{ "history": [ { "added": 0, "commit": "2a082d0896bcd990b54b7338a1e69acde6c5c929", "date": "2026-11-01", "dependencies": 606, "errors": [], "fixable": 71, "go_version": "go1.26.6", "in_binary": { "dependencies": 3, "stdlib": 13, "total": 16 }, "new_vulnerabilities": 0, "osv_confirmed": 72, "osv_only": 28, "ref": "v0.3.42", "release_changed": false, "release_integrity": "verified", "removed": 0, "resolved_vulnerabilities": 0, "scorecard": null, "upgraded": 0, "vulnerabilities": { "Critical": 4, "High": 26, "Low": 12, "Medium": 28, "Negligible": 0, "Unknown": 2 }, "workflow": { "High": 19, "Low": 11, "Medium": 7, "files": 97 } }, { "added": 486, "commit": "2a082d0896bcd990b54b7338a1e69acde6c5c929", "date": "2026-11-02", "dependencies": 1092, "errors": [], "fixable": 104, "go_version": "go1.26.6", "in_binary": { "dependencies": 3, "stdlib": 13, "total": 16 }, "kev": 0, "kev_new": 0, "new_vulnerabilities": 28, "osv_confirmed": 105, "osv_only": 0, "ref": "v0.3.42", "release_changed": false, "release_integrity": "verified", "removed": 0, "resolved_vulnerabilities": 0, "scorecard": null, "scorecard_date": null, "scorecard_note": "the OpenSSF public dataset entry is 197 days old (limit 30); the Scorecard CLI fallback was skipped because this shard's weekly budget was used", "scorecard_source": null, "upgraded": 0, "vulnerabilities": { "Critical": 5, "High": 41, "Low": 13, "Medium": 44, "Negligible": 0, "Unknown": 2 }, "vulnerable_packages": 30, "workflow": { "High": 19, "Low": 11, "Medium": 7, "files": 97 } } ], "latest": { "archived": false, "category": "Kubernetes Security", "changes": { "added": [ "@adobe/css-tools@4.5.0", "@alloc/quick-lru@5.2.0", "@axe-core/playwright@4.13.0", "@babel/code-frame@7.29.7", "@babel/compat-data@7.29.7", "@babel/core@7.29.7", "@babel/generator@7.29.7", "@babel/helper-compilation-targets@7.29.7", "@babel/helper-globals@7.29.7", "@babel/helper-module-imports@7.29.7", "@babel/helper-module-transforms@7.29.7", "@babel/helper-string-parser@7.29.7", "@babel/helper-validator-identifier@7.29.7", "@babel/helper-validator-option@7.29.7", "@babel/helpers@7.29.7", "@babel/parser@7.29.7", "@babel/template@7.29.7", "@babel/traverse@7.29.7", "@babel/types@7.29.7", "@bcoe/v8-coverage@1.0.2", "@cacheable/memory@2.2.0", "@cacheable/utils@2.5.0", "@emnapi/core@1.11.0", "@emnapi/core@1.11.1", "@emnapi/core@1.9.2", "@emnapi/runtime@1.11.0", "@emnapi/runtime@1.11.1", "@emnapi/runtime@1.9.2", "@emnapi/wasi-threads@1.2.1", "@emnapi/wasi-threads@1.2.2", "@esbuild/aix-ppc64@0.28.1", "@esbuild/android-arm@0.28.1", "@esbuild/android-arm64@0.28.1", "@esbuild/android-x64@0.28.1", "@esbuild/darwin-arm64@0.28.1", "@esbuild/darwin-x64@0.28.1", "@esbuild/freebsd-arm64@0.28.1", "@esbuild/freebsd-x64@0.28.1", "@esbuild/linux-arm@0.28.1", "@esbuild/linux-arm64@0.28.1", "@esbuild/linux-ia32@0.28.1", "@esbuild/linux-loong64@0.28.1", "@esbuild/linux-mips64el@0.28.1", "@esbuild/linux-ppc64@0.28.1", "@esbuild/linux-riscv64@0.28.1", "@esbuild/linux-s390x@0.28.1", "@esbuild/linux-x64@0.28.1", "@esbuild/netbsd-arm64@0.28.1", "@esbuild/netbsd-x64@0.28.1", "@esbuild/openbsd-arm64@0.28.1", "@esbuild/openbsd-x64@0.28.1", "@esbuild/openharmony-arm64@0.28.1", "@esbuild/sunos-x64@0.28.1", "@esbuild/win32-arm64@0.28.1", "@esbuild/win32-ia32@0.28.1", "@esbuild/win32-x64@0.28.1", "@eslint-community/eslint-utils@4.9.1", "@eslint-community/regexpp@4.12.2", "@eslint/config-array@0.23.5", "@eslint/config-helpers@0.7.0", "@eslint/core@1.2.1", "@eslint/js@10.0.1", "@eslint/object-schema@3.0.5", "@eslint/plugin-kit@0.7.3", "@hapi/address@5.1.1", "@hapi/formula@3.0.2", "@hapi/hoek@11.0.7", "@hapi/pinpoint@2.0.1", "@hapi/tlds@1.1.7", "@hapi/topo@6.0.2", "@humanfs/core@0.19.2", "@humanfs/node@0.16.8", "@humanfs/types@0.15.0", "@humanwhocodes/module-importer@1.0.1", "@humanwhocodes/retry@0.4.3", "@inquirer/ansi@2.0.7", "@inquirer/confirm@6.1.1", "@inquirer/core@11.2.1", "@inquirer/figures@2.0.7", "@inquirer/type@4.0.7", "@istanbuljs/load-nyc-config@1.1.0", "@istanbuljs/schema@0.1.6", "@joshwooding/vite-plugin-react-docgen-typescript@0.7.0", "@jridgewell/remapping@2.3.5", "@keyv/bigmap@1.3.1", "@keyv/serialize@1.1.1", "@mswjs/interceptors@0.41.9", "@napi-rs/wasm-runtime@1.1.4", "@napi-rs/wasm-runtime@1.1.6", "@netlify/functions@6.0.0", "@netlify/types@3.0.0", "@open-draft/deferred-promise@2.2.0", "@open-draft/deferred-promise@3.0.0", "@open-draft/logger@0.3.0", "@open-draft/until@2.1.0", "@oxc-parser/binding-android-arm-eabi@0.127.0", "@oxc-parser/binding-android-arm64@0.127.0", "@oxc-parser/binding-darwin-arm64@0.127.0", "@oxc-parser/binding-darwin-x64@0.127.0", "@oxc-parser/binding-freebsd-x64@0.127.0", "@oxc-parser/binding-linux-arm-gnueabihf@0.127.0", "@oxc-parser/binding-linux-arm-musleabihf@0.127.0", "@oxc-parser/binding-linux-arm64-gnu@0.127.0", "@oxc-parser/binding-linux-arm64-musl@0.127.0", "@oxc-parser/binding-linux-ppc64-gnu@0.127.0", "@oxc-parser/binding-linux-riscv64-gnu@0.127.0", "@oxc-parser/binding-linux-riscv64-musl@0.127.0", "@oxc-parser/binding-linux-s390x-gnu@0.127.0", "@oxc-parser/binding-linux-x64-gnu@0.127.0", "@oxc-parser/binding-linux-x64-musl@0.127.0", "@oxc-parser/binding-openharmony-arm64@0.127.0", "@oxc-parser/binding-wasm32-wasi@0.127.0", "@oxc-parser/binding-win32-arm64-msvc@0.127.0", "@oxc-parser/binding-win32-ia32-msvc@0.127.0", "@oxc-parser/binding-win32-x64-msvc@0.127.0", "@oxc-project/types@0.127.0", "@oxc-project/types@0.148.0", "@oxc-resolver/binding-android-arm-eabi@11.21.2", "@oxc-resolver/binding-android-arm64@11.21.2", "@oxc-resolver/binding-darwin-arm64@11.21.2", "@oxc-resolver/binding-darwin-x64@11.21.2", "@oxc-resolver/binding-freebsd-x64@11.21.2", "@oxc-resolver/binding-linux-arm-gnueabihf@11.21.2", "@oxc-resolver/binding-linux-arm-musleabihf@11.21.2", "@oxc-resolver/binding-linux-arm64-gnu@11.21.2", "@oxc-resolver/binding-linux-arm64-musl@11.21.2", "@oxc-resolver/binding-linux-ppc64-gnu@11.21.2", "@oxc-resolver/binding-linux-riscv64-gnu@11.21.2", "@oxc-resolver/binding-linux-riscv64-musl@11.21.2", "@oxc-resolver/binding-linux-s390x-gnu@11.21.2", "@oxc-resolver/binding-linux-x64-gnu@11.21.2", "@oxc-resolver/binding-linux-x64-musl@11.21.2", "@oxc-resolver/binding-openharmony-arm64@11.21.2", "@oxc-resolver/binding-wasm32-wasi@11.21.2", "@oxc-resolver/binding-win32-arm64-msvc@11.21.2", "@oxc-resolver/binding-win32-x64-msvc@11.21.2", "@playwright/test@1.61.1", "@polka/url@1.0.0-next.29", "@rolldown/binding-android-arm-eabi@1.2.7", "@rolldown/binding-android-arm64@1.2.7", "@rolldown/binding-darwin-arm64@1.2.7", "@rolldown/binding-darwin-x64@1.2.7", "@rolldown/binding-freebsd-x64@1.2.7", "@rolldown/binding-linux-arm-gnueabihf@1.2.7", "@rolldown/binding-linux-arm64-gnu@1.2.7", "@rolldown/binding-linux-arm64-musl@1.2.7", "@rolldown/binding-linux-ppc64-gnu@1.2.7", "@rolldown/binding-linux-s390x-gnu@1.2.7", "@rolldown/binding-linux-x64-gnu@1.2.7", "@rolldown/binding-linux-x64-musl@1.2.7", "@rolldown/binding-openharmony-arm64@1.2.7", "@rolldown/binding-win32-arm64-msvc@1.2.7", "@rolldown/binding-win32-x64-msvc@1.2.7", "@rolldown/pluginutils@1.0.1", "@rollup/pluginutils@5.4.0", "@standard-schema/spec@1.1.0", "@storybook/addon-a11y@10.6.0", "@storybook/builder-vite@10.6.0", "@storybook/global@5.0.0", "@storybook/icons@2.0.2", "@storybook/react@10.6.0", "@storybook/react-dom-shim@10.6.0", "@storybook/react-vite@10.6.0", "@tailwindcss/node@4.3.3", "@tailwindcss/oxide@4.3.3", "@tailwindcss/oxide-android-arm64@4.3.3", "@tailwindcss/oxide-darwin-arm64@4.3.3", "@tailwindcss/oxide-darwin-x64@4.3.3", "@tailwindcss/oxide-freebsd-x64@4.3.3", "@tailwindcss/oxide-linux-arm-gnueabihf@4.3.3", "@tailwindcss/oxide-linux-arm64-gnu@4.3.3", "@tailwindcss/oxide-linux-arm64-musl@4.3.3", "@tailwindcss/oxide-linux-x64-gnu@4.3.3", "@tailwindcss/oxide-linux-x64-musl@4.3.3", "@tailwindcss/oxide-wasm32-wasi@4.3.3", "@tailwindcss/oxide-win32-arm64-msvc@4.3.3", "@tailwindcss/oxide-win32-x64-msvc@4.3.3", "@tailwindcss/postcss@4.3.3", "@testing-library/dom@10.4.2", "@testing-library/jest-dom@6.9.1", "@testing-library/jest-dom@7.0.1", "@testing-library/react@16.3.3", "@testing-library/user-event@14.6.7", "@tybys/wasm-util@0.10.2", "@tybys/wasm-util@0.10.3", "@types/aria-query@5.0.4", "@types/babel__core@7.20.5", "@types/babel__generator@7.27.0", "@types/babel__template@7.4.4", "@types/babel__traverse@7.28.0", "@types/chai@5.2.3", "@types/deep-eql@4.0.2", "@types/doctrine@0.0.9", "@types/dompurify@3.2.0", "@types/esrecurse@4.3.1", "@types/js-yaml@4.0.9", "@types/json-schema@7.0.15", "@types/node@26.5.1", "@types/react@19.3.0", "@types/react-dom@19.3.0", "@types/resolve@1.20.6", "@types/set-cookie-parser@2.4.10", "@types/statuses@2.0.6", "@typescript-eslint/eslint-plugin@8.70.0", "@typescript-eslint/parser@8.70.0", "@typescript-eslint/project-service@8.70.0", "@typescript-eslint/scope-manager@8.70.0", "@typescript-eslint/tsconfig-utils@8.70.0", "@typescript-eslint/type-utils@8.70.0", "@typescript-eslint/types@8.70.0", "@typescript-eslint/typescript-estree@8.70.0", "@typescript-eslint/utils@8.70.0", "@typescript-eslint/visitor-keys@8.70.0", "@vitejs/plugin-react@6.1.1", "@vitest/coverage-v8@5.0.1", "@vitest/expect@3.2.4", "@vitest/istanbul-lib-coverage@1.0.1", "@vitest/istanbul-lib-report@1.0.1", "@vitest/mocker@5.0.1", "@vitest/pretty-format@3.2.4", "@vitest/pretty-format@5.0.0", "@vitest/spy@3.2.4", "@vitest/spy@5.0.1", "@vitest/ui@5.0.0", "@vitest/utils@3.2.4", "@vitest/utils@5.0.0", "@webcontainer/env@1.1.1", "acorn@8.17.0", "acorn-jsx@5.3.2", "agent-base@6.0.2", "ajv@6.15.0", "ansi-styles@5.2.0", "aria-query@5.3.0", "assertion-error@2.0.1", "ast-types@0.16.1", "ast-v8-to-istanbul@1.0.6", "asynckit@0.4.0", "axe-core@4.13.0", "axios@1.18.1", "balanced-match@4.0.4", "baseline-browser-mapping@2.11.20", "brace-expansion@5.0.9", "browserslist@4.28.8", "bundle-name@4.1.0", "cacheable@2.5.0", "camelcase@5.3.1", "caniuse-lite@1.0.30001810", "chai@5.3.3", "chai@6.2.2", "check-error@2.1.3", "cli-width@4.1.0", "cliui@8.0.1", "combined-stream@1.0.8", "convert-source-map@2.0.0", "cookie@1.1.1", "css.escape@1.5.1", "csstype@3.2.3", "deep-eql@5.0.2", "deep-is@0.1.4", "default-browser@5.5.0", "default-browser-id@5.0.1", "define-lazy-prop@3.0.0", "delayed-stream@1.0.0", "detect-libc@2.1.2", "doctrine@3.0.0", "dom-accessibility-api@0.5.16", "dom-accessibility-api@0.6.3", "electron-to-chromium@1.5.418", "empathic@2.0.1", "enhanced-resolve@5.24.3", "es-set-tostringtag@2.1.0", "esbuild@0.28.1", "escalade@3.2.0", "escape-string-regexp@4.0.0", "eslint@10.10.0", "eslint-plugin-react-hooks@7.1.1", "eslint-plugin-react-refresh@0.5.7", "eslint-scope@9.1.2", "eslint-visitor-keys@3.4.3", "eslint-visitor-keys@5.0.1", "espree@11.2.0", "esprima@4.0.1", "esquery@1.7.0", "esrecurse@4.3.0", "estraverse@5.3.0", "estree-walker@2.0.2", "estree-walker@3.0.3", "esutils@2.0.3", "expect-type@1.4.0", "fast-json-stable-stringify@2.1.0", "fast-levenshtein@2.0.6", "fast-string-truncated-width@3.0.3", "fast-string-width@3.0.2", "fast-wrap-ansi@0.2.2", "file-entry-cache@11.1.5", "find-up@4.1.0", "find-up@5.0.0", "flat-cache@6.1.23", "flatted@3.4.4", "follow-redirects@1.16.0", "form-data@4.0.6", "fsevents@2.3.2", "fsevents@2.3.3", "gensync@1.0.0-beta.2", "get-caller-file@2.0.5", "get-package-type@0.1.0", "glob@13.0.6", "glob-parent@6.0.2", "globals@17.12.0", "graceful-fs@4.2.11", "graphql@16.14.2", "has-flag@4.0.0", "has-tostringtag@1.0.2", "hashery@1.5.1", "headers-polyfill@5.0.1", "hermes-estree@0.25.1", "hermes-parser@0.25.1", "hookified@1.15.1", "hookified@2.2.0", "html-escaper@2.0.2", "https-proxy-agent@5.0.1", "ignore@5.3.2", "ignore@7.0.9", "indent-string@4.0.0", "is-core-module@2.16.2", "is-docker@3.0.0", "is-extglob@2.1.1", "is-glob@4.0.3", "is-inside-container@1.0.0", "is-node-process@1.2.0", "is-wsl@3.1.1", "istanbul-lib-coverage@3.2.2", "istanbul-lib-instrument@6.0.3", "istanbul-lib-report@3.0.1", "istanbul-reports@3.2.0", "jiti@2.7.0", "joi@18.2.8", "js-tokens@10.0.0", "js-tokens@4.0.0", "jsesc@3.1.0", "json-schema-traverse@0.4.1", "json-stable-stringify-without-jsonify@1.0.1", "json5@2.2.3", "jsonc-parser@3.3.1", "keyv@5.6.0", "levn@0.4.1", "lightningcss@1.32.0", "lightningcss@1.33.0", "lightningcss-android-arm64@1.32.0", "lightningcss-android-arm64@1.33.0", "lightningcss-darwin-arm64@1.32.0", "lightningcss-darwin-arm64@1.33.0", "lightningcss-darwin-x64@1.32.0", "lightningcss-darwin-x64@1.33.0", "lightningcss-freebsd-x64@1.32.0", "lightningcss-freebsd-x64@1.33.0", "lightningcss-linux-arm-gnueabihf@1.32.0", "lightningcss-linux-arm-gnueabihf@1.33.0", "lightningcss-linux-arm64-gnu@1.32.0", "lightningcss-linux-arm64-gnu@1.33.0", "lightningcss-linux-arm64-musl@1.32.0", "lightningcss-linux-arm64-musl@1.33.0", "lightningcss-linux-x64-gnu@1.32.0", "lightningcss-linux-x64-gnu@1.33.0", "lightningcss-linux-x64-musl@1.32.0", "lightningcss-linux-x64-musl@1.33.0", "lightningcss-win32-arm64-msvc@1.32.0", "lightningcss-win32-arm64-msvc@1.33.0", "lightningcss-win32-x64-msvc@1.32.0", "lightningcss-win32-x64-msvc@1.33.0", "locate-path@5.0.0", "locate-path@6.0.0", "lodash@4.18.1", "loupe@3.2.1", "lru-cache@11.5.1", "lru-cache@5.1.1", "lz-string@1.5.0", "magic-string@0.30.21", "magic-string@1.3.1", "magic-string@1.4.1", "magicast@0.5.5", "make-dir@4.0.0", "mime-db@1.52.0", "mime-types@2.1.35", "min-indent@1.0.1", "minimatch@10.2.5", "minimist@1.2.8", "mrmime@2.0.1", "msw@2.15.0", "mute-stream@3.0.0", "nanoid@3.3.18", "natural-compare@1.4.0", "node-releases@2.0.54", "obug@2.2.1", "open@10.2.0", "optionator@0.9.4", "outvariant@1.4.3", "oxc-parser@0.127.0", "oxc-resolver@11.21.2", "p-limit@2.3.0", "p-limit@3.1.0", "p-locate@4.1.0", "p-locate@5.0.0", "p-try@2.2.0", "path-exists@4.0.0", "path-parse@1.0.7", "path-scurry@2.0.2", "path-to-regexp@6.3.0", "pathe@2.0.3", "pathval@2.0.1", "picocolors@1.1.1", "playwright@1.61.1", "playwright-core@1.61.1", "postcss@8.5.28", "prelude-ls@1.2.1", "pretty-format@27.5.1", "proxy-from-env@2.1.0", "qified@0.10.1", "react-docgen@8.0.3", "react-docgen-typescript@2.4.0", "react-is@17.0.2", "recast@0.23.11", "redent@3.0.0", "require-directory@2.1.1", "resolve@1.22.12", "resolve-from@5.0.0", "rettime@0.11.11", "rimraf@6.1.3", "rolldown@1.2.7", "run-applescript@7.1.0", "rxjs@7.8.2", "semver@6.3.1", "semver@7.8.5", "set-cookie-parser@3.1.0", "siginfo@2.0.0", "sirv@3.0.2", "source-map@0.6.1", "source-map@0.7.6", "stackback@0.0.2", "statuses@2.0.2", "std-env@4.2.0", "storybook@10.6.0", "strict-event-emitter@0.5.1", "strip-bom@3.0.0", "strip-indent@3.0.0", "strip-indent@4.1.1", "supports-color@7.2.0", "supports-preserve-symlinks-flag@1.0.0", "tagged-tag@1.0.0", "tailwindcss@4.3.3", "tapable@2.3.3", "tar-mini@0.2.0", "test-exclude@8.0.0", "tiny-invariant@1.3.3", "tinybench@6.1.4", "tinyexec@1.3.0", "tinyrainbow@2.0.0", "tinyrainbow@3.1.1", "tinyspy@4.0.4", "totalist@3.0.1", "ts-api-utils@2.5.0", "ts-dedent@2.3.0", "tsconfig-paths@4.2.0", "type-check@0.4.0", "type-fest@5.7.0", "typescript@6.0.3", "typescript-eslint@8.70.0", "undici-types@8.9.0", "until-async@3.0.2", "update-browserslist-db@1.3.2", "uri-js@4.4.1", "vite@8.3.0", "vite-plugin-compression2@2.5.3", "vite-plugin-istanbul@9.0.1", "vitest@5.0.1", "wait-on@9.1.0", "why-is-node-running@2.3.0", "word-wrap@1.2.5", "ws@8.21.3", "wsl-utils@0.1.0", "y18n@5.0.8", "yallist@3.1.1", "yargs@17.7.3", "yargs-parser@21.1.1", "yocto-queue@0.1.0", "zod-validation-error@4.0.2" ], "any": true, "baseline": false, "in_binary_new": [], "in_binary_resolved": [], "integrity_drift": 0, "license_changes": [], "new_vulnerabilities": [ { "aliases": [ "CVE-2026-101898" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101898", "percentile": 0.45765, "score": 0.00545 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-3pq3-5fj3-cg6v", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls", "url": "https://github.com/advisories/GHSA-3pq3-5fj3-cg6v", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101899" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101899", "percentile": 0.4369, "score": 0.00512 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-44g4-m2mj-wpvx", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges", "url": "https://github.com/advisories/GHSA-44g4-m2mj-wpvx", "version": "1.18.1" }, { "aliases": [ "CVE-2026-118772" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118772", "percentile": 0.40455, "score": 0.00467 }, "fix_state": "fixed", "fixed_in": [ "18.3.1" ], "id": "GHSA-4528-x5fx-h6hg", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "joi", "severity": "High", "summary": "joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service", "url": "https://github.com/advisories/GHSA-4528-x5fx-h6hg", "version": "18.2.8" }, { "aliases": [ "CVE-2026-101900" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101900", "percentile": 0.45807, "score": 0.00546 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-4hqw-qxg8-jxx2", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders", "url": "https://github.com/advisories/GHSA-4hqw-qxg8-jxx2", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101901" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101901", "percentile": 0.45207, "score": 0.00536 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-542g-h47m-68v8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization", "url": "https://github.com/advisories/GHSA-542g-h47m-68v8", "version": "1.18.1" }, { "aliases": [ "CVE-2026-112942" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112942", "percentile": 0.71406, "score": 0.01344 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-587h-7wmj-h5pm", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "High", "summary": "launch-editor: `fs.existsSync()` existence check can be bypassed on Windows", "url": "https://github.com/advisories/GHSA-587h-7wmj-h5pm", "version": "8.3.0" }, { "aliases": [ "CVE-2026-112943" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112943", "percentile": 0.35737, "score": 0.00414 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-698v-4r3x-3vcv", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Medium", "summary": "launch-editor: escapeCmdArgs() omits % escaping on Windows", "url": "https://github.com/advisories/GHSA-698v-4r3x-3vcv", "version": "8.3.0" }, { "aliases": [ "CVE-2026-111755" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111755", "percentile": 0.40761, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "1.16.1" ], "id": "GHSA-8r9p-f939-6h3c", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "High", "summary": "follow-redirects sensitiveHeaders regex escaping can expose credential headers", "url": "https://github.com/advisories/GHSA-8r9p-f939-6h3c", "version": "1.16.0" }, { "aliases": [ "CVE-2026-101902" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101902", "percentile": 0.35667, "score": 0.00414 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-9fr6-4gfg-395g", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method", "url": "https://github.com/advisories/GHSA-9fr6-4gfg-395g", "version": "1.18.1" }, { "aliases": [ "CVE-2026-112945" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112945", "percentile": 0.5207, "score": 0.00672 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-9jrq-w75r-8gcw", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Low", "summary": "Vite: Cross origin script execution through Vite custom middleware", "url": "https://github.com/advisories/GHSA-9jrq-w75r-8gcw", "version": "8.3.0" }, { "aliases": [ "CVE-2026-101903" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101903", "percentile": 0.37877, "score": 0.00436 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-c29m-xwm3-cm6r", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)", "url": "https://github.com/advisories/GHSA-c29m-xwm3-cm6r", "version": "1.18.1" }, { "aliases": [ "CVE-2026-114125" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114125", "percentile": 0.32565, "score": 0.00385 }, "fix_state": "fixed", "fixed_in": [ "10.6.2" ], "id": "GHSA-f2ph-cmg5-wxc8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "storybook", "severity": "Critical", "summary": "Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites", "url": "https://github.com/advisories/GHSA-f2ph-cmg5-wxc8", "version": "10.6.0" }, { "aliases": [ "CVE-2026-101904" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101904", "percentile": 0.42037, "score": 0.00488 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-j8rh-479h-cp32", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: Header Injection via Inherited headers After Minimal Interceptor", "url": "https://github.com/advisories/GHSA-j8rh-479h-cp32", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101905" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101905", "percentile": 0.36122, "score": 0.00418 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-m8m8-qj5v-23w3", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection", "url": "https://github.com/advisories/GHSA-m8m8-qj5v-23w3", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101906" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101906", "percentile": 0.39677, "score": 0.00457 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-mghh-pgcx-3jjj", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: ReDoS (O(N\u00b2)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location", "url": "https://github.com/advisories/GHSA-mghh-pgcx-3jjj", "version": "1.18.1" }, { "aliases": [ "CVE-2026-116689" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-116689", "percentile": 0.18802, "score": 0.00266 }, "fix_state": "fixed", "fixed_in": [ "1.16.2" ], "id": "GHSA-mrwp-f3q8-3g9p", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "High", "summary": "follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects", "url": "https://github.com/advisories/GHSA-mrwp-f3q8-3g9p", "version": "1.16.0" }, { "aliases": [ "CVE-2026-112948" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112948", "percentile": 0.34308, "score": 0.004 }, "fix_state": "fixed", "fixed_in": [ "5.0.5" ], "id": "GHSA-p458-7748-mcp3", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "@vitest/ui", "severity": "Medium", "summary": "Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file", "url": "https://github.com/advisories/GHSA-p458-7748-mcp3", "version": "5.0.0" }, { "aliases": [ "CVE-2026-114126" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114126", "percentile": 0.44775, "score": 0.00529 }, "fix_state": "fixed", "fixed_in": [ "10.6.2" ], "id": "GHSA-px85-f4q5-jh77", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "storybook", "severity": "High", "summary": "Storybook dev server vulnerable to code injection from the local network", "url": "https://github.com/advisories/GHSA-px85-f4q5-jh77", "version": "10.6.0" }, { "aliases": [ "CVE-2026-111756" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111756", "percentile": 0.40762, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "1.16.1" ], "id": "GHSA-q3jh-wrc6-jgq8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "High", "summary": "follow-redirects array-form headers bypass cross-origin credential stripping", "url": "https://github.com/advisories/GHSA-q3jh-wrc6-jgq8", "version": "1.16.0" }, { "aliases": [ "CVE-2026-112949" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112949", "percentile": 0.27043, "score": 0.00336 }, "fix_state": "fixed", "fixed_in": [ "5.0.3" ], "id": "GHSA-qxg6-89mg-rqv8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "@vitest/mocker", "severity": "Medium", "summary": "Vitest: Code injection via unauthenticated manual mock registration", "url": "https://github.com/advisories/GHSA-qxg6-89mg-rqv8", "version": "5.0.1" }, { "aliases": [ "CVE-2026-101907" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101907", "percentile": 0.40789, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-r4gj-5m52-g5wh", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF", "url": "https://github.com/advisories/GHSA-r4gj-5m52-g5wh", "version": "1.18.1" }, { "aliases": [ "CVE-2026-112944" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112944", "percentile": 0.5338, "score": 0.00705 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-r825-w8mm-5pxw", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Medium", "summary": "launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors", "url": "https://github.com/advisories/GHSA-r825-w8mm-5pxw", "version": "8.3.0" }, { "aliases": [ "CVE-2026-112946" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112946", "percentile": 0.58267, "score": 0.00852 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-rq7h-c2jc-7f22", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Medium", "summary": "Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine", "url": "https://github.com/advisories/GHSA-rq7h-c2jc-7f22", "version": "8.3.0" }, { "aliases": [ "CVE-2026-112947" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112947", "percentile": 0.42982, "score": 0.00502 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-vfpm-58rq-9qcg", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Medium", "summary": "Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`", "url": "https://github.com/advisories/GHSA-vfpm-58rq-9qcg", "version": "8.3.0" }, { "aliases": [ "CVE-2026-101908" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101908", "percentile": 0.40711, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-vh66-26gq-q6x8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: Prototype pollution gadget in fetch adapter can alter outbound requests", "url": "https://github.com/advisories/GHSA-vh66-26gq-q6x8", "version": "1.18.1" }, { "aliases": [ "CVE-2026-90771" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-90771", "percentile": 0.33029, "score": 0.00389 }, "fix_state": "fixed", "fixed_in": [ "18.2.9" ], "id": "GHSA-wr44-6hxh-3jwq", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "joi", "severity": "Medium", "summary": "joi messages compilation allows prototype replacement through __proto__ error codes", "url": "https://github.com/advisories/GHSA-wr44-6hxh-3jwq", "version": "18.2.8" }, { "aliases": [ "CVE-2026-101909" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101909", "percentile": 0.42646, "score": 0.00497 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-x97p-jq2g-jp4f", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: Prototype Pollution Gadget in axios toFormData Options", "url": "https://github.com/advisories/GHSA-x97p-jq2g-jp4f", "version": "1.18.1" }, { "aliases": [ "CVE-2026-112950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112950", "percentile": 0.4557, "score": 0.00542 }, "fix_state": "fixed", "fixed_in": [ "5.0.3" ], "id": "GHSA-xp26-3454-mjgp", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "@vitest/mocker", "severity": "Medium", "summary": "Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix", "url": "https://github.com/advisories/GHSA-xp26-3454-mjgp", "version": "5.0.1" } ], "previous_ref": "v0.3.42", "release_changed": false, "removed": [], "resolved_vulnerabilities": [], "upgraded": [], "workflow_new": 0, "workflow_resolved": 0 }, "commit": "2a082d0896bcd990b54b7338a1e69acde6c5c929", "compliance": { "overall_score": 55, "standards": { "bsi_tr03183": { "failed_checks": [ "Component Creator", "Distribution Licences", "SHA-512 Hash", "Dependency Relationship", "SBOM Creator Contact" ], "passed": 4, "score": 44, "total": 9 }, "cisa": { "failed_checks": [ "Software Producer", "Dependency Relationship", "License Information", "Component Hash", "SBOM Author" ], "passed": 5, "score": 50, "total": 10 }, "ntia": { "failed_checks": [ "Supplier Name", "Dependency Relationship" ], "passed": 5, "score": 71, "total": 7 } } }, "components": [ { "ecosystem": "github", "licenses": [], "location": ".github/workflows/release.yml", "name": "actions/attest-build-provenance", "purl": "pkg:github/actions/attest-build-provenance@v4.2.2", "version": "v4.2.2" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/_perf-regression-issue.yml", "name": "actions/checkout", "purl": "pkg:github/actions/checkout@v7.0.1", "version": "v7.0.1" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/_perf-regression-issue.yml", "name": "actions/download-artifact", "purl": "pkg:github/actions/download-artifact@v8.0.1", "version": "v8.0.1" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/auto-triage.lock.yml", "name": "actions/github-script", "purl": "pkg:github/actions/github-script@v9", "version": "v9" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/a11y-audit.yml", "name": "actions/github-script", "purl": "pkg:github/actions/github-script@v9.0.0", "version": "v9.0.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/api-contract.yml", "name": "actions/setup-go", "purl": "pkg:github/actions/setup-go@v7.0.0", "version": "v7.0.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/_perf-regression-issue.yml", "name": "actions/setup-node", "purl": "pkg:github/actions/setup-node@v7.0.0", "version": "v7.0.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/console-app-roundtrip.yml", "name": "actions/setup-python", "purl": "pkg:github/actions/setup-python@v7.0.0", "version": "v7.0.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/api-contract.yml", "name": "actions/upload-artifact", "purl": "pkg:github/actions/upload-artifact@v7.0.1", "version": "v7.0.1" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/claude-code-review.yml", "name": "anthropics/claude-code-action", "purl": "pkg:github/anthropics/claude-code-action@v1.0.226", "version": "v1.0.226" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/build-deploy.yml", "name": "azure/setup-helm", "purl": "pkg:github/azure/setup-helm@v5.0.1", "version": "v5.0.1" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/build-deploy.yml", "name": "azure/setup-kubectl", "purl": "pkg:github/azure/setup-kubectl@v5.1.0", "version": "v5.1.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/build-deploy.yml", "name": "docker/build-push-action", "purl": "pkg:github/docker/build-push-action@v7.4.0", "version": "v7.4.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/build-deploy.yml", "name": "docker/login-action", "purl": "pkg:github/docker/login-action@v4.6.0", "version": "v4.6.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/build-deploy.yml", "name": "docker/metadata-action", "purl": "pkg:github/docker/metadata-action@v6.2.0", "version": "v6.2.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/build-deploy.yml", "name": "docker/setup-buildx-action", "purl": "pkg:github/docker/setup-buildx-action@v4", "version": "v4" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/release.yml", "name": "docker/setup-buildx-action", "purl": "pkg:github/docker/setup-buildx-action@v4.4.0", "version": "v4.4.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/release.yml", "name": "docker/setup-qemu-action", "purl": "pkg:github/docker/setup-qemu-action@v4.4.0", "version": "v4.4.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/codeql.yml", "name": "github/codeql-action/analyze", "purl": "pkg:github/github/codeql-action@v4.38.0#analyze", "version": "v4.38.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/codeql.yml", "name": "github/codeql-action/autobuild", "purl": "pkg:github/github/codeql-action@v4.38.0#autobuild", "version": "v4.38.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/codeql.yml", "name": "github/codeql-action/init", "purl": "pkg:github/github/codeql-action@v4.38.0#init", "version": "v4.38.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/auto-triage.lock.yml", "name": "github/gh-aw-actions/setup", "purl": "pkg:github/github/gh-aw-actions@v0.79.6#setup", "version": "v0.79.6" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/release.yml", "name": "goreleaser/goreleaser-action", "purl": "pkg:github/goreleaser/goreleaser-action@v7.2.3", "version": "v7.2.3" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/upgrade-smoke.yml", "name": "helm/kind-action", "purl": "pkg:github/helm/kind-action@v1.15.0", "version": "v1.15.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/add-help-wanted.yml", "name": "kubestellar/infra/.github/workflows/reusable-add-help-wanted.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-add-help-wanted.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/ai-fix.yml", "name": "kubestellar/infra/.github/workflows/reusable-ai-fix.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-ai-fix.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/assignment-helper.yml", "name": "kubestellar/infra/.github/workflows/reusable-assignment-helper.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-assignment-helper.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/copilot-automation.yml", "name": "kubestellar/infra/.github/workflows/reusable-copilot-automation.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-copilot-automation.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/copilot-dco.yml", "name": "kubestellar/infra/.github/workflows/reusable-copilot-dco.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-copilot-dco.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/feedback.yml", "name": "kubestellar/infra/.github/workflows/reusable-feedback.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-feedback.