{
  "history": [
    {
      "added": 0,
      "commit": "950734fc80d48083479843e2284039832eaf54c7",
      "date": "2026-11-01",
      "dependencies": 543,
      "errors": [],
      "fixable": 58,
      "go_version": null,
      "in_binary": null,
      "new_vulnerabilities": 0,
      "osv_confirmed": 53,
      "osv_only": 100,
      "ref": "main",
      "release_changed": false,
      "release_integrity": null,
      "removed": 0,
      "resolved_vulnerabilities": 0,
      "scorecard": 5.8,
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 2,
        "High": 21,
        "Low": 1,
        "Medium": 30,
        "Negligible": 0,
        "Unknown": 4
      },
      "workflow": {
        "High": 165,
        "Low": 31,
        "Medium": 1,
        "files": 69
      }
    },
    {
      "added": 2,
      "commit": "1c866c7127551020a7e00caa24f26ff4f5ef0928",
      "date": "2026-11-02",
      "dependencies": 495,
      "errors": [],
      "fixable": 2,
      "go_version": null,
      "in_binary": null,
      "kev": 0,
      "kev_new": 0,
      "new_vulnerabilities": 0,
      "osv_confirmed": 2,
      "osv_only": 34,
      "ref": "main",
      "release_changed": false,
      "release_integrity": null,
      "removed": 49,
      "resolved_vulnerabilities": 35,
      "scorecard": 5.8,
      "scorecard_date": "2026-10-19",
      "scorecard_note": null,
      "scorecard_source": "openssf-api",
      "upgraded": 0,
      "vulnerabilities": {
        "Critical": 0,
        "High": 0,
        "Low": 0,
        "Medium": 2,
        "Negligible": 0,
        "Unknown": 0
      },
      "vulnerable_packages": 2,
      "workflow": {
        "High": 115,
        "Low": 26,
        "Medium": 1,
        "files": 45
      }
    }
  ],
  "latest": {
    "archived": false,
    "category": "Static Application Security Testing (SAST) \u203a Multi-language",
    "changes": {
      "added": [
        "@types/node@24.3.1",
        "undici-types@7.10.0"
      ],
      "any": true,
      "baseline": false,
      "integrity_drift": 0,
      "license_changes": [],
      "new_vulnerabilities": [],
      "previous_ref": "main",
      "release_changed": false,
      "removed": [
        "actions/checkout@4",
        "actions/checkout@v3",
        "actions/checkout@v4",
        "actions/github-script@v7.0.1",
        "astral-sh/setup-uv@v3",
        "docker/login-action@v3",
        "foo/bar@25b062c917b0c75f8b47d8469aff6c94ffd89abb",
        "foo/bar@v2",
        "frabert/replace-string-action@v2.5",
        "jwalton/gh-docker-logs@v2",
        "lycheeverse/lychee-action@v2.0.2",
        "nick-fields/retry@v3",
        "example.com/test@v0.1.0",
        "github.com/linode/linode-docs-theme@v0.0.0-20220622135843-166f108e1933",
        "github.com/microsoft/go-mssqldb@v0.12.0",
        "golang.org/x/net@v0.0.0-20200505041828-1ed23360d12c",
        "golang.org/x/net@v0.23.0",
        "golang.org/x/sys@v0.18.0",
        "apache-jsp@9.3.3.v20150827",
        "apache-jstl@9.3.3.v20150827",
        "asdkfj@1.0-SNAPSHOT",
        "commons-lang3@3.14.0",
        "javax.servlet-api@3.1.0",
        "jenkins-war@2.249",
        "jetty-annotations@9.3.3.v20150827",
        "jetty-webapp@9.3.3.v20150827",
        "junit@4.11",
        "junit@4.12",
        "junit@9.9.9",
        "junit-nonesuch@4.11",
        "main-module@1.0",
        "maven-add-exports-module-flags@1.0-SNAPSHOT",
        "maven-execution-specific-java-version@1.0-SNAPSHOT",
        "maven-java16-with-higher-jdk@1.0-SNAPSHOT",
        "maven-java8-java11-dependency@1.0-SNAPSHOT",
        "maven-multimodule-test-java-version@1.0",
        "maven-sample@1.0-SNAPSHOT",
        "maven-wrapper-missing-properties-test@1.0-SNAPSHOT",
        "maven3-fetch-maven4-wrapper-test@1.0.0",
        "my-app@1.0-SNAPSHOT",
        "otherreleasetest@1.0",
        "snapshottest@1.0-SNAPSHOT",
        "submod1@1.0-SNAPSHOT",
        "submod2@1.0-SNAPSHOT",
        "test-module@1.0",
        "testng@7.7.0",
        "vulnerable-jsp-app@1.0.0-SNAPSHOT",
        "./.github/actions/install-airbyte-ci@UNKNOWN",
        "file_exclusion@0.1.0"
      ],
      "resolved_vulnerabilities": [
        {
          "aliases": [
            "CVE-2020-15250"
          ],
          "ecosystem": "maven",
          "fix_state": "fixed",
          "fixed_in": [
            "4.13.1"
          ],
          "id": "GHSA-269g-pwp5-87pp",
          "location": "java/ql/integration-tests/java/buildless-sibling-projects/maven-project-2/pom.xml",
          "osv_confirmed": false,
          "package": "junit",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-269g-pwp5-87pp",
          "version": "4.12"
        },
        {
          "aliases": [
            "CVE-2023-3978"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.13.0"
          ],
          "id": "GHSA-2wrh-6pvc-2jm9",
          "location": "go/ql/integration-tests/two-go-mods-not-nested/src/subdir2/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-2wrh-6pvc-2jm9",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [
            "CVE-2023-39325"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.17.0"
          ],
          "id": "GHSA-4374-p667-p6c8",
          "location": "go/ql/integration-tests/two-go-mods-nested-one-in-root/src/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://github.com/advisories/GHSA-4374-p667-p6c8",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [
            "CVE-2023-45288"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.23.0"
          ],
          "id": "GHSA-4v7x-pqxf-cx7m",
          "location": "go/ql/integration-tests/two-go-mods-nested-one-in-root/src/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-4v7x-pqxf-cx7m",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [
            "CVE-2026-25680"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.55.0"
          ],
          "id": "GHSA-5cv4-jp36-h3mw",
          "location": "go/ql/integration-tests/two-go-mods-not-nested/src/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-5cv4-jp36-h3mw",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2022-27664"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.0.0-20220906165146-f3363e06e74c"
          ],
          "id": "GHSA-69cg-p879-7622",
          "location": "go/ql/integration-tests/two-go-mods-nested-one-in-root/src/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://github.com/advisories/GHSA-69cg-p879-7622",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [
            "CVE-2021-33194"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.0.0-20210520170846-37e1c6afe023"
          ],
          "id": "GHSA-83g2-8m93-v3w7",
          "location": "go/ql/integration-tests/two-go-mods-not-nested/src/subdir2/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://github.com/advisories/GHSA-83g2-8m93-v3w7",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [],
          "ecosystem": "github",
          "fix_state": "fixed",
          "fixed_in": [
            "4.1.3"
          ],
          "id": "GHSA-cxww-7g56-2vh6",
          "location": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "osv_confirmed": false,
          "package": "actions/download-artifact",
          "severity": "High",
          "url": "https://github.com/advisories/GHSA-cxww-7g56-2vh6",
          "version": "v4"
        },
        {
          "aliases": [
            "CVE-2020-27216"
          ],
          "ecosystem": "maven",
          "fix_state": "fixed",
          "fixed_in": [
            "9.4.33.v20201020"
          ],
          "id": "GHSA-g3wg-6mcf-8jj6",
          "location": "java/ql/integration-tests/java/java-web-jsp/pom.xml",
          "osv_confirmed": false,
          "package": "jetty-webapp",
          "severity": "High",
          "url": "https://github.com/advisories/GHSA-g3wg-6mcf-8jj6",
          "version": "9.3.3.v20150827"
        },
        {
          "aliases": [
            "CVE-2021-31525"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.0.0-20210428140749-89ef3d95e781"
          ],
          "id": "GHSA-h86h-8ppg-mxmh",
          "location": "go/ql/integration-tests/two-go-mods-not-nested/src/subdir2/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-h86h-8ppg-mxmh",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [
            "CVE-2025-48924"
          ],
          "ecosystem": "maven",
          "fix_state": "fixed",
          "fixed_in": [
            "3.18.0"
          ],
          "id": "GHSA-j288-q9x7-2f5v",
          "location": "java/ql/integration-tests/java/buildless-maven-multimodule/submod2/pom.xml",
          "osv_confirmed": false,
          "package": "commons-lang3",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-j288-q9x7-2f5v",
          "version": "3.14.0"
        },
        {
          "aliases": [
            "CVE-2023-44487"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.17.0"
          ],
          "id": "GHSA-qppj-fm5r-hxr3",
          "location": "go/ql/integration-tests/two-go-mods-not-nested/src/subdir2/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-qppj-fm5r-hxr3",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [
            "CVE-2025-22870"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.36.0"
          ],
          "id": "GHSA-qxp5-gwg8-xv66",
          "location": "go/ql/integration-tests/two-go-mods-nested-one-in-root/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-qxp5-gwg8-xv66",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2025-22872"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.38.0"
          ],
          "id": "GHSA-vvgc-356p-c3xw",
          "location": "go/ql/integration-tests/bazel-sample-1/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-vvgc-356p-c3xw",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2022-41723"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.7.0"
          ],
          "id": "GHSA-vvpx-j8f3-3w6h",
          "location": "go/ql/integration-tests/two-go-mods-nested-one-in-root/src/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://github.com/advisories/GHSA-vvpx-j8f3-3w6h",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [
            "CVE-2022-41717"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.4.0"
          ],
          "id": "GHSA-xrjj-mj9h-534m",
          "location": "go/ql/integration-tests/two-go-mods-nested-one-in-root/src/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://github.com/advisories/GHSA-xrjj-mj9h-534m",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [
            "CVE-2021-44716",
            "GHSA-vc3p-29h2-gpcp"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.0.0-20211209124913-491a49abca63"
          ],
          "id": "GO-2022-0288",
          "location": "go/ql/integration-tests/two-go-mods-not-nested/src/subdir2/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://go.dev/cl/369794",
          "version": "v0.0.0-20200505041828-1ed23360d12c"
        },
        {
          "aliases": [
            "CVE-2024-45338",
            "GHSA-w32m-9786-jp63"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.33.0"
          ],
          "id": "GO-2024-3333",
          "location": "go/ql/integration-tests/single-go-work-not-in-root/src/modules/subdir2/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://go.dev/cl/637536",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2025-47911"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.45.0"
          ],
          "id": "GO-2026-4440",
          "location": "go/ql/integration-tests/go-mod-sample/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://go.dev/cl/709876",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2025-58190"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.45.0"
          ],
          "id": "GO-2026-4441",
          "location": "go/ql/integration-tests/make-sample/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://groups.google.com/g/golang-announce/c/jnQcOYpiR2c",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-33814"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.53.0"
          ],
          "id": "GO-2026-4918",
          "location": "go/ql/integration-tests/single-go-work-not-in-root/src/modules/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://go.dev/cl/761581",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-39824"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.44.0"
          ],
          "id": "GO-2026-5024",
          "location": "go/ql/integration-tests/go-mod-without-version/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/sys",
          "severity": "Low",
          "url": "https://go.dev/issue/78916",
          "version": "v0.18.0"
        },
        {
          "aliases": [
            "CVE-2026-42506"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.55.0"
          ],
          "id": "GO-2026-5025",
          "location": "go/ql/integration-tests/bazel-sample-2/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://go.dev/issue/79571",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-39821"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.55.0"
          ],
          "id": "GO-2026-5026",
          "location": "go/ql/integration-tests/bazel-sample-1/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://go.dev/cl/767220",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-42502"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.55.0"
          ],
          "id": "GO-2026-5027",
          "location": "go/ql/integration-tests/two-go-mods-nested-none-in-root/src/subdir0/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://go.dev/issue/79572",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-25681"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.55.0"
          ],
          "id": "GO-2026-5029",
          "location": "go/ql/integration-tests/two-go-mods-nested-one-in-root/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://go.dev/issue/79574",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-27136"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.55.0"
          ],
          "id": "GO-2026-5030",
          "location": "go/ql/integration-tests/two-go-mods-nested-none-in-root/src/subdir0/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Medium",
          "url": "https://go.dev/issue/79575",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-46600"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.56.0"
          ],
          "id": "GO-2026-5942",
