{ "history": [ { "added": 0, "commit": "51eaa36112c79833fe90e51daa0564fb406f75df", "date": "2026-11-01", "dependencies": 665, "errors": [], "fixable": 118, "go_version": null, "in_binary": null, "new_vulnerabilities": 0, "osv_confirmed": 117, "osv_only": 100, "ref": "0.12.1", "release_changed": false, "release_integrity": "no-linux-binary", "removed": 0, "resolved_vulnerabilities": 0, "scorecard": null, "upgraded": 0, "vulnerabilities": { "Critical": 10, "High": 60, "Low": 17, "Medium": 31, "Negligible": 0, "Unknown": 0 }, "workflow": { "High": 17, "Low": 0, "Medium": 3, "files": 2 } }, { "added": 1664, "commit": "51eaa36112c79833fe90e51daa0564fb406f75df", "date": "2026-11-02", "dependencies": 2329, "errors": [], "fixable": 390, "go_version": null, "in_binary": null, "kev": 1, "kev_new": 0, "new_vulnerabilities": 185, "osv_confirmed": 417, "osv_only": 0, "ref": "0.12.1", "release_changed": false, "release_integrity": "no-linux-binary", "removed": 0, "resolved_vulnerabilities": 1, "scorecard": null, "scorecard_date": null, "scorecard_note": "the project is not in the OpenSSF public dataset; the Scorecard CLI fallback was skipped because this shard's weekly budget was used", "scorecard_source": null, "upgraded": 0, "vulnerabilities": { "Critical": 27, "High": 194, "Low": 41, "Medium": 155, "Negligible": 0, "Unknown": 0 }, "vulnerable_packages": 166, "workflow": { "High": 17, "Low": 0, "Medium": 3, "files": 2 } } ], "latest": { "archived": false, "category": "Container Security \u203a Runtime Security", "changes": { "added": [ "@babel/code-frame@7.21.4", "@babel/code-frame@7.22.10", "@babel/compat-data@7.21.9", "@babel/compat-data@7.22.9", "@babel/generator@7.21.9", "@babel/helper-annotate-as-pure@7.18.6", "@babel/helper-annotate-as-pure@7.22.5", "@babel/helper-builder-binary-assignment-operator-visitor@7.21.5", "@babel/helper-builder-binary-assignment-operator-visitor@7.22.10", "@babel/helper-compilation-targets@7.21.5", "@babel/helper-compilation-targets@7.22.10", "@babel/helper-create-class-features-plugin@7.21.8", "@babel/helper-create-class-features-plugin@7.22.10", "@babel/helper-create-regexp-features-plugin@7.21.8", "@babel/helper-create-regexp-features-plugin@7.22.9", "@babel/helper-define-polyfill-provider@0.3.3", "@babel/helper-define-polyfill-provider@0.4.2", "@babel/helper-environment-visitor@7.21.5", "@babel/helper-environment-visitor@7.22.5", "@babel/helper-function-name@7.21.0", "@babel/helper-function-name@7.22.5", "@babel/helper-hoist-variables@7.18.6", "@babel/helper-hoist-variables@7.22.5", "@babel/helper-member-expression-to-functions@7.21.5", "@babel/helper-member-expression-to-functions@7.22.5", "@babel/helper-module-imports@7.21.4", "@babel/helper-module-imports@7.22.5", "@babel/helper-module-transforms@7.21.5", "@babel/helper-module-transforms@7.22.9", "@babel/helper-optimise-call-expression@7.18.6", "@babel/helper-optimise-call-expression@7.22.5", "@babel/helper-plugin-utils@7.0.0", "@babel/helper-plugin-utils@7.21.5", "@babel/helper-plugin-utils@7.22.5", "@babel/helper-remap-async-to-generator@7.18.9", "@babel/helper-remap-async-to-generator@7.22.9", "@babel/helper-replace-supers@7.21.5", "@babel/helper-replace-supers@7.22.9", "@babel/helper-simple-access@7.21.5", "@babel/helper-simple-access@7.22.5", "@babel/helper-skip-transparent-expression-wrappers@7.20.0", "@babel/helper-skip-transparent-expression-wrappers@7.22.5", "@babel/helper-split-export-declaration@7.18.6", "@babel/helper-split-export-declaration@7.22.6", "@babel/helper-string-parser@7.21.5", "@babel/helper-string-parser@7.22.5", "@babel/helper-validator-identifier@7.19.1", "@babel/helper-validator-identifier@7.22.5", "@babel/helper-validator-option@7.21.0", "@babel/helper-validator-option@7.22.5", "@babel/helper-wrap-function@7.20.5", "@babel/helper-wrap-function@7.22.10", "@babel/highlight@7.18.6", "@babel/highlight@7.22.10", "@babel/parser@7.21.9", "@babel/parser@7.22.10", "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.18.6", "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.22.5", "@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.20.7", "@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.22.5", "@babel/plugin-proposal-async-generator-functions@7.20.7", "@babel/plugin-proposal-class-properties@7.18.6", "@babel/plugin-proposal-class-static-block@7.21.0", "@babel/plugin-proposal-decorators@7.21.0", "@babel/plugin-proposal-decorators@7.22.10", "@babel/plugin-proposal-dynamic-import@7.18.6", "@babel/plugin-proposal-export-namespace-from@7.18.9", "@babel/plugin-proposal-json-strings@7.18.6", "@babel/plugin-proposal-logical-assignment-operators@7.20.7", "@babel/plugin-proposal-nullish-coalescing-operator@7.18.6", "@babel/plugin-proposal-numeric-separator@7.18.6", "@babel/plugin-proposal-object-rest-spread@7.20.7", "@babel/plugin-proposal-optional-catch-binding@7.18.6", "@babel/plugin-proposal-optional-chaining@7.21.0", "@babel/plugin-proposal-private-methods@7.18.6", "@babel/plugin-proposal-private-property-in-object@7.21.0", "@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2", "@babel/plugin-proposal-unicode-property-regex@7.18.6", "@babel/plugin-syntax-class-static-block@7.14.5", "@babel/plugin-syntax-decorators@7.21.0", "@babel/plugin-syntax-decorators@7.22.10", "@babel/plugin-syntax-import-assertions@7.20.0", "@babel/plugin-syntax-import-assertions@7.22.5", "@babel/plugin-syntax-import-attributes@7.22.5", "@babel/plugin-syntax-import-meta@7.10.4", "@babel/plugin-syntax-private-property-in-object@7.14.5", "@babel/plugin-syntax-top-level-await@7.14.5", "@babel/plugin-syntax-typescript@7.21.4", "@babel/plugin-syntax-typescript@7.22.5", "@babel/plugin-syntax-unicode-sets-regex@7.18.6", "@babel/plugin-transform-arrow-functions@7.21.5", "@babel/plugin-transform-arrow-functions@7.22.5", "@babel/plugin-transform-async-generator-functions@7.22.10", "@babel/plugin-transform-async-to-generator@7.20.7", "@babel/plugin-transform-async-to-generator@7.22.5", "@babel/plugin-transform-block-scoped-functions@7.18.6", "@babel/plugin-transform-block-scoped-functions@7.22.5", "@babel/plugin-transform-block-scoping@7.21.0", "@babel/plugin-transform-block-scoping@7.22.10", "@babel/plugin-transform-class-properties@7.22.5", "@babel/plugin-transform-class-static-block@7.22.5", "@babel/plugin-transform-classes@7.21.0", "@babel/plugin-transform-classes@7.22.6", "@babel/plugin-transform-computed-properties@7.21.5", "@babel/plugin-transform-computed-properties@7.22.5", "@babel/plugin-transform-destructuring@7.21.3", "@babel/plugin-transform-destructuring@7.22.10", "@babel/plugin-transform-dotall-regex@7.18.6", "@babel/plugin-transform-dotall-regex@7.22.5", "@babel/plugin-transform-duplicate-keys@7.18.9", "@babel/plugin-transform-duplicate-keys@7.22.5", "@babel/plugin-transform-dynamic-import@7.22.5", "@babel/plugin-transform-exponentiation-operator@7.18.6", "@babel/plugin-transform-exponentiation-operator@7.22.5", "@babel/plugin-transform-export-namespace-from@7.22.5", "@babel/plugin-transform-for-of@7.21.5", "@babel/plugin-transform-for-of@7.22.5", "@babel/plugin-transform-function-name@7.18.9", "@babel/plugin-transform-function-name@7.22.5", "@babel/plugin-transform-json-strings@7.22.5", "@babel/plugin-transform-literals@7.18.9", "@babel/plugin-transform-literals@7.22.5", "@babel/plugin-transform-logical-assignment-operators@7.22.5", "@babel/plugin-transform-member-expression-literals@7.18.6", "@babel/plugin-transform-member-expression-literals@7.22.5", "@babel/plugin-transform-modules-amd@7.20.11", "@babel/plugin-transform-modules-amd@7.22.5", "@babel/plugin-transform-modules-commonjs@7.21.5", "@babel/plugin-transform-modules-commonjs@7.22.5", "@babel/plugin-transform-modules-systemjs@7.20.11", "@babel/plugin-transform-modules-systemjs@7.22.5", "@babel/plugin-transform-modules-umd@7.18.6", "@babel/plugin-transform-modules-umd@7.22.5", "@babel/plugin-transform-named-capturing-groups-regex@7.20.5", "@babel/plugin-transform-named-capturing-groups-regex@7.22.5", "@babel/plugin-transform-new-target@7.18.6", "@babel/plugin-transform-new-target@7.22.5", "@babel/plugin-transform-nullish-coalescing-operator@7.22.5", "@babel/plugin-transform-numeric-separator@7.22.5", "@babel/plugin-transform-object-rest-spread@7.22.5", "@babel/plugin-transform-object-super@7.18.6", "@babel/plugin-transform-object-super@7.22.5", "@babel/plugin-transform-optional-catch-binding@7.22.5", "@babel/plugin-transform-optional-chaining@7.22.10", "@babel/plugin-transform-parameters@7.21.3", "@babel/plugin-transform-parameters@7.22.5", "@babel/plugin-transform-private-methods@7.22.5", "@babel/plugin-transform-private-property-in-object@7.22.5", "@babel/plugin-transform-property-literals@7.18.6", "@babel/plugin-transform-property-literals@7.22.5", "@babel/plugin-transform-regenerator@7.21.5", "@babel/plugin-transform-regenerator@7.22.10", "@babel/plugin-transform-reserved-words@7.18.6", "@babel/plugin-transform-reserved-words@7.22.5", "@babel/plugin-transform-runtime@7.21.4", "@babel/plugin-transform-runtime@7.22.10", "@babel/plugin-transform-shorthand-properties@7.18.6", "@babel/plugin-transform-shorthand-properties@7.22.5", "@babel/plugin-transform-spread@7.20.7", "@babel/plugin-transform-spread@7.22.5", "@babel/plugin-transform-sticky-regex@7.18.6", "@babel/plugin-transform-sticky-regex@7.22.5", "@babel/plugin-transform-template-literals@7.18.9", "@babel/plugin-transform-template-literals@7.22.5", "@babel/plugin-transform-typeof-symbol@7.18.9", "@babel/plugin-transform-typeof-symbol@7.22.5", "@babel/plugin-transform-typescript@7.21.3", "@babel/plugin-transform-typescript@7.22.10", "@babel/plugin-transform-typescript@7.4.5", "@babel/plugin-transform-unicode-escapes@7.21.5", "@babel/plugin-transform-unicode-escapes@7.22.10", "@babel/plugin-transform-unicode-property-regex@7.22.5", "@babel/plugin-transform-unicode-regex@7.18.6", "@babel/plugin-transform-unicode-regex@7.22.5", "@babel/plugin-transform-unicode-sets-regex@7.22.5", "@babel/preset-env@7.21.5", "@babel/preset-env@7.22.10", "@babel/preset-modules@0.1.5", "@babel/preset-modules@0.1.6-no-external-plugins", "@babel/regjsgen@0.8.0", "@babel/template@7.21.9", "@babel/template@7.22.5", "@babel/traverse@7.21.5", "@babel/types@7.21.5", "@babel/types@7.22.10", "@cnakazawa/watch@1.0.4", "@ember-data/-build-infra@3.12.0", "@ember-data/adapter@3.12.0", "@ember-data/canary-features@3.12.0", "@ember-data/model@3.12.0", "@ember-data/serializer@3.12.0", "@ember-data/store@3.12.0", "@ember/edition-utils@1.2.0", "@ember/jquery@0.6.1", "@ember/optional-features@0.7.0", "@ember/ordered-set@2.0.3", "@ember/test-helpers@1.7.3", "@embroider/macros@1.13.1", "@embroider/shared-internals@2.4.0", "@glimmer/di@0.2.1", "@glimmer/env@0.1.7", "@glimmer/interfaces@0.47.9", "@glimmer/resolver@0.4.3", "@glimmer/syntax@0.47.9", "@glimmer/util@0.47.9", "@jridgewell/gen-mapping@0.3.3", "@jridgewell/resolve-uri@3.1.0", "@jridgewell/set-array@1.1.2", "@jridgewell/sourcemap-codec@1.4.14", "@jridgewell/sourcemap-codec@1.4.15", "@jridgewell/trace-mapping@0.3.18", "@mrmlnc/readdir-enhanced@2.2.1", "@nodelib/fs.scandir@2.1.4", "@nodelib/fs.stat@1.1.3", "@nodelib/fs.stat@2.0.4", "@nodelib/fs.walk@1.2.6", "@octokit/rest@15.18.3", "@paulcbetts/vueify@9.4.3", "@simple-dom/interface@1.4.0", "@sindresorhus/is@0.7.0", "@types/body-parser@1.19.2", "@types/broccoli-plugin@1.3.0", "@types/chai@4.3.5", "@types/chai-as-promised@7.1.5", "@types/connect@3.4.35", "@types/estree@1.0.1", "@types/express@4.17.17", "@types/express-serve-static-core@4.17.35", "@types/mime@1.3.2", "@types/node@8.10.66", "@types/qs@6.9.7", "@types/range-parser@1.2.4", "@types/send@0.17.1", "@types/serve-static@1.15.1", "abab@1.0.4", "abbrev@1.0.9", "accepts@1.3.5", "accessibility-developer-tools@2.12.0", "acorn@1.2.2", "acorn@2.7.0", "acorn@6.4.2", "acorn@7.4.1", "acorn@8.0.5", "acorn-globals@1.0.9", "acorn-jsx@5.3.2", "after@0.8.2", "agent-base@4.3.0", "ajv@4.11.8", "ajv@6.12.6", "ajv@6.6.2", "align-text@0.1.4", "alphanum-sort@1.0.2", "amd-name-resolver@1.2.0", "amdefine@1.0.1", "ansi@0.3.1", "ansi-align@2.0.0", "ansi-colors@3.2.3", "ansi-escapes@1.4.0", "ansi-escapes@3.2.0", "ansi-html@0.0.7", "ansi-regex@3.0.0", "ansi-regex@3.0.1", "ansi-regex@4.1.1", "ansi-styles@2.2.1", "ansi-styles@4.3.0", "ansi-to-html@0.6.15", "ansicolors@0.2.1", "any-promise@1.3.0", "anymatch@2.0.0", "aot-test-generators@0.1.0", "appdmg@0.4.5", "archiver@0.11.0", "argparse@1.0.10", "array-buffer-byte-length@1.0.0", "array-find-index@1.0.2", "array-to-error@1.1.1", "array-to-sentence@1.1.0", "array-union@1.0.2", "array-union@2.1.0", "array-uniq@1.0.3", "array.prototype.reduce@1.0.5", "arraybuffer.slice@0.0.7", "asap@1.0.0", "asap@2.0.6", "asar@0.11.0", "asar@0.12.4", "asar@0.13.1", "asar@0.14.6", "asar@1.0.0", "asn1@0.2.4", "assert-never@1.2.1", "assert-plus@0.2.0", "assert-plus@1.0.0", "assertion-error@1.1.0", "ast-types@0.9.6", "astral-regex@1.0.0", "async@1.5.2", "async@2.6.4", "async-disk-cache@1.3.5", "asynckit@0.4.0", "at-least-node@1.0.0", "author-regex@1.0.0", "autoprefixer@6.7.7", "available-typed-arrays@1.0.5", "aws-sdk@2.0.31", "aws-sdk@2.847.0", "aws-sign2@0.6.0", "aws-sign2@0.7.0", "aws4@1.8.0", "babel-code-frame@6.26.0", "babel-core@6.26.3", "babel-generator@6.26.1", "babel-helper-builder-binary-assignment-operator-visitor@6.24.1", "babel-helper-builder-react-jsx@6.26.0", "babel-helper-call-delegate@6.24.1", "babel-helper-define-map@6.26.0", "babel-helper-explode-assignable-expression@6.24.1", "babel-helper-function-name@6.24.1", "babel-helper-get-function-arity@6.24.1", "babel-helper-hoist-variables@6.24.1", "babel-helper-optimise-call-expression@6.24.1", "babel-helper-regex@6.26.0", "babel-helper-remap-async-to-generator@6.24.1", "babel-helper-replace-supers@6.24.1", "babel-helpers@6.24.1", "babel-import-util@2.0.0", "babel-messages@6.23.0", "babel-plugin-array-includes@2.0.3", "babel-plugin-check-es2015-constants@6.22.0", "babel-plugin-debug-macros@0.1.11", "babel-plugin-debug-macros@0.2.0", "babel-plugin-ember-modules-api-polyfill@2.13.4", "babel-plugin-ember-modules-api-polyfill@2.6.0", "babel-plugin-ember-modules-api-polyfill@3.5.0", "babel-plugin-feature-flags@0.3.1", "babel-plugin-filter-imports@3.0.0", "babel-plugin-htmlbars-inline-precompile@1.0.0", "babel-plugin-htmlbars-inline-precompile@3.2.0", "babel-plugin-polyfill-corejs2@0.3.3", "babel-plugin-polyfill-corejs2@0.4.5", "babel-plugin-polyfill-corejs3@0.6.0", "babel-plugin-polyfill-corejs3@0.8.3", "babel-plugin-polyfill-regenerator@0.4.1", "babel-plugin-polyfill-regenerator@0.5.2", "babel-plugin-syntax-async-functions@6.13.0", "babel-plugin-syntax-async-generators@6.13.0", "babel-plugin-syntax-exponentiation-operator@6.13.0", "babel-plugin-syntax-flow@6.18.0", "babel-plugin-syntax-jsx@6.18.0", "babel-plugin-syntax-trailing-function-commas@6.22.0", "babel-plugin-transform-async-to-generator@6.24.1", "babel-plugin-transform-es2015-arrow-functions@6.22.0", "babel-plugin-transform-es2015-block-scoped-functions@6.22.0", "babel-plugin-transform-es2015-block-scoping@6.26.0", "babel-plugin-transform-es2015-classes@6.24.1", "babel-plugin-transform-es2015-computed-properties@6.24.1", "babel-plugin-transform-es2015-destructuring@6.23.0", "babel-plugin-transform-es2015-duplicate-keys@6.24.1", "babel-plugin-transform-es2015-for-of@6.23.0", "babel-plugin-transform-es2015-function-name@6.24.1", "babel-plugin-transform-es2015-literals@6.22.0", "babel-plugin-transform-es2015-modules-amd@6.24.1", "babel-plugin-transform-es2015-modules-commonjs@6.26.2", "babel-plugin-transform-es2015-modules-systemjs@6.24.1", "babel-plugin-transform-es2015-modules-umd@6.24.1", "babel-plugin-transform-es2015-object-super@6.24.1", "babel-plugin-transform-es2015-parameters@6.24.1", "babel-plugin-transform-es2015-shorthand-properties@6.24.1", "babel-plugin-transform-es2015-spread@6.22.0", "babel-plugin-transform-es2015-sticky-regex@6.24.1", "babel-plugin-transform-es2015-template-literals@6.22.0", "babel-plugin-transform-es2015-typeof-symbol@6.23.0", "babel-plugin-transform-es2015-unicode-regex@6.24.1", "babel-plugin-transform-exponentiation-operator@6.24.1", "babel-plugin-transform-flow-strip-types@6.22.0", "babel-plugin-transform-react-display-name@6.25.0", "babel-plugin-transform-react-jsx@6.24.1", "babel-plugin-transform-react-jsx-self@6.22.0", "babel-plugin-transform-react-jsx-source@6.22.0", "babel-plugin-transform-regenerator@6.26.0", "babel-plugin-transform-strict-mode@6.24.1", "babel-polyfill@6.26.0", "babel-preset-env@1.7.0", "babel-preset-es2016-node5@1.1.2", "babel-preset-flow@6.23.0", "babel-preset-react@6.24.1", "babel-register@6.26.0", "babel-runtime@6.26.0", "babel-template@6.26.0", "babel-traverse@6.26.0", "babel-types@6.26.0", "babel6-plugin-strip-class-callcheck@6.0.0", "babylon@6.18.0", "backbone@1.4.1", "backo2@1.0.2", "balanced-match@0.4.2", "base32-encode@1.1.1", "base64-arraybuffer@0.1.4", "base64-js@1.2.0", "base64-js@1.5.1", "base64id@2.0.0", "basic-auth@2.0.1", "bcrypt-pbkdf@1.0.2", "before-after-hook@1.4.0", "binary@0.3.0", "binaryextensions@2.3.0", "bl@0.9.5", "blob@0.0.5", "block-stream@0.0.9", "bluebird@3.5.2", "body@5.1.0", "boolbase@1.0.0", "boom@2.10.1", "bower@1.8.12", "bower-config@1.4.3", "bower-endpoint-parser@0.2.2", "boxen@1.3.0", "bplist-creator@0.0.8", "braces@3.0.2", "broccoli@3.5.2", "broccoli-amd-funnel@2.0.1", "broccoli-asset-rev@3.0.0", "broccoli-asset-rewrite@2.0.0", "broccoli-babel-transpiler@6.5.0", "broccoli-babel-transpiler@7.8.1", "broccoli-builder@0.18.14", "broccoli-caching-writer@2.3.1", "broccoli-caching-writer@3.0.3", "broccoli-clean-css@1.1.0", "broccoli-concat@3.7.3", "broccoli-config-loader@1.0.1", "broccoli-config-replace@1.1.2", "broccoli-file-creator@2.1.1", "broccoli-filter@1.3.0", "broccoli-funnel@1.2.0", "broccoli-funnel-reducer@1.0.0", "broccoli-kitchen-sink-helpers@0.2.9", "broccoli-less-single@1.2.0", "broccoli-lint-eslint@5.0.0", "broccoli-merge-trees@1.2.4", "broccoli-merge-trees@2.0.1", "broccoli-middleware@2.1.1", "broccoli-module-normalizer@1.3.0", "broccoli-module-unification-reexporter@1.0.0", "broccoli-node-api@1.7.0", "broccoli-node-info@1.1.0", "broccoli-node-info@2.1.0", "broccoli-node-info@2.2.0", "broccoli-output-wrapper@2.0.0", "broccoli-persistent-filter@1.4.4", "broccoli-plugin@1.1.0", "broccoli-plugin@2.1.0", "broccoli-plugin@3.1.0", "broccoli-rollup@4.1.1", "broccoli-slow-trees@3.1.0", "broccoli-source@2.1.2", "broccoli-source@3.0.0", "broccoli-source@3.0.1", "broccoli-sri-hash@2.1.2", "broccoli-stew@1.6.0", "broccoli-stew@2.1.0", "broccoli-string-replace@0.1.2", "broccoli-svg-optimizer@1.1.0", "broccoli-symbolizer@0.6.0", "broccoli-uglify-sourcemap@2.2.0", "browser-stdout@1.3.1", "browserslist@1.7.7", "browserslist@3.2.8", "browserslist@4.21.10", "browserslist@4.21.5", "bser@2.1.1", "btoa-lite@1.0.0", "buffer@4.9.2", "buffer-alloc@1.2.0", "buffer-alloc-unsafe@1.1.0", "buffer-crc32@0.2.13", "buffer-fill@1.0.0", "buffer-from@0.1.2", "buffer-from@1.1.1", "buffers@0.1.1", "builtins@1.0.3", "bytes@1.0.0", "bytes@3.0.0", "cacheable-request@2.1.4", "calculate-cache-key-for-tree@2.0.0", "call-me-maybe@1.0.2", "callsites@3.1.0", "camelcase@1.2.1", "camelcase@2.1.1", "camelcase@4.1.0", "camelcase-keys@2.1.0", "caniuse-api@1.6.1", "caniuse-db@1.0.30001187", "caniuse-lite@1.0.30000890", "caniuse-lite@1.0.30001489", "caniuse-lite@1.0.30001519", "capture-exit@2.0.0", "capture-stack-trace@1.0.1", "cardinal@1.0.0", "caseless@0.12.0", "center-align@0.1.3", "chai@4.2.0", "chainsaw@0.1.0", "chalk@1.1.3", "chalk@2.4.1", "chalk@3.0.0", "character-parser@1.2.1", "chardet@0.4.2", "chardet@0.7.0", "charm@1.0.2", "check-error@1.0.2", "cheerio@0.20.0", "cheerio@0.22.0", "chokidar@2.1.6", "chownr@1.1.4", "chromium-pickle-js@0.1.0", "chromium-pickle-js@0.2.0", "ci-info@1.6.0", "ci-info@2.0.0", "clap@1.2.3", "clean-base-url@1.0.0", "clean-css@3.4.28", "clean-css-promise@0.1.1", "cli-boxes@1.0.0", "cli-cursor@1.0.2", "cli-cursor@2.1.0", "cli-spinners@1.3.1", "cli-spinners@2.5.0", "cli-spinners@2.9.0", "cli-table@0.3.11", "cli-width@2.2.0", "cliui@2.1.0", "cliui@4.1.0", "clone-response@1.0.2", "co@4.6.0", "coa@1.0.4", "coffee-script@1.12.7", "color@0.11.4", "color-convert@0.5.3", "color-convert@2.0.1", "color-name@1.1.4", "color-string@0.3.0", "colormin@1.1.2", "colors@1.1.2", "colors@1.4.0", "combined-stream@1.0.7", "commander@2.1.0", "commander@2.17.1", "commander@2.20.3", "commander@2.6.0", "commander@2.8.1", "commander@4.1.1", "commander@7.2.0", "common-tags@1.8.0", "compare-version@0.1.2", "component-bind@1.0.0", "component-emitter@1.2.1", "component-inherit@0.0.3", "compress-commons@0.1.6", "compressible@2.0.18", "compression@1.7.4", "concat-stream@1.6.2", "configstore@3.1.2", "configstore@4.0.0", "connect@3.7.0", "console-ui@2.2.3", "console-ui@3.1.2", "consolidate@0.15.1", "constantinople@3.0.2", "continuable-cache@0.3.1", "convert-source-map@1.6.0", "cookie@0.4.2", "copy-anything@2.0.3", "copy-dereference@1.0.0", "core-js@2.5.7", "core-js-compat@3.30.2", "core-js-compat@3.32.0", "core-object@3.1.5", "cp-file@3.2.0", "crc32-stream@0.3.4", "create-error-class@3.0.2", "cross-spawn@5.1.0", "cross-spawn@7.0.3", "cross-spawn-async@2.2.5", "cross-spawn-promise@0.10.2", "cryptiles@2.0.5", "crypto-random-string@1.0.0", "cson@3.0.2", "cson-parser@1.3.5", "css@1.0.8", "css@2.2.4", "css-color-names@0.0.4", "css-parse@1.0.4", "css-parse@1.7.0", "css-parse@2.0.0", "css-select@1.2.0", "css-stringify@1.0.5", "css-what@2.1.3", "cssnano@3.10.0", "csso@2.0.0", "csso@2.3.2", "cssom@0.3.8", "cssstyle@0.2.37", "cuint@0.2.2", "currently-unhandled@0.4.1", "dag-map@2.0.2", "dashdash@1.14.1", "de-indent@1.0.2", "debug@3.1.0", "debug@3.2.6", "debug@3.2.7", "debug@4.3.4", "decompress-response@3.3.0", "decompress-zip@0.3.3", "deep-eql@3.0.1", "deep-is@0.1.3", "defaults@1.0.3", "define-properties@1.2.0", "defined@1.0.0", "delayed-stream@1.0.0", "detect-file@1.0.0", "detect-indent@4.0.0", "detect-indent@6.1.0", "detect-newline@3.1.0", "detective-less@1.0.2", "detective-sass@2.0.1", "detective-scss@1.0.1", "detective-stylus@1.0.0", "devtron@1.4.0", "diff@3.5.0", "diff@4.0.2", "dir-glob@2.2.2", "dir-glob@3.0.1", "doctrine@3.0.0", "dom-serializer@0.1.0", "domelementtype@1.1.3", "domelementtype@1.3.1", "domhandler@2.3.0", "domutils@1.5.1", "dot-prop@4.2.1", "ds-store@0.1.6", "duplexer3@0.1.4", "duplexer3@0.1.5", "eachr@3.3.0", "ecc-jsbn@0.1.2", "editions@2.3.1", "electron@3.0.13", "electron-compilers@5.9.0", "electron-download@4.1.1", "electron-forge@5.2.4", "electron-forge-template-angular2@1.0.6", "electron-forge-template-react@1.0.4", "electron-forge-template-react-typescript@1.0.6", "electron-forge-template-vue@1.0.3", "electron-installer-common@0.6.3", "electron-installer-debian@1.2.0", "electron-installer-dmg@0.2.1", "electron-installer-flatpak@0.8.0", "electron-installer-redhat@0.5.0", "electron-installer-snap@3.2.0", "electron-osx-sign@0.4.17", "electron-packager@11.2.1", "electron-prebuilt-compile@3.0.13", "electron-rebuild@1.11.0", "electron-squirrel-startup@1.0.0", "electron-to-chromium@1.3.75", "electron-to-chromium@1.4.402", "electron-to-chromium@1.4.404", "electron-to-chromium@1.4.487", "electron-windows-store@0.12.0", "electron-winstaller@2.7.0", "electron-wix-msi@2.2.0", "ember-ajax@5.0.0", "ember-assign-polyfill@2.7.2", "ember-assign-polyfill@2.7.3", "ember-cli@3.12.1", "ember-cli-app-version@3.2.0", "ember-cli-babel@6.18.0", "ember-cli-babel@7.24.0", "ember-cli-babel@7.26.11", "ember-cli-broccoli-sane-watcher@3.0.0", "ember-cli-dependency-checker@3.1.0", "ember-cli-eslint@5.1.0", "ember-cli-get-component-path-option@1.0.0", "ember-cli-htmlbars@2.0.5", "ember-cli-htmlbars@4.4.1", "ember-cli-htmlbars-inline-precompile@2.1.0", "ember-cli-import-polyfill@0.2.0", "ember-cli-inject-live-reload@2.0.1", "ember-cli-is-package-missing@1.0.0", "ember-cli-less@2.0.6", "ember-cli-lodash-subset@2.0.1", "ember-cli-moment-shim@3.8.0", "ember-cli-normalize-entity-name@1.0.0", "ember-cli-path-utils@1.0.0", "ember-cli-preprocess-registry@3.3.0", "ember-cli-sri@2.1.1", "ember-cli-string-utils@1.1.0", "ember-cli-template-lint@1.0.0-beta.3", "ember-cli-test-info@1.0.0", "ember-cli-test-loader@2.2.0", "ember-cli-typescript@2.0.2", "ember-cli-uglify@2.1.0", "ember-cli-version-checker@1.3.1", "ember-cli-version-checker@2.1.2", "ember-cli-version-checker@3.1.3", "ember-cli-version-checker@5.1.2", "ember-compatibility-helpers@1.2.6", "ember-data@3.12.0", "ember-electron@2.10.2", "ember-export-application-global@2.0.0", "ember-factory-for-polyfill@1.3.1", "ember-get-config@2.1.1", "ember-getowner-polyfill@2.2.0", "ember-inflector@3.0.1", "ember-inspector@3.13.2", "ember-load-initializers@2.0.0", "ember-macro-helpers@1.0.0", "ember-maybe-import-regenerator@0.1.6", "ember-moment@7.8.0", "ember-qunit@4.6.0", "ember-resolver@5.0.1", "ember-rfc176-data@0.3.18", "ember-rfc176-data@0.3.6", "ember-route-action-helper@2.0.8", "ember-router-generator@1.2.3", "ember-source@3.12.0", "ember-source-channel-url@1.2.0", "ember-svg-jar@1.2.2", "ember-template-lint@1.14.0", "ember-test-waiters@1.2.0", "ember-weakmap@3.3.1", "encode-utf8@1.0.3", "engine.io@3.6.1", "engine.io-client@3.5.3", "engine.io-parser@2.2.1", "entities@1.0.0", "entities@1.1.1", "entities@2.2.0", "env-paths@1.0.0", "env-paths@2.2.0", "errlop@2.2.0", "errno@0.1.7", "error@7.2.1", "es-abstract@1.13.0", "es-abstract@1.21.2", "es-array-method-boxes-properly@1.0.0", "es-set-tostringtag@2.0.1", "es-to-primitive@1.2.0", "es-to-primitive@1.2.1", "es6-promise@3.3.1", "es6-promise@4.2.8", "es6-promisify@5.0.0", "escodegen@1.14.3", "escodegen@1.8.1", "eslint@5.16.0", "eslint-plugin-ember@6.10.1", "eslint-plugin-ember-suave@1.0.0", "eslint-plugin-es@1.4.1", "eslint-plugin-node@9.2.0", "eslint-scope@4.0.3", "eslint-utils@1.4.3", "eslint-visitor-keys@1.3.0", "esm@3.2.25", "espree@5.0.1", "esprima@2.7.3", "esprima@3.0.0", "esprima@3.1.3", "esprima@4.0.1", "esquery@1.5.0", "esrecurse@4.3.0", "estraverse@1.9.3", "estraverse@4.2.0", "estraverse@5.3.0", "estree-walker@0.6.1", "esutils@2.0.2", "eventemitter3@4.0.7", "events@1.1.1", "events-to-array@1.1.2", "exact-version@1.0.2", "exec-file-sync@2.0.2", "exec-sh@0.3.6", "execa@0.4.0", "execa@0.7.0", "execa@3.4.0", "exists-sync@0.0.4", "exit@0.1.2", "exit-hook@1.1.1", "expand-tilde@2.0.2", "extend@3.0.2", "external-editor@1.1.1", "external-editor@2.2.0", "external-editor@3.1.0", "extract-opts@3.4.0", "extract-zip@1.7.0", "extsprintf@1.3.0", "fast-deep-equal@2.0.1", "fast-deep-equal@3.1.3", "fast-glob@2.2.7", "fast-glob@3.2.5", "fast-json-stable-stringify@2.0.0", "fast-levenshtein@2.0.6", "fast-sourcemap-concat@1.4.0", "fastq@1.10.1", "faye-websocket@0.10.0", "fb-watchman@2.0.2", "fd-slicer@1.0.1", "fd-slicer@1.1.0", "figures@1.7.0", "figures@2.0.0", "file-entry-cache@5.0.1", "file-url@3.0.0", "filesize@4.2.1", "fill-range@7.0.1", "find-index@1.1.0", "find-up@4.1.0", "find-up@5.0.0", "find-yarn-workspace-root@1.2.1", "findit2@2.2.3", "findup-sync@4.0.0", "fireworm@0.7.2", "flat@4.1.0", "flat-cache@2.0.1", "flatpak-bundler@0.1.3", "flatted@2.0.2", "flatten@1.0.3", "flatten-packages@0.1.4", "fmix@0.1.0", "follow-redirects@1.15.2", "for-each@0.3.3", "forever-agent@0.6.1", "form-data@2.1.4", "form-data@2.3.3", "from2@2.3.0", "fs-extra@0.24.0", "fs-extra@0.26.7", "fs-extra@0.30.0", "fs-extra@2.1.2", "fs-extra@4.0.3", "fs-extra@5.0.0", "fs-extra@6.0.1", "fs-extra@8.1.0", "fs-extra@9.1.0", "fs-merger@3.1.0", "fs-minipass@1.2.7", "fs-temp@1.2.1", "fs-xattr@0.1.17", "fstream@1.0.12", "function.prototype.name@1.1.5", "functional-red-black-tree@1.0.1", "functions-have-names@1.2.3", "gar@1.0.4", "gauge@1.2.7", "generate-function@2.3.1", "generate-object-property@1.2.0", "get-folder-size@2.0.1", "get-func-name@2.0.0", "get-installed-path@2.1.1", "get-intrinsic@1.2.1", "get-package-info@1.0.0", "get-stdin@4.0.1", "get-stream@3.0.0", "get-stream@5.2.0", "get-symbol-description@1.0.0", "getpass@0.1.7", "git-hooks-list@1.0.3", "git-repo-info@1.4.1", "git-repo-info@2.1.1", "git-repo-version@1.0.2", "glob@3.2.11", "glob@6.0.4", "glob@7.0.6", "glob@7.1.6", "glob@7.2.3", "glob-parent@3.1.0", "glob-parent@5.1.2", "glob-promise@3.4.0", "glob-to-regexp@0.3.0", "global-dirs@0.1.1", "global-modules@1.0.0", "global-prefix@1.0.2", "globals@9.18.0", "globalthis@1.0.3", "globalyzer@0.1.0", "globby@10.0.0", "globby@10.0.2", "globby@9.2.0", "globrex@0.1.2", "gonzales-pe@3.4.7", "gonzales-pe@4.3.0", "gopd@1.0.1", "got@6.7.1", "got@8.3.2", "graceful-fs@3.0.12", "graceful-fs@4.2.11", "graceful-readlink@1.0.1", "graphql@0.9.6", "graphql-tag@2.11.0", "growl@1.10.5", "growly@1.3.0", "handlebars@4.7.7", "har-schema@1.0.5", "har-schema@2.0.0", "har-validator@4.2.1", "har-validator@5.1.3", "has-ansi@2.0.0", "has-ansi@3.0.0", "has-bigints@1.0.2", "has-binary2@1.0.3", "has-cors@1.1.0", "has-flag@1.0.0", "has-flag@4.0.0", "has-property-descriptors@1.0.0", "has-proto@1.0.1", "has-symbol-support-x@1.4.2", "has-symbols@1.0.0", "has-symbols@1.0.3", "has-to-string-tag-x@1.4.1", "has-tostringtag@1.0.0", "hash-sum@1.0.2", "hawk@3.1.3", "he@1.2.0", "heimdalljs@0.3.3", "heimdalljs-fs-monitor@0.2.3", "heimdalljs-graph@0.3.5", "highlight.js@9.18.5", "hoek@2.16.3", "home-or-tmp@2.0.0", "homedir-polyfill@1.0.1", "html-comment-regex@1.1.2", "htmlparser2@3.10.0", "htmlparser2@3.8.3", "http-cache-semantics@3.8.1", "http-errors@1.6.3", "http-parser-js@0.5.8", "http-proxy@1.18.1", "http-proxy-agent@2.1.0", "http-signature@1.1.1", "http-signature@1.2.0", "https@1.0.0", "https-proxy-agent@2.2.4", "human-signals@1.1.1", "humanize-plus@1.8.2", "iconv-lite@0.4.19", "ieee754@1.1.13", "ignore@4.0.6", "ignore@5.1.8", "ignore@5.2.4", "ignore-by-default@1.0.1", "image-size@0.5.5", "import-fresh@3.3.0", "import-lazy@2.1.0", "imul@1.0.1", "imurmurhash@0.1.4", "include-path-searcher@0.1.0", "indent-string@2.1.0", "indexes-of@1.0.1", "indexof@0.0.1", "inflection@1.12.0", "inflection@1.13.4", "inline-source-map-comment@1.0.5", "inquirer@1.2.3", "inquirer@2.0.0", "inquirer@3.3.0", "inquirer@5.2.0", "inquirer@6.5.2", "internal-slot@1.0.5", "into-stream@3.1.0", "invariant@2.2.4", "is-absolute-url@2.1.0", "is-array-buffer@3.0.2", "is-bigint@1.0.4", "is-boolean-object@1.1.2", "is-buffer@2.0.3", "is-callable@1.1.4", "is-callable@1.2.7", "is-ci@1.2.1", "is-core-module@2.12.1", "is-core-module@2.13.0", "is-date-object@1.0.1", "is-date-object@1.0.5", "is-extglob@2.1.1", "is-finite@1.0.2", "is-git-url@1.0.0", "is-glob@3.1.0", "is-glob@4.0.1", "is-glob@4.0.3", "is-installed-globally@0.1.0", "is-my-ip-valid@1.0.0", "is-my-json-valid@2.20.6", "is-negative-zero@2.0.2", "is-npm@1.0.0", "is-number@7.0.0", "is-number-object@1.0.7", "is-obj@1.0.1", "is-object@1.0.2", "is-path-inside@1.0.1", "is-plain-obj@1.1.0", "is-plain-obj@2.1.0", "is-promise@1.0.1", "is-promise@2.1.0", "is-property@1.0.2", "is-redirect@1.0.0", "is-regex@1.0.4", "is-regex@1.1.4", "is-relative-path@1.0.2", "is-retry-allowed@1.1.0", "is-retry-allowed@1.2.0", "is-shared-array-buffer@1.0.2", "is-stream@2.0.0", "is-string@1.0.7", "is-svg@2.1.0", "is-symbol@1.0.2", "is-symbol@1.0.4", "is-type@0.0.1", "is-typed-array@1.1.10", "is-typedarray@1.0.0", "is-weakref@1.0.2", "is-what@3.12.0", "is-wsl@1.1.0", "isarray@0.0.1", "isarray@2.0.1", "isarray@2.0.5", "isbinaryfile@3.0.3", "istanbul@0.4.5", "isurl@1.0.0", "iterall@1.3.0", "jade@1.11.0", "jmespath@0.15.0", "jquery@3.7.0", "jquery-deferred@0.3.1", "js-base64@2.6.4", "js-string-escape@1.0.1", "js-tokens@3.0.2", "js-yaml@3.13.1", "js-yaml@3.14.1", "js-yaml@3.6.1", "js-yaml@3.7.0", "jsbn@0.1.1", "jsdom@7.2.2", "jsesc@0.3.0", "jsesc@1.3.0", "json-buffer@3.0.0", "json-schema@0.4.0", "json-schema-traverse@0.4.1", "json-stable-stringify-without-jsonify@1.0.1", "json-stringify-safe@5.0.1", "json5@2.2.3", "jsonfile@2.4.0", "jsonfile@6.1.0", "jsonpointer@5.0.1", "jsprim@1.4.2", "jstransformer@0.0.2", "keyv@3.0.0", "kind-of@6.0.3", "klaw@1.3.1", "klaw@3.0.0", "latest-version@3.1.0", "lazy-cache@1.0.4", "lazystream@0.1.0", "leek@0.0.24", "less@2.7.3", "less@3.13.1", "levn@0.3.0", "linkify-it@2.2.0", "livereload-js@2.4.0", "load-json-file@2.0.0", "loader.js@4.7.0", "locate-path@5.0.0", "locate-path@6.0.0", "lodash@2.4.2", "lodash@4.17.21", "lodash._baseassign@3.2.0", "lodash._basecopy@3.0.1", "lodash._baseflatten@3.1.4", "lodash._bindcallback@3.0.1", "lodash._createassigner@3.1.1", "lodash._getnative@3.9.1", "lodash._isiterateecall@3.0.9", "lodash._reinterpolate@3.0.0", "lodash.assign@3.2.0", "lodash.assignin@4.2.0", "lodash.bind@4.2.1", "lodash.castarray@4.4.0", "lodash.clonedeep@4.5.0", "lodash.debounce@3.1.1", "lodash.debounce@4.0.8", "lodash.defaults@4.2.0", "lodash.defaultsdeep@4.6.1", "lodash.difference@4.5.0", "lodash.filter@4.6.0", "lodash.find@4.6.0", "lodash.flatten@3.0.2", "lodash.flatten@4.4.0", "lodash.foreach@4.5.0", "lodash.get@4.4.2", "lodash.isarguments@3.1.0", "lodash.isarray@3.0.4", "lodash.keys@3.1.2", "lodash.map@4.6.0", "lodash.memoize@4.1.2", "lodash.merge@4.6.2", "lodash.omit@4.5.0", "lodash.pad@4.5.1", "lodash.padend@4.6.1", "lodash.padstart@4.6.1", "lodash.pick@4.4.0", "lodash.pull@4.1.0", "lodash.reduce@4.6.0", "lodash.reject@4.6.0", "lodash.restparam@3.6.1", "lodash.some@4.6.0", "lodash.template@4.5.0", "lodash.templatesettings@4.2.0", "lodash.uniq@4.5.0", "lodash.uniqby@4.7.0", "log-symbols@2.2.0", "longest@1.0.1", "loose-envify@1.4.0", "loud-rejection@1.6.0", "lower-case@1.1.4", "lowercase-keys@1.0.0", "lowercase-keys@1.0.1", "lru-cache@2.7.3", "lru-cache@4.1.5", "lru-cache@5.1.1", "lru-cache@6.0.0", "macos-alias@0.2.11", "macos-release@2.4.1", "make-dir@1.3.0", "make-dir@2.1.0", "makeerror@1.0.12", "map-obj@1.0.1", "markdown-it@8.4.2", "markdown-it-terminal@0.1.0", "math-expression-evaluator@1.3.7", "md5-hex@2.0.0", "md5-o-matic@0.1.1", "mdurl@1.0.1", "mem@1.1.0", "memory-streams@0.1.3", "meow@3.7.0", "merge-stream@2.0.0", "merge-trees@1.0.1", "merge2@1.4.1", "micromatch@4.0.2", "micromatch@4.0.5", "mime@1.2.11", "mime@1.4.1", "mime-db@1.36.0", "mime-types@2.1.20", "mimic-fn@1.2.0", "mimic-response@1.0.1", "minimatch@0.3.0", "minimist@0.2.4", "minimist@1.1.3", "minipass@2.9.0", "minizlib@1.3.3", "mkdirp@0.5.6", "mkdirp@1.0.4", "mkpath@0.1.0", "mksnapshot@0.3.5", "mocha@6.1.4", "moment@2.29.4", "moment-timezone@0.5.43", "morgan@1.10.0", "mout@1.2.4", "multiline@1.0.2", "murmur-32@0.2.0", "mustache@3.2.1", "mute-stream@0.0.6", "mute-stream@0.0.7", "mz@2.7.0", "najax@1.0.7", "nan@2.12.1", "native-request@1.0.8", "natives@1.1.6", "natural-compare@1.4.0", "negotiator@0.6.1", "neo-async@2.6.2", "nested-error-stacks@1.0.2", "nib@1.1.2", "no-case@2.3.2", "node-abi@2.19.3", "node-environment-flags@1.0.5", "node-fetch@2.6.1", "node-fetch@2.6.11", "node-gyp@3.8.0", "node-gyp@6.1.0", "node-int64@0.4.0", "node-modules-path@1.0.2", "node-notifier@5.4.5", "node-releases@2.0.11", "node-releases@2.0.13", "node-source-walk@3.3.0", "node-source-walk@4.2.0", "node-watch@0.7.3", "nodeify@1.0.1", "nodemon@1.19.0", "nopt@1.0.10", "nopt@3.0.6", "nopt@4.0.3", "normalize-path@3.0.0", "normalize-range@0.1.2", "normalize-url@1.9.1", "normalize-url@2.0.1", "npm-git-info@1.0.3", "npm-package-arg@6.1.1", "npm-run-path@1.0.0", "npm-run-path@4.0.1", "npmlog@2.0.4", "nth-check@1.0.2", "nugget@2.0.1", "num2fraction@1.2.2", "nwmatcher@1.4.4", "oauth-sign@0.8.2", "oauth-sign@0.9.0", "object-keys@0.4.0", "object.assign@4.1.0", "object.assign@4.1.4", "object.getownpropertydescriptors@2.0.3", "object.getownpropertydescriptors@2.1.6", "on-headers@1.0.2", "onetime@1.1.0", "onetime@2.0.1", "onetime@5.1.2", "opn@5.5.0", "optimist@0.3.7", "optionator@0.8.2", "ora@2.1.0", "ora@3.4.0", "os-name@3.1.0", "os-shim@0.1.3", "p-cancelable@0.4.1", "p-defer@2.1.0", "p-finally@2.0.1", "p-is-promise@1.1.0", "p-limit@2.3.0", "p-limit@3.1.0", "p-locate@4.1.0", "p-locate@5.0.0", "p-timeout@2.0.1", "package-json@4.0.1", "parent-module@1.0.1", "parse-author@2.0.0", "parse-color@1.0.0", "parse-passwd@1.0.0", "parse5@1.5.1", "parseqs@0.0.6", "parseuri@0.0.6", "passwd-user@1.2.1", "path-dirname@1.0.2", "path-exists@4.0.0", "path-is-inside@1.0.2", "path-key@1.0.0", "path-key@3.1.1", "path-parse@1.0.7", "path-type@2.0.0", "path-type@3.0.0", "path-type@4.0.0", "pathval@1.1.0", "pend@1.2.0", "performance-now@0.2.0", "performance-now@2.1.0", "picocolors@1.0.0", "picomatch@2.2.2", "picomatch@2.3.1", "pify@3.0.0", "pify@4.0.1", "pkg-dir@4.2.0", "plist@2.1.0", "plist@3.0.1", "portfinder@1.0.32", "postcss@5.2.18", "postcss-calc@5.3.1", "postcss-colormin@2.2.2", "postcss-convert-values@2.6.1", "postcss-discard-comments@2.0.4", "postcss-discard-duplicates@2.1.0", "postcss-discard-empty@2.1.0", "postcss-discard-overridden@0.1.1", "postcss-discard-unused@2.2.3", "postcss-filter-plugins@2.0.3", "postcss-merge-idents@2.1.7", "postcss-merge-longhand@2.0.2", "postcss-merge-rules@2.1.2", "postcss-message-helpers@2.0.0", "postcss-minify-font-values@1.0.5", "postcss-minify-gradients@1.0.5", "postcss-minify-params@1.2.2", "postcss-minify-selectors@2.1.1", "postcss-normalize-charset@1.1.1", "postcss-normalize-url@3.0.8", "postcss-ordered-values@2.2.3", "postcss-reduce-idents@2.4.0", "postcss-reduce-initial@1.0.1", "postcss-reduce-transforms@1.0.4", "postcss-selector-parser@2.2.3", "postcss-svgo@2.1.6", "postcss-unique-selectors@2.0.2", "postcss-value-parser@3.3.1", "postcss-zindex@2.2.0", "prelude-ls@1.1.2", "prepend-http@1.0.4", "prepend-http@2.0.0", "pretty-bytes@1.0.4", "printf@0.5.3", "private@0.1.8", "process-relative-require@1.0.0", "progress@2.0.3", "progress-stream@1.2.0", "promise@1.3.0", "promise@2.0.0", "promise@6.1.0", "promise@7.3.1", "promise.prototype.finally@3.1.4", "prr@1.0.1", "pruner@0.0.7", "psl@1.1.31", "pstree.remy@1.1.6", "punycode@1.3.2", "punycode@1.4.1", "punycode@2.1.1", "q@1.5.1", "qs@6.11.2", "qs@6.4.0", "qs@6.5.2", "query-string@4.3.4", "query-string@5.1.1", "querystring@0.2.0", "queue-microtask@1.2.2", "qunit@2.19.4", "qunit-dom@0.8.5", "random-path@0.1.2", "raw-body@1.1.7", "rcedit@1.1.2", "read-pkg@2.0.0", "read-pkg-up@2.0.0", "readable-stream@1.0.34", "readable-stream@1.1.14", "readable-stream@2.3.7", "readable-stream@2.3.8", "readable-stream@3.1.0", "readable-stream@3.6.2", "recast@0.11.23", "redent@1.0.0", "redeyed@1.0.1", "reduce-css-calc@1.3.0", "reduce-function-call@1.0.3", "regenerate@1.4.0", "regenerate-unicode-properties@10.1.0", "regenerator-runtime@0.10.5", "regenerator-runtime@0.11.1", "regenerator-runtime@0.9.6", "regenerator-transform@0.10.1", "regenerator-transform@0.15.1", "regenerator-transform@0.15.2", "regexp.prototype.flags@1.5.0", "regexpp@2.0.1", "regexpu-core@2.0.0", "regexpu-core@5.3.2", "registry-auth-token@3.4.0", "registry-url@3.1.0", "regjsgen@0.2.0", "regjsparser@0.1.5", "regjsparser@0.9.1", "repeating@2.0.1", "request@2.81.0", "request@2.88.0", "requirefresh@2.3.0", "requireindex@1.1.0", "requires-port@1.0.0", "resolve@1.1.7", "resolve@1.22.2", "resolve@1.22.4", "resolve@1.8.1", "resolve-dir@1.0.1", "resolve-from@4.0.0", "resolve-package@1.0.1", "resolve-package-path@3.1.0", "resolve-package-path@4.0.3", "resolve-path@1.4.0", "responselike@1.0.2", "restore-cursor@1.0.1", "restore-cursor@2.0.0", "reusify@1.0.4", "right-align@0.1.3", "rimraf@2.2.8", "rimraf@2.7.1", "rollup@1.32.1", "rollup-pluginutils@2.8.2", "rsvp@4.8.4", "run-async@2.3.0", "run-parallel@1.2.0", "rx@4.1.0", "rx-lite@4.0.8", "rx-lite-aggregates@4.0.8", "rxjs@6.6.3", "rxjs@6.6.7", "s3@4.4.0", "safe-array-concat@1.0.0", "safe-buffer@5.1.1", "safe-json-parse@1.0.1", "safe-regex-test@1.0.0", "safefs@4.2.0", "sander@0.5.1", "sane@4.1.0", "sanitize-filename@1.6.3", "sass-lookup@1.1.0", "sass.js@0.10.13", "sax@0.4.2", "sax@0.5.8", "sax@1.2.1", "semver@2.2.1", "semver@5.3.0", "semver@5.7.2", "semver@6.3.1", "semver@7.5.1", "semver@7.5.4", "semver-diff@2.1.0", "set-value@2.0.1", "setprototypeof@1.1.0", "shebang-command@2.0.0", "shebang-regex@3.0.0", "shellwords@0.1.1", "sigmund@1.0.1", "silent-error@1.1.0", "simple-html-tokenizer@0.5.11", "single-line-log@1.1.2", "slash@1.0.0", "slash@2.0.0", "slash@3.0.0", "slice-ansi@2.1.0", "snake-case@2.1.0", "sntp@1.0.9", "socket.io@2.5.0", "socket.io-adapter@1.1.2", "socket.io-client@2.5.0", "socket.io-parser@3.3.3", "socket.io-parser@3.4.3", "sorcery@0.10.0", "sort-keys@1.1.2", "sort-keys@2.0.0", "sort-object-keys@1.1.3", "sort-package-json@1.57.0", "source-map@0.1.43", "source-map@0.2.0", "source-map@0.4.4", "source-map@0.6.1", "source-map@0.7.3", "source-map-support@0.4.18", "source-map-support@0.5.9", "source-map-url@0.3.0", "sourcemap-codec@1.4.8", "sourcemap-validator@1.1.1", "spawn-args@0.2.0", "spawn-rx@3.0.0", "spawn-sync@1.0.15", "speedometer@0.1.4", "sprintf-js@1.0.3", "sprintf-js@1.1.1", "sri-toolbox@0.2.0", "sshpk@1.15.2", "stagehand@1.0.1", "statuses@1.4.0", "stream-buffers@2.2.0", "streamsink@1.2.0", "strict-uri-encode@1.1.0", "string-template@0.2.1", "string-width@2.1.1", "string.prototype.trim@1.2.7", "string.prototype.trimend@1.0.6", "string.prototype.trimstart@1.0.6", "string_decoder@0.10.31", "string_decoder@1.2.0", "string_decoder@1.3.0", "stringstream@0.0.6", "strip-ansi@4.0.0", "strip-bom@4.0.0", "strip-final-newline@2.0.0", "strip-indent@1.0.1", "styled_string@0.0.1", "stylus@0.54.5", "stylus@0.54.8", "stylus-lookup@1.0.2", "sudo-prompt@8.2.5", "sum-up@1.0.3", "sumchecker@2.0.2", "supports-color@2.0.0", "supports-color@3.2.3", "supports-color@6.0.0", "supports-color@7.2.0", "supports-preserve-symlinks-flag@1.0.0", "svgo@0.6.6", "svgo@0.7.2", "symbol-tree@3.2.4", "synchronous-promise@1.0.18", "table@5.4.6", "tabtab@2.2.2", "tap-parser@7.0.0", "tar@2.2.2", "tar@4.4.19", "tar-stream@0.4.7", "temp@0.8.3", "temp@0.9.0", "term-size@1.2.0", "terser@3.12.0", "testem@2.17.0", "text-table@0.2.0", "textextensions@2.6.0", "thenify@3.3.1", "thenify-all@1.6.0", "throttleit@0.0.2", "through2@0.2.3", "through2@3.0.2", "timed-out@4.0.1", "tiny-each-async@2.0.3", "tiny-glob@0.2.9", "tiny-lr@1.1.1", "tmp@0.0.29", "tmp@0.1.0", "tmp-promise@1.1.0", "tmpl@1.0.5", "tn1150@0.1.0", "to-array@0.1.4", "to-fast-properties@1.0.3", "to-regex-range@5.0.1", "touch@0.0.3", "touch@3.1.0", "tough-cookie@2.3.4", "tough-cookie@2.4.3", "toutsuite@0.6.0", "tr46@0.0.3", "transformers@2.1.0", "traverse@0.3.9", "tree-kill@1.2.2", "tree-sync@2.1.0", "trim-newlines@1.0.0", "trim-right@1.0.1", "truncate-utf8-bytes@1.0.2", "tslib@1.14.1", "tslib@1.9.3", "tunnel-agent@0.6.0", "tweetnacl@0.14.5", "type-check@0.3.2", "type-detect@4.0.8", "typechecker@4.11.0", "typed-array-length@1.0.4", "typedarray@0.0.6", "typescript@4.1.5", "typescript-memoize@1.1.1", "uc.micro@1.0.6", "uglify-js@2.2.5", "uglify-js@2.8.29", "uglify-js@3.12.8", "uglify-to-browserify@1.0.2", "unbox-primitive@1.0.2", "undefsafe@2.0.2", "underscore@1.13.6", "unicode-canonical-property-names-ecmascript@2.0.0", "unicode-match-property-ecmascript@2.0.0", "unicode-match-property-value-ecmascript@2.1.0", "unicode-property-aliases-ecmascript@1.0.4", "unicode-property-aliases-ecmascript@2.1.0", "union-value@1.0.1", "uniq@1.0.1", "uniqs@2.0.0", "unique-string@1.0.0", "universal-user-agent@2.1.0", "universalify@2.0.0", "unorm@1.6.0", "untildify@2.1.0", "unzip-response@2.0.1", "upath@1.1.2", "update-browserslist-db@1.0.11", "update-notifier@2.5.0", "uri-js@4.2.2", "url@0.10.3", "url-parse-lax@1.0.0", "url-parse-lax@3.0.0", "url-template@2.0.8", "url-to-options@1.0.1", "user-info@1.0.0", "username@1.0.1", "username@3.0.0", "utf8-byte-length@1.0.4", "util.promisify@1.1.2", "uuid@3.3.2", "uuid@3.4.0", "validate-npm-package-name@3.0.0", "vendors@1.0.4", "verror@1.10.0", "virtual-each@0.6.3", "void-elements@2.0.1", "vue-hot-reload-api@2.3.4", "vue-template-compiler@2.6.12", "vue-template-es2015-compiler@1.9.1", "walk-sync@0.2.7", "walk-sync@0.3.3", "walk-sync@2.2.0", "walker@1.0.8", "watch-detector@0.1.0", "watch-detector@1.0.2", "wcwidth@1.0.1", "webidl-conversions@2.0.1", "webidl-conversions@3.0.1", "websocket-driver@0.7.4", "websocket-extensions@0.1.4", "whatwg-url@5.0.0", "whatwg-url-compat@0.6.5", "whet.extend@0.9.9", "which@2.0.2", "which-boxed-primitive@1.0.2", "which-typed-array@1.1.9", "widest-line@2.0.1", "window-size@0.1.0", "windows-release@3.3.3", "with@4.0.3", "word-wrap@1.2.3", "wordwrap@0.0.2", "wordwrap@1.0.0", "workerpool@2.3.3", "wrench@1.5.9", "write@1.0.3", "write-file-atomic@2.4.2", "write-file-atomic@2.4.3", "ws@7.4.6", "xdg-basedir@3.0.0", "xml-name-validator@2.0.1", "xml2js@0.2.6", "xml2js@0.4.19", "xmlbuilder@0.4.2", "xmlbuilder@8.2.2", "xmlbuilder@9.0.7", "xmldom@0.1.27", "xmlhttprequest-ssl@1.6.3", "xtend@2.1.2", "xtend@4.0.2", "y18n@4.0.1", "yallist@3.1.1", "yallist@4.0.0", "yam@1.0.0", "yargs@12.0.5", "yargs@13.2.2", "yargs@13.3.2", "yargs@14.2.3", "yargs@3.10.0", "yargs@6.6.0", "yargs@7.0.2", "yargs-parser@11.1.1", "yargs-parser@13.0.0", "yargs-parser@13.1.2", "yargs-parser@15.0.1", "yargs-parser@4.2.1", "yargs-parser@5.0.0", "yargs-parser@9.0.2", "yargs-unparser@1.5.0", "yarn-or-npm@2.0.4", "yarn-or-npm@3.0.1", "yauzl@2.10.0", "yeast@0.1.2", "yocto-queue@0.1.0", "zip-folder@1.0.0", "zip-stream@0.4.1" ], "any": true, "baseline": false, "integrity_drift": 0, "license_changes": [], "new_vulnerabilities": [ { "aliases": [ "CVE-2026-48801" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48801", "percentile": 0.3357, "score": 0.00394 }, "fix_state": "fixed", "fixed_in": [ "5.0.1" ], "id": "GHSA-22p9-wv53-3rq4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "linkify-it", "severity": "High", "summary": "LinkifyIt#match scan loop has quadratic algorithmic complexity", "url": "https://github.com/advisories/GHSA-22p9-wv53-3rq4", "version": "2.2.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "14.3.1" ], "id": "GHSA-253c-mchw-3w2r", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "Medium", "summary": "markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds", "url": "https://github.com/advisories/GHSA-253c-mchw-3w2r", "version": "8.4.2" }, { "aliases": [ "CVE-2021-29060" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-29060", "percentile": 0.87887, "score": 0.03134 }, "fix_state": "fixed", "fixed_in": [ "1.5.5" ], "id": "GHSA-257v-vj4p-3w2h", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "color-string", "severity": "Medium", "summary": "Regular Expression Denial of Service (ReDOS)", "url": "https://github.com/advisories/GHSA-257v-vj4p-3w2h", "version": "0.3.0" }, { "aliases": [ "CVE-2026-32141" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-32141", "percentile": 0.57853, "score": 0.00839 }, "fix_state": "fixed", "fixed_in": [ "3.4.0" ], "id": "GHSA-25h7-pfq9-p65f", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "flatted", "severity": "High", "summary": "flatted vulnerable to unbounded recursion DoS in parse() revive phase", "url": "https://github.com/advisories/GHSA-25h7-pfq9-p65f", "version": "2.0.2" }, { "aliases": [ "CVE-2024-38355" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-38355", "percentile": 0.56843, "score": 0.00807 }, "fix_state": "fixed", "fixed_in": [ "2.5.1" ], "id": "GHSA-25hc-qcg6-38wj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io", "severity": "Medium", "summary": "socket.io has an unhandled 'error' event", "url": "https://github.com/advisories/GHSA-25hc-qcg6-38wj", "version": "2.5.0" }, { "aliases": [ "CVE-2026-83608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83608", "percentile": 0.49305, "score": 0.00612 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-27p8-2357-5qqv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: DocType `name` Injection Bypasses requireWellFormed", "url": "https://github.com/advisories/GHSA-27p8-2357-5qqv", "version": "0.1.27" }, { "aliases": [ "CVE-2026-84375" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84375", "percentile": 0.45503, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "3.15.2" ], "id": "GHSA-2883-xcg3-v3hh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources", "url": "https://github.com/advisories/GHSA-2883-xcg3-v3hh", "version": "3.7.0" }, { "aliases": [ "CVE-2025-69873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-69873", "percentile": 0.45842, "score": 0.00547 }, "fix_state": "fixed", "fixed_in": [ "6.14.0" ], "id": "GHSA-2g4f-4pwh-qvx6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ajv", "severity": "Medium", "summary": "ajv has ReDoS when using `$data` option", "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6", "version": "6.6.2" }, { "aliases": [ "CVE-2026-69185" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69185", "percentile": 0.50184, "score": 0.0063 }, "fix_state": "fixed", "fixed_in": [ "3.4.5" ], "id": "GHSA-2m8v-j782-fhvr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io-parser", "severity": "High", "summary": "Socket.IO: Zero-attachment Memory Exhaustion", "url": "https://github.com/advisories/GHSA-2m8v-j782-fhvr", "version": "3.4.3" }, { "aliases": [ "CVE-2026-113796" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-113796", "percentile": 0.1239, "score": 0.00219 }, "fix_state": "fixed", "fixed_in": [ "42.11.3" ], "id": "GHSA-2p8c-gr87-2676", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: SameSite cookie restrictions are not applied to windows opened from links", "url": "https://github.com/advisories/GHSA-2p8c-gr87-2676", "version": "3.0.13" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.13.0" ], "id": "GHSA-2pr6-76vf-7546", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "Denial of Service in js-yaml", "url": "https://github.com/advisories/GHSA-2pr6-76vf-7546", "version": "3.7.0" }, { "aliases": [ "CVE-2026-33916" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33916", "percentile": 0.20535, "score": 0.0028 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-2qvq-rjwj-gvw9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Medium", "summary": "Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection", "url": "https://github.com/advisories/GHSA-2qvq-rjwj-gvw9", "version": "4.7.7" }, { "aliases": [ "CVE-2026-41673" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41673", "percentile": 0.50817, "score": 0.00643 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-2v35-w6hq-6mfw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Uncontrolled recursion in XML serialization leads to DoS", "url": "https://github.com/advisories/GHSA-2v35-w6hq-6mfw", "version": "0.1.27" }, { "aliases": [ "CVE-2026-33937" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33937", "percentile": 0.79759, "score": 0.01907 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-2w6w-674q-4c4q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Critical", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion", "url": "https://github.com/advisories/GHSA-2w6w-674q-4c4q", "version": "4.7.7" }, { "aliases": [ "CVE-2019-10795" ], "ecosystem": "npm", "epss": { "cve": "CVE-2019-10795", "percentile": 0.65347, "score": 0.01089 }, "fix_state": "fixed", "fixed_in": [ "2.0.3" ], "id": "GHSA-332q-7ff2-57h2", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "undefsafe", "severity": "Medium", "summary": "Prototype Pollution in undefsafe", "url": "https://github.com/advisories/GHSA-332q-7ff2-57h2", "version": "2.0.2" }, { "aliases": [ "CVE-2015-8857" ], "ecosystem": "npm", "epss": { "cve": "CVE-2015-8857", "percentile": 0.8933, "score": 0.03559 }, "fix_state": "fixed", "fixed_in": [ "2.4.24" ], "id": "GHSA-34r7-q49f-h37c", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "uglify-js", "severity": "Critical", "summary": "Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js", "url": "https://github.com/advisories/GHSA-34r7-q49f-h37c", "version": "2.2.5" }, { "aliases": [ "CVE-2021-23337" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23337", "percentile": 0.97602, "score": 0.21333 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-35jh-r3h4-6jhm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash.template", "severity": "High", "summary": "Command Injection in lodash", "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "version": "4.5.0" }, { "aliases": [ "CVE-2026-34776" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34776", "percentile": 0.12956, "score": 0.00223 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-3c8v-cfp5-9885", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Out-of-bounds read in second-instance IPC on macOS and Linux", "url": "https://github.com/advisories/GHSA-3c8v-cfp5-9885", "version": "3.0.13" }, { "aliases": [ "CVE-2024-37890" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-37890", "percentile": 0.71668, "score": 0.01357 }, "fix_state": "fixed", "fixed_in": [ "7.5.10" ], "id": "GHSA-3h5v-q93c-6h6q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ws", "severity": "High", "summary": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "version": "7.4.6" }, { "aliases": [ "CVE-2026-33938" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33938", "percentile": 0.53978, "score": 0.00721 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-3mfm-83xf-c92r", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block", "url": "https://github.com/advisories/GHSA-3mfm-83xf-c92r", "version": "4.7.7" }, { "aliases": [ "CVE-2022-21718" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-21718", "percentile": 0.61117, "score": 0.00946 }, "fix_state": "fixed", "fixed_in": [ "13.6.6" ], "id": "GHSA-3p22-ghq8-v749", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Renderers can obtain access to random bluetooth device without permission in Electron", "url": "https://github.com/advisories/GHSA-3p22-ghq8-v749", "version": "3.0.13" }, { "aliases": [ "CVE-2026-114122" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114122", "percentile": 0.08238, "score": 0.00186 }, "fix_state": "fixed", "fixed_in": [ "42.11.6" ], "id": "GHSA-3qxv-5xgr-q7w9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Frame subscription trusts GPU-supplied frame geometry", "url": "https://github.com/advisories/GHSA-3qxv-5xgr-q7w9", "version": "3.0.13" }, { "aliases": [ "CVE-2026-33672" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33672", "percentile": 0.36831, "score": 0.00425 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-3v7f-55p6-f55p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "Medium", "summary": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching", "url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p", "version": "2.3.1" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-442j-39wm-28r2", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Low", "summary": "Handlebars.js has a Property Access Validation Bypass in container.lookup", "url": "https://github.com/advisories/GHSA-442j-39wm-28r2", "version": "4.7.7" }, { "aliases": [ "CVE-2022-29167" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-29167", "percentile": 0.65703, "score": 0.01101 }, "fix_state": "fixed", "fixed_in": [ "9.0.1" ], "id": "GHSA-44pw-h2cw-w3vq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "hawk", "severity": "High", "summary": "Uncontrolled Resource Consumption in Hawk", "url": "https://github.com/advisories/GHSA-44pw-h2cw-w3vq", "version": "3.1.3" }, { "aliases": [ "CVE-2022-22912" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-22912", "percentile": 0.85049, "score": 0.02553 }, "fix_state": "fixed", "fixed_in": [ "3.0.5" ], "id": "GHSA-4cpg-3vgw-4877", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "plist", "severity": "Critical", "summary": "Prototype pollution in Plist before 3.0.5 can cause denial of service", "url": "https://github.com/advisories/GHSA-4cpg-3vgw-4877", "version": "3.0.1" }, { "aliases": [ "CVE-2026-70609" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70609", "percentile": 0.44978, "score": 0.00532 }, "fix_state": "fixed", "fixed_in": [ "39.8.7" ], "id": "GHSA-4f78-qhmw-8j8m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter", "url": "https://github.com/advisories/GHSA-4f78-qhmw-8j8m", "version": "3.0.13" }, { "aliases": [ "CVE-2026-17495" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-17495", "percentile": 0.44156, "score": 0.00519 }, "fix_state": "fixed", "fixed_in": [ "2.31.0" ], "id": "GHSA-4p3w-j4w9-5jqw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "moment", "severity": "Medium", "summary": "moment vulnerable to Path Traversal via crafted non-string locale name", "url": "https://github.com/advisories/GHSA-4p3w-j4w9-5jqw", "version": "2.29.4" }, { "aliases": [ "CVE-2026-34767" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34767", "percentile": 0.1195, "score": 0.00215 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-4p4r-m79c-wq3v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: HTTP Response Header Injection in custom protocol handlers and webRequest", "url": "https://github.com/advisories/GHSA-4p4r-m79c-wq3v", "version": "3.0.13" }, { "aliases": [ "CVE-2023-43646" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-43646", "percentile": 0.72174, "score": 0.01383 }, "fix_state": "fixed", "fixed_in": [ "2.0.1" ], "id": "GHSA-4q6p-r6v2-jvc5", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "get-func-name", "severity": "High", "summary": "Chaijs/get-func-name vulnerable to ReDoS", "url": "https://github.com/advisories/GHSA-4q6p-r6v2-jvc5", "version": "2.0.0" }, { "aliases": [ "CVE-2026-5078" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-5078", "percentile": 0.26447, "score": 0.00332 }, "fix_state": "fixed", "fixed_in": [ "1.11.0" ], "id": "GHSA-4vj7-5mj6-jm8m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "morgan", "severity": "Medium", "summary": "morgan vulnerable to Log Forging via unneutralized control characters in :remote-user", "url": "https://github.com/advisories/GHSA-4vj7-5mj6-jm8m", "version": "1.10.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.1.1" ], "id": "GHSA-4vmm-mhcq-4x9j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "constantinople", "severity": "Critical", "summary": "Sandbox Bypass Leading to Arbitrary Code Execution in constantinople", "url": "https://github.com/advisories/GHSA-4vmm-mhcq-4x9j", "version": "3.0.2" }, { "aliases": [ "CVE-2026-83605" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83605", "percentile": 0.49306, "score": 0.00612 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-4w3w-2rp5-g8jm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed", "url": "https://github.com/advisories/GHSA-4w3w-2rp5-g8jm", "version": "0.1.27" }, { "aliases": [ "CVE-2022-25858" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25858", "percentile": 0.88347, "score": 0.03253 }, "fix_state": "fixed", "fixed_in": [ "4.8.1" ], "id": "GHSA-4wf5-vphf-c2xc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "terser", "severity": "High", "summary": "Terser insecure use of regular expressions leads to ReDoS", "url": "https://github.com/advisories/GHSA-4wf5-vphf-c2xc", "version": "3.12.0" }, { "aliases": [ "CVE-2018-16487" ], "ecosystem": "npm", "epss": { "cve": "CVE-2018-16487", "percentile": 0.74126, "score": 0.01491 }, "fix_state": "fixed", "fixed_in": [ "4.17.11" ], "id": "GHSA-4xc9-xhrj-v574", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "High", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-4xc9-xhrj-v574", "version": "2.4.2" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.0.0" ], "id": "GHSA-4xcv-9jjx-gfj3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "mem", "severity": "Medium", "summary": "Denial of Service in mem", "url": "https://github.com/advisories/GHSA-4xcv-9jjx-gfj3", "version": "1.1.0" }, { "aliases": [ "CVE-2026-59869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59869", "percentile": 0.47992, "score": 0.00585 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-52cp-r559-cp3m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: YAML merge-key chains can force quadratic CPU consumption", "url": "https://github.com/advisories/GHSA-52cp-r559-cp3m", "version": "3.7.0" }, { "aliases": [ "CVE-2026-34774" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34774", "percentile": 0.39297, "score": 0.00452 }, "fix_state": "fixed", "fixed_in": [ "39.8.1" ], "id": "GHSA-532v-xpq5-8h95", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Use-after-free in offscreen child window paint callback", "url": "https://github.com/advisories/GHSA-532v-xpq5-8h95", "version": "3.0.13" }, { "aliases": [ "CVE-2021-23382" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23382", "percentile": 0.85074, "score": 0.02557 }, "fix_state": "fixed", "fixed_in": [ "7.0.36" ], "id": "GHSA-566m-qj78-rww5", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "Medium", "summary": "Regular Expression Denial of Service in postcss", "url": "https://github.com/advisories/GHSA-566m-qj78-rww5", "version": "5.2.18" }, { "aliases": [ "CVE-2026-70603" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70603", "percentile": 0.02783, "score": 0.00132 }, "fix_state": "fixed", "fixed_in": [ "39.8.6" ], "id": "GHSA-5c9j-mhmv-5xgx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: shell.openPath path validation bypass via embedded null byte", "url": "https://github.com/advisories/GHSA-5c9j-mhmv-5xgx", "version": "3.0.13" }, { "aliases": [ "CVE-2021-32796" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-32796", "percentile": 0.71685, "score": 0.01358 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-5fg8-2547-mr8q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Medium", "summary": "Misinterpretation of malicious XML input", "url": "https://github.com/advisories/GHSA-5fg8-2547-mr8q", "version": "0.1.27" }, { "aliases": [ "CVE-2020-7789" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7789", "percentile": 0.75603, "score": 0.01587 }, "fix_state": "fixed", "fixed_in": [ "8.0.1" ], "id": "GHSA-5fw9-fq32-wv5p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "node-notifier", "severity": "Medium", "summary": "OS Command Injection in node-notifier", "url": "https://github.com/advisories/GHSA-5fw9-fq32-wv5p", "version": "5.4.5" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.15.1" ], "id": "GHSA-5p4m-2wfm-xmqj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) \u2014 CVE-2026-59870 fix not backported", "url": "https://github.com/advisories/GHSA-5p4m-2wfm-xmqj", "version": "3.7.0" }, { "aliases": [ "CVE-2026-34779" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34779", "percentile": 0.05571, "score": 0.00164 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-5rqw-r77c-jp79", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: AppleScript injection in app.moveToApplicationsFolder on macOS", "url": "https://github.com/advisories/GHSA-5rqw-r77c-jp79", "version": "3.0.13" }, { "aliases": [ "CVE-2026-33151" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33151", "percentile": 0.44387, "score": 0.00523 }, "fix_state": "fixed", "fixed_in": [ "3.4.4" ], "id": "GHSA-677m-j7p3-52f9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io-parser", "severity": "High", "summary": "socket.io allows an unbounded number of binary attachments", "url": "https://github.com/advisories/GHSA-677m-j7p3-52f9", "version": "3.4.3" }, { "aliases": [ "CVE-2023-45133" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-45133", "percentile": 0.44506, "score": 0.00525 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-67hx-6x53-jw92", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "babel-traverse", "severity": "Critical", "summary": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "version": "6.26.0" }, { "aliases": [ "CVE-2024-36751" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-36751", "percentile": 0.45686, "score": 0.00544 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-6fx8-h7jm-663j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "parseuri", "severity": "Medium", "summary": "parse-uri Regular expression Denial of Service (ReDoS)", "url": "https://github.com/advisories/GHSA-6fx8-h7jm-663j", "version": "0.0.6" }, { "aliases": [ "CVE-2026-45623" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-45623", "percentile": 0.49087, "score": 0.00608 }, "fix_state": "fixed", "fixed_in": [ "8.5.12" ], "id": "GHSA-6g55-p6wh-862q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "High", "summary": "PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments", "url": "https://github.com/advisories/GHSA-6g55-p6wh-862q", "version": "5.2.18" }, { "aliases": [ "CVE-2026-83610" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83610", "percentile": 0.48209, "score": 0.0059 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-6gmq-8vp8-gcm6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Medium", "summary": "xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization", "url": "https://github.com/advisories/GHSA-6gmq-8vp8-gcm6", "version": "0.1.27" }, { "aliases": [ "CVE-2026-83611" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83611", "percentile": 0.49684, "score": 0.00619 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-6h8r-xr42-gp59", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Medium", "summary": "xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content", "url": "https://github.com/advisories/GHSA-6h8r-xr42-gp59", "version": "0.1.27" }, { "aliases": [ "CVE-2024-46993" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-46993", "percentile": 0.0475, "score": 0.00156 }, "fix_state": "fixed", "fixed_in": [ "28.3.2" ], "id": "GHSA-6r2x-8pq8-9489", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron vulnerable to Heap Buffer Overflow in NativeImage", "url": "https://github.com/advisories/GHSA-6r2x-8pq8-9489", "version": "3.0.13" }, { "aliases": [ "CVE-2026-48988" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48988", "percentile": 0.3186, "score": 0.00379 }, "fix_state": "fixed", "fixed_in": [ "14.2.0" ], "id": "GHSA-6v5v-wf23-fmfq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "Medium", "summary": "markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations", "url": "https://github.com/advisories/GHSA-6v5v-wf23-fmfq", "version": "8.4.2" }, { "aliases": [ "CVE-2022-21670" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-21670", "percentile": 0.8315, "score": 0.02282 }, "fix_state": "fixed", "fixed_in": [ "12.3.2" ], "id": "GHSA-6vfc-qv3f-vr6c", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "Medium", "summary": "Uncontrolled Resource Consumption in markdown-it", "url": "https://github.com/advisories/GHSA-6vfc-qv3f-vr6c", "version": "8.4.2" }, { "aliases": [ "CVE-2020-15096" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-15096", "percentile": 0.56934, "score": 0.0081 }, "fix_state": "fixed", "fixed_in": [ "6.1.11" ], "id": "GHSA-6vrv-94jv-crrg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Context isolation bypass via Promise in Electron", "url": "https://github.com/advisories/GHSA-6vrv-94jv-crrg", "version": "3.0.13" }, { "aliases": [ "CVE-2023-26136" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-26136", "percentile": 0.85496, "score": 0.02627 }, "fix_state": "fixed", "fixed_in": [ "4.1.3" ], "id": "GHSA-72xf-g2v4-qvf3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tough-cookie", "severity": "Medium", "summary": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "version": "2.4.3" }, { "aliases": [ "CVE-2026-24001" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24001", "percentile": 0.49541, "score": 0.00616 }, "fix_state": "fixed", "fixed_in": [ "4.0.4" ], "id": "GHSA-73rr-hh4g-fpgx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "diff", "severity": "Low", "summary": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch", "url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx", "version": "4.0.2" }, { "aliases": [ "CVE-2025-7339" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-7339", "percentile": 0.10901, "score": 0.00208 }, "fix_state": "fixed", "fixed_in": [ "1.1.0" ], "id": "GHSA-76c9-3jph-rj3q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "on-headers", "severity": "Low", "summary": "on-headers is vulnerable to http response header manipulation", "url": "https://github.com/advisories/GHSA-76c9-3jph-rj3q", "version": "1.0.2" }, { "aliases": [ "CVE-2023-0842" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-0842", "percentile": 0.72562, "score": 0.01404 }, "fix_state": "fixed", "fixed_in": [ "0.5.0" ], "id": "GHSA-776f-qx25-q3cc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xml2js", "severity": "Medium", "summary": "xml2js is vulnerable to prototype pollution", "url": "https://github.com/advisories/GHSA-776f-qx25-q3cc", "version": "0.4.19" }, { "aliases": [ "CVE-2022-29257" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-29257", "percentile": 0.60199, "score": 0.00916 }, "fix_state": "fixed", "fixed_in": [ "15.5.0" ], "id": "GHSA-77xc-hjv8-ww97", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "AutoUpdater module fails to validate certain nested components of the bundle", "url": "https://github.com/advisories/GHSA-77xc-hjv8-ww97", "version": "3.0.13" }, { "aliases": [ "CVE-2023-44270" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-44270", "percentile": 0.62035, "score": 0.00973 }, "fix_state": "fixed", "fixed_in": [ "8.4.31" ], "id": "GHSA-7fh5-64p2-3v2j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "Medium", "summary": "PostCSS line return parsing error", "url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "version": "5.2.18" }, { "aliases": [ "CVE-2023-44402" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-44402", "percentile": 0.10829, "score": 0.00207 }, "fix_state": "fixed", "fixed_in": [ "22.3.24" ], "id": "GHSA-7m48-wc93-9g85", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "ASAR Integrity bypass via filetype confusion in electron", "url": "https://github.com/advisories/GHSA-7m48-wc93-9g85", "version": "3.0.13" }, { "aliases": [ "CVE-2021-33623" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-33623", "percentile": 0.87061, "score": 0.02925 }, "fix_state": "fixed", "fixed_in": [ "3.0.1" ], "id": "GHSA-7p7h-4mm5-852v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "trim-newlines", "severity": "High", "summary": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "version": "1.0.0" }, { "aliases": [ "CVE-2026-19693" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-19693", "percentile": 0.39341, "score": 0.00453 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-7pqw-9j4j-h8q3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "extract-zip", "severity": "High", "summary": "extract-zip allows arbitrary file writes through symlink archive entries", "url": "https://github.com/advisories/GHSA-7pqw-9j4j-h8q3", "version": "1.7.0" }, { "aliases": [ "CVE-2021-28092" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-28092", "percentile": 0.81012, "score": 0.02027 }, "fix_state": "fixed", "fixed_in": [ "4.2.2" ], "id": "GHSA-7r28-3m3f-r2pr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "is-svg", "severity": "High", "summary": "Regular Expression Denial of Service (ReDoS)", "url": "https://github.com/advisories/GHSA-7r28-3m3f-r2pr", "version": "2.1.