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/greetings.yml", "name": "kubestellar/infra/.github/workflows/reusable-greetings.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-greetings.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/label-helper.yml", "name": "kubestellar/infra/.github/workflows/reusable-label-helper.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-label-helper.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/scorecard.yml", "name": "kubestellar/infra/.github/workflows/reusable-scorecard.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-scorecard.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/stale.yml", "name": "kubestellar/infra/.github/workflows/reusable-stale.yml", "purl": "pkg:github/kubestellar/infra@2026#.github/workflows/reusable-stale.yml", "version": "2026" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/nightly-dast.yml", "name": "projectdiscovery/nuclei-action", "purl": "pkg:github/projectdiscovery/nuclei-action@v3", "version": "v3" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/release.yml", "name": "sigstore/cosign-installer", "purl": "pkg:github/sigstore/cosign-installer@v4.1.2", "version": "v4.1.2" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/nightly-dast.yml", "name": "zaproxy/action-baseline", "purl": "pkg:github/zaproxy/action-baseline@v0.15.0", "version": "v0.15.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/beorn7/perks", "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1", "version": "v1.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/cenkalti/backoff/v5", "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3", "version": "v5.0.3" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/cespare/xxhash/v2", "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0", "version": "v2.3.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/davecgh/go-spew", "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc", "version": "v1.1.2-0.20180830191138-d8f796af33cc" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/dustin/go-humanize", "purl": "pkg:golang/github.com/dustin/go-humanize@v1.0.1", "version": "v1.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/emicklei/go-restful/v3", "purl": "pkg:golang/github.com/emicklei/go-restful/v3@v3.13.0", "version": "v3.13.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/fasthttp/websocket", "purl": "pkg:golang/github.com/fasthttp/websocket@v1.5.12", "version": "v1.5.12" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/fsnotify/fsnotify", "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1", "version": "v1.10.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/fxamacker/cbor/v2", "purl": "pkg:golang/github.com/fxamacker/cbor/v2@v2.9.1", "version": "v2.9.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-logr/logr", "purl": "pkg:golang/github.com/go-logr/logr@v1.4.3", "version": "v1.4.3" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-logr/stdr", "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2", "version": "v1.2.2" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/jsonpointer", "purl": "pkg:golang/github.com/go-openapi/jsonpointer@v1.0.0", "version": "v1.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/jsonreference", "purl": "pkg:golang/github.com/go-openapi/jsonreference@v1.0.0", "version": "v1.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag", "purl": "pkg:golang/github.com/go-openapi/swag@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/cmdutils", "purl": "pkg:golang/github.com/go-openapi/swag/cmdutils@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/conv", "purl": "pkg:golang/github.com/go-openapi/swag/conv@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/fileutils", "purl": "pkg:golang/github.com/go-openapi/swag/fileutils@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/jsonutils", "purl": "pkg:golang/github.com/go-openapi/swag/jsonutils@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/loading", "purl": "pkg:golang/github.com/go-openapi/swag/loading@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/mangling", "purl": "pkg:golang/github.com/go-openapi/swag/mangling@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/netutils", "purl": "pkg:golang/github.com/go-openapi/swag/netutils@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/pools", "purl": "pkg:golang/github.com/go-openapi/swag/pools@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/stringutils", "purl": "pkg:golang/github.com/go-openapi/swag/stringutils@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/typeutils", "purl": "pkg:golang/github.com/go-openapi/swag/typeutils@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/go-openapi/swag/yamlutils", "purl": "pkg:golang/github.com/go-openapi/swag/yamlutils@v0.27.1", "version": "v0.27.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/gofiber/contrib/websocket", "purl": "pkg:golang/github.com/gofiber/contrib/websocket@v1.3.4", "version": "v1.3.4" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/gofiber/fiber/v2", "purl": "pkg:golang/github.com/gofiber/fiber/v2@v2.52.15", "version": "v2.52.15" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/golang-jwt/jwt/v5", "purl": "pkg:golang/github.com/golang-jwt/jwt/v5@v5.3.1", "version": "v5.3.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/google/cel-go", "purl": "pkg:golang/github.com/google/cel-go@v0.29.2", "version": "v0.29.2" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/google/gnostic-models", "purl": "pkg:golang/github.com/google/gnostic-models@v0.7.0", "version": "v0.7.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/google/uuid", "purl": "pkg:golang/github.com/google/uuid@v1.6.0", "version": "v1.6.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/gorilla/websocket", "purl": "pkg:golang/github.com/gorilla/websocket@v1.5.4-0.20250319132907-e064f32e3674", "version": "v1.5.4-0.20250319132907-e064f32e3674" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/grpc-ecosystem/grpc-gateway/v2", "purl": "pkg:golang/github.com/grpc-ecosystem/grpc-gateway/v2@v2.29.0", "version": "v2.29.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/joho/godotenv", "purl": "pkg:golang/github.com/joho/godotenv@v1.5.1", "version": "v1.5.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/json-iterator/go", "purl": "pkg:golang/github.com/json-iterator/go@v1.1.12", "version": "v1.1.12" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/klauspost/compress", "purl": "pkg:golang/github.com/klauspost/compress@v1.20.0", "version": "v1.20.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/kylelemons/godebug", "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0", "version": "v1.1.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/mattn/go-colorable", "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.13", "version": "v0.1.13" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/mattn/go-isatty", "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.24", "version": "v0.0.24" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/mattn/go-runewidth", "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.16", "version": "v0.0.16" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/moby/spdystream", "purl": "pkg:golang/github.com/moby/spdystream@v0.5.1", "version": "v0.5.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/modern-go/concurrent", "purl": "pkg:golang/github.com/modern-go/concurrent@v0.0.0-20180306012644-bacd9c7ef1dd", "version": "v0.0.0-20180306012644-bacd9c7ef1dd" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/modern-go/reflect2", "purl": "pkg:golang/github.com/modern-go/reflect2@v1.0.3-0.20250322232337-35a7c28c31ee", "version": "v1.0.3-0.20250322232337-35a7c28c31ee" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/molecule-man/go-brrr", "purl": "pkg:golang/github.com/molecule-man/go-brrr@v1.0.1", "version": "v1.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/munnerz/goautoneg", "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", "version": "v0.0.0-20191010083416-a7dc8b61c822" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/ncruces/go-strftime", "purl": "pkg:golang/github.com/ncruces/go-strftime@v1.0.0", "version": "v1.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/philhofer/fwd", "purl": "pkg:golang/github.com/philhofer/fwd@v1.1.3-0.20240916144458-20a13a1f6b7c", "version": "v1.1.3-0.20240916144458-20a13a1f6b7c" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/prometheus/client_golang", "purl": "pkg:golang/github.com/prometheus/client_golang@v1.24.1", "version": "v1.24.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/prometheus/client_model", "purl": "pkg:golang/github.com/prometheus/client_model@v0.6.3", "version": "v0.6.3" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/prometheus/common", "purl": "pkg:golang/github.com/prometheus/common@v0.71.0", "version": "v0.71.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/prometheus/procfs", "purl": "pkg:golang/github.com/prometheus/procfs@v0.21.1", "version": "v0.21.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/remyoudompheng/bigfft", "purl": "pkg:golang/github.com/remyoudompheng/bigfft@v0.0.0-20230129092748-24d4a6f8daec", "version": "v0.0.0-20230129092748-24d4a6f8daec" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/rivo/uniseg", "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.7", "version": "v0.4.7" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/savsgio/gotils", "purl": "pkg:golang/github.com/savsgio/gotils@v0.0.0-20240704082632-aef3928b8a38", "version": "v0.0.0-20240704082632-aef3928b8a38" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/spf13/pflag", "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10", "version": "v1.0.10" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/stretchr/objx", "purl": "pkg:golang/github.com/stretchr/objx@v0.5.3", "version": "v0.5.3" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/stretchr/testify", "purl": "pkg:golang/github.com/stretchr/testify@v1.12.1", "version": "v1.12.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/tinylib/msgp", "purl": "pkg:golang/github.com/tinylib/msgp@v1.2.5", "version": "v1.2.5" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/valyala/bytebufferpool", "purl": "pkg:golang/github.com/valyala/bytebufferpool@v1.0.0", "version": "v1.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/valyala/fasthttp", "purl": "pkg:golang/github.com/valyala/fasthttp@v1.74.0", "version": "v1.74.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "github.com/x448/float16", "purl": "pkg:golang/github.com/x448/float16@v0.8.4", "version": "v0.8.4" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.opentelemetry.io/auto/sdk", "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1", "version": "v1.2.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.opentelemetry.io/otel", "purl": "pkg:golang/go.opentelemetry.io/otel@v1.44.0", "version": "v1.44.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0", "version": "v1.44.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp", "purl": "pkg:golang/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.44.0", "version": "v1.44.