302
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.9"
        ],
        "id": "GHSA-333x-w4r6-6crp",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "Low",
        "summary": "fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references",
        "url": "https://github.com/advisories/GHSA-333x-w4r6-6crp",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-110725"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110725",
          "percentile": 0.22997,
          "score": 0.00302
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.9"
        ],
        "id": "GHSA-333x-w4r6-6crp",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "Low",
        "summary": "fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references",
        "url": "https://github.com/advisories/GHSA-333x-w4r6-6crp",
        "version": "3.1.8"
      },
      {
        "aliases": [
          "CVE-2026-110095"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110095",
          "percentile": 0.21547,
          "score": 0.00289
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.9"
        ],
        "id": "GHSA-xhq7-xmqj-769h",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "Low",
        "summary": "fast-uri vulnerable to improper path equivalence in relative reference normalization",
        "url": "https://github.com/advisories/GHSA-xhq7-xmqj-769h",
        "version": "3.1.0"
      },
      {
        "aliases": [
          "CVE-2026-110095"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-110095",
          "percentile": 0.21547,
          "score": 0.00289
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.1.9"
        ],
        "id": "GHSA-xhq7-xmqj-769h",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "fast-uri",
        "severity": "Low",
        "summary": "fast-uri vulnerable to improper path equivalence in relative reference normalization",
        "url": "https://github.com/advisories/GHSA-xhq7-xmqj-769h",
        "version": "3.1.8"
      },
      {
        "aliases": [
          "CVE-2026-81870"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-81870",
          "percentile": 0.18557,
          "score": 0.00266
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.45.0"
        ],
        "id": "GHSA-8wmf-6v46-5gfg",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
        "severity": "Low",
        "summary": "OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs",
        "url": "https://github.com/advisories/GHSA-8wmf-6v46-5gfg",
        "version": "v1.41.0"
      },
      {
        "aliases": [
          "CVE-2026-71849"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-71849",
          "percentile": 0.292,
          "score": 0.00355
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.34"
        ],
        "id": "GHSA-79qm-7rj5-m7r9",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Low",
        "summary": "Hono: Proxy Helper does not remove response headers listed in the `Connection` header",
        "url": "https://github.com/advisories/GHSA-79qm-7rj5-m7r9",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-44459"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44459",
          "percentile": 0.1206,
          "score": 0.00216
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.12.18"
        ],
        "id": "GHSA-hm8q-7f3q-5f36",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "hono",
        "severity": "Low",
        "summary": "Hono has improper validation of NumericDate claims (exp, nbf, iat) in JWT verify()",
        "url": "https://github.com/advisories/GHSA-hm8q-7f3q-5f36",
        "version": "4.12.16"
      },
      {
        "aliases": [
          "CVE-2026-118258"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118258",
          "percentile": 0.20572,
          "score": 0.0028
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.0.4"
        ],
        "id": "GHSA-3cmx-xjww-583x",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "i18next-http-backend",
        "severity": "Low",
        "summary": "i18next-http-backend: Query-parameter injection through & and = in lng when loadPath/addPath puts {{lng}} in the query string",
        "url": "https://github.com/advisories/GHSA-3cmx-xjww-583x",
        "version": "3.0.1"
      },
      {
        "aliases": [
          "CVE-2026-115730"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-115730",
          "percentile": 0.24815,
          "score": 0.00318
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.0.3"
        ],
        "id": "GHSA-9jhj-wvmw-cfx5",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "i18next-http-backend",
        "severity": "Low",
        "summary": "i18next-http-backend: Namespace value starting with / forms a protocol-relative URL when loadPath/addPath places {{ns}} right after a / (bypass of the // check added for GHSA-xvq9-wjp8-hwqf)",
        "url": "https://github.com/advisories/GHSA-9jhj-wvmw-cfx5",
        "version": "3.0.1"
      },
      {
        "aliases": [
          "CVE-2026-105800"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-105800",
          "percentile": 0.21503,
          "score": 0.00289
        },
        "fix_state": "fixed",
        "fixed_in": [
          "4.0.2"
        ],
        "id": "GHSA-xvq9-wjp8-hwqf",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "i18next-http-backend",
        "severity": "Low",
        "summary": "i18next-http-backend incomplete URL validation permits SSRF",
        "url": "https://github.com/advisories/GHSA-xvq9-wjp8-hwqf",
        "version": "3.0.1"
      },
      {
        "aliases": [
          "CVE-2026-94486"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-94486",
          "percentile": 0.01435,
          "score": 0.00114
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.3.8"
        ],
        "id": "GHSA-39w2-rjm5-chcv",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Low",
        "summary": "Next.js has information disclosure in development server's Model Context Protocol endpoint",
        "url": "https://github.com/advisories/GHSA-39w2-rjm5-chcv",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44572"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44572",
          "percentile": 0.2093,
          "score": 0.00284
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-3g8h-86w9-wvmq",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Low",
        "summary": "Next.js's Middleware / Proxy redirects can be cache-poisoned",
        "url": "https://github.com/advisories/GHSA-3g8h-86w9-wvmq",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-44582"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-44582",
          "percentile": 0.11891,
          "score": 0.00215
        },
        "fix_state": "fixed",
        "fixed_in": [
          "16.2.5"
        ],
        "id": "GHSA-vfv6-92ff-j949",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "next",
        "severity": "Low",
        "summary": "Next.js vulnerable to cache poisoning via collisions in React Server Component cache-busting",
        "url": "https://github.com/advisories/GHSA-vfv6-92ff-j949",
        "version": "16.1.7"
      },
      {
        "aliases": [
          "CVE-2026-118780"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118780",