          "location": "go/ql/integration-tests/two-go-mods-nested-one-in-root/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://go.dev/cl/786345",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-78659"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.60.0"
          ],
          "id": "GO-2026-6603",
          "location": "go/ql/integration-tests/bazel-sample-2/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://go.dev/cl/847185",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-78660"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.60.0"
          ],
          "id": "GO-2026-6610",
          "location": "go/ql/integration-tests/two-go-mods-not-nested/src/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://go.dev/cl/835145",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-78669"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.60.0"
          ],
          "id": "GO-2026-6611",
          "location": "go/ql/integration-tests/bazel-sample-2/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://go.dev/cl/847186",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-78663"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.60.0"
          ],
          "id": "GO-2026-6612",
          "location": "go/ql/integration-tests/two-go-mods-one-failure/src/subdir1/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Critical",
          "url": "https://go.dev/cl/847187",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-97032"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.60.0"
          ],
          "id": "GO-2026-6617",
          "location": "go/ql/integration-tests/bazel-sample-1/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "High",
          "url": "https://go.dev/cl/847188",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-78661"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.62.0"
          ],
          "id": "GO-2026-6860",
          "location": "go/ql/integration-tests/bazel-sample-1/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Unknown",
          "url": "https://go.dev/cl/849365",
          "version": "v0.23.0"
        },
        {
          "aliases": [
            "CVE-2026-97045"
          ],
          "ecosystem": "golang",
          "fix_state": "fixed",
          "fixed_in": [
            "0.62.0"
          ],
          "id": "GO-2026-6866",
          "location": "go/ql/integration-tests/bazel-sample-1/src/go.mod",
          "osv_confirmed": true,
          "package": "golang.org/x/net",
          "severity": "Unknown",
          "url": "https://go.dev/cl/855121",
          "version": "v0.23.0"
        }
      ],
      "upgraded": [],
      "workflow_new": 0,
      "workflow_resolved": 28
    },
    "commit": "1c866c7127551020a7e00caa24f26ff4f5ef0928",
    "compliance": {
      "overall_score": 55,
      "standards": {
        "bsi_tr03183": {
          "failed_checks": [
            "Component Creator",
            "Distribution Licences",
            "SHA-512 Hash",
            "Dependency Relationship",
            "SBOM Creator Contact"
          ],
          "passed": 4,
          "score": 44,
          "total": 9
        },
        "cisa": {
          "failed_checks": [
            "Software Producer",
            "Dependency Relationship",
            "License Information",
            "Component Hash",
            "SBOM Author"
          ],
          "passed": 5,
          "score": 50,
          "total": 10
        },
        "ntia": {
          "failed_checks": [
            "Supplier Name",
            "Dependency Relationship"
          ],
          "passed": 5,
          "score": 71,
          "total": 7
        }
      }
    },
    "components": [
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "adler2",
        "purl": "pkg:cargo/adler2@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "adler2",
        "purl": "pkg:cargo/adler2@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "aho-corasick",
        "purl": "pkg:cargo/aho-corasick@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "aho-corasick",
        "purl": "pkg:cargo/aho-corasick@1.1.5",
        "version": "1.1.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "allocator-api2",
        "purl": "pkg:cargo/allocator-api2@0.2.21",
        "version": "0.2.21"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "android_system_properties",
        "purl": "pkg:cargo/android_system_properties@0.1.5",
        "version": "0.1.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "anstream",
        "purl": "pkg:cargo/anstream@0.6.18",
        "version": "0.6.18"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "anstream",
        "purl": "pkg:cargo/anstream@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "anstyle",
        "purl": "pkg:cargo/anstyle@1.0.10",
        "version": "1.0.10"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "anstyle",
        "purl": "pkg:cargo/anstyle@1.0.14",
        "version": "1.0.14"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "anstyle-parse",
        "purl": "pkg:cargo/anstyle-parse@0.2.6",
        "version": "0.2.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "anstyle-parse",
        "purl": "pkg:cargo/anstyle-parse@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "anstyle-query",
        "purl": "pkg:cargo/anstyle-query@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "anstyle-query",
        "purl": "pkg:cargo/anstyle-query@1.1.5",
        "version": "1.1.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "anstyle-wincon",
        "purl": "pkg:cargo/anstyle-wincon@3.0.11",
        "version": "3.0.11"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "anstyle-wincon",
        "purl": "pkg:cargo/anstyle-wincon@3.0.6",
        "version": "3.0.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "anstyle-wincon",
        "purl": "pkg:cargo/anstyle-wincon@3.0.7",
        "version": "3.0.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "anyhow",
        "purl": "pkg:cargo/anyhow@1.0.104",
        "version": "1.0.104"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "anyhow",
        "purl": "pkg:cargo/anyhow@1.0.95",
        "version": "1.0.95"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "argfile",
        "purl": "pkg:cargo/argfile@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "arrayvec",
        "purl": "pkg:cargo/arrayvec@0.7.8",
        "version": "0.7.8"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "atomic",
        "purl": "pkg:cargo/atomic@0.6.1",
        "version": "0.6.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "autocfg",
        "purl": "pkg:cargo/autocfg@1.4.0",
        "version": "1.4.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "autocfg",
        "purl": "pkg:cargo/autocfg@1.5.1",
        "version": "1.5.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "base64",
        "purl": "pkg:cargo/base64@0.23.1",
        "version": "0.23.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "bitflags",
        "purl": "pkg:cargo/bitflags@1.3.2",
        "version": "1.3.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "bitflags",
        "purl": "pkg:cargo/bitflags@2.13.2",
        "version": "2.13.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "borsh",
        "purl": "pkg:cargo/borsh@1.8.1",
        "version": "1.8.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "boxcar",
        "purl": "pkg:cargo/boxcar@0.2.14",
        "version": "0.2.14"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "bs58",
        "purl": "pkg:cargo/bs58@0.5.1",
        "version": "0.5.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "bstr",
        "purl": "pkg:cargo/bstr@1.10.0",
        "version": "1.10.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "bstr",
        "purl": "pkg:cargo/bstr@1.12.1",
        "version": "1.12.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "bumpalo",
        "purl": "pkg:cargo/bumpalo@3.16.0",
        "version": "3.16.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "bumpalo",
        "purl": "pkg:cargo/bumpalo@3.20.3",
        "version": "3.20.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "bytemuck",
        "purl": "pkg:cargo/bytemuck@1.25.0",
        "version": "1.25.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "bytes",
        "purl": "pkg:cargo/bytes@1.12.1",
        "version": "1.12.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "camino",
        "purl": "pkg:cargo/camino@1.2.6",
        "version": "1.2.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "cargo-platform",
        "purl": "pkg:cargo/cargo-platform@0.3.3",
        "version": "0.3.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "cargo_metadata",
        "purl": "pkg:cargo/cargo_metadata@0.23.1",
        "version": "0.23.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "cc",
        "purl": "pkg:cargo/cc@1.2.14",
        "version": "1.2.14"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "cc",
        "purl": "pkg:cargo/cc@1.4.6",
        "version": "1.4.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "cc",
        "purl": "pkg:cargo/cc@1.4.7",
        "version": "1.4.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "cfg-if",
        "purl": "pkg:cargo/cfg-if@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "cfg-if",
        "purl": "pkg:cargo/cfg-if@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "cfg_aliases",
        "purl": "pkg:cargo/cfg_aliases@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "chacha20",
        "purl": "pkg:cargo/chacha20@0.10.2",
        "version": "0.10.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "chalk-derive",
        "purl": "pkg:cargo/chalk-derive@0.104.0",
        "version": "0.104.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "chalk-ir",
        "purl": "pkg:cargo/chalk-ir@0.104.0",
        "version": "0.104.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "chrono",
        "purl": "pkg:cargo/chrono@0.4.45",
        "version": "0.4.45"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "clap",
        "purl": "pkg:cargo/clap@4.5.30",
        "version": "4.5.30"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "clap",
        "purl": "pkg:cargo/clap@4.6.7",
        "version": "4.6.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "clap_builder",
        "purl": "pkg:cargo/clap_builder@4.5.30",
        "version": "4.5.30"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "clap_builder",
        "purl": "pkg:cargo/clap_builder@4.6.7",
        "version": "4.6.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "clap_derive",
        "purl": "pkg:cargo/clap_derive@4.6.7",
        "version": "4.6.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "clap_lex",
        "purl": "pkg:cargo/clap_lex@0.7.4",
        "version": "0.7.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "clap_lex",
        "purl": "pkg:cargo/clap_lex@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "cobs",
        "purl": "pkg:cargo/cobs@0.3.0",
        "version": "0.3.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "colorchoice",
        "purl": "pkg:cargo/colorchoice@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "colorchoice",
        "purl": "pkg:cargo/colorchoice@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "core-foundation-sys",
        "purl": "pkg:cargo/core-foundation-sys@0.8.7",
        "version": "0.8.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "countme",
        "purl": "pkg:cargo/countme@3.0.1",
        "version": "3.0.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "cov-mark",
        "purl": "pkg:cargo/cov-mark@2.2.0",
        "version": "2.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "cpufeatures",
        "purl": "pkg:cargo/cpufeatures@0.3.1",
        "version": "0.3.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "crc32fast",
        "purl": "pkg:cargo/crc32fast@1.4.2",
        "version": "1.4.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "crc32fast",
        "purl": "pkg:cargo/crc32fast@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "crossbeam-channel",
        "purl": "pkg:cargo/crossbeam-channel@0.5.17",
        "version": "0.5.17"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "crossbeam-deque",
        "purl": "pkg:cargo/crossbeam-deque@0.8.5",
        "version": "0.8.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "crossbeam-deque",
        "purl": "pkg:cargo/crossbeam-deque@0.8.8",
        "version": "0.8.8"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "crossbeam-epoch",
        "purl": "pkg:cargo/crossbeam-epoch@0.9.18",
        "version": "0.9.18"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "crossbeam-epoch",
        "purl": "pkg:cargo/crossbeam-epoch@0.9.21",
        "version": "0.9.21"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "crossbeam-queue",
        "purl": "pkg:cargo/crossbeam-queue@0.3.14",
        "version": "0.3.14"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "crossbeam-utils",
        "purl": "pkg:cargo/crossbeam-utils@0.8.20",
        "version": "0.8.20"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "crossbeam-utils",
        "purl": "pkg:cargo/crossbeam-utils@0.8.23",
        "version": "0.8.23"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "darling",
        "purl": "pkg:cargo/darling@0.24.1",
        "version": "0.24.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "darling_core",
        "purl": "pkg:cargo/darling_core@0.24.1",
        "version": "0.24.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "darling_macro",
        "purl": "pkg:cargo/darling_macro@0.24.1",
        "version": "0.24.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "dashmap",
        "purl": "pkg:cargo/dashmap@6.2.1",
        "version": "6.2.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "defmt",
        "purl": "pkg:cargo/defmt@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "defmt-macros",
        "purl": "pkg:cargo/defmt-macros@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "defmt-parser",
        "purl": "pkg:cargo/defmt-parser@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "deranged",
        "purl": "pkg:cargo/deranged@0.5.8",
        "version": "0.5.8"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "derive-where",
        "purl": "pkg:cargo/derive-where@1.6.1",
        "version": "1.6.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "dissimilar",
        "purl": "pkg:cargo/dissimilar@1.0.11",