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.opentelemetry.io/otel/metric", "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.44.0", "version": "v1.44.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.opentelemetry.io/otel/sdk", "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.43.0", "version": "v1.43.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.opentelemetry.io/otel/trace", "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.44.0", "version": "v1.44.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.opentelemetry.io/proto/otlp", "purl": "pkg:golang/go.opentelemetry.io/proto/otlp@v1.10.0", "version": "v1.10.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.uber.org/goleak", "purl": "pkg:golang/go.uber.org/goleak@v1.3.0", "version": "v1.3.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.yaml.in/yaml/v2", "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.4", "version": "v2.4.4" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "go.yaml.in/yaml/v3", "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5", "version": "v3.0.5" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "golang.org/x/net", "purl": "pkg:golang/golang.org/x/net@v0.58.0", "version": "v0.58.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "golang.org/x/oauth2", "purl": "pkg:golang/golang.org/x/oauth2@v0.37.0", "version": "v0.37.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "golang.org/x/sync", "purl": "pkg:golang/golang.org/x/sync@v0.23.0", "version": "v0.23.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "golang.org/x/sys", "purl": "pkg:golang/golang.org/x/sys@v0.47.0", "version": "v0.47.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "golang.org/x/term", "purl": "pkg:golang/golang.org/x/term@v0.45.0", "version": "v0.45.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "golang.org/x/text", "purl": "pkg:golang/golang.org/x/text@v0.41.0", "version": "v0.41.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "golang.org/x/time", "purl": "pkg:golang/golang.org/x/time@v0.16.0", "version": "v0.16.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "google.golang.org/genproto/googleapis/api", "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260526163538-3dc84a4a5aaa", "version": "v0.0.0-20260526163538-3dc84a4a5aaa" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "google.golang.org/genproto/googleapis/rpc", "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260526163538-3dc84a4a5aaa", "version": "v0.0.0-20260526163538-3dc84a4a5aaa" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "google.golang.org/grpc", "purl": "pkg:golang/google.golang.org/grpc@v1.83.1", "version": "v1.83.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "google.golang.org/protobuf", "purl": "pkg:golang/google.golang.org/protobuf@v1.36.12", "version": "v1.36.12" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "gopkg.in/evanphx/json-patch.v4", "purl": "pkg:golang/gopkg.in/evanphx/json-patch.v4@v4.13.0", "version": "v4.13.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "gopkg.in/inf.v0", "purl": "pkg:golang/gopkg.in/inf.v0@v0.9.1", "version": "v0.9.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "gopkg.in/yaml.v3", "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "version": "v3.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "k8s.io/api", "purl": "pkg:golang/k8s.io/api@v0.37.0", "version": "v0.37.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "k8s.io/apiextensions-apiserver", "purl": "pkg:golang/k8s.io/apiextensions-apiserver@v0.37.0", "version": "v0.37.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "k8s.io/apimachinery", "purl": "pkg:golang/k8s.io/apimachinery@v0.37.0", "version": "v0.37.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "k8s.io/client-go", "purl": "pkg:golang/k8s.io/client-go@v0.37.0", "version": "v0.37.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "k8s.io/klog/v2", "purl": "pkg:golang/k8s.io/klog/v2@v2.140.0", "version": "v2.140.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "k8s.io/kube-openapi", "purl": "pkg:golang/k8s.io/kube-openapi@v0.0.0-20260721132016-d427ff9ee9ad", "version": "v0.0.0-20260721132016-d427ff9ee9ad" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "k8s.io/streaming", "purl": "pkg:golang/k8s.io/streaming@v0.37.0", "version": "v0.37.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "k8s.io/utils", "purl": "pkg:golang/k8s.io/utils@v0.0.0-20260626114624-be93311217bd", "version": "v0.0.0-20260626114624-be93311217bd" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "modernc.org/libc", "purl": "pkg:golang/modernc.org/libc@v1.75.7", "version": "v1.75.7" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "modernc.org/mathutil", "purl": "pkg:golang/modernc.org/mathutil@v1.7.1", "version": "v1.7.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "modernc.org/memory", "purl": "pkg:golang/modernc.org/memory@v1.12.1", "version": "v1.12.1" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "modernc.org/sqlite", "purl": "pkg:golang/modernc.org/sqlite@v1.59.0", "version": "v1.59.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "sigs.k8s.io/json", "purl": "pkg:golang/sigs.k8s.io/json@v0.0.0-20250730193827-2d320260d730", "version": "v0.0.0-20250730193827-2d320260d730" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "sigs.k8s.io/randfill", "purl": "pkg:golang/sigs.k8s.io/randfill@v1.0.0", "version": "v1.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "sigs.k8s.io/structured-merge-diff/v6", "purl": "pkg:golang/sigs.k8s.io/structured-merge-diff/v6@v6.4.2", "version": "v6.4.2" }, { "ecosystem": "golang", "licenses": [], "location": "go.mod", "name": "sigs.k8s.io/yaml", "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0", "version": "v1.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@adobe/css-tools", "purl": "pkg:npm/%40adobe/css-tools@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@alloc/quick-lru", "purl": "pkg:npm/%40alloc/quick-lru@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@asamuzakjp/css-color", "purl": "pkg:npm/%40asamuzakjp/css-color@6.0.5", "version": "6.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@asamuzakjp/dom-selector", "purl": "pkg:npm/%40asamuzakjp/dom-selector@8.3.0", "version": "8.3.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "@axe-core/playwright", "purl": "pkg:npm/%40axe-core/playwright@4.13.0", "version": "4.13.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/code-frame", "purl": "pkg:npm/%40babel/code-frame@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/compat-data", "purl": "pkg:npm/%40babel/compat-data@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/core", "purl": "pkg:npm/%40babel/core@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/generator", "purl": "pkg:npm/%40babel/generator@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/helper-compilation-targets", "purl": "pkg:npm/%40babel/helper-compilation-targets@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/helper-globals", "purl": "pkg:npm/%40babel/helper-globals@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/helper-module-imports", "purl": "pkg:npm/%40babel/helper-module-imports@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/helper-module-transforms", "purl": "pkg:npm/%40babel/helper-module-transforms@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/helper-string-parser", "purl": "pkg:npm/%40babel/helper-string-parser@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/helper-validator-identifier", "purl": "pkg:npm/%40babel/helper-validator-identifier@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/helper-validator-option", "purl": "pkg:npm/%40babel/helper-validator-option@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/helpers", "purl": "pkg:npm/%40babel/helpers@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/parser", "purl": "pkg:npm/%40babel/parser@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/runtime", "purl": "pkg:npm/%40babel/runtime@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/template", "purl": "pkg:npm/%40babel/template@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/traverse", "purl": "pkg:npm/%40babel/traverse@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@babel/types", "purl": "pkg:npm/%40babel/types@7.29.7", "version": "7.29.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@bcoe/v8-coverage", "purl": "pkg:npm/%40bcoe/v8-coverage@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@bramus/specificity", "purl": "pkg:npm/%40bramus/specificity@2.4.2", "version": "2.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@cacheable/memory", "purl": "pkg:npm/%40cacheable/memory@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@cacheable/utils", "purl": "pkg:npm/%40cacheable/utils@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@codemirror/autocomplete", "purl": "pkg:npm/%40codemirror/autocomplete@6.20.3", "version": "6.20.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@codemirror/commands", "purl": "pkg:npm/%40codemirror/commands@6.10.3", "version": "6.10.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@codemirror/language", "purl": "pkg:npm/%40codemirror/language@6.12.3", "version": "6.12.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@codemirror/legacy-modes", "purl": "pkg:npm/%40codemirror/legacy-modes@6.5.4", "version": "6.5.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@codemirror/lint", "purl": "pkg:npm/%40codemirror/lint@6.9.7", "version": "6.9.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@codemirror/search", "purl": "pkg:npm/%40codemirror/search@6.7.1", "version": "6.7.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@codemirror/state", "purl": "pkg:npm/%40codemirror/state@6.6.0", "version": "6.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@codemirror/theme-one-dark", "purl": "pkg:npm/%40codemirror/theme-one-dark@6.1.3", "version": "6.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@codemirror/view", "purl": "pkg:npm/%40codemirror/view@6.43.1", "version": "6.43.1" }, { "ecosystem": "npm", "licenses": [ "MIT-0" ], "location": "web/package-lock.json", "name": "@csstools/color-helpers", "purl": "pkg:npm/%40csstools/color-helpers@6.1.0", "version": "6.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@csstools/css-calc", "purl": "pkg:npm/%40csstools/css-calc@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@csstools/css-color-parser", "purl": "pkg:npm/%40csstools/css-color-parser@4.1.10", "version": "4.1.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@csstools/css-parser-algorithms", "purl": "pkg:npm/%40csstools/css-parser-algorithms@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT-0" ], "location": "web/package-lock.json", "name": "@csstools/css-syntax-patches-for-csstree", "purl": "pkg:npm/%40csstools/css-syntax-patches-for-csstree@1.1.7", "version": "1.1.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@csstools/css-tokenizer", "purl": "pkg:npm/%40csstools/css-tokenizer@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@dimforge/rapier3d-compat", "purl": "pkg:npm/%40dimforge/rapier3d-compat@0.12.0", "version": "0.12.