          "percentile": 0.06585,
          "score": 0.00172
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-4487-j8r4-4g2f",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "Low",
        "summary": "Forge: verifyCertificateChain() removes trusted CA certificates with the same subject from the CA store",
        "url": "https://github.com/advisories/GHSA-4487-j8r4-4g2f",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-118775"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118775",
          "percentile": 0.24273,
          "score": 0.00313
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-4642-5mcj-2rqw",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "Low",
        "summary": "Forge: ASN.1 OID first arc truncation in asn1.oidToDer",
        "url": "https://github.com/advisories/GHSA-4642-5mcj-2rqw",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-118781"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-118781",
          "percentile": 0.01734,
          "score": 0.00119
        },
        "fix_state": "fixed",
        "fixed_in": [
          "1.4.1"
        ],
        "id": "GHSA-h6cr-wjv9-3cpp",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "node-forge",
        "severity": "Low",
        "summary": "Forge: Denial of Service via infinite loop in BigInteger.modInverse() with negative input (incomplete fix of CVE-2026-33891)",
        "url": "https://github.com/advisories/GHSA-h6cr-wjv9-3cpp",
        "version": "1.4.0"
      },
      {
        "aliases": [
          "CVE-2026-112945"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112945",
          "percentile": 0.5207,
          "score": 0.00672
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-9jrq-w75r-8gcw",
        "kev": null,
        "location": "upgrade-impact/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Low",
        "summary": "Vite: Cross origin script execution through Vite custom middleware",
        "url": "https://github.com/advisories/GHSA-9jrq-w75r-8gcw",
        "version": "7.3.2"
      },
      {
        "aliases": [
          "CVE-2026-112945"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112945",
          "percentile": 0.5207,
          "score": 0.00672
        },
        "fix_state": "fixed",
        "fixed_in": [
          "7.3.7"
        ],
        "id": "GHSA-9jrq-w75r-8gcw",
        "kev": null,
        "location": "backend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Low",
        "summary": "Vite: Cross origin script execution through Vite custom middleware",
        "url": "https://github.com/advisories/GHSA-9jrq-w75r-8gcw",
        "version": "7.3.6"
      },
      {
        "aliases": [
          "CVE-2026-112945"
        ],
        "ecosystem": "npm",
        "epss": {
          "cve": "CVE-2026-112945",
          "percentile": 0.5207,
          "score": 0.00672
        },
        "fix_state": "fixed",
        "fixed_in": [
          "8.2.4"
        ],
        "id": "GHSA-9jrq-w75r-8gcw",
        "kev": null,
        "location": "frontend/package-lock.json",
        "osv_confirmed": true,
        "package": "vite",
        "severity": "Low",
        "summary": "Vite: Cross origin script execution through Vite custom middleware",
        "url": "https://github.com/advisories/GHSA-9jrq-w75r-8gcw",
        "version": "8.2.2"
      },
      {
        "aliases": [
          "GHSA-3fxj-6jh8-hvhx"
        ],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "5.3.0"
        ],
        "id": "GO-2026-5774",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-chi/chi/v5",
        "severity": "Unknown",
        "summary": "Chi has an IP spoofing vulnerability in middleware.RealIP in github.com/go-chi/chi",
        "url": "https://github.com/go-chi/chi/security/advisories/GHSA-3fxj-6jh8-hvhx",
        "version": "v5.2.4"
      },
      {
        "aliases": [
          "GHSA-9g5q-2w5x-hmxf"
        ],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "5.3.0"
        ],
        "id": "GO-2026-5775",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-chi/chi/v5",
        "severity": "Unknown",
        "summary": "Chi Middleware vulnerable to IP spoofing via X-Forwarded-For header in github.com/go-chi/chi",
        "url": "https://github.com/go-chi/chi/security/advisories/GHSA-9g5q-2w5x-hmxf",
        "version": "v5.2.4"
      },
      {
        "aliases": [
          "GHSA-rjr7-jggh-pgcp"
        ],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "fixed",
        "fixed_in": [
          "5.3.0"
        ],
        "id": "GO-2026-5777",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "github.com/go-chi/chi/v5",
        "severity": "Unknown",
        "summary": "Chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header in github.com/go-chi/chi",
        "url": "https://github.com/go-chi/chi/security/advisories/GHSA-rjr7-jggh-pgcp",
        "version": "v5.2.4"
      },
      {
        "aliases": [],
        "ecosystem": "golang",
        "epss": null,
        "fix_state": "unknown",
        "fixed_in": [],
        "id": "GO-2026-5932",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/crypto",
        "severity": "Unknown",
        "summary": "The golang.org/x/crypto/openpgp package is unsafe by design, has numerous known security issues, is not maintained, and should not be used. If you are required to interoperate with OpenPGP systems and need a maintained package, consider github.com/ProtonMail/go-crypto/openpgp which is a maintained f",
        "url": "https://go.dev/issue/44226",
        "version": "v0.53.0"
      },
      {
        "aliases": [
          "CVE-2026-78661"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-78661",
          "percentile": 0.08063,
          "score": 0.00185
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6860",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a</x>\") cau",
        "url": "https://go.dev/cl/849365",
        "version": "v0.56.0"
      },
      {
        "aliases": [
          "CVE-2026-97045"
        ],
        "ecosystem": "golang",
        "epss": {
          "cve": "CVE-2026-97045",
          "percentile": 0.10117,
          "score": 0.00202
        },
        "fix_state": "fixed",
        "fixed_in": [
          "0.62.0"
        ],
        "id": "GO-2026-6866",
        "kev": null,
        "location": "backend-go/go.mod",
        "osv_confirmed": true,
        "package": "golang.org/x/net",
        "severity": "Unknown",
        "summary": "In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as <mglyph> or <malignmark> f",
        "url": "https://go.dev/cl/855121",
        "version": "v0.56.0"
      }
    ],
    "workflow_audit": {
      "files": 31,
      "findings": [
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 32,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 54,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 73,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 73,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 73,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 85,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 85,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 85,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 85,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 85,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 85,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 105,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 105,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 105,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 105,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 105,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 121,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/actions/generate-openapi-spec/action.yml",