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-7rx3-28cr-v5wh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Medium", "summary": "Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry", "url": "https://github.com/advisories/GHSA-7rx3-28cr-v5wh", "version": "4.7.7" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "10.4.1" ], "id": "GHSA-7wwv-vh3v-89cq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "highlight.js", "severity": "Medium", "summary": "ReDOS vulnerabities: multiple grammars", "url": "https://github.com/advisories/GHSA-7wwv-vh3v-89cq", "version": "9.18.5" }, { "aliases": [ "CVE-2023-39956" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-39956", "percentile": 0.42217, "score": 0.00491 }, "fix_state": "fixed", "fixed_in": [ "22.3.19" ], "id": "GHSA-7x97-j373-85x5", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron vulnerable to out-of-package code execution when launched with arbitrary cwd", "url": "https://github.com/advisories/GHSA-7x97-j373-85x5", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34771" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34771", "percentile": 0.21841, "score": 0.00292 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-8337-3p73-46f4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks", "url": "https://github.com/advisories/GHSA-8337-3p73-46f4", "version": "3.0.13" }, { "aliases": [ "CVE-2026-83613" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83613", "percentile": 0.48893, "score": 0.00604 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-8344-3jmq-59r6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Quadratic-time attribute deduplication", "url": "https://github.com/advisories/GHSA-8344-3jmq-59r6", "version": "0.1.27" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.13.1" ], "id": "GHSA-8j8c-7jfh-h6hx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "Code Injection in js-yaml", "url": "https://github.com/advisories/GHSA-8j8c-7jfh-h6hx", "version": "3.7.0" }, { "aliases": [ "CVE-2026-106446" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106446", "percentile": 0.56143, "score": 0.00786 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-8r5x-fm3f-whwj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Critical", "summary": "Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)", "url": "https://github.com/advisories/GHSA-8r5x-fm3f-whwj", "version": "4.7.7" }, { "aliases": [ "CVE-2026-83615" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83615", "percentile": 0.48211, "score": 0.0059 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-965w-775f-mr7g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Quadratic-memory consumption", "url": "https://github.com/advisories/GHSA-965w-775f-mr7g", "version": "0.1.27" }, { "aliases": [ "CVE-2026-48779" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48779", "percentile": 0.72944, "score": 0.01426 }, "fix_state": "fixed", "fixed_in": [ "7.5.11" ], "id": "GHSA-96hv-2xvq-fx4p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ws", "severity": "High", "summary": "ws: Memory exhaustion DoS from tiny fragments and data chunks", "url": "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "version": "7.4.6" }, { "aliases": [ "CVE-2026-34766" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34766", "percentile": 0.05691, "score": 0.00165 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-9899-m83m-qhpj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: USB device selection not validated against filtered device list", "url": "https://github.com/advisories/GHSA-9899-m83m-qhpj", "version": "3.0.13" }, { "aliases": [ "CVE-2026-113797" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-113797", "percentile": 0.47998, "score": 0.00586 }, "fix_state": "fixed", "fixed_in": [ "42.11.1" ], "id": "GHSA-98mx-cjp9-gchm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Extension tabs.query returns tab URLs and titles without the tabs permission", "url": "https://github.com/advisories/GHSA-98mx-cjp9-gchm", "version": "3.0.13" }, { "aliases": [ "CVE-2026-114121" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114121", "percentile": 0.12409, "score": 0.00219 }, "fix_state": "fixed", "fixed_in": [ "42.11.3" ], "id": "GHSA-997q-gvvc-jwmx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: openExternal permission requests can be attributed to the wrong origin", "url": "https://github.com/advisories/GHSA-997q-gvvc-jwmx", "version": "3.0.13" }, { "aliases": [ "CVE-2026-33939" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33939", "percentile": 0.50065, "score": 0.00627 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-9cx6-37pm-9jff", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation", "url": "https://github.com/advisories/GHSA-9cx6-37pm-9jff", "version": "4.7.7" }, { "aliases": [ "CVE-2026-70608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70608", "percentile": 0.37305, "score": 0.00431 }, "fix_state": "fixed", "fixed_in": [ "39.8.10" ], "id": "GHSA-9f4c-93c8-jc8g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path", "url": "https://github.com/advisories/GHSA-9f4c-93c8-jc8g", "version": "3.0.13" }, { "aliases": [ "CVE-2026-87859" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-87859", "percentile": 0.35287, "score": 0.0041 }, "fix_state": "fixed", "fixed_in": [ "1.12.1" ], "id": "GHSA-9f6g-j8ch-79g4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "morgan", "severity": "Medium", "summary": "morgan vulnerable to Log Injection via unescaped double quote in quoted log fields", "url": "https://github.com/advisories/GHSA-9f6g-j8ch-79g4", "version": "1.10.0" }, { "aliases": [ "CVE-2026-70599" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70599", "percentile": 0.09067, "score": 0.00193 }, "fix_state": "fixed", "fixed_in": [ "39.8.7" ], "id": "GHSA-9pf5-hg6p-4pwp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin", "url": "https://github.com/advisories/GHSA-9pf5-hg6p-4pwp", "version": "3.0.13" }, { "aliases": [ "CVE-2026-102676" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102676", "percentile": 0.41342, "score": 0.00479 }, "fix_state": "fixed", "fixed_in": [ "41.10.6" ], "id": "GHSA-9qh4-3jw8-366w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: can enable Node.js integration in Web Workers despite embedder restrictions", "url": "https://github.com/advisories/GHSA-9qh4-3jw8-366w", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34772" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34772", "percentile": 0.11522, "score": 0.00212 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-9w97-2464-8783", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Use-after-free in download save dialog callback", "url": "https://github.com/advisories/GHSA-9w97-2464-8783", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34769" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34769", "percentile": 0.22808, "score": 0.003 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-9wfr-w7mm-pc7f", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference", "url": "https://github.com/advisories/GHSA-9wfr-w7mm-pc7f", "version": "3.0.13" }, { "aliases": [ "CVE-2026-33671" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33671", "percentile": 0.36317, "score": 0.0042 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-c2c7-rcm5-vvqj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "High", "summary": "Picomatch has a ReDoS vulnerability via extglob quantifiers", "url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj", "version": "2.3.1" }, { "aliases": [ "CVE-2020-36604" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-36604", "percentile": 0.69193, "score": 0.01241 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-c429-5p7v-vgjp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "hoek", "severity": "High", "summary": "hoek subject to prototype pollution via the clone function.", "url": "https://github.com/advisories/GHSA-c429-5p7v-vgjp", "version": "2.16.3" }, { "aliases": [ "CVE-2026-83616" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83616", "percentile": 0.49305, "score": 0.00612 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-c7q8-3ch8-vqpv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Processing Instruction Target Injection Bypasses requireWellFormed", "url": "https://github.com/advisories/GHSA-c7q8-3ch8-vqpv", "version": "0.1.27" }, { "aliases": [ "CVE-2015-8858" ], "ecosystem": "npm", "epss": { "cve": "CVE-2015-8858", "percentile": 0.83762, "score": 0.02358 }, "fix_state": "fixed", "fixed_in": [ "2.6.0" ], "id": "GHSA-c9f4-xj24-8jqx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "uglify-js", "severity": "High", "summary": "Regular Expression Denial of Service in uglify-js", "url": "https://github.com/advisories/GHSA-c9f4-xj24-8jqx", "version": "2.2.5" }, { "aliases": [ "CVE-2023-32695" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-32695", "percentile": 0.64544, "score": 0.01059 }, "fix_state": "fixed", "fixed_in": [ "3.3.4" ], "id": "GHSA-cqmj-92xf-r6r9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io-parser", "severity": "Medium", "summary": "Insufficient validation when decoding a Socket.IO packet", "url": "https://github.com/advisories/GHSA-cqmj-92xf-r6r9", "version": "3.3.3" }, { "aliases": [ "CVE-2022-39353" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-39353", "percentile": 0.7576, "score": 0.01597 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-crh6-fp67-6883", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Critical", "summary": "xmldom allows multiple root nodes in a DOM", "url": "https://github.com/advisories/GHSA-crh6-fp67-6883", "version": "0.1.27" }, { "aliases": [ "CVE-2024-28849" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-28849", "percentile": 0.64154, "score": 0.01044 }, "fix_state": "fixed", "fixed_in": [ "1.15.6" ], "id": "GHSA-cxjh-pqwp-8mfp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "Medium", "summary": "follow-redirects' Proxy-Authorization header kept across hosts", "url": "https://github.com/advisories/GHSA-cxjh-pqwp-8mfp", "version": "1.15.2" }, { "aliases": [ "CVE-2026-70611" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70611", "percentile": 0.08241, "score": 0.00186 }, "fix_state": "fixed", "fixed_in": [ "39.8.9" ], "id": "GHSA-f2r8-jv7c-xqmp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: DevTools embedder handler executes arbitrary files via shell open", "url": "https://github.com/advisories/GHSA-f2r8-jv7c-xqmp", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34781" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34781", "percentile": 0.03678, "score": 0.00144 }, "fix_state": "fixed", "fixed_in": [ "39.8.5" ], "id": "GHSA-f37v-82c4-4x64", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Crash in clipboard.readImage() on malformed clipboard image data", "url": "https://github.com/advisories/GHSA-f37v-82c4-4x64", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34765" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34765", "percentile": 0.22693, "score": 0.003 }, "fix_state": "fixed", "fixed_in": [ "39.8.5" ], "id": "GHSA-f3pv-wv63-48x8", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Named window.open targets not scoped to the opener's browsing context", "url": "https://github.com/advisories/GHSA-f3pv-wv63-48x8", "version": "3.0.13" }, { "aliases": [ "CVE-2026-41674" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41674", "percentile": 0.46962, "score": 0.00565 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-f6ww-3ggp-fr8h", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom has XML injection through unvalidated DocumentType serialization", "url": "https://github.com/advisories/GHSA-f6ww-3ggp-fr8h", "version": "0.1.27" }, { "aliases": [ "CVE-2020-4075" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-4075", "percentile": 0.67575, "score": 0.01175 }, "fix_state": "fixed", "fixed_in": [ "7.2.4" ], "id": "GHSA-f9mq-jph6-9mhm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Arbitrary file read via window-open IPC in Electron", "url": "https://github.com/advisories/GHSA-f9mq-jph6-9mhm", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70610" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70610", "percentile": 0.46852, "score": 0.00564 }, "fix_state": "fixed", "fixed_in": [ "39.8.9" ], "id": "GHSA-ff2p-hmqr-hxm4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: contextBridge object copy honors prototype setters", "url": "https://github.com/advisories/GHSA-ff2p-hmqr-hxm4", "version": "3.0.13" }, { "aliases": [ "CVE-2025-7783" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-7783", "percentile": 0.78615, "score": 0.0181 }, "fix_state": "fixed", "fixed_in": [ "2.5.4" ], "id": "GHSA-fjxv-7rqg-78g4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "form-data", "severity": "Critical", "summary": "form-data uses unsafe random function in form-data for choosing boundary", "url": "https://github.com/advisories/GHSA-fjxv-7rqg-78g4", "version": "2.3.3" }, { "aliases": [ "CVE-2018-3721" ], "ecosystem": "npm", "epss": { "cve": "CVE-2018-3721", "percentile": 0.83673, "score": 0.02347 }, "fix_state": "fixed", "fixed_in": [ "4.17.5" ], "id": "GHSA-fvqr-27wr-82fm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Medium", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-fvqr-27wr-82fm", "version": "2.4.2" }, { "aliases": [ "CVE-2026-113800" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-113800", "percentile": 0.15316, "score": 0.00241 }, "fix_state": "fixed", "fixed_in": [ "42.11.3" ], "id": "GHSA-fw47-9c62-h3vw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: HID and USB permission checks can be attributed to the wrong origin", "url": "https://github.com/advisories/GHSA-fw47-9c62-h3vw", "version": "3.0.13" }, { "aliases": [ "CVE-2026-69153" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69153", "percentile": 0.39208, "score": 0.00451 }, "fix_state": "fixed", "fixed_in": [ "8.5.23" ], "id": "GHSA-fxqj-rqcc-2cmp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "Medium", "summary": "PostCSS: incomplete fix of GHSA-6g55-p6wh-862q \u2014 attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset", "url": "https://github.com/advisories/GHSA-fxqj-rqcc-2cmp", "version": "5.2.18" }, { "aliases": [ "CVE-2024-6783" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-6783", "percentile": 0.4325, "score": 0.00506 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-g3ch-rx76-35fx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "vue-template-compiler", "severity": "Medium", "summary": "vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)", "url": "https://github.com/advisories/GHSA-g3ch-rx76-35fx", "version": "2.6.12" }, { "aliases": [ "CVE-2020-7751" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7751", "percentile": 0.74531, "score": 0.01516 }, "fix_state": "fixed", "fixed_in": [ "1.1.1" ], "id": "GHSA-g6ww-v8xp-vmwg", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "pathval", "severity": "High", "summary": "Prototype pollution in pathval", "url": "https://github.com/advisories/GHSA-g6ww-v8xp-vmwg", "version": "1.1.0" }, { "aliases": [ "CVE-2024-47068" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-47068", "percentile": 0.54706, "score": 0.00742 }, "fix_state": "fixed", "fixed_in": [ "2.79.2" ], "id": "GHSA-gcx4-mw62-g8wm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "rollup", "severity": "High", "summary": "DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS", "url": "https://github.com/advisories/GHSA-gcx4-mw62-g8wm", "version": "1.32.1" }, { "aliases": [ "CVE-2026-102674" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102674", "percentile": 0.14581, "score": 0.00236 }, "fix_state": "fixed", "fixed_in": [ "41.10.6" ], "id": "GHSA-gr2m-v5gq-v685", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions", "url": "https://github.com/advisories/GHSA-gr2m-v5gq-v685", "version": "3.0.13" }, { "aliases": [ "CVE-2026-114124" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114124", "percentile": 0.08164, "score": 0.00185 }, "fix_state": "fixed", "fixed_in": [ "42.11.6" ], "id": "GHSA-h3v5-h239-pg29", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry", "url": "https://github.com/advisories/GHSA-h3v5-h239-pg29", "version": "3.0.13" }, { "aliases": [ "CVE-2026-53550" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53550", "percentile": 0.35866, "score": 0.00415 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-h67p-54hq-rp68", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases", "url": "https://github.com/advisories/GHSA-h67p-54hq-rp68", "version": "3.7.0" }, { "aliases": [ "CVE-2021-21366" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-21366", "percentile": 0.71308, "score": 0.0134 }, "fix_state": "fixed", "fixed_in": [ "0.5.0" ], "id": "GHSA-h6q6-9hqw-rwfv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Medium", "summary": "Misinterpretation of malicious XML input", "url": "https://github.com/advisories/GHSA-h6q6-9hqw-rwfv", "version": "0.1.27" }, { "aliases": [ "CVE-2026-70601" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70601", "percentile": 0.21088, "score": 0.00285 }, "fix_state": "fixed", "fixed_in": [ "39.8.9" ], "id": "GHSA-h7rp-cf8h-j98x", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Context isolation bypass via Function.prototype.bind hijack", "url": "https://github.com/advisories/GHSA-h7rp-cf8h-j98x", "version": "3.0.13" }, { "aliases": [ "CVE-2020-4077" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-4077", "percentile": 0.62956, "score": 0.01003 }, "fix_state": "fixed", "fixed_in": [ "7.2.4" ], "id": "GHSA-h9jc-284h-533g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Context isolation bypass via contextBridge in Electron", "url": "https://github.com/advisories/GHSA-h9jc-284h-533g", "version": "3.0.13" }, { "aliases": [ "CVE-2026-12143" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-12143", "percentile": 0.51965, "score": 0.00669 }, "fix_state": "fixed", "fixed_in": [ "2.5.6" ], "id": "GHSA-hmw2-7cc7-3qxx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "form-data", "severity": "High", "summary": "form-data: CRLF injection in form-data via unescaped multipart field names and filenames", "url": "https://github.com/advisories/GHSA-hmw2-7cc7-3qxx", "version": "2.3.3" }, { "aliases": [ "CVE-2026-102673" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102673", "percentile": 0.02764, "score": 0.00132 }, "fix_state": "fixed", "fixed_in": [ "41.10.4" ], "id": "GHSA-hq2x-r82h-9wj4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab", "url": "https://github.com/advisories/GHSA-hq2x-r82h-9wj4", "version": "3.0.13" }, { "aliases": [ "CVE-2020-26272" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-26272", "percentile": 0.77806, "score": 0.01746 }, "fix_state": "fixed", "fixed_in": [ "9.4.0" ], "id": "GHSA-hvf8-h2qh-37m9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "IPC messages delivered to the wrong frame in Electron", "url": "https://github.com/advisories/GHSA-hvf8-h2qh-37m9", "version": "3.0.13" }, { "aliases": [ "CVE-2016-10540" ], "ecosystem": "npm", "epss": { "cve": "CVE-2016-10540", "percentile": 0.74318, "score": 0.01503 }, "fix_state": "fixed", "fixed_in": [ "3.0.2" ], "id": "GHSA-hxm2-r34f-qmc5", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "Regular Expression Denial of Service in minimatch", "url": "https://github.com/advisories/GHSA-hxm2-r34f-qmc5", "version": "0.3.0" }, { "aliases": [ "CVE-2026-41672" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41672", "percentile": 0.39648, "score": 0.00457 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-j759-j44w-7fr8", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom has XML node injection through unvalidated comment serialization", "url": "https://github.com/advisories/GHSA-j759-j44w-7fr8", "version": "0.1.27" }, { "aliases": [ "CVE-2026-102675" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102675", "percentile": 0.11743, "score": 0.00214 }, "fix_state": "fixed", "fixed_in": [ "41.10.6" ], "id": "GHSA-j84w-jfhq-vhvj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled", "url": "https://github.com/advisories/GHSA-j84w-jfhq-vhvj", "version": "3.0.13" }, { "aliases": [ "CVE-2023-26115" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-26115", "percentile": 0.77329, "score": 0.01709 }, "fix_state": "fixed", "fixed_in": [ "1.2.4" ], "id": "GHSA-j8xg-fqg3-53r7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "word-wrap", "severity": "Medium", "summary": "word-wrap vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "version": "1.2.3" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-j965-2qgj-vjmq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "aws-sdk", "severity": "Low", "summary": "JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3", "url": "https://github.com/advisories/GHSA-j965-2qgj-vjmq", "version": "2.847.0" }, { "aliases": [ "CVE-2023-26159" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-26159", "percentile": 0.56508, "score": 0.00797 }, "fix_state": "fixed", "fixed_in": [ "1.15.4" ], "id": "GHSA-jchw-25xp-jwwc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "Medium", "summary": "Follow Redirects improperly handles URLs in the url.parse() function", "url": "https://github.com/advisories/GHSA-jchw-25xp-jwwc", "version": "1.15.2" }, { "aliases": [ "CVE-2019-10744" ], "ecosystem": "npm", "epss": { "cve": "CVE-2019-10744", "percentile": 0.9224, "score": 0.05006 }, "fix_state": "fixed", "fixed_in": [ "4.17.12" ], "id": "GHSA-jf85-cpcp-j695", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Critical", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-jf85-cpcp-j695", "version": "2.4.2" }, { "aliases": [ "CVE-2026-34768" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34768", "percentile": 0.02766, "score": 0.00132 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-jfqx-fxh3-c62j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Unquoted executable path in app.setLoginItemSettings on Windows", "url": "https://github.com/advisories/GHSA-jfqx-fxh3-c62j", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34770" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34770", "percentile": 0.16296, "score": 0.00249 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-jjp3-mq3x-295m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Use-after-free in PowerMonitor on Windows and macOS", "url": "https://github.com/advisories/GHSA-jjp3-mq3x-295m", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70597" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70597", "percentile": 0.00991, "score": 0.00104 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-jm7p-cc5g-qwxx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Parent process code-sign check is spoofable", "url": "https://github.com/advisories/GHSA-jm7p-cc5g-qwxx", "version": "3.0.13" }, { "aliases": [ "CVE-2026-56876" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-56876", "percentile": 0.44568, "score": 0.00526 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-jmr9-qjv8-65gv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "extract-zip", "severity": "High", "summary": "extract-zip unvalidated symlink path traversal", "url": "https://github.com/advisories/GHSA-jmr9-qjv8-65gv", "version": "1.7.0" }, { "aliases": [ "CVE-2018-3728" ], "ecosystem": "npm", "epss": { "cve": "CVE-2018-3728", "percentile": 0.90936, "score": 0.0419 }, "fix_state": "fixed", "fixed_in": [ "4.2.1" ], "id": "GHSA-jp4x-w63m-7wgm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "hoek", "severity": "High", "summary": "Prototype Pollution in hoek", "url": "https://github.com/advisories/GHSA-jp4x-w63m-7wgm", "version": "2.16.3" }, { "aliases": [ "CVE-2026-115570" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-115570", "percentile": 0.31718, "score": 0.00377 }, "fix_state": "fixed", "fixed_in": [ "42.11.16" ], "id": "GHSA-jr5w-w6x2-84p9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Mitigation for compromised eMudhra intermediate certificates", "url": "https://github.com/advisories/GHSA-jr5w-w6x2-84p9", "version": "3.0.13" }, { "aliases": [ "CVE-2026-15603" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-15603", "percentile": 0.33954, "score": 0.00397 }, "fix_state": "fixed", "fixed_in": [ "1.12.0" ], "id": "GHSA-jxfw-x594-9x9m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "morgan", "severity": "Medium", "summary": "morgan vulnerable to Log Forging via unescaped Unicode line separators", "url": "https://github.com/advisories/GHSA-jxfw-x594-9x9m", "version": "1.10.0" }, { "aliases": [ "CVE-2026-70602" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70602", "percentile": 0.17346, "score": 0.00256 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-m55f-7gqj-fr98", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Extension tab APIs operate across session boundaries", "url": "https://github.com/advisories/GHSA-m55f-7gqj-fr98", "version": "3.0.13" }, { "aliases": [ "CVE-2020-4076" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-4076", "percentile": 0.30594, "score": 0.00367 }, "fix_state": "fixed", "fixed_in": [ "7.2.4" ], "id": "GHSA-m93v-9qjc-3g79", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Context isolation bypass via leaked cross-context objects in Electron", "url": "https://github.com/advisories/GHSA-m93v-9qjc-3g79", "version": "3.0.13" }, { "aliases": [ "CVE-2025-64718" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-64718", "percentile": 0.36631, "score": 0.00423 }, "fix_state": "fixed", "fixed_in": [ "3.14.2" ], "id": "GHSA-mh29-5h37-fv8m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "js-yaml has prototype pollution in merge (<<)", "url": "https://github.com/advisories/GHSA-mh29-5h37-fv8m", "version": "3.7.0" }, { "aliases": [ "CVE-2026-54490" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-54490", "percentile": 0.3869, "score": 0.00445 }, "fix_state": "fixed", "fixed_in": [ "0.7.5" ], "id": "GHSA-mp7j-qc5w-4988", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "websocket-driver", "severity": "Medium", "summary": "websocket-driver: Resource limit bypass via message compression", "url": "https://github.com/advisories/GHSA-mp7j-qc5w-4988", "version": "0.7.4" }, { "aliases": [ "CVE-2021-39184" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-39184", "percentile": 0.64285, "score": 0.0105 }, "fix_state": "fixed", "fixed_in": [ "11.5.0" ], "id": "GHSA-mpjm-v997-c4h4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API", "url": "https://github.com/advisories/GHSA-mpjm-v997-c4h4", "version": "3.0.13" }, { "aliases": [ "CVE-2022-29247" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-29247", "percentile": 0.64232, "score": 0.01048 }, "fix_state": "fixed", "fixed_in": [ "15.5.5" ], "id": "GHSA-mq8j-3h7h-p8g7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled", "url": "https://github.com/advisories/GHSA-mq8j-3h7h-p8g7", "version": "3.0.13" }, { "aliases": [ "CVE-2026-27606" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27606", "percentile": 0.76533, "score": 0.01651 }, "fix_state": "fixed", "fixed_in": [ "2.80.0" ], "id": "GHSA-mw96-cpmx-2vgc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "rollup", "severity": "High", "summary": "Rollup 4 has Arbitrary File Write via Path Traversal", "url": "https://github.com/advisories/GHSA-mw96-cpmx-2vgc", "version": "1.32.1" }, { "aliases": [ "CVE-2026-34773" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34773", "percentile": 0.15677, "score": 0.00244 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-mwmh-mq4g-g6gr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows", "url": "https://github.com/advisories/GHSA-mwmh-mq4g-g6gr", "version": "3.0.13" }, { "aliases": [ "CVE-2022-36077" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-36077", "percentile": 0.497, "score": 0.0062 }, "fix_state": "fixed", "fixed_in": [ "18.3.7" ], "id": "GHSA-p2jh-44qj-pf2v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Exfiltration of hashed SMB credentials on Windows via file:// redirect", "url": "https://github.com/advisories/GHSA-p2jh-44qj-pf2v", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70612" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70612", "percentile": 0.37176, "score": 0.00429 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-p2rr-rvmm-c5fp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Sandboxed iframes can launch external protocol handlers", "url": "https://github.com/advisories/GHSA-p2rr-rvmm-c5fp", "version": "3.0.13" }, { "aliases": [ "CVE-2020-8203" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-8203", "percentile": 0.92501, "score": 0.05213 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-p6mc-m468-83gw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash.pick", "severity": "High", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-p6mc-m468-83gw", "version": "4.4.0" }, { "aliases": [ "CVE-2023-29198" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-29198", "percentile": 0.48208, "score": 0.0059 }, "fix_state": "fixed", "fixed_in": [ "22.3.6" ], "id": "GHSA-p7v2-p9m8-qqg7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron context isolation bypass via nested unserializable return value", "url": "https://github.com/advisories/GHSA-p7v2-p9m8-qqg7", "version": "3.0.13" }, { "aliases": [ "CVE-2023-28155" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-28155", "percentile": 0.53914, "score": 0.00719 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-p8p7-x288-28g6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "request", "severity": "Medium", "summary": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "version": "2.88.0" }, { "aliases": [ "CVE-2026-106445" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106445", "percentile": 0.48158, "score": 0.00589 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-p8wg-vrv2-v86f", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Critical", "summary": "Handlebars: JavaScript Injection via Own Property Check Bypass", "url": "https://github.com/advisories/GHSA-p8wg-vrv2-v86f", "version": "4.7.7" }, { "aliases": [ "CVE-2026-70598" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70598", "percentile": 0.03053, "score": 0.00136 }, "fix_state": "fixed", "fixed_in": [ "39.8.10" ], "id": "GHSA-pfmc-3mgc-p6fp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size", "url": "https://github.com/advisories/GHSA-pfmc-3mgc-p6fp", "version": "3.0.13" }, { "aliases": [ "CVE-2022-33987" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-33987", "percentile": 0.84147, "score": 0.02416 }, "fix_state": "fixed", "fixed_in": [ "11.8.5" ], "id": "GHSA-pfrx-2q88-qq97", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "got", "severity": "Medium", "summary": "Got allows a redirect to a UNIX socket", "url": "https://github.com/advisories/GHSA-pfrx-2q88-qq97", "version": "8.3.2" }, { "aliases": [ "CVE-2020-8244" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-8244", "percentile": 0.81679, "score": 0.02097 }, "fix_state": "fixed", "fixed_in": [ "1.2.3" ], "id": "GHSA-pp7h-53gx-mx7r", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "bl", "severity": "Medium", "summary": "Remote Memory Exposure in bl", "url": "https://github.com/advisories/GHSA-pp7h-53gx-mx7r", "version": "0.9.5" }, { "aliases": [ "CVE-2026-8723" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-8723", "percentile": 0.34217, "score": 0.00399 }, "fix_state": "fixed", "fixed_in": [ "6.15.2" ], "id": "GHSA-q8mj-m7cp-5q26", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set", "url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26", "version": "6.11.2" }, { "aliases": [ "CVE-2026-27601" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27601", "percentile": 0.64629, "score": 0.01063 }, "fix_state": "fixed", "fixed_in": [ "1.13.8" ], "id": "GHSA-qpx9-hpmf-5gmw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "underscore", "severity": "High", "summary": "Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack", "url": "https://github.com/advisories/GHSA-qpx9-hpmf-5gmw", "version": "1.13.6" }, { "aliases": [ "CVE-2023-5217" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-5217", "percentile": 0.98881, "score": 0.49013 }, "fix_state": "fixed", "fixed_in": [ "22.3.25" ], "id": "GHSA-qqvq-6xgj-jw8g", "kev": { "cve": "CVE-2023-5217", "date_added": "2023-10-02" }, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron affected by libvpx's heap buffer overflow in vp8 encoding", "url": "https://github.com/advisories/GHSA-qqvq-6xgj-jw8g", "version": "3.0.13" }, { "aliases": [ "CVE-2026-41305" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41305", "percentile": 0.10477, "score": 0.00205 }, "fix_state": "fixed", "fixed_in": [ "8.5.10" ], "id": "GHSA-qx2v-qp2m-jg93", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "Medium", "summary": "PostCSS has XSS via Unescaped in its CSS Stringify Output", "url": "https://github.com/advisories/GHSA-qx2v-qp2m-jg93", "version": "5.2.18" }, { "aliases": [ "CVE-2026-73646" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73646", "percentile": 0.44814, "score": 0.0053 }, "fix_state": "fixed", "fixed_in": [ "8.5.18" ], "id": "GHSA-r28c-9q8g-f849", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "High", "summary": "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure", "url": "https://github.com/advisories/GHSA-r28c-9q8g-f849", "version": "5.2.18" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "1.16.0" ], "id": "GHSA-r4q5-vmmm-2653", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "Medium", "summary": "follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets", "url": "https://github.com/advisories/GHSA-r4q5-vmmm-2653", "version": "1.15.2" }, { "aliases": [ "CVE-2026-4800" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-4800", "percentile": 0.86507, "score": 0.02808 }, "fix_state": "fixed", "fixed_in": [ "4.18.0" ], "id": "GHSA-r5fr-rjxr-66jc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash.template", "severity": "High", "summary": "lodash vulnerable to Code Injection via `_.template` imports key names", "url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc", "version": "4.5.0" }, { "aliases": [ "CVE-2026-34777" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34777", "percentile": 0.02096, "score": 0.00124 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-r5p7-gp4j-qhrx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Incorrect origin passed to permission request handler for iframe requests", "url": "https://github.com/advisories/GHSA-r5p7-gp4j-qhrx", "version": "3.0.13" }, { "aliases": [ "CVE-2022-0235" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-0235", "percentile": 0.76556, "score": 0.01653 }, "fix_state": "fixed", "fixed_in": [ "2.6.7" ], "id": "GHSA-r683-j2x4-v87g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "node-fetch", "severity": "High", "summary": "node-fetch forwards secure headers to untrusted sites", "url": "https://github.com/advisories/GHSA-r683-j2x4-v87g", "version": "2.6.1" }, { "aliases": [ "CVE-2026-111759" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111759", "percentile": 0.48249, "score": 0.00591 }, "fix_state": "fixed", "fixed_in": [ "14.3.2" ], "id": "GHSA-r7fv-28h4-cvq7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "High", "summary": "markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes", "url": "https://github.com/advisories/GHSA-r7fv-28h4-cvq7", "version": "8.4.2" }, { "aliases": [ "CVE-2021-29059" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-29059", "percentile": 0.85511, "score": 0.02629 }, "fix_state": "fixed", "fixed_in": [ "4.3.0" ], "id": "GHSA-r8j5-h5cx-65gg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "is-svg", "severity": "High", "summary": "ReDOS in IS-SVG", "url": "https://github.com/advisories/GHSA-r8j5-h5cx-65gg", "version": "2.1.0" }, { "aliases": [ "CVE-2022-25881" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25881", "percentile": 0.75979, "score": 0.01613 }, "fix_state": "fixed", "fixed_in": [ "4.1.1" ], "id": "GHSA-rc47-6667-2j5j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "http-cache-semantics", "severity": "High", "summary": "http-cache-semantics vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-rc47-6667-2j5j", "version": "3.8.1" }, { "aliases": [ "CVE-2026-33228" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33228", "percentile": 0.57797, "score": 0.00838 }, "fix_state": "fixed", "fixed_in": [ "3.4.2" ], "id": "GHSA-rf6f-7fwh-wjgh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "flatted", "severity": "High", "summary": "Prototype Pollution via parse() in NodeJS flatted", "url": "https://github.com/advisories/GHSA-rf6f-7fwh-wjgh", "version": "2.0.2" }, { "aliases": [ "CVE-2026-104844" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-104844", "percentile": 0.32994, "score": 0.00389 }, "fix_state": "fixed", "fixed_in": [ "6.1.5" ], "id": "GHSA-rj75-hqrm-r3gf", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss-selector-parser", "severity": "Medium", "summary": "PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion", "url": "https://github.com/advisories/GHSA-rj75-hqrm-r3gf", "version": "2.2.3" }, { "aliases": [ "CVE-2021-3803" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-3803", "percentile": 0.8257, "score": 0.02206 }, "fix_state": "fixed", "fixed_in": [ "2.0.1" ], "id": "GHSA-rp65-9cf3-cjxr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "nth-check", "severity": "High", "summary": "Inefficient Regular Expression Complexity in nth-check", "url": "https://github.com/advisories/GHSA-rp65-9cf3-cjxr", "version": "1.0.2" }, { "aliases": [ "CVE-2020-28472" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-28472", "percentile": 0.82265, "score": 0.02168 }, "fix_state": "fixed", "fixed_in": [ "2.814.0" ], "id": "GHSA-rrc9-gqf8-8rwg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "aws-sdk", "severity": "High", "summary": "Prototype Pollution via file load in aws-sdk and @aws-sdk/shared-ini-file-loader", "url": "https://github.com/advisories/GHSA-rrc9-gqf8-8rwg", "version": "2.0.31" }, { "aliases": [ "CVE-2026-59887" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59887", "percentile": 0.40425, "score": 0.00467 }, "fix_state": "fixed", "fixed_in": [ "5.0.2" ], "id": "GHSA-v245-v573-v5vm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "linkify-it", "severity": "High", "summary": "linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text", "url": "https://github.com/advisories/GHSA-v245-v573-v5vm", "version": "2.2.0" }, { "aliases": [ "CVE-2026-70604" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70604", "percentile": 0.29178, "score": 0.00354 }, "fix_state": "fixed", "fixed_in": [ "39.8.10" ], "id": "GHSA-v3j7-r9gq-3gjw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads", "url": "https://github.com/advisories/GHSA-v3j7-r9gq-3gjw", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70605" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70605", "percentile": 0.24434, "score": 0.00315 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-v64r-4m7r-3mvq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: HTTP redirect followed into local file loader", "url": "https://github.com/advisories/GHSA-v64r-4m7r-3mvq", "version": "3.0.13" }, { "aliases": [ "CVE-2020-15366" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-15366", "percentile": 0.83406, "score": 0.02313 }, "fix_state": "fixed", "fixed_in": [ "6.12.3" ], "id": "GHSA-v88g-cgmw-v5xw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ajv", "severity": "Medium", "summary": "Prototype Pollution in Ajv", "url": "https://github.com/advisories/GHSA-v88g-cgmw-v5xw", "version": "6.6.2" }, { "aliases": [ "CVE-2026-70607" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70607", "percentile": 0.46503, "score": 0.00558 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-v93f-fgjr-hjrj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: window.open features string controls some window options considered privileged", "url": "https://github.com/advisories/GHSA-v93f-fgjr-hjrj", "version": "3.0.13" }, { "aliases": [ "CVE-2026-87776" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-87776", "percentile": 0.41235, "score": 0.00477 }, "fix_state": "fixed", "fixed_in": [ "1.8.2" ], "id": "GHSA-vc2v-76pw-4v95", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "compression", "severity": "High", "summary": "compression vulnerable to Denial of Service via memory leak on premature response close", "url": "https://github.com/advisories/GHSA-vc2v-76pw-4v95", "version": "1.7.4" }, { "aliases": [ "CVE-2026-111766" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111766", "percentile": 0.37056, "score": 0.00428 }, "fix_state": "fixed", "fixed_in": [ "14.3.3" ], "id": "GHSA-vfgh-jcmw-g37q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "Low", "summary": "markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled", "url": "https://github.com/advisories/GHSA-vfgh-jcmw-g37q", "version": "8.4.2" }, { "aliases": [ "CVE-2025-55305" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-55305", "percentile": 0.20098, "score": 0.00276 }, "fix_state": "fixed", "fixed_in": [ "35.7.5" ], "id": "GHSA-vmqv-hx8q-j7mg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron has ASAR Integrity Bypass via resource modification", "url": "https://github.com/advisories/GHSA-vmqv-hx8q-j7mg", "version": "3.0.13" }, { "aliases": [ "CVE-2026-102672" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102672", "percentile": 0.00516, "score": 0.00093 }, "fix_state": "fixed", "fixed_in": [ "39.8.10" ], "id": "GHSA-vv43-5jgx-7qv8", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Local race condition in Squirrel.Mac update installation on macOS", "url": "https://github.com/advisories/GHSA-vv43-5jgx-7qv8", "version": "3.0.13" }, { "aliases": [ "CVE-2026-83607" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83607", "percentile": 0.49305, "score": 0.00612 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-w2rr-34g9-rvrj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Element name injection via createElement() bypasses requireWellFormed", "url": "https://github.com/advisories/GHSA-w2rr-34g9-rvrj", "version": "0.1.27" }, { "aliases": [ "CVE-2026-41907" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41907", "percentile": 0.28633, "score": 0.0035 }, "fix_state": "fixed", "fixed_in": [ "11.1.1" ], "id": "GHSA-w5hq-g745-h8pq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "uuid", "severity": "Medium", "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq", "version": "3.4.0" }, { "aliases": [ "CVE-2026-34601" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34601", "percentile": 0.42156, "score": 0.0049 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-wh4c-j3r5-mjhp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion", "url": "https://github.com/advisories/GHSA-wh4c-j3r5-mjhp", "version": "0.1.27" }, { "aliases": [ "CVE-2021-23424" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23424", "percentile": 0.78115, "score": 0.01768 }, "fix_state": "fixed", "fixed_in": [ "0.0.8" ], "id": "GHSA-whgm-jr23-g3j9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ansi-html", "severity": "High", "summary": "Uncontrolled Resource Consumption in ansi-html", "url": "https://github.com/advisories/GHSA-whgm-jr23-g3j9", "version": "0.0.7" }, { "aliases": [ "CVE-2017-16138" ], "ecosystem": "npm", "epss": { "cve": "CVE-2017-16138", "percentile": 0.81871, "score": 0.02119 }, "fix_state": "fixed", "fixed_in": [ "1.4.1" ], "id": "GHSA-wrvr-8mpx-r7pp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "mime", "severity": "High", "summary": "mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input", "url": "https://github.com/advisories/GHSA-wrvr-8mpx-r7pp", "version": "1.2.11" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.1.11" ], "id": "GHSA-wxhq-pm8v-cw75", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "clean-css", "severity": "Low", "summary": "Regular Expression Denial of Service in clean-css", "url": "https://github.com/advisories/GHSA-wxhq-pm8v-cw75", "version": "3.4.28" }, { "aliases": [ "CVE-2026-113798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-113798", "percentile": 0.15614, "score": 0.00244 }, "fix_state": "fixed", "fixed_in": [ "42.11.9" ], "id": "GHSA-x562-297c-g43g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Pointer lock permission requests can be attributed to the wrong frame", "url": "https://github.com/advisories/GHSA-x562-297c-g43g", "version": "3.0.13" }, { "aliases": [ "CVE-2015-8855" ], "ecosystem": "npm", "epss": { "cve": "CVE-2015-8855", "percentile": 0.94073, "score": 0.06887 }, "fix_state": "fixed", "fixed_in": [ "4.3.2" ], "id": "GHSA-x6fg-f45m-jf5q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "Regular Expression Denial of Service in semver", "url": "https://github.com/advisories/GHSA-x6fg-f45m-jf5q", "version": "2.2.1" }, { "aliases": [ "CVE-2026-41675" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41675", "percentile": 0.40699, "score": 0.0047 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-x6wf-f3px-wcqx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom has XML node injection through unvalidated processing instruction serialization", "url": "https://github.com/advisories/GHSA-x6wf-f3px-wcqx", "version": "0.1.27" }, { "aliases": [ "CVE-2026-70600" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70600", "percentile": 0.07431, "score": 0.00179 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-x8rc-wpg4-grpf", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Cross-origin iframe can position native autofill popup", "url": "https://github.com/advisories/GHSA-x8rc-wpg4-grpf", "version": "3.0.13" }, { "aliases": [ "CVE-2021-23354" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23354", "percentile": 0.82328, "score": 0.02176 }, "fix_state": "fixed", "fixed_in": [ "0.6.1" ], "id": "GHSA-xfhp-gmh8-r8v2", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "printf", "severity": "High", "summary": "printf vulnerable to Regular Expression Denial of Service (ReDoS)", "url": "https://github.com/advisories/GHSA-xfhp-gmh8-r8v2", "version": "0.5.3" }, { "aliases": [ "CVE-2026-33940" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33940", "percentile": 0.5377, "score": 0.00715 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-xhpv-hc6g-r9c6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial", "url": "https://github.com/advisories/GHSA-xhpv-hc6g-r9c6", "version": "4.7.7" }, { "aliases": [ "CVE-2026-34778" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34778", "percentile": 0.02517, "score": 0.00129 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-xj5x-m3f3-5x3h", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Service worker can spoof executeJavaScript IPC replies", "url": "https://github.com/advisories/GHSA-xj5x-m3f3-5x3h", "version": "3.0.13" }, { "aliases": [ "CVE-2026-33941" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33941", "percentile": 0.22305, "score": 0.00296 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-xjpj-3mr7-gcpf", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options", "url": "https://github.com/advisories/GHSA-xjpj-3mr7-gcpf", "version": "4.7.7" }, { "aliases": [ "CVE-2026-54466" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-54466", "percentile": 0.32004, "score": 0.0038 }, "fix_state": "fixed", "fixed_in": [ "0.7.5" ], "id": "GHSA-xv26-6w52-cph6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "websocket-driver", "severity": "Critical", "summary": "websocket-driver: Message corruption via abuse of protocol length headers", "url": "https://github.com/advisories/GHSA-xv26-6w52-cph6", "version": "0.7.4" }, { "aliases": [ "CVE-2026-106444" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106444", "percentile": 0.21629, "score": 0.0029 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-xw65-4hp5-5hc7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Medium", "summary": "Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates", "url": "https://github.com/advisories/GHSA-xw65-4hp5-5hc7", "version": "4.7.7" }, { "aliases": [ "CVE-2026-34775" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34775", "percentile": 0.22032, "score": 0.00294 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-xwr5-m59h-vwqr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes", "url": "https://github.com/advisories/GHSA-xwr5-m59h-vwqr", "version": "3.0.13" } ], "previous_ref": "0.12.1", "release_changed": false, "removed": [], "resolved_vulnerabilities": [ { "aliases": [], "ecosystem": "github", "fix_state": "fixed", "fixed_in": [ "4.1.3" ], "id": "GHSA-cxww-7g56-2vh6", "location": ".github/workflows/release-draft.yaml", "osv_confirmed": false, "package": "actions/download-artifact", "severity": "High", "url": "https://github.com/advisories/GHSA-cxww-7g56-2vh6", "version": "v4" } ], "upgraded": [], "workflow_new": 0, "workflow_resolved": 0 }, "commit": "51eaa36112c79833fe90e51daa0564fb406f75df", "compliance": { "overall_score": 55, "standards": { "bsi_tr03183": { "failed_checks": [ "Component Creator", "Distribution Licences", "SHA-512 Hash", "Dependency Relationship", "SBOM Creator Contact" ], "passed": 4, "score": 44, "total": 9 }, "cisa": { "failed_checks": [ "Software Producer", "Dependency Relationship", "License Information", "Component Hash", "SBOM Author" ], "passed": 5, "score": 50, "total": 10 }, "ntia": { "failed_checks": [ "Supplier Name", "Dependency Relationship" ], "passed": 5, "score": 71, "total": 7 } } }, "components": [ { "ecosystem": "github", "licenses": [], "location": ".github/workflows/ci.yaml", "name": "actions/checkout", "purl": "pkg:github/actions/checkout@v3", "version": "v3" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/ci.yaml", "name": "actions/checkout", "purl": "pkg:github/actions/checkout@v4", "version": "v4" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/release-draft.yaml", "name": "actions/download-artifact", "purl": "pkg:github/actions/download-artifact@v4", "version": "v4" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/ci.yaml", "name": "actions/upload-artifact", "purl": "pkg:github/actions/upload-artifact@v4", "version": "v4" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/release-draft.yaml", "name": "softprops/action-gh-release", "purl": "pkg:github/softprops/action-gh-release@v1", "version": "v1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/code-frame", "purl": "pkg:npm/%40babel/code-frame@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/code-frame", "purl": "pkg:npm/%40babel/code-frame@7.21.4", "version": "7.21.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/code-frame", "purl": "pkg:npm/%40babel/code-frame@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/compat-data", "purl": "pkg:npm/%40babel/compat-data@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/compat-data", "purl": "pkg:npm/%40babel/compat-data@7.21.9", "version": "7.21.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/compat-data", "purl": "pkg:npm/%40babel/compat-data@7.22.9", "version": "7.22.9" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/core", "purl": "pkg:npm/%40babel/core@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/generator", "purl": "pkg:npm/%40babel/generator@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/generator", "purl": "pkg:npm/%40babel/generator@7.21.9", "version": "7.21.9" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-annotate-as-pure", "purl": "pkg:npm/%40babel/helper-annotate-as-pure@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-annotate-as-pure", "purl": "pkg:npm/%40babel/helper-annotate-as-pure@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-annotate-as-pure", "purl": "pkg:npm/%40babel/helper-annotate-as-pure@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-builder-binary-assignment-operator-visitor", "purl": "pkg:npm/%40babel/helper-builder-binary-assignment-operator-visitor@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-builder-binary-assignment-operator-visitor", "purl": "pkg:npm/%40babel/helper-builder-binary-assignment-operator-visitor@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-builder-binary-assignment-operator-visitor", "purl": "pkg:npm/%40babel/helper-builder-binary-assignment-operator-visitor@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-compilation-targets", "purl": "pkg:npm/%40babel/helper-compilation-targets@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-compilation-targets", "purl": "pkg:npm/%40babel/helper-compilation-targets@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-compilation-targets", "purl": "pkg:npm/%40babel/helper-compilation-targets@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-create-class-features-plugin", "purl": "pkg:npm/%40babel/helper-create-class-features-plugin@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-create-class-features-plugin", "purl": "pkg:npm/%40babel/helper-create-class-features-plugin@7.21.8", "version": "7.21.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-create-class-features-plugin", "purl": "pkg:npm/%40babel/helper-create-class-features-plugin@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-create-regexp-features-plugin", "purl": "pkg:npm/%40babel/helper-create-regexp-features-plugin@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-create-regexp-features-plugin", "purl": "pkg:npm/%40babel/helper-create-regexp-features-plugin@7.21.8", "version": "7.21.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-create-regexp-features-plugin", "purl": "pkg:npm/%40babel/helper-create-regexp-features-plugin@7.22.9", "version": "7.22.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-define-polyfill-provider", "purl": "pkg:npm/%40babel/helper-define-polyfill-provider@0.3.3", "version": "0.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-define-polyfill-provider", "purl": "pkg:npm/%40babel/helper-define-polyfill-provider@0.4.2", "version": "0.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-environment-visitor", "purl": "pkg:npm/%40babel/helper-environment-visitor@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-environment-visitor", "purl": "pkg:npm/%40babel/helper-environment-visitor@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-explode-assignable-expression", "purl": "pkg:npm/%40babel/helper-explode-assignable-expression@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-function-name", "purl": "pkg:npm/%40babel/helper-function-name@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-function-name", "purl": "pkg:npm/%40babel/helper-function-name@7.21.0", "version": "7.21.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-function-name", "purl": "pkg:npm/%40babel/helper-function-name@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-get-function-arity", "purl": "pkg:npm/%40babel/helper-get-function-arity@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-hoist-variables", "purl": "pkg:npm/%40babel/helper-hoist-variables@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-hoist-variables", "purl": "pkg:npm/%40babel/helper-hoist-variables@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-hoist-variables", "purl": "pkg:npm/%40babel/helper-hoist-variables@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-member-expression-to-functions", "purl": "pkg:npm/%40babel/helper-member-expression-to-functions@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-member-expression-to-functions", "purl": "pkg:npm/%40babel/helper-member-expression-to-functions@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-member-expression-to-functions", "purl": "pkg:npm/%40babel/helper-member-expression-to-functions@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-module-imports", "purl": "pkg:npm/%40babel/helper-module-imports@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-module-imports", "purl": "pkg:npm/%40babel/helper-module-imports@7.21.4", "version": "7.21.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-module-imports", "purl": "pkg:npm/%40babel/helper-module-imports@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-module-transforms", "purl": "pkg:npm/%40babel/helper-module-transforms@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-module-transforms", "purl": "pkg:npm/%40babel/helper-module-transforms@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-module-transforms", "purl": "pkg:npm/%40babel/helper-module-transforms@7.22.9", "version": "7.22.9" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-optimise-call-expression", "purl": "pkg:npm/%40babel/helper-optimise-call-expression@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-optimise-call-expression", "purl": "pkg:npm/%40babel/helper-optimise-call-expression@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-optimise-call-expression", "purl": "pkg:npm/%40babel/helper-optimise-call-expression@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-plugin-utils", "purl": "pkg:npm/%40babel/helper-plugin-utils@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-plugin-utils", "purl": "pkg:npm/%40babel/helper-plugin-utils@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-plugin-utils", "purl": "pkg:npm/%40babel/helper-plugin-utils@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-plugin-utils", "purl": "pkg:npm/%40babel/helper-plugin-utils@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-remap-async-to-generator", "purl": "pkg:npm/%40babel/helper-remap-async-to-generator@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-remap-async-to-generator", "purl": "pkg:npm/%40babel/helper-remap-async-to-generator@7.18.9", "version": "7.18.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-remap-async-to-generator", "purl": "pkg:npm/%40babel/helper-remap-async-to-generator@7.22.9", "version": "7.22.9" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-replace-supers", "purl": "pkg:npm/%40babel/helper-replace-supers@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-replace-supers", "purl": "pkg:npm/%40babel/helper-replace-supers@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-replace-supers", "purl": "pkg:npm/%40babel/helper-replace-supers@7.22.9", "version": "7.22.9" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-simple-access", "purl": "pkg:npm/%40babel/helper-simple-access@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-simple-access", "purl": "pkg:npm/%40babel/helper-simple-access@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-simple-access", "purl": "pkg:npm/%40babel/helper-simple-access@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-skip-transparent-expression-wrappers", "purl": "pkg:npm/%40babel/helper-skip-transparent-expression-wrappers@7.12.1", "version": "7.12.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-skip-transparent-expression-wrappers", "purl": "pkg:npm/%40babel/helper-skip-transparent-expression-wrappers@7.20.0", "version": "7.20.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-skip-transparent-expression-wrappers", "purl": "pkg:npm/%40babel/helper-skip-transparent-expression-wrappers@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-split-export-declaration", "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-split-export-declaration", "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-split-export-declaration", "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.22.6", "version": "7.22.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-string-parser", "purl": "pkg:npm/%40babel/helper-string-parser@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-string-parser", "purl": "pkg:npm/%40babel/helper-string-parser@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-validator-identifier", "purl": "pkg:npm/%40babel/helper-validator-identifier@7.12.11", "version": "7.12.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-validator-identifier", "purl": "pkg:npm/%40babel/helper-validator-identifier@7.19.1", "version": "7.19.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-validator-identifier", "purl": "pkg:npm/%40babel/helper-validator-identifier@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-validator-option", "purl": "pkg:npm/%40babel/helper-validator-option@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-validator-option", "purl": "pkg:npm/%40babel/helper-validator-option@7.21.0", "version": "7.21.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-validator-option", "purl": "pkg:npm/%40babel/helper-validator-option@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helper-wrap-function", "purl": "pkg:npm/%40babel/helper-wrap-function@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-wrap-function", "purl": "pkg:npm/%40babel/helper-wrap-function@7.20.5", "version": "7.20.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/helper-wrap-function", "purl": "pkg:npm/%40babel/helper-wrap-function@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/helpers", "purl": "pkg:npm/%40babel/helpers@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/highlight", "purl": "pkg:npm/%40babel/highlight@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/highlight", "purl": "pkg:npm/%40babel/highlight@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/highlight", "purl": "pkg:npm/%40babel/highlight@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/parser", "purl": "pkg:npm/%40babel/parser@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/parser", "purl": "pkg:npm/%40babel/parser@7.21.9", "version": "7.21.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/parser", "purl": "pkg:npm/%40babel/parser@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression", "purl": "pkg:npm/%40babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression", "purl": "pkg:npm/%40babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining", "purl": "pkg:npm/%40babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.20.7", "version": "7.20.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining", "purl": "pkg:npm/%40babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-async-generator-functions", "purl": "pkg:npm/%40babel/plugin-proposal-async-generator-functions@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-async-generator-functions", "purl": "pkg:npm/%40babel/plugin-proposal-async-generator-functions@7.20.7", "version": "7.20.7" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-class-properties", "purl": "pkg:npm/%40babel/plugin-proposal-class-properties@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-class-properties", "purl": "pkg:npm/%40babel/plugin-proposal-class-properties@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-class-static-block", "purl": "pkg:npm/%40babel/plugin-proposal-class-static-block@7.21.0", "version": "7.21.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-decorators", "purl": "pkg:npm/%40babel/plugin-proposal-decorators@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-decorators", "purl": "pkg:npm/%40babel/plugin-proposal-decorators@7.21.0", "version": "7.21.