        "version": "1.0.11"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "drop_bomb",
        "purl": "pkg:cargo/drop_bomb@0.1.5",
        "version": "0.1.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "dunce",
        "purl": "pkg:cargo/dunce@1.0.5",
        "version": "1.0.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "dyn-clone",
        "purl": "pkg:cargo/dyn-clone@1.0.20",
        "version": "1.0.20"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "either",
        "purl": "pkg:cargo/either@1.13.0",
        "version": "1.13.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "either",
        "purl": "pkg:cargo/either@1.19.0",
        "version": "1.19.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "embedded-io",
        "purl": "pkg:cargo/embedded-io@0.4.0",
        "version": "0.4.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "embedded-io",
        "purl": "pkg:cargo/embedded-io@0.6.1",
        "version": "0.6.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ena",
        "purl": "pkg:cargo/ena@0.14.4",
        "version": "0.14.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "encoding",
        "purl": "pkg:cargo/encoding@0.2.33",
        "version": "0.2.33"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "encoding-index-japanese",
        "purl": "pkg:cargo/encoding-index-japanese@1.20141219.5",
        "version": "1.20141219.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "encoding-index-korean",
        "purl": "pkg:cargo/encoding-index-korean@1.20141219.5",
        "version": "1.20141219.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "encoding-index-simpchinese",
        "purl": "pkg:cargo/encoding-index-simpchinese@1.20141219.5",
        "version": "1.20141219.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "encoding-index-singlebyte",
        "purl": "pkg:cargo/encoding-index-singlebyte@1.20141219.5",
        "version": "1.20141219.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "encoding-index-tradchinese",
        "purl": "pkg:cargo/encoding-index-tradchinese@1.20141219.5",
        "version": "1.20141219.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "encoding_index_tests",
        "purl": "pkg:cargo/encoding_index_tests@0.1.4",
        "version": "0.1.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "equivalent",
        "purl": "pkg:cargo/equivalent@1.0.2",
        "version": "1.0.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "figment",
        "purl": "pkg:cargo/figment@0.10.19",
        "version": "0.10.19"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "find-msvc-tools",
        "purl": "pkg:cargo/find-msvc-tools@0.1.12",
        "version": "0.1.12"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "find-msvc-tools",
        "purl": "pkg:cargo/find-msvc-tools@0.1.13",
        "version": "0.1.13"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "fixedbitset",
        "purl": "pkg:cargo/fixedbitset@0.5.7",
        "version": "0.5.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "flate2",
        "purl": "pkg:cargo/flate2@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "flate2",
        "purl": "pkg:cargo/flate2@1.1.9",
        "version": "1.1.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "foldhash",
        "purl": "pkg:cargo/foldhash@0.1.5",
        "version": "0.1.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "foldhash",
        "purl": "pkg:cargo/foldhash@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "fs-err",
        "purl": "pkg:cargo/fs-err@3.3.0",
        "version": "3.3.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "fsevent-sys",
        "purl": "pkg:cargo/fsevent-sys@4.1.0",
        "version": "4.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "fst",
        "purl": "pkg:cargo/fst@0.4.7",
        "version": "0.4.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "futures-core",
        "purl": "pkg:cargo/futures-core@0.3.34",
        "version": "0.3.34"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "futures-task",
        "purl": "pkg:cargo/futures-task@0.3.34",
        "version": "0.3.34"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "futures-util",
        "purl": "pkg:cargo/futures-util@0.3.34",
        "version": "0.3.34"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "getrandom",
        "purl": "pkg:cargo/getrandom@0.4.3",
        "version": "0.4.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "glob",
        "purl": "pkg:cargo/glob@0.3.4",
        "version": "0.3.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "globset",
        "purl": "pkg:cargo/globset@0.4.15",
        "version": "0.4.15"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "globset",
        "purl": "pkg:cargo/globset@0.4.18",
        "version": "0.4.18"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "hashbrown",
        "purl": "pkg:cargo/hashbrown@0.12.3",
        "version": "0.12.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "hashbrown",
        "purl": "pkg:cargo/hashbrown@0.14.5",
        "version": "0.14.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "hashbrown",
        "purl": "pkg:cargo/hashbrown@0.15.5",
        "version": "0.15.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "hashbrown",
        "purl": "pkg:cargo/hashbrown@0.17.1",
        "version": "0.17.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "hashlink",
        "purl": "pkg:cargo/hashlink@0.12.1",
        "version": "0.12.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "heck",
        "purl": "pkg:cargo/heck@0.5.0",
        "version": "0.5.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "hermit-abi",
        "purl": "pkg:cargo/hermit-abi@0.5.2",
        "version": "0.5.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "hex",
        "purl": "pkg:cargo/hex@0.4.3",
        "version": "0.4.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "iana-time-zone",
        "purl": "pkg:cargo/iana-time-zone@0.1.61",
        "version": "0.1.61"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "iana-time-zone",
        "purl": "pkg:cargo/iana-time-zone@0.1.65",
        "version": "0.1.65"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "iana-time-zone-haiku",
        "purl": "pkg:cargo/iana-time-zone-haiku@0.1.2",
        "version": "0.1.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ident_case",
        "purl": "pkg:cargo/ident_case@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "indexmap",
        "purl": "pkg:cargo/indexmap@1.9.3",
        "version": "1.9.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "indexmap",
        "purl": "pkg:cargo/indexmap@2.14.0",
        "version": "2.14.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "indexmap",
        "purl": "pkg:cargo/indexmap@2.14.2",
        "version": "2.14.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "inlinable_string",
        "purl": "pkg:cargo/inlinable_string@0.1.15",
        "version": "0.1.15"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "inotify",
        "purl": "pkg:cargo/inotify@0.11.5",
        "version": "0.11.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "inotify-sys",
        "purl": "pkg:cargo/inotify-sys@0.1.8",
        "version": "0.1.8"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "intrusive-collections",
        "purl": "pkg:cargo/intrusive-collections@0.10.3",
        "version": "0.10.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "inventory",
        "purl": "pkg:cargo/inventory@0.3.24",
        "version": "0.3.24"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "is_terminal_polyfill",
        "purl": "pkg:cargo/is_terminal_polyfill@1.70.1",
        "version": "1.70.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "is_terminal_polyfill",
        "purl": "pkg:cargo/is_terminal_polyfill@1.70.2",
        "version": "1.70.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "itertools",
        "purl": "pkg:cargo/itertools@0.15.0",
        "version": "0.15.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "itoa",
        "purl": "pkg:cargo/itoa@1.0.11",
        "version": "1.0.11"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "itoa",
        "purl": "pkg:cargo/itoa@1.0.14",
        "version": "1.0.14"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "itoa",
        "purl": "pkg:cargo/itoa@1.0.18",
        "version": "1.0.18"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "jiff",
        "purl": "pkg:cargo/jiff@0.2.37",
        "version": "0.2.37"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "jiff-core",
        "purl": "pkg:cargo/jiff-core@0.1.1",
        "version": "0.1.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "jiff-static",
        "purl": "pkg:cargo/jiff-static@0.2.37",
        "version": "0.2.37"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "jiff-tzdb",
        "purl": "pkg:cargo/jiff-tzdb@0.1.8",
        "version": "0.1.8"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "jiff-tzdb-platform",
        "purl": "pkg:cargo/jiff-tzdb-platform@0.1.3",
        "version": "0.1.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "jobserver",
        "purl": "pkg:cargo/jobserver@0.1.32",
        "version": "0.1.32"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "jobserver",
        "purl": "pkg:cargo/jobserver@0.1.35",
        "version": "0.1.35"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "jod-thread",
        "purl": "pkg:cargo/jod-thread@1.0.0",
        "version": "1.0.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "js-sys",
        "purl": "pkg:cargo/js-sys@0.3.103",
        "version": "0.3.103"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "js-sys",
        "purl": "pkg:cargo/js-sys@0.3.72",
        "version": "0.3.72"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "kqueue",
        "purl": "pkg:cargo/kqueue@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "kqueue-sys",
        "purl": "pkg:cargo/kqueue-sys@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "la-arena",
        "purl": "pkg:cargo/la-arena@0.3.1",
        "version": "0.3.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "lazy_static",
        "purl": "pkg:cargo/lazy_static@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "lazy_static",
        "purl": "pkg:cargo/lazy_static@1.5.1",
        "version": "1.5.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "libc",
        "purl": "pkg:cargo/libc@0.2.189",
        "version": "0.2.189"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "line-index",
        "purl": "pkg:cargo/line-index@0.1.2",
        "version": "0.1.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "lock_api",
        "purl": "pkg:cargo/lock_api@0.4.14",
        "version": "0.4.14"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "log",
        "purl": "pkg:cargo/log@0.3.9",
        "version": "0.3.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "log",
        "purl": "pkg:cargo/log@0.4.22",
        "version": "0.4.22"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "log",
        "purl": "pkg:cargo/log@0.4.25",
        "version": "0.4.25"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "log",
        "purl": "pkg:cargo/log@0.4.34",
        "version": "0.4.34"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "matchers",
        "purl": "pkg:cargo/matchers@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "memchr",
        "purl": "pkg:cargo/memchr@2.7.4",
        "version": "2.7.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "memchr",
        "purl": "pkg:cargo/memchr@2.8.3",
        "version": "2.8.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "memoffset",
        "purl": "pkg:cargo/memoffset@0.9.1",
        "version": "0.9.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "miniz_oxide",
        "purl": "pkg:cargo/miniz_oxide@0.8.5",
        "version": "0.8.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "miniz_oxide",
        "purl": "pkg:cargo/miniz_oxide@0.8.9",
        "version": "0.8.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "mio",
        "purl": "pkg:cargo/mio@1.2.3",
        "version": "1.2.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "miow",
        "purl": "pkg:cargo/miow@0.6.1",
        "version": "0.6.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "mustache",
        "purl": "pkg:cargo/mustache@0.9.0",
        "version": "0.9.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "nohash-hasher",
        "purl": "pkg:cargo/nohash-hasher@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "notify",
        "purl": "pkg:cargo/notify@8.2.0",
        "version": "8.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "notify-types",
        "purl": "pkg:cargo/notify-types@2.1.0",
        "version": "2.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "nu-ansi-term",
        "purl": "pkg:cargo/nu-ansi-term@0.50.3",
        "version": "0.50.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "num-conv",
        "purl": "pkg:cargo/num-conv@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "num-traits",
        "purl": "pkg:cargo/num-traits@0.2.19",
        "version": "0.2.19"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "num_cpus",
        "purl": "pkg:cargo/num_cpus@1.17.0",
        "version": "1.17.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "num_threads",
        "purl": "pkg:cargo/num_threads@0.1.7",
        "version": "0.1.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "once_cell",
        "purl": "pkg:cargo/once_cell@1.20.2",
        "version": "1.20.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "once_cell",
        "purl": "pkg:cargo/once_cell@1.20.3",
        "version": "1.20.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "once_cell",
        "purl": "pkg:cargo/once_cell@1.21.4",
        "version": "1.21.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "once_cell_polyfill",
        "purl": "pkg:cargo/once_cell_polyfill@1.70.2",
        "version": "1.70.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "oorandom",
        "purl": "pkg:cargo/oorandom@11.1.5",
        "version": "11.1.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "os_str_bytes",
        "purl": "pkg:cargo/os_str_bytes@7.2.0",
        "version": "7.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "parking_lot",
        "purl": "pkg:cargo/parking_lot@0.12.5",
        "version": "0.12.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "parking_lot_core",
        "purl": "pkg:cargo/parking_lot_core@0.9.12",