          "line": 121,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/check-non-re2-regex.yml",
          "line": 15,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/generate-upgrade-impact.yml",
          "line": 18,
          "note": "contents: write is overly broad at the workflow level",
          "rule": "excessive-permissions",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/generate-upgrade-impact.yml",
          "line": 19,
          "note": "pull-requests: write is overly broad at the workflow level",
          "rule": "excessive-permissions",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/generate-upgrade-impact.yml",
          "line": 25,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/generate-upgrade-impact.yml",
          "line": 25,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "High",
          "description": "code injection via template expansion",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 244,
          "note": "this step",
          "rule": "template-injection",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#template-injection"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-be-ts-and-lint.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-be-ts-and-lint.yml",
          "line": 13,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-be-ts-and-lint.yml",
          "line": 48,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-dockerfile-pins.yml",
          "line": 11,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-fe-ts-and-lint.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-fe-ts-and-lint.yml",
          "line": 13,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-fe-ts-and-lint.yml",
          "line": 51,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-migration-file-edited.yml",
          "line": 10,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/check-non-re2-regex.yml",
          "line": 7,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/generate-release-changelog.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/generate-release-changelog.yml",
          "line": 15,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/generate-release-changelog.yml",
          "line": 21,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/helm-docs.yml",
          "line": 4,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/helm-release-infisical-core.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/helm-release-infisical-core.yml",
          "line": 6,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/helm-release-infisical-core.yml",
          "line": 62,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/helm-release-infisical-core.yml",
          "line": 69,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/helm-release-infisical-nkp.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/helm-release-infisical-nkp.yml",
          "line": 6,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/helm-release-infisical-nkp.yml",
          "line": 26,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/helm-release-infisical-nkp.yml",
          "line": 33,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 15,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 20,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 240,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "secrets unconditionally inherited by called workflow",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 274,
          "note": "this reusable workflow",
          "rule": "secrets-inherit",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#secrets-inherit"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release_helm_gateway.yaml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release_helm_gateway.yaml",
          "line": 6,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release_helm_gateway.yaml",
          "line": 50,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/release_helm_gateway.yaml",
          "line": 57,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-backend-bdd-tests.yml",
          "line": 15,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-backend-go-tests.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-backend-go-tests.yml",
          "line": 13,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-backend-go-tests.yml",
          "line": 35,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-backend-go-tests.yml",
          "line": 54,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-blackbox-tests.yml",
          "line": 1,
          "note": "default permissions used due to no permissions: block",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-blackbox-tests.yml",
          "line": 18,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-blackbox-tests.yml",
          "line": 41,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-helm-chart-tests-infisical-gateway.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/run-helm-chart-tests-infisical-standalone-postgres.yml",
          "line": 9,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/validate-db-schemas.yml",
          "line": 12,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/validate-pr-description.yml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/validate-pr-title.yml",
          "line": 8,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "Medium",
          "description": "overly broad permissions",
          "file": ".github/workflows/validate-upgrade-impact.yml",
          "line": 11,
          "note": "this job",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/check-api-for-breaking-changes.yml",
          "line": 109,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/check-api-for-breaking-changes.yml",
          "line": 126,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/generate-release-changelog.yml",
          "line": 16,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/helm-release-infisical-core.yml",
          "line": 63,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/helm-release-infisical-nkp.yml",
          "line": 27,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/publish-openapi-spec.yml",
          "line": 60,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 16,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 21,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 138,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 226,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/release-standalone-docker-img-postgres-offical.yml",
          "line": 269,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/release_helm_gateway.yaml",
          "line": 51,
          "note": "this job",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}