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-decorators", "purl": "pkg:npm/%40babel/plugin-proposal-decorators@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-dynamic-import", "purl": "pkg:npm/%40babel/plugin-proposal-dynamic-import@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-dynamic-import", "purl": "pkg:npm/%40babel/plugin-proposal-dynamic-import@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-export-namespace-from", "purl": "pkg:npm/%40babel/plugin-proposal-export-namespace-from@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-export-namespace-from", "purl": "pkg:npm/%40babel/plugin-proposal-export-namespace-from@7.18.9", "version": "7.18.9" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-json-strings", "purl": "pkg:npm/%40babel/plugin-proposal-json-strings@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-json-strings", "purl": "pkg:npm/%40babel/plugin-proposal-json-strings@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-logical-assignment-operators", "purl": "pkg:npm/%40babel/plugin-proposal-logical-assignment-operators@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-logical-assignment-operators", "purl": "pkg:npm/%40babel/plugin-proposal-logical-assignment-operators@7.20.7", "version": "7.20.7" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-nullish-coalescing-operator", "purl": "pkg:npm/%40babel/plugin-proposal-nullish-coalescing-operator@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-nullish-coalescing-operator", "purl": "pkg:npm/%40babel/plugin-proposal-nullish-coalescing-operator@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-numeric-separator", "purl": "pkg:npm/%40babel/plugin-proposal-numeric-separator@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-numeric-separator", "purl": "pkg:npm/%40babel/plugin-proposal-numeric-separator@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-object-rest-spread", "purl": "pkg:npm/%40babel/plugin-proposal-object-rest-spread@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-object-rest-spread", "purl": "pkg:npm/%40babel/plugin-proposal-object-rest-spread@7.20.7", "version": "7.20.7" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-optional-catch-binding", "purl": "pkg:npm/%40babel/plugin-proposal-optional-catch-binding@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-optional-catch-binding", "purl": "pkg:npm/%40babel/plugin-proposal-optional-catch-binding@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-optional-chaining", "purl": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-optional-chaining", "purl": "pkg:npm/%40babel/plugin-proposal-optional-chaining@7.21.0", "version": "7.21.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-private-methods", "purl": "pkg:npm/%40babel/plugin-proposal-private-methods@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-private-methods", "purl": "pkg:npm/%40babel/plugin-proposal-private-methods@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-private-property-in-object", "purl": "pkg:npm/%40babel/plugin-proposal-private-property-in-object@7.21.0", "version": "7.21.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-private-property-in-object", "purl": "pkg:npm/%40babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2", "version": "7.21.0-placeholder-for-preset-env.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-proposal-unicode-property-regex", "purl": "pkg:npm/%40babel/plugin-proposal-unicode-property-regex@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-proposal-unicode-property-regex", "purl": "pkg:npm/%40babel/plugin-proposal-unicode-property-regex@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-async-generators", "purl": "pkg:npm/%40babel/plugin-syntax-async-generators@7.8.4", "version": "7.8.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-class-properties", "purl": "pkg:npm/%40babel/plugin-syntax-class-properties@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-class-static-block", "purl": "pkg:npm/%40babel/plugin-syntax-class-static-block@7.14.5", "version": "7.14.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-decorators", "purl": "pkg:npm/%40babel/plugin-syntax-decorators@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-decorators", "purl": "pkg:npm/%40babel/plugin-syntax-decorators@7.21.0", "version": "7.21.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-decorators", "purl": "pkg:npm/%40babel/plugin-syntax-decorators@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-dynamic-import", "purl": "pkg:npm/%40babel/plugin-syntax-dynamic-import@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-export-namespace-from", "purl": "pkg:npm/%40babel/plugin-syntax-export-namespace-from@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-import-assertions", "purl": "pkg:npm/%40babel/plugin-syntax-import-assertions@7.20.0", "version": "7.20.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-import-assertions", "purl": "pkg:npm/%40babel/plugin-syntax-import-assertions@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-import-attributes", "purl": "pkg:npm/%40babel/plugin-syntax-import-attributes@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-import-meta", "purl": "pkg:npm/%40babel/plugin-syntax-import-meta@7.10.4", "version": "7.10.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-json-strings", "purl": "pkg:npm/%40babel/plugin-syntax-json-strings@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-logical-assignment-operators", "purl": "pkg:npm/%40babel/plugin-syntax-logical-assignment-operators@7.10.4", "version": "7.10.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-nullish-coalescing-operator", "purl": "pkg:npm/%40babel/plugin-syntax-nullish-coalescing-operator@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-numeric-separator", "purl": "pkg:npm/%40babel/plugin-syntax-numeric-separator@7.10.4", "version": "7.10.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-object-rest-spread", "purl": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-optional-catch-binding", "purl": "pkg:npm/%40babel/plugin-syntax-optional-catch-binding@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-optional-chaining", "purl": "pkg:npm/%40babel/plugin-syntax-optional-chaining@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-private-property-in-object", "purl": "pkg:npm/%40babel/plugin-syntax-private-property-in-object@7.14.5", "version": "7.14.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-top-level-await", "purl": "pkg:npm/%40babel/plugin-syntax-top-level-await@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-top-level-await", "purl": "pkg:npm/%40babel/plugin-syntax-top-level-await@7.14.5", "version": "7.14.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-syntax-typescript", "purl": "pkg:npm/%40babel/plugin-syntax-typescript@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-typescript", "purl": "pkg:npm/%40babel/plugin-syntax-typescript@7.21.4", "version": "7.21.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-typescript", "purl": "pkg:npm/%40babel/plugin-syntax-typescript@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-syntax-unicode-sets-regex", "purl": "pkg:npm/%40babel/plugin-syntax-unicode-sets-regex@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-arrow-functions", "purl": "pkg:npm/%40babel/plugin-transform-arrow-functions@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-arrow-functions", "purl": "pkg:npm/%40babel/plugin-transform-arrow-functions@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-arrow-functions", "purl": "pkg:npm/%40babel/plugin-transform-arrow-functions@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-async-generator-functions", "purl": "pkg:npm/%40babel/plugin-transform-async-generator-functions@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-async-to-generator", "purl": "pkg:npm/%40babel/plugin-transform-async-to-generator@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-async-to-generator", "purl": "pkg:npm/%40babel/plugin-transform-async-to-generator@7.20.7", "version": "7.20.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-async-to-generator", "purl": "pkg:npm/%40babel/plugin-transform-async-to-generator@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-block-scoped-functions", "purl": "pkg:npm/%40babel/plugin-transform-block-scoped-functions@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-block-scoped-functions", "purl": "pkg:npm/%40babel/plugin-transform-block-scoped-functions@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-block-scoped-functions", "purl": "pkg:npm/%40babel/plugin-transform-block-scoped-functions@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-block-scoping", "purl": "pkg:npm/%40babel/plugin-transform-block-scoping@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-block-scoping", "purl": "pkg:npm/%40babel/plugin-transform-block-scoping@7.21.0", "version": "7.21.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-block-scoping", "purl": "pkg:npm/%40babel/plugin-transform-block-scoping@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-class-properties", "purl": "pkg:npm/%40babel/plugin-transform-class-properties@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-class-static-block", "purl": "pkg:npm/%40babel/plugin-transform-class-static-block@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-classes", "purl": "pkg:npm/%40babel/plugin-transform-classes@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-classes", "purl": "pkg:npm/%40babel/plugin-transform-classes@7.21.0", "version": "7.21.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-classes", "purl": "pkg:npm/%40babel/plugin-transform-classes@7.22.6", "version": "7.22.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-computed-properties", "purl": "pkg:npm/%40babel/plugin-transform-computed-properties@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-computed-properties", "purl": "pkg:npm/%40babel/plugin-transform-computed-properties@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-computed-properties", "purl": "pkg:npm/%40babel/plugin-transform-computed-properties@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-destructuring", "purl": "pkg:npm/%40babel/plugin-transform-destructuring@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-destructuring", "purl": "pkg:npm/%40babel/plugin-transform-destructuring@7.21.3", "version": "7.21.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-destructuring", "purl": "pkg:npm/%40babel/plugin-transform-destructuring@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-dotall-regex", "purl": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-dotall-regex", "purl": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-dotall-regex", "purl": "pkg:npm/%40babel/plugin-transform-dotall-regex@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-duplicate-keys", "purl": "pkg:npm/%40babel/plugin-transform-duplicate-keys@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-duplicate-keys", "purl": "pkg:npm/%40babel/plugin-transform-duplicate-keys@7.18.9", "version": "7.18.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-duplicate-keys", "purl": "pkg:npm/%40babel/plugin-transform-duplicate-keys@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-dynamic-import", "purl": "pkg:npm/%40babel/plugin-transform-dynamic-import@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-exponentiation-operator", "purl": "pkg:npm/%40babel/plugin-transform-exponentiation-operator@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-exponentiation-operator", "purl": "pkg:npm/%40babel/plugin-transform-exponentiation-operator@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-exponentiation-operator", "purl": "pkg:npm/%40babel/plugin-transform-exponentiation-operator@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-export-namespace-from", "purl": "pkg:npm/%40babel/plugin-transform-export-namespace-from@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-for-of", "purl": "pkg:npm/%40babel/plugin-transform-for-of@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-for-of", "purl": "pkg:npm/%40babel/plugin-transform-for-of@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-for-of", "purl": "pkg:npm/%40babel/plugin-transform-for-of@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-function-name", "purl": "pkg:npm/%40babel/plugin-transform-function-name@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-function-name", "purl": "pkg:npm/%40babel/plugin-transform-function-name@7.18.9", "version": "7.18.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-function-name", "purl": "pkg:npm/%40babel/plugin-transform-function-name@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-json-strings", "purl": "pkg:npm/%40babel/plugin-transform-json-strings@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-literals", "purl": "pkg:npm/%40babel/plugin-transform-literals@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-literals", "purl": "pkg:npm/%40babel/plugin-transform-literals@7.18.9", "version": "7.18.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-literals", "purl": "pkg:npm/%40babel/plugin-transform-literals@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-logical-assignment-operators", "purl": "pkg:npm/%40babel/plugin-transform-logical-assignment-operators@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-member-expression-literals", "purl": "pkg:npm/%40babel/plugin-transform-member-expression-literals@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-member-expression-literals", "purl": "pkg:npm/%40babel/plugin-transform-member-expression-literals@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-member-expression-literals", "purl": "pkg:npm/%40babel/plugin-transform-member-expression-literals@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-modules-amd", "purl": "pkg:npm/%40babel/plugin-transform-modules-amd@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-modules-amd", "purl": "pkg:npm/%40babel/plugin-transform-modules-amd@7.20.11", "version": "7.20.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-modules-amd", "purl": "pkg:npm/%40babel/plugin-transform-modules-amd@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-modules-commonjs", "purl": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-modules-commonjs", "purl": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-modules-commonjs", "purl": "pkg:npm/%40babel/plugin-transform-modules-commonjs@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-modules-systemjs", "purl": "pkg:npm/%40babel/plugin-transform-modules-systemjs@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-modules-systemjs", "purl": "pkg:npm/%40babel/plugin-transform-modules-systemjs@7.20.11", "version": "7.20.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-modules-systemjs", "purl": "pkg:npm/%40babel/plugin-transform-modules-systemjs@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-modules-umd", "purl": "pkg:npm/%40babel/plugin-transform-modules-umd@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-modules-umd", "purl": "pkg:npm/%40babel/plugin-transform-modules-umd@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-modules-umd", "purl": "pkg:npm/%40babel/plugin-transform-modules-umd@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-named-capturing-groups-regex", "purl": "pkg:npm/%40babel/plugin-transform-named-capturing-groups-regex@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-named-capturing-groups-regex", "purl": "pkg:npm/%40babel/plugin-transform-named-capturing-groups-regex@7.20.5", "version": "7.20.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-named-capturing-groups-regex", "purl": "pkg:npm/%40babel/plugin-transform-named-capturing-groups-regex@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-new-target", "purl": "pkg:npm/%40babel/plugin-transform-new-target@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-new-target", "purl": "pkg:npm/%40babel/plugin-transform-new-target@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-new-target", "purl": "pkg:npm/%40babel/plugin-transform-new-target@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-nullish-coalescing-operator", "purl": "pkg:npm/%40babel/plugin-transform-nullish-coalescing-operator@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-numeric-separator", "purl": "pkg:npm/%40babel/plugin-transform-numeric-separator@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-object-rest-spread", "purl": "pkg:npm/%40babel/plugin-transform-object-rest-spread@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-object-super", "purl": "pkg:npm/%40babel/plugin-transform-object-super@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-object-super", "purl": "pkg:npm/%40babel/plugin-transform-object-super@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-object-super", "purl": "pkg:npm/%40babel/plugin-transform-object-super@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-optional-catch-binding", "purl": "pkg:npm/%40babel/plugin-transform-optional-catch-binding@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-optional-chaining", "purl": "pkg:npm/%40babel/plugin-transform-optional-chaining@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-parameters", "purl": "pkg:npm/%40babel/plugin-transform-parameters@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-parameters", "purl": "pkg:npm/%40babel/plugin-transform-parameters@7.21.3", "version": "7.21.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-parameters", "purl": "pkg:npm/%40babel/plugin-transform-parameters@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-private-methods", "purl": "pkg:npm/%40babel/plugin-transform-private-methods@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-private-property-in-object", "purl": "pkg:npm/%40babel/plugin-transform-private-property-in-object@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-property-literals", "purl": "pkg:npm/%40babel/plugin-transform-property-literals@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-property-literals", "purl": "pkg:npm/%40babel/plugin-transform-property-literals@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-property-literals", "purl": "pkg:npm/%40babel/plugin-transform-property-literals@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-regenerator", "purl": "pkg:npm/%40babel/plugin-transform-regenerator@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-regenerator", "purl": "pkg:npm/%40babel/plugin-transform-regenerator@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-regenerator", "purl": "pkg:npm/%40babel/plugin-transform-regenerator@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-reserved-words", "purl": "pkg:npm/%40babel/plugin-transform-reserved-words@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-reserved-words", "purl": "pkg:npm/%40babel/plugin-transform-reserved-words@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-reserved-words", "purl": "pkg:npm/%40babel/plugin-transform-reserved-words@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-runtime", "purl": "pkg:npm/%40babel/plugin-transform-runtime@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-runtime", "purl": "pkg:npm/%40babel/plugin-transform-runtime@7.21.4", "version": "7.21.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-runtime", "purl": "pkg:npm/%40babel/plugin-transform-runtime@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-shorthand-properties", "purl": "pkg:npm/%40babel/plugin-transform-shorthand-properties@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-shorthand-properties", "purl": "pkg:npm/%40babel/plugin-transform-shorthand-properties@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-shorthand-properties", "purl": "pkg:npm/%40babel/plugin-transform-shorthand-properties@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-spread", "purl": "pkg:npm/%40babel/plugin-transform-spread@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-spread", "purl": "pkg:npm/%40babel/plugin-transform-spread@7.20.7", "version": "7.20.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-spread", "purl": "pkg:npm/%40babel/plugin-transform-spread@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-sticky-regex", "purl": "pkg:npm/%40babel/plugin-transform-sticky-regex@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-sticky-regex", "purl": "pkg:npm/%40babel/plugin-transform-sticky-regex@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-sticky-regex", "purl": "pkg:npm/%40babel/plugin-transform-sticky-regex@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-template-literals", "purl": "pkg:npm/%40babel/plugin-transform-template-literals@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-template-literals", "purl": "pkg:npm/%40babel/plugin-transform-template-literals@7.18.9", "version": "7.18.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-template-literals", "purl": "pkg:npm/%40babel/plugin-transform-template-literals@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-typeof-symbol", "purl": "pkg:npm/%40babel/plugin-transform-typeof-symbol@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-typeof-symbol", "purl": "pkg:npm/%40babel/plugin-transform-typeof-symbol@7.18.9", "version": "7.18.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-typeof-symbol", "purl": "pkg:npm/%40babel/plugin-transform-typeof-symbol@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-typescript", "purl": "pkg:npm/%40babel/plugin-transform-typescript@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-typescript", "purl": "pkg:npm/%40babel/plugin-transform-typescript@7.21.3", "version": "7.21.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-typescript", "purl": "pkg:npm/%40babel/plugin-transform-typescript@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-typescript", "purl": "pkg:npm/%40babel/plugin-transform-typescript@7.4.5", "version": "7.4.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-unicode-escapes", "purl": "pkg:npm/%40babel/plugin-transform-unicode-escapes@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-unicode-escapes", "purl": "pkg:npm/%40babel/plugin-transform-unicode-escapes@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-unicode-escapes", "purl": "pkg:npm/%40babel/plugin-transform-unicode-escapes@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-unicode-property-regex", "purl": "pkg:npm/%40babel/plugin-transform-unicode-property-regex@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/plugin-transform-unicode-regex", "purl": "pkg:npm/%40babel/plugin-transform-unicode-regex@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-unicode-regex", "purl": "pkg:npm/%40babel/plugin-transform-unicode-regex@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-unicode-regex", "purl": "pkg:npm/%40babel/plugin-transform-unicode-regex@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/plugin-transform-unicode-sets-regex", "purl": "pkg:npm/%40babel/plugin-transform-unicode-sets-regex@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/polyfill", "purl": "pkg:npm/%40babel/polyfill@7.12.1", "version": "7.12.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/preset-env", "purl": "pkg:npm/%40babel/preset-env@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/preset-env", "purl": "pkg:npm/%40babel/preset-env@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/preset-env", "purl": "pkg:npm/%40babel/preset-env@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/preset-modules", "purl": "pkg:npm/%40babel/preset-modules@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/preset-modules", "purl": "pkg:npm/%40babel/preset-modules@0.1.5", "version": "0.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/preset-modules", "purl": "pkg:npm/%40babel/preset-modules@0.1.6-no-external-plugins", "version": "0.1.6-no-external-plugins" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/regjsgen", "purl": "pkg:npm/%40babel/regjsgen@0.8.0", "version": "0.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/runtime", "purl": "pkg:npm/%40babel/runtime@7.12.18", "version": "7.12.18" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/template", "purl": "pkg:npm/%40babel/template@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/template", "purl": "pkg:npm/%40babel/template@7.21.9", "version": "7.21.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/template", "purl": "pkg:npm/%40babel/template@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/traverse", "purl": "pkg:npm/%40babel/traverse@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/traverse", "purl": "pkg:npm/%40babel/traverse@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@babel/types", "purl": "pkg:npm/%40babel/types@7.12.17", "version": "7.12.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/types", "purl": "pkg:npm/%40babel/types@7.21.5", "version": "7.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@babel/types", "purl": "pkg:npm/%40babel/types@7.22.10", "version": "7.22.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@cnakazawa/watch", "purl": "pkg:npm/%40cnakazawa/watch@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember-data/-build-infra", "purl": "pkg:npm/%40ember-data/-build-infra@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember-data/adapter", "purl": "pkg:npm/%40ember-data/adapter@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember-data/canary-features", "purl": "pkg:npm/%40ember-data/canary-features@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember-data/model", "purl": "pkg:npm/%40ember-data/model@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@ember-data/rfc395-data", "purl": "pkg:npm/%40ember-data/rfc395-data@0.0.4", "version": "0.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember-data/serializer", "purl": "pkg:npm/%40ember-data/serializer@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember-data/store", "purl": "pkg:npm/%40ember-data/store@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember/edition-utils", "purl": "pkg:npm/%40ember/edition-utils@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember/jquery", "purl": "pkg:npm/%40ember/jquery@0.6.1", "version": "0.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember/optional-features", "purl": "pkg:npm/%40ember/optional-features@0.7.0", "version": "0.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember/ordered-set", "purl": "pkg:npm/%40ember/ordered-set@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@ember/test-helpers", "purl": "pkg:npm/%40ember/test-helpers@1.7.3", "version": "1.7.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@embroider/macros", "purl": "pkg:npm/%40embroider/macros@1.13.1", "version": "1.13.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@embroider/shared-internals", "purl": "pkg:npm/%40embroider/shared-internals@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@glimmer/di", "purl": "pkg:npm/%40glimmer/di@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@glimmer/env", "purl": "pkg:npm/%40glimmer/env@0.1.7", "version": "0.1.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@glimmer/interfaces", "purl": "pkg:npm/%40glimmer/interfaces@0.47.9", "version": "0.47.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@glimmer/resolver", "purl": "pkg:npm/%40glimmer/resolver@0.4.3", "version": "0.4.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@glimmer/syntax", "purl": "pkg:npm/%40glimmer/syntax@0.47.9", "version": "0.47.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@glimmer/util", "purl": "pkg:npm/%40glimmer/util@0.47.9", "version": "0.47.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@jridgewell/gen-mapping", "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.3", "version": "0.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@jridgewell/resolve-uri", "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@jridgewell/set-array", "purl": "pkg:npm/%40jridgewell/set-array@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@jridgewell/sourcemap-codec", "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14", "version": "1.4.14" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@jridgewell/sourcemap-codec", "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15", "version": "1.4.15" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@jridgewell/trace-mapping", "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.18", "version": "0.3.18" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@mrmlnc/readdir-enhanced", "purl": "pkg:npm/%40mrmlnc/readdir-enhanced@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@nodelib/fs.scandir", "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.4", "version": "2.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@nodelib/fs.stat", "purl": "pkg:npm/%40nodelib/fs.stat@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@nodelib/fs.stat", "purl": "pkg:npm/%40nodelib/fs.stat@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@nodelib/fs.walk", "purl": "pkg:npm/%40nodelib/fs.walk@1.2.6", "version": "1.2.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@octokit/rest", "purl": "pkg:npm/%40octokit/rest@15.18.3", "version": "15.18.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@paulcbetts/mime-db", "purl": "pkg:npm/%40paulcbetts/mime-db@1.22.4", "version": "1.22.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@paulcbetts/mime-types", "purl": "pkg:npm/%40paulcbetts/mime-types@2.1.10", "version": "2.1.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@paulcbetts/vueify", "purl": "pkg:npm/%40paulcbetts/vueify@9.4.3", "version": "9.4.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@simple-dom/interface", "purl": "pkg:npm/%40simple-dom/interface@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@sindresorhus/is", "purl": "pkg:npm/%40sindresorhus/is@0.7.0", "version": "0.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/body-parser", "purl": "pkg:npm/%40types/body-parser@1.19.2", "version": "1.19.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/broccoli-plugin", "purl": "pkg:npm/%40types/broccoli-plugin@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/chai", "purl": "pkg:npm/%40types/chai@4.3.5", "version": "4.3.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/chai-as-promised", "purl": "pkg:npm/%40types/chai-as-promised@7.1.5", "version": "7.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/connect", "purl": "pkg:npm/%40types/connect@3.4.35", "version": "3.4.35" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/estree", "purl": "pkg:npm/%40types/estree@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/express", "purl": "pkg:npm/%40types/express@4.17.17", "version": "4.17.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/express-serve-static-core", "purl": "pkg:npm/%40types/express-serve-static-core@4.17.35", "version": "4.17.35" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@types/fs-extra", "purl": "pkg:npm/%40types/fs-extra@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@types/glob", "purl": "pkg:npm/%40types/glob@7.1.3", "version": "7.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/mime", "purl": "pkg:npm/%40types/mime@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@types/minimatch", "purl": "pkg:npm/%40types/minimatch@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@types/node", "purl": "pkg:npm/%40types/node@14.14.29", "version": "14.14.29" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/node", "purl": "pkg:npm/%40types/node@7.10.2", "version": "7.10.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/node", "purl": "pkg:npm/%40types/node@8.10.66", "version": "8.10.66" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/qs", "purl": "pkg:npm/%40types/qs@6.9.7", "version": "6.9.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/range-parser", "purl": "pkg:npm/%40types/range-parser@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@types/rimraf", "purl": "pkg:npm/%40types/rimraf@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/send", "purl": "pkg:npm/%40types/send@0.17.1", "version": "0.17.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/serve-static", "purl": "pkg:npm/%40types/serve-static@1.15.1", "version": "1.15.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "@types/symlink-or-copy", "purl": "pkg:npm/%40types/symlink-or-copy@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "abab", "purl": "pkg:npm/abab@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "abbrev", "purl": "pkg:npm/abbrev@1.0.9", "version": "1.0.9" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "abbrev", "purl": "pkg:npm/abbrev@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "accepts", "purl": "pkg:npm/accepts@1.3.5", "version": "1.3.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "accepts", "purl": "pkg:npm/accepts@1.3.7", "version": "1.3.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "accepts", "purl": "pkg:npm/accepts@1.3.8", "version": "1.3.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "accessibility-developer-tools", "purl": "pkg:npm/accessibility-developer-tools@2.12.0", "version": "2.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "acorn", "purl": "pkg:npm/acorn@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "acorn", "purl": "pkg:npm/acorn@2.7.0", "version": "2.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "acorn", "purl": "pkg:npm/acorn@6.4.2", "version": "6.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "acorn", "purl": "pkg:npm/acorn@7.4.1", "version": "7.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "acorn", "purl": "pkg:npm/acorn@8.0.5", "version": "8.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "acorn-globals", "purl": "pkg:npm/acorn-globals@1.0.9", "version": "1.0.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "acorn-jsx", "purl": "pkg:npm/acorn-jsx@5.3.2", "version": "5.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "after", "purl": "pkg:npm/after@0.8.2", "version": "0.8.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "agent-base", "purl": "pkg:npm/agent-base@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ajv", "purl": "pkg:npm/ajv@4.11.8", "version": "4.11.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ajv", "purl": "pkg:npm/ajv@6.12.6", "version": "6.12.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ajv", "purl": "pkg:npm/ajv@6.6.2", "version": "6.6.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "align-text", "purl": "pkg:npm/align-text@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "alphanum-sort", "purl": "pkg:npm/alphanum-sort@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "amd-name-resolver", "purl": "pkg:npm/amd-name-resolver@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "amd-name-resolver", "purl": "pkg:npm/amd-name-resolver@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "amdefine", "purl": "pkg:npm/amdefine@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansi", "purl": "pkg:npm/ansi@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ansi-align", "purl": "pkg:npm/ansi-align@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ansi-colors", "purl": "pkg:npm/ansi-colors@3.2.3", "version": "3.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansi-escapes", "purl": "pkg:npm/ansi-escapes@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansi-escapes", "purl": "pkg:npm/ansi-escapes@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansi-html", "purl": "pkg:npm/ansi-html@0.0.7", "version": "0.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@3.2.1", "version": "3.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansi-to-html", "purl": "pkg:npm/ansi-to-html@0.6.15", "version": "0.6.15" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ansicolors", "purl": "pkg:npm/ansicolors@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "any-promise", "purl": "pkg:npm/any-promise@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "anymatch", "purl": "pkg:npm/anymatch@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "anymatch", "purl": "pkg:npm/anymatch@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "aot-test-generators", "purl": "pkg:npm/aot-test-generators@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "appdmg", "purl": "pkg:npm/appdmg@0.4.5", "version": "0.4.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "aproba", "purl": "pkg:npm/aproba@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "archiver", "purl": "pkg:npm/archiver@0.11.0", "version": "0.11.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "are-we-there-yet", "purl": "pkg:npm/are-we-there-yet@1.1.5", "version": "1.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "argparse", "purl": "pkg:npm/argparse@1.0.10", "version": "1.0.10" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "arr-diff", "purl": "pkg:npm/arr-diff@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "arr-diff", "purl": "pkg:npm/arr-diff@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "arr-flatten", "purl": "pkg:npm/arr-flatten@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "arr-union", "purl": "pkg:npm/arr-union@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "array-buffer-byte-length", "purl": "pkg:npm/array-buffer-byte-length@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "array-equal", "purl": "pkg:npm/array-equal@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "array-find-index", "purl": "pkg:npm/array-find-index@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "array-flatten", "purl": "pkg:npm/array-flatten@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "array-to-error", "purl": "pkg:npm/array-to-error@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "array-to-sentence", "purl": "pkg:npm/array-to-sentence@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "array-union", "purl": "pkg:npm/array-union@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "array-union", "purl": "pkg:npm/array-union@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "array-uniq", "purl": "pkg:npm/array-uniq@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "array-unique", "purl": "pkg:npm/array-unique@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "array-unique", "purl": "pkg:npm/array-unique@0.3.2", "version": "0.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "array.prototype.reduce", "purl": "pkg:npm/array.prototype.reduce@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "arraybuffer.slice", "purl": "pkg:npm/arraybuffer.slice@0.0.7", "version": "0.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "asap", "purl": "pkg:npm/asap@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "asap", "purl": "pkg:npm/asap@2.0.6", "version": "2.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "asar", "purl": "pkg:npm/asar@0.11.0", "version": "0.11.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "asar", "purl": "pkg:npm/asar@0.12.4", "version": "0.12.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "asar", "purl": "pkg:npm/asar@0.13.1", "version": "0.13.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "asar", "purl": "pkg:npm/asar@0.14.6", "version": "0.14.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "asar", "purl": "pkg:npm/asar@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "asn1", "purl": "pkg:npm/asn1@0.2.4", "version": "0.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "assert-never", "purl": "pkg:npm/assert-never@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "assert-plus", "purl": "pkg:npm/assert-plus@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "assert-plus", "purl": "pkg:npm/assert-plus@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "assertion-error", "purl": "pkg:npm/assertion-error@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "assign-symbols", "purl": "pkg:npm/assign-symbols@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ast-types", "purl": "pkg:npm/ast-types@0.9.6", "version": "0.9.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "astral-regex", "purl": "pkg:npm/astral-regex@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "async", "purl": "pkg:npm/async@0.2.10", "version": "0.2.10" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "async", "purl": "pkg:npm/async@0.2.9", "version": "0.2.9" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "async", "purl": "pkg:npm/async@0.9.2", "version": "0.9.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "async", "purl": "pkg:npm/async@1.5.2", "version": "1.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "async", "purl": "pkg:npm/async@2.6.1", "version": "2.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "async", "purl": "pkg:npm/async@2.6.4", "version": "2.6.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "async-disk-cache", "purl": "pkg:npm/async-disk-cache@1.3.3", "version": "1.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "async-disk-cache", "purl": "pkg:npm/async-disk-cache@1.3.5", "version": "1.3.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "async-each", "purl": "pkg:npm/async-each@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "async-promise-queue", "purl": "pkg:npm/async-promise-queue@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "asynckit", "purl": "pkg:npm/asynckit@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "at-least-node", "purl": "pkg:npm/at-least-node@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "atob", "purl": "pkg:npm/atob@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "author-regex", "purl": "pkg:npm/author-regex@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "autoprefixer", "purl": "pkg:npm/autoprefixer@6.7.7", "version": "6.7.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "available-typed-arrays", "purl": "pkg:npm/available-typed-arrays@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "aws-sdk", "purl": "pkg:npm/aws-sdk@2.0.31", "version": "2.0.31" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "aws-sdk", "purl": "pkg:npm/aws-sdk@2.847.0", "version": "2.847.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "aws-sign2", "purl": "pkg:npm/aws-sign2@0.6.0", "version": "0.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "aws-sign2", "purl": "pkg:npm/aws-sign2@0.7.0", "version": "0.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "aws4", "purl": "pkg:npm/aws4@1.8.0", "version": "1.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-code-frame", "purl": "pkg:npm/babel-code-frame@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-core", "purl": "pkg:npm/babel-core@6.26.3", "version": "6.26.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-generator", "purl": "pkg:npm/babel-generator@6.26.1", "version": "6.26.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-builder-binary-assignment-operator-visitor", "purl": "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-builder-react-jsx", "purl": "pkg:npm/babel-helper-builder-react-jsx@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-call-delegate", "purl": "pkg:npm/babel-helper-call-delegate@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-define-map", "purl": "pkg:npm/babel-helper-define-map@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-explode-assignable-expression", "purl": "pkg:npm/babel-helper-explode-assignable-expression@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-function-name", "purl": "pkg:npm/babel-helper-function-name@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-get-function-arity", "purl": "pkg:npm/babel-helper-get-function-arity@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-hoist-variables", "purl": "pkg:npm/babel-helper-hoist-variables@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-optimise-call-expression", "purl": "pkg:npm/babel-helper-optimise-call-expression@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-regex", "purl": "pkg:npm/babel-helper-regex@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-remap-async-to-generator", "purl": "pkg:npm/babel-helper-remap-async-to-generator@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helper-replace-supers", "purl": "pkg:npm/babel-helper-replace-supers@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-helpers", "purl": "pkg:npm/babel-helpers@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-import-util", "purl": "pkg:npm/babel-import-util@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-messages", "purl": "pkg:npm/babel-messages@6.23.0", "version": "6.23.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-array-includes", "purl": "pkg:npm/babel-plugin-array-includes@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-check-es2015-constants", "purl": "pkg:npm/babel-plugin-check-es2015-constants@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-debug-macros", "purl": "pkg:npm/babel-plugin-debug-macros@0.1.11", "version": "0.1.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-debug-macros", "purl": "pkg:npm/babel-plugin-debug-macros@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "babel-plugin-debug-macros", "purl": "pkg:npm/babel-plugin-debug-macros@0.3.4", "version": "0.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "babel-plugin-dynamic-import-node", "purl": "pkg:npm/babel-plugin-dynamic-import-node@2.3.3", "version": "2.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "babel-plugin-ember-data-packages-polyfill", "purl": "pkg:npm/babel-plugin-ember-data-packages-polyfill@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-ember-modules-api-polyfill", "purl": "pkg:npm/babel-plugin-ember-modules-api-polyfill@2.13.4", "version": "2.13.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-ember-modules-api-polyfill", "purl": "pkg:npm/babel-plugin-ember-modules-api-polyfill@2.6.0", "version": "2.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "babel-plugin-ember-modules-api-polyfill", "purl": "pkg:npm/babel-plugin-ember-modules-api-polyfill@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-ember-modules-api-polyfill", "purl": "pkg:npm/babel-plugin-ember-modules-api-polyfill@3.5.0", "version": "3.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-feature-flags", "purl": "pkg:npm/babel-plugin-feature-flags@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-filter-imports", "purl": "pkg:npm/babel-plugin-filter-imports@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-htmlbars-inline-precompile", "purl": "pkg:npm/babel-plugin-htmlbars-inline-precompile@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-htmlbars-inline-precompile", "purl": "pkg:npm/babel-plugin-htmlbars-inline-precompile@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "babel-plugin-module-resolver", "purl": "pkg:npm/babel-plugin-module-resolver@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-polyfill-corejs2", "purl": "pkg:npm/babel-plugin-polyfill-corejs2@0.3.3", "version": "0.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-polyfill-corejs2", "purl": "pkg:npm/babel-plugin-polyfill-corejs2@0.4.5", "version": "0.4.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-polyfill-corejs3", "purl": "pkg:npm/babel-plugin-polyfill-corejs3@0.6.0", "version": "0.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-polyfill-corejs3", "purl": "pkg:npm/babel-plugin-polyfill-corejs3@0.8.3", "version": "0.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-polyfill-regenerator", "purl": "pkg:npm/babel-plugin-polyfill-regenerator@0.4.1", "version": "0.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-polyfill-regenerator", "purl": "pkg:npm/babel-plugin-polyfill-regenerator@0.5.2", "version": "0.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-syntax-async-functions", "purl": "pkg:npm/babel-plugin-syntax-async-functions@6.13.0", "version": "6.13.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-syntax-async-generators", "purl": "pkg:npm/babel-plugin-syntax-async-generators@6.13.0", "version": "6.13.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-syntax-exponentiation-operator", "purl": "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0", "version": "6.13.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-syntax-flow", "purl": "pkg:npm/babel-plugin-syntax-flow@6.18.0", "version": "6.18.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-syntax-jsx", "purl": "pkg:npm/babel-plugin-syntax-jsx@6.18.0", "version": "6.18.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-syntax-trailing-function-commas", "purl": "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-async-to-generator", "purl": "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-arrow-functions", "purl": "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-block-scoped-functions", "purl": "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-block-scoping", "purl": "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-classes", "purl": "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-computed-properties", "purl": "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-destructuring", "purl": "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0", "version": "6.23.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-duplicate-keys", "purl": "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-for-of", "purl": "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0", "version": "6.23.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-function-name", "purl": "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-literals", "purl": "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-modules-amd", "purl": "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-modules-commonjs", "purl": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.26.2", "version": "6.26.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-modules-systemjs", "purl": "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-modules-umd", "purl": "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-object-super", "purl": "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-parameters", "purl": "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-shorthand-properties", "purl": "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-spread", "purl": "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-sticky-regex", "purl": "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-template-literals", "purl": "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-typeof-symbol", "purl": "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0", "version": "6.23.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-es2015-unicode-regex", "purl": "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-exponentiation-operator", "purl": "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-flow-strip-types", "purl": "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-react-display-name", "purl": "pkg:npm/babel-plugin-transform-react-display-name@6.25.0", "version": "6.25.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-react-jsx", "purl": "pkg:npm/babel-plugin-transform-react-jsx@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-react-jsx-self", "purl": "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-react-jsx-source", "purl": "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0", "version": "6.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-regenerator", "purl": "pkg:npm/babel-plugin-transform-regenerator@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-plugin-transform-strict-mode", "purl": "pkg:npm/babel-plugin-transform-strict-mode@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-polyfill", "purl": "pkg:npm/babel-polyfill@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-preset-env", "purl": "pkg:npm/babel-preset-env@1.7.0", "version": "1.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-preset-es2016-node5", "purl": "pkg:npm/babel-preset-es2016-node5@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-preset-flow", "purl": "pkg:npm/babel-preset-flow@6.23.0", "version": "6.23.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-preset-react", "purl": "pkg:npm/babel-preset-react@6.24.1", "version": "6.24.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-register", "purl": "pkg:npm/babel-register@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-runtime", "purl": "pkg:npm/babel-runtime@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-template", "purl": "pkg:npm/babel-template@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-traverse", "purl": "pkg:npm/babel-traverse@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel-types", "purl": "pkg:npm/babel-types@6.26.0", "version": "6.26.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babel6-plugin-strip-class-callcheck", "purl": "pkg:npm/babel6-plugin-strip-class-callcheck@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "babylon", "purl": "pkg:npm/babylon@6.18.0", "version": "6.18.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "backbone", "purl": "pkg:npm/backbone@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "backo2", "purl": "pkg:npm/backo2@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "balanced-match", "purl": "pkg:npm/balanced-match@0.4.2", "version": "0.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "balanced-match", "purl": "pkg:npm/balanced-match@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "base", "purl": "pkg:npm/base@0.11.2", "version": "0.11.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "base32-encode", "purl": "pkg:npm/base32-encode@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "base64-arraybuffer", "purl": "pkg:npm/base64-arraybuffer@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "base64-js", "purl": "pkg:npm/base64-js@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "base64-js", "purl": "pkg:npm/base64-js@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "base64id", "purl": "pkg:npm/base64id@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "basic-auth", "purl": "pkg:npm/basic-auth@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bcrypt-pbkdf", "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "before-after-hook", "purl": "pkg:npm/before-after-hook@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "binary", "purl": "pkg:npm/binary@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "binary-extensions", "purl": "pkg:npm/binary-extensions@1.13.1", "version": "1.13.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "binaryextensions", "purl": "pkg:npm/binaryextensions@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "binaryextensions", "purl": "pkg:npm/binaryextensions@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "bindings", "purl": "pkg:npm/bindings@1.5.0", "version": "1.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bl", "purl": "pkg:npm/bl@0.9.5", "version": "0.9.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "blank-object", "purl": "pkg:npm/blank-object@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "blob", "purl": "pkg:npm/blob@0.0.5", "version": "0.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "block-stream", "purl": "pkg:npm/block-stream@0.0.9", "version": "0.0.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bluebird", "purl": "pkg:npm/bluebird@3.5.2", "version": "3.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "body", "purl": "pkg:npm/body@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "body-parser", "purl": "pkg:npm/body-parser@1.19.0", "version": "1.19.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "body-parser", "purl": "pkg:npm/body-parser@1.20.1", "version": "1.20.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "boolbase", "purl": "pkg:npm/boolbase@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "boom", "purl": "pkg:npm/boom@2.10.1", "version": "2.10.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bower", "purl": "pkg:npm/bower@1.8.12", "version": "1.8.12" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bower-config", "purl": "pkg:npm/bower-config@1.4.3", "version": "1.4.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bower-endpoint-parser", "purl": "pkg:npm/bower-endpoint-parser@0.2.2", "version": "0.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "boxen", "purl": "pkg:npm/boxen@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bplist-creator", "purl": "pkg:npm/bplist-creator@0.0.8", "version": "0.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "brace-expansion", "purl": "pkg:npm/brace-expansion@1.1.11", "version": "1.1.11" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "braces", "purl": "pkg:npm/braces@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "braces", "purl": "pkg:npm/braces@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "broadway", "purl": "pkg:npm/broadway@0.3.6", "version": "0.3.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli", "purl": "pkg:npm/broccoli@3.5.2", "version": "3.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-amd-funnel", "purl": "pkg:npm/broccoli-amd-funnel@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-asset-rev", "purl": "pkg:npm/broccoli-asset-rev@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-asset-rewrite", "purl": "pkg:npm/broccoli-asset-rewrite@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-babel-transpiler", "purl": "pkg:npm/broccoli-babel-transpiler@6.5.0", "version": "6.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "broccoli-babel-transpiler", "purl": "pkg:npm/broccoli-babel-transpiler@7.8.0", "version": "7.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-babel-transpiler", "purl": "pkg:npm/broccoli-babel-transpiler@7.8.1", "version": "7.8.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-builder", "purl": "pkg:npm/broccoli-builder@0.18.14", "version": "0.18.14" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-caching-writer", "purl": "pkg:npm/broccoli-caching-writer@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-caching-writer", "purl": "pkg:npm/broccoli-caching-writer@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-clean-css", "purl": "pkg:npm/broccoli-clean-css@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-concat", "purl": "pkg:npm/broccoli-concat@3.7.3", "version": "3.7.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-config-loader", "purl": "pkg:npm/broccoli-config-loader@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-config-replace", "purl": "pkg:npm/broccoli-config-replace@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "broccoli-debug", "purl": "pkg:npm/broccoli-debug@0.6.5", "version": "0.6.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-file-creator", "purl": "pkg:npm/broccoli-file-creator@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-filter", "purl": "pkg:npm/broccoli-filter@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-funnel", "purl": "pkg:npm/broccoli-funnel@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "broccoli-funnel", "purl": "pkg:npm/broccoli-funnel@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-funnel-reducer", "purl": "pkg:npm/broccoli-funnel-reducer@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-kitchen-sink-helpers", "purl": "pkg:npm/broccoli-kitchen-sink-helpers@0.2.9", "version": "0.2.9" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "broccoli-kitchen-sink-helpers", "purl": "pkg:npm/broccoli-kitchen-sink-helpers@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-less-single", "purl": "pkg:npm/broccoli-less-single@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-lint-eslint", "purl": "pkg:npm/broccoli-lint-eslint@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-merge-trees", "purl": "pkg:npm/broccoli-merge-trees@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-merge-trees", "purl": "pkg:npm/broccoli-merge-trees@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "broccoli-merge-trees", "purl": "pkg:npm/broccoli-merge-trees@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-middleware", "purl": "pkg:npm/broccoli-middleware@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-module-normalizer", "purl": "pkg:npm/broccoli-module-normalizer@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-module-unification-reexporter", "purl": "pkg:npm/broccoli-module-unification-reexporter@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-node-api", "purl": "pkg:npm/broccoli-node-api@1.7.0", "version": "1.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-node-info", "purl": "pkg:npm/broccoli-node-info@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-node-info", "purl": "pkg:npm/broccoli-node-info@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-node-info", "purl": "pkg:npm/broccoli-node-info@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-output-wrapper", "purl": "pkg:npm/broccoli-output-wrapper@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-persistent-filter", "purl": "pkg:npm/broccoli-persistent-filter@1.4.4", "version": "1.4.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "broccoli-persistent-filter", "purl": "pkg:npm/broccoli-persistent-filter@1.4.6", "version": "1.4.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "broccoli-persistent-filter", "purl": "pkg:npm/broccoli-persistent-filter@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-plugin", "purl": "pkg:npm/broccoli-plugin@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "broccoli-plugin", "purl": "pkg:npm/broccoli-plugin@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-plugin", "purl": "pkg:npm/broccoli-plugin@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-plugin", "purl": "pkg:npm/broccoli-plugin@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-rollup", "purl": "pkg:npm/broccoli-rollup@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-slow-trees", "purl": "pkg:npm/broccoli-slow-trees@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "broccoli-source", "purl": "pkg:npm/broccoli-source@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-source", "purl": "pkg:npm/broccoli-source@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-source", "purl": "pkg:npm/broccoli-source@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-source", "purl": "pkg:npm/broccoli-source@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-sri-hash", "purl": "pkg:npm/broccoli-sri-hash@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-stew", "purl": "pkg:npm/broccoli-stew@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-stew", "purl": "pkg:npm/broccoli-stew@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-string-replace", "purl": "pkg:npm/broccoli-string-replace@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-svg-optimizer", "purl": "pkg:npm/broccoli-svg-optimizer@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-symbolizer", "purl": "pkg:npm/broccoli-symbolizer@0.6.0", "version": "0.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "broccoli-uglify-sourcemap", "purl": "pkg:npm/broccoli-uglify-sourcemap@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "browser-stdout", "purl": "pkg:npm/browser-stdout@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "browserslist", "purl": "pkg:npm/browserslist@1.7.7", "version": "1.7.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "browserslist", "purl": "pkg:npm/browserslist@3.2.8", "version": "3.2.8" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "browserslist", "purl": "pkg:npm/browserslist@4.16.3", "version": "4.16.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "browserslist", "purl": "pkg:npm/browserslist@4.21.10", "version": "4.21.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "browserslist", "purl": "pkg:npm/browserslist@4.21.5", "version": "4.21.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bser", "purl": "pkg:npm/bser@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "btoa", "purl": "pkg:npm/btoa@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "btoa-lite", "purl": "pkg:npm/btoa-lite@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "buffer", "purl": "pkg:npm/buffer@4.9.2", "version": "4.9.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "buffer-alloc", "purl": "pkg:npm/buffer-alloc@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "buffer-alloc-unsafe", "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "buffer-crc32", "purl": "pkg:npm/buffer-crc32@0.2.13", "version": "0.2.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "buffer-fill", "purl": "pkg:npm/buffer-fill@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "buffer-from", "purl": "pkg:npm/buffer-from@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "buffer-from", "purl": "pkg:npm/buffer-from@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "buffers", "purl": "pkg:npm/buffers@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "builtin-modules", "purl": "pkg:npm/builtin-modules@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "builtins", "purl": "pkg:npm/builtins@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bytes", "purl": "pkg:npm/bytes@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bytes", "purl": "pkg:npm/bytes@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "bytes", "purl": "pkg:npm/bytes@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "bytes", "purl": "pkg:npm/bytes@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cache-base", "purl": "pkg:npm/cache-base@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cacheable-request", "purl": "pkg:npm/cacheable-request@2.1.4", "version": "2.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "calculate-cache-key-for-tree", "purl": "pkg:npm/calculate-cache-key-for-tree@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "call-bind", "purl": "pkg:npm/call-bind@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "call-me-maybe", "purl": "pkg:npm/call-me-maybe@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "caller", "purl": "pkg:npm/caller@0.0.1", "version": "0.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "caller-id", "purl": "pkg:npm/caller-id@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "callsites", "purl": "pkg:npm/callsites@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "camelcase", "purl": "pkg:npm/camelcase@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "camelcase", "purl": "pkg:npm/camelcase@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "camelcase", "purl": "pkg:npm/camelcase@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "camelcase", "purl": "pkg:npm/camelcase@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "camelcase", "purl": "pkg:npm/camelcase@5.3.1", "version": "5.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "camelcase-keys", "purl": "pkg:npm/camelcase-keys@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "can-symlink", "purl": "pkg:npm/can-symlink@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "caniuse-api", "purl": "pkg:npm/caniuse-api@1.6.1", "version": "1.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "caniuse-db", "purl": "pkg:npm/caniuse-db@1.0.30001187", "version": "1.0.30001187" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "caniuse-lite", "purl": "pkg:npm/caniuse-lite@1.0.30000890", "version": "1.0.30000890" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "caniuse-lite", "purl": "pkg:npm/caniuse-lite@1.0.30001187", "version": "1.0.30001187" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "caniuse-lite", "purl": "pkg:npm/caniuse-lite@1.0.30001489", "version": "1.0.30001489" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "caniuse-lite", "purl": "pkg:npm/caniuse-lite@1.0.30001519", "version": "1.0.30001519" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "capture-exit", "purl": "pkg:npm/capture-exit@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "capture-stack-trace", "purl": "pkg:npm/capture-stack-trace@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cardinal", "purl": "pkg:npm/cardinal@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "caseless", "purl": "pkg:npm/caseless@0.12.0", "version": "0.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "center-align", "purl": "pkg:npm/center-align@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "chai", "purl": "pkg:npm/chai@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chainsaw", "purl": "pkg:npm/chainsaw@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chalk", "purl": "pkg:npm/chalk@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chalk", "purl": "pkg:npm/chalk@2.4.1", "version": "2.