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@dnd-kit/accessibility", "purl": "pkg:npm/%40dnd-kit/accessibility@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@dnd-kit/core", "purl": "pkg:npm/%40dnd-kit/core@6.3.1", "version": "6.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@dnd-kit/sortable", "purl": "pkg:npm/%40dnd-kit/sortable@10.0.0", "version": "10.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@dnd-kit/utilities", "purl": "pkg:npm/%40dnd-kit/utilities@3.2.2", "version": "3.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@emnapi/core", "purl": "pkg:npm/%40emnapi/core@1.11.0", "version": "1.11.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@emnapi/core", "purl": "pkg:npm/%40emnapi/core@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@emnapi/core", "purl": "pkg:npm/%40emnapi/core@1.9.2", "version": "1.9.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@emnapi/runtime", "purl": "pkg:npm/%40emnapi/runtime@1.11.0", "version": "1.11.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@emnapi/runtime", "purl": "pkg:npm/%40emnapi/runtime@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@emnapi/runtime", "purl": "pkg:npm/%40emnapi/runtime@1.9.2", "version": "1.9.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@emnapi/wasi-threads", "purl": "pkg:npm/%40emnapi/wasi-threads@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@emnapi/wasi-threads", "purl": "pkg:npm/%40emnapi/wasi-threads@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@envelop/instrumentation", "purl": "pkg:npm/%40envelop/instrumentation@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/aix-ppc64", "purl": "pkg:npm/%40esbuild/aix-ppc64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/android-arm", "purl": "pkg:npm/%40esbuild/android-arm@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/android-arm64", "purl": "pkg:npm/%40esbuild/android-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/android-x64", "purl": "pkg:npm/%40esbuild/android-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/darwin-arm64", "purl": "pkg:npm/%40esbuild/darwin-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/darwin-x64", "purl": "pkg:npm/%40esbuild/darwin-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/freebsd-arm64", "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/freebsd-x64", "purl": "pkg:npm/%40esbuild/freebsd-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/linux-arm", "purl": "pkg:npm/%40esbuild/linux-arm@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/linux-arm64", "purl": "pkg:npm/%40esbuild/linux-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/linux-ia32", "purl": "pkg:npm/%40esbuild/linux-ia32@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/linux-loong64", "purl": "pkg:npm/%40esbuild/linux-loong64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/linux-mips64el", "purl": "pkg:npm/%40esbuild/linux-mips64el@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/linux-ppc64", "purl": "pkg:npm/%40esbuild/linux-ppc64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/linux-riscv64", "purl": "pkg:npm/%40esbuild/linux-riscv64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/linux-s390x", "purl": "pkg:npm/%40esbuild/linux-s390x@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/linux-x64", "purl": "pkg:npm/%40esbuild/linux-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/netbsd-arm64", "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/netbsd-x64", "purl": "pkg:npm/%40esbuild/netbsd-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/openbsd-arm64", "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/openbsd-x64", "purl": "pkg:npm/%40esbuild/openbsd-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/openharmony-arm64", "purl": "pkg:npm/%40esbuild/openharmony-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/sunos-x64", "purl": "pkg:npm/%40esbuild/sunos-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/win32-arm64", "purl": "pkg:npm/%40esbuild/win32-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/win32-ia32", "purl": "pkg:npm/%40esbuild/win32-ia32@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@esbuild/win32-x64", "purl": "pkg:npm/%40esbuild/win32-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@eslint-community/eslint-utils", "purl": "pkg:npm/%40eslint-community/eslint-utils@4.9.1", "version": "4.9.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@eslint-community/regexpp", "purl": "pkg:npm/%40eslint-community/regexpp@4.12.2", "version": "4.12.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@eslint/config-array", "purl": "pkg:npm/%40eslint/config-array@0.23.5", "version": "0.23.5" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@eslint/config-helpers", "purl": "pkg:npm/%40eslint/config-helpers@0.7.0", "version": "0.7.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@eslint/core", "purl": "pkg:npm/%40eslint/core@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@eslint/js", "purl": "pkg:npm/%40eslint/js@10.0.1", "version": "10.0.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@eslint/object-schema", "purl": "pkg:npm/%40eslint/object-schema@3.0.5", "version": "3.0.5" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@eslint/plugin-kit", "purl": "pkg:npm/%40eslint/plugin-kit@0.7.3", "version": "0.7.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@exodus/bytes", "purl": "pkg:npm/%40exodus/bytes@1.15.1", "version": "1.15.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@fastify/busboy", "purl": "pkg:npm/%40fastify/busboy@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "@hapi/address", "purl": "pkg:npm/%40hapi/address@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "@hapi/formula", "purl": "pkg:npm/%40hapi/formula@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "@hapi/hoek", "purl": "pkg:npm/%40hapi/hoek@11.0.7", "version": "11.0.7" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "@hapi/pinpoint", "purl": "pkg:npm/%40hapi/pinpoint@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "@hapi/tlds", "purl": "pkg:npm/%40hapi/tlds@1.1.7", "version": "1.1.7" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "@hapi/topo", "purl": "pkg:npm/%40hapi/topo@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@humanfs/core", "purl": "pkg:npm/%40humanfs/core@0.19.2", "version": "0.19.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@humanfs/node", "purl": "pkg:npm/%40humanfs/node@0.16.8", "version": "0.16.8" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@humanfs/types", "purl": "pkg:npm/%40humanfs/types@0.15.0", "version": "0.15.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@humanwhocodes/module-importer", "purl": "pkg:npm/%40humanwhocodes/module-importer@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@humanwhocodes/retry", "purl": "pkg:npm/%40humanwhocodes/retry@0.4.3", "version": "0.4.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@inquirer/ansi", "purl": "pkg:npm/%40inquirer/ansi@2.0.7", "version": "2.0.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@inquirer/confirm", "purl": "pkg:npm/%40inquirer/confirm@6.1.1", "version": "6.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@inquirer/core", "purl": "pkg:npm/%40inquirer/core@11.2.1", "version": "11.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@inquirer/figures", "purl": "pkg:npm/%40inquirer/figures@2.0.7", "version": "2.0.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@inquirer/type", "purl": "pkg:npm/%40inquirer/type@4.0.7", "version": "4.0.7" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".github/ga4-scripts/package-lock.json", "name": "@isaacs/cliui", "purl": "pkg:npm/%40isaacs/cliui@8.0.2", "version": "8.0.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".npm-caveman-cache/_npx/ac0ed6aa23b37c1e/package-lock.json", "name": "@isaacs/fs-minipass", "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "@istanbuljs/load-nyc-config", "purl": "pkg:npm/%40istanbuljs/load-nyc-config@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@istanbuljs/schema", "purl": "pkg:npm/%40istanbuljs/schema@0.1.6", "version": "0.1.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@joshwooding/vite-plugin-react-docgen-typescript", "purl": "pkg:npm/%40joshwooding/vite-plugin-react-docgen-typescript@0.7.0", "version": "0.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@jridgewell/gen-mapping", "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13", "version": "0.3.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@jridgewell/remapping", "purl": "pkg:npm/%40jridgewell/remapping@2.3.5", "version": "2.3.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@jridgewell/resolve-uri", "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@jridgewell/sourcemap-codec", "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@jridgewell/trace-mapping", "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31", "version": "0.3.31" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@keyv/bigmap", "purl": "pkg:npm/%40keyv/bigmap@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@keyv/serialize", "purl": "pkg:npm/%40keyv/serialize@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@lezer/common", "purl": "pkg:npm/%40lezer/common@1.5.2", "version": "1.5.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@lezer/highlight", "purl": "pkg:npm/%40lezer/highlight@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@lezer/lr", "purl": "pkg:npm/%40lezer/lr@1.4.10", "version": "1.4.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@marijn/find-cluster-break", "purl": "pkg:npm/%40marijn/find-cluster-break@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@mediapipe/tasks-vision", "purl": "pkg:npm/%40mediapipe/tasks-vision@0.10.17", "version": "0.10.17" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@monogrid/gainmap-js", "purl": "pkg:npm/%40monogrid/gainmap-js@3.4.0", "version": "3.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@mswjs/interceptors", "purl": "pkg:npm/%40mswjs/interceptors@0.41.9", "version": "0.41.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@napi-rs/wasm-runtime", "purl": "pkg:npm/%40napi-rs/wasm-runtime@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@napi-rs/wasm-runtime", "purl": "pkg:npm/%40napi-rs/wasm-runtime@1.1.6", "version": "1.1.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@netlify/blobs", "purl": "pkg:npm/%40netlify/blobs@11.1.0", "version": "11.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@netlify/dev-utils", "purl": "pkg:npm/%40netlify/dev-utils@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@netlify/functions", "purl": "pkg:npm/%40netlify/functions@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@netlify/otel", "purl": "pkg:npm/%40netlify/otel@7.0.2", "version": "7.