        "version": "0.9.12"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "pear",
        "purl": "pkg:cargo/pear@0.2.9",
        "version": "0.2.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "pear_codegen",
        "purl": "pkg:cargo/pear_codegen@0.2.9",
        "version": "0.2.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "perf-event",
        "purl": "pkg:cargo/perf-event@0.4.8",
        "version": "0.4.8"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "perf-event-open-sys",
        "purl": "pkg:cargo/perf-event-open-sys@4.0.0",
        "version": "4.0.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "petgraph",
        "purl": "pkg:cargo/petgraph@0.8.3",
        "version": "0.8.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "pin-project-lite",
        "purl": "pkg:cargo/pin-project-lite@0.2.15",
        "version": "0.2.15"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "pin-project-lite",
        "purl": "pkg:cargo/pin-project-lite@0.2.17",
        "version": "0.2.17"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "pkg-config",
        "purl": "pkg:cargo/pkg-config@0.3.33",
        "version": "0.3.33"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "pkg-config",
        "purl": "pkg:cargo/pkg-config@0.3.34",
        "version": "0.3.34"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "portable-atomic",
        "purl": "pkg:cargo/portable-atomic@1.15.0",
        "version": "1.15.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "portable-atomic-util",
        "purl": "pkg:cargo/portable-atomic-util@0.2.7",
        "version": "0.2.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "postcard",
        "purl": "pkg:cargo/postcard@1.1.3",
        "version": "1.1.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "powerfmt",
        "purl": "pkg:cargo/powerfmt@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "proc-macro2",
        "purl": "pkg:cargo/proc-macro2@1.0.107",
        "version": "1.0.107"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "proc-macro2",
        "purl": "pkg:cargo/proc-macro2@1.0.93",
        "version": "1.0.93"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "proc-macro2-diagnostics",
        "purl": "pkg:cargo/proc-macro2-diagnostics@0.10.1",
        "version": "0.10.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "quote",
        "purl": "pkg:cargo/quote@1.0.38",
        "version": "1.0.38"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "quote",
        "purl": "pkg:cargo/quote@1.0.45",
        "version": "1.0.45"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "quote",
        "purl": "pkg:cargo/quote@1.0.47",
        "version": "1.0.47"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "r-efi",
        "purl": "pkg:cargo/r-efi@6.0.0",
        "version": "6.0.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_abi",
        "purl": "pkg:cargo/ra-ap-rustc_abi@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_ast_ir",
        "purl": "pkg:cargo/ra-ap-rustc_ast_ir@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_hashes",
        "purl": "pkg:cargo/ra-ap-rustc_hashes@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_index",
        "purl": "pkg:cargo/ra-ap-rustc_index@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_index_macros",
        "purl": "pkg:cargo/ra-ap-rustc_index_macros@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_lexer",
        "purl": "pkg:cargo/ra-ap-rustc_lexer@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_next_trait_solver",
        "purl": "pkg:cargo/ra-ap-rustc_next_trait_solver@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_parse_format",
        "purl": "pkg:cargo/ra-ap-rustc_parse_format@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_pattern_analysis",
        "purl": "pkg:cargo/ra-ap-rustc_pattern_analysis@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_type_ir",
        "purl": "pkg:cargo/ra-ap-rustc_type_ir@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra-ap-rustc_type_ir_macros",
        "purl": "pkg:cargo/ra-ap-rustc_type_ir_macros@0.166.0",
        "version": "0.166.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_base_db",
        "purl": "pkg:cargo/ra_ap_base_db@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_cfg",
        "purl": "pkg:cargo/ra_ap_cfg@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_edition",
        "purl": "pkg:cargo/ra_ap_edition@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_hir",
        "purl": "pkg:cargo/ra_ap_hir@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_hir_def",
        "purl": "pkg:cargo/ra_ap_hir_def@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_hir_expand",
        "purl": "pkg:cargo/ra_ap_hir_expand@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_hir_ty",
        "purl": "pkg:cargo/ra_ap_hir_ty@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_ide_db",
        "purl": "pkg:cargo/ra_ap_ide_db@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_intern",
        "purl": "pkg:cargo/ra_ap_intern@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_load-cargo",
        "purl": "pkg:cargo/ra_ap_load-cargo@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_macros",
        "purl": "pkg:cargo/ra_ap_macros@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_mbe",
        "purl": "pkg:cargo/ra_ap_mbe@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_parser",
        "purl": "pkg:cargo/ra_ap_parser@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_paths",
        "purl": "pkg:cargo/ra_ap_paths@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_proc_macro_api",
        "purl": "pkg:cargo/ra_ap_proc_macro_api@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_profile",
        "purl": "pkg:cargo/ra_ap_profile@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_project_model",
        "purl": "pkg:cargo/ra_ap_project_model@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_span",
        "purl": "pkg:cargo/ra_ap_span@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_stdx",
        "purl": "pkg:cargo/ra_ap_stdx@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_syntax",
        "purl": "pkg:cargo/ra_ap_syntax@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_syntax-bridge",
        "purl": "pkg:cargo/ra_ap_syntax-bridge@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_test_fixture",
        "purl": "pkg:cargo/ra_ap_test_fixture@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_test_utils",
        "purl": "pkg:cargo/ra_ap_test_utils@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_toolchain",
        "purl": "pkg:cargo/ra_ap_toolchain@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_tt",
        "purl": "pkg:cargo/ra_ap_tt@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_vfs",
        "purl": "pkg:cargo/ra_ap_vfs@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ra_ap_vfs-notify",
        "purl": "pkg:cargo/ra_ap_vfs-notify@0.0.358",
        "version": "0.0.358"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rand",
        "purl": "pkg:cargo/rand@0.10.3",
        "version": "0.10.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rand_core",
        "purl": "pkg:cargo/rand_core@0.10.1",
        "version": "0.10.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rayon",
        "purl": "pkg:cargo/rayon@1.12.0",
        "version": "1.12.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rayon-core",
        "purl": "pkg:cargo/rayon-core@1.13.0",
        "version": "1.13.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "redox_syscall",
        "purl": "pkg:cargo/redox_syscall@0.5.18",
        "version": "0.5.18"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ref-cast",
        "purl": "pkg:cargo/ref-cast@1.0.26",
        "version": "1.0.26"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ref-cast-impl",
        "purl": "pkg:cargo/ref-cast-impl@1.0.26",
        "version": "1.0.26"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "regex",
        "purl": "pkg:cargo/regex@1.11.1",
        "version": "1.11.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "regex",
        "purl": "pkg:cargo/regex@1.13.1",
        "version": "1.13.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "regex-automata",
        "purl": "pkg:cargo/regex-automata@0.4.18",
        "version": "0.4.18"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "regex-automata",
        "purl": "pkg:cargo/regex-automata@0.4.9",
        "version": "0.4.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "regex-syntax",
        "purl": "pkg:cargo/regex-syntax@0.8.11",
        "version": "0.8.11"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "regex-syntax",
        "purl": "pkg:cargo/regex-syntax@0.8.5",
        "version": "0.8.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rowan",
        "purl": "pkg:cargo/rowan@0.17.0",
        "version": "0.17.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rustc-hash",
        "purl": "pkg:cargo/rustc-hash@1.1.0",
        "version": "1.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rustc-hash",
        "purl": "pkg:cargo/rustc-hash@2.1.3",
        "version": "2.1.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rustc-literal-escaper",
        "purl": "pkg:cargo/rustc-literal-escaper@0.0.7",
        "version": "0.0.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rustc-stable-hash",
        "purl": "pkg:cargo/rustc-stable-hash@0.1.2",
        "version": "0.1.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rustc_apfloat",
        "purl": "pkg:cargo/rustc_apfloat@0.2.3%2Bllvm-462a31f5a5ab",
        "version": "0.2.3+llvm-462a31f5a5ab"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rustversion",
        "purl": "pkg:cargo/rustversion@1.0.23",
        "version": "1.0.23"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "ryu",
        "purl": "pkg:cargo/ryu@1.0.18",
        "version": "1.0.18"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "ryu",
        "purl": "pkg:cargo/ryu@1.0.19",
        "version": "1.0.19"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ryu",
        "purl": "pkg:cargo/ryu@1.0.23",
        "version": "1.0.23"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "salsa",
        "purl": "pkg:cargo/salsa@0.28.5",
        "version": "0.28.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "salsa-macro-rules",
        "purl": "pkg:cargo/salsa-macro-rules@0.28.5",
        "version": "0.28.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "salsa-macros",
        "purl": "pkg:cargo/salsa-macros@0.28.5",
        "version": "0.28.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "same-file",
        "purl": "pkg:cargo/same-file@1.0.6",
        "version": "1.0.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "schemars",
        "purl": "pkg:cargo/schemars@0.9.0",
        "version": "0.9.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "schemars",
        "purl": "pkg:cargo/schemars@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "scopeguard",
        "purl": "pkg:cargo/scopeguard@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "semver",
        "purl": "pkg:cargo/semver@1.0.28",
        "version": "1.0.28"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "serde",
        "purl": "pkg:cargo/serde@1.0.217",
        "version": "1.0.217"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "serde",
        "purl": "pkg:cargo/serde@1.0.229",
        "version": "1.0.229"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "serde_core",
        "purl": "pkg:cargo/serde_core@1.0.229",
        "version": "1.0.229"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "serde_derive",
        "purl": "pkg:cargo/serde_derive@1.0.217",
        "version": "1.0.217"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "serde_derive",
        "purl": "pkg:cargo/serde_derive@1.0.229",
        "version": "1.0.229"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "serde_json",
        "purl": "pkg:cargo/serde_json@1.0.138",
        "version": "1.0.138"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "serde_json",
        "purl": "pkg:cargo/serde_json@1.0.151",
        "version": "1.0.151"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "serde_json",
        "purl": "pkg:cargo/serde_json@1.0.154",
        "version": "1.0.154"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "serde_spanned",
        "purl": "pkg:cargo/serde_spanned@1.1.2",
        "version": "1.1.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "serde_with",
        "purl": "pkg:cargo/serde_with@3.24.0",
        "version": "3.24.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "serde_with_macros",
        "purl": "pkg:cargo/serde_with_macros@3.24.0",
        "version": "3.24.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "serde_yaml",
        "purl": "pkg:cargo/serde_yaml@0.9.34%2Bdeprecated",
        "version": "0.9.34+deprecated"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "sharded-slab",
        "purl": "pkg:cargo/sharded-slab@0.1.7",
        "version": "0.1.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "shlex",
        "purl": "pkg:cargo/shlex@1.3.0",
        "version": "1.3.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "shlex",
        "purl": "pkg:cargo/shlex@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "simd-adler32",
        "purl": "pkg:cargo/simd-adler32@0.3.9",
        "version": "0.3.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "slab",
        "purl": "pkg:cargo/slab@0.4.12",
        "version": "0.4.12"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "smallvec",
        "purl": "pkg:cargo/smallvec@1.13.2",
        "version": "1.13.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "smallvec",
        "purl": "pkg:cargo/smallvec@1.14.0",
        "version": "1.14.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "smallvec",
        "purl": "pkg:cargo/smallvec@1.16.1",
        "version": "1.16.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "smol_str",
        "purl": "pkg:cargo/smol_str@0.3.6",
        "version": "0.3.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "stable_deref_trait",
        "purl": "pkg:cargo/stable_deref_trait@1.2.1",
        "version": "1.2.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "streaming-iterator",
        "purl": "pkg:cargo/streaming-iterator@0.1.9",
        "version": "0.1.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "strsim",