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "chalk", "purl": "pkg:npm/chalk@2.4.2", "version": "2.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chalk", "purl": "pkg:npm/chalk@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "character-parser", "purl": "pkg:npm/character-parser@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chardet", "purl": "pkg:npm/chardet@0.4.2", "version": "0.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chardet", "purl": "pkg:npm/chardet@0.7.0", "version": "0.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "charm", "purl": "pkg:npm/charm@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "check-error", "purl": "pkg:npm/check-error@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cheerio", "purl": "pkg:npm/cheerio@0.20.0", "version": "0.20.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cheerio", "purl": "pkg:npm/cheerio@0.22.0", "version": "0.22.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "chokidar", "purl": "pkg:npm/chokidar@1.7.0", "version": "1.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "chokidar", "purl": "pkg:npm/chokidar@2.1.6", "version": "2.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "chownr", "purl": "pkg:npm/chownr@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chownr", "purl": "pkg:npm/chownr@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chromium-pickle-js", "purl": "pkg:npm/chromium-pickle-js@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chromium-pickle-js", "purl": "pkg:npm/chromium-pickle-js@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ci-info", "purl": "pkg:npm/ci-info@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ci-info", "purl": "pkg:npm/ci-info@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "clap", "purl": "pkg:npm/clap@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "class-utils", "purl": "pkg:npm/class-utils@0.3.6", "version": "0.3.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "clean-base-url", "purl": "pkg:npm/clean-base-url@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "clean-css", "purl": "pkg:npm/clean-css@3.4.28", "version": "3.4.28" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "clean-css-promise", "purl": "pkg:npm/clean-css-promise@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "clean-up-path", "purl": "pkg:npm/clean-up-path@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cli-boxes", "purl": "pkg:npm/cli-boxes@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cli-cursor", "purl": "pkg:npm/cli-cursor@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cli-cursor", "purl": "pkg:npm/cli-cursor@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cli-spinners", "purl": "pkg:npm/cli-spinners@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cli-spinners", "purl": "pkg:npm/cli-spinners@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cli-spinners", "purl": "pkg:npm/cli-spinners@2.9.0", "version": "2.9.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cli-table", "purl": "pkg:npm/cli-table@0.3.11", "version": "0.3.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cli-width", "purl": "pkg:npm/cli-width@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cliff", "purl": "pkg:npm/cliff@0.1.10", "version": "0.1.10" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cliff", "purl": "pkg:npm/cliff@0.1.9", "version": "0.1.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cliui", "purl": "pkg:npm/cliui@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cliui", "purl": "pkg:npm/cliui@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cliui", "purl": "pkg:npm/cliui@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cliui", "purl": "pkg:npm/cliui@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "clone", "purl": "pkg:npm/clone@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "clone", "purl": "pkg:npm/clone@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "clone-response", "purl": "pkg:npm/clone-response@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "co", "purl": "pkg:npm/co@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "coa", "purl": "pkg:npm/coa@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "code-point-at", "purl": "pkg:npm/code-point-at@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "coffee-script", "purl": "pkg:npm/coffee-script@1.12.7", "version": "1.12.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "collection-visit", "purl": "pkg:npm/collection-visit@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "color", "purl": "pkg:npm/color@0.11.4", "version": "0.11.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "color-convert", "purl": "pkg:npm/color-convert@0.5.3", "version": "0.5.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "color-convert", "purl": "pkg:npm/color-convert@1.9.3", "version": "1.9.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "color-convert", "purl": "pkg:npm/color-convert@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "color-name", "purl": "pkg:npm/color-name@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "color-name", "purl": "pkg:npm/color-name@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "color-string", "purl": "pkg:npm/color-string@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "colorette", "purl": "pkg:npm/colorette@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "colormin", "purl": "pkg:npm/colormin@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "colors", "purl": "pkg:npm/colors@0.6.2", "version": "0.6.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "colors", "purl": "pkg:npm/colors@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "colors", "purl": "pkg:npm/colors@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "colors", "purl": "pkg:npm/colors@1.3.3", "version": "1.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "colors", "purl": "pkg:npm/colors@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "combined-stream", "purl": "pkg:npm/combined-stream@1.0.7", "version": "1.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@2.17.1", "version": "2.17.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@2.20.3", "version": "2.20.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@2.6.0", "version": "2.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@2.8.1", "version": "2.8.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@7.2.0", "version": "7.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "common-tags", "purl": "pkg:npm/common-tags@1.8.0", "version": "1.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "compare-version", "purl": "pkg:npm/compare-version@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "component-bind", "purl": "pkg:npm/component-bind@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "component-emitter", "purl": "pkg:npm/component-emitter@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "component-emitter", "purl": "pkg:npm/component-emitter@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "component-inherit", "purl": "pkg:npm/component-inherit@0.0.3", "version": "0.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "compress-commons", "purl": "pkg:npm/compress-commons@0.1.6", "version": "0.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "compressible", "purl": "pkg:npm/compressible@2.0.18", "version": "2.0.18" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "compression", "purl": "pkg:npm/compression@1.7.4", "version": "1.7.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "concat-map", "purl": "pkg:npm/concat-map@0.0.1", "version": "0.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "concat-stream", "purl": "pkg:npm/concat-stream@1.6.2", "version": "1.6.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "configstore", "purl": "pkg:npm/configstore@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "configstore", "purl": "pkg:npm/configstore@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "connect", "purl": "pkg:npm/connect@3.7.0", "version": "3.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "console-control-strings", "purl": "pkg:npm/console-control-strings@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "console-ui", "purl": "pkg:npm/console-ui@2.2.3", "version": "2.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "console-ui", "purl": "pkg:npm/console-ui@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "consolidate", "purl": "pkg:npm/consolidate@0.15.1", "version": "0.15.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "constantinople", "purl": "pkg:npm/constantinople@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "content-disposition", "purl": "pkg:npm/content-disposition@0.5.3", "version": "0.5.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "content-disposition", "purl": "pkg:npm/content-disposition@0.5.4", "version": "0.5.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "content-type", "purl": "pkg:npm/content-type@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "content-type", "purl": "pkg:npm/content-type@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "continuable-cache", "purl": "pkg:npm/continuable-cache@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "convert-source-map", "purl": "pkg:npm/convert-source-map@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "convert-source-map", "purl": "pkg:npm/convert-source-map@1.7.0", "version": "1.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cookie", "purl": "pkg:npm/cookie@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cookie", "purl": "pkg:npm/cookie@0.4.2", "version": "0.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cookie", "purl": "pkg:npm/cookie@0.5.0", "version": "0.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cookie-signature", "purl": "pkg:npm/cookie-signature@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "copy-anything", "purl": "pkg:npm/copy-anything@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "copy-dereference", "purl": "pkg:npm/copy-dereference@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "copy-descriptor", "purl": "pkg:npm/copy-descriptor@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "core-js", "purl": "pkg:npm/core-js@2.5.7", "version": "2.5.7" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "core-js", "purl": "pkg:npm/core-js@2.6.12", "version": "2.6.12" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "core-js-compat", "purl": "pkg:npm/core-js-compat@3.30.2", "version": "3.30.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "core-js-compat", "purl": "pkg:npm/core-js-compat@3.32.0", "version": "3.32.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "core-js-compat", "purl": "pkg:npm/core-js-compat@3.9.0", "version": "3.9.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "core-object", "purl": "pkg:npm/core-object@3.1.5", "version": "3.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "core-util-is", "purl": "pkg:npm/core-util-is@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cors", "purl": "pkg:npm/cors@2.8.5", "version": "2.8.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cp-file", "purl": "pkg:npm/cp-file@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "crc32-stream", "purl": "pkg:npm/crc32-stream@0.3.4", "version": "0.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "create-error-class", "purl": "pkg:npm/create-error-class@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cross-spawn", "purl": "pkg:npm/cross-spawn@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cross-spawn", "purl": "pkg:npm/cross-spawn@6.0.5", "version": "6.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cross-spawn", "purl": "pkg:npm/cross-spawn@7.0.3", "version": "7.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cross-spawn-async", "purl": "pkg:npm/cross-spawn-async@2.2.5", "version": "2.2.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cross-spawn-promise", "purl": "pkg:npm/cross-spawn-promise@0.10.2", "version": "0.10.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cryptiles", "purl": "pkg:npm/cryptiles@2.0.5", "version": "2.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "crypto-random-string", "purl": "pkg:npm/crypto-random-string@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cson", "purl": "pkg:npm/cson@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cson-parser", "purl": "pkg:npm/cson-parser@1.3.5", "version": "1.3.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "css", "purl": "pkg:npm/css@1.0.8", "version": "1.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "css", "purl": "pkg:npm/css@2.2.4", "version": "2.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "css-color-names", "purl": "pkg:npm/css-color-names@0.0.4", "version": "0.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "css-parse", "purl": "pkg:npm/css-parse@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "css-parse", "purl": "pkg:npm/css-parse@1.7.0", "version": "1.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "css-parse", "purl": "pkg:npm/css-parse@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "css-select", "purl": "pkg:npm/css-select@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "css-stringify", "purl": "pkg:npm/css-stringify@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "css-what", "purl": "pkg:npm/css-what@2.1.3", "version": "2.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cssnano", "purl": "pkg:npm/cssnano@3.10.0", "version": "3.10.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "csso", "purl": "pkg:npm/csso@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "csso", "purl": "pkg:npm/csso@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cssom", "purl": "pkg:npm/cssom@0.3.8", "version": "0.3.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cssstyle", "purl": "pkg:npm/cssstyle@0.2.37", "version": "0.2.37" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cuint", "purl": "pkg:npm/cuint@0.2.2", "version": "0.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "currently-unhandled", "purl": "pkg:npm/currently-unhandled@0.4.1", "version": "0.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "cycle", "purl": "pkg:npm/cycle@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "dag-map", "purl": "pkg:npm/dag-map@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "dashdash", "purl": "pkg:npm/dashdash@1.14.1", "version": "1.14.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "de-indent", "purl": "pkg:npm/de-indent@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "debug", "purl": "pkg:npm/debug@2.6.9", "version": "2.6.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "debug", "purl": "pkg:npm/debug@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "debug", "purl": "pkg:npm/debug@3.2.6", "version": "3.2.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "debug", "purl": "pkg:npm/debug@3.2.7", "version": "3.2.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "debug", "purl": "pkg:npm/debug@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "debug", "purl": "pkg:npm/debug@4.3.1", "version": "4.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "debug", "purl": "pkg:npm/debug@4.3.4", "version": "4.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "decamelize", "purl": "pkg:npm/decamelize@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "decode-uri-component", "purl": "pkg:npm/decode-uri-component@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "decompress-response", "purl": "pkg:npm/decompress-response@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "decompress-zip", "purl": "pkg:npm/decompress-zip@0.3.3", "version": "0.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "deep-eql", "purl": "pkg:npm/deep-eql@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "deep-equal", "purl": "pkg:npm/deep-equal@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "deep-equal", "purl": "pkg:npm/deep-equal@0.2.2", "version": "0.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "deep-equal", "purl": "pkg:npm/deep-equal@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "deep-extend", "purl": "pkg:npm/deep-extend@0.6.0", "version": "0.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "deep-is", "purl": "pkg:npm/deep-is@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "defaults", "purl": "pkg:npm/defaults@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "define-properties", "purl": "pkg:npm/define-properties@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "define-properties", "purl": "pkg:npm/define-properties@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "define-property", "purl": "pkg:npm/define-property@0.2.5", "version": "0.2.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "define-property", "purl": "pkg:npm/define-property@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "define-property", "purl": "pkg:npm/define-property@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "defined", "purl": "pkg:npm/defined@0.0.0", "version": "0.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "defined", "purl": "pkg:npm/defined@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "delayed-stream", "purl": "pkg:npm/delayed-stream@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "delegates", "purl": "pkg:npm/delegates@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "depd", "purl": "pkg:npm/depd@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "depd", "purl": "pkg:npm/depd@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "destroy", "purl": "pkg:npm/destroy@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "destroy", "purl": "pkg:npm/destroy@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "detect-file", "purl": "pkg:npm/detect-file@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "detect-indent", "purl": "pkg:npm/detect-indent@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "detect-indent", "purl": "pkg:npm/detect-indent@6.1.0", "version": "6.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "detect-libc", "purl": "pkg:npm/detect-libc@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "detect-newline", "purl": "pkg:npm/detect-newline@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "detective-less", "purl": "pkg:npm/detective-less@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "detective-sass", "purl": "pkg:npm/detective-sass@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "detective-scss", "purl": "pkg:npm/detective-scss@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "detective-stylus", "purl": "pkg:npm/detective-stylus@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "devtron", "purl": "pkg:npm/devtron@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "diff", "purl": "pkg:npm/diff@3.5.0", "version": "3.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "diff", "purl": "pkg:npm/diff@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "dir-glob", "purl": "pkg:npm/dir-glob@2.2.2", "version": "2.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "dir-glob", "purl": "pkg:npm/dir-glob@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "director", "purl": "pkg:npm/director@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "doctrine", "purl": "pkg:npm/doctrine@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "dom-serializer", "purl": "pkg:npm/dom-serializer@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "domelementtype", "purl": "pkg:npm/domelementtype@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "domelementtype", "purl": "pkg:npm/domelementtype@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "domhandler", "purl": "pkg:npm/domhandler@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "domutils", "purl": "pkg:npm/domutils@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "dot-prop", "purl": "pkg:npm/dot-prop@4.2.1", "version": "4.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ds-store", "purl": "pkg:npm/ds-store@0.1.6", "version": "0.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "duplexer3", "purl": "pkg:npm/duplexer3@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "duplexer3", "purl": "pkg:npm/duplexer3@0.1.5", "version": "0.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eachr", "purl": "pkg:npm/eachr@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ecc-jsbn", "purl": "pkg:npm/ecc-jsbn@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "editions", "purl": "pkg:npm/editions@1.3.4", "version": "1.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "editions", "purl": "pkg:npm/editions@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ee-first", "purl": "pkg:npm/ee-first@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron", "purl": "pkg:npm/electron@3.0.13", "version": "3.0.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-compile", "purl": "pkg:npm/electron-compile@6.4.4", "version": "6.4.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-compilers", "purl": "pkg:npm/electron-compilers@5.9.0", "version": "5.9.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-download", "purl": "pkg:npm/electron-download@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-forge", "purl": "pkg:npm/electron-forge@5.2.4", "version": "5.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-forge-template-angular2", "purl": "pkg:npm/electron-forge-template-angular2@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-forge-template-react", "purl": "pkg:npm/electron-forge-template-react@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-forge-template-react-typescript", "purl": "pkg:npm/electron-forge-template-react-typescript@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-forge-template-vue", "purl": "pkg:npm/electron-forge-template-vue@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-installer-common", "purl": "pkg:npm/electron-installer-common@0.6.3", "version": "0.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-installer-debian", "purl": "pkg:npm/electron-installer-debian@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-installer-dmg", "purl": "pkg:npm/electron-installer-dmg@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-installer-flatpak", "purl": "pkg:npm/electron-installer-flatpak@0.8.0", "version": "0.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-installer-redhat", "purl": "pkg:npm/electron-installer-redhat@0.5.0", "version": "0.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-installer-snap", "purl": "pkg:npm/electron-installer-snap@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-osx-sign", "purl": "pkg:npm/electron-osx-sign@0.4.17", "version": "0.4.17" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-packager", "purl": "pkg:npm/electron-packager@11.2.1", "version": "11.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-prebuilt-compile", "purl": "pkg:npm/electron-prebuilt-compile@3.0.13", "version": "3.0.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-protocol-serve", "purl": "pkg:npm/electron-protocol-serve@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-rebuild", "purl": "pkg:npm/electron-rebuild@1.11.0", "version": "1.11.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-squirrel-startup", "purl": "pkg:npm/electron-squirrel-startup@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "electron-to-chromium", "purl": "pkg:npm/electron-to-chromium@1.3.668", "version": "1.3.668" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-to-chromium", "purl": "pkg:npm/electron-to-chromium@1.3.75", "version": "1.3.75" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-to-chromium", "purl": "pkg:npm/electron-to-chromium@1.4.402", "version": "1.4.402" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-to-chromium", "purl": "pkg:npm/electron-to-chromium@1.4.404", "version": "1.4.404" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-to-chromium", "purl": "pkg:npm/electron-to-chromium@1.4.487", "version": "1.4.487" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-windows-store", "purl": "pkg:npm/electron-windows-store@0.12.0", "version": "0.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-winstaller", "purl": "pkg:npm/electron-winstaller@2.7.0", "version": "2.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "electron-wix-msi", "purl": "pkg:npm/electron-wix-msi@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-ajax", "purl": "pkg:npm/ember-ajax@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-assign-polyfill", "purl": "pkg:npm/ember-assign-polyfill@2.7.2", "version": "2.7.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-assign-polyfill", "purl": "pkg:npm/ember-assign-polyfill@2.7.3", "version": "2.7.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli", "purl": "pkg:npm/ember-cli@3.12.1", "version": "3.12.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-app-version", "purl": "pkg:npm/ember-cli-app-version@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-babel", "purl": "pkg:npm/ember-cli-babel@6.18.0", "version": "6.18.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "ember-cli-babel", "purl": "pkg:npm/ember-cli-babel@7.23.1", "version": "7.23.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-babel", "purl": "pkg:npm/ember-cli-babel@7.24.0", "version": "7.24.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-babel", "purl": "pkg:npm/ember-cli-babel@7.26.11", "version": "7.26.11" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "ember-cli-babel-plugin-helpers", "purl": "pkg:npm/ember-cli-babel-plugin-helpers@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-broccoli-sane-watcher", "purl": "pkg:npm/ember-cli-broccoli-sane-watcher@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-dependency-checker", "purl": "pkg:npm/ember-cli-dependency-checker@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-eslint", "purl": "pkg:npm/ember-cli-eslint@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-get-component-path-option", "purl": "pkg:npm/ember-cli-get-component-path-option@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-htmlbars", "purl": "pkg:npm/ember-cli-htmlbars@2.0.5", "version": "2.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "ember-cli-htmlbars", "purl": "pkg:npm/ember-cli-htmlbars@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-htmlbars", "purl": "pkg:npm/ember-cli-htmlbars@4.4.1", "version": "4.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-htmlbars-inline-precompile", "purl": "pkg:npm/ember-cli-htmlbars-inline-precompile@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-import-polyfill", "purl": "pkg:npm/ember-cli-import-polyfill@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-inject-live-reload", "purl": "pkg:npm/ember-cli-inject-live-reload@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-is-package-missing", "purl": "pkg:npm/ember-cli-is-package-missing@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-less", "purl": "pkg:npm/ember-cli-less@2.0.6", "version": "2.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-lodash-subset", "purl": "pkg:npm/ember-cli-lodash-subset@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-moment-shim", "purl": "pkg:npm/ember-cli-moment-shim@3.8.0", "version": "3.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-normalize-entity-name", "purl": "pkg:npm/ember-cli-normalize-entity-name@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-path-utils", "purl": "pkg:npm/ember-cli-path-utils@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-preprocess-registry", "purl": "pkg:npm/ember-cli-preprocess-registry@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-sri", "purl": "pkg:npm/ember-cli-sri@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-string-utils", "purl": "pkg:npm/ember-cli-string-utils@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-template-lint", "purl": "pkg:npm/ember-cli-template-lint@1.0.0-beta.3", "version": "1.0.0-beta.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-test-info", "purl": "pkg:npm/ember-cli-test-info@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-test-loader", "purl": "pkg:npm/ember-cli-test-loader@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-typescript", "purl": "pkg:npm/ember-cli-typescript@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-uglify", "purl": "pkg:npm/ember-cli-uglify@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-version-checker", "purl": "pkg:npm/ember-cli-version-checker@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-version-checker", "purl": "pkg:npm/ember-cli-version-checker@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-version-checker", "purl": "pkg:npm/ember-cli-version-checker@3.1.3", "version": "3.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "ember-cli-version-checker", "purl": "pkg:npm/ember-cli-version-checker@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-cli-version-checker", "purl": "pkg:npm/ember-cli-version-checker@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-compatibility-helpers", "purl": "pkg:npm/ember-compatibility-helpers@1.2.6", "version": "1.2.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-data", "purl": "pkg:npm/ember-data@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-electron", "purl": "pkg:npm/ember-electron@2.10.2", "version": "2.10.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-export-application-global", "purl": "pkg:npm/ember-export-application-global@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-factory-for-polyfill", "purl": "pkg:npm/ember-factory-for-polyfill@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-get-config", "purl": "pkg:npm/ember-get-config@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-getowner-polyfill", "purl": "pkg:npm/ember-getowner-polyfill@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-inflector", "purl": "pkg:npm/ember-inflector@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-inspector", "purl": "pkg:npm/ember-inspector@3.13.2", "version": "3.13.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-load-initializers", "purl": "pkg:npm/ember-load-initializers@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-macro-helpers", "purl": "pkg:npm/ember-macro-helpers@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-maybe-import-regenerator", "purl": "pkg:npm/ember-maybe-import-regenerator@0.1.6", "version": "0.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-moment", "purl": "pkg:npm/ember-moment@7.8.0", "version": "7.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-qunit", "purl": "pkg:npm/ember-qunit@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-resolver", "purl": "pkg:npm/ember-resolver@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "ember-rfc176-data", "purl": "pkg:npm/ember-rfc176-data@0.3.16", "version": "0.3.16" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-rfc176-data", "purl": "pkg:npm/ember-rfc176-data@0.3.18", "version": "0.3.18" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-rfc176-data", "purl": "pkg:npm/ember-rfc176-data@0.3.6", "version": "0.3.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-route-action-helper", "purl": "pkg:npm/ember-route-action-helper@2.0.8", "version": "2.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-router-generator", "purl": "pkg:npm/ember-router-generator@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-source", "purl": "pkg:npm/ember-source@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-source-channel-url", "purl": "pkg:npm/ember-source-channel-url@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-svg-jar", "purl": "pkg:npm/ember-svg-jar@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-template-lint", "purl": "pkg:npm/ember-template-lint@1.14.0", "version": "1.14.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-test-waiters", "purl": "pkg:npm/ember-test-waiters@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ember-weakmap", "purl": "pkg:npm/ember-weakmap@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "emoji-regex", "purl": "pkg:npm/emoji-regex@7.0.3", "version": "7.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "encode-utf8", "purl": "pkg:npm/encode-utf8@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "encodeurl", "purl": "pkg:npm/encodeurl@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "end-of-stream", "purl": "pkg:npm/end-of-stream@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "engine.io", "purl": "pkg:npm/engine.io@3.6.1", "version": "3.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "engine.io-client", "purl": "pkg:npm/engine.io-client@3.5.3", "version": "3.5.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "engine.io-parser", "purl": "pkg:npm/engine.io-parser@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "ensure-posix-path", "purl": "pkg:npm/ensure-posix-path@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "ensure-posix-path", "purl": "pkg:npm/ensure-posix-path@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "entities", "purl": "pkg:npm/entities@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "entities", "purl": "pkg:npm/entities@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "entities", "purl": "pkg:npm/entities@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "env-paths", "purl": "pkg:npm/env-paths@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "env-paths", "purl": "pkg:npm/env-paths@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "errlop", "purl": "pkg:npm/errlop@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "errno", "purl": "pkg:npm/errno@0.1.7", "version": "0.1.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "error", "purl": "pkg:npm/error@7.2.1", "version": "7.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "error-ex", "purl": "pkg:npm/error-ex@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "es-abstract", "purl": "pkg:npm/es-abstract@1.13.0", "version": "1.13.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "es-abstract", "purl": "pkg:npm/es-abstract@1.21.2", "version": "1.21.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "es-array-method-boxes-properly", "purl": "pkg:npm/es-array-method-boxes-properly@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "es-set-tostringtag", "purl": "pkg:npm/es-set-tostringtag@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "es-to-primitive", "purl": "pkg:npm/es-to-primitive@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "es-to-primitive", "purl": "pkg:npm/es-to-primitive@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "es6-promise", "purl": "pkg:npm/es6-promise@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "es6-promise", "purl": "pkg:npm/es6-promise@4.2.8", "version": "4.2.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "es6-promisify", "purl": "pkg:npm/es6-promisify@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "escalade", "purl": "pkg:npm/escalade@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "escape-html", "purl": "pkg:npm/escape-html@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "escape-string-regexp", "purl": "pkg:npm/escape-string-regexp@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "escodegen", "purl": "pkg:npm/escodegen@1.14.3", "version": "1.14.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "escodegen", "purl": "pkg:npm/escodegen@1.8.1", "version": "1.8.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eslint", "purl": "pkg:npm/eslint@5.16.0", "version": "5.16.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eslint-plugin-ember", "purl": "pkg:npm/eslint-plugin-ember@6.10.1", "version": "6.10.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eslint-plugin-ember-suave", "purl": "pkg:npm/eslint-plugin-ember-suave@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eslint-plugin-es", "purl": "pkg:npm/eslint-plugin-es@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eslint-plugin-node", "purl": "pkg:npm/eslint-plugin-node@9.2.0", "version": "9.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eslint-scope", "purl": "pkg:npm/eslint-scope@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eslint-utils", "purl": "pkg:npm/eslint-utils@1.4.3", "version": "1.4.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eslint-visitor-keys", "purl": "pkg:npm/eslint-visitor-keys@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "esm", "purl": "pkg:npm/esm@3.2.25", "version": "3.2.25" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "espree", "purl": "pkg:npm/espree@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "esprima", "purl": "pkg:npm/esprima@2.7.3", "version": "2.7.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "esprima", "purl": "pkg:npm/esprima@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "esprima", "purl": "pkg:npm/esprima@3.1.3", "version": "3.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "esprima", "purl": "pkg:npm/esprima@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "esquery", "purl": "pkg:npm/esquery@1.5.0", "version": "1.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "esrecurse", "purl": "pkg:npm/esrecurse@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "estraverse", "purl": "pkg:npm/estraverse@1.9.3", "version": "1.9.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "estraverse", "purl": "pkg:npm/estraverse@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "estraverse", "purl": "pkg:npm/estraverse@5.3.0", "version": "5.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "estree-walker", "purl": "pkg:npm/estree-walker@0.6.1", "version": "0.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "esutils", "purl": "pkg:npm/esutils@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "esutils", "purl": "pkg:npm/esutils@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "etag", "purl": "pkg:npm/etag@1.8.1", "version": "1.8.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "event-stream", "purl": "pkg:npm/event-stream@0.5.3", "version": "0.5.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "eventemitter2", "purl": "pkg:npm/eventemitter2@0.4.14", "version": "0.4.14" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "eventemitter3", "purl": "pkg:npm/eventemitter3@4.0.7", "version": "4.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "events", "purl": "pkg:npm/events@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "events-to-array", "purl": "pkg:npm/events-to-array@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "exact-version", "purl": "pkg:npm/exact-version@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "exec-file-sync", "purl": "pkg:npm/exec-file-sync@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "exec-sh", "purl": "pkg:npm/exec-sh@0.3.6", "version": "0.3.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "execa", "purl": "pkg:npm/execa@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "execa", "purl": "pkg:npm/execa@0.7.0", "version": "0.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "execa", "purl": "pkg:npm/execa@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "execa", "purl": "pkg:npm/execa@3.4.0", "version": "3.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "exists-sync", "purl": "pkg:npm/exists-sync@0.0.4", "version": "0.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "exit", "purl": "pkg:npm/exit@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "exit-hook", "purl": "pkg:npm/exit-hook@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "expand-brackets", "purl": "pkg:npm/expand-brackets@0.1.5", "version": "0.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "expand-brackets", "purl": "pkg:npm/expand-brackets@2.1.4", "version": "2.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "expand-tilde", "purl": "pkg:npm/expand-tilde@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "express", "purl": "pkg:npm/express@4.17.0", "version": "4.17.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "express", "purl": "pkg:npm/express@4.18.2", "version": "4.18.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "extend", "purl": "pkg:npm/extend@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "extend-shallow", "purl": "pkg:npm/extend-shallow@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "extend-shallow", "purl": "pkg:npm/extend-shallow@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "external-editor", "purl": "pkg:npm/external-editor@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "external-editor", "purl": "pkg:npm/external-editor@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "external-editor", "purl": "pkg:npm/external-editor@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "extglob", "purl": "pkg:npm/extglob@0.3.2", "version": "0.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "extglob", "purl": "pkg:npm/extglob@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "extract-opts", "purl": "pkg:npm/extract-opts@3.4.0", "version": "3.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "extract-zip", "purl": "pkg:npm/extract-zip@1.7.0", "version": "1.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "extsprintf", "purl": "pkg:npm/extsprintf@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "eyes", "purl": "pkg:npm/eyes@0.1.8", "version": "0.1.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fast-deep-equal", "purl": "pkg:npm/fast-deep-equal@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fast-deep-equal", "purl": "pkg:npm/fast-deep-equal@3.1.3", "version": "3.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fast-glob", "purl": "pkg:npm/fast-glob@2.2.7", "version": "2.2.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fast-glob", "purl": "pkg:npm/fast-glob@3.2.5", "version": "3.2.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fast-json-stable-stringify", "purl": "pkg:npm/fast-json-stable-stringify@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fast-levenshtein", "purl": "pkg:npm/fast-levenshtein@2.0.6", "version": "2.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "fast-ordered-set", "purl": "pkg:npm/fast-ordered-set@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fast-sourcemap-concat", "purl": "pkg:npm/fast-sourcemap-concat@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fastq", "purl": "pkg:npm/fastq@1.10.1", "version": "1.10.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "faye-websocket", "purl": "pkg:npm/faye-websocket@0.10.0", "version": "0.10.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fb-watchman", "purl": "pkg:npm/fb-watchman@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fd-slicer", "purl": "pkg:npm/fd-slicer@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fd-slicer", "purl": "pkg:npm/fd-slicer@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "figures", "purl": "pkg:npm/figures@1.7.0", "version": "1.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "figures", "purl": "pkg:npm/figures@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "file-entry-cache", "purl": "pkg:npm/file-entry-cache@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "file-uri-to-path", "purl": "pkg:npm/file-uri-to-path@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "file-url", "purl": "pkg:npm/file-url@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "filename-regex", "purl": "pkg:npm/filename-regex@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "filesize", "purl": "pkg:npm/filesize@4.2.1", "version": "4.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "fill-range", "purl": "pkg:npm/fill-range@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fill-range", "purl": "pkg:npm/fill-range@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "finalhandler", "purl": "pkg:npm/finalhandler@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "finalhandler", "purl": "pkg:npm/finalhandler@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "find-babel-config", "purl": "pkg:npm/find-babel-config@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "find-index", "purl": "pkg:npm/find-index@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "find-yarn-workspace-root", "purl": "pkg:npm/find-yarn-workspace-root@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "findit2", "purl": "pkg:npm/findit2@2.2.3", "version": "2.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "findup-sync", "purl": "pkg:npm/findup-sync@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fireworm", "purl": "pkg:npm/fireworm@0.7.2", "version": "0.7.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "fixturify", "purl": "pkg:npm/fixturify@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "fixturify-project", "purl": "pkg:npm/fixturify-project@1.10.0", "version": "1.10.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "flat", "purl": "pkg:npm/flat@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "flat-cache", "purl": "pkg:npm/flat-cache@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "flatiron", "purl": "pkg:npm/flatiron@0.4.3", "version": "0.4.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "flatpak-bundler", "purl": "pkg:npm/flatpak-bundler@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "flatted", "purl": "pkg:npm/flatted@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "flatten", "purl": "pkg:npm/flatten@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "flatten-packages", "purl": "pkg:npm/flatten-packages@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fmix", "purl": "pkg:npm/fmix@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "follow-redirects", "purl": "pkg:npm/follow-redirects@1.15.2", "version": "1.15.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "for-each", "purl": "pkg:npm/for-each@0.3.3", "version": "0.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "for-in", "purl": "pkg:npm/for-in@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "for-own", "purl": "pkg:npm/for-own@0.1.5", "version": "0.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "forever", "purl": "pkg:npm/forever@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "forever-agent", "purl": "pkg:npm/forever-agent@0.6.1", "version": "0.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "forever-monitor", "purl": "pkg:npm/forever-monitor@1.7.1", "version": "1.7.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "form-data", "purl": "pkg:npm/form-data@2.1.4", "version": "2.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "form-data", "purl": "pkg:npm/form-data@2.3.3", "version": "2.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "forwarded", "purl": "pkg:npm/forwarded@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "forwarded", "purl": "pkg:npm/forwarded@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "fragment-cache", "purl": "pkg:npm/fragment-cache@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "fresh", "purl": "pkg:npm/fresh@0.5.2", "version": "0.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "from2", "purl": "pkg:npm/from2@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@0.24.0", "version": "0.24.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@0.26.7", "version": "0.26.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@0.30.0", "version": "0.30.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@6.0.1", "version": "6.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@8.1.0", "version": "8.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@9.1.0", "version": "9.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-merger", "purl": "pkg:npm/fs-merger@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "fs-minipass", "purl": "pkg:npm/fs-minipass@1.2.5", "version": "1.2.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-minipass", "purl": "pkg:npm/fs-minipass@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-temp", "purl": "pkg:npm/fs-temp@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "fs-tree-diff", "purl": "pkg:npm/fs-tree-diff@0.5.9", "version": "0.5.9" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "fs-tree-diff", "purl": "pkg:npm/fs-tree-diff@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "fs-updater", "purl": "pkg:npm/fs-updater@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-xattr", "purl": "pkg:npm/fs-xattr@0.1.17", "version": "0.1.17" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "fs.realpath", "purl": "pkg:npm/fs.realpath@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "fsevents", "purl": "pkg:npm/fsevents@1.2.11", "version": "1.2.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fstream", "purl": "pkg:npm/fstream@1.0.12", "version": "1.0.12" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "function-bind", "purl": "pkg:npm/function-bind@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "function.prototype.name", "purl": "pkg:npm/function.prototype.name@1.1.5", "version": "1.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "functional-red-black-tree", "purl": "pkg:npm/functional-red-black-tree@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "functions-have-names", "purl": "pkg:npm/functions-have-names@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "gar", "purl": "pkg:npm/gar@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "gauge", "purl": "pkg:npm/gauge@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "gauge", "purl": "pkg:npm/gauge@2.7.4", "version": "2.7.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "generate-function", "purl": "pkg:npm/generate-function@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "generate-object-property", "purl": "pkg:npm/generate-object-property@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "gensync", "purl": "pkg:npm/gensync@1.0.0-beta.2", "version": "1.0.0-beta.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "get-caller-file", "purl": "pkg:npm/get-caller-file@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "get-caller-file", "purl": "pkg:npm/get-caller-file@2.0.5", "version": "2.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "get-folder-size", "purl": "pkg:npm/get-folder-size@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "get-func-name", "purl": "pkg:npm/get-func-name@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "get-installed-path", "purl": "pkg:npm/get-installed-path@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "get-intrinsic", "purl": "pkg:npm/get-intrinsic@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "get-intrinsic", "purl": "pkg:npm/get-intrinsic@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "get-package-info", "purl": "pkg:npm/get-package-info@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "get-stdin", "purl": "pkg:npm/get-stdin@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "get-stream", "purl": "pkg:npm/get-stream@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "get-stream", "purl": "pkg:npm/get-stream@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "get-stream", "purl": "pkg:npm/get-stream@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "get-symbol-description", "purl": "pkg:npm/get-symbol-description@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "get-value", "purl": "pkg:npm/get-value@2.0.6", "version": "2.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "getpass", "purl": "pkg:npm/getpass@0.1.7", "version": "0.1.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "git-hooks-list", "purl": "pkg:npm/git-hooks-list@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "git-repo-info", "purl": "pkg:npm/git-repo-info@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "git-repo-info", "purl": "pkg:npm/git-repo-info@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "git-repo-version", "purl": "pkg:npm/git-repo-version@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "glob", "purl": "pkg:npm/glob@3.2.11", "version": "3.2.11" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "glob", "purl": "pkg:npm/glob@5.0.15", "version": "5.0.15" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "glob", "purl": "pkg:npm/glob@6.0.4", "version": "6.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "glob", "purl": "pkg:npm/glob@7.0.6", "version": "7.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "glob", "purl": "pkg:npm/glob@7.1.3", "version": "7.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "glob", "purl": "pkg:npm/glob@7.1.4", "version": "7.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "glob", "purl": "pkg:npm/glob@7.1.6", "version": "7.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "glob", "purl": "pkg:npm/glob@7.2.3", "version": "7.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "glob-base", "purl": "pkg:npm/glob-base@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "glob-parent", "purl": "pkg:npm/glob-parent@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "glob-parent", "purl": "pkg:npm/glob-parent@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "glob-parent", "purl": "pkg:npm/glob-parent@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "glob-promise", "purl": "pkg:npm/glob-promise@3.4.0", "version": "3.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "glob-to-regexp", "purl": "pkg:npm/glob-to-regexp@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "global-dirs", "purl": "pkg:npm/global-dirs@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "global-modules", "purl": "pkg:npm/global-modules@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "global-prefix", "purl": "pkg:npm/global-prefix@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "globals", "purl": "pkg:npm/globals@11.12.0", "version": "11.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "globals", "purl": "pkg:npm/globals@9.18.0", "version": "9.18.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "globalthis", "purl": "pkg:npm/globalthis@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "globalyzer", "purl": "pkg:npm/globalyzer@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "globby", "purl": "pkg:npm/globby@10.0.0", "version": "10.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "globby", "purl": "pkg:npm/globby@10.0.2", "version": "10.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "globby", "purl": "pkg:npm/globby@9.2.0", "version": "9.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "globrex", "purl": "pkg:npm/globrex@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "gonzales-pe", "purl": "pkg:npm/gonzales-pe@3.4.7", "version": "3.4.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "gonzales-pe", "purl": "pkg:npm/gonzales-pe@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "gopd", "purl": "pkg:npm/gopd@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "got", "purl": "pkg:npm/got@6.7.1", "version": "6.7.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "got", "purl": "pkg:npm/got@8.3.2", "version": "8.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "graceful-fs", "purl": "pkg:npm/graceful-fs@3.0.12", "version": "3.0.12" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "graceful-fs", "purl": "pkg:npm/graceful-fs@4.1.11", "version": "4.1.11" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "graceful-fs", "purl": "pkg:npm/graceful-fs@4.1.15", "version": "4.1.15" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "graceful-fs", "purl": "pkg:npm/graceful-fs@4.2.11", "version": "4.2.11" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "graceful-fs", "purl": "pkg:npm/graceful-fs@4.2.6", "version": "4.2.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "graceful-readlink", "purl": "pkg:npm/graceful-readlink@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "graphql", "purl": "pkg:npm/graphql@0.9.6", "version": "0.9.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "graphql-tag", "purl": "pkg:npm/graphql-tag@2.11.0", "version": "2.11.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "growl", "purl": "pkg:npm/growl@1.10.5", "version": "1.10.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "growly", "purl": "pkg:npm/growly@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "handlebars", "purl": "pkg:npm/handlebars@4.7.7", "version": "4.7.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "har-schema", "purl": "pkg:npm/har-schema@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "har-schema", "purl": "pkg:npm/har-schema@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "har-validator", "purl": "pkg:npm/har-validator@4.2.1", "version": "4.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "har-validator", "purl": "pkg:npm/har-validator@5.1.3", "version": "5.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "has", "purl": "pkg:npm/has@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-ansi", "purl": "pkg:npm/has-ansi@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-ansi", "purl": "pkg:npm/has-ansi@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-bigints", "purl": "pkg:npm/has-bigints@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-binary2", "purl": "pkg:npm/has-binary2@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-cors", "purl": "pkg:npm/has-cors@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-flag", "purl": "pkg:npm/has-flag@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "has-flag", "purl": "pkg:npm/has-flag@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-flag", "purl": "pkg:npm/has-flag@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-property-descriptors", "purl": "pkg:npm/has-property-descriptors@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-proto", "purl": "pkg:npm/has-proto@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-symbol-support-x", "purl": "pkg:npm/has-symbol-support-x@1.4.2", "version": "1.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "has-symbols", "purl": "pkg:npm/has-symbols@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "has-symbols", "purl": "pkg:npm/has-symbols@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-symbols", "purl": "pkg:npm/has-symbols@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-to-string-tag-x", "purl": "pkg:npm/has-to-string-tag-x@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "has-tostringtag", "purl": "pkg:npm/has-tostringtag@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "has-unicode", "purl": "pkg:npm/has-unicode@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "has-value", "purl": "pkg:npm/has-value@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "has-value", "purl": "pkg:npm/has-value@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "has-values", "purl": "pkg:npm/has-values@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "has-values", "purl": "pkg:npm/has-values@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "hash-for-dep", "purl": "pkg:npm/hash-for-dep@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "hash-for-dep", "purl": "pkg:npm/hash-for-dep@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "hash-sum", "purl": "pkg:npm/hash-sum@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "hawk", "purl": "pkg:npm/hawk@3.1.3", "version": "3.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "he", "purl": "pkg:npm/he@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "heimdalljs", "purl": "pkg:npm/heimdalljs@0.2.6", "version": "0.2.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "heimdalljs", "purl": "pkg:npm/heimdalljs@0.3.3", "version": "0.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "heimdalljs-fs-monitor", "purl": "pkg:npm/heimdalljs-fs-monitor@0.2.3", "version": "0.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "heimdalljs-graph", "purl": "pkg:npm/heimdalljs-graph@0.3.5", "version": "0.3.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "heimdalljs-logger", "purl": "pkg:npm/heimdalljs-logger@0.1.10", "version": "0.1.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "highlight.js", "purl": "pkg:npm/highlight.js@9.18.5", "version": "9.18.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "hoek", "purl": "pkg:npm/hoek@2.16.3", "version": "2.16.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "home-or-tmp", "purl": "pkg:npm/home-or-tmp@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "homedir-polyfill", "purl": "pkg:npm/homedir-polyfill@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "hosted-git-info", "purl": "pkg:npm/hosted-git-info@2.8.9", "version": "2.8.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "html-comment-regex", "purl": "pkg:npm/html-comment-regex@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "htmlparser2", "purl": "pkg:npm/htmlparser2@3.10.0", "version": "3.10.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "htmlparser2", "purl": "pkg:npm/htmlparser2@3.8.3", "version": "3.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "http-cache-semantics", "purl": "pkg:npm/http-cache-semantics@3.8.1", "version": "3.8.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "http-errors", "purl": "pkg:npm/http-errors@1.6.3", "version": "1.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "http-errors", "purl": "pkg:npm/http-errors@1.7.2", "version": "1.7.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "http-errors", "purl": "pkg:npm/http-errors@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "http-parser-js", "purl": "pkg:npm/http-parser-js@0.5.8", "version": "0.5.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "http-proxy", "purl": "pkg:npm/http-proxy@1.18.1", "version": "1.18.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "http-proxy-agent", "purl": "pkg:npm/http-proxy-agent@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "http-signature", "purl": "pkg:npm/http-signature@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "http-signature", "purl": "pkg:npm/http-signature@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "https", "purl": "pkg:npm/https@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "https-proxy-agent", "purl": "pkg:npm/https-proxy-agent@2.2.4", "version": "2.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "human-signals", "purl": "pkg:npm/human-signals@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "humanize-plus", "purl": "pkg:npm/humanize-plus@1.8.2", "version": "1.8.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "i", "purl": "pkg:npm/i@0.3.6", "version": "0.3.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "iconv-lite", "purl": "pkg:npm/iconv-lite@0.4.19", "version": "0.4.19" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "iconv-lite", "purl": "pkg:npm/iconv-lite@0.4.24", "version": "0.4.24" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ieee754", "purl": "pkg:npm/ieee754@1.1.13", "version": "1.1.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ignore", "purl": "pkg:npm/ignore@4.0.6", "version": "4.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ignore", "purl": "pkg:npm/ignore@5.1.8", "version": "5.1.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ignore", "purl": "pkg:npm/ignore@5.2.4", "version": "5.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ignore-by-default", "purl": "pkg:npm/ignore-by-default@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ignore-walk", "purl": "pkg:npm/ignore-walk@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "image-size", "purl": "pkg:npm/image-size@0.5.5", "version": "0.5.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "import-fresh", "purl": "pkg:npm/import-fresh@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "import-lazy", "purl": "pkg:npm/import-lazy@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "imul", "purl": "pkg:npm/imul@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "imurmurhash", "purl": "pkg:npm/imurmurhash@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "include-path-searcher", "purl": "pkg:npm/include-path-searcher@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "indent-string", "purl": "pkg:npm/indent-string@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "indexes-of", "purl": "pkg:npm/indexes-of@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "indexof", "purl": "pkg:npm/indexof@0.0.1", "version": "0.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "inflection", "purl": "pkg:npm/inflection@1.12.0", "version": "1.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "inflection", "purl": "pkg:npm/inflection@1.13.4", "version": "1.13.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "inflight", "purl": "pkg:npm/inflight@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "inherits", "purl": "pkg:npm/inherits@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "inherits", "purl": "pkg:npm/inherits@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ini", "purl": "pkg:npm/ini@1.3.8", "version": "1.3.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "inline-source-map-comment", "purl": "pkg:npm/inline-source-map-comment@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "inquirer", "purl": "pkg:npm/inquirer@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "inquirer", "purl": "pkg:npm/inquirer@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "inquirer", "purl": "pkg:npm/inquirer@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "inquirer", "purl": "pkg:npm/inquirer@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "inquirer", "purl": "pkg:npm/inquirer@6.5.2", "version": "6.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "internal-slot", "purl": "pkg:npm/internal-slot@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "into-stream", "purl": "pkg:npm/into-stream@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "invariant", "purl": "pkg:npm/invariant@2.2.4", "version": "2.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "invert-kv", "purl": "pkg:npm/invert-kv@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "invert-kv", "purl": "pkg:npm/invert-kv@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ipaddr.js", "purl": "pkg:npm/ipaddr.js@1.9.0", "version": "1.9.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ipaddr.js", "purl": "pkg:npm/ipaddr.js@1.9.1", "version": "1.9.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-absolute-url", "purl": "pkg:npm/is-absolute-url@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-accessor-descriptor", "purl": "pkg:npm/is-accessor-descriptor@0.1.6", "version": "0.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-accessor-descriptor", "purl": "pkg:npm/is-accessor-descriptor@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-array-buffer", "purl": "pkg:npm/is-array-buffer@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-arrayish", "purl": "pkg:npm/is-arrayish@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-bigint", "purl": "pkg:npm/is-bigint@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-binary-path", "purl": "pkg:npm/is-binary-path@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-boolean-object", "purl": "pkg:npm/is-boolean-object@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-buffer", "purl": "pkg:npm/is-buffer@1.1.6", "version": "1.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-buffer", "purl": "pkg:npm/is-buffer@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-builtin-module", "purl": "pkg:npm/is-builtin-module@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-callable", "purl": "pkg:npm/is-callable@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-callable", "purl": "pkg:npm/is-callable@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-ci", "purl": "pkg:npm/is-ci@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-core-module", "purl": "pkg:npm/is-core-module@2.12.1", "version": "2.12.