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@netlify/runtime-utils", "purl": "pkg:npm/%40netlify/runtime-utils@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@netlify/types", "purl": "pkg:npm/%40netlify/types@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@open-draft/deferred-promise", "purl": "pkg:npm/%40open-draft/deferred-promise@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@open-draft/deferred-promise", "purl": "pkg:npm/%40open-draft/deferred-promise@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@open-draft/logger", "purl": "pkg:npm/%40open-draft/logger@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@open-draft/until", "purl": "pkg:npm/%40open-draft/until@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/api", "purl": "pkg:npm/%40opentelemetry/api@1.9.1", "version": "1.9.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/api-logs", "purl": "pkg:npm/%40opentelemetry/api-logs@0.221.0", "version": "0.221.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/context-async-hooks", "purl": "pkg:npm/%40opentelemetry/context-async-hooks@2.10.0", "version": "2.10.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/core", "purl": "pkg:npm/%40opentelemetry/core@2.10.0", "version": "2.10.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/instrumentation", "purl": "pkg:npm/%40opentelemetry/instrumentation@0.221.0", "version": "0.221.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/resources", "purl": "pkg:npm/%40opentelemetry/resources@2.10.0", "version": "2.10.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/sdk-trace", "purl": "pkg:npm/%40opentelemetry/sdk-trace@2.10.0", "version": "2.10.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/sdk-trace-base", "purl": "pkg:npm/%40opentelemetry/sdk-trace-base@2.10.0", "version": "2.10.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/sdk-trace-node", "purl": "pkg:npm/%40opentelemetry/sdk-trace-node@2.10.0", "version": "2.10.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@opentelemetry/semantic-conventions", "purl": "pkg:npm/%40opentelemetry/semantic-conventions@1.43.0", "version": "1.43.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-android-arm-eabi", "purl": "pkg:npm/%40oxc-parser/binding-android-arm-eabi@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-android-arm64", "purl": "pkg:npm/%40oxc-parser/binding-android-arm64@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-darwin-arm64", "purl": "pkg:npm/%40oxc-parser/binding-darwin-arm64@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-darwin-x64", "purl": "pkg:npm/%40oxc-parser/binding-darwin-x64@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-freebsd-x64", "purl": "pkg:npm/%40oxc-parser/binding-freebsd-x64@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-arm-gnueabihf", "purl": "pkg:npm/%40oxc-parser/binding-linux-arm-gnueabihf@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-arm-musleabihf", "purl": "pkg:npm/%40oxc-parser/binding-linux-arm-musleabihf@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-arm64-gnu", "purl": "pkg:npm/%40oxc-parser/binding-linux-arm64-gnu@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-arm64-musl", "purl": "pkg:npm/%40oxc-parser/binding-linux-arm64-musl@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-ppc64-gnu", "purl": "pkg:npm/%40oxc-parser/binding-linux-ppc64-gnu@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-riscv64-gnu", "purl": "pkg:npm/%40oxc-parser/binding-linux-riscv64-gnu@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-riscv64-musl", "purl": "pkg:npm/%40oxc-parser/binding-linux-riscv64-musl@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-s390x-gnu", "purl": "pkg:npm/%40oxc-parser/binding-linux-s390x-gnu@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-x64-gnu", "purl": "pkg:npm/%40oxc-parser/binding-linux-x64-gnu@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-linux-x64-musl", "purl": "pkg:npm/%40oxc-parser/binding-linux-x64-musl@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-openharmony-arm64", "purl": "pkg:npm/%40oxc-parser/binding-openharmony-arm64@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-wasm32-wasi", "purl": "pkg:npm/%40oxc-parser/binding-wasm32-wasi@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-win32-arm64-msvc", "purl": "pkg:npm/%40oxc-parser/binding-win32-arm64-msvc@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-win32-ia32-msvc", "purl": "pkg:npm/%40oxc-parser/binding-win32-ia32-msvc@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-parser/binding-win32-x64-msvc", "purl": "pkg:npm/%40oxc-parser/binding-win32-x64-msvc@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-project/types", "purl": "pkg:npm/%40oxc-project/types@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-project/types", "purl": "pkg:npm/%40oxc-project/types@0.148.0", "version": "0.148.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-android-arm-eabi", "purl": "pkg:npm/%40oxc-resolver/binding-android-arm-eabi@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-android-arm64", "purl": "pkg:npm/%40oxc-resolver/binding-android-arm64@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-darwin-arm64", "purl": "pkg:npm/%40oxc-resolver/binding-darwin-arm64@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-darwin-x64", "purl": "pkg:npm/%40oxc-resolver/binding-darwin-x64@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-freebsd-x64", "purl": "pkg:npm/%40oxc-resolver/binding-freebsd-x64@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-arm-gnueabihf", "purl": "pkg:npm/%40oxc-resolver/binding-linux-arm-gnueabihf@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-arm-musleabihf", "purl": "pkg:npm/%40oxc-resolver/binding-linux-arm-musleabihf@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-arm64-gnu", "purl": "pkg:npm/%40oxc-resolver/binding-linux-arm64-gnu@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-arm64-musl", "purl": "pkg:npm/%40oxc-resolver/binding-linux-arm64-musl@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-ppc64-gnu", "purl": "pkg:npm/%40oxc-resolver/binding-linux-ppc64-gnu@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-riscv64-gnu", "purl": "pkg:npm/%40oxc-resolver/binding-linux-riscv64-gnu@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-riscv64-musl", "purl": "pkg:npm/%40oxc-resolver/binding-linux-riscv64-musl@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-s390x-gnu", "purl": "pkg:npm/%40oxc-resolver/binding-linux-s390x-gnu@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-x64-gnu", "purl": "pkg:npm/%40oxc-resolver/binding-linux-x64-gnu@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-linux-x64-musl", "purl": "pkg:npm/%40oxc-resolver/binding-linux-x64-musl@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-openharmony-arm64", "purl": "pkg:npm/%40oxc-resolver/binding-openharmony-arm64@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-wasm32-wasi", "purl": "pkg:npm/%40oxc-resolver/binding-wasm32-wasi@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-win32-arm64-msvc", "purl": "pkg:npm/%40oxc-resolver/binding-win32-arm64-msvc@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@oxc-resolver/binding-win32-x64-msvc", "purl": "pkg:npm/%40oxc-resolver/binding-win32-x64-msvc@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "@pkgjs/parseargs", "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0", "version": "0.11.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@playwright/test", "purl": "pkg:npm/%40playwright/test@1.61.1", "version": "1.61.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@polka/url", "purl": "pkg:npm/%40polka/url@1.0.0-next.29", "version": "1.0.0-next.29" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@react-three/drei", "purl": "pkg:npm/%40react-three/drei@10.7.8", "version": "10.7.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@react-three/fiber", "purl": "pkg:npm/%40react-three/fiber@9.7.0", "version": "9.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-android-arm-eabi", "purl": "pkg:npm/%40rolldown/binding-android-arm-eabi@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-android-arm64", "purl": "pkg:npm/%40rolldown/binding-android-arm64@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-darwin-arm64", "purl": "pkg:npm/%40rolldown/binding-darwin-arm64@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-darwin-x64", "purl": "pkg:npm/%40rolldown/binding-darwin-x64@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-freebsd-x64", "purl": "pkg:npm/%40rolldown/binding-freebsd-x64@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-linux-arm-gnueabihf", "purl": "pkg:npm/%40rolldown/binding-linux-arm-gnueabihf@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-linux-arm64-gnu", "purl": "pkg:npm/%40rolldown/binding-linux-arm64-gnu@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-linux-arm64-musl", "purl": "pkg:npm/%40rolldown/binding-linux-arm64-musl@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-linux-ppc64-gnu", "purl": "pkg:npm/%40rolldown/binding-linux-ppc64-gnu@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-linux-s390x-gnu", "purl": "pkg:npm/%40rolldown/binding-linux-s390x-gnu@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-linux-x64-gnu", "purl": "pkg:npm/%40rolldown/binding-linux-x64-gnu@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-linux-x64-musl", "purl": "pkg:npm/%40rolldown/binding-linux-x64-musl@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-openharmony-arm64", "purl": "pkg:npm/%40rolldown/binding-openharmony-arm64@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-win32-arm64-msvc", "purl": "pkg:npm/%40rolldown/binding-win32-arm64-msvc@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/binding-win32-x64-msvc", "purl": "pkg:npm/%40rolldown/binding-win32-x64-msvc@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rolldown/pluginutils", "purl": "pkg:npm/%40rolldown/pluginutils@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@rollup/pluginutils", "purl": "pkg:npm/%40rollup/pluginutils@5.4.0", "version": "5.4.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "@sqlite.org/sqlite-wasm", "purl": "pkg:npm/%40sqlite.org/sqlite-wasm@3.51.2-build9", "version": "3.51.2-build9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@standard-schema/spec", "purl": "pkg:npm/%40standard-schema/spec@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@storybook/addon-a11y", "purl": "pkg:npm/%40storybook/addon-a11y@10.6.0", "version": "10.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@storybook/builder-vite", "purl": "pkg:npm/%40storybook/builder-vite@10.6.0", "version": "10.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@storybook/global", "purl": "pkg:npm/%40storybook/global@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@storybook/icons", "purl": "pkg:npm/%40storybook/icons@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@storybook/react", "purl": "pkg:npm/%40storybook/react@10.6.0", "version": "10.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@storybook/react-dom-shim", "purl": "pkg:npm/%40storybook/react-dom-shim@10.6.0", "version": "10.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@storybook/react-vite", "purl": "pkg:npm/%40storybook/react-vite@10.6.0", "version": "10.