        "purl": "pkg:cargo/strsim@0.11.1",
        "version": "0.11.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "syn",
        "purl": "pkg:cargo/syn@2.0.119",
        "version": "2.0.119"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "syn",
        "purl": "pkg:cargo/syn@2.0.87",
        "version": "2.0.87"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "syn",
        "purl": "pkg:cargo/syn@2.0.98",
        "version": "2.0.98"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "syn",
        "purl": "pkg:cargo/syn@3.0.6",
        "version": "3.0.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "syn",
        "purl": "pkg:cargo/syn@3.0.9",
        "version": "3.0.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "synstructure",
        "purl": "pkg:cargo/synstructure@0.13.2",
        "version": "0.13.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "text-size",
        "purl": "pkg:cargo/text-size@1.1.1",
        "version": "1.1.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "thin-vec",
        "purl": "pkg:cargo/thin-vec@0.2.19",
        "version": "0.2.19"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "thiserror",
        "purl": "pkg:cargo/thiserror@1.0.69",
        "version": "1.0.69"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "thiserror",
        "purl": "pkg:cargo/thiserror@2.0.20",
        "version": "2.0.20"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "thiserror-impl",
        "purl": "pkg:cargo/thiserror-impl@1.0.69",
        "version": "1.0.69"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "thiserror-impl",
        "purl": "pkg:cargo/thiserror-impl@2.0.20",
        "version": "2.0.20"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "thread_local",
        "purl": "pkg:cargo/thread_local@1.1.10",
        "version": "1.1.10"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "thread_local",
        "purl": "pkg:cargo/thread_local@1.1.8",
        "version": "1.1.8"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "time",
        "purl": "pkg:cargo/time@0.3.55",
        "version": "0.3.55"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "time-core",
        "purl": "pkg:cargo/time-core@0.1.9",
        "version": "0.1.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "time-macros",
        "purl": "pkg:cargo/time-macros@0.2.32",
        "version": "0.2.32"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tinyvec",
        "purl": "pkg:cargo/tinyvec@1.13.3",
        "version": "1.13.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "toml",
        "purl": "pkg:cargo/toml@1.1.8%2Bspec-1.1.0",
        "version": "1.1.8+spec-1.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "toml_datetime",
        "purl": "pkg:cargo/toml_datetime@1.1.2%2Bspec-1.1.0",
        "version": "1.1.2+spec-1.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "toml_parser",
        "purl": "pkg:cargo/toml_parser@1.1.5%2Bspec-1.1.0",
        "version": "1.1.5+spec-1.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "toml_writer",
        "purl": "pkg:cargo/toml_writer@1.1.3%2Bspec-1.1.0",
        "version": "1.1.3+spec-1.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tracing",
        "purl": "pkg:cargo/tracing@0.1.44",
        "version": "0.1.44"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tracing-attributes",
        "purl": "pkg:cargo/tracing-attributes@0.1.31",
        "version": "0.1.31"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tracing-core",
        "purl": "pkg:cargo/tracing-core@0.1.36",
        "version": "0.1.36"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tracing-flame",
        "purl": "pkg:cargo/tracing-flame@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tracing-log",
        "purl": "pkg:cargo/tracing-log@0.2.0",
        "version": "0.2.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tracing-subscriber",
        "purl": "pkg:cargo/tracing-subscriber@0.3.23",
        "version": "0.3.23"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tracing-tree",
        "purl": "pkg:cargo/tracing-tree@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "tree-sitter",
        "purl": "pkg:cargo/tree-sitter@0.24.7",
        "version": "0.24.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "tree-sitter",
        "purl": "pkg:cargo/tree-sitter@0.26.13",
        "version": "0.26.13"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tree-sitter",
        "purl": "pkg:cargo/tree-sitter@0.26.9",
        "version": "0.26.9"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tree-sitter-embedded-template",
        "purl": "pkg:cargo/tree-sitter-embedded-template@0.25.0",
        "version": "0.25.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "tree-sitter-graph",
        "purl": "pkg:cargo/tree-sitter-graph@0.12.0",
        "version": "0.12.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "tree-sitter-json",
        "purl": "pkg:cargo/tree-sitter-json@0.23.0",
        "version": "0.23.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tree-sitter-json",
        "purl": "pkg:cargo/tree-sitter-json@0.24.8",
        "version": "0.24.8"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "tree-sitter-language",
        "purl": "pkg:cargo/tree-sitter-language@0.1.2",
        "version": "0.1.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "tree-sitter-language",
        "purl": "pkg:cargo/tree-sitter-language@0.1.5",
        "version": "0.1.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tree-sitter-language",
        "purl": "pkg:cargo/tree-sitter-language@0.1.7",
        "version": "0.1.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tree-sitter-python",
        "purl": "pkg:cargo/tree-sitter-python@0.25.0",
        "version": "0.25.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tree-sitter-ql",
        "purl": "pkg:cargo/tree-sitter-ql@0.23.1",
        "version": "0.23.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "tree-sitter-ql-dbscheme",
        "purl": "pkg:cargo/tree-sitter-ql-dbscheme@0.23.0",
        "version": "0.23.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "tree-sitter-ruby",
        "purl": "pkg:cargo/tree-sitter-ruby@0.23.1",
        "version": "0.23.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "triomphe",
        "purl": "pkg:cargo/triomphe@0.1.17",
        "version": "0.1.17"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "typed-arena",
        "purl": "pkg:cargo/typed-arena@2.0.2",
        "version": "2.0.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "typeid",
        "purl": "pkg:cargo/typeid@1.0.3",
        "version": "1.0.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "uncased",
        "purl": "pkg:cargo/uncased@0.9.10",
        "version": "0.9.10"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ungrammar",
        "purl": "pkg:cargo/ungrammar@1.16.1",
        "version": "1.16.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "unicode-ident",
        "purl": "pkg:cargo/unicode-ident@1.0.13",
        "version": "1.0.13"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "unicode-ident",
        "purl": "pkg:cargo/unicode-ident@1.0.16",
        "version": "1.0.16"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "unicode-ident",
        "purl": "pkg:cargo/unicode-ident@1.0.24",
        "version": "1.0.24"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "unicode-properties",
        "purl": "pkg:cargo/unicode-properties@0.1.4",
        "version": "0.1.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "unsafe-libyaml",
        "purl": "pkg:cargo/unsafe-libyaml@0.2.11",
        "version": "0.2.11"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "utf8parse",
        "purl": "pkg:cargo/utf8parse@0.2.2",
        "version": "0.2.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "valuable",
        "purl": "pkg:cargo/valuable@0.1.0",
        "version": "0.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "valuable",
        "purl": "pkg:cargo/valuable@0.1.1",
        "version": "0.1.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "version_check",
        "purl": "pkg:cargo/version_check@0.9.5",
        "version": "0.9.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "walkdir",
        "purl": "pkg:cargo/walkdir@2.5.0",
        "version": "2.5.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "wasi",
        "purl": "pkg:cargo/wasi@0.11.1%2Bwasi-snapshot-preview1",
        "version": "0.11.1+wasi-snapshot-preview1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "wasm-bindgen",
        "purl": "pkg:cargo/wasm-bindgen@0.2.126",
        "version": "0.2.126"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "wasm-bindgen",
        "purl": "pkg:cargo/wasm-bindgen@0.2.95",
        "version": "0.2.95"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "wasm-bindgen-backend",
        "purl": "pkg:cargo/wasm-bindgen-backend@0.2.95",
        "version": "0.2.95"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "wasm-bindgen-macro",
        "purl": "pkg:cargo/wasm-bindgen-macro@0.2.126",
        "version": "0.2.126"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "wasm-bindgen-macro",
        "purl": "pkg:cargo/wasm-bindgen-macro@0.2.95",
        "version": "0.2.95"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "wasm-bindgen-macro-support",
        "purl": "pkg:cargo/wasm-bindgen-macro-support@0.2.126",
        "version": "0.2.126"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "wasm-bindgen-macro-support",
        "purl": "pkg:cargo/wasm-bindgen-macro-support@0.2.95",
        "version": "0.2.95"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "wasm-bindgen-shared",
        "purl": "pkg:cargo/wasm-bindgen-shared@0.2.126",
        "version": "0.2.126"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "wasm-bindgen-shared",
        "purl": "pkg:cargo/wasm-bindgen-shared@0.2.95",
        "version": "0.2.95"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "winapi-util",
        "purl": "pkg:cargo/winapi-util@0.1.11",
        "version": "0.1.11"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "windows-core",
        "purl": "pkg:cargo/windows-core@0.52.0",
        "version": "0.52.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows-core",
        "purl": "pkg:cargo/windows-core@0.62.2",
        "version": "0.62.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows-implement",
        "purl": "pkg:cargo/windows-implement@0.60.2",
        "version": "0.60.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows-interface",
        "purl": "pkg:cargo/windows-interface@0.59.3",
        "version": "0.59.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows-link",
        "purl": "pkg:cargo/windows-link@0.2.1",
        "version": "0.2.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows-result",
        "purl": "pkg:cargo/windows-result@0.4.1",
        "version": "0.4.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows-strings",
        "purl": "pkg:cargo/windows-strings@0.5.1",
        "version": "0.5.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows-sys",
        "purl": "pkg:cargo/windows-sys@0.59.0",
        "version": "0.59.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows-sys",
        "purl": "pkg:cargo/windows-sys@0.60.2",
        "version": "0.60.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows-sys",
        "purl": "pkg:cargo/windows-sys@0.61.2",
        "version": "0.61.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows-targets",
        "purl": "pkg:cargo/windows-targets@0.52.6",
        "version": "0.52.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows-targets",
        "purl": "pkg:cargo/windows-targets@0.53.5",
        "version": "0.53.5"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows_aarch64_gnullvm",
        "purl": "pkg:cargo/windows_aarch64_gnullvm@0.52.6",
        "version": "0.52.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows_aarch64_gnullvm",
        "purl": "pkg:cargo/windows_aarch64_gnullvm@0.53.1",
        "version": "0.53.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows_aarch64_msvc",
        "purl": "pkg:cargo/windows_aarch64_msvc@0.52.6",
        "version": "0.52.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows_aarch64_msvc",
        "purl": "pkg:cargo/windows_aarch64_msvc@0.53.1",
        "version": "0.53.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows_i686_gnu",
        "purl": "pkg:cargo/windows_i686_gnu@0.52.6",
        "version": "0.52.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows_i686_gnu",
        "purl": "pkg:cargo/windows_i686_gnu@0.53.1",
        "version": "0.53.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows_i686_gnullvm",
        "purl": "pkg:cargo/windows_i686_gnullvm@0.52.6",
        "version": "0.52.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows_i686_gnullvm",
        "purl": "pkg:cargo/windows_i686_gnullvm@0.53.1",
        "version": "0.53.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows_i686_msvc",
        "purl": "pkg:cargo/windows_i686_msvc@0.52.6",
        "version": "0.52.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows_i686_msvc",
        "purl": "pkg:cargo/windows_i686_msvc@0.53.1",
        "version": "0.53.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows_x86_64_gnu",
        "purl": "pkg:cargo/windows_x86_64_gnu@0.52.6",
        "version": "0.52.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows_x86_64_gnu",
        "purl": "pkg:cargo/windows_x86_64_gnu@0.53.1",
        "version": "0.53.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows_x86_64_gnullvm",
        "purl": "pkg:cargo/windows_x86_64_gnullvm@0.52.6",
        "version": "0.52.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows_x86_64_gnullvm",
        "purl": "pkg:cargo/windows_x86_64_gnullvm@0.53.1",
        "version": "0.53.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "windows_x86_64_msvc",
        "purl": "pkg:cargo/windows_x86_64_msvc@0.52.6",
        "version": "0.52.6"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "windows_x86_64_msvc",
        "purl": "pkg:cargo/windows_x86_64_msvc@0.53.1",
        "version": "0.53.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "winnow",
        "purl": "pkg:cargo/winnow@0.7.13",
        "version": "0.7.13"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "winnow",
        "purl": "pkg:cargo/winnow@1.0.4",