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-core-module", "purl": "pkg:npm/is-core-module@2.13.0", "version": "2.13.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "is-core-module", "purl": "pkg:npm/is-core-module@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-data-descriptor", "purl": "pkg:npm/is-data-descriptor@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-data-descriptor", "purl": "pkg:npm/is-data-descriptor@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-date-object", "purl": "pkg:npm/is-date-object@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-date-object", "purl": "pkg:npm/is-date-object@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-descriptor", "purl": "pkg:npm/is-descriptor@0.1.6", "version": "0.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-descriptor", "purl": "pkg:npm/is-descriptor@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-dotfile", "purl": "pkg:npm/is-dotfile@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-equal-shallow", "purl": "pkg:npm/is-equal-shallow@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-extendable", "purl": "pkg:npm/is-extendable@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-extendable", "purl": "pkg:npm/is-extendable@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-extglob", "purl": "pkg:npm/is-extglob@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-extglob", "purl": "pkg:npm/is-extglob@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-finite", "purl": "pkg:npm/is-finite@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-fullwidth-code-point", "purl": "pkg:npm/is-fullwidth-code-point@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-fullwidth-code-point", "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-git-url", "purl": "pkg:npm/is-git-url@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-glob", "purl": "pkg:npm/is-glob@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-glob", "purl": "pkg:npm/is-glob@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-glob", "purl": "pkg:npm/is-glob@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-glob", "purl": "pkg:npm/is-glob@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-installed-globally", "purl": "pkg:npm/is-installed-globally@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-my-ip-valid", "purl": "pkg:npm/is-my-ip-valid@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-my-json-valid", "purl": "pkg:npm/is-my-json-valid@2.20.6", "version": "2.20.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-negative-zero", "purl": "pkg:npm/is-negative-zero@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-npm", "purl": "pkg:npm/is-npm@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-number", "purl": "pkg:npm/is-number@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-number", "purl": "pkg:npm/is-number@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-number-object", "purl": "pkg:npm/is-number-object@1.0.7", "version": "1.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-obj", "purl": "pkg:npm/is-obj@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-object", "purl": "pkg:npm/is-object@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-path-inside", "purl": "pkg:npm/is-path-inside@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-plain-obj", "purl": "pkg:npm/is-plain-obj@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-plain-obj", "purl": "pkg:npm/is-plain-obj@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-plain-object", "purl": "pkg:npm/is-plain-object@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-posix-bracket", "purl": "pkg:npm/is-posix-bracket@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-primitive", "purl": "pkg:npm/is-primitive@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-promise", "purl": "pkg:npm/is-promise@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-promise", "purl": "pkg:npm/is-promise@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-property", "purl": "pkg:npm/is-property@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-redirect", "purl": "pkg:npm/is-redirect@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-regex", "purl": "pkg:npm/is-regex@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-regex", "purl": "pkg:npm/is-regex@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-relative-path", "purl": "pkg:npm/is-relative-path@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-retry-allowed", "purl": "pkg:npm/is-retry-allowed@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-retry-allowed", "purl": "pkg:npm/is-retry-allowed@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-shared-array-buffer", "purl": "pkg:npm/is-shared-array-buffer@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-stream", "purl": "pkg:npm/is-stream@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-stream", "purl": "pkg:npm/is-stream@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-string", "purl": "pkg:npm/is-string@1.0.7", "version": "1.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-svg", "purl": "pkg:npm/is-svg@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-symbol", "purl": "pkg:npm/is-symbol@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-symbol", "purl": "pkg:npm/is-symbol@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-type", "purl": "pkg:npm/is-type@0.0.1", "version": "0.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-typed-array", "purl": "pkg:npm/is-typed-array@1.1.10", "version": "1.1.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-typedarray", "purl": "pkg:npm/is-typedarray@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-utf8", "purl": "pkg:npm/is-utf8@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-weakref", "purl": "pkg:npm/is-weakref@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-what", "purl": "pkg:npm/is-what@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "is-windows", "purl": "pkg:npm/is-windows@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "is-wsl", "purl": "pkg:npm/is-wsl@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "isarray", "purl": "pkg:npm/isarray@0.0.1", "version": "0.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "isarray", "purl": "pkg:npm/isarray@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "isarray", "purl": "pkg:npm/isarray@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "isarray", "purl": "pkg:npm/isarray@2.0.5", "version": "2.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "isbinaryfile", "purl": "pkg:npm/isbinaryfile@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "isexe", "purl": "pkg:npm/isexe@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "isobject", "purl": "pkg:npm/isobject@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "isobject", "purl": "pkg:npm/isobject@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "isstream", "purl": "pkg:npm/isstream@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "istanbul", "purl": "pkg:npm/istanbul@0.4.5", "version": "0.4.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "istextorbinary", "purl": "pkg:npm/istextorbinary@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "isurl", "purl": "pkg:npm/isurl@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "iterall", "purl": "pkg:npm/iterall@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jade", "purl": "pkg:npm/jade@1.11.0", "version": "1.11.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jmespath", "purl": "pkg:npm/jmespath@0.15.0", "version": "0.15.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jquery", "purl": "pkg:npm/jquery@3.7.0", "version": "3.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jquery-deferred", "purl": "pkg:npm/jquery-deferred@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "js-base64", "purl": "pkg:npm/js-base64@2.6.4", "version": "2.6.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "js-string-escape", "purl": "pkg:npm/js-string-escape@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "js-tokens", "purl": "pkg:npm/js-tokens@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "js-tokens", "purl": "pkg:npm/js-tokens@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@3.13.1", "version": "3.13.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@3.14.1", "version": "3.14.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@3.6.1", "version": "3.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@3.7.0", "version": "3.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jsbn", "purl": "pkg:npm/jsbn@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jsdom", "purl": "pkg:npm/jsdom@7.2.2", "version": "7.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jsesc", "purl": "pkg:npm/jsesc@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "jsesc", "purl": "pkg:npm/jsesc@0.5.0", "version": "0.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jsesc", "purl": "pkg:npm/jsesc@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "jsesc", "purl": "pkg:npm/jsesc@2.5.2", "version": "2.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "json-buffer", "purl": "pkg:npm/json-buffer@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "json-schema", "purl": "pkg:npm/json-schema@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "json-schema-traverse", "purl": "pkg:npm/json-schema-traverse@0.4.1", "version": "0.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "json-stable-stringify", "purl": "pkg:npm/json-stable-stringify@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "json-stable-stringify-without-jsonify", "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "json-stringify-safe", "purl": "pkg:npm/json-stringify-safe@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "json5", "purl": "pkg:npm/json5@0.5.1", "version": "0.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "json5", "purl": "pkg:npm/json5@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "json5", "purl": "pkg:npm/json5@2.2.3", "version": "2.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jsonfile", "purl": "pkg:npm/jsonfile@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "jsonfile", "purl": "pkg:npm/jsonfile@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jsonfile", "purl": "pkg:npm/jsonfile@6.1.0", "version": "6.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "jsonify", "purl": "pkg:npm/jsonify@0.0.0", "version": "0.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jsonpointer", "purl": "pkg:npm/jsonpointer@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jsprim", "purl": "pkg:npm/jsprim@1.4.2", "version": "1.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "jstransformer", "purl": "pkg:npm/jstransformer@0.0.2", "version": "0.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "keyv", "purl": "pkg:npm/keyv@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "kind-of", "purl": "pkg:npm/kind-of@3.2.2", "version": "3.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "kind-of", "purl": "pkg:npm/kind-of@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "kind-of", "purl": "pkg:npm/kind-of@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "kind-of", "purl": "pkg:npm/kind-of@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "kind-of", "purl": "pkg:npm/kind-of@6.0.3", "version": "6.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "klaw", "purl": "pkg:npm/klaw@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "klaw", "purl": "pkg:npm/klaw@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "latest-version", "purl": "pkg:npm/latest-version@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "lazy", "purl": "pkg:npm/lazy@1.0.11", "version": "1.0.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lazy-cache", "purl": "pkg:npm/lazy-cache@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lazystream", "purl": "pkg:npm/lazystream@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lcid", "purl": "pkg:npm/lcid@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "lcid", "purl": "pkg:npm/lcid@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "leek", "purl": "pkg:npm/leek@0.0.24", "version": "0.0.24" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "less", "purl": "pkg:npm/less@2.7.3", "version": "2.7.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "less", "purl": "pkg:npm/less@3.13.1", "version": "3.13.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "levn", "purl": "pkg:npm/levn@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "linkify-it", "purl": "pkg:npm/linkify-it@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "livereload-js", "purl": "pkg:npm/livereload-js@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "load-json-file", "purl": "pkg:npm/load-json-file@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "load-json-file", "purl": "pkg:npm/load-json-file@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "loader.js", "purl": "pkg:npm/loader.js@4.7.0", "version": "4.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash", "purl": "pkg:npm/lodash@2.4.2", "version": "2.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "lodash", "purl": "pkg:npm/lodash@4.17.20", "version": "4.17.20" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash", "purl": "pkg:npm/lodash@4.17.21", "version": "4.17.21" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash._baseassign", "purl": "pkg:npm/lodash._baseassign@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash._basecopy", "purl": "pkg:npm/lodash._basecopy@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash._baseflatten", "purl": "pkg:npm/lodash._baseflatten@3.1.4", "version": "3.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash._bindcallback", "purl": "pkg:npm/lodash._bindcallback@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash._createassigner", "purl": "pkg:npm/lodash._createassigner@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash._getnative", "purl": "pkg:npm/lodash._getnative@3.9.1", "version": "3.9.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash._isiterateecall", "purl": "pkg:npm/lodash._isiterateecall@3.0.9", "version": "3.0.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash._reinterpolate", "purl": "pkg:npm/lodash._reinterpolate@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.assign", "purl": "pkg:npm/lodash.assign@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.assign", "purl": "pkg:npm/lodash.assign@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.assignin", "purl": "pkg:npm/lodash.assignin@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.bind", "purl": "pkg:npm/lodash.bind@4.2.1", "version": "4.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.castarray", "purl": "pkg:npm/lodash.castarray@4.4.0", "version": "4.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.clonedeep", "purl": "pkg:npm/lodash.clonedeep@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.debounce", "purl": "pkg:npm/lodash.debounce@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.debounce", "purl": "pkg:npm/lodash.debounce@4.0.8", "version": "4.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.defaults", "purl": "pkg:npm/lodash.defaults@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.defaultsdeep", "purl": "pkg:npm/lodash.defaultsdeep@4.6.1", "version": "4.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.difference", "purl": "pkg:npm/lodash.difference@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.filter", "purl": "pkg:npm/lodash.filter@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.find", "purl": "pkg:npm/lodash.find@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.flatten", "purl": "pkg:npm/lodash.flatten@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.flatten", "purl": "pkg:npm/lodash.flatten@4.4.0", "version": "4.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.foreach", "purl": "pkg:npm/lodash.foreach@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.get", "purl": "pkg:npm/lodash.get@4.4.2", "version": "4.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.isarguments", "purl": "pkg:npm/lodash.isarguments@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.isarray", "purl": "pkg:npm/lodash.isarray@3.0.4", "version": "3.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.keys", "purl": "pkg:npm/lodash.keys@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.map", "purl": "pkg:npm/lodash.map@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.memoize", "purl": "pkg:npm/lodash.memoize@4.1.2", "version": "4.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.merge", "purl": "pkg:npm/lodash.merge@4.6.2", "version": "4.6.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.omit", "purl": "pkg:npm/lodash.omit@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.pad", "purl": "pkg:npm/lodash.pad@4.5.1", "version": "4.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.padend", "purl": "pkg:npm/lodash.padend@4.6.1", "version": "4.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.padstart", "purl": "pkg:npm/lodash.padstart@4.6.1", "version": "4.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.pick", "purl": "pkg:npm/lodash.pick@4.4.0", "version": "4.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.pull", "purl": "pkg:npm/lodash.pull@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.reduce", "purl": "pkg:npm/lodash.reduce@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.reject", "purl": "pkg:npm/lodash.reject@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.restparam", "purl": "pkg:npm/lodash.restparam@3.6.1", "version": "3.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.some", "purl": "pkg:npm/lodash.some@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.template", "purl": "pkg:npm/lodash.template@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.templatesettings", "purl": "pkg:npm/lodash.templatesettings@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.uniq", "purl": "pkg:npm/lodash.uniq@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash.uniqby", "purl": "pkg:npm/lodash.uniqby@4.7.0", "version": "4.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "log-symbols", "purl": "pkg:npm/log-symbols@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "longest", "purl": "pkg:npm/longest@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "loose-envify", "purl": "pkg:npm/loose-envify@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "loud-rejection", "purl": "pkg:npm/loud-rejection@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lower-case", "purl": "pkg:npm/lower-case@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lowercase-keys", "purl": "pkg:npm/lowercase-keys@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "lowercase-keys", "purl": "pkg:npm/lowercase-keys@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@2.7.3", "version": "2.7.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@4.1.3", "version": "4.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@4.1.5", "version": "4.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "macos-alias", "purl": "pkg:npm/macos-alias@0.2.11", "version": "0.2.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "macos-release", "purl": "pkg:npm/macos-release@2.4.1", "version": "2.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "make-dir", "purl": "pkg:npm/make-dir@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "make-dir", "purl": "pkg:npm/make-dir@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "makeerror", "purl": "pkg:npm/makeerror@1.0.12", "version": "1.0.12" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "map-age-cleaner", "purl": "pkg:npm/map-age-cleaner@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "map-cache", "purl": "pkg:npm/map-cache@0.2.2", "version": "0.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "map-obj", "purl": "pkg:npm/map-obj@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "map-visit", "purl": "pkg:npm/map-visit@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "markdown-it", "purl": "pkg:npm/markdown-it@8.4.2", "version": "8.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "markdown-it-terminal", "purl": "pkg:npm/markdown-it-terminal@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "matcher-collection", "purl": "pkg:npm/matcher-collection@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "matcher-collection", "purl": "pkg:npm/matcher-collection@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "matcher-collection", "purl": "pkg:npm/matcher-collection@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "math-expression-evaluator", "purl": "pkg:npm/math-expression-evaluator@1.3.7", "version": "1.3.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "md5-hex", "purl": "pkg:npm/md5-hex@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "md5-o-matic", "purl": "pkg:npm/md5-o-matic@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mdurl", "purl": "pkg:npm/mdurl@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "media-typer", "purl": "pkg:npm/media-typer@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mem", "purl": "pkg:npm/mem@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "mem", "purl": "pkg:npm/mem@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "memory-streams", "purl": "pkg:npm/memory-streams@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "meow", "purl": "pkg:npm/meow@3.7.0", "version": "3.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "merge-descriptors", "purl": "pkg:npm/merge-descriptors@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "merge-stream", "purl": "pkg:npm/merge-stream@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "merge-trees", "purl": "pkg:npm/merge-trees@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "merge-trees", "purl": "pkg:npm/merge-trees@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "merge2", "purl": "pkg:npm/merge2@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "methods", "purl": "pkg:npm/methods@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "micromatch", "purl": "pkg:npm/micromatch@2.3.11", "version": "2.3.11" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "micromatch", "purl": "pkg:npm/micromatch@3.1.10", "version": "3.1.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "micromatch", "purl": "pkg:npm/micromatch@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "micromatch", "purl": "pkg:npm/micromatch@4.0.5", "version": "4.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mime", "purl": "pkg:npm/mime@1.2.11", "version": "1.2.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mime", "purl": "pkg:npm/mime@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "mime", "purl": "pkg:npm/mime@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mime-db", "purl": "pkg:npm/mime-db@1.36.0", "version": "1.36.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "mime-db", "purl": "pkg:npm/mime-db@1.40.0", "version": "1.40.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mime-db", "purl": "pkg:npm/mime-db@1.52.0", "version": "1.52.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mime-types", "purl": "pkg:npm/mime-types@2.1.20", "version": "2.1.20" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "mime-types", "purl": "pkg:npm/mime-types@2.1.24", "version": "2.1.24" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mime-types", "purl": "pkg:npm/mime-types@2.1.35", "version": "2.1.35" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mimic-fn", "purl": "pkg:npm/mimic-fn@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "mimic-fn", "purl": "pkg:npm/mimic-fn@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mimic-response", "purl": "pkg:npm/mimic-response@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@3.0.4", "version": "3.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "minimist", "purl": "pkg:npm/minimist@0.0.10", "version": "0.0.10" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "minimist", "purl": "pkg:npm/minimist@0.0.8", "version": "0.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minimist", "purl": "pkg:npm/minimist@0.2.4", "version": "0.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minimist", "purl": "pkg:npm/minimist@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "minimist", "purl": "pkg:npm/minimist@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "minimist", "purl": "pkg:npm/minimist@1.2.5", "version": "1.2.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minimist", "purl": "pkg:npm/minimist@1.2.8", "version": "1.2.8" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "minipass", "purl": "pkg:npm/minipass@2.3.5", "version": "2.3.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minipass", "purl": "pkg:npm/minipass@2.9.0", "version": "2.9.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "minizlib", "purl": "pkg:npm/minizlib@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minizlib", "purl": "pkg:npm/minizlib@1.3.3", "version": "1.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "mixin-deep", "purl": "pkg:npm/mixin-deep@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "mkdirp", "purl": "pkg:npm/mkdirp@0.5.1", "version": "0.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mkdirp", "purl": "pkg:npm/mkdirp@0.5.5", "version": "0.5.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mkdirp", "purl": "pkg:npm/mkdirp@0.5.6", "version": "0.5.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mkdirp", "purl": "pkg:npm/mkdirp@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mkpath", "purl": "pkg:npm/mkpath@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mksnapshot", "purl": "pkg:npm/mksnapshot@0.3.5", "version": "0.3.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "mktemp", "purl": "pkg:npm/mktemp@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "mocha", "purl": "pkg:npm/mocha@6.1.4", "version": "6.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mock-require", "purl": "pkg:npm/mock-require@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "moment", "purl": "pkg:npm/moment@2.29.4", "version": "2.29.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "moment-timezone", "purl": "pkg:npm/moment-timezone@0.5.43", "version": "0.5.43" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "morgan", "purl": "pkg:npm/morgan@1.10.0", "version": "1.10.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mout", "purl": "pkg:npm/mout@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ms", "purl": "pkg:npm/ms@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ms", "purl": "pkg:npm/ms@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "ms", "purl": "pkg:npm/ms@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ms", "purl": "pkg:npm/ms@2.1.3", "version": "2.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "multiline", "purl": "pkg:npm/multiline@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "murmur-32", "purl": "pkg:npm/murmur-32@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mustache", "purl": "pkg:npm/mustache@3.2.1", "version": "3.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mute-stream", "purl": "pkg:npm/mute-stream@0.0.6", "version": "0.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mute-stream", "purl": "pkg:npm/mute-stream@0.0.7", "version": "0.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "mute-stream", "purl": "pkg:npm/mute-stream@0.0.8", "version": "0.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "mz", "purl": "pkg:npm/mz@2.7.0", "version": "2.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "najax", "purl": "pkg:npm/najax@1.0.7", "version": "1.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "nan", "purl": "pkg:npm/nan@2.12.1", "version": "2.12.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "nan", "purl": "pkg:npm/nan@2.14.0", "version": "2.14.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "nanomatch", "purl": "pkg:npm/nanomatch@1.2.13", "version": "1.2.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "native-request", "purl": "pkg:npm/native-request@1.0.8", "version": "1.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "natives", "purl": "pkg:npm/natives@1.1.6", "version": "1.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "natural-compare", "purl": "pkg:npm/natural-compare@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "nconf", "purl": "pkg:npm/nconf@0.6.9", "version": "0.6.9" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ncp", "purl": "pkg:npm/ncp@0.4.2", "version": "0.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ncp", "purl": "pkg:npm/ncp@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "needle", "purl": "pkg:npm/needle@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "negotiator", "purl": "pkg:npm/negotiator@0.6.1", "version": "0.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "negotiator", "purl": "pkg:npm/negotiator@0.6.2", "version": "0.6.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "negotiator", "purl": "pkg:npm/negotiator@0.6.3", "version": "0.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "neo-async", "purl": "pkg:npm/neo-async@2.6.2", "version": "2.6.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "nested-error-stacks", "purl": "pkg:npm/nested-error-stacks@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "nib", "purl": "pkg:npm/nib@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "nice-try", "purl": "pkg:npm/nice-try@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "no-case", "purl": "pkg:npm/no-case@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-abi", "purl": "pkg:npm/node-abi@2.19.3", "version": "2.19.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "node-environment-flags", "purl": "pkg:npm/node-environment-flags@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-fetch", "purl": "pkg:npm/node-fetch@2.6.1", "version": "2.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-fetch", "purl": "pkg:npm/node-fetch@2.6.11", "version": "2.6.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-gyp", "purl": "pkg:npm/node-gyp@3.8.0", "version": "3.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-gyp", "purl": "pkg:npm/node-gyp@6.1.0", "version": "6.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-int64", "purl": "pkg:npm/node-int64@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-modules-path", "purl": "pkg:npm/node-modules-path@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-notifier", "purl": "pkg:npm/node-notifier@5.4.5", "version": "5.4.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "node-pre-gyp", "purl": "pkg:npm/node-pre-gyp@0.12.0", "version": "0.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "node-releases", "purl": "pkg:npm/node-releases@1.1.70", "version": "1.1.70" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-releases", "purl": "pkg:npm/node-releases@2.0.11", "version": "2.0.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-releases", "purl": "pkg:npm/node-releases@2.0.13", "version": "2.0.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-source-walk", "purl": "pkg:npm/node-source-walk@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-source-walk", "purl": "pkg:npm/node-source-walk@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "node-watch", "purl": "pkg:npm/node-watch@0.7.3", "version": "0.7.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "nodeify", "purl": "pkg:npm/nodeify@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "nodemon", "purl": "pkg:npm/nodemon@1.19.0", "version": "1.19.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "nopt", "purl": "pkg:npm/nopt@1.0.10", "version": "1.0.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "nopt", "purl": "pkg:npm/nopt@3.0.6", "version": "3.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "nopt", "purl": "pkg:npm/nopt@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "nopt", "purl": "pkg:npm/nopt@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "normalize-package-data", "purl": "pkg:npm/normalize-package-data@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "normalize-path", "purl": "pkg:npm/normalize-path@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "normalize-path", "purl": "pkg:npm/normalize-path@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "normalize-range", "purl": "pkg:npm/normalize-range@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "normalize-url", "purl": "pkg:npm/normalize-url@1.9.1", "version": "1.9.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "normalize-url", "purl": "pkg:npm/normalize-url@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "npm-bundled", "purl": "pkg:npm/npm-bundled@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "npm-git-info", "purl": "pkg:npm/npm-git-info@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "npm-package-arg", "purl": "pkg:npm/npm-package-arg@6.1.1", "version": "6.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "npm-packlist", "purl": "pkg:npm/npm-packlist@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "npm-run-path", "purl": "pkg:npm/npm-run-path@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "npm-run-path", "purl": "pkg:npm/npm-run-path@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "npm-run-path", "purl": "pkg:npm/npm-run-path@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "npmlog", "purl": "pkg:npm/npmlog@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "npmlog", "purl": "pkg:npm/npmlog@4.1.2", "version": "4.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "nssocket", "purl": "pkg:npm/nssocket@0.5.3", "version": "0.5.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "nth-check", "purl": "pkg:npm/nth-check@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "nugget", "purl": "pkg:npm/nugget@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "num2fraction", "purl": "pkg:npm/num2fraction@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "number-is-nan", "purl": "pkg:npm/number-is-nan@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "nwmatcher", "purl": "pkg:npm/nwmatcher@1.4.4", "version": "1.4.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "oauth-sign", "purl": "pkg:npm/oauth-sign@0.8.2", "version": "0.8.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "oauth-sign", "purl": "pkg:npm/oauth-sign@0.9.0", "version": "0.9.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "object-assign", "purl": "pkg:npm/object-assign@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "object-assign", "purl": "pkg:npm/object-assign@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "object-copy", "purl": "pkg:npm/object-copy@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "object-hash", "purl": "pkg:npm/object-hash@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "object-inspect", "purl": "pkg:npm/object-inspect@1.12.3", "version": "1.12.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "object-keys", "purl": "pkg:npm/object-keys@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "object-keys", "purl": "pkg:npm/object-keys@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "object-visit", "purl": "pkg:npm/object-visit@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "object.assign", "purl": "pkg:npm/object.assign@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "object.assign", "purl": "pkg:npm/object.assign@4.1.2", "version": "4.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "object.assign", "purl": "pkg:npm/object.assign@4.1.4", "version": "4.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "object.getownpropertydescriptors", "purl": "pkg:npm/object.getownpropertydescriptors@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "object.getownpropertydescriptors", "purl": "pkg:npm/object.getownpropertydescriptors@2.1.6", "version": "2.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "object.omit", "purl": "pkg:npm/object.omit@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "object.pick", "purl": "pkg:npm/object.pick@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "on-finished", "purl": "pkg:npm/on-finished@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "on-finished", "purl": "pkg:npm/on-finished@2.4.1", "version": "2.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "on-headers", "purl": "pkg:npm/on-headers@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "once", "purl": "pkg:npm/once@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "onetime", "purl": "pkg:npm/onetime@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "onetime", "purl": "pkg:npm/onetime@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "onetime", "purl": "pkg:npm/onetime@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "opn", "purl": "pkg:npm/opn@5.5.0", "version": "5.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "optimist", "purl": "pkg:npm/optimist@0.2.8", "version": "0.2.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "optimist", "purl": "pkg:npm/optimist@0.3.7", "version": "0.3.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "optimist", "purl": "pkg:npm/optimist@0.6.0", "version": "0.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "optimist", "purl": "pkg:npm/optimist@0.6.1", "version": "0.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "optionator", "purl": "pkg:npm/optionator@0.8.2", "version": "0.8.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ora", "purl": "pkg:npm/ora@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ora", "purl": "pkg:npm/ora@3.4.0", "version": "3.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "os-homedir", "purl": "pkg:npm/os-homedir@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "os-locale", "purl": "pkg:npm/os-locale@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "os-locale", "purl": "pkg:npm/os-locale@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "os-name", "purl": "pkg:npm/os-name@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "os-shim", "purl": "pkg:npm/os-shim@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "os-tmpdir", "purl": "pkg:npm/os-tmpdir@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "osenv", "purl": "pkg:npm/osenv@0.1.5", "version": "0.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "p-cancelable", "purl": "pkg:npm/p-cancelable@0.4.1", "version": "0.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "p-defer", "purl": "pkg:npm/p-defer@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "p-defer", "purl": "pkg:npm/p-defer@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "p-finally", "purl": "pkg:npm/p-finally@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "p-finally", "purl": "pkg:npm/p-finally@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "p-is-promise", "purl": "pkg:npm/p-is-promise@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "p-is-promise", "purl": "pkg:npm/p-is-promise@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "p-timeout", "purl": "pkg:npm/p-timeout@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "p-try", "purl": "pkg:npm/p-try@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "p-try", "purl": "pkg:npm/p-try@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "package-json", "purl": "pkg:npm/package-json@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "parent-module", "purl": "pkg:npm/parent-module@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "parse-author", "purl": "pkg:npm/parse-author@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "parse-color", "purl": "pkg:npm/parse-color@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "parse-glob", "purl": "pkg:npm/parse-glob@3.0.4", "version": "3.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "parse-json", "purl": "pkg:npm/parse-json@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "parse-passwd", "purl": "pkg:npm/parse-passwd@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "parse5", "purl": "pkg:npm/parse5@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "parseqs", "purl": "pkg:npm/parseqs@0.0.6", "version": "0.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "parseuri", "purl": "pkg:npm/parseuri@0.0.6", "version": "0.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "parseurl", "purl": "pkg:npm/parseurl@1.3.3", "version": "1.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "pascalcase", "purl": "pkg:npm/pascalcase@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "passwd-user", "purl": "pkg:npm/passwd-user@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "path-dirname", "purl": "pkg:npm/path-dirname@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "path-exists", "purl": "pkg:npm/path-exists@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "path-exists", "purl": "pkg:npm/path-exists@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "path-exists", "purl": "pkg:npm/path-exists@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "path-is-absolute", "purl": "pkg:npm/path-is-absolute@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "path-is-inside", "purl": "pkg:npm/path-is-inside@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "path-key", "purl": "pkg:npm/path-key@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "path-key", "purl": "pkg:npm/path-key@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "path-key", "purl": "pkg:npm/path-key@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "path-parse", "purl": "pkg:npm/path-parse@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "path-parse", "purl": "pkg:npm/path-parse@1.0.7", "version": "1.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "path-posix", "purl": "pkg:npm/path-posix@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "path-root", "purl": "pkg:npm/path-root@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "path-root-regex", "purl": "pkg:npm/path-root-regex@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "path-to-regexp", "purl": "pkg:npm/path-to-regexp@0.1.7", "version": "0.1.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "path-type", "purl": "pkg:npm/path-type@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "path-type", "purl": "pkg:npm/path-type@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "path-type", "purl": "pkg:npm/path-type@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "path-type", "purl": "pkg:npm/path-type@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "pathval", "purl": "pkg:npm/pathval@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "pend", "purl": "pkg:npm/pend@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "performance-now", "purl": "pkg:npm/performance-now@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "performance-now", "purl": "pkg:npm/performance-now@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "picocolors", "purl": "pkg:npm/picocolors@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "picomatch", "purl": "pkg:npm/picomatch@2.2.2", "version": "2.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "picomatch", "purl": "pkg:npm/picomatch@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "pify", "purl": "pkg:npm/pify@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "pify", "purl": "pkg:npm/pify@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "pify", "purl": "pkg:npm/pify@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "pinkie", "purl": "pkg:npm/pinkie@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "pinkie-promise", "purl": "pkg:npm/pinkie-promise@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "pkg-dir", "purl": "pkg:npm/pkg-dir@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "pkg-up", "purl": "pkg:npm/pkg-up@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "pkginfo", "purl": "pkg:npm/pkginfo@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "plist", "purl": "pkg:npm/plist@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "plist", "purl": "pkg:npm/plist@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "portfinder", "purl": "pkg:npm/portfinder@1.0.32", "version": "1.0.32" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "posix-character-classes", "purl": "pkg:npm/posix-character-classes@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss", "purl": "pkg:npm/postcss@5.2.18", "version": "5.2.18" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-calc", "purl": "pkg:npm/postcss-calc@5.3.1", "version": "5.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-colormin", "purl": "pkg:npm/postcss-colormin@2.2.2", "version": "2.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-convert-values", "purl": "pkg:npm/postcss-convert-values@2.6.1", "version": "2.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-discard-comments", "purl": "pkg:npm/postcss-discard-comments@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-discard-duplicates", "purl": "pkg:npm/postcss-discard-duplicates@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-discard-empty", "purl": "pkg:npm/postcss-discard-empty@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-discard-overridden", "purl": "pkg:npm/postcss-discard-overridden@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-discard-unused", "purl": "pkg:npm/postcss-discard-unused@2.2.3", "version": "2.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-filter-plugins", "purl": "pkg:npm/postcss-filter-plugins@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-merge-idents", "purl": "pkg:npm/postcss-merge-idents@2.1.7", "version": "2.1.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-merge-longhand", "purl": "pkg:npm/postcss-merge-longhand@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-merge-rules", "purl": "pkg:npm/postcss-merge-rules@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-message-helpers", "purl": "pkg:npm/postcss-message-helpers@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-minify-font-values", "purl": "pkg:npm/postcss-minify-font-values@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-minify-gradients", "purl": "pkg:npm/postcss-minify-gradients@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-minify-params", "purl": "pkg:npm/postcss-minify-params@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-minify-selectors", "purl": "pkg:npm/postcss-minify-selectors@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-normalize-charset", "purl": "pkg:npm/postcss-normalize-charset@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-normalize-url", "purl": "pkg:npm/postcss-normalize-url@3.0.8", "version": "3.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-ordered-values", "purl": "pkg:npm/postcss-ordered-values@2.2.3", "version": "2.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-reduce-idents", "purl": "pkg:npm/postcss-reduce-idents@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-reduce-initial", "purl": "pkg:npm/postcss-reduce-initial@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-reduce-transforms", "purl": "pkg:npm/postcss-reduce-transforms@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-selector-parser", "purl": "pkg:npm/postcss-selector-parser@2.2.3", "version": "2.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-svgo", "purl": "pkg:npm/postcss-svgo@2.1.6", "version": "2.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-unique-selectors", "purl": "pkg:npm/postcss-unique-selectors@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-value-parser", "purl": "pkg:npm/postcss-value-parser@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "postcss-zindex", "purl": "pkg:npm/postcss-zindex@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "prelude-ls", "purl": "pkg:npm/prelude-ls@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "prepend-http", "purl": "pkg:npm/prepend-http@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "prepend-http", "purl": "pkg:npm/prepend-http@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "pretty-bytes", "purl": "pkg:npm/pretty-bytes@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "prettyjson", "purl": "pkg:npm/prettyjson@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "printf", "purl": "pkg:npm/printf@0.5.3", "version": "0.5.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "private", "purl": "pkg:npm/private@0.1.8", "version": "0.1.8" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "process-nextick-args", "purl": "pkg:npm/process-nextick-args@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "process-relative-require", "purl": "pkg:npm/process-relative-require@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "progress", "purl": "pkg:npm/progress@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "progress-stream", "purl": "pkg:npm/progress-stream@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "promise", "purl": "pkg:npm/promise@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "promise", "purl": "pkg:npm/promise@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "promise", "purl": "pkg:npm/promise@6.1.0", "version": "6.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "promise", "purl": "pkg:npm/promise@7.3.1", "version": "7.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "promise-map-series", "purl": "pkg:npm/promise-map-series@0.2.3", "version": "0.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "promise.prototype.finally", "purl": "pkg:npm/promise.prototype.finally@3.1.4", "version": "3.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "prompt", "purl": "pkg:npm/prompt@0.2.14", "version": "0.2.14" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "proxy-addr", "purl": "pkg:npm/proxy-addr@2.0.5", "version": "2.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "proxy-addr", "purl": "pkg:npm/proxy-addr@2.0.7", "version": "2.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "prr", "purl": "pkg:npm/prr@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "pruner", "purl": "pkg:npm/pruner@0.0.7", "version": "0.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ps-tree", "purl": "pkg:npm/ps-tree@0.0.3", "version": "0.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "pseudomap", "purl": "pkg:npm/pseudomap@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "psl", "purl": "pkg:npm/psl@1.1.31", "version": "1.1.31" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "pstree.remy", "purl": "pkg:npm/pstree.remy@1.1.6", "version": "1.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "pump", "purl": "pkg:npm/pump@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "punycode", "purl": "pkg:npm/punycode@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "punycode", "purl": "pkg:npm/punycode@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "punycode", "purl": "pkg:npm/punycode@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "q", "purl": "pkg:npm/q@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "qs", "purl": "pkg:npm/qs@6.11.0", "version": "6.11.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "qs", "purl": "pkg:npm/qs@6.11.2", "version": "6.11.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "qs", "purl": "pkg:npm/qs@6.4.0", "version": "6.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "qs", "purl": "pkg:npm/qs@6.5.2", "version": "6.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "qs", "purl": "pkg:npm/qs@6.7.0", "version": "6.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "query-string", "purl": "pkg:npm/query-string@4.3.4", "version": "4.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "query-string", "purl": "pkg:npm/query-string@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "querystring", "purl": "pkg:npm/querystring@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "queue-microtask", "purl": "pkg:npm/queue-microtask@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "quick-temp", "purl": "pkg:npm/quick-temp@0.1.8", "version": "0.1.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "qunit", "purl": "pkg:npm/qunit@2.19.4", "version": "2.19.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "qunit-dom", "purl": "pkg:npm/qunit-dom@0.8.5", "version": "0.8.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "random-path", "purl": "pkg:npm/random-path@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "range-parser", "purl": "pkg:npm/range-parser@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "raw-body", "purl": "pkg:npm/raw-body@1.1.7", "version": "1.1.7" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "raw-body", "purl": "pkg:npm/raw-body@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "raw-body", "purl": "pkg:npm/raw-body@2.5.1", "version": "2.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "rc", "purl": "pkg:npm/rc@1.2.8", "version": "1.2.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rcedit", "purl": "pkg:npm/rcedit@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "read", "purl": "pkg:npm/read@1.0.7", "version": "1.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "read-pkg", "purl": "pkg:npm/read-pkg@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "read-pkg", "purl": "pkg:npm/read-pkg@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "read-pkg-up", "purl": "pkg:npm/read-pkg-up@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "read-pkg-up", "purl": "pkg:npm/read-pkg-up@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@1.0.34", "version": "1.0.34" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@1.1.14", "version": "1.1.14" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@2.3.6", "version": "2.3.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@2.3.7", "version": "2.3.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@2.3.8", "version": "2.3.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@3.6.2", "version": "3.6.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "readdirp", "purl": "pkg:npm/readdirp@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "recast", "purl": "pkg:npm/recast@0.11.23", "version": "0.11.23" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "redent", "purl": "pkg:npm/redent@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "redeyed", "purl": "pkg:npm/redeyed@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "reduce-css-calc", "purl": "pkg:npm/reduce-css-calc@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "reduce-function-call", "purl": "pkg:npm/reduce-function-call@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regenerate", "purl": "pkg:npm/regenerate@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "regenerate", "purl": "pkg:npm/regenerate@1.4.2", "version": "1.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regenerate-unicode-properties", "purl": "pkg:npm/regenerate-unicode-properties@10.1.0", "version": "10.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "regenerate-unicode-properties", "purl": "pkg:npm/regenerate-unicode-properties@8.2.0", "version": "8.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regenerator-runtime", "purl": "pkg:npm/regenerator-runtime@0.10.5", "version": "0.10.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regenerator-runtime", "purl": "pkg:npm/regenerator-runtime@0.11.1", "version": "0.11.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "regenerator-runtime", "purl": "pkg:npm/regenerator-runtime@0.13.7", "version": "0.13.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regenerator-runtime", "purl": "pkg:npm/regenerator-runtime@0.9.6", "version": "0.9.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regenerator-transform", "purl": "pkg:npm/regenerator-transform@0.10.1", "version": "0.10.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "regenerator-transform", "purl": "pkg:npm/regenerator-transform@0.14.5", "version": "0.14.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regenerator-transform", "purl": "pkg:npm/regenerator-transform@0.15.1", "version": "0.15.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regenerator-transform", "purl": "pkg:npm/regenerator-transform@0.15.2", "version": "0.15.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "regex-cache", "purl": "pkg:npm/regex-cache@0.4.4", "version": "0.4.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "regex-not", "purl": "pkg:npm/regex-not@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regexp.prototype.flags", "purl": "pkg:npm/regexp.prototype.flags@1.5.0", "version": "1.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regexpp", "purl": "pkg:npm/regexpp@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regexpu-core", "purl": "pkg:npm/regexpu-core@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "regexpu-core", "purl": "pkg:npm/regexpu-core@4.7.1", "version": "4.7.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regexpu-core", "purl": "pkg:npm/regexpu-core@5.3.2", "version": "5.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "registry-auth-token", "purl": "pkg:npm/registry-auth-token@3.4.0", "version": "3.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "registry-url", "purl": "pkg:npm/registry-url@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regjsgen", "purl": "pkg:npm/regjsgen@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "regjsgen", "purl": "pkg:npm/regjsgen@0.5.2", "version": "0.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regjsparser", "purl": "pkg:npm/regjsparser@0.1.5", "version": "0.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "regjsparser", "purl": "pkg:npm/regjsparser@0.6.7", "version": "0.6.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "regjsparser", "purl": "pkg:npm/regjsparser@0.9.1", "version": "0.9.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "remove-trailing-separator", "purl": "pkg:npm/remove-trailing-separator@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "repeat-element", "purl": "pkg:npm/repeat-element@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "repeat-string", "purl": "pkg:npm/repeat-string@1.6.1", "version": "1.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "repeating", "purl": "pkg:npm/repeating@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "request", "purl": "pkg:npm/request@2.81.0", "version": "2.81.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "request", "purl": "pkg:npm/request@2.88.0", "version": "2.88.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "require-directory", "purl": "pkg:npm/require-directory@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "require-main-filename", "purl": "pkg:npm/require-main-filename@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "require-main-filename", "purl": "pkg:npm/require-main-filename@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "requirefresh", "purl": "pkg:npm/requirefresh@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "requireindex", "purl": "pkg:npm/requireindex@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "requires-port", "purl": "pkg:npm/requires-port@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "reselect", "purl": "pkg:npm/reselect@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.1.7", "version": "1.1.7" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.20.0", "version": "1.20.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.22.2", "version": "1.22.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.22.4", "version": "1.22.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.8.1", "version": "1.8.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.9.0", "version": "1.9.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve-dir", "purl": "pkg:npm/resolve-dir@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve-from", "purl": "pkg:npm/resolve-from@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve-package", "purl": "pkg:npm/resolve-package@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "resolve-package-path", "purl": "pkg:npm/resolve-package-path@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "resolve-package-path", "purl": "pkg:npm/resolve-package-path@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve-package-path", "purl": "pkg:npm/resolve-package-path@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve-package-path", "purl": "pkg:npm/resolve-package-path@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "resolve-path", "purl": "pkg:npm/resolve-path@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "resolve-url", "purl": "pkg:npm/resolve-url@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "responselike", "purl": "pkg:npm/responselike@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "restore-cursor", "purl": "pkg:npm/restore-cursor@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "restore-cursor", "purl": "pkg:npm/restore-cursor@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "resumer", "purl": "pkg:npm/resumer@0.0.0", "version": "0.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "ret", "purl": "pkg:npm/ret@0.1.15", "version": "0.1.15" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "reusify", "purl": "pkg:npm/reusify@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "revalidator", "purl": "pkg:npm/revalidator@0.1.8", "version": "0.1.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "right-align", "purl": "pkg:npm/right-align@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@2.2.8", "version": "2.2.8" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@2.6.2", "version": "2.6.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@2.6.3", "version": "2.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@2.7.1", "version": "2.7.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rollup", "purl": "pkg:npm/rollup@1.32.1", "version": "1.32.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rollup-pluginutils", "purl": "pkg:npm/rollup-pluginutils@2.8.2", "version": "2.8.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "rsvp", "purl": "pkg:npm/rsvp@3.2.1", "version": "3.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "rsvp", "purl": "pkg:npm/rsvp@3.6.2", "version": "3.6.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rsvp", "purl": "pkg:npm/rsvp@4.8.4", "version": "4.8.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "rsvp", "purl": "pkg:npm/rsvp@4.8.5", "version": "4.8.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "run-async", "purl": "pkg:npm/run-async@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "run-parallel", "purl": "pkg:npm/run-parallel@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rx", "purl": "pkg:npm/rx@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rx-lite", "purl": "pkg:npm/rx-lite@4.0.8", "version": "4.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rx-lite-aggregates", "purl": "pkg:npm/rx-lite-aggregates@4.0.8", "version": "4.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rxjs", "purl": "pkg:npm/rxjs@5.5.12", "version": "5.5.12" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rxjs", "purl": "pkg:npm/rxjs@6.6.3", "version": "6.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "rxjs", "purl": "pkg:npm/rxjs@6.6.7", "version": "6.6.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "s3", "purl": "pkg:npm/s3@4.4.0", "version": "4.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "safe-array-concat", "purl": "pkg:npm/safe-array-concat@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "safe-buffer", "purl": "pkg:npm/safe-buffer@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "safe-buffer", "purl": "pkg:npm/safe-buffer@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "safe-buffer", "purl": "pkg:npm/safe-buffer@5.2.1", "version": "5.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "safe-json-parse", "purl": "pkg:npm/safe-json-parse@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "safe-regex", "purl": "pkg:npm/safe-regex@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "safe-regex-test", "purl": "pkg:npm/safe-regex-test@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "safefs", "purl": "pkg:npm/safefs@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "safer-buffer", "purl": "pkg:npm/safer-buffer@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sander", "purl": "pkg:npm/sander@0.5.1", "version": "0.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sane", "purl": "pkg:npm/sane@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sanitize-filename", "purl": "pkg:npm/sanitize-filename@1.6.3", "version": "1.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sass-lookup", "purl": "pkg:npm/sass-lookup@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sass.js", "purl": "pkg:npm/sass.js@0.10.13", "version": "0.10.13" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sax", "purl": "pkg:npm/sax@0.4.2", "version": "0.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sax", "purl": "pkg:npm/sax@0.5.8", "version": "0.5.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sax", "purl": "pkg:npm/sax@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "sax", "purl": "pkg:npm/sax@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@5.3.0", "version": "5.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@5.5.1", "version": "5.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "semver", "purl": "pkg:npm/semver@5.7.0", "version": "5.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "semver", "purl": "pkg:npm/semver@5.7.1", "version": "5.7.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@5.7.2", "version": "5.7.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "semver", "purl": "pkg:npm/semver@6.3.0", "version": "6.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@6.3.1", "version": "6.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.5.1", "version": "7.5.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.5.4", "version": "7.5.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "semver-diff", "purl": "pkg:npm/semver-diff@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "send", "purl": "pkg:npm/send@0.17.1", "version": "0.17.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "send", "purl": "pkg:npm/send@0.18.0", "version": "0.18.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "serve-static", "purl": "pkg:npm/serve-static@1.14.1", "version": "1.14.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "serve-static", "purl": "pkg:npm/serve-static@1.15.0", "version": "1.15.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "set-blocking", "purl": "pkg:npm/set-blocking@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "set-value", "purl": "pkg:npm/set-value@0.4.3", "version": "0.4.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "set-value", "purl": "pkg:npm/set-value@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "set-value", "purl": "pkg:npm/set-value@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "setprototypeof", "purl": "pkg:npm/setprototypeof@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "setprototypeof", "purl": "pkg:npm/setprototypeof@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "setprototypeof", "purl": "pkg:npm/setprototypeof@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "shebang-command", "purl": "pkg:npm/shebang-command@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "shebang-command", "purl": "pkg:npm/shebang-command@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "shebang-regex", "purl": "pkg:npm/shebang-regex@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "shebang-regex", "purl": "pkg:npm/shebang-regex@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "shellwords", "purl": "pkg:npm/shellwords@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "shush", "purl": "pkg:npm/shush@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "side-channel", "purl": "pkg:npm/side-channel@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sigmund", "purl": "pkg:npm/sigmund@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "signal-exit", "purl": "pkg:npm/signal-exit@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "silent-error", "purl": "pkg:npm/silent-error@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "silent-error", "purl": "pkg:npm/silent-error@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "simple-html-tokenizer", "purl": "pkg:npm/simple-html-tokenizer@0.5.11", "version": "0.5.