        "version": "1.0.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "yansi",
        "purl": "pkg:cargo/yansi@1.0.1",
        "version": "1.0.1"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "zmij",
        "purl": "pkg:cargo/zmij@1.0.23",
        "version": "1.0.23"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "zstd",
        "purl": "pkg:cargo/zstd@0.13.3",
        "version": "0.13.3"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "zstd",
        "purl": "pkg:cargo/zstd@0.14.2",
        "version": "0.14.2"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "zstd-safe",
        "purl": "pkg:cargo/zstd-safe@7.2.4",
        "version": "7.2.4"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "zstd-safe",
        "purl": "pkg:cargo/zstd-safe@8.1.0",
        "version": "8.1.0"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "zstd-sys",
        "purl": "pkg:cargo/zstd-sys@2.0.16%2Bzstd.1.5.7",
        "version": "2.0.16+zstd.1.5.7"
      },
      {
        "ecosystem": "cargo",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "zstd-sys",
        "purl": "pkg:cargo/zstd-sys@2.1.1%2Bzstd.1.5.7",
        "version": "2.1.1+zstd.1.5.7"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/cache-query-compilation/action.yml",
        "name": "actions/cache",
        "purl": "pkg:github/actions/cache@v3",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/cache-query-compilation/action.yml",
        "name": "actions/cache/restore",
        "purl": "pkg:github/actions/cache@v3#restore",
        "version": "v3"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/update-rust-analyzer.lock.yml",
        "name": "actions/cache/restore",
        "purl": "pkg:github/actions/cache@v6.1.0#restore",
        "version": "v6.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/update-rust-analyzer.lock.yml",
        "name": "actions/cache/save",
        "purl": "pkg:github/actions/cache@v6.1.0#save",
        "version": "v6.1.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/buildifier.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v5",
        "version": "v5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/update-rust-analyzer.lock.yml",
        "name": "actions/checkout",
        "purl": "pkg:github/actions/checkout@v7.0.1",
        "version": "v7.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/label-external-contributions.yml",
        "name": "actions/create-github-app-token",
        "purl": "pkg:github/actions/create-github-app-token@v3.2.0",
        "version": "v3.2.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/ql-for-ql-dataset_measure.yml",
        "name": "actions/download-artifact",
        "purl": "pkg:github/actions/download-artifact@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/update-rust-analyzer.lock.yml",
        "name": "actions/download-artifact",
        "purl": "pkg:github/actions/download-artifact@v8.0.1",
        "version": "v8.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/actions/cache-query-compilation/action.yml",
        "name": "actions/github-script",
        "purl": "pkg:github/actions/github-script@v6",
        "version": "v6"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/update-rust-analyzer.lock.yml",
        "name": "actions/github-script",
        "purl": "pkg:github/actions/github-script@v9.0.0",
        "version": "v9.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/labeler.yml",
        "name": "actions/labeler",
        "purl": "pkg:github/actions/labeler@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "actions/setup-dotnet",
        "purl": "pkg:github/actions/setup-dotnet@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/update-rust-analyzer.lock.yml",
        "name": "actions/setup-node",
        "purl": "pkg:github/actions/setup-node@v7.0.0",
        "version": "v7.0.0"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/csv-coverage-pr-artifacts.yml",
        "name": "actions/setup-python",
        "purl": "pkg:github/actions/setup-python@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/python-tooling.yml",
        "name": "actions/setup-python",
        "purl": "pkg:github/actions/setup-python@v5",
        "version": "v5"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/close-stale.yml",
        "name": "actions/stale",
        "purl": "pkg:github/actions/stale@v9",
        "version": "v9"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/csv-coverage-metrics.yml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v4",
        "version": "v4"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/update-rust-analyzer.lock.yml",
        "name": "actions/upload-artifact",
        "purl": "pkg:github/actions/upload-artifact@v7.0.1",
        "version": "v7.0.1"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "github/codeql-action/analyze",
        "purl": "pkg:github/github/codeql-action@main#analyze",
        "version": "main"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/rust-analysis.yml",
        "name": "github/codeql-action/autobuild",
        "purl": "pkg:github/github/codeql-action@main#autobuild",
        "version": "main"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/codeql-analysis.yml",
        "name": "github/codeql-action/init",
        "purl": "pkg:github/github/codeql-action@main#init",
        "version": "main"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/ql-for-ql-build.yml",
        "name": "github/codeql-action/setup-codeql",
        "purl": "pkg:github/github/codeql-action@main#setup-codeql",
        "version": "main"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/csv-coverage-metrics.yml",
        "name": "github/codeql-action/upload-sarif",
        "purl": "pkg:github/github/codeql-action@main#upload-sarif",
        "version": "main"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/update-rust-analyzer.lock.yml",
        "name": "github/gh-aw-actions/setup",
        "purl": "pkg:github/github/gh-aw-actions@v0.88.7#setup",
        "version": "v0.88.7"
      },
      {
        "ecosystem": "github",
        "licenses": [],
        "location": ".github/workflows/buildifier.yml",
        "name": "pre-commit/action",
        "purl": "pkg:github/pre-commit/action@646c83fcd040023954eafda54b4db0192ce70507",
        "version": "646c83fcd040023954eafda54b4db0192ce70507"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go/extractor/go.mod",
        "name": "github.com/davecgh/go-spew",
        "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.1",
        "version": "v1.1.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go/extractor/go.mod",
        "name": "github.com/pmezard/go-difflib",
        "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.0",
        "version": "v1.0.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go/extractor/go.mod",
        "name": "github.com/stretchr/testify",
        "purl": "pkg:golang/github.com/stretchr/testify@v1.11.1",
        "version": "v1.11.1"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go/extractor/go.mod",
        "name": "golang.org/x/mod",
        "purl": "pkg:golang/golang.org/x/mod@v0.42.0",
        "version": "v0.42.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go/extractor/go.mod",
        "name": "golang.org/x/sync",
        "purl": "pkg:golang/golang.org/x/sync@v0.24.0",
        "version": "v0.24.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go/extractor/go.mod",
        "name": "golang.org/x/sys",
        "purl": "pkg:golang/golang.org/x/sys@v0.49.0",
        "version": "v0.49.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go/extractor/go.mod",
        "name": "golang.org/x/tools",
        "purl": "pkg:golang/golang.org/x/tools@v0.52.0",
        "version": "v0.52.0"
      },
      {
        "ecosystem": "golang",
        "licenses": [],
        "location": "go/extractor/go.mod",
        "name": "gopkg.in/yaml.v3",
        "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1",
        "version": "v3.0.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "javascript/extractor/lib/typescript/package-lock.json",
        "name": "@types/node",
        "purl": "pkg:npm/%40types/node@24.3.1",
        "version": "24.3.1"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "javascript/extractor/lib/typescript/package-lock.json",
        "name": "typescript",
        "purl": "pkg:npm/typescript@5.9.2",
        "version": "5.9.2"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "javascript/extractor/lib/typescript/package-lock.json",
        "name": "typescript-parser-wrapper",
        "purl": "pkg:npm/typescript-parser-wrapper",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "npm",
        "licenses": [],
        "location": "javascript/extractor/lib/typescript/package-lock.json",
        "name": "undici-types",
        "purl": "pkg:npm/undici-types@7.10.0",
        "version": "7.10.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "colorama",
        "purl": "pkg:pypi/colorama@0.4.6",
        "version": "0.4.6"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "exceptiongroup",
        "purl": "pkg:pypi/exceptiongroup@1.2.2",
        "version": "1.2.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "importlib-metadata",
        "purl": "pkg:pypi/importlib-metadata@6.7.0",
        "version": "6.7.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "misc/codegen/requirements_lock.txt",
        "name": "inflection",
        "purl": "pkg:pypi/inflection@0.5.1",
        "version": "0.5.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "misc/codegen/requirements_lock.txt",
        "name": "iniconfig",
        "purl": "pkg:pypi/iniconfig@2.0.0",
        "version": "2.0.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "packaging",
        "purl": "pkg:pypi/packaging@23.2",
        "version": "23.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "misc/codegen/requirements_lock.txt",
        "name": "packaging",
        "purl": "pkg:pypi/packaging@24.2",
        "version": "24.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "pluggy",
        "purl": "pkg:pypi/pluggy@1.2.0",
        "version": "1.2.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "misc/codegen/requirements_lock.txt",
        "name": "pluggy",
        "purl": "pkg:pypi/pluggy@1.5.0",
        "version": "1.5.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "misc/codegen/requirements_lock.txt",
        "name": "pygments",
        "purl": "pkg:pypi/pygments@2.20.0",
        "version": "2.20.0"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "misc/codegen/requirements_lock.txt",
        "name": "pystache",
        "purl": "pkg:pypi/pystache@0.6.8",
        "version": "0.6.8"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "pytest",
        "purl": "pkg:pypi/pytest@7.4.4",
        "version": "7.4.4"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "misc/codegen/requirements_lock.txt",
        "name": "pytest",
        "purl": "pkg:pypi/pytest@9.1.1",
        "version": "9.1.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "pytest-mock",
        "purl": "pkg:pypi/pytest-mock@3.11.1",
        "version": "3.11.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "pyyaml",
        "purl": "pkg:pypi/pyyaml@6.0.1",
        "version": "6.0.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "misc/codegen/requirements_lock.txt",
        "name": "pyyaml",
        "purl": "pkg:pypi/pyyaml@6.0.2",
        "version": "6.0.2"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "tomli",
        "purl": "pkg:pypi/tomli@2.0.1",
        "version": "2.0.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "misc/codegen/requirements_lock.txt",
        "name": "toposort",
        "purl": "pkg:pypi/toposort@1.10",
        "version": "1.10"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "typing-extensions",
        "purl": "pkg:pypi/typing-extensions@4.7.1",
        "version": "4.7.1"
      },
      {
        "ecosystem": "pypi",
        "licenses": [],
        "location": "python/extractor/poetry.lock",
        "name": "zipp",
        "purl": "pkg:pypi/zipp@3.15.0",
        "version": "3.15.0"
      },
      {
        "ecosystem": "swift",
        "licenses": [],
        "location": "unified/swift-syntax-rs/schemagen/Package.resolved",
        "name": "swift-syntax",
        "purl": "pkg:swift/github.com/swiftlang/swift-syntax@603.0.2",
        "version": "603.0.2"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/ql-for-ql-build.yml",
        "name": "./.github/actions/cache-query-compilation",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/check-qldoc.yml",
        "name": "./.github/actions/fetch-codeql",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/ql-for-ql-build.yml",
        "name": "./.github/actions/os-version",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/mad_modelDiff.yml",
        "name": "./codeql-main/.github/actions/fetch-codeql",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/query-list.yml",
        "name": "./codeql/.github/actions/fetch-codeql",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/csharp-qltest.yml",
        "name": "./csharp/actions/create-extractor-pack",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/go-tests.yml",
        "name": "./go/actions/test",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/csv-coverage-pr-artifacts.yml",
        "name": "./merge/.github/actions/fetch-codeql",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/csv-coverage-update.yml",
        "name": "./ql/.github/actions/fetch-codeql",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": ".github/workflows/csv-coverage-timeseries.yml",
        "name": "./script/.github/actions/fetch-codeql",
        "purl": "",
        "version": "UNKNOWN"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "ast-generator",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "buramu",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "codeql-autobuilder-rust",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "codeql-extractor",
        "purl": "",
        "version": "0.2.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "codeql-extractor-ql",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "codeql-extractor-ruby",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "codeql-extractor-unified",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "codeql-rust",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "rust-extractor-macros",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "swift-syntax-rs",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "ql/Cargo.lock",