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "single-line-log", "purl": "pkg:npm/single-line-log@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "slash", "purl": "pkg:npm/slash@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "slash", "purl": "pkg:npm/slash@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "slash", "purl": "pkg:npm/slash@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "slice-ansi", "purl": "pkg:npm/slice-ansi@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "snake-case", "purl": "pkg:npm/snake-case@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "snapdragon", "purl": "pkg:npm/snapdragon@0.8.2", "version": "0.8.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "snapdragon-node", "purl": "pkg:npm/snapdragon-node@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "snapdragon-util", "purl": "pkg:npm/snapdragon-util@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sntp", "purl": "pkg:npm/sntp@1.0.9", "version": "1.0.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "socket.io", "purl": "pkg:npm/socket.io@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "socket.io-adapter", "purl": "pkg:npm/socket.io-adapter@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "socket.io-client", "purl": "pkg:npm/socket.io-client@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "socket.io-parser", "purl": "pkg:npm/socket.io-parser@3.3.3", "version": "3.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "socket.io-parser", "purl": "pkg:npm/socket.io-parser@3.4.3", "version": "3.4.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sorcery", "purl": "pkg:npm/sorcery@0.10.0", "version": "0.10.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sort-keys", "purl": "pkg:npm/sort-keys@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sort-keys", "purl": "pkg:npm/sort-keys@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sort-object-keys", "purl": "pkg:npm/sort-object-keys@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sort-package-json", "purl": "pkg:npm/sort-package-json@1.57.0", "version": "1.57.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.1.43", "version": "0.1.43" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.4.4", "version": "0.4.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.5.7", "version": "0.5.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.6.1", "version": "0.6.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.7.3", "version": "0.7.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "source-map-resolve", "purl": "pkg:npm/source-map-resolve@0.5.2", "version": "0.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "source-map-support", "purl": "pkg:npm/source-map-support@0.4.18", "version": "0.4.18" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "source-map-support", "purl": "pkg:npm/source-map-support@0.5.9", "version": "0.5.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "source-map-url", "purl": "pkg:npm/source-map-url@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "source-map-url", "purl": "pkg:npm/source-map-url@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sourcemap-codec", "purl": "pkg:npm/sourcemap-codec@1.4.8", "version": "1.4.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sourcemap-validator", "purl": "pkg:npm/sourcemap-validator@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "spawn-args", "purl": "pkg:npm/spawn-args@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "spawn-rx", "purl": "pkg:npm/spawn-rx@2.0.12", "version": "2.0.12" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "spawn-rx", "purl": "pkg:npm/spawn-rx@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "spawn-sync", "purl": "pkg:npm/spawn-sync@1.0.15", "version": "1.0.15" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "spdx-correct", "purl": "pkg:npm/spdx-correct@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "spdx-exceptions", "purl": "pkg:npm/spdx-exceptions@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "spdx-expression-parse", "purl": "pkg:npm/spdx-expression-parse@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "spdx-license-ids", "purl": "pkg:npm/spdx-license-ids@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "speedometer", "purl": "pkg:npm/speedometer@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "split-string", "purl": "pkg:npm/split-string@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "sprintf-js", "purl": "pkg:npm/sprintf-js@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sprintf-js", "purl": "pkg:npm/sprintf-js@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "sprintf-js", "purl": "pkg:npm/sprintf-js@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sri-toolbox", "purl": "pkg:npm/sri-toolbox@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sshpk", "purl": "pkg:npm/sshpk@1.15.2", "version": "1.15.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "stack-trace", "purl": "pkg:npm/stack-trace@0.0.10", "version": "0.0.10" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "stagehand", "purl": "pkg:npm/stagehand@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "static-extend", "purl": "pkg:npm/static-extend@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "statuses", "purl": "pkg:npm/statuses@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "statuses", "purl": "pkg:npm/statuses@1.5.0", "version": "1.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "statuses", "purl": "pkg:npm/statuses@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "stream-buffers", "purl": "pkg:npm/stream-buffers@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "streamsink", "purl": "pkg:npm/streamsink@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "strict-uri-encode", "purl": "pkg:npm/strict-uri-encode@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "string-template", "purl": "pkg:npm/string-template@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "string-width", "purl": "pkg:npm/string-width@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "string-width", "purl": "pkg:npm/string-width@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "string-width", "purl": "pkg:npm/string-width@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "string.prototype.trim", "purl": "pkg:npm/string.prototype.trim@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "string.prototype.trimend", "purl": "pkg:npm/string.prototype.trimend@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "string.prototype.trimstart", "purl": "pkg:npm/string.prototype.trimstart@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "string_decoder", "purl": "pkg:npm/string_decoder@0.10.31", "version": "0.10.31" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "string_decoder", "purl": "pkg:npm/string_decoder@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "string_decoder", "purl": "pkg:npm/string_decoder@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "string_decoder", "purl": "pkg:npm/string_decoder@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "stringstream", "purl": "pkg:npm/stringstream@0.0.6", "version": "0.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "strip-ansi", "purl": "pkg:npm/strip-ansi@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "strip-ansi", "purl": "pkg:npm/strip-ansi@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "strip-ansi", "purl": "pkg:npm/strip-ansi@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "strip-bom", "purl": "pkg:npm/strip-bom@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "strip-bom", "purl": "pkg:npm/strip-bom@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "strip-bom", "purl": "pkg:npm/strip-bom@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "strip-eof", "purl": "pkg:npm/strip-eof@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "strip-final-newline", "purl": "pkg:npm/strip-final-newline@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "strip-indent", "purl": "pkg:npm/strip-indent@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "strip-json-comments", "purl": "pkg:npm/strip-json-comments@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "strip-json-comments", "purl": "pkg:npm/strip-json-comments@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "styled_string", "purl": "pkg:npm/styled_string@0.0.1", "version": "0.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "stylus", "purl": "pkg:npm/stylus@0.54.5", "version": "0.54.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "stylus", "purl": "pkg:npm/stylus@0.54.8", "version": "0.54.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "stylus-lookup", "purl": "pkg:npm/stylus-lookup@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sudo-prompt", "purl": "pkg:npm/sudo-prompt@8.2.5", "version": "8.2.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sum-up", "purl": "pkg:npm/sum-up@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "sumchecker", "purl": "pkg:npm/sumchecker@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "supports-color", "purl": "pkg:npm/supports-color@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "supports-color", "purl": "pkg:npm/supports-color@3.2.3", "version": "3.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "supports-color", "purl": "pkg:npm/supports-color@5.5.0", "version": "5.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "supports-color", "purl": "pkg:npm/supports-color@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "supports-color", "purl": "pkg:npm/supports-color@7.2.0", "version": "7.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "supports-preserve-symlinks-flag", "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "svgo", "purl": "pkg:npm/svgo@0.6.6", "version": "0.6.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "svgo", "purl": "pkg:npm/svgo@0.7.2", "version": "0.7.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "symbol-observable", "purl": "pkg:npm/symbol-observable@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "symbol-tree", "purl": "pkg:npm/symbol-tree@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "symlink-or-copy", "purl": "pkg:npm/symlink-or-copy@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "sync-disk-cache", "purl": "pkg:npm/sync-disk-cache@1.3.4", "version": "1.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "synchronous-promise", "purl": "pkg:npm/synchronous-promise@1.0.18", "version": "1.0.18" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "table", "purl": "pkg:npm/table@5.4.6", "version": "5.4.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tabtab", "purl": "pkg:npm/tabtab@2.2.2", "version": "2.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tap-parser", "purl": "pkg:npm/tap-parser@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "tape", "purl": "pkg:npm/tape@2.3.3", "version": "2.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tar", "purl": "pkg:npm/tar@2.2.2", "version": "2.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tar", "purl": "pkg:npm/tar@4.4.19", "version": "4.4.19" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "tar", "purl": "pkg:npm/tar@4.4.8", "version": "4.4.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tar-stream", "purl": "pkg:npm/tar-stream@0.4.7", "version": "0.4.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "temp", "purl": "pkg:npm/temp@0.8.3", "version": "0.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "temp", "purl": "pkg:npm/temp@0.9.0", "version": "0.9.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "term-size", "purl": "pkg:npm/term-size@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "terser", "purl": "pkg:npm/terser@3.12.0", "version": "3.12.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "testem", "purl": "pkg:npm/testem@2.17.0", "version": "2.17.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "text-table", "purl": "pkg:npm/text-table@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "textextensions", "purl": "pkg:npm/textextensions@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "textextensions", "purl": "pkg:npm/textextensions@2.6.0", "version": "2.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "thenify", "purl": "pkg:npm/thenify@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "thenify-all", "purl": "pkg:npm/thenify-all@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "throttleit", "purl": "pkg:npm/throttleit@0.0.2", "version": "0.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "through", "purl": "pkg:npm/through@2.3.8", "version": "2.3.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "through2", "purl": "pkg:npm/through2@0.2.3", "version": "0.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "through2", "purl": "pkg:npm/through2@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "timed-out", "purl": "pkg:npm/timed-out@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tiny-each-async", "purl": "pkg:npm/tiny-each-async@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tiny-glob", "purl": "pkg:npm/tiny-glob@0.2.9", "version": "0.2.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tiny-lr", "purl": "pkg:npm/tiny-lr@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "tmp", "purl": "pkg:npm/tmp@0.0.28", "version": "0.0.28" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tmp", "purl": "pkg:npm/tmp@0.0.29", "version": "0.0.29" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "tmp", "purl": "pkg:npm/tmp@0.0.33", "version": "0.0.33" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tmp", "purl": "pkg:npm/tmp@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tmp-promise", "purl": "pkg:npm/tmp-promise@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tmpl", "purl": "pkg:npm/tmpl@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tn1150", "purl": "pkg:npm/tn1150@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "to-array", "purl": "pkg:npm/to-array@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "to-fast-properties", "purl": "pkg:npm/to-fast-properties@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "to-fast-properties", "purl": "pkg:npm/to-fast-properties@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "to-object-path", "purl": "pkg:npm/to-object-path@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "to-regex", "purl": "pkg:npm/to-regex@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "to-regex-range", "purl": "pkg:npm/to-regex-range@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "to-regex-range", "purl": "pkg:npm/to-regex-range@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "toidentifier", "purl": "pkg:npm/toidentifier@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "toidentifier", "purl": "pkg:npm/toidentifier@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "touch", "purl": "pkg:npm/touch@0.0.3", "version": "0.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "touch", "purl": "pkg:npm/touch@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tough-cookie", "purl": "pkg:npm/tough-cookie@2.3.4", "version": "2.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tough-cookie", "purl": "pkg:npm/tough-cookie@2.4.3", "version": "2.4.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "toutsuite", "purl": "pkg:npm/toutsuite@0.6.0", "version": "0.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tr46", "purl": "pkg:npm/tr46@0.0.3", "version": "0.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "transformers", "purl": "pkg:npm/transformers@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "traverse", "purl": "pkg:npm/traverse@0.3.9", "version": "0.3.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tree-kill", "purl": "pkg:npm/tree-kill@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "tree-sync", "purl": "pkg:npm/tree-sync@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tree-sync", "purl": "pkg:npm/tree-sync@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "trim-newlines", "purl": "pkg:npm/trim-newlines@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "trim-right", "purl": "pkg:npm/trim-right@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "truncate-utf8-bytes", "purl": "pkg:npm/truncate-utf8-bytes@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@1.14.1", "version": "1.14.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@1.9.3", "version": "1.9.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tunnel-agent", "purl": "pkg:npm/tunnel-agent@0.6.0", "version": "0.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tweetnacl", "purl": "pkg:npm/tweetnacl@0.14.5", "version": "0.14.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "type-check", "purl": "pkg:npm/type-check@0.3.2", "version": "0.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "type-detect", "purl": "pkg:npm/type-detect@4.0.8", "version": "4.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "type-is", "purl": "pkg:npm/type-is@1.6.18", "version": "1.6.18" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "typechecker", "purl": "pkg:npm/typechecker@4.11.0", "version": "4.11.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "typed-array-length", "purl": "pkg:npm/typed-array-length@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "typedarray", "purl": "pkg:npm/typedarray@0.0.6", "version": "0.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "typescript", "purl": "pkg:npm/typescript@4.1.5", "version": "4.1.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "typescript-memoize", "purl": "pkg:npm/typescript-memoize@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uc.micro", "purl": "pkg:npm/uc.micro@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uglify-js", "purl": "pkg:npm/uglify-js@2.2.5", "version": "2.2.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uglify-js", "purl": "pkg:npm/uglify-js@2.8.29", "version": "2.8.29" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uglify-js", "purl": "pkg:npm/uglify-js@3.12.8", "version": "3.12.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uglify-to-browserify", "purl": "pkg:npm/uglify-to-browserify@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "unbox-primitive", "purl": "pkg:npm/unbox-primitive@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "undefsafe", "purl": "pkg:npm/undefsafe@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "underscore", "purl": "pkg:npm/underscore@1.13.6", "version": "1.13.6" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "underscore.string", "purl": "pkg:npm/underscore.string@3.3.5", "version": "3.3.5" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "unicode-canonical-property-names-ecmascript", "purl": "pkg:npm/unicode-canonical-property-names-ecmascript@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "unicode-canonical-property-names-ecmascript", "purl": "pkg:npm/unicode-canonical-property-names-ecmascript@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "unicode-match-property-ecmascript", "purl": "pkg:npm/unicode-match-property-ecmascript@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "unicode-match-property-ecmascript", "purl": "pkg:npm/unicode-match-property-ecmascript@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "unicode-match-property-value-ecmascript", "purl": "pkg:npm/unicode-match-property-value-ecmascript@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "unicode-match-property-value-ecmascript", "purl": "pkg:npm/unicode-match-property-value-ecmascript@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "unicode-property-aliases-ecmascript", "purl": "pkg:npm/unicode-property-aliases-ecmascript@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "unicode-property-aliases-ecmascript", "purl": "pkg:npm/unicode-property-aliases-ecmascript@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "unicode-property-aliases-ecmascript", "purl": "pkg:npm/unicode-property-aliases-ecmascript@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "union-value", "purl": "pkg:npm/union-value@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "union-value", "purl": "pkg:npm/union-value@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uniq", "purl": "pkg:npm/uniq@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uniqs", "purl": "pkg:npm/uniqs@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "unique-string", "purl": "pkg:npm/unique-string@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "universal-user-agent", "purl": "pkg:npm/universal-user-agent@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "universalify", "purl": "pkg:npm/universalify@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "universalify", "purl": "pkg:npm/universalify@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "unorm", "purl": "pkg:npm/unorm@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "unpipe", "purl": "pkg:npm/unpipe@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "unset-value", "purl": "pkg:npm/unset-value@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "untildify", "purl": "pkg:npm/untildify@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "untildify", "purl": "pkg:npm/untildify@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "unzip-response", "purl": "pkg:npm/unzip-response@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "upath", "purl": "pkg:npm/upath@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "update-browserslist-db", "purl": "pkg:npm/update-browserslist-db@1.0.11", "version": "1.0.11" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "update-notifier", "purl": "pkg:npm/update-notifier@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uri-js", "purl": "pkg:npm/uri-js@4.2.2", "version": "4.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "urix", "purl": "pkg:npm/urix@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "url", "purl": "pkg:npm/url@0.10.3", "version": "0.10.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "url-parse-lax", "purl": "pkg:npm/url-parse-lax@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "url-parse-lax", "purl": "pkg:npm/url-parse-lax@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "url-template", "purl": "pkg:npm/url-template@2.0.8", "version": "2.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "url-to-options", "purl": "pkg:npm/url-to-options@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "use", "purl": "pkg:npm/use@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "user-info", "purl": "pkg:npm/user-info@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "username", "purl": "pkg:npm/username@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "username", "purl": "pkg:npm/username@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "username-sync", "purl": "pkg:npm/username-sync@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "username-sync", "purl": "pkg:npm/username-sync@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "utf8-byte-length", "purl": "pkg:npm/utf8-byte-length@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "util-deprecate", "purl": "pkg:npm/util-deprecate@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "util.promisify", "purl": "pkg:npm/util.promisify@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "utile", "purl": "pkg:npm/utile@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "utile", "purl": "pkg:npm/utile@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "utils-merge", "purl": "pkg:npm/utils-merge@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uuid", "purl": "pkg:npm/uuid@3.3.2", "version": "3.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "uuid", "purl": "pkg:npm/uuid@3.4.0", "version": "3.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "validate-npm-package-license", "purl": "pkg:npm/validate-npm-package-license@3.0.4", "version": "3.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "validate-npm-package-name", "purl": "pkg:npm/validate-npm-package-name@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "vary", "purl": "pkg:npm/vary@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "vendors", "purl": "pkg:npm/vendors@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "verror", "purl": "pkg:npm/verror@1.10.0", "version": "1.10.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "virtual-each", "purl": "pkg:npm/virtual-each@0.6.3", "version": "0.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "void-elements", "purl": "pkg:npm/void-elements@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "vue-hot-reload-api", "purl": "pkg:npm/vue-hot-reload-api@2.3.4", "version": "2.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "vue-template-compiler", "purl": "pkg:npm/vue-template-compiler@2.6.12", "version": "2.6.12" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "vue-template-es2015-compiler", "purl": "pkg:npm/vue-template-es2015-compiler@1.9.1", "version": "1.9.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "walk-sync", "purl": "pkg:npm/walk-sync@0.2.7", "version": "0.2.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "walk-sync", "purl": "pkg:npm/walk-sync@0.3.3", "version": "0.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "walk-sync", "purl": "pkg:npm/walk-sync@0.3.4", "version": "0.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "walk-sync", "purl": "pkg:npm/walk-sync@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "walk-sync", "purl": "pkg:npm/walk-sync@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "walker", "purl": "pkg:npm/walker@1.0.8", "version": "1.0.8" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "watch-detector", "purl": "pkg:npm/watch-detector@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "watch-detector", "purl": "pkg:npm/watch-detector@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "wcwidth", "purl": "pkg:npm/wcwidth@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "webidl-conversions", "purl": "pkg:npm/webidl-conversions@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "webidl-conversions", "purl": "pkg:npm/webidl-conversions@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "websocket-driver", "purl": "pkg:npm/websocket-driver@0.7.4", "version": "0.7.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "websocket-extensions", "purl": "pkg:npm/websocket-extensions@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "whatwg-url", "purl": "pkg:npm/whatwg-url@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "whatwg-url-compat", "purl": "pkg:npm/whatwg-url-compat@0.6.5", "version": "0.6.5" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "whet.extend", "purl": "pkg:npm/whet.extend@0.9.9", "version": "0.9.9" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "which", "purl": "pkg:npm/which@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "which", "purl": "pkg:npm/which@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "which-boxed-primitive", "purl": "pkg:npm/which-boxed-primitive@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "which-module", "purl": "pkg:npm/which-module@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "which-module", "purl": "pkg:npm/which-module@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "which-typed-array", "purl": "pkg:npm/which-typed-array@1.1.9", "version": "1.1.9" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "wide-align", "purl": "pkg:npm/wide-align@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "widest-line", "purl": "pkg:npm/widest-line@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "window-size", "purl": "pkg:npm/window-size@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "window-size", "purl": "pkg:npm/window-size@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "windows-release", "purl": "pkg:npm/windows-release@3.3.3", "version": "3.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "winston", "purl": "pkg:npm/winston@0.8.0", "version": "0.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "winston", "purl": "pkg:npm/winston@0.8.3", "version": "0.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "with", "purl": "pkg:npm/with@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "word-wrap", "purl": "pkg:npm/word-wrap@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "wordwrap", "purl": "pkg:npm/wordwrap@0.0.2", "version": "0.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "wordwrap", "purl": "pkg:npm/wordwrap@0.0.3", "version": "0.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "wordwrap", "purl": "pkg:npm/wordwrap@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "workerpool", "purl": "pkg:npm/workerpool@2.3.3", "version": "2.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "lib/ui-toolkit/package-lock.json", "name": "workerpool", "purl": "pkg:npm/workerpool@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "wrap-ansi", "purl": "pkg:npm/wrap-ansi@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "wrap-ansi", "purl": "pkg:npm/wrap-ansi@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "wrappy", "purl": "pkg:npm/wrappy@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "wrench", "purl": "pkg:npm/wrench@1.5.9", "version": "1.5.9" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "write", "purl": "pkg:npm/write@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "write-file-atomic", "purl": "pkg:npm/write-file-atomic@2.4.2", "version": "2.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "write-file-atomic", "purl": "pkg:npm/write-file-atomic@2.4.3", "version": "2.4.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ws", "purl": "pkg:npm/ws@7.4.6", "version": "7.4.6" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "xdg-basedir", "purl": "pkg:npm/xdg-basedir@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xml-name-validator", "purl": "pkg:npm/xml-name-validator@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xml2js", "purl": "pkg:npm/xml2js@0.2.6", "version": "0.2.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xml2js", "purl": "pkg:npm/xml2js@0.4.19", "version": "0.4.19" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xmlbuilder", "purl": "pkg:npm/xmlbuilder@0.4.2", "version": "0.4.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xmlbuilder", "purl": "pkg:npm/xmlbuilder@8.2.2", "version": "8.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xmlbuilder", "purl": "pkg:npm/xmlbuilder@9.0.7", "version": "9.0.7" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xmldom", "purl": "pkg:npm/xmldom@0.1.27", "version": "0.1.27" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xmlhttprequest-ssl", "purl": "pkg:npm/xmlhttprequest-ssl@1.6.3", "version": "1.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xtend", "purl": "pkg:npm/xtend@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "xtend", "purl": "pkg:npm/xtend@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "y18n", "purl": "pkg:npm/y18n@3.2.2", "version": "3.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "y18n", "purl": "pkg:npm/y18n@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "y18n", "purl": "pkg:npm/y18n@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yam", "purl": "pkg:npm/yam@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@12.0.5", "version": "12.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@13.2.2", "version": "13.2.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@13.2.4", "version": "13.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@13.3.2", "version": "13.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@14.2.3", "version": "14.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@3.10.0", "version": "3.10.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@4.8.1", "version": "4.8.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@6.6.0", "version": "6.6.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@7.0.2", "version": "7.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@11.1.1", "version": "11.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@13.0.0", "version": "13.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@13.1.0", "version": "13.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@13.1.2", "version": "13.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@15.0.1", "version": "15.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@2.4.1", "version": "2.4.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@4.2.1", "version": "4.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@9.0.2", "version": "9.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ember-electron/backend/package-lock.json", "name": "yargs-unparser", "purl": "pkg:npm/yargs-unparser@1.5.0", "version": "1.5.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yarn-or-npm", "purl": "pkg:npm/yarn-or-npm@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yarn-or-npm", "purl": "pkg:npm/yarn-or-npm@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yauzl", "purl": "pkg:npm/yauzl@2.10.0", "version": "2.10.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yeast", "purl": "pkg:npm/yeast@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yocto-queue", "purl": "pkg:npm/yocto-queue@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "zip-folder", "purl": "pkg:npm/zip-folder@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "zip-stream", "purl": "pkg:npm/zip-stream@0.4.1", "version": "0.4.1" } ], "description": "Visualize system calls and analyze containers", "errors": [], "excluded_matches": { "action reference to a moving tag or branch": 1 }, "id": "draios__sysdig-inspect", "manifests": [ ".github/workflows/ci.yaml", ".github/workflows/release-draft.yaml", "ember-electron/backend/package-lock.json", "ember-electron/backend/package.json", "lib/ui-toolkit/package-lock.json", "lib/ui-toolkit/package.json", "lib/wsd-core/package-lock.json", "lib/wsd-core/package.json", "package-lock.json", "package.json" ], "name": "sysdig-inspect", "osv": { "advisories": 512, "available": true, "confirmed": 417, "osv_only": [], "warning": null }, "ref": "0.12.1", "ref_kind": "release", "release_integrity": { "assets": 3, "checksums_published": false, "methods": [], "provenance_published": false, "sbom_published": false, "signatures_published": false, "verdict": "no-linux-binary" }, "released_at": "2026-07-17T18:36:32Z", "repository": "draios/sysdig-inspect", "sbomlyze_diff": { "added": 1042, "changed": 97, "drift": { "integrity_drift": 0, "metadata_drift": 0, "version_drift": 97 }, "findings": [ "Attack surface: +2086 packages (204.5%)", "94 version downgrades detected: @babel/helper-plugin-utils 7.12.13\u21927.0.0, abbrev 1.1.1\u21921.0.9, accepts 1.3.7\u21921.3.5, amd-name-resolver 1.3.1\u21921.2.0, ansi-styles 3.2.1\u21922.2.1 + 89 more", "3 version upgrades (1 major, 2 minor) among 1,020 shared packages" ], "html": "sbomlyze-diff.html", "removed": 0 }, "scanned_at": "2026-11-02T03:07:05+00:00", "scorecard": null, "scorecard_note": "the project is not in the OpenSSF public dataset; the Scorecard CLI fallback was skipped because this shard's weekly budget was used", "vulnerabilities": [ { "aliases": [ "CVE-2023-45133" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-45133", "percentile": 0.44506, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "7.23.2" ], "id": "GHSA-67hx-6x53-jw92", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "@babel/traverse", "severity": "Critical", "summary": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "version": "7.12.17" }, { "aliases": [ "CVE-2023-45133" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-45133", "percentile": 0.44506, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "7.23.2" ], "id": "GHSA-67hx-6x53-jw92", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "@babel/traverse", "severity": "Critical", "summary": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "version": "7.21.5" }, { "aliases": [ "CVE-2023-45133" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-45133", "percentile": 0.44506, "score": 0.00525 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-67hx-6x53-jw92", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "babel-traverse", "severity": "Critical", "summary": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "version": "6.26.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.1.1" ], "id": "GHSA-4vmm-mhcq-4x9j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "constantinople", "severity": "Critical", "summary": "Sandbox Bypass Leading to Arbitrary Code Execution in constantinople", "url": "https://github.com/advisories/GHSA-4vmm-mhcq-4x9j", "version": "3.0.2" }, { "aliases": [ "CVE-2025-7783" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-7783", "percentile": 0.78615, "score": 0.0181 }, "fix_state": "fixed", "fixed_in": [ "2.5.4" ], "id": "GHSA-fjxv-7rqg-78g4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "form-data", "severity": "Critical", "summary": "form-data uses unsafe random function in form-data for choosing boundary", "url": "https://github.com/advisories/GHSA-fjxv-7rqg-78g4", "version": "2.1.4" }, { "aliases": [ "CVE-2025-7783" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-7783", "percentile": 0.78615, "score": 0.0181 }, "fix_state": "fixed", "fixed_in": [ "2.5.4" ], "id": "GHSA-fjxv-7rqg-78g4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "form-data", "severity": "Critical", "summary": "form-data uses unsafe random function in form-data for choosing boundary", "url": "https://github.com/advisories/GHSA-fjxv-7rqg-78g4", "version": "2.3.3" }, { "aliases": [ "CVE-2026-33937" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33937", "percentile": 0.79759, "score": 0.01907 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-2w6w-674q-4c4q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Critical", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion", "url": "https://github.com/advisories/GHSA-2w6w-674q-4c4q", "version": "4.7.7" }, { "aliases": [ "CVE-2026-106446" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106446", "percentile": 0.56143, "score": 0.00786 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-8r5x-fm3f-whwj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Critical", "summary": "Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)", "url": "https://github.com/advisories/GHSA-8r5x-fm3f-whwj", "version": "4.7.7" }, { "aliases": [ "CVE-2026-106445" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106445", "percentile": 0.48158, "score": 0.00589 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-p8wg-vrv2-v86f", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Critical", "summary": "Handlebars: JavaScript Injection via Own Property Check Bypass", "url": "https://github.com/advisories/GHSA-p8wg-vrv2-v86f", "version": "4.7.7" }, { "aliases": [ "CVE-2019-10744" ], "ecosystem": "npm", "epss": { "cve": "CVE-2019-10744", "percentile": 0.9224, "score": 0.05006 }, "fix_state": "fixed", "fixed_in": [ "4.17.12" ], "id": "GHSA-jf85-cpcp-j695", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Critical", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-jf85-cpcp-j695", "version": "2.4.2" }, { "aliases": [ "CVE-2021-44906" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-44906", "percentile": 0.91634, "score": 0.04581 }, "fix_state": "fixed", "fixed_in": [ "0.2.4" ], "id": "GHSA-xvch-5gv4-984h", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "minimist", "severity": "Critical", "summary": "Prototype Pollution in minimist", "url": "https://github.com/advisories/GHSA-xvch-5gv4-984h", "version": "0.0.10" }, { "aliases": [ "CVE-2021-44906" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-44906", "percentile": 0.91634, "score": 0.04581 }, "fix_state": "fixed", "fixed_in": [ "0.2.4" ], "id": "GHSA-xvch-5gv4-984h", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "minimist", "severity": "Critical", "summary": "Prototype Pollution in minimist", "url": "https://github.com/advisories/GHSA-xvch-5gv4-984h", "version": "0.0.8" }, { "aliases": [ "CVE-2021-44906" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-44906", "percentile": 0.91634, "score": 0.04581 }, "fix_state": "fixed", "fixed_in": [ "1.2.6" ], "id": "GHSA-xvch-5gv4-984h", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimist", "severity": "Critical", "summary": "Prototype Pollution in minimist", "url": "https://github.com/advisories/GHSA-xvch-5gv4-984h", "version": "1.1.3" }, { "aliases": [ "CVE-2021-44906" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-44906", "percentile": 0.91634, "score": 0.04581 }, "fix_state": "fixed", "fixed_in": [ "1.2.6" ], "id": "GHSA-xvch-5gv4-984h", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "minimist", "severity": "Critical", "summary": "Prototype Pollution in minimist", "url": "https://github.com/advisories/GHSA-xvch-5gv4-984h", "version": "1.2.0" }, { "aliases": [ "CVE-2021-44906" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-44906", "percentile": 0.91634, "score": 0.04581 }, "fix_state": "fixed", "fixed_in": [ "1.2.6" ], "id": "GHSA-xvch-5gv4-984h", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "minimist", "severity": "Critical", "summary": "Prototype Pollution in minimist", "url": "https://github.com/advisories/GHSA-xvch-5gv4-984h", "version": "1.2.5" }, { "aliases": [ "CVE-2022-22912" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-22912", "percentile": 0.85049, "score": 0.02553 }, "fix_state": "fixed", "fixed_in": [ "3.0.5" ], "id": "GHSA-4cpg-3vgw-4877", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "plist", "severity": "Critical", "summary": "Prototype pollution in Plist before 3.0.5 can cause denial of service", "url": "https://github.com/advisories/GHSA-4cpg-3vgw-4877", "version": "2.1.0" }, { "aliases": [ "CVE-2022-22912" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-22912", "percentile": 0.85049, "score": 0.02553 }, "fix_state": "fixed", "fixed_in": [ "3.0.5" ], "id": "GHSA-4cpg-3vgw-4877", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "plist", "severity": "Critical", "summary": "Prototype pollution in Plist before 3.0.5 can cause denial of service", "url": "https://github.com/advisories/GHSA-4cpg-3vgw-4877", "version": "3.0.1" }, { "aliases": [ "CVE-2026-90711" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-90711", "percentile": 0.177, "score": 0.0026 }, "fix_state": "fixed", "fixed_in": [ "2.0.8" ], "id": "GHSA-jqcg-44mw-7w3h", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "proxy-addr", "severity": "Critical", "summary": "proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet", "url": "https://github.com/advisories/GHSA-jqcg-44mw-7w3h", "version": "2.0.5" }, { "aliases": [ "CVE-2026-90711" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-90711", "percentile": 0.177, "score": 0.0026 }, "fix_state": "fixed", "fixed_in": [ "2.0.8" ], "id": "GHSA-jqcg-44mw-7w3h", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "proxy-addr", "severity": "Critical", "summary": "proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet", "url": "https://github.com/advisories/GHSA-jqcg-44mw-7w3h", "version": "2.0.7" }, { "aliases": [ "CVE-2019-10747" ], "ecosystem": "npm", "epss": { "cve": "CVE-2019-10747", "percentile": 0.84546, "score": 0.02475 }, "fix_state": "fixed", "fixed_in": [ "2.0.1" ], "id": "GHSA-4g88-fppr-53pp", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "set-value", "severity": "Critical", "summary": "Prototype Pollution in set-value", "url": "https://github.com/advisories/GHSA-4g88-fppr-53pp", "version": "0.4.3" }, { "aliases": [ "CVE-2019-10747" ], "ecosystem": "npm", "epss": { "cve": "CVE-2019-10747", "percentile": 0.84546, "score": 0.02475 }, "fix_state": "fixed", "fixed_in": [ "2.0.1" ], "id": "GHSA-4g88-fppr-53pp", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "set-value", "severity": "Critical", "summary": "Prototype Pollution in set-value", "url": "https://github.com/advisories/GHSA-4g88-fppr-53pp", "version": "2.0.0" }, { "aliases": [ "CVE-2026-59873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59873", "percentile": 0.47807, "score": 0.00582 }, "fix_state": "fixed", "fixed_in": [ "7.5.19" ], "id": "GHSA-23hp-3jrh-7fpw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Critical", "summary": "node-tar: Decompression/parse DoS via unlimited input", "url": "https://github.com/advisories/GHSA-23hp-3jrh-7fpw", "version": "2.2.2" }, { "aliases": [ "CVE-2026-59873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59873", "percentile": 0.47807, "score": 0.00582 }, "fix_state": "fixed", "fixed_in": [ "7.5.19" ], "id": "GHSA-23hp-3jrh-7fpw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Critical", "summary": "node-tar: Decompression/parse DoS via unlimited input", "url": "https://github.com/advisories/GHSA-23hp-3jrh-7fpw", "version": "4.4.19" }, { "aliases": [ "CVE-2026-59873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59873", "percentile": 0.47807, "score": 0.00582 }, "fix_state": "fixed", "fixed_in": [ "7.5.19" ], "id": "GHSA-23hp-3jrh-7fpw", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Critical", "summary": "node-tar: Decompression/parse DoS via unlimited input", "url": "https://github.com/advisories/GHSA-23hp-3jrh-7fpw", "version": "4.4.8" }, { "aliases": [ "CVE-2015-8857" ], "ecosystem": "npm", "epss": { "cve": "CVE-2015-8857", "percentile": 0.8933, "score": 0.03559 }, "fix_state": "fixed", "fixed_in": [ "2.4.24" ], "id": "GHSA-34r7-q49f-h37c", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "uglify-js", "severity": "Critical", "summary": "Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js", "url": "https://github.com/advisories/GHSA-34r7-q49f-h37c", "version": "2.2.5" }, { "aliases": [ "CVE-2026-54466" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-54466", "percentile": 0.32004, "score": 0.0038 }, "fix_state": "fixed", "fixed_in": [ "0.7.5" ], "id": "GHSA-xv26-6w52-cph6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "websocket-driver", "severity": "Critical", "summary": "websocket-driver: Message corruption via abuse of protocol length headers", "url": "https://github.com/advisories/GHSA-xv26-6w52-cph6", "version": "0.7.4" }, { "aliases": [ "CVE-2022-39353" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-39353", "percentile": 0.7576, "score": 0.01597 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-crh6-fp67-6883", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Critical", "summary": "xmldom allows multiple root nodes in a DOM", "url": "https://github.com/advisories/GHSA-crh6-fp67-6883", "version": "0.1.27" }, { "aliases": [ "CVE-2026-44728" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-44728", "percentile": 0.02186, "score": 0.00125 }, "fix_state": "fixed", "fixed_in": [ "7.29.4" ], "id": "GHSA-fv7c-fp4j-7gwp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "@babel/plugin-transform-modules-systemjs", "severity": "High", "summary": "@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input", "url": "https://github.com/advisories/GHSA-fv7c-fp4j-7gwp", "version": "7.12.13" }, { "aliases": [ "CVE-2026-44728" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-44728", "percentile": 0.02186, "score": 0.00125 }, "fix_state": "fixed", "fixed_in": [ "7.29.4" ], "id": "GHSA-fv7c-fp4j-7gwp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "@babel/plugin-transform-modules-systemjs", "severity": "High", "summary": "@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input", "url": "https://github.com/advisories/GHSA-fv7c-fp4j-7gwp", "version": "7.20.11" }, { "aliases": [ "CVE-2026-44728" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-44728", "percentile": 0.02186, "score": 0.00125 }, "fix_state": "fixed", "fixed_in": [ "7.29.4" ], "id": "GHSA-fv7c-fp4j-7gwp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "@babel/plugin-transform-modules-systemjs", "severity": "High", "summary": "@babel/plugin-transform-modules-systemjs generates arbitrary code when compiling malicious input", "url": "https://github.com/advisories/GHSA-fv7c-fp4j-7gwp", "version": "7.22.5" }, { "aliases": [ "CVE-2021-23424" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23424", "percentile": 0.78115, "score": 0.01768 }, "fix_state": "fixed", "fixed_in": [ "0.0.8" ], "id": "GHSA-whgm-jr23-g3j9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ansi-html", "severity": "High", "summary": "Uncontrolled Resource Consumption in ansi-html", "url": "https://github.com/advisories/GHSA-whgm-jr23-g3j9", "version": "0.0.7" }, { "aliases": [ "CVE-2021-3807" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-3807", "percentile": 0.89312, "score": 0.03552 }, "fix_state": "fixed", "fixed_in": [ "3.0.1" ], "id": "GHSA-93q8-gq69-wqmw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ansi-regex", "severity": "High", "summary": "Inefficient Regular Expression Complexity in chalk/ansi-regex", "url": "https://github.com/advisories/GHSA-93q8-gq69-wqmw", "version": "3.0.0" }, { "aliases": [ "CVE-2021-3807" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-3807", "percentile": 0.89312, "score": 0.03552 }, "fix_state": "fixed", "fixed_in": [ "4.1.1" ], "id": "GHSA-93q8-gq69-wqmw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ansi-regex", "severity": "High", "summary": "Inefficient Regular Expression Complexity in chalk/ansi-regex", "url": "https://github.com/advisories/GHSA-93q8-gq69-wqmw", "version": "4.1.0" }, { "aliases": [ "CVE-2021-43138" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-43138", "percentile": 0.88673, "score": 0.03346 }, "fix_state": "fixed", "fixed_in": [ "2.6.4" ], "id": "GHSA-fwr7-v2mv-hh25", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "async", "severity": "High", "summary": "Prototype Pollution in async", "url": "https://github.com/advisories/GHSA-fwr7-v2mv-hh25", "version": "2.6.1" }, { "aliases": [ "CVE-2020-28472" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-28472", "percentile": 0.82265, "score": 0.02168 }, "fix_state": "fixed", "fixed_in": [ "2.814.0" ], "id": "GHSA-rrc9-gqf8-8rwg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "aws-sdk", "severity": "High", "summary": "Prototype Pollution via file load in aws-sdk and @aws-sdk/shared-ini-file-loader", "url": "https://github.com/advisories/GHSA-rrc9-gqf8-8rwg", "version": "2.0.31" }, { "aliases": [ "CVE-2026-111181" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111181", "percentile": 0.32919, "score": 0.00388 }, "fix_state": "fixed", "fixed_in": [ "1.20.9" ], "id": "GHSA-27r3-jxmh-p828", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "body-parser", "severity": "High", "summary": "body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body", "url": "https://github.com/advisories/GHSA-27r3-jxmh-p828", "version": "1.19.0" }, { "aliases": [ "CVE-2026-111181" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111181", "percentile": 0.32919, "score": 0.00388 }, "fix_state": "fixed", "fixed_in": [ "1.20.9" ], "id": "GHSA-27r3-jxmh-p828", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "body-parser", "severity": "High", "summary": "body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body", "url": "https://github.com/advisories/GHSA-27r3-jxmh-p828", "version": "1.20.1" }, { "aliases": [ "CVE-2024-45590" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-45590", "percentile": 0.5739, "score": 0.00824 }, "fix_state": "fixed", "fixed_in": [ "1.20.3" ], "id": "GHSA-qwcr-r2fm-qrc7", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "body-parser", "severity": "High", "summary": "body-parser vulnerable to denial of service when url encoding is enabled", "url": "https://github.com/advisories/GHSA-qwcr-r2fm-qrc7", "version": "1.19.0" }, { "aliases": [ "CVE-2024-45590" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-45590", "percentile": 0.5739, "score": 0.00824 }, "fix_state": "fixed", "fixed_in": [ "1.20.3" ], "id": "GHSA-qwcr-r2fm-qrc7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "body-parser", "severity": "High", "summary": "body-parser vulnerable to denial of service when url encoding is enabled", "url": "https://github.com/advisories/GHSA-qwcr-r2fm-qrc7", "version": "1.20.1" }, { "aliases": [ "CVE-2026-13149" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-13149", "percentile": 0.3024, "score": 0.00364 }, "fix_state": "fixed", "fixed_in": [ "1.1.16" ], "id": "GHSA-3jxr-9vmj-r5cp", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups", "url": "https://github.com/advisories/GHSA-3jxr-9vmj-r5cp", "version": "1.1.11" }, { "aliases": [ "CVE-2026-102276" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102276", "percentile": 0.39514, "score": 0.00455 }, "fix_state": "fixed", "fixed_in": [ "1.1.19" ], "id": "GHSA-6j4f-fj2g-mc7p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion", "url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p", "version": "1.1.11" }, { "aliases": [ "CVE-2026-14257" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-14257", "percentile": 0.50816, "score": 0.00643 }, "fix_state": "fixed", "fixed_in": [ "1.1.17" ], "id": "GHSA-mh99-v99m-4gvg", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash", "url": "https://github.com/advisories/GHSA-mh99-v99m-4gvg", "version": "1.1.11" }, { "aliases": [ "CVE-2026-102278" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102278", "percentile": 0.42209, "score": 0.00491 }, "fix_state": "fixed", "fixed_in": [ "1.1.20" ], "id": "GHSA-qhr7-859c-m2p7", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion", "url": "https://github.com/advisories/GHSA-qhr7-859c-m2p7", "version": "1.1.11" }, { "aliases": [ "CVE-2026-69152" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69152", "percentile": 0.51004, "score": 0.00647 }, "fix_state": "fixed", "fixed_in": [ "1.1.18" ], "id": "GHSA-rgw5-rvv9-x895", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation", "url": "https://github.com/advisories/GHSA-rgw5-rvv9-x895", "version": "1.1.11" }, { "aliases": [ "CVE-2024-4068" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4068", "percentile": 0.73774, "score": 0.01471 }, "fix_state": "fixed", "fixed_in": [ "3.0.3" ], "id": "GHSA-grv7-fg5c-xmjg", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "braces", "severity": "High", "summary": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "version": "2.3.2" }, { "aliases": [ "CVE-2024-4068" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4068", "percentile": 0.73774, "score": 0.01471 }, "fix_state": "fixed", "fixed_in": [ "3.0.3" ], "id": "GHSA-grv7-fg5c-xmjg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "braces", "severity": "High", "summary": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "version": "3.0.2" }, { "aliases": [ "CVE-2026-73088" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73088", "percentile": 0.51498, "score": 0.00658 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-73wf-gq98-2v4g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)", "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g", "version": "1.7.7" }, { "aliases": [ "CVE-2026-73088" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73088", "percentile": 0.51498, "score": 0.00658 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-73wf-gq98-2v4g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)", "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g", "version": "3.2.8" }, { "aliases": [ "CVE-2026-73088" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73088", "percentile": 0.51498, "score": 0.00658 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-73wf-gq98-2v4g", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)", "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g", "version": "4.16.3" }, { "aliases": [ "CVE-2026-73088" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73088", "percentile": 0.51498, "score": 0.00658 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-73wf-gq98-2v4g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)", "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g", "version": "4.21.10" }, { "aliases": [ "CVE-2026-73088" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73088", "percentile": 0.51498, "score": 0.00658 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-73wf-gq98-2v4g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)", "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g", "version": "4.21.5" }, { "aliases": [ "CVE-2026-73089" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73089", "percentile": 0.51386, "score": 0.00655 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-c83g-rgw3-j3cx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM", "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx", "version": "1.7.7" }, { "aliases": [ "CVE-2026-73089" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73089", "percentile": 0.51386, "score": 0.00655 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-c83g-rgw3-j3cx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM", "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx", "version": "3.2.8" }, { "aliases": [ "CVE-2026-73089" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73089", "percentile": 0.51386, "score": 0.00655 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-c83g-rgw3-j3cx", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM", "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx", "version": "4.16.3" }, { "aliases": [ "CVE-2026-73089" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73089", "percentile": 0.51386, "score": 0.00655 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-c83g-rgw3-j3cx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM", "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx", "version": "4.21.10" }, { "aliases": [ "CVE-2026-73089" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73089", "percentile": 0.51386, "score": 0.00655 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-c83g-rgw3-j3cx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM", "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx", "version": "4.21.5" }, { "aliases": [ "CVE-2026-87776" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-87776", "percentile": 0.41235, "score": 0.00477 }, "fix_state": "fixed", "fixed_in": [ "1.8.2" ], "id": "GHSA-vc2v-76pw-4v95", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "compression", "severity": "High", "summary": "compression vulnerable to Denial of Service via memory leak on premature response close", "url": "https://github.com/advisories/GHSA-vc2v-76pw-4v95", "version": "1.7.4" }, { "aliases": [ "CVE-2024-21538" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-21538", "percentile": 0.58749, "score": 0.00868 }, "fix_state": "fixed", "fixed_in": [ "6.0.6" ], "id": "GHSA-3xgq-45jj-v275", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "cross-spawn", "severity": "High", "summary": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "version": "5.1.0" }, { "aliases": [ "CVE-2024-21538" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-21538", "percentile": 0.58749, "score": 0.00868 }, "fix_state": "fixed", "fixed_in": [ "6.0.6" ], "id": "GHSA-3xgq-45jj-v275", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "cross-spawn", "severity": "High", "summary": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "version": "6.0.5" }, { "aliases": [ "CVE-2024-21538" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-21538", "percentile": 0.58749, "score": 0.00868 }, "fix_state": "fixed", "fixed_in": [ "7.0.5" ], "id": "GHSA-3xgq-45jj-v275", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "cross-spawn", "severity": "High", "summary": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "version": "7.0.3" }, { "aliases": [ "CVE-2026-118664" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118664", "percentile": 0.24812, "score": 0.00318 }, "fix_state": "fixed", "fixed_in": [ "0.5.1" ], "id": "GHSA-qr28-fpjm-wq7f", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "decode-uri-component", "severity": "High", "summary": "decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs", "url": "https://github.com/advisories/GHSA-qr28-fpjm-wq7f", "version": "0.2.0" }, { "aliases": [ "CVE-2022-38900" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-38900", "percentile": 0.97809, "score": 0.2361 }, "fix_state": "fixed", "fixed_in": [ "0.2.1" ], "id": "GHSA-w573-4hg7-7wgq", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "decode-uri-component", "severity": "High", "summary": "decode-uri-component vulnerable to Denial of Service (DoS)", "url": "https://github.com/advisories/GHSA-w573-4hg7-7wgq", "version": "0.2.0" }, { "aliases": [ "CVE-2026-34774" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34774", "percentile": 0.39297, "score": 0.00452 }, "fix_state": "fixed", "fixed_in": [ "39.8.1" ], "id": "GHSA-532v-xpq5-8h95", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Use-after-free in offscreen child window paint callback", "url": "https://github.com/advisories/GHSA-532v-xpq5-8h95", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34771" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34771", "percentile": 0.21841, "score": 0.00292 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-8337-3p73-46f4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Use-after-free in WebContents fullscreen, pointer-lock, and keyboard-lock permission callbacks", "url": "https://github.com/advisories/GHSA-8337-3p73-46f4", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70608", "percentile": 0.37305, "score": 0.00431 }, "fix_state": "fixed", "fixed_in": [ "39.8.10" ], "id": "GHSA-9f4c-93c8-jc8g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path", "url": "https://github.com/advisories/GHSA-9f4c-93c8-jc8g", "version": "3.0.13" }, { "aliases": [ "CVE-2026-102676" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102676", "percentile": 0.41342, "score": 0.00479 }, "fix_state": "fixed", "fixed_in": [ "41.10.6" ], "id": "GHSA-9qh4-3jw8-366w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: can enable Node.js integration in Web Workers despite embedder restrictions", "url": "https://github.com/advisories/GHSA-9qh4-3jw8-366w", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34769" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34769", "percentile": 0.22808, "score": 0.003 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-9wfr-w7mm-pc7f", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Renderer command-line switch injection via undocumented commandLineSwitches webPreference", "url": "https://github.com/advisories/GHSA-9wfr-w7mm-pc7f", "version": "3.0.13" }, { "aliases": [ "CVE-2026-102674" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102674", "percentile": 0.14581, "score": 0.00236 }, "fix_state": "fixed", "fixed_in": [ "41.10.6" ], "id": "GHSA-gr2m-v5gq-v685", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Windows opened from a sandboxed top-level document do not inherit its sandbox restrictions", "url": "https://github.com/advisories/GHSA-gr2m-v5gq-v685", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70601" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70601", "percentile": 0.21088, "score": 0.00285 }, "fix_state": "fixed", "fixed_in": [ "39.8.9" ], "id": "GHSA-h7rp-cf8h-j98x", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Context isolation bypass via Function.prototype.bind hijack", "url": "https://github.com/advisories/GHSA-h7rp-cf8h-j98x", "version": "3.0.13" }, { "aliases": [ "CVE-2020-4077" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-4077", "percentile": 0.62956, "score": 0.01003 }, "fix_state": "fixed", "fixed_in": [ "7.2.4" ], "id": "GHSA-h9jc-284h-533g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Context isolation bypass via contextBridge in Electron", "url": "https://github.com/advisories/GHSA-h9jc-284h-533g", "version": "3.0.13" }, { "aliases": [ "CVE-2026-102673" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102673", "percentile": 0.02764, "score": 0.00132 }, "fix_state": "fixed", "fixed_in": [ "41.10.4" ], "id": "GHSA-hq2x-r82h-9wj4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron drops inherited HTML sandbox restrictions for popups opened through OpenURLFromTab", "url": "https://github.com/advisories/GHSA-hq2x-r82h-9wj4", "version": "3.0.13" }, { "aliases": [ "CVE-2026-102675" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102675", "percentile": 0.11743, "score": 0.00214 }, "fix_state": "fixed", "fixed_in": [ "41.10.6" ], "id": "GHSA-j84w-jfhq-vhvj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: File and HTTP protocol handlers allow cross-origin reads without corsEnabled", "url": "https://github.com/advisories/GHSA-j84w-jfhq-vhvj", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34770" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34770", "percentile": 0.16296, "score": 0.00249 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-jjp3-mq3x-295m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Use-after-free in PowerMonitor on Windows and macOS", "url": "https://github.com/advisories/GHSA-jjp3-mq3x-295m", "version": "3.0.13" }, { "aliases": [ "CVE-2026-115570" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-115570", "percentile": 0.31718, "score": 0.00377 }, "fix_state": "fixed", "fixed_in": [ "42.11.16" ], "id": "GHSA-jr5w-w6x2-84p9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Mitigation for compromised eMudhra intermediate certificates", "url": "https://github.com/advisories/GHSA-jr5w-w6x2-84p9", "version": "3.0.13" }, { "aliases": [ "CVE-2020-4076" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-4076", "percentile": 0.30594, "score": 0.00367 }, "fix_state": "fixed", "fixed_in": [ "7.2.4" ], "id": "GHSA-m93v-9qjc-3g79", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Context isolation bypass via leaked cross-context objects in Electron", "url": "https://github.com/advisories/GHSA-m93v-9qjc-3g79", "version": "3.0.13" }, { "aliases": [ "CVE-2023-5217" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-5217", "percentile": 0.98881, "score": 0.49013 }, "fix_state": "fixed", "fixed_in": [ "22.3.25" ], "id": "GHSA-qqvq-6xgj-jw8g", "kev": { "cve": "CVE-2023-5217", "date_added": "2023-10-02" }, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron affected by libvpx's heap buffer overflow in vp8 encoding", "url": "https://github.com/advisories/GHSA-qqvq-6xgj-jw8g", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70604" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70604", "percentile": 0.29178, "score": 0.00354 }, "fix_state": "fixed", "fixed_in": [ "39.8.10" ], "id": "GHSA-v3j7-r9gq-3gjw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "High", "summary": "Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads", "url": "https://github.com/advisories/GHSA-v3j7-r9gq-3gjw", "version": "3.0.13" }, { "aliases": [ "CVE-2026-19693" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-19693", "percentile": 0.39341, "score": 0.00453 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-7pqw-9j4j-h8q3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "extract-zip", "severity": "High", "summary": "extract-zip allows arbitrary file writes through symlink archive entries", "url": "https://github.com/advisories/GHSA-7pqw-9j4j-h8q3", "version": "1.7.0" }, { "aliases": [ "CVE-2026-56876" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-56876", "percentile": 0.44568, "score": 0.00526 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-jmr9-qjv8-65gv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "extract-zip", "severity": "High", "summary": "extract-zip unvalidated symlink path traversal", "url": "https://github.com/advisories/GHSA-jmr9-qjv8-65gv", "version": "1.7.0" }, { "aliases": [ "CVE-2026-32141" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-32141", "percentile": 0.57853, "score": 0.00839 }, "fix_state": "fixed", "fixed_in": [ "3.4.0" ], "id": "GHSA-25h7-pfq9-p65f", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "flatted", "severity": "High", "summary": "flatted vulnerable to unbounded recursion DoS in parse() revive phase", "url": "https://github.com/advisories/GHSA-25h7-pfq9-p65f", "version": "2.0.2" }, { "aliases": [ "CVE-2026-33228" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33228", "percentile": 0.57797, "score": 0.00838 }, "fix_state": "fixed", "fixed_in": [ "3.4.2" ], "id": "GHSA-rf6f-7fwh-wjgh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "flatted", "severity": "High", "summary": "Prototype Pollution via parse() in NodeJS flatted", "url": "https://github.com/advisories/GHSA-rf6f-7fwh-wjgh", "version": "2.0.2" }, { "aliases": [ "CVE-2026-12143" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-12143", "percentile": 0.51965, "score": 0.00669 }, "fix_state": "fixed", "fixed_in": [ "2.5.6" ], "id": "GHSA-hmw2-7cc7-3qxx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "form-data", "severity": "High", "summary": "form-data: CRLF injection in form-data via unescaped multipart field names and filenames", "url": "https://github.com/advisories/GHSA-hmw2-7cc7-3qxx", "version": "2.1.4" }, { "aliases": [ "CVE-2026-12143" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-12143", "percentile": 0.51965, "score": 0.00669 }, "fix_state": "fixed", "fixed_in": [ "2.5.6" ], "id": "GHSA-hmw2-7cc7-3qxx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "form-data", "severity": "High", "summary": "form-data: CRLF injection in form-data via unescaped multipart field names and filenames", "url": "https://github.com/advisories/GHSA-hmw2-7cc7-3qxx", "version": "2.3.3" }, { "aliases": [ "CVE-2023-43646" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-43646", "percentile": 0.72174, "score": 0.01383 }, "fix_state": "fixed", "fixed_in": [ "2.0.1" ], "id": "GHSA-4q6p-r6v2-jvc5", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "get-func-name", "severity": "High", "summary": "Chaijs/get-func-name vulnerable to ReDoS", "url": "https://github.com/advisories/GHSA-4q6p-r6v2-jvc5", "version": "2.0.0" }, { "aliases": [ "CVE-2026-33938" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33938", "percentile": 0.53978, "score": 0.00721 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-3mfm-83xf-c92r", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block", "url": "https://github.com/advisories/GHSA-3mfm-83xf-c92r", "version": "4.7.7" }, { "aliases": [ "CVE-2026-33939" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33939", "percentile": 0.50065, "score": 0.00627 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-9cx6-37pm-9jff", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation", "url": "https://github.com/advisories/GHSA-9cx6-37pm-9jff", "version": "4.7.7" }, { "aliases": [ "CVE-2026-33940" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33940", "percentile": 0.5377, "score": 0.00715 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-xhpv-hc6g-r9c6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial", "url": "https://github.com/advisories/GHSA-xhpv-hc6g-r9c6", "version": "4.7.7" }, { "aliases": [ "CVE-2026-33941" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33941", "percentile": 0.22305, "score": 0.00296 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-xjpj-3mr7-gcpf", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options", "url": "https://github.com/advisories/GHSA-xjpj-3mr7-gcpf", "version": "4.7.7" }, { "aliases": [ "CVE-2022-29167" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-29167", "percentile": 0.65703, "score": 0.01101 }, "fix_state": "fixed", "fixed_in": [ "9.0.1" ], "id": "GHSA-44pw-h2cw-w3vq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "hawk", "severity": "High", "summary": "Uncontrolled Resource Consumption in Hawk", "url": "https://github.com/advisories/GHSA-44pw-h2cw-w3vq", "version": "3.1.3" }, { "aliases": [ "CVE-2020-36604" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-36604", "percentile": 0.69193, "score": 0.01241 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-c429-5p7v-vgjp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "hoek", "severity": "High", "summary": "hoek subject to prototype pollution via the clone function.", "url": "https://github.com/advisories/GHSA-c429-5p7v-vgjp", "version": "2.16.3" }, { "aliases": [ "CVE-2018-3728" ], "ecosystem": "npm", "epss": { "cve": "CVE-2018-3728", "percentile": 0.90936, "score": 0.0419 }, "fix_state": "fixed", "fixed_in": [ "4.2.1" ], "id": "GHSA-jp4x-w63m-7wgm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "hoek", "severity": "High", "summary": "Prototype Pollution in hoek", "url": "https://github.com/advisories/GHSA-jp4x-w63m-7wgm", "version": "2.16.3" }, { "aliases": [ "CVE-2022-25881" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25881", "percentile": 0.75979, "score": 0.01613 }, "fix_state": "fixed", "fixed_in": [ "4.1.1" ], "id": "GHSA-rc47-6667-2j5j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "http-cache-semantics", "severity": "High", "summary": "http-cache-semantics vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-rc47-6667-2j5j", "version": "3.8.1" }, { "aliases": [ "CVE-2021-3820" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-3820", "percentile": 0.68727, "score": 0.01222 }, "fix_state": "fixed", "fixed_in": [ "0.3.7" ], "id": "GHSA-x55w-vjjp-222r", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "i", "severity": "High", "summary": "inflect vulnerable to Inefficient Regular Expression Complexity", "url": "https://github.com/advisories/GHSA-x55w-vjjp-222r", "version": "0.3.6" }, { "aliases": [ "CVE-2021-28092" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-28092", "percentile": 0.81012, "score": 0.02027 }, "fix_state": "fixed", "fixed_in": [ "4.2.2" ], "id": "GHSA-7r28-3m3f-r2pr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "is-svg", "severity": "High", "summary": "Regular Expression Denial of Service (ReDoS)", "url": "https://github.com/advisories/GHSA-7r28-3m3f-r2pr", "version": "2.1.0" }, { "aliases": [ "CVE-2021-29059" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-29059", "percentile": 0.85511, "score": 0.02629 }, "fix_state": "fixed", "fixed_in": [ "4.3.0" ], "id": "GHSA-r8j5-h5cx-65gg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "is-svg", "severity": "High", "summary": "ReDOS in IS-SVG", "url": "https://github.com/advisories/GHSA-r8j5-h5cx-65gg", "version": "2.1.0" }, { "aliases": [ "CVE-2026-84375" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84375", "percentile": 0.45503, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "3.15.2" ], "id": "GHSA-2883-xcg3-v3hh", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources", "url": "https://github.com/advisories/GHSA-2883-xcg3-v3hh", "version": "3.13.1" }, { "aliases": [ "CVE-2026-84375" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84375", "percentile": 0.45503, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "3.15.2" ], "id": "GHSA-2883-xcg3-v3hh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources", "url": "https://github.com/advisories/GHSA-2883-xcg3-v3hh", "version": "3.14.1" }, { "aliases": [ "CVE-2026-84375" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84375", "percentile": 0.45503, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "3.15.2" ], "id": "GHSA-2883-xcg3-v3hh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources", "url": "https://github.com/advisories/GHSA-2883-xcg3-v3hh", "version": "3.6.1" }, { "aliases": [ "CVE-2026-84375" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84375", "percentile": 0.45503, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "3.15.2" ], "id": "GHSA-2883-xcg3-v3hh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources", "url": "https://github.com/advisories/GHSA-2883-xcg3-v3hh", "version": "3.7.0" }, { "aliases": [ "CVE-2026-59869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59869", "percentile": 0.47992, "score": 0.00585 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-52cp-r559-cp3m", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: YAML merge-key chains can force quadratic CPU consumption", "url": "https://github.com/advisories/GHSA-52cp-r559-cp3m", "version": "3.13.1" }, { "aliases": [ "CVE-2026-59869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59869", "percentile": 0.47992, "score": 0.00585 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-52cp-r559-cp3m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: YAML merge-key chains can force quadratic CPU consumption", "url": "https://github.com/advisories/GHSA-52cp-r559-cp3m", "version": "3.14.1" }, { "aliases": [ "CVE-2026-59869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59869", "percentile": 0.47992, "score": 0.00585 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-52cp-r559-cp3m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: YAML merge-key chains can force quadratic CPU consumption", "url": "https://github.com/advisories/GHSA-52cp-r559-cp3m", "version": "3.6.1" }, { "aliases": [ "CVE-2026-59869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59869", "percentile": 0.47992, "score": 0.00585 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-52cp-r559-cp3m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: YAML merge-key chains can force quadratic CPU consumption", "url": "https://github.com/advisories/GHSA-52cp-r559-cp3m", "version": "3.7.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.15.1" ], "id": "GHSA-5p4m-2wfm-xmqj", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) \u2014 CVE-2026-59870 fix not backported", "url": "https://github.com/advisories/GHSA-5p4m-2wfm-xmqj", "version": "3.13.1" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.15.1" ], "id": "GHSA-5p4m-2wfm-xmqj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) \u2014 CVE-2026-59870 fix not backported", "url": "https://github.com/advisories/GHSA-5p4m-2wfm-xmqj", "version": "3.14.1" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.15.1" ], "id": "GHSA-5p4m-2wfm-xmqj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) \u2014 CVE-2026-59870 fix not backported", "url": "https://github.com/advisories/GHSA-5p4m-2wfm-xmqj", "version": "3.6.1" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.15.1" ], "id": "GHSA-5p4m-2wfm-xmqj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) \u2014 CVE-2026-59870 fix not backported", "url": "https://github.com/advisories/GHSA-5p4m-2wfm-xmqj", "version": "3.7.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.13.1" ], "id": "GHSA-8j8c-7jfh-h6hx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "Code Injection in js-yaml", "url": "https://github.com/advisories/GHSA-8j8c-7jfh-h6hx", "version": "3.6.1" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.13.1" ], "id": "GHSA-8j8c-7jfh-h6hx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "Code Injection in js-yaml", "url": "https://github.com/advisories/GHSA-8j8c-7jfh-h6hx", "version": "3.7.0" }, { "aliases": [ "CVE-2022-46175" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-46175", "percentile": 0.95511, "score": 0.09698 }, "fix_state": "fixed", "fixed_in": [ "1.0.2" ], "id": "GHSA-9c47-m6qq-7p4h", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "json5", "severity": "High", "summary": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "version": "0.5.1" }, { "aliases": [ "CVE-2022-46175" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-46175", "percentile": 0.95511, "score": 0.09698 }, "fix_state": "fixed", "fixed_in": [ "2.2.2" ], "id": "GHSA-9c47-m6qq-7p4h", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "json5", "severity": "High", "summary": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "version": "2.2.0" }, { "aliases": [ "CVE-2019-20149" ], "ecosystem": "npm", "epss": { "cve": "CVE-2019-20149", "percentile": 0.83635, "score": 0.02342 }, "fix_state": "fixed", "fixed_in": [ "6.0.3" ], "id": "GHSA-6c8f-qphg-qjgp", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "kind-of", "severity": "High", "summary": "Validation Bypass in kind-of", "url": "https://github.com/advisories/GHSA-6c8f-qphg-qjgp", "version": "6.0.2" }, { "aliases": [ "CVE-2026-48801" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48801", "percentile": 0.3357, "score": 0.00394 }, "fix_state": "fixed", "fixed_in": [ "5.0.1" ], "id": "GHSA-22p9-wv53-3rq4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "linkify-it", "severity": "High", "summary": "LinkifyIt#match scan loop has quadratic algorithmic complexity", "url": "https://github.com/advisories/GHSA-22p9-wv53-3rq4", "version": "2.2.0" }, { "aliases": [ "CVE-2026-59887" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59887", "percentile": 0.40425, "score": 0.00467 }, "fix_state": "fixed", "fixed_in": [ "5.0.2" ], "id": "GHSA-v245-v573-v5vm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "linkify-it", "severity": "High", "summary": "linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text", "url": "https://github.com/advisories/GHSA-v245-v573-v5vm", "version": "2.2.0" }, { "aliases": [ "CVE-2021-23337" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23337", "percentile": 0.97602, "score": 0.21333 }, "fix_state": "fixed", "fixed_in": [ "4.17.21" ], "id": "GHSA-35jh-r3h4-6jhm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "High", "summary": "Command Injection in lodash", "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "version": "2.4.2" }, { "aliases": [ "CVE-2021-23337" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23337", "percentile": 0.97602, "score": 0.21333 }, "fix_state": "fixed", "fixed_in": [ "4.17.21" ], "id": "GHSA-35jh-r3h4-6jhm", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "High", "summary": "Command Injection in lodash", "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "version": "4.17.20" }, { "aliases": [ "CVE-2018-16487" ], "ecosystem": "npm", "epss": { "cve": "CVE-2018-16487", "percentile": 0.74126, "score": 0.01491 }, "fix_state": "fixed", "fixed_in": [ "4.17.11" ], "id": "GHSA-4xc9-xhrj-v574", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "High", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-4xc9-xhrj-v574", "version": "2.4.2" }, { "aliases": [ "CVE-2026-4800" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-4800", "percentile": 0.86507, "score": 0.02808 }, "fix_state": "fixed", "fixed_in": [ "4.18.0" ], "id": "GHSA-r5fr-rjxr-66jc", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "High", "summary": "lodash vulnerable to Code Injection via `_.template` imports key names", "url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc", "version": "4.17.20" }, { "aliases": [ "CVE-2026-4800" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-4800", "percentile": 0.86507, "score": 0.02808 }, "fix_state": "fixed", "fixed_in": [ "4.18.0" ], "id": "GHSA-r5fr-rjxr-66jc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "High", "summary": "lodash vulnerable to Code Injection via `_.template` imports key names", "url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc", "version": "4.17.21" }, { "aliases": [ "CVE-2020-8203" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-8203", "percentile": 0.92501, "score": 0.05213 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-p6mc-m468-83gw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash.pick", "severity": "High", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-p6mc-m468-83gw", "version": "4.4.0" }, { "aliases": [ "CVE-2021-23337" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23337", "percentile": 0.97602, "score": 0.21333 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-35jh-r3h4-6jhm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash.template", "severity": "High", "summary": "Command Injection in lodash", "url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm", "version": "4.5.0" }, { "aliases": [ "CVE-2026-4800" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-4800", "percentile": 0.86507, "score": 0.02808 }, "fix_state": "fixed", "fixed_in": [ "4.18.0" ], "id": "GHSA-r5fr-rjxr-66jc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash.template", "severity": "High", "summary": "lodash vulnerable to Code Injection via `_.template` imports key names", "url": "https://github.com/advisories/GHSA-r5fr-rjxr-66jc", "version": "4.5.0" }, { "aliases": [ "CVE-2026-111759" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111759", "percentile": 0.48249, "score": 0.00591 }, "fix_state": "fixed", "fixed_in": [ "14.3.2" ], "id": "GHSA-r7fv-28h4-cvq7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "High", "summary": "markdown-it: Quadratic complexity in smartquotes with unmatched closing quotes", "url": "https://github.com/advisories/GHSA-r7fv-28h4-cvq7", "version": "8.4.2" }, { "aliases": [ "CVE-2017-16138" ], "ecosystem": "npm", "epss": { "cve": "CVE-2017-16138", "percentile": 0.81871, "score": 0.02119 }, "fix_state": "fixed", "fixed_in": [ "1.4.1" ], "id": "GHSA-wrvr-8mpx-r7pp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "mime", "severity": "High", "summary": "mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input", "url": "https://github.com/advisories/GHSA-wrvr-8mpx-r7pp", "version": "1.2.11" }, { "aliases": [ "CVE-2026-27904" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27904", "percentile": 0.44525, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "3.1.4" ], "id": "GHSA-23c5-xmqv-rm74", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions", "url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "version": "0.3.0" }, { "aliases": [ "CVE-2026-27904" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27904", "percentile": 0.44525, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "3.1.4" ], "id": "GHSA-23c5-xmqv-rm74", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions", "url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "version": "3.0.4" }, { "aliases": [ "CVE-2026-27904" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27904", "percentile": 0.44525, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "3.1.4" ], "id": "GHSA-23c5-xmqv-rm74", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions", "url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "version": "3.1.2" }, { "aliases": [ "CVE-2026-26996" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26996", "percentile": 0.47571, "score": 0.00577 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-3ppc-4f35-3m26", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "version": "0.3.0" }, { "aliases": [ "CVE-2026-26996" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26996", "percentile": 0.47571, "score": 0.00577 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-3ppc-4f35-3m26", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "version": "3.0.4" }, { "aliases": [ "CVE-2026-26996" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26996", "percentile": 0.47571, "score": 0.00577 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-3ppc-4f35-3m26", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "version": "3.1.2" }, { "aliases": [ "CVE-2026-27903" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27903", "percentile": 0.4749, "score": 0.00576 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-7r86-cg39-jmmj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments", "url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "version": "0.3.0" }, { "aliases": [ "CVE-2026-27903" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27903", "percentile": 0.4749, "score": 0.00576 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-7r86-cg39-jmmj", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments", "url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "version": "3.0.4" }, { "aliases": [ "CVE-2026-27903" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27903", "percentile": 0.4749, "score": 0.00576 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-7r86-cg39-jmmj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments", "url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "version": "3.1.2" }, { "aliases": [ "CVE-2022-3517" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-3517", "percentile": 0.83128, "score": 0.02279 }, "fix_state": "fixed", "fixed_in": [ "3.0.5" ], "id": "GHSA-f8q6-p94x-37v3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch ReDoS vulnerability", "url": "https://github.com/advisories/GHSA-f8q6-p94x-37v3", "version": "0.3.0" }, { "aliases": [ "CVE-2022-3517" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-3517", "percentile": 0.83128, "score": 0.02279 }, "fix_state": "fixed", "fixed_in": [ "3.0.5" ], "id": "GHSA-f8q6-p94x-37v3", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch ReDoS vulnerability", "url": "https://github.com/advisories/GHSA-f8q6-p94x-37v3", "version": "3.0.4" }, { "aliases": [ "CVE-2016-10540" ], "ecosystem": "npm", "epss": { "cve": "CVE-2016-10540", "percentile": 0.74318, "score": 0.01503 }, "fix_state": "fixed", "fixed_in": [ "3.0.2" ], "id": "GHSA-hxm2-r34f-qmc5", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "Regular Expression Denial of Service in minimatch", "url": "https://github.com/advisories/GHSA-hxm2-r34f-qmc5", "version": "0.3.0" }, { "aliases": [ "CVE-2022-21803" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-21803", "percentile": 0.78251, "score": 0.0178 }, "fix_state": "fixed", "fixed_in": [ "0.11.4" ], "id": "GHSA-6xwr-q98w-rvg7", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "nconf", "severity": "High", "summary": "Prototype Pollution in nconf", "url": "https://github.com/advisories/GHSA-6xwr-q98w-rvg7", "version": "0.6.9" }, { "aliases": [ "CVE-2022-0235" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-0235", "percentile": 0.76556, "score": 0.01653 }, "fix_state": "fixed", "fixed_in": [ "2.6.7" ], "id": "GHSA-r683-j2x4-v87g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "node-fetch", "severity": "High", "summary": "node-fetch forwards secure headers to untrusted sites", "url": "https://github.com/advisories/GHSA-r683-j2x4-v87g", "version": "2.6.1" }, { "aliases": [ "CVE-2021-3803" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-3803", "percentile": 0.8257, "score": 0.02206 }, "fix_state": "fixed", "fixed_in": [ "2.0.1" ], "id": "GHSA-rp65-9cf3-cjxr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "nth-check", "severity": "High", "summary": "Inefficient Regular Expression Complexity in nth-check", "url": "https://github.com/advisories/GHSA-rp65-9cf3-cjxr", "version": "1.0.2" }, { "aliases": [ "CVE-2026-4867" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-4867", "percentile": 0.43909, "score": 0.00515 }, "fix_state": "fixed", "fixed_in": [ "0.1.13" ], "id": "GHSA-37ch-88jc-xwx2", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters", "url": "https://github.com/advisories/GHSA-37ch-88jc-xwx2", "version": "0.1.7" }, { "aliases": [ "CVE-2024-45296" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-45296", "percentile": 0.60707, "score": 0.00932 }, "fix_state": "fixed", "fixed_in": [ "0.1.10" ], "id": "GHSA-9wv6-86v2-598j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp outputs backtracking regular expressions", "url": "https://github.com/advisories/GHSA-9wv6-86v2-598j", "version": "0.1.7" }, { "aliases": [ "CVE-2024-52798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-52798", "percentile": 0.56158, "score": 0.00787 }, "fix_state": "fixed", "fixed_in": [ "0.1.12" ], "id": "GHSA-rhx6-c78j-4q9w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp contains a ReDoS", "url": "https://github.com/advisories/GHSA-rhx6-c78j-4q9w", "version": "0.1.7" }, { "aliases": [ "CVE-2020-7751" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7751", "percentile": 0.74531, "score": 0.01516 }, "fix_state": "fixed", "fixed_in": [ "1.1.1" ], "id": "GHSA-g6ww-v8xp-vmwg", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "pathval", "severity": "High", "summary": "Prototype pollution in pathval", "url": "https://github.com/advisories/GHSA-g6ww-v8xp-vmwg", "version": "1.1.0" }, { "aliases": [ "CVE-2026-33671" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33671", "percentile": 0.36317, "score": 0.0042 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-c2c7-rcm5-vvqj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "High", "summary": "Picomatch has a ReDoS vulnerability via extglob quantifiers", "url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj", "version": "2.2.2" }, { "aliases": [ "CVE-2026-33671" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33671", "percentile": 0.36317, "score": 0.0042 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-c2c7-rcm5-vvqj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "High", "summary": "Picomatch has a ReDoS vulnerability via extglob quantifiers", "url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj", "version": "2.3.1" }, { "aliases": [ "CVE-2026-45623" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-45623", "percentile": 0.49087, "score": 0.00608 }, "fix_state": "fixed", "fixed_in": [ "8.5.12" ], "id": "GHSA-6g55-p6wh-862q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "High", "summary": "PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments", "url": "https://github.com/advisories/GHSA-6g55-p6wh-862q", "version": "5.2.18" }, { "aliases": [ "CVE-2026-73646" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73646", "percentile": 0.44814, "score": 0.0053 }, "fix_state": "fixed", "fixed_in": [ "8.5.18" ], "id": "GHSA-r28c-9q8g-f849", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "High", "summary": "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure", "url": "https://github.com/advisories/GHSA-r28c-9q8g-f849", "version": "5.2.18" }, { "aliases": [ "CVE-2021-23354" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23354", "percentile": 0.82328, "score": 0.02176 }, "fix_state": "fixed", "fixed_in": [ "0.6.1" ], "id": "GHSA-xfhp-gmh8-r8v2", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "printf", "severity": "High", "summary": "printf vulnerable to Regular Expression Denial of Service (ReDoS)", "url": "https://github.com/advisories/GHSA-xfhp-gmh8-r8v2", "version": "0.5.3" }, { "aliases": [ "CVE-2022-24999" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-24999", "percentile": 0.9686, "score": 0.15695 }, "fix_state": "fixed", "fixed_in": [ "6.4.1" ], "id": "GHSA-hrpp-h998-j3pp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "High", "summary": "qs vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-hrpp-h998-j3pp", "version": "6.4.0" }, { "aliases": [ "CVE-2022-24999" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-24999", "percentile": 0.9686, "score": 0.15695 }, "fix_state": "fixed", "fixed_in": [ "6.5.3" ], "id": "GHSA-hrpp-h998-j3pp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "High", "summary": "qs vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-hrpp-h998-j3pp", "version": "6.5.2" }, { "aliases": [ "CVE-2022-24999" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-24999", "percentile": 0.9686, "score": 0.15695 }, "fix_state": "fixed", "fixed_in": [ "6.7.3" ], "id": "GHSA-hrpp-h998-j3pp", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "High", "summary": "qs vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-hrpp-h998-j3pp", "version": "6.7.0" }, { "aliases": [ "CVE-2024-47068" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-47068", "percentile": 0.54706, "score": 0.00742 }, "fix_state": "fixed", "fixed_in": [ "2.79.2" ], "id": "GHSA-gcx4-mw62-g8wm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "rollup", "severity": "High", "summary": "DOM Clobbering Gadget found in rollup bundled scripts that leads to XSS", "url": "https://github.com/advisories/GHSA-gcx4-mw62-g8wm", "version": "1.32.1" }, { "aliases": [ "CVE-2026-27606" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27606", "percentile": 0.76533, "score": 0.01651 }, "fix_state": "fixed", "fixed_in": [ "2.80.0" ], "id": "GHSA-mw96-cpmx-2vgc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "rollup", "severity": "High", "summary": "Rollup 4 has Arbitrary File Write via Path Traversal", "url": "https://github.com/advisories/GHSA-mw96-cpmx-2vgc", "version": "1.32.1" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "5.7.2" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "2.2.1" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "5.7.2" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "5.3.0" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "5.7.2" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "5.5.1" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "5.7.2" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "5.7.0" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "5.7.2" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "5.7.1" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "6.3.1" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "6.3.0" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "7.5.2" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "7.0.0" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "7.5.2" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "7.5.1" }, { "aliases": [ "CVE-2015-8855" ], "ecosystem": "npm", "epss": { "cve": "CVE-2015-8855", "percentile": 0.94073, "score": 0.06887 }, "fix_state": "fixed", "fixed_in": [ "4.3.2" ], "id": "GHSA-x6fg-f45m-jf5q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "Regular Expression Denial of Service in semver", "url": "https://github.com/advisories/GHSA-x6fg-f45m-jf5q", "version": "2.2.1" }, { "aliases": [ "CVE-2021-23440" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23440", "percentile": 0.82569, "score": 0.02206 }, "fix_state": "fixed", "fixed_in": [ "2.0.1" ], "id": "GHSA-4jqc-8m5r-9rpr", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "set-value", "severity": "High", "summary": "Prototype Pollution in set-value", "url": "https://github.com/advisories/GHSA-4jqc-8m5r-9rpr", "version": "0.4.3" }, { "aliases": [ "CVE-2021-23440" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23440", "percentile": 0.82569, "score": 0.02206 }, "fix_state": "fixed", "fixed_in": [ "2.0.1" ], "id": "GHSA-4jqc-8m5r-9rpr", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "set-value", "severity": "High", "summary": "Prototype Pollution in set-value", "url": "https://github.com/advisories/GHSA-4jqc-8m5r-9rpr", "version": "2.0.0" }, { "aliases": [ "CVE-2026-69185" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69185", "percentile": 0.50184, "score": 0.0063 }, "fix_state": "fixed", "fixed_in": [ "3.3.6" ], "id": "GHSA-2m8v-j782-fhvr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io-parser", "severity": "High", "summary": "Socket.IO: Zero-attachment Memory Exhaustion", "url": "https://github.com/advisories/GHSA-2m8v-j782-fhvr", "version": "3.3.3" }, { "aliases": [ "CVE-2026-69185" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69185", "percentile": 0.50184, "score": 0.0063 }, "fix_state": "fixed", "fixed_in": [ "3.4.5" ], "id": "GHSA-2m8v-j782-fhvr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io-parser", "severity": "High", "summary": "Socket.IO: Zero-attachment Memory Exhaustion", "url": "https://github.com/advisories/GHSA-2m8v-j782-fhvr", "version": "3.4.3" }, { "aliases": [ "CVE-2026-33151" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33151", "percentile": 0.44387, "score": 0.00523 }, "fix_state": "fixed", "fixed_in": [ "3.3.5" ], "id": "GHSA-677m-j7p3-52f9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io-parser", "severity": "High", "summary": "socket.io allows an unbounded number of binary attachments", "url": "https://github.com/advisories/GHSA-677m-j7p3-52f9", "version": "3.3.3" }, { "aliases": [ "CVE-2026-33151" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33151", "percentile": 0.44387, "score": 0.00523 }, "fix_state": "fixed", "fixed_in": [ "3.4.4" ], "id": "GHSA-677m-j7p3-52f9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io-parser", "severity": "High", "summary": "socket.io allows an unbounded number of binary attachments", "url": "https://github.com/advisories/GHSA-677m-j7p3-52f9", "version": "3.4.3" }, { "aliases": [ "CVE-2026-24842" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24842", "percentile": 0.49102, "score": 0.00608 }, "fix_state": "fixed", "fixed_in": [ "7.5.7" ], "id": "GHSA-34x7-hfp2-rc4v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal", "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "version": "2.2.2" }, { "aliases": [ "CVE-2026-24842" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24842", "percentile": 0.49102, "score": 0.00608 }, "fix_state": "fixed", "fixed_in": [ "7.5.7" ], "id": "GHSA-34x7-hfp2-rc4v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal", "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "version": "4.4.19" }, { "aliases": [ "CVE-2026-24842" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24842", "percentile": 0.49102, "score": 0.00608 }, "fix_state": "fixed", "fixed_in": [ "7.5.7" ], "id": "GHSA-34x7-hfp2-rc4v", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal", "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "version": "4.4.8" }, { "aliases": [ "CVE-2021-32804" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-32804", "percentile": 0.96731, "score": 0.15067 }, "fix_state": "fixed", "fixed_in": [ "3.2.2" ], "id": "GHSA-3jfq-g458-7qm9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization", "url": "https://github.com/advisories/GHSA-3jfq-g458-7qm9", "version": "2.2.2" }, { "aliases": [ "CVE-2021-32804" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-32804", "percentile": 0.96731, "score": 0.15067 }, "fix_state": "fixed", "fixed_in": [ "4.4.14" ], "id": "GHSA-3jfq-g458-7qm9", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization", "url": "https://github.com/advisories/GHSA-3jfq-g458-7qm9", "version": "4.4.8" }, { "aliases": [ "CVE-2021-37713" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-37713", "percentile": 0.69892, "score": 0.01273 }, "fix_state": "fixed", "fixed_in": [ "4.4.18" ], "id": "GHSA-5955-9wpr-37jh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization", "url": "https://github.com/advisories/GHSA-5955-9wpr-37jh", "version": "2.2.2" }, { "aliases": [ "CVE-2021-37713" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-37713", "percentile": 0.69892, "score": 0.01273 }, "fix_state": "fixed", "fixed_in": [ "4.4.18" ], "id": "GHSA-5955-9wpr-37jh", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization", "url": "https://github.com/advisories/GHSA-5955-9wpr-37jh", "version": "4.4.8" }, { "aliases": [ "CVE-2026-26960" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26960", "percentile": 0.2599, "score": 0.00328 }, "fix_state": "fixed", "fixed_in": [ "7.5.8" ], "id": "GHSA-83g3-92jg-28cx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction", "url": "https://github.com/advisories/GHSA-83g3-92jg-28cx", "version": "2.2.2" }, { "aliases": [ "CVE-2026-26960" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26960", "percentile": 0.2599, "score": 0.00328 }, "fix_state": "fixed", "fixed_in": [ "7.5.8" ], "id": "GHSA-83g3-92jg-28cx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction", "url": "https://github.com/advisories/GHSA-83g3-92jg-28cx", "version": "4.4.19" }, { "aliases": [ "CVE-2026-26960" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26960", "percentile": 0.2599, "score": 0.00328 }, "fix_state": "fixed", "fixed_in": [ "7.5.8" ], "id": "GHSA-83g3-92jg-28cx", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction", "url": "https://github.com/advisories/GHSA-83g3-92jg-28cx", "version": "4.4.8" }, { "aliases": [ "CVE-2026-23745" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23745", "percentile": 0.31588, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "7.5.3" ], "id": "GHSA-8qq5-rm4j-mr97", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization", "url": "https://github.com/advisories/GHSA-8qq5-rm4j-mr97", "version": "2.2.2" }, { "aliases": [ "CVE-2026-23745" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23745", "percentile": 0.31588, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "7.5.3" ], "id": "GHSA-8qq5-rm4j-mr97", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization", "url": "https://github.com/advisories/GHSA-8qq5-rm4j-mr97", "version": "4.4.19" }, { "aliases": [ "CVE-2026-23745" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23745", "percentile": 0.31588, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "7.5.3" ], "id": "GHSA-8qq5-rm4j-mr97", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization", "url": "https://github.com/advisories/GHSA-8qq5-rm4j-mr97", "version": "4.4.8" }, { "aliases": [ "CVE-2026-59874" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59874", "percentile": 0.37686, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-8x88-c5mf-7j5w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Negative tar entry size causes infinite loop in archive replace", "url": "https://github.com/advisories/GHSA-8x88-c5mf-7j5w", "version": "2.2.2" }, { "aliases": [ "CVE-2026-59874" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59874", "percentile": 0.37686, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-8x88-c5mf-7j5w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Negative tar entry size causes infinite loop in archive replace", "url": "https://github.com/advisories/GHSA-8x88-c5mf-7j5w", "version": "4.4.19" }, { "aliases": [ "CVE-2026-59874" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59874", "percentile": 0.37686, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-8x88-c5mf-7j5w", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Negative tar entry size causes infinite loop in archive replace", "url": "https://github.com/advisories/GHSA-8x88-c5mf-7j5w", "version": "4.4.8" }, { "aliases": [ "CVE-2026-31802" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-31802", "percentile": 0.19054, "score": 0.00269 }, "fix_state": "fixed", "fixed_in": [ "7.5.11" ], "id": "GHSA-9ppj-qmqm-q256", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Symlink Path Traversal via Drive-Relative Linkpath", "url": "https://github.com/advisories/GHSA-9ppj-qmqm-q256", "version": "2.2.2" }, { "aliases": [ "CVE-2026-31802" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-31802", "percentile": 0.19054, "score": 0.00269 }, "fix_state": "fixed", "fixed_in": [ "7.5.11" ], "id": "GHSA-9ppj-qmqm-q256", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Symlink Path Traversal via Drive-Relative Linkpath", "url": "https://github.com/advisories/GHSA-9ppj-qmqm-q256", "version": "4.4.19" }, { "aliases": [ "CVE-2026-31802" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-31802", "percentile": 0.19054, "score": 0.00269 }, "fix_state": "fixed", "fixed_in": [ "7.5.11" ], "id": "GHSA-9ppj-qmqm-q256", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Symlink Path Traversal via Drive-Relative Linkpath", "url": "https://github.com/advisories/GHSA-9ppj-qmqm-q256", "version": "4.4.8" }, { "aliases": [ "CVE-2021-37701" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-37701", "percentile": 0.8847, "score": 0.03286 }, "fix_state": "fixed", "fixed_in": [ "4.4.16" ], "id": "GHSA-9r2w-394v-53qc", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links", "url": "https://github.com/advisories/GHSA-9r2w-394v-53qc", "version": "4.4.8" }, { "aliases": [ "CVE-2026-29786" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-29786", "percentile": 0.40344, "score": 0.00466 }, "fix_state": "fixed", "fixed_in": [ "7.5.10" ], "id": "GHSA-qffp-2rhf-9h96", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "tar has Hardlink Path Traversal via Drive-Relative Linkpath", "url": "https://github.com/advisories/GHSA-qffp-2rhf-9h96", "version": "2.2.2" }, { "aliases": [ "CVE-2026-29786" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-29786", "percentile": 0.40344, "score": 0.00466 }, "fix_state": "fixed", "fixed_in": [ "7.5.10" ], "id": "GHSA-qffp-2rhf-9h96", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "tar has Hardlink Path Traversal via Drive-Relative Linkpath", "url": "https://github.com/advisories/GHSA-qffp-2rhf-9h96", "version": "4.4.19" }, { "aliases": [ "CVE-2026-29786" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-29786", "percentile": 0.40344, "score": 0.00466 }, "fix_state": "fixed", "fixed_in": [ "7.5.10" ], "id": "GHSA-qffp-2rhf-9h96", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "tar has Hardlink Path Traversal via Drive-Relative Linkpath", "url": "https://github.com/advisories/GHSA-qffp-2rhf-9h96", "version": "4.4.8" }, { "aliases": [ "CVE-2021-37712" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-37712", "percentile": 0.79289, "score": 0.01865 }, "fix_state": "fixed", "fixed_in": [ "4.4.18" ], "id": "GHSA-qq89-hq3f-393p", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links", "url": "https://github.com/advisories/GHSA-qq89-hq3f-393p", "version": "4.4.8" }, { "aliases": [ "CVE-2026-73566" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73566", "percentile": 0.44902, "score": 0.00531 }, "fix_state": "fixed", "fixed_in": [ "7.5.21" ], "id": "GHSA-r292-9mhp-454m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection", "url": "https://github.com/advisories/GHSA-r292-9mhp-454m", "version": "2.2.2" }, { "aliases": [ "CVE-2026-73566" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73566", "percentile": 0.44902, "score": 0.00531 }, "fix_state": "fixed", "fixed_in": [ "7.5.21" ], "id": "GHSA-r292-9mhp-454m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection", "url": "https://github.com/advisories/GHSA-r292-9mhp-454m", "version": "4.4.19" }, { "aliases": [ "CVE-2026-73566" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73566", "percentile": 0.44902, "score": 0.00531 }, "fix_state": "fixed", "fixed_in": [ "7.5.21" ], "id": "GHSA-r292-9mhp-454m", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection", "url": "https://github.com/advisories/GHSA-r292-9mhp-454m", "version": "4.4.8" }, { "aliases": [ "CVE-2021-32803" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-32803", "percentile": 0.94661, "score": 0.07795 }, "fix_state": "fixed", "fixed_in": [ "4.4.15" ], "id": "GHSA-r628-mhmh-qjhw", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning", "url": "https://github.com/advisories/GHSA-r628-mhmh-qjhw", "version": "4.4.8" }, { "aliases": [ "CVE-2026-23950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23950", "percentile": 0.18342, "score": 0.00264 }, "fix_state": "fixed", "fixed_in": [ "7.5.4" ], "id": "GHSA-r6q2-hw4h-h46w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS", "url": "https://github.com/advisories/GHSA-r6q2-hw4h-h46w", "version": "2.2.2" }, { "aliases": [ "CVE-2026-23950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23950", "percentile": 0.18342, "score": 0.00264 }, "fix_state": "fixed", "fixed_in": [ "7.5.4" ], "id": "GHSA-r6q2-hw4h-h46w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS", "url": "https://github.com/advisories/GHSA-r6q2-hw4h-h46w", "version": "4.4.19" }, { "aliases": [ "CVE-2026-23950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23950", "percentile": 0.18342, "score": 0.00264 }, "fix_state": "fixed", "fixed_in": [ "7.5.4" ], "id": "GHSA-r6q2-hw4h-h46w", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS", "url": "https://github.com/advisories/GHSA-r6q2-hw4h-h46w", "version": "4.4.8" }, { "aliases": [ "CVE-2022-25858" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25858", "percentile": 0.88347, "score": 0.03253 }, "fix_state": "fixed", "fixed_in": [ "4.8.1" ], "id": "GHSA-4wf5-vphf-c2xc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "terser", "severity": "High", "summary": "Terser insecure use of regular expressions leads to ReDoS", "url": "https://github.com/advisories/GHSA-4wf5-vphf-c2xc", "version": "3.12.0" }, { "aliases": [ "CVE-2026-44705" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-44705", "percentile": 0.37705, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "0.2.6" ], "id": "GHSA-ph9p-34f9-6g65", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "High", "summary": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape", "url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65", "version": "0.0.28" }, { "aliases": [ "CVE-2026-44705" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-44705", "percentile": 0.37705, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "0.2.6" ], "id": "GHSA-ph9p-34f9-6g65", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "High", "summary": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape", "url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65", "version": "0.0.29" }, { "aliases": [ "CVE-2026-44705" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-44705", "percentile": 0.37705, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "0.2.6" ], "id": "GHSA-ph9p-34f9-6g65", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "High", "summary": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape", "url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65", "version": "0.0.33" }, { "aliases": [ "CVE-2026-44705" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-44705", "percentile": 0.37705, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "0.2.6" ], "id": "GHSA-ph9p-34f9-6g65", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "High", "summary": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape", "url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65", "version": "0.1.0" }, { "aliases": [ "CVE-2021-33623" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-33623", "percentile": 0.87061, "score": 0.02925 }, "fix_state": "fixed", "fixed_in": [ "3.0.1" ], "id": "GHSA-7p7h-4mm5-852v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "trim-newlines", "severity": "High", "summary": "Uncontrolled Resource Consumption in trim-newlines", "url": "https://github.com/advisories/GHSA-7p7h-4mm5-852v", "version": "1.0.0" }, { "aliases": [ "CVE-2015-8858" ], "ecosystem": "npm", "epss": { "cve": "CVE-2015-8858", "percentile": 0.83762, "score": 0.02358 }, "fix_state": "fixed", "fixed_in": [ "2.6.0" ], "id": "GHSA-c9f4-xj24-8jqx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "uglify-js", "severity": "High", "summary": "Regular Expression Denial of Service in uglify-js", "url": "https://github.com/advisories/GHSA-c9f4-xj24-8jqx", "version": "2.2.5" }, { "aliases": [ "CVE-2026-27601" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27601", "percentile": 0.64629, "score": 0.01063 }, "fix_state": "fixed", "fixed_in": [ "1.13.8" ], "id": "GHSA-qpx9-hpmf-5gmw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "underscore", "severity": "High", "summary": "Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack", "url": "https://github.com/advisories/GHSA-qpx9-hpmf-5gmw", "version": "1.13.6" }, { "aliases": [ "CVE-2024-37890" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-37890", "percentile": 0.71668, "score": 0.01357 }, "fix_state": "fixed", "fixed_in": [ "7.5.10" ], "id": "GHSA-3h5v-q93c-6h6q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ws", "severity": "High", "summary": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "version": "7.4.6" }, { "aliases": [ "CVE-2026-48779" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48779", "percentile": 0.72944, "score": 0.01426 }, "fix_state": "fixed", "fixed_in": [ "7.5.11" ], "id": "GHSA-96hv-2xvq-fx4p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ws", "severity": "High", "summary": "ws: Memory exhaustion DoS from tiny fragments and data chunks", "url": "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "version": "7.4.6" }, { "aliases": [ "CVE-2026-83608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83608", "percentile": 0.49305, "score": 0.00612 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-27p8-2357-5qqv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: DocType `name` Injection Bypasses requireWellFormed", "url": "https://github.com/advisories/GHSA-27p8-2357-5qqv", "version": "0.1.27" }, { "aliases": [ "CVE-2026-41673" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41673", "percentile": 0.50817, "score": 0.00643 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-2v35-w6hq-6mfw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Uncontrolled recursion in XML serialization leads to DoS", "url": "https://github.com/advisories/GHSA-2v35-w6hq-6mfw", "version": "0.1.27" }, { "aliases": [ "CVE-2026-83605" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83605", "percentile": 0.49306, "score": 0.00612 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-4w3w-2rp5-g8jm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Attribute name injection via setAttribute() bypasses requireWellFormed", "url": "https://github.com/advisories/GHSA-4w3w-2rp5-g8jm", "version": "0.1.27" }, { "aliases": [ "CVE-2026-83613" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83613", "percentile": 0.48893, "score": 0.00604 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-8344-3jmq-59r6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Quadratic-time attribute deduplication", "url": "https://github.com/advisories/GHSA-8344-3jmq-59r6", "version": "0.1.27" }, { "aliases": [ "CVE-2026-83615" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83615", "percentile": 0.48211, "score": 0.0059 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-965w-775f-mr7g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Quadratic-memory consumption", "url": "https://github.com/advisories/GHSA-965w-775f-mr7g", "version": "0.1.27" }, { "aliases": [ "CVE-2026-83616" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83616", "percentile": 0.49305, "score": 0.00612 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-c7q8-3ch8-vqpv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Processing Instruction Target Injection Bypasses requireWellFormed", "url": "https://github.com/advisories/GHSA-c7q8-3ch8-vqpv", "version": "0.1.27" }, { "aliases": [ "CVE-2026-41674" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41674", "percentile": 0.46962, "score": 0.00565 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-f6ww-3ggp-fr8h", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom has XML injection through unvalidated DocumentType serialization", "url": "https://github.com/advisories/GHSA-f6ww-3ggp-fr8h", "version": "0.1.27" }, { "aliases": [ "CVE-2026-41672" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41672", "percentile": 0.39648, "score": 0.00457 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-j759-j44w-7fr8", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom has XML node injection through unvalidated comment serialization", "url": "https://github.com/advisories/GHSA-j759-j44w-7fr8", "version": "0.1.27" }, { "aliases": [ "CVE-2026-83607" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83607", "percentile": 0.49305, "score": 0.00612 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-w2rr-34g9-rvrj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: Element name injection via createElement() bypasses requireWellFormed", "url": "https://github.com/advisories/GHSA-w2rr-34g9-rvrj", "version": "0.1.27" }, { "aliases": [ "CVE-2026-34601" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34601", "percentile": 0.42156, "score": 0.0049 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-wh4c-j3r5-mjhp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion", "url": "https://github.com/advisories/GHSA-wh4c-j3r5-mjhp", "version": "0.1.27" }, { "aliases": [ "CVE-2026-41675" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41675", "percentile": 0.40699, "score": 0.0047 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-x6wf-f3px-wcqx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "High", "summary": "xmldom has XML node injection through unvalidated processing instruction serialization", "url": "https://github.com/advisories/GHSA-x6wf-f3px-wcqx", "version": "0.1.27" }, { "aliases": [ "CVE-2020-7774" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7774", "percentile": 0.99365, "score": 0.69589 }, "fix_state": "fixed", "fixed_in": [ "4.0.1" ], "id": "GHSA-c4w7-xm78-47vh", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "y18n", "severity": "High", "summary": "Prototype Pollution in y18n", "url": "https://github.com/advisories/GHSA-c4w7-xm78-47vh", "version": "4.0.0" }, { "aliases": [ "CVE-2025-27789" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-27789", "percentile": 0.46829, "score": 0.00563 }, "fix_state": "fixed", "fixed_in": [ "7.26.10" ], "id": "GHSA-968p-4wvh-cqc8", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "@babel/helpers", "severity": "Medium", "summary": "Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups", "url": "https://github.com/advisories/GHSA-968p-4wvh-cqc8", "version": "7.12.17" }, { "aliases": [ "CVE-2025-27789" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-27789", "percentile": 0.46829, "score": 0.00563 }, "fix_state": "fixed", "fixed_in": [ "7.26.10" ], "id": "GHSA-968p-4wvh-cqc8", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "@babel/runtime", "severity": "Medium", "summary": "Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups", "url": "https://github.com/advisories/GHSA-968p-4wvh-cqc8", "version": "7.12.18" }, { "aliases": [ "CVE-2025-69873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-69873", "percentile": 0.45842, "score": 0.00547 }, "fix_state": "fixed", "fixed_in": [ "6.14.0" ], "id": "GHSA-2g4f-4pwh-qvx6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ajv", "severity": "Medium", "summary": "ajv has ReDoS when using `$data` option", "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6", "version": "4.11.8" }, { "aliases": [ "CVE-2025-69873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-69873", "percentile": 0.45842, "score": 0.00547 }, "fix_state": "fixed", "fixed_in": [ "6.14.0" ], "id": "GHSA-2g4f-4pwh-qvx6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ajv", "severity": "Medium", "summary": "ajv has ReDoS when using `$data` option", "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6", "version": "6.12.6" }, { "aliases": [ "CVE-2025-69873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-69873", "percentile": 0.45842, "score": 0.00547 }, "fix_state": "fixed", "fixed_in": [ "6.14.0" ], "id": "GHSA-2g4f-4pwh-qvx6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ajv", "severity": "Medium", "summary": "ajv has ReDoS when using `$data` option", "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6", "version": "6.6.2" }, { "aliases": [ "CVE-2020-15366" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-15366", "percentile": 0.83406, "score": 0.02313 }, "fix_state": "fixed", "fixed_in": [ "6.12.3" ], "id": "GHSA-v88g-cgmw-v5xw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ajv", "severity": "Medium", "summary": "Prototype Pollution in Ajv", "url": "https://github.com/advisories/GHSA-v88g-cgmw-v5xw", "version": "4.11.8" }, { "aliases": [ "CVE-2020-15366" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-15366", "percentile": 0.83406, "score": 0.02313 }, "fix_state": "fixed", "fixed_in": [ "6.12.3" ], "id": "GHSA-v88g-cgmw-v5xw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "ajv", "severity": "Medium", "summary": "Prototype Pollution in Ajv", "url": "https://github.com/advisories/GHSA-v88g-cgmw-v5xw", "version": "6.6.2" }, { "aliases": [ "CVE-2020-8244" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-8244", "percentile": 0.81679, "score": 0.02097 }, "fix_state": "fixed", "fixed_in": [ "1.2.3" ], "id": "GHSA-pp7h-53gx-mx7r", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "bl", "severity": "Medium", "summary": "Remote Memory Exposure in bl", "url": "https://github.com/advisories/GHSA-pp7h-53gx-mx7r", "version": "0.9.5" }, { "aliases": [ "CVE-2026-33750" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33750", "percentile": 0.38904, "score": 0.00447 }, "fix_state": "fixed", "fixed_in": [ "1.1.13" ], "id": "GHSA-f886-m6hf-6m8v", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Medium", "summary": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion", "url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v", "version": "1.1.11" }, { "aliases": [ "CVE-2026-102277" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102277", "percentile": 0.37116, "score": 0.00428 }, "fix_state": "fixed", "fixed_in": [ "1.1.21" ], "id": "GHSA-q2hr-2g5m-vwhr", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Medium", "summary": "brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service", "url": "https://github.com/advisories/GHSA-q2hr-2g5m-vwhr", "version": "1.1.11" }, { "aliases": [ "CVE-2021-23364" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23364", "percentile": 0.83913, "score": 0.02383 }, "fix_state": "fixed", "fixed_in": [ "4.16.5" ], "id": "GHSA-w8qv-6jwh-64r5", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "Medium", "summary": "Regular Expression Denial of Service in browserslist", "url": "https://github.com/advisories/GHSA-w8qv-6jwh-64r5", "version": "4.16.3" }, { "aliases": [ "CVE-2021-29060" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-29060", "percentile": 0.87887, "score": 0.03134 }, "fix_state": "fixed", "fixed_in": [ "1.5.5" ], "id": "GHSA-257v-vj4p-3w2h", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "color-string", "severity": "Medium", "summary": "Regular Expression Denial of Service (ReDOS)", "url": "https://github.com/advisories/GHSA-257v-vj4p-3w2h", "version": "0.3.0" }, { "aliases": [ "CVE-2026-45822" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-45822", "percentile": 0.43261, "score": 0.00507 }, "fix_state": "fixed", "fixed_in": [ "0.5.0" ], "id": "GHSA-vcc3-ghjq-m6fr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "decode-uri-component", "severity": "Medium", "summary": "decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input", "url": "https://github.com/advisories/GHSA-vcc3-ghjq-m6fr", "version": "0.2.0" }, { "aliases": [ "CVE-2026-113796" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-113796", "percentile": 0.1239, "score": 0.00219 }, "fix_state": "fixed", "fixed_in": [ "42.11.3" ], "id": "GHSA-2p8c-gr87-2676", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: SameSite cookie restrictions are not applied to windows opened from links", "url": "https://github.com/advisories/GHSA-2p8c-gr87-2676", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34776" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34776", "percentile": 0.12956, "score": 0.00223 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-3c8v-cfp5-9885", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Out-of-bounds read in second-instance IPC on macOS and Linux", "url": "https://github.com/advisories/GHSA-3c8v-cfp5-9885", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70609" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70609", "percentile": 0.44978, "score": 0.00532 }, "fix_state": "fixed", "fixed_in": [ "39.8.7" ], "id": "GHSA-4f78-qhmw-8j8m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter", "url": "https://github.com/advisories/GHSA-4f78-qhmw-8j8m", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34767" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34767", "percentile": 0.1195, "score": 0.00215 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-4p4r-m79c-wq3v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: HTTP Response Header Injection in custom protocol handlers and webRequest", "url": "https://github.com/advisories/GHSA-4p4r-m79c-wq3v", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70603" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70603", "percentile": 0.02783, "score": 0.00132 }, "fix_state": "fixed", "fixed_in": [ "39.8.6" ], "id": "GHSA-5c9j-mhmv-5xgx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: shell.openPath path validation bypass via embedded null byte", "url": "https://github.com/advisories/GHSA-5c9j-mhmv-5xgx", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34779" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34779", "percentile": 0.05571, "score": 0.00164 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-5rqw-r77c-jp79", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: AppleScript injection in app.moveToApplicationsFolder on macOS", "url": "https://github.com/advisories/GHSA-5rqw-r77c-jp79", "version": "3.0.13" }, { "aliases": [ "CVE-2024-46993" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-46993", "percentile": 0.0475, "score": 0.00156 }, "fix_state": "fixed", "fixed_in": [ "28.3.2" ], "id": "GHSA-6r2x-8pq8-9489", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron vulnerable to Heap Buffer Overflow in NativeImage", "url": "https://github.com/advisories/GHSA-6r2x-8pq8-9489", "version": "3.0.13" }, { "aliases": [ "CVE-2022-29257" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-29257", "percentile": 0.60199, "score": 0.00916 }, "fix_state": "fixed", "fixed_in": [ "15.5.0" ], "id": "GHSA-77xc-hjv8-ww97", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "AutoUpdater module fails to validate certain nested components of the bundle", "url": "https://github.com/advisories/GHSA-77xc-hjv8-ww97", "version": "3.0.13" }, { "aliases": [ "CVE-2023-44402" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-44402", "percentile": 0.10829, "score": 0.00207 }, "fix_state": "fixed", "fixed_in": [ "22.3.24" ], "id": "GHSA-7m48-wc93-9g85", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "ASAR Integrity bypass via filetype confusion in electron", "url": "https://github.com/advisories/GHSA-7m48-wc93-9g85", "version": "3.0.13" }, { "aliases": [ "CVE-2023-39956" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-39956", "percentile": 0.42217, "score": 0.00491 }, "fix_state": "fixed", "fixed_in": [ "22.3.19" ], "id": "GHSA-7x97-j373-85x5", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron vulnerable to out-of-package code execution when launched with arbitrary cwd", "url": "https://github.com/advisories/GHSA-7x97-j373-85x5", "version": "3.0.13" }, { "aliases": [ "CVE-2026-114121" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114121", "percentile": 0.12409, "score": 0.00219 }, "fix_state": "fixed", "fixed_in": [ "42.11.3" ], "id": "GHSA-997q-gvvc-jwmx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: openExternal permission requests can be attributed to the wrong origin", "url": "https://github.com/advisories/GHSA-997q-gvvc-jwmx", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70599" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70599", "percentile": 0.09067, "score": 0.00193 }, "fix_state": "fixed", "fixed_in": [ "39.8.7" ], "id": "GHSA-9pf5-hg6p-4pwp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Permission Check Handler Receives Main Frame Origin Instead of Requesting Iframe Origin", "url": "https://github.com/advisories/GHSA-9pf5-hg6p-4pwp", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34772" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34772", "percentile": 0.11522, "score": 0.00212 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-9w97-2464-8783", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Use-after-free in download save dialog callback", "url": "https://github.com/advisories/GHSA-9w97-2464-8783", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70611" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70611", "percentile": 0.08241, "score": 0.00186 }, "fix_state": "fixed", "fixed_in": [ "39.8.9" ], "id": "GHSA-f2r8-jv7c-xqmp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: DevTools embedder handler executes arbitrary files via shell open", "url": "https://github.com/advisories/GHSA-f2r8-jv7c-xqmp", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34765" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34765", "percentile": 0.22693, "score": 0.003 }, "fix_state": "fixed", "fixed_in": [ "39.8.5" ], "id": "GHSA-f3pv-wv63-48x8", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Named window.open targets not scoped to the opener's browsing context", "url": "https://github.com/advisories/GHSA-f3pv-wv63-48x8", "version": "3.0.13" }, { "aliases": [ "CVE-2020-4075" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-4075", "percentile": 0.67575, "score": 0.01175 }, "fix_state": "fixed", "fixed_in": [ "7.2.4" ], "id": "GHSA-f9mq-jph6-9mhm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Arbitrary file read via window-open IPC in Electron", "url": "https://github.com/advisories/GHSA-f9mq-jph6-9mhm", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70610" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70610", "percentile": 0.46852, "score": 0.00564 }, "fix_state": "fixed", "fixed_in": [ "39.8.9" ], "id": "GHSA-ff2p-hmqr-hxm4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: contextBridge object copy honors prototype setters", "url": "https://github.com/advisories/GHSA-ff2p-hmqr-hxm4", "version": "3.0.13" }, { "aliases": [ "CVE-2026-113800" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-113800", "percentile": 0.15316, "score": 0.00241 }, "fix_state": "fixed", "fixed_in": [ "42.11.3" ], "id": "GHSA-fw47-9c62-h3vw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: HID and USB permission checks can be attributed to the wrong origin", "url": "https://github.com/advisories/GHSA-fw47-9c62-h3vw", "version": "3.0.13" }, { "aliases": [ "CVE-2020-26272" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-26272", "percentile": 0.77806, "score": 0.01746 }, "fix_state": "fixed", "fixed_in": [ "9.4.0" ], "id": "GHSA-hvf8-h2qh-37m9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "IPC messages delivered to the wrong frame in Electron", "url": "https://github.com/advisories/GHSA-hvf8-h2qh-37m9", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70597" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70597", "percentile": 0.00991, "score": 0.00104 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-jm7p-cc5g-qwxx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Parent process code-sign check is spoofable", "url": "https://github.com/advisories/GHSA-jm7p-cc5g-qwxx", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70602" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70602", "percentile": 0.17346, "score": 0.00256 