        "name": "tree-sitter-blame",
        "purl": "",
        "version": "0.0.1"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "tsg-python",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "python/extractor/tsg-python/Cargo.lock",
        "name": "tsp",
        "purl": "",
        "version": "0.19.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "yeast",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "yeast-macros",
        "purl": "",
        "version": "0.1.0"
      },
      {
        "ecosystem": "unknown",
        "licenses": [],
        "location": "Cargo.lock",
        "name": "yeast-schema",
        "purl": "",
        "version": "0.1.0"
      }
    ],
    "description": "Analyze code semantically with GitHub's query engine",
    "errors": [],
    "excluded_matches": {
      "action reference to a moving tag or branch": 1
    },
    "id": "github__codeql",
    "manifests": [
      ".github/actions/cache-query-compilation/action.yml",
      ".github/actions/fetch-codeql/action.yml",
      ".github/actions/os-version/action.yml",
      ".github/workflows/buildifier.yml",
      ".github/workflows/check-change-note.yml",
      ".github/workflows/check-implicit-this.yml",
      ".github/workflows/check-overlay-annotations.yml",
      ".github/workflows/check-qldoc.yml",
      ".github/workflows/check-query-ids.yml",
      ".github/workflows/close-stale.yml",
      ".github/workflows/codeql-analysis.yml",
      ".github/workflows/cpp-swift-analysis.yml",
      ".github/workflows/csharp-qltest.yml",
      ".github/workflows/csv-coverage-metrics.yml",
      ".github/workflows/csv-coverage-pr-artifacts.yml",
      ".github/workflows/csv-coverage-pr-comment.yml",
      ".github/workflows/csv-coverage-timeseries.yml",
      ".github/workflows/csv-coverage-update.yml",
      ".github/workflows/csv-coverage.yml",
      ".github/workflows/fast-forward.yml",
      ".github/workflows/go-tests.yml",
      ".github/workflows/go-version-update.yml",
      ".github/workflows/kotlin-build.yml",
      ".github/workflows/label-external-contributions.yml",
      ".github/workflows/labeler.yml",
      ".github/workflows/mad_modelDiff.yml",
      ".github/workflows/mad_regenerate-models.yml",
      ".github/workflows/post-pr-comment.yml",
      ".github/workflows/python-tooling.yml",
      ".github/workflows/qhelp-pr-preview.yml",
      ".github/workflows/ql-for-ql-build.yml",
      ".github/workflows/ql-for-ql-dataset_measure.yml",
      ".github/workflows/ql-for-ql-tests.yml",
      ".github/workflows/query-list.yml",
      ".github/workflows/rust-analysis.yml",
      ".github/workflows/rust.yml",
      ".github/workflows/swift.yml",
      ".github/workflows/sync-files.yml",
      ".github/workflows/tree-sitter-extractor-test.yml",
      ".github/workflows/update-rust-analyzer.lock.yml",
      ".github/workflows/validate-change-notes.yml",
      ".github/workflows/yeast-test.yml",
      ".github/workflows/zipmerge-test.yml",
      "Cargo.lock",
      "Cargo.toml",
      "csharp/actions/create-extractor-pack/action.yml",
      "csharp/autobuilder/Semmle.Autobuild.CSharp/Semmle.Autobuild.CSharp.csproj",
      "csharp/autobuilder/Semmle.Autobuild.Cpp/Semmle.Autobuild.Cpp.csproj",
      "csharp/autobuilder/Semmle.Autobuild.Shared/Semmle.Autobuild.Shared.csproj",
      "csharp/extractor/Semmle.Extraction.CSharp.DependencyFetching/Semmle.Extraction.CSharp.DependencyFetching.csproj",
      "csharp/extractor/Semmle.Extraction.CSharp.DependencyStubGenerator/Semmle.Extraction.CSharp.DependencyStubGenerator.csproj",
      "csharp/extractor/Semmle.Extraction.CSharp.Driver/Semmle.Extraction.CSharp.Driver.csproj",
      "csharp/extractor/Semmle.Extraction.CSharp.Standalone/Semmle.Extraction.CSharp.Standalone.csproj",
      "csharp/extractor/Semmle.Extraction.CSharp.StubGenerator/Semmle.Extraction.CSharp.StubGenerator.csproj",
      "csharp/extractor/Semmle.Extraction.CSharp.Util/Semmle.Extraction.CSharp.Util.csproj",
      "csharp/extractor/Semmle.Extraction.CSharp/Semmle.Extraction.CSharp.csproj",
      "csharp/extractor/Semmle.Util/Semmle.Util.csproj",
      "go/extractor/go.mod",
      "go/extractor/go.sum",
      "java/kotlin-extractor/build.gradle",
      "javascript/extractor/lib/typescript/package-lock.json",
      "javascript/extractor/lib/typescript/package.json",
      "misc/codegen/requirements_in.txt",
      "misc/codegen/requirements_lock.txt",
      "python/extractor/poetry.lock",
      "python/extractor/pyproject.toml",
      "python/extractor/setup.py",
      "python/extractor/tsg-python/Cargo.lock",
      "python/extractor/tsg-python/Cargo.toml",
      "python/extractor/tsg-python/tsp/Cargo.toml",
      "python/extractor/tsg-python/tsp/package.json",
      "python/tools/recorded-call-graph-metrics/requirements.txt",
      "python/tools/recorded-call-graph-metrics/setup.py",
      "ql/Cargo.lock",
      "ql/Cargo.toml",
      "ql/buramu/Cargo.toml",
      "ql/buramu/tree-sitter-blame/Cargo.toml",
      "ql/buramu/tree-sitter-blame/package.json",
      "ql/extractor/Cargo.toml",
      "ruby/actions/create-extractor-pack/action.yml",
      "ruby/extractor/Cargo.toml",
      "rust/ast-generator/Cargo.toml",
      "rust/autobuild/Cargo.toml",
      "rust/extractor/Cargo.toml",
      "rust/extractor/macros/Cargo.toml",
      "shared/tree-sitter-extractor/Cargo.toml",
      "shared/yeast-macros/Cargo.toml",
      "shared/yeast-schema/Cargo.toml",
      "shared/yeast/Cargo.toml",
      "unified/extractor-unsupported-os/Cargo.toml",
      "unified/extractor/Cargo.toml",
      "unified/swift-syntax-rs/Cargo.toml",
      "unified/swift-syntax-rs/schemagen/Package.resolved",
      "unified/swift-syntax-rs/swift/Package.resolved"
    ],
    "name": "codeql",
    "osv": {
      "advisories": 36,
      "available": true,
      "confirmed": 2,
      "osv_only": [
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2021-0153"
          ],
          "package": "encoding",
          "score": "",
          "severity": "Unknown",
          "version": "0.2.33"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2024-0449"
          ],
          "package": "unsafe-libyaml",
          "score": "",
          "severity": "Unknown",
          "version": "0.2.11"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0391"
          ],
          "package": "zstd",
          "score": "",
          "severity": "Unknown",
          "version": "0.14.2"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0395"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0396"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0397"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0398"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0399"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0400"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0401"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0402"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0403"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0404"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0405"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0406"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "8.1.0"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0410"
          ],
          "package": "zstd-sys",
          "score": "",
          "severity": "Unknown",
          "version": "2.1.1+zstd.1.5.7"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0190"
          ],
          "package": "anyhow",
          "score": "",
          "severity": "Unknown",
          "version": "1.0.95"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0204"
          ],
          "package": "crossbeam-epoch",
          "score": "",
          "severity": "Unknown",
          "version": "0.9.18"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2021-0153"
          ],
          "package": "encoding",
          "score": "",
          "severity": "Unknown",
          "version": "0.2.33"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2024-0449"
          ],
          "package": "unsafe-libyaml",
          "score": "",
          "severity": "Unknown",
          "version": "0.2.11"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0391"
          ],
          "package": "zstd",
          "score": "",
          "severity": "Unknown",
          "version": "0.13.3"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0395"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0396"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0397"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0398"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0399"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0400"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0401"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0402"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0403"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0404"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0405"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0406"
          ],
          "package": "zstd-safe",
          "score": "",
          "severity": "Unknown",
          "version": "7.2.4"
        },
        {
          "ecosystem": "crates.io",
          "ids": [
            "RUSTSEC-2026-0410"
          ],
          "package": "zstd-sys",
          "score": "",
          "severity": "Unknown",
          "version": "2.0.16+zstd.1.5.7"
        }
      ],
      "warning": null
    },
    "ref": "main",
    "ref_kind": "default-branch",
    "released_at": null,
    "repository": "github/codeql",
    "sbomlyze_diff": {
      "added": 2,
      "changed": 2,
      "drift": {
        "integrity_drift": 0,
        "metadata_drift": 0,
        "version_drift": 2
      },
      "findings": [
        "Attack surface: -187 packages (-21.2%)",
        "maven ecosystem entirely removed (62 \u2192 0 packages)",
        "1 version upgrades (1 major) among 759 shared packages",
        "Core system packages stable: cargo (481), pypi (21) unchanged"
      ],
      "html": "sbomlyze-diff.html",
      "removed": 122
    },
    "scanned_at": "2026-11-02T03:07:16+00:00",
    "scorecard": {
      "checks": [
        {
          "name": "Binary-Artifacts",
          "reason": "binaries present in source code",
          "score": 0
        },
        {
          "name": "CII-Best-Practices",
          "reason": "no effort to earn an OpenSSF best practices badge detected",
          "score": 0
        },
        {
          "name": "Fuzzing",
          "reason": "project is not fuzzed",
          "score": 0
        },
        {
          "name": "Token-Permissions",
          "reason": "detected GitHub workflow tokens with excessive permissions",
          "score": 0
        },
        {
          "name": "Pinned-Dependencies",
          "reason": "dependency not pinned by hash detected -- score normalized to 3",
          "score": 3
        },
        {
          "name": "Branch-Protection",
          "reason": "branch protection is not maximal on development and all release branches",
          "score": 4
        },
        {
          "name": "Code-Review",
          "reason": "all changesets reviewed",
          "score": 10
        },
        {
          "name": "Dangerous-Workflow",
          "reason": "no dangerous workflow patterns detected",
          "score": 10
        },
        {
          "name": "License",
          "reason": "license file detected",
          "score": 10
        },
        {
          "name": "Maintained",
          "reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
          "score": 10
        },
        {
          "name": "SAST",
          "reason": "SAST tool is run on all commits",
          "score": 10
        },
        {
          "name": "Security-Policy",
          "reason": "security policy file detected",
          "score": 10
        },
        {
          "name": "Packaging",
          "reason": "packaging workflow not detected",
          "score": -1
        },
        {
          "name": "Signed-Releases",
          "reason": "no releases found",
          "score": -1
        }
      ],
      "date": "2026-10-19",
      "score": 5.8,
      "source": "openssf-api",
      "version": "v5.6.0"
    },
    "vulnerabilities": [
      {
        "aliases": [
          "CVE-2025-71176"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2025-71176",
          "percentile": 0.0448,
          "score": 0.00154
        },
        "fix_state": "fixed",
        "fixed_in": [
          "9.0.3"
        ],
        "id": "GHSA-6w46-j5rx-g56g",
        "kev": null,
        "location": "python/extractor/poetry.lock",
        "osv_confirmed": true,
        "package": "pytest",
        "severity": "Medium",
        "summary": "pytest has vulnerable tmpdir handling",
        "url": "https://github.com/advisories/GHSA-6w46-j5rx-g56g",
        "version": "7.4.4"
      },
      {
        "aliases": [
          "CVE-2024-5569"
        ],
        "ecosystem": "pypi",
        "epss": {
          "cve": "CVE-2024-5569",
          "percentile": 0.14612,
          "score": 0.00236
        },
        "fix_state": "fixed",
        "fixed_in": [
          "3.19.1"
        ],
        "id": "GHSA-jfmj-5v4g-7637",
        "kev": null,
        "location": "python/extractor/poetry.lock",
        "osv_confirmed": true,
        "package": "zipp",
        "severity": "Medium",
        "summary": "zipp Denial of Service vulnerability",
        "url": "https://github.com/advisories/GHSA-jfmj-5v4g-7637",
        "version": "3.15.0"
      }
    ],
    "workflow_audit": {
      "files": 45,
      "findings": [
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/actions/cache-query-compilation/action.yml",
          "line": 26,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/actions/cache-query-compilation/action.yml",
          "line": 38,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/actions/cache-query-compilation/action.yml",
          "line": 56,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/buildifier.yml",
          "line": 19,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/check-implicit-this.yml",
          "line": 19,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/check-overlay-annotations.yml",
          "line": 20,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/check-qldoc.yml",