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-m55f-7gqj-fr98", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Extension tab APIs operate across session boundaries", "url": "https://github.com/advisories/GHSA-m55f-7gqj-fr98", "version": "3.0.13" }, { "aliases": [ "CVE-2021-39184" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-39184", "percentile": 0.64285, "score": 0.0105 }, "fix_state": "fixed", "fixed_in": [ "11.5.0" ], "id": "GHSA-mpjm-v997-c4h4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API", "url": "https://github.com/advisories/GHSA-mpjm-v997-c4h4", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34773" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34773", "percentile": 0.15677, "score": 0.00244 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-mwmh-mq4g-g6gr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows", "url": "https://github.com/advisories/GHSA-mwmh-mq4g-g6gr", "version": "3.0.13" }, { "aliases": [ "CVE-2022-36077" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-36077", "percentile": 0.497, "score": 0.0062 }, "fix_state": "fixed", "fixed_in": [ "18.3.7" ], "id": "GHSA-p2jh-44qj-pf2v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Exfiltration of hashed SMB credentials on Windows via file:// redirect", "url": "https://github.com/advisories/GHSA-p2jh-44qj-pf2v", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70612" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70612", "percentile": 0.37176, "score": 0.00429 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-p2rr-rvmm-c5fp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Sandboxed iframes can launch external protocol handlers", "url": "https://github.com/advisories/GHSA-p2rr-rvmm-c5fp", "version": "3.0.13" }, { "aliases": [ "CVE-2023-29198" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-29198", "percentile": 0.48208, "score": 0.0059 }, "fix_state": "fixed", "fixed_in": [ "22.3.6" ], "id": "GHSA-p7v2-p9m8-qqg7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron context isolation bypass via nested unserializable return value", "url": "https://github.com/advisories/GHSA-p7v2-p9m8-qqg7", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34777" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34777", "percentile": 0.02096, "score": 0.00124 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-r5p7-gp4j-qhrx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Incorrect origin passed to permission request handler for iframe requests", "url": "https://github.com/advisories/GHSA-r5p7-gp4j-qhrx", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70605" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70605", "percentile": 0.24434, "score": 0.00315 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-v64r-4m7r-3mvq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: HTTP redirect followed into local file loader", "url": "https://github.com/advisories/GHSA-v64r-4m7r-3mvq", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70607" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70607", "percentile": 0.46503, "score": 0.00558 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-v93f-fgjr-hjrj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: window.open features string controls some window options considered privileged", "url": "https://github.com/advisories/GHSA-v93f-fgjr-hjrj", "version": "3.0.13" }, { "aliases": [ "CVE-2025-55305" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-55305", "percentile": 0.20098, "score": 0.00276 }, "fix_state": "fixed", "fixed_in": [ "35.7.5" ], "id": "GHSA-vmqv-hx8q-j7mg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron has ASAR Integrity Bypass via resource modification", "url": "https://github.com/advisories/GHSA-vmqv-hx8q-j7mg", "version": "3.0.13" }, { "aliases": [ "CVE-2026-102672" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102672", "percentile": 0.00516, "score": 0.00093 }, "fix_state": "fixed", "fixed_in": [ "39.8.10" ], "id": "GHSA-vv43-5jgx-7qv8", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Local race condition in Squirrel.Mac update installation on macOS", "url": "https://github.com/advisories/GHSA-vv43-5jgx-7qv8", "version": "3.0.13" }, { "aliases": [ "CVE-2026-113798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-113798", "percentile": 0.15614, "score": 0.00244 }, "fix_state": "fixed", "fixed_in": [ "42.11.9" ], "id": "GHSA-x562-297c-g43g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Pointer lock permission requests can be attributed to the wrong frame", "url": "https://github.com/advisories/GHSA-x562-297c-g43g", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34778" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34778", "percentile": 0.02517, "score": 0.00129 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-xj5x-m3f3-5x3h", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: Service worker can spoof executeJavaScript IPC replies", "url": "https://github.com/advisories/GHSA-xj5x-m3f3-5x3h", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34775" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34775", "percentile": 0.22032, "score": 0.00294 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-xwr5-m59h-vwqr", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Medium", "summary": "Electron: nodeIntegrationInWorker not correctly scoped in shared renderer processes", "url": "https://github.com/advisories/GHSA-xwr5-m59h-vwqr", "version": "3.0.13" }, { "aliases": [ "CVE-2024-29041" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-29041", "percentile": 0.56127, "score": 0.00786 }, "fix_state": "fixed", "fixed_in": [ "4.19.2" ], "id": "GHSA-rv95-896h-c2vc", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "express", "severity": "Medium", "summary": "Express.js Open Redirect in malformed URLs", "url": "https://github.com/advisories/GHSA-rv95-896h-c2vc", "version": "4.17.0" }, { "aliases": [ "CVE-2024-29041" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-29041", "percentile": 0.56127, "score": 0.00786 }, "fix_state": "fixed", "fixed_in": [ "4.19.2" ], "id": "GHSA-rv95-896h-c2vc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "express", "severity": "Medium", "summary": "Express.js Open Redirect in malformed URLs", "url": "https://github.com/advisories/GHSA-rv95-896h-c2vc", "version": "4.18.2" }, { "aliases": [ "CVE-2024-28849" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-28849", "percentile": 0.64154, "score": 0.01044 }, "fix_state": "fixed", "fixed_in": [ "1.15.6" ], "id": "GHSA-cxjh-pqwp-8mfp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "Medium", "summary": "follow-redirects' Proxy-Authorization header kept across hosts", "url": "https://github.com/advisories/GHSA-cxjh-pqwp-8mfp", "version": "1.15.2" }, { "aliases": [ "CVE-2023-26159" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-26159", "percentile": 0.56508, "score": 0.00797 }, "fix_state": "fixed", "fixed_in": [ "1.15.4" ], "id": "GHSA-jchw-25xp-jwwc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "Medium", "summary": "Follow Redirects improperly handles URLs in the url.parse() function", "url": "https://github.com/advisories/GHSA-jchw-25xp-jwwc", "version": "1.15.2" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "1.16.0" ], "id": "GHSA-r4q5-vmmm-2653", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "Medium", "summary": "follow-redirects leaks Custom Authentication Headers to Cross-Domain Redirect Targets", "url": "https://github.com/advisories/GHSA-r4q5-vmmm-2653", "version": "1.15.2" }, { "aliases": [ "CVE-2022-33987" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-33987", "percentile": 0.84147, "score": 0.02416 }, "fix_state": "fixed", "fixed_in": [ "11.8.5" ], "id": "GHSA-pfrx-2q88-qq97", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "got", "severity": "Medium", "summary": "Got allows a redirect to a UNIX socket", "url": "https://github.com/advisories/GHSA-pfrx-2q88-qq97", "version": "6.7.1" }, { "aliases": [ "CVE-2022-33987" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-33987", "percentile": 0.84147, "score": 0.02416 }, "fix_state": "fixed", "fixed_in": [ "11.8.5" ], "id": "GHSA-pfrx-2q88-qq97", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "got", "severity": "Medium", "summary": "Got allows a redirect to a UNIX socket", "url": "https://github.com/advisories/GHSA-pfrx-2q88-qq97", "version": "8.3.2" }, { "aliases": [ "CVE-2026-33916" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33916", "percentile": 0.20535, "score": 0.0028 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-2qvq-rjwj-gvw9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Medium", "summary": "Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection", "url": "https://github.com/advisories/GHSA-2qvq-rjwj-gvw9", "version": "4.7.7" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-7rx3-28cr-v5wh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Medium", "summary": "Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry", "url": "https://github.com/advisories/GHSA-7rx3-28cr-v5wh", "version": "4.7.7" }, { "aliases": [ "CVE-2026-106444" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106444", "percentile": 0.21629, "score": 0.0029 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-xw65-4hp5-5hc7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Medium", "summary": "Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates", "url": "https://github.com/advisories/GHSA-xw65-4hp5-5hc7", "version": "4.7.7" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "10.4.1" ], "id": "GHSA-7wwv-vh3v-89cq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "highlight.js", "severity": "Medium", "summary": "ReDOS vulnerabities: multiple grammars", "url": "https://github.com/advisories/GHSA-7wwv-vh3v-89cq", "version": "9.18.5" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.13.0" ], "id": "GHSA-2pr6-76vf-7546", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "Denial of Service in js-yaml", "url": "https://github.com/advisories/GHSA-2pr6-76vf-7546", "version": "3.6.1" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.13.0" ], "id": "GHSA-2pr6-76vf-7546", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "Denial of Service in js-yaml", "url": "https://github.com/advisories/GHSA-2pr6-76vf-7546", "version": "3.7.0" }, { "aliases": [ "CVE-2026-53550" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53550", "percentile": 0.35866, "score": 0.00415 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-h67p-54hq-rp68", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases", "url": "https://github.com/advisories/GHSA-h67p-54hq-rp68", "version": "3.13.1" }, { "aliases": [ "CVE-2026-53550" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53550", "percentile": 0.35866, "score": 0.00415 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-h67p-54hq-rp68", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases", "url": "https://github.com/advisories/GHSA-h67p-54hq-rp68", "version": "3.14.1" }, { "aliases": [ "CVE-2026-53550" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53550", "percentile": 0.35866, "score": 0.00415 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-h67p-54hq-rp68", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases", "url": "https://github.com/advisories/GHSA-h67p-54hq-rp68", "version": "3.6.1" }, { "aliases": [ "CVE-2026-53550" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53550", "percentile": 0.35866, "score": 0.00415 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-h67p-54hq-rp68", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases", "url": "https://github.com/advisories/GHSA-h67p-54hq-rp68", "version": "3.7.0" }, { "aliases": [ "CVE-2025-64718" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-64718", "percentile": 0.36631, "score": 0.00423 }, "fix_state": "fixed", "fixed_in": [ "3.14.2" ], "id": "GHSA-mh29-5h37-fv8m", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "js-yaml has prototype pollution in merge (<<)", "url": "https://github.com/advisories/GHSA-mh29-5h37-fv8m", "version": "3.13.1" }, { "aliases": [ "CVE-2025-64718" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-64718", "percentile": 0.36631, "score": 0.00423 }, "fix_state": "fixed", "fixed_in": [ "3.14.2" ], "id": "GHSA-mh29-5h37-fv8m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "js-yaml has prototype pollution in merge (<<)", "url": "https://github.com/advisories/GHSA-mh29-5h37-fv8m", "version": "3.14.1" }, { "aliases": [ "CVE-2025-64718" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-64718", "percentile": 0.36631, "score": 0.00423 }, "fix_state": "fixed", "fixed_in": [ "3.14.2" ], "id": "GHSA-mh29-5h37-fv8m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "js-yaml has prototype pollution in merge (<<)", "url": "https://github.com/advisories/GHSA-mh29-5h37-fv8m", "version": "3.6.1" }, { "aliases": [ "CVE-2025-64718" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-64718", "percentile": 0.36631, "score": 0.00423 }, "fix_state": "fixed", "fixed_in": [ "3.14.2" ], "id": "GHSA-mh29-5h37-fv8m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "js-yaml has prototype pollution in merge (<<)", "url": "https://github.com/advisories/GHSA-mh29-5h37-fv8m", "version": "3.7.0" }, { "aliases": [ "CVE-2020-28500" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-28500", "percentile": 0.94394, "score": 0.07336 }, "fix_state": "fixed", "fixed_in": [ "4.17.21" ], "id": "GHSA-29mw-wpgm-hmr9", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Medium", "summary": "Regular Expression Denial of Service (ReDoS) in lodash", "url": "https://github.com/advisories/GHSA-29mw-wpgm-hmr9", "version": "4.17.20" }, { "aliases": [ "CVE-2026-2950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-2950", "percentile": 0.2717, "score": 0.00337 }, "fix_state": "fixed", "fixed_in": [ "4.18.0" ], "id": "GHSA-f23m-r3pf-42rh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Medium", "summary": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`", "url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh", "version": "2.4.2" }, { "aliases": [ "CVE-2026-2950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-2950", "percentile": 0.2717, "score": 0.00337 }, "fix_state": "fixed", "fixed_in": [ "4.18.0" ], "id": "GHSA-f23m-r3pf-42rh", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Medium", "summary": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`", "url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh", "version": "4.17.20" }, { "aliases": [ "CVE-2026-2950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-2950", "percentile": 0.2717, "score": 0.00337 }, "fix_state": "fixed", "fixed_in": [ "4.18.0" ], "id": "GHSA-f23m-r3pf-42rh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Medium", "summary": "lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`", "url": "https://github.com/advisories/GHSA-f23m-r3pf-42rh", "version": "4.17.21" }, { "aliases": [ "CVE-2018-3721" ], "ecosystem": "npm", "epss": { "cve": "CVE-2018-3721", "percentile": 0.83673, "score": 0.02347 }, "fix_state": "fixed", "fixed_in": [ "4.17.5" ], "id": "GHSA-fvqr-27wr-82fm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Medium", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-fvqr-27wr-82fm", "version": "2.4.2" }, { "aliases": [ "CVE-2025-13465" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-13465", "percentile": 0.78784, "score": 0.01823 }, "fix_state": "fixed", "fixed_in": [ "4.17.23" ], "id": "GHSA-xxjr-mmjv-4gpg", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Medium", "summary": "Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions", "url": "https://github.com/advisories/GHSA-xxjr-mmjv-4gpg", "version": "4.17.20" }, { "aliases": [ "CVE-2025-13465" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-13465", "percentile": 0.78784, "score": 0.01823 }, "fix_state": "fixed", "fixed_in": [ "4.17.23" ], "id": "GHSA-xxjr-mmjv-4gpg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "lodash", "severity": "Medium", "summary": "Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions", "url": "https://github.com/advisories/GHSA-xxjr-mmjv-4gpg", "version": "4.17.21" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "14.3.1" ], "id": "GHSA-253c-mchw-3w2r", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "Medium", "summary": "markdown-it linkify: true has two quadratic paths, so a few hundred KB of markdown blocks the event loop for tens of seconds", "url": "https://github.com/advisories/GHSA-253c-mchw-3w2r", "version": "8.4.2" }, { "aliases": [ "CVE-2026-48988" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48988", "percentile": 0.3186, "score": 0.00379 }, "fix_state": "fixed", "fixed_in": [ "14.2.0" ], "id": "GHSA-6v5v-wf23-fmfq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "Medium", "summary": "markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operations", "url": "https://github.com/advisories/GHSA-6v5v-wf23-fmfq", "version": "8.4.2" }, { "aliases": [ "CVE-2022-21670" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-21670", "percentile": 0.8315, "score": 0.02282 }, "fix_state": "fixed", "fixed_in": [ "12.3.2" ], "id": "GHSA-6vfc-qv3f-vr6c", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "Medium", "summary": "Uncontrolled Resource Consumption in markdown-it", "url": "https://github.com/advisories/GHSA-6vfc-qv3f-vr6c", "version": "8.4.2" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.0.0" ], "id": "GHSA-4xcv-9jjx-gfj3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "mem", "severity": "Medium", "summary": "Denial of Service in mem", "url": "https://github.com/advisories/GHSA-4xcv-9jjx-gfj3", "version": "1.1.0" }, { "aliases": [ "CVE-2024-4067" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4067", "percentile": 0.73001, "score": 0.01429 }, "fix_state": "fixed", "fixed_in": [ "4.0.8" ], "id": "GHSA-952p-6rrq-rcjv", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "micromatch", "severity": "Medium", "summary": "Regular Expression Denial of Service (ReDoS) in micromatch", "url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "version": "2.3.11" }, { "aliases": [ "CVE-2024-4067" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4067", "percentile": 0.73001, "score": 0.01429 }, "fix_state": "fixed", "fixed_in": [ "4.0.8" ], "id": "GHSA-952p-6rrq-rcjv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "micromatch", "severity": "Medium", "summary": "Regular Expression Denial of Service (ReDoS) in micromatch", "url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "version": "3.1.10" }, { "aliases": [ "CVE-2024-4067" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4067", "percentile": 0.73001, "score": 0.01429 }, "fix_state": "fixed", "fixed_in": [ "4.0.8" ], "id": "GHSA-952p-6rrq-rcjv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "micromatch", "severity": "Medium", "summary": "Regular Expression Denial of Service (ReDoS) in micromatch", "url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "version": "4.0.2" }, { "aliases": [ "CVE-2024-4067" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4067", "percentile": 0.73001, "score": 0.01429 }, "fix_state": "fixed", "fixed_in": [ "4.0.8" ], "id": "GHSA-952p-6rrq-rcjv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "micromatch", "severity": "Medium", "summary": "Regular Expression Denial of Service (ReDoS) in micromatch", "url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "version": "4.0.5" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "0.3.0" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "3.0.4" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "3.1.2" }, { "aliases": [ "CVE-2020-7598" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7598", "percentile": 0.80018, "score": 0.01931 }, "fix_state": "fixed", "fixed_in": [ "0.2.1" ], "id": "GHSA-vh95-rmgr-6w4m", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "minimist", "severity": "Medium", "summary": "Prototype Pollution in minimist", "url": "https://github.com/advisories/GHSA-vh95-rmgr-6w4m", "version": "0.0.10" }, { "aliases": [ "CVE-2020-7598" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7598", "percentile": 0.80018, "score": 0.01931 }, "fix_state": "fixed", "fixed_in": [ "0.2.1" ], "id": "GHSA-vh95-rmgr-6w4m", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "minimist", "severity": "Medium", "summary": "Prototype Pollution in minimist", "url": "https://github.com/advisories/GHSA-vh95-rmgr-6w4m", "version": "0.0.8" }, { "aliases": [ "CVE-2020-7598" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7598", "percentile": 0.80018, "score": 0.01931 }, "fix_state": "fixed", "fixed_in": [ "1.2.3" ], "id": "GHSA-vh95-rmgr-6w4m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimist", "severity": "Medium", "summary": "Prototype Pollution in minimist", "url": "https://github.com/advisories/GHSA-vh95-rmgr-6w4m", "version": "1.1.3" }, { "aliases": [ "CVE-2020-7598" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7598", "percentile": 0.80018, "score": 0.01931 }, "fix_state": "fixed", "fixed_in": [ "1.2.3" ], "id": "GHSA-vh95-rmgr-6w4m", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "minimist", "severity": "Medium", "summary": "Prototype Pollution in minimist", "url": "https://github.com/advisories/GHSA-vh95-rmgr-6w4m", "version": "1.2.0" }, { "aliases": [ "CVE-2026-17495" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-17495", "percentile": 0.44156, "score": 0.00519 }, "fix_state": "fixed", "fixed_in": [ "2.31.0" ], "id": "GHSA-4p3w-j4w9-5jqw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "moment", "severity": "Medium", "summary": "moment vulnerable to Path Traversal via crafted non-string locale name", "url": "https://github.com/advisories/GHSA-4p3w-j4w9-5jqw", "version": "2.29.4" }, { "aliases": [ "CVE-2026-5078" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-5078", "percentile": 0.26447, "score": 0.00332 }, "fix_state": "fixed", "fixed_in": [ "1.11.0" ], "id": "GHSA-4vj7-5mj6-jm8m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "morgan", "severity": "Medium", "summary": "morgan vulnerable to Log Forging via unneutralized control characters in :remote-user", "url": "https://github.com/advisories/GHSA-4vj7-5mj6-jm8m", "version": "1.10.0" }, { "aliases": [ "CVE-2026-87859" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-87859", "percentile": 0.35287, "score": 0.0041 }, "fix_state": "fixed", "fixed_in": [ "1.12.1" ], "id": "GHSA-9f6g-j8ch-79g4", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "morgan", "severity": "Medium", "summary": "morgan vulnerable to Log Injection via unescaped double quote in quoted log fields", "url": "https://github.com/advisories/GHSA-9f6g-j8ch-79g4", "version": "1.10.0" }, { "aliases": [ "CVE-2026-15603" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-15603", "percentile": 0.33954, "score": 0.00397 }, "fix_state": "fixed", "fixed_in": [ "1.12.0" ], "id": "GHSA-jxfw-x594-9x9m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "morgan", "severity": "Medium", "summary": "morgan vulnerable to Log Forging via unescaped Unicode line separators", "url": "https://github.com/advisories/GHSA-jxfw-x594-9x9m", "version": "1.10.0" }, { "aliases": [ "CVE-2020-7789" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7789", "percentile": 0.75603, "score": 0.01587 }, "fix_state": "fixed", "fixed_in": [ "8.0.1" ], "id": "GHSA-5fw9-fq32-wv5p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "node-notifier", "severity": "Medium", "summary": "OS Command Injection in node-notifier", "url": "https://github.com/advisories/GHSA-5fw9-fq32-wv5p", "version": "5.4.5" }, { "aliases": [ "CVE-2024-36751" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-36751", "percentile": 0.45686, "score": 0.00544 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-6fx8-h7jm-663j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "parseuri", "severity": "Medium", "summary": "parse-uri Regular expression Denial of Service (ReDoS)", "url": "https://github.com/advisories/GHSA-6fx8-h7jm-663j", "version": "0.0.6" }, { "aliases": [ "CVE-2021-23343" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23343", "percentile": 0.82662, "score": 0.02218 }, "fix_state": "fixed", "fixed_in": [ "1.0.7" ], "id": "GHSA-hj48-42vr-x3v9", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "path-parse", "severity": "Medium", "summary": "Regular Expression Denial of Service in path-parse", "url": "https://github.com/advisories/GHSA-hj48-42vr-x3v9", "version": "1.0.6" }, { "aliases": [ "CVE-2026-33672" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33672", "percentile": 0.36831, "score": 0.00425 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-3v7f-55p6-f55p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "Medium", "summary": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching", "url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p", "version": "2.2.2" }, { "aliases": [ "CVE-2026-33672" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33672", "percentile": 0.36831, "score": 0.00425 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-3v7f-55p6-f55p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "Medium", "summary": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching", "url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p", "version": "2.3.1" }, { "aliases": [ "CVE-2021-23382" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23382", "percentile": 0.85074, "score": 0.02557 }, "fix_state": "fixed", "fixed_in": [ "7.0.36" ], "id": "GHSA-566m-qj78-rww5", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "Medium", "summary": "Regular Expression Denial of Service in postcss", "url": "https://github.com/advisories/GHSA-566m-qj78-rww5", "version": "5.2.18" }, { "aliases": [ "CVE-2023-44270" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-44270", "percentile": 0.62035, "score": 0.00973 }, "fix_state": "fixed", "fixed_in": [ "8.4.31" ], "id": "GHSA-7fh5-64p2-3v2j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "Medium", "summary": "PostCSS line return parsing error", "url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "version": "5.2.18" }, { "aliases": [ "CVE-2026-69153" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69153", "percentile": 0.39208, "score": 0.00451 }, "fix_state": "fixed", "fixed_in": [ "8.5.23" ], "id": "GHSA-fxqj-rqcc-2cmp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "Medium", "summary": "PostCSS: incomplete fix of GHSA-6g55-p6wh-862q \u2014 attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset", "url": "https://github.com/advisories/GHSA-fxqj-rqcc-2cmp", "version": "5.2.18" }, { "aliases": [ "CVE-2026-41305" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41305", "percentile": 0.10477, "score": 0.00205 }, "fix_state": "fixed", "fixed_in": [ "8.5.10" ], "id": "GHSA-qx2v-qp2m-jg93", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss", "severity": "Medium", "summary": "PostCSS has XSS via Unescaped in its CSS Stringify Output", "url": "https://github.com/advisories/GHSA-qx2v-qp2m-jg93", "version": "5.2.18" }, { "aliases": [ "CVE-2026-104844" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-104844", "percentile": 0.32994, "score": 0.00389 }, "fix_state": "fixed", "fixed_in": [ "6.1.5" ], "id": "GHSA-rj75-hqrm-r3gf", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "postcss-selector-parser", "severity": "Medium", "summary": "PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion", "url": "https://github.com/advisories/GHSA-rj75-hqrm-r3gf", "version": "2.2.3" }, { "aliases": [ "CVE-2026-82417" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-82417", "percentile": 0.33809, "score": 0.00396 }, "fix_state": "fixed", "fixed_in": [ "6.16.0" ], "id": "GHSA-4mjr-xmp4-gh2g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs: Denial of Service via Attacker Controlled isBuffer", "url": "https://github.com/advisories/GHSA-4mjr-xmp4-gh2g", "version": "6.11.0" }, { "aliases": [ "CVE-2026-82417" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-82417", "percentile": 0.33809, "score": 0.00396 }, "fix_state": "fixed", "fixed_in": [ "6.16.0" ], "id": "GHSA-4mjr-xmp4-gh2g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs: Denial of Service via Attacker Controlled isBuffer", "url": "https://github.com/advisories/GHSA-4mjr-xmp4-gh2g", "version": "6.11.2" }, { "aliases": [ "CVE-2026-82417" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-82417", "percentile": 0.33809, "score": 0.00396 }, "fix_state": "fixed", "fixed_in": [ "6.16.0" ], "id": "GHSA-4mjr-xmp4-gh2g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs: Denial of Service via Attacker Controlled isBuffer", "url": "https://github.com/advisories/GHSA-4mjr-xmp4-gh2g", "version": "6.4.0" }, { "aliases": [ "CVE-2026-82417" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-82417", "percentile": 0.33809, "score": 0.00396 }, "fix_state": "fixed", "fixed_in": [ "6.16.0" ], "id": "GHSA-4mjr-xmp4-gh2g", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs: Denial of Service via Attacker Controlled isBuffer", "url": "https://github.com/advisories/GHSA-4mjr-xmp4-gh2g", "version": "6.5.2" }, { "aliases": [ "CVE-2026-82417" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-82417", "percentile": 0.33809, "score": 0.00396 }, "fix_state": "fixed", "fixed_in": [ "6.16.0" ], "id": "GHSA-4mjr-xmp4-gh2g", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs: Denial of Service via Attacker Controlled isBuffer", "url": "https://github.com/advisories/GHSA-4mjr-xmp4-gh2g", "version": "6.7.0" }, { "aliases": [ "CVE-2026-110816" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110816", "percentile": 0.30708, "score": 0.00368 }, "fix_state": "fixed", "fixed_in": [ "6.16.1" ], "id": "GHSA-6pq8-jhm2-2vcw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)", "url": "https://github.com/advisories/GHSA-6pq8-jhm2-2vcw", "version": "6.11.0" }, { "aliases": [ "CVE-2026-110816" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110816", "percentile": 0.30708, "score": 0.00368 }, "fix_state": "fixed", "fixed_in": [ "6.16.1" ], "id": "GHSA-6pq8-jhm2-2vcw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)", "url": "https://github.com/advisories/GHSA-6pq8-jhm2-2vcw", "version": "6.11.2" }, { "aliases": [ "CVE-2026-110816" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110816", "percentile": 0.30708, "score": 0.00368 }, "fix_state": "fixed", "fixed_in": [ "6.16.1" ], "id": "GHSA-6pq8-jhm2-2vcw", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)", "url": "https://github.com/advisories/GHSA-6pq8-jhm2-2vcw", "version": "6.7.0" }, { "aliases": [ "CVE-2025-15284" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-15284", "percentile": 0.39084, "score": 0.0045 }, "fix_state": "fixed", "fixed_in": [ "6.14.1" ], "id": "GHSA-6rw7-vpxm-498p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion", "url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p", "version": "6.11.0" }, { "aliases": [ "CVE-2025-15284" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-15284", "percentile": 0.39084, "score": 0.0045 }, "fix_state": "fixed", "fixed_in": [ "6.14.1" ], "id": "GHSA-6rw7-vpxm-498p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion", "url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p", "version": "6.11.2" }, { "aliases": [ "CVE-2025-15284" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-15284", "percentile": 0.39084, "score": 0.0045 }, "fix_state": "fixed", "fixed_in": [ "6.14.1" ], "id": "GHSA-6rw7-vpxm-498p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion", "url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p", "version": "6.4.0" }, { "aliases": [ "CVE-2025-15284" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-15284", "percentile": 0.39084, "score": 0.0045 }, "fix_state": "fixed", "fixed_in": [ "6.14.1" ], "id": "GHSA-6rw7-vpxm-498p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion", "url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p", "version": "6.5.2" }, { "aliases": [ "CVE-2025-15284" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-15284", "percentile": 0.39084, "score": 0.0045 }, "fix_state": "fixed", "fixed_in": [ "6.14.1" ], "id": "GHSA-6rw7-vpxm-498p", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion", "url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p", "version": "6.7.0" }, { "aliases": [ "CVE-2026-8723" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-8723", "percentile": 0.34217, "score": 0.00399 }, "fix_state": "fixed", "fixed_in": [ "6.15.2" ], "id": "GHSA-q8mj-m7cp-5q26", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set", "url": "https://github.com/advisories/GHSA-q8mj-m7cp-5q26", "version": "6.11.2" }, { "aliases": [ "CVE-2023-28155" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-28155", "percentile": 0.53914, "score": 0.00719 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-p8p7-x288-28g6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "request", "severity": "Medium", "summary": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "version": "2.81.0" }, { "aliases": [ "CVE-2023-28155" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-28155", "percentile": 0.53914, "score": 0.00719 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-p8p7-x288-28g6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "request", "severity": "Medium", "summary": "Server-Side Request Forgery in Request", "url": "https://github.com/advisories/GHSA-p8p7-x288-28g6", "version": "2.88.0" }, { "aliases": [ "CVE-2024-38355" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-38355", "percentile": 0.56843, "score": 0.00807 }, "fix_state": "fixed", "fixed_in": [ "2.5.1" ], "id": "GHSA-25hc-qcg6-38wj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io", "severity": "Medium", "summary": "socket.io has an unhandled 'error' event", "url": "https://github.com/advisories/GHSA-25hc-qcg6-38wj", "version": "2.5.0" }, { "aliases": [ "CVE-2023-32695" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-32695", "percentile": 0.64544, "score": 0.01059 }, "fix_state": "fixed", "fixed_in": [ "3.3.4" ], "id": "GHSA-cqmj-92xf-r6r9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "socket.io-parser", "severity": "Medium", "summary": "Insufficient validation when decoding a Socket.IO packet", "url": "https://github.com/advisories/GHSA-cqmj-92xf-r6r9", "version": "3.3.3" }, { "aliases": [ "CVE-2024-28863" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-28863", "percentile": 0.60592, "score": 0.00929 }, "fix_state": "fixed", "fixed_in": [ "6.2.1" ], "id": "GHSA-f5x3-32g6-xq36", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "Denial of service while parsing a tar file due to lack of folders count validation", "url": "https://github.com/advisories/GHSA-f5x3-32g6-xq36", "version": "2.2.2" }, { "aliases": [ "CVE-2024-28863" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-28863", "percentile": 0.60592, "score": 0.00929 }, "fix_state": "fixed", "fixed_in": [ "6.2.1" ], "id": "GHSA-f5x3-32g6-xq36", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "Denial of service while parsing a tar file due to lack of folders count validation", "url": "https://github.com/advisories/GHSA-f5x3-32g6-xq36", "version": "4.4.19" }, { "aliases": [ "CVE-2024-28863" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-28863", "percentile": 0.60592, "score": 0.00929 }, "fix_state": "fixed", "fixed_in": [ "6.2.1" ], "id": "GHSA-f5x3-32g6-xq36", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "Denial of service while parsing a tar file due to lack of folders count validation", "url": "https://github.com/advisories/GHSA-f5x3-32g6-xq36", "version": "4.4.8" }, { "aliases": [ "CVE-2026-59875" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59875", "percentile": 0.29158, "score": 0.00354 }, "fix_state": "fixed", "fixed_in": [ "7.5.17" ], "id": "GHSA-gvwx-54wh-qm9j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records", "url": "https://github.com/advisories/GHSA-gvwx-54wh-qm9j", "version": "2.2.2" }, { "aliases": [ "CVE-2026-59875" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59875", "percentile": 0.29158, "score": 0.00354 }, "fix_state": "fixed", "fixed_in": [ "7.5.17" ], "id": "GHSA-gvwx-54wh-qm9j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records", "url": "https://github.com/advisories/GHSA-gvwx-54wh-qm9j", "version": "4.4.19" }, { "aliases": [ "CVE-2026-59875" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59875", "percentile": 0.29158, "score": 0.00354 }, "fix_state": "fixed", "fixed_in": [ "7.5.17" ], "id": "GHSA-gvwx-54wh-qm9j", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records", "url": "https://github.com/advisories/GHSA-gvwx-54wh-qm9j", "version": "4.4.8" }, { "aliases": [ "CVE-2026-53655" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53655", "percentile": 0.04762, "score": 0.00156 }, "fix_state": "fixed", "fixed_in": [ "7.5.16" ], "id": "GHSA-vmf3-w455-68vh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)", "url": "https://github.com/advisories/GHSA-vmf3-w455-68vh", "version": "2.2.2" }, { "aliases": [ "CVE-2026-53655" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53655", "percentile": 0.04762, "score": 0.00156 }, "fix_state": "fixed", "fixed_in": [ "7.5.16" ], "id": "GHSA-vmf3-w455-68vh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)", "url": "https://github.com/advisories/GHSA-vmf3-w455-68vh", "version": "4.4.19" }, { "aliases": [ "CVE-2026-53655" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53655", "percentile": 0.04762, "score": 0.00156 }, "fix_state": "fixed", "fixed_in": [ "7.5.16" ], "id": "GHSA-vmf3-w455-68vh", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)", "url": "https://github.com/advisories/GHSA-vmf3-w455-68vh", "version": "4.4.8" }, { "aliases": [ "CVE-2026-59871" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59871", "percentile": 0.50871, "score": 0.00644 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-w8wr-v893-vjvp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Process crash via PAX numeric path type confusion", "url": "https://github.com/advisories/GHSA-w8wr-v893-vjvp", "version": "2.2.2" }, { "aliases": [ "CVE-2026-59871" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59871", "percentile": 0.50871, "score": 0.00644 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-w8wr-v893-vjvp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Process crash via PAX numeric path type confusion", "url": "https://github.com/advisories/GHSA-w8wr-v893-vjvp", "version": "4.4.19" }, { "aliases": [ "CVE-2026-59871" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59871", "percentile": 0.50871, "score": 0.00644 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-w8wr-v893-vjvp", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Process crash via PAX numeric path type confusion", "url": "https://github.com/advisories/GHSA-w8wr-v893-vjvp", "version": "4.4.8" }, { "aliases": [ "CVE-2023-26136" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-26136", "percentile": 0.85496, "score": 0.02627 }, "fix_state": "fixed", "fixed_in": [ "4.1.3" ], "id": "GHSA-72xf-g2v4-qvf3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tough-cookie", "severity": "Medium", "summary": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "version": "2.3.4" }, { "aliases": [ "CVE-2023-26136" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-26136", "percentile": 0.85496, "score": 0.02627 }, "fix_state": "fixed", "fixed_in": [ "4.1.3" ], "id": "GHSA-72xf-g2v4-qvf3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tough-cookie", "severity": "Medium", "summary": "tough-cookie Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-72xf-g2v4-qvf3", "version": "2.4.3" }, { "aliases": [ "CVE-2019-10795" ], "ecosystem": "npm", "epss": { "cve": "CVE-2019-10795", "percentile": 0.65347, "score": 0.01089 }, "fix_state": "fixed", "fixed_in": [ "2.0.3" ], "id": "GHSA-332q-7ff2-57h2", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "undefsafe", "severity": "Medium", "summary": "Prototype Pollution in undefsafe", "url": "https://github.com/advisories/GHSA-332q-7ff2-57h2", "version": "2.0.2" }, { "aliases": [ "CVE-2026-41907" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41907", "percentile": 0.28633, "score": 0.0035 }, "fix_state": "fixed", "fixed_in": [ "11.1.1" ], "id": "GHSA-w5hq-g745-h8pq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "uuid", "severity": "Medium", "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq", "version": "3.3.2" }, { "aliases": [ "CVE-2026-41907" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41907", "percentile": 0.28633, "score": 0.0035 }, "fix_state": "fixed", "fixed_in": [ "11.1.1" ], "id": "GHSA-w5hq-g745-h8pq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "uuid", "severity": "Medium", "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq", "version": "3.4.0" }, { "aliases": [ "CVE-2024-6783" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-6783", "percentile": 0.4325, "score": 0.00506 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-g3ch-rx76-35fx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "vue-template-compiler", "severity": "Medium", "summary": "vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)", "url": "https://github.com/advisories/GHSA-g3ch-rx76-35fx", "version": "2.6.12" }, { "aliases": [ "CVE-2026-54490" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-54490", "percentile": 0.3869, "score": 0.00445 }, "fix_state": "fixed", "fixed_in": [ "0.7.5" ], "id": "GHSA-mp7j-qc5w-4988", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "websocket-driver", "severity": "Medium", "summary": "websocket-driver: Resource limit bypass via message compression", "url": "https://github.com/advisories/GHSA-mp7j-qc5w-4988", "version": "0.7.4" }, { "aliases": [ "CVE-2023-26115" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-26115", "percentile": 0.77329, "score": 0.01709 }, "fix_state": "fixed", "fixed_in": [ "1.2.4" ], "id": "GHSA-j8xg-fqg3-53r7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "word-wrap", "severity": "Medium", "summary": "word-wrap vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "version": "1.2.3" }, { "aliases": [ "CVE-2023-0842" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-0842", "percentile": 0.72562, "score": 0.01404 }, "fix_state": "fixed", "fixed_in": [ "0.5.0" ], "id": "GHSA-776f-qx25-q3cc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xml2js", "severity": "Medium", "summary": "xml2js is vulnerable to prototype pollution", "url": "https://github.com/advisories/GHSA-776f-qx25-q3cc", "version": "0.2.6" }, { "aliases": [ "CVE-2023-0842" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-0842", "percentile": 0.72562, "score": 0.01404 }, "fix_state": "fixed", "fixed_in": [ "0.5.0" ], "id": "GHSA-776f-qx25-q3cc", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xml2js", "severity": "Medium", "summary": "xml2js is vulnerable to prototype pollution", "url": "https://github.com/advisories/GHSA-776f-qx25-q3cc", "version": "0.4.19" }, { "aliases": [ "CVE-2021-32796" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-32796", "percentile": 0.71685, "score": 0.01358 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-5fg8-2547-mr8q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Medium", "summary": "Misinterpretation of malicious XML input", "url": "https://github.com/advisories/GHSA-5fg8-2547-mr8q", "version": "0.1.27" }, { "aliases": [ "CVE-2026-83610" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83610", "percentile": 0.48209, "score": 0.0059 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-6gmq-8vp8-gcm6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Medium", "summary": "xmldom: XML fragment injection via invalid EntityReference.nodeName during requireWellFormed serialization", "url": "https://github.com/advisories/GHSA-6gmq-8vp8-gcm6", "version": "0.1.27" }, { "aliases": [ "CVE-2026-83611" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-83611", "percentile": 0.49684, "score": 0.00619 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-6h8r-xr42-gp59", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Medium", "summary": "xmldom: Parser silently accepts a not-well-formed end tag whose name is followed by a line break and trailing content", "url": "https://github.com/advisories/GHSA-6h8r-xr42-gp59", "version": "0.1.27" }, { "aliases": [ "CVE-2021-21366" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-21366", "percentile": 0.71308, "score": 0.0134 }, "fix_state": "fixed", "fixed_in": [ "0.5.0" ], "id": "GHSA-h6q6-9hqw-rwfv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "xmldom", "severity": "Medium", "summary": "Misinterpretation of malicious XML input", "url": "https://github.com/advisories/GHSA-h6q6-9hqw-rwfv", "version": "0.1.27" }, { "aliases": [ "CVE-2020-7608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7608", "percentile": 0.43855, "score": 0.00514 }, "fix_state": "fixed", "fixed_in": [ "13.1.2" ], "id": "GHSA-p9pc-299p-vxgp", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "yargs-parser", "severity": "Medium", "summary": "yargs-parser Vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-p9pc-299p-vxgp", "version": "11.1.1" }, { "aliases": [ "CVE-2020-7608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7608", "percentile": 0.43855, "score": 0.00514 }, "fix_state": "fixed", "fixed_in": [ "13.1.2" ], "id": "GHSA-p9pc-299p-vxgp", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "yargs-parser", "severity": "Medium", "summary": "yargs-parser Vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-p9pc-299p-vxgp", "version": "13.0.0" }, { "aliases": [ "CVE-2020-7608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7608", "percentile": 0.43855, "score": 0.00514 }, "fix_state": "fixed", "fixed_in": [ "13.1.2" ], "id": "GHSA-p9pc-299p-vxgp", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "yargs-parser", "severity": "Medium", "summary": "yargs-parser Vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-p9pc-299p-vxgp", "version": "13.1.0" }, { "aliases": [ "CVE-2020-7608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7608", "percentile": 0.43855, "score": 0.00514 }, "fix_state": "fixed", "fixed_in": [ "5.0.1" ], "id": "GHSA-p9pc-299p-vxgp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "yargs-parser", "severity": "Medium", "summary": "yargs-parser Vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-p9pc-299p-vxgp", "version": "2.4.1" }, { "aliases": [ "CVE-2020-7608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7608", "percentile": 0.43855, "score": 0.00514 }, "fix_state": "fixed", "fixed_in": [ "5.0.1" ], "id": "GHSA-p9pc-299p-vxgp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "yargs-parser", "severity": "Medium", "summary": "yargs-parser Vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-p9pc-299p-vxgp", "version": "4.2.1" }, { "aliases": [ "CVE-2020-7608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7608", "percentile": 0.43855, "score": 0.00514 }, "fix_state": "fixed", "fixed_in": [ "5.0.1" ], "id": "GHSA-p9pc-299p-vxgp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "yargs-parser", "severity": "Medium", "summary": "yargs-parser Vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-p9pc-299p-vxgp", "version": "5.0.0" }, { "aliases": [ "CVE-2020-7608" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-7608", "percentile": 0.43855, "score": 0.00514 }, "fix_state": "fixed", "fixed_in": [ "13.1.2" ], "id": "GHSA-p9pc-299p-vxgp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "yargs-parser", "severity": "Medium", "summary": "yargs-parser Vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-p9pc-299p-vxgp", "version": "9.0.2" }, { "aliases": [ "CVE-2026-49356" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-49356", "percentile": 0.04312, "score": 0.00152 }, "fix_state": "fixed", "fixed_in": [ "7.29.6" ], "id": "GHSA-4x5r-pxfx-6jf8", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "@babel/core", "severity": "Low", "summary": "@babel/core: Arbitrary File Read via sourceMappingURL Comment", "url": "https://github.com/advisories/GHSA-4x5r-pxfx-6jf8", "version": "7.12.17" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-j965-2qgj-vjmq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "aws-sdk", "severity": "Low", "summary": "JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3", "url": "https://github.com/advisories/GHSA-j965-2qgj-vjmq", "version": "2.0.31" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-j965-2qgj-vjmq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "aws-sdk", "severity": "Low", "summary": "JavaScript SDK v2 users should add validation to the region parameter value in or migrate to v3", "url": "https://github.com/advisories/GHSA-j965-2qgj-vjmq", "version": "2.847.0" }, { "aliases": [ "CVE-2026-12590" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-12590", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "1.20.6" ], "id": "GHSA-v422-hmwv-36x6", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "body-parser", "severity": "Low", "summary": "body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement", "url": "https://github.com/advisories/GHSA-v422-hmwv-36x6", "version": "1.19.0" }, { "aliases": [ "CVE-2026-12590" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-12590", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "1.20.6" ], "id": "GHSA-v422-hmwv-36x6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "body-parser", "severity": "Low", "summary": "body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement", "url": "https://github.com/advisories/GHSA-v422-hmwv-36x6", "version": "1.20.1" }, { "aliases": [ "CVE-2025-5889" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-5889", "percentile": 0.47999, "score": 0.00586 }, "fix_state": "fixed", "fixed_in": [ "1.1.12" ], "id": "GHSA-v6h2-p8h4-qcjw", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Low", "summary": "brace-expansion Regular Expression Denial of Service vulnerability", "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw", "version": "1.1.11" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.1.11" ], "id": "GHSA-wxhq-pm8v-cw75", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "clean-css", "severity": "Low", "summary": "Regular Expression Denial of Service in clean-css", "url": "https://github.com/advisories/GHSA-wxhq-pm8v-cw75", "version": "3.4.28" }, { "aliases": [ "CVE-2024-47764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-47764", "percentile": 0.54777, "score": 0.00744 }, "fix_state": "fixed", "fixed_in": [ "0.7.0" ], "id": "GHSA-pxg6-pf52-xh8x", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "cookie", "severity": "Low", "summary": "cookie accepts cookie name, path, and domain with out of bounds characters", "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "version": "0.4.0" }, { "aliases": [ "CVE-2024-47764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-47764", "percentile": 0.54777, "score": 0.00744 }, "fix_state": "fixed", "fixed_in": [ "0.7.0" ], "id": "GHSA-pxg6-pf52-xh8x", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "cookie", "severity": "Low", "summary": "cookie accepts cookie name, path, and domain with out of bounds characters", "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "version": "0.4.2" }, { "aliases": [ "CVE-2024-47764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-47764", "percentile": 0.54777, "score": 0.00744 }, "fix_state": "fixed", "fixed_in": [ "0.7.0" ], "id": "GHSA-pxg6-pf52-xh8x", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "cookie", "severity": "Low", "summary": "cookie accepts cookie name, path, and domain with out of bounds characters", "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "version": "0.5.0" }, { "aliases": [ "CVE-2017-16137" ], "ecosystem": "npm", "epss": { "cve": "CVE-2017-16137", "percentile": 0.8663, "score": 0.02832 }, "fix_state": "fixed", "fixed_in": [ "3.2.7" ], "id": "GHSA-gxpj-cx7g-858c", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "debug", "severity": "Low", "summary": "Regular Expression Denial of Service in debug", "url": "https://github.com/advisories/GHSA-gxpj-cx7g-858c", "version": "3.2.6" }, { "aliases": [ "CVE-2017-16137" ], "ecosystem": "npm", "epss": { "cve": "CVE-2017-16137", "percentile": 0.8663, "score": 0.02832 }, "fix_state": "fixed", "fixed_in": [ "4.3.1" ], "id": "GHSA-gxpj-cx7g-858c", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "debug", "severity": "Low", "summary": "Regular Expression Denial of Service in debug", "url": "https://github.com/advisories/GHSA-gxpj-cx7g-858c", "version": "4.1.1" }, { "aliases": [ "CVE-2026-24001" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24001", "percentile": 0.49541, "score": 0.00616 }, "fix_state": "fixed", "fixed_in": [ "3.5.1" ], "id": "GHSA-73rr-hh4g-fpgx", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "diff", "severity": "Low", "summary": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch", "url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx", "version": "3.5.0" }, { "aliases": [ "CVE-2026-24001" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24001", "percentile": 0.49541, "score": 0.00616 }, "fix_state": "fixed", "fixed_in": [ "4.0.4" ], "id": "GHSA-73rr-hh4g-fpgx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "diff", "severity": "Low", "summary": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch", "url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx", "version": "4.0.2" }, { "aliases": [ "CVE-2022-21718" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-21718", "percentile": 0.61117, "score": 0.00946 }, "fix_state": "fixed", "fixed_in": [ "13.6.6" ], "id": "GHSA-3p22-ghq8-v749", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Renderers can obtain access to random bluetooth device without permission in Electron", "url": "https://github.com/advisories/GHSA-3p22-ghq8-v749", "version": "3.0.13" }, { "aliases": [ "CVE-2026-114122" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114122", "percentile": 0.08238, "score": 0.00186 }, "fix_state": "fixed", "fixed_in": [ "42.11.6" ], "id": "GHSA-3qxv-5xgr-q7w9", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Frame subscription trusts GPU-supplied frame geometry", "url": "https://github.com/advisories/GHSA-3qxv-5xgr-q7w9", "version": "3.0.13" }, { "aliases": [ "CVE-2020-15096" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-15096", "percentile": 0.56934, "score": 0.0081 }, "fix_state": "fixed", "fixed_in": [ "6.1.11" ], "id": "GHSA-6vrv-94jv-crrg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Context isolation bypass via Promise in Electron", "url": "https://github.com/advisories/GHSA-6vrv-94jv-crrg", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34766" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34766", "percentile": 0.05691, "score": 0.00165 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-9899-m83m-qhpj", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: USB device selection not validated against filtered device list", "url": "https://github.com/advisories/GHSA-9899-m83m-qhpj", "version": "3.0.13" }, { "aliases": [ "CVE-2026-113797" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-113797", "percentile": 0.47998, "score": 0.00586 }, "fix_state": "fixed", "fixed_in": [ "42.11.1" ], "id": "GHSA-98mx-cjp9-gchm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Extension tabs.query returns tab URLs and titles without the tabs permission", "url": "https://github.com/advisories/GHSA-98mx-cjp9-gchm", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34781" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34781", "percentile": 0.03678, "score": 0.00144 }, "fix_state": "fixed", "fixed_in": [ "39.8.5" ], "id": "GHSA-f37v-82c4-4x64", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Crash in clipboard.readImage() on malformed clipboard image data", "url": "https://github.com/advisories/GHSA-f37v-82c4-4x64", "version": "3.0.13" }, { "aliases": [ "CVE-2026-114124" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114124", "percentile": 0.08164, "score": 0.00185 }, "fix_state": "fixed", "fixed_in": [ "42.11.6" ], "id": "GHSA-h3v5-h239-pg29", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Off-screen rendering on macOS trusts GPU-supplied frame geometry", "url": "https://github.com/advisories/GHSA-h3v5-h239-pg29", "version": "3.0.13" }, { "aliases": [ "CVE-2026-34768" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34768", "percentile": 0.02766, "score": 0.00132 }, "fix_state": "fixed", "fixed_in": [ "38.8.6" ], "id": "GHSA-jfqx-fxh3-c62j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Unquoted executable path in app.setLoginItemSettings on Windows", "url": "https://github.com/advisories/GHSA-jfqx-fxh3-c62j", "version": "3.0.13" }, { "aliases": [ "CVE-2022-29247" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-29247", "percentile": 0.64232, "score": 0.01048 }, "fix_state": "fixed", "fixed_in": [ "15.5.5" ], "id": "GHSA-mq8j-3h7h-p8g7", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled", "url": "https://github.com/advisories/GHSA-mq8j-3h7h-p8g7", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70598" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70598", "percentile": 0.03053, "score": 0.00136 }, "fix_state": "fixed", "fixed_in": [ "39.8.10" ], "id": "GHSA-pfmc-3mgc-p6fp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memory size", "url": "https://github.com/advisories/GHSA-pfmc-3mgc-p6fp", "version": "3.0.13" }, { "aliases": [ "CVE-2026-70600" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-70600", "percentile": 0.07431, "score": 0.00179 }, "fix_state": "fixed", "fixed_in": [ "39.8.8" ], "id": "GHSA-x8rc-wpg4-grpf", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "electron", "severity": "Low", "summary": "Electron: Cross-origin iframe can position native autofill popup", "url": "https://github.com/advisories/GHSA-x8rc-wpg4-grpf", "version": "3.0.13" }, { "aliases": [ "CVE-2024-43796" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43796", "percentile": 0.41875, "score": 0.00486 }, "fix_state": "fixed", "fixed_in": [ "4.20.0" ], "id": "GHSA-qw6h-vgh9-j6wx", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "express", "severity": "Low", "summary": "express vulnerable to XSS via response.redirect()", "url": "https://github.com/advisories/GHSA-qw6h-vgh9-j6wx", "version": "4.17.0" }, { "aliases": [ "CVE-2024-43796" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43796", "percentile": 0.41875, "score": 0.00486 }, "fix_state": "fixed", "fixed_in": [ "4.20.0" ], "id": "GHSA-qw6h-vgh9-j6wx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "express", "severity": "Low", "summary": "express vulnerable to XSS via response.redirect()", "url": "https://github.com/advisories/GHSA-qw6h-vgh9-j6wx", "version": "4.18.2" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-442j-39wm-28r2", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "handlebars", "severity": "Low", "summary": "Handlebars.js has a Property Access Validation Bypass in container.lookup", "url": "https://github.com/advisories/GHSA-442j-39wm-28r2", "version": "4.7.7" }, { "aliases": [ "CVE-2026-111766" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111766", "percentile": 0.37056, "score": 0.00428 }, "fix_state": "fixed", "fixed_in": [ "14.3.3" ], "id": "GHSA-vfgh-jcmw-g37q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "markdown-it", "severity": "Low", "summary": "markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabled", "url": "https://github.com/advisories/GHSA-vfgh-jcmw-g37q", "version": "8.4.2" }, { "aliases": [ "CVE-2025-7339" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-7339", "percentile": 0.10901, "score": 0.00208 }, "fix_state": "fixed", "fixed_in": [ "1.1.0" ], "id": "GHSA-76c9-3jph-rj3q", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "on-headers", "severity": "Low", "summary": "on-headers is vulnerable to http response header manipulation", "url": "https://github.com/advisories/GHSA-76c9-3jph-rj3q", "version": "1.0.2" }, { "aliases": [ "CVE-2026-2391" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-2391", "percentile": 0.45582, "score": 0.00542 }, "fix_state": "fixed", "fixed_in": [ "6.14.2" ], "id": "GHSA-w7fw-mjwx-w883", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Low", "summary": "qs's arrayLimit bypass in comma parsing allows denial of service", "url": "https://github.com/advisories/GHSA-w7fw-mjwx-w883", "version": "6.11.0" }, { "aliases": [ "CVE-2026-2391" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-2391", "percentile": 0.45582, "score": 0.00542 }, "fix_state": "fixed", "fixed_in": [ "6.14.2" ], "id": "GHSA-w7fw-mjwx-w883", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Low", "summary": "qs's arrayLimit bypass in comma parsing allows denial of service", "url": "https://github.com/advisories/GHSA-w7fw-mjwx-w883", "version": "6.11.2" }, { "aliases": [ "CVE-2026-2391" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-2391", "percentile": 0.45582, "score": 0.00542 }, "fix_state": "fixed", "fixed_in": [ "6.14.2" ], "id": "GHSA-w7fw-mjwx-w883", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Low", "summary": "qs's arrayLimit bypass in comma parsing allows denial of service", "url": "https://github.com/advisories/GHSA-w7fw-mjwx-w883", "version": "6.7.0" }, { "aliases": [ "CVE-2024-43799" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43799", "percentile": 0.45545, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "0.19.0" ], "id": "GHSA-m6fv-jmcg-4jfg", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "send", "severity": "Low", "summary": "send vulnerable to template injection that can lead to XSS", "url": "https://github.com/advisories/GHSA-m6fv-jmcg-4jfg", "version": "0.17.1" }, { "aliases": [ "CVE-2024-43799" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43799", "percentile": 0.45545, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "0.19.0" ], "id": "GHSA-m6fv-jmcg-4jfg", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "send", "severity": "Low", "summary": "send vulnerable to template injection that can lead to XSS", "url": "https://github.com/advisories/GHSA-m6fv-jmcg-4jfg", "version": "0.18.0" }, { "aliases": [ "CVE-2024-43800" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43800", "percentile": 0.50252, "score": 0.00631 }, "fix_state": "fixed", "fixed_in": [ "1.16.0" ], "id": "GHSA-cm22-4g7w-348p", "kev": null, "location": "ember-electron/backend/package-lock.json", "osv_confirmed": true, "package": "serve-static", "severity": "Low", "summary": "serve-static vulnerable to template injection that can lead to XSS", "url": "https://github.com/advisories/GHSA-cm22-4g7w-348p", "version": "1.14.1" }, { "aliases": [ "CVE-2024-43800" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43800", "percentile": 0.50252, "score": 0.00631 }, "fix_state": "fixed", "fixed_in": [ "1.16.0" ], "id": "GHSA-cm22-4g7w-348p", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "serve-static", "severity": "Low", "summary": "serve-static vulnerable to template injection that can lead to XSS", "url": "https://github.com/advisories/GHSA-cm22-4g7w-348p", "version": "1.15.0" }, { "aliases": [ "CVE-2025-54798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-54798", "percentile": 0.31622, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "0.2.4" ], "id": "GHSA-52f5-9888-hmc6", "kev": null, "location": "lib/wsd-core/package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "Low", "summary": "tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter", "url": "https://github.com/advisories/GHSA-52f5-9888-hmc6", "version": "0.0.28" }, { "aliases": [ "CVE-2025-54798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-54798", "percentile": 0.31622, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "0.2.4" ], "id": "GHSA-52f5-9888-hmc6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "Low", "summary": "tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter", "url": "https://github.com/advisories/GHSA-52f5-9888-hmc6", "version": "0.0.29" }, { "aliases": [ "CVE-2025-54798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-54798", "percentile": 0.31622, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "0.2.4" ], "id": "GHSA-52f5-9888-hmc6", "kev": null, "location": "lib/ui-toolkit/package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "Low", "summary": "tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter", "url": "https://github.com/advisories/GHSA-52f5-9888-hmc6", "version": "0.0.33" }, { "aliases": [ "CVE-2025-54798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-54798", "percentile": 0.31622, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "0.2.4" ], "id": "GHSA-52f5-9888-hmc6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "Low", "summary": "tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter", "url": "https://github.com/advisories/GHSA-52f5-9888-hmc6", "version": "0.1.0" } ], "workflow_audit": { "files": 2, "findings": [ { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/ci.yaml", "line": 13, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/ci.yaml", "line": 15, "note": "this step", "rule": "template-injection", "severity": "High", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/ci.yaml", "line": 44, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/ci.yaml", "line": 70, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/ci.yaml", "line": 76, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/ci.yaml", "line": 82, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/ci.yaml", "line": 88, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "overly broad permissions", "file": ".github/workflows/release-draft.yaml", "line": 9, "note": "contents: write is overly broad at the workflow level", "rule": "excessive-permissions", "severity": "High", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/release-draft.yaml", "line": 23, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/release-draft.yaml", "line": 48, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/release-draft.yaml", "line": 54, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/release-draft.yaml", "line": 60, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/release-draft.yaml", "line": 66, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/release-draft.yaml", "line": 80, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/release-draft.yaml", "line": 84, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/release-draft.yaml", "line": 88, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/release-draft.yaml", "line": 94, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/ci.yaml", "line": 1, "note": "default permissions used due to no permissions: block", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/ci.yaml", "line": 5, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/ci.yaml", "line": 31, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "action functionality is already included by the runner", "file": ".github/workflows/release-draft.yaml", "line": 94, "note": "this step", "rule": "superfluous-actions", "severity": "Informational", "url": "https://docs.zizmor.sh/audits/#superfluous-actions" } ] } }, "updated": "2026-11-02" }