          "line": 21,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/check-query-ids.yml",
          "line": 22,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/close-stale.yml",
          "line": 18,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/codeql-analysis.yml",
          "line": 34,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/codeql-analysis.yml",
          "line": 39,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/codeql-analysis.yml",
          "line": 43,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/codeql-analysis.yml",
          "line": 66,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/cpp-swift-analysis.yml",
          "line": 30,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/cpp-swift-analysis.yml",
          "line": 34,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/cpp-swift-analysis.yml",
          "line": 52,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csharp-qltest.yml",
          "line": 50,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csharp-qltest.yml",
          "line": 51,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csharp-qltest.yml",
          "line": 66,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-metrics.yml",
          "line": 25,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-metrics.yml",
          "line": 40,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-metrics.yml",
          "line": 45,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-metrics.yml",
          "line": 53,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-metrics.yml",
          "line": 67,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-metrics.yml",
          "line": 72,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-artifacts.yml",
          "line": 37,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-artifacts.yml",
          "line": 41,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-artifacts.yml",
          "line": 50,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-artifacts.yml",
          "line": 73,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-artifacts.yml",
          "line": 80,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-artifacts.yml",
          "line": 87,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-artifacts.yml",
          "line": 99,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-artifacts.yml",
          "line": 119,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "Medium",
          "description": "use of fundamentally insecure workflow trigger",
          "file": ".github/workflows/csv-coverage-pr-comment.yml",
          "line": 3,
          "note": "this workflow",
          "rule": "dangerous-triggers",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#dangerous-triggers"
        },
        {
          "confidence": "High",
          "description": "unsound conditional expression",
          "file": ".github/workflows/csv-coverage-pr-comment.yml",
          "line": 14,
          "note": "this job",
          "rule": "unsound-condition",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unsound-condition"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-comment.yml",
          "line": 26,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-pr-comment.yml",
          "line": 28,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-timeseries.yml",
          "line": 14,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-timeseries.yml",
          "line": 18,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-timeseries.yml",
          "line": 23,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-timeseries.yml",
          "line": 32,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-update.yml",
          "line": 23,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage-update.yml",
          "line": 28,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage.yml",
          "line": 18,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage.yml",
          "line": 22,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage.yml",
          "line": 27,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage.yml",
          "line": 36,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/csv-coverage.yml",
          "line": 41,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/fast-forward.yml",
          "line": 28,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/go-tests.yml",
          "line": 28,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/go-version-update.yml",
          "line": 19,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/kotlin-build.yml",
          "line": 23,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/labeler.yml",
          "line": 33,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/labeler.yml",
          "line": 140,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/mad_modelDiff.yml",
          "line": 30,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/mad_modelDiff.yml",
          "line": 35,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/mad_modelDiff.yml",
          "line": 102,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/mad_modelDiff.yml",
          "line": 107,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/mad_regenerate-models.yml",
          "line": 32,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/mad_regenerate-models.yml",
          "line": 36,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/mad_regenerate-models.yml",
          "line": 62,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "Medium",
          "description": "use of fundamentally insecure workflow trigger",
          "file": ".github/workflows/post-pr-comment.yml",
          "line": 6,
          "note": "this workflow",
          "rule": "dangerous-triggers",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#dangerous-triggers"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/python-tooling.yml",
          "line": 24,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/python-tooling.yml",
          "line": 25,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/qhelp-pr-preview.yml",
          "line": 39,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/qhelp-pr-preview.yml",
          "line": 46,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/qhelp-pr-preview.yml",
          "line": 80,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/qhelp-pr-preview.yml",
          "line": 97,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-build.yml",
          "line": 22,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-build.yml",
          "line": 25,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-build.yml",
          "line": 33,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-build.yml",
          "line": 41,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-build.yml",
          "line": 72,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-build.yml",
          "line": 77,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-build.yml",
          "line": 86,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "line": 26,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "line": 28,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "line": 33,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "line": 44,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "line": 64,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "line": 74,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "line": 75,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "line": 82,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-tests.yml",
          "line": 27,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-tests.yml",
          "line": 28,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-tests.yml",
          "line": 35,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-tests.yml",
          "line": 67,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-tests.yml",
          "line": 73,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/ql-for-ql-tests.yml",
          "line": 80,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/query-list.yml",
          "line": 25,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/query-list.yml",
          "line": 29,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/query-list.yml",
          "line": 39,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/rust-analysis.yml",
          "line": 37,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/rust-analysis.yml",
          "line": 53,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/rust-analysis.yml",
          "line": 60,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/rust-analysis.yml",
          "line": 63,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/rust.yml",
          "line": 35,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/rust.yml",
          "line": 58,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/rust.yml",
          "line": 74,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/swift.yml",
          "line": 43,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/swift.yml",
          "line": 60,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/swift.yml",
          "line": 61,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/swift.yml",
          "line": 71,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/swift.yml",
          "line": 80,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/swift.yml",
          "line": 87,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/sync-files.yml",
          "line": 20,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tree-sitter-extractor-test.yml",
          "line": 33,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tree-sitter-extractor-test.yml",
          "line": 41,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/tree-sitter-extractor-test.yml",
          "line": 47,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/validate-change-notes.yml",
          "line": 25,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/yeast-test.yml",
          "line": 30,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": ".github/workflows/zipmerge-test.yml",
          "line": 21,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": "csharp/actions/create-extractor-pack/action.yml",
          "line": 7,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": "ruby/actions/create-extractor-pack/action.yml",
          "line": 8,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "unpinned action reference",
          "file": "ruby/actions/create-extractor-pack/action.yml",
          "line": 14,
          "note": "this step",
          "rule": "unpinned-uses",
          "severity": "High",
          "url": "https://docs.zizmor.sh/audits/#unpinned-uses"
        },
        {
          "confidence": "High",
          "description": "overly broad permissions",
          "file": ".github/workflows/csv-coverage-metrics.yml",
          "line": 19,
          "note": "security-events: write is overly broad at the workflow level",
          "rule": "excessive-permissions",
          "severity": "Medium",
          "url": "https://docs.zizmor.sh/audits/#excessive-permissions"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/check-qldoc.yml",
          "line": 25,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/csharp-qltest.yml",
          "line": 67,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/csv-coverage-metrics.yml",
          "line": 27,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/csv-coverage-metrics.yml",
          "line": 55,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/csv-coverage-pr-artifacts.yml",
          "line": 54,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/csv-coverage-timeseries.yml",
          "line": 27,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/csv-coverage-update.yml",
          "line": 32,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/csv-coverage.yml",
          "line": 31,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/go-tests.yml",
          "line": 30,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/mad_modelDiff.yml",
          "line": 40,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "ad-hoc installation of packages",
          "file": ".github/workflows/mad_modelDiff.yml",
          "line": 86,
          "note": "this step",
          "rule": "adhoc-packages",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#adhoc-packages"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/mad_regenerate-models.yml",
          "line": 34,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/qhelp-pr-preview.yml",
          "line": 50,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/ql-for-ql-build.yml",
          "line": 31,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/ql-for-ql-build.yml",
          "line": 55,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/ql-for-ql-dataset_measure.yml",
          "line": 32,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/ql-for-ql-tests.yml",
          "line": 34,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/ql-for-ql-tests.yml",
          "line": 49,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/ql-for-ql-tests.yml",
          "line": 79,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/query-list.yml",
          "line": 33,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/rust.yml",
          "line": 76,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/swift.yml",
          "line": 72,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/update-rust-analyzer.lock.yml",
          "line": 465,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": ".github/workflows/validate-change-notes.yml",
          "line": 28,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": "csharp/actions/create-extractor-pack/action.yml",
          "line": 6,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        },
        {
          "confidence": "High",
          "description": "use GitHub's dedicated self-repository syntax",
          "file": "ruby/actions/create-extractor-pack/action.yml",
          "line": 7,
          "note": "this step",
          "rule": "self-repository",
          "severity": "Low",
          "url": "https://docs.zizmor.sh/audits/#self-repository"
        }
      ]
    }
  },
  "updated": "2026-11-02"
}