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/container-queries", "purl": "pkg:npm/%40tailwindcss/container-queries@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/node", "purl": "pkg:npm/%40tailwindcss/node@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide", "purl": "pkg:npm/%40tailwindcss/oxide@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-android-arm64", "purl": "pkg:npm/%40tailwindcss/oxide-android-arm64@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-darwin-arm64", "purl": "pkg:npm/%40tailwindcss/oxide-darwin-arm64@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-darwin-x64", "purl": "pkg:npm/%40tailwindcss/oxide-darwin-x64@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-freebsd-x64", "purl": "pkg:npm/%40tailwindcss/oxide-freebsd-x64@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-linux-arm-gnueabihf", "purl": "pkg:npm/%40tailwindcss/oxide-linux-arm-gnueabihf@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-linux-arm64-gnu", "purl": "pkg:npm/%40tailwindcss/oxide-linux-arm64-gnu@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-linux-arm64-musl", "purl": "pkg:npm/%40tailwindcss/oxide-linux-arm64-musl@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-linux-x64-gnu", "purl": "pkg:npm/%40tailwindcss/oxide-linux-x64-gnu@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-linux-x64-musl", "purl": "pkg:npm/%40tailwindcss/oxide-linux-x64-musl@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-wasm32-wasi", "purl": "pkg:npm/%40tailwindcss/oxide-wasm32-wasi@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-win32-arm64-msvc", "purl": "pkg:npm/%40tailwindcss/oxide-win32-arm64-msvc@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/oxide-win32-x64-msvc", "purl": "pkg:npm/%40tailwindcss/oxide-win32-x64-msvc@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tailwindcss/postcss", "purl": "pkg:npm/%40tailwindcss/postcss@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tanstack/react-virtual", "purl": "pkg:npm/%40tanstack/react-virtual@3.14.13", "version": "3.14.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tanstack/virtual-core", "purl": "pkg:npm/%40tanstack/virtual-core@3.17.11", "version": "3.17.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@testing-library/dom", "purl": "pkg:npm/%40testing-library/dom@10.4.2", "version": "10.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@testing-library/jest-dom", "purl": "pkg:npm/%40testing-library/jest-dom@6.9.1", "version": "6.9.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@testing-library/jest-dom", "purl": "pkg:npm/%40testing-library/jest-dom@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@testing-library/react", "purl": "pkg:npm/%40testing-library/react@16.3.3", "version": "16.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@testing-library/user-event", "purl": "pkg:npm/%40testing-library/user-event@14.6.7", "version": "14.6.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tweenjs/tween.js", "purl": "pkg:npm/%40tweenjs/tween.js@23.1.3", "version": "23.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tybys/wasm-util", "purl": "pkg:npm/%40tybys/wasm-util@0.10.2", "version": "0.10.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@tybys/wasm-util", "purl": "pkg:npm/%40tybys/wasm-util@0.10.3", "version": "0.10.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/aria-query", "purl": "pkg:npm/%40types/aria-query@5.0.4", "version": "5.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/babel__core", "purl": "pkg:npm/%40types/babel__core@7.20.5", "version": "7.20.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/babel__generator", "purl": "pkg:npm/%40types/babel__generator@7.27.0", "version": "7.27.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/babel__template", "purl": "pkg:npm/%40types/babel__template@7.4.4", "version": "7.4.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/babel__traverse", "purl": "pkg:npm/%40types/babel__traverse@7.28.0", "version": "7.28.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/chai", "purl": "pkg:npm/%40types/chai@5.2.3", "version": "5.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/debug", "purl": "pkg:npm/%40types/debug@4.1.13", "version": "4.1.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/deep-eql", "purl": "pkg:npm/%40types/deep-eql@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/doctrine", "purl": "pkg:npm/%40types/doctrine@0.0.9", "version": "0.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/dompurify", "purl": "pkg:npm/%40types/dompurify@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/draco3d", "purl": "pkg:npm/%40types/draco3d@1.4.10", "version": "1.4.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/esrecurse", "purl": "pkg:npm/%40types/esrecurse@4.3.1", "version": "4.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/estree", "purl": "pkg:npm/%40types/estree@1.0.9", "version": "1.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/estree-jsx", "purl": "pkg:npm/%40types/estree-jsx@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/hast", "purl": "pkg:npm/%40types/hast@3.0.4", "version": "3.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/js-yaml", "purl": "pkg:npm/%40types/js-yaml@4.0.9", "version": "4.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/json-schema", "purl": "pkg:npm/%40types/json-schema@7.0.15", "version": "7.0.15" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/mdast", "purl": "pkg:npm/%40types/mdast@4.0.4", "version": "4.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/ms", "purl": "pkg:npm/%40types/ms@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/node", "purl": "pkg:npm/%40types/node@26.5.1", "version": "26.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/offscreencanvas", "purl": "pkg:npm/%40types/offscreencanvas@2019.7.3", "version": "2019.7.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/react", "purl": "pkg:npm/%40types/react@19.3.0", "version": "19.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/react-dom", "purl": "pkg:npm/%40types/react-dom@19.3.0", "version": "19.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/react-reconciler", "purl": "pkg:npm/%40types/react-reconciler@0.28.9", "version": "0.28.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/resolve", "purl": "pkg:npm/%40types/resolve@1.20.6", "version": "1.20.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/set-cookie-parser", "purl": "pkg:npm/%40types/set-cookie-parser@2.4.10", "version": "2.4.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/stats.js", "purl": "pkg:npm/%40types/stats.js@0.17.4", "version": "0.17.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/statuses", "purl": "pkg:npm/%40types/statuses@2.0.6", "version": "2.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/three", "purl": "pkg:npm/%40types/three@0.186.0", "version": "0.186.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/trusted-types", "purl": "pkg:npm/%40types/trusted-types@2.0.7", "version": "2.0.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/unist", "purl": "pkg:npm/%40types/unist@2.0.11", "version": "2.0.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/unist", "purl": "pkg:npm/%40types/unist@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@types/webxr", "purl": "pkg:npm/%40types/webxr@0.5.24", "version": "0.5.24" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/eslint-plugin", "purl": "pkg:npm/%40typescript-eslint/eslint-plugin@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/parser", "purl": "pkg:npm/%40typescript-eslint/parser@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/project-service", "purl": "pkg:npm/%40typescript-eslint/project-service@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/scope-manager", "purl": "pkg:npm/%40typescript-eslint/scope-manager@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/tsconfig-utils", "purl": "pkg:npm/%40typescript-eslint/tsconfig-utils@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/type-utils", "purl": "pkg:npm/%40typescript-eslint/type-utils@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/types", "purl": "pkg:npm/%40typescript-eslint/types@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/typescript-estree", "purl": "pkg:npm/%40typescript-eslint/typescript-estree@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/utils", "purl": "pkg:npm/%40typescript-eslint/utils@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@typescript-eslint/visitor-keys", "purl": "pkg:npm/%40typescript-eslint/visitor-keys@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@uiw/codemirror-extensions-basic-setup", "purl": "pkg:npm/%40uiw/codemirror-extensions-basic-setup@4.25.11", "version": "4.25.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@uiw/react-codemirror", "purl": "pkg:npm/%40uiw/react-codemirror@4.25.11", "version": "4.25.11" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "@ungap/structured-clone", "purl": "pkg:npm/%40ungap/structured-clone@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@use-gesture/core", "purl": "pkg:npm/%40use-gesture/core@10.3.1", "version": "10.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@use-gesture/react", "purl": "pkg:npm/%40use-gesture/react@10.3.1", "version": "10.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitejs/plugin-react", "purl": "pkg:npm/%40vitejs/plugin-react@6.1.1", "version": "6.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/coverage-v8", "purl": "pkg:npm/%40vitest/coverage-v8@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/expect", "purl": "pkg:npm/%40vitest/expect@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/istanbul-lib-coverage", "purl": "pkg:npm/%40vitest/istanbul-lib-coverage@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/istanbul-lib-report", "purl": "pkg:npm/%40vitest/istanbul-lib-report@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/mocker", "purl": "pkg:npm/%40vitest/mocker@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/pretty-format", "purl": "pkg:npm/%40vitest/pretty-format@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/pretty-format", "purl": "pkg:npm/%40vitest/pretty-format@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/spy", "purl": "pkg:npm/%40vitest/spy@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/spy", "purl": "pkg:npm/%40vitest/spy@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/ui", "purl": "pkg:npm/%40vitest/ui@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/utils", "purl": "pkg:npm/%40vitest/utils@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@vitest/utils", "purl": "pkg:npm/%40vitest/utils@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@webcontainer/env", "purl": "pkg:npm/%40webcontainer/env@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@whatwg-node/disposablestack", "purl": "pkg:npm/%40whatwg-node/disposablestack@0.0.6", "version": "0.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@whatwg-node/fetch", "purl": "pkg:npm/%40whatwg-node/fetch@0.10.13", "version": "0.10.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@whatwg-node/node-fetch", "purl": "pkg:npm/%40whatwg-node/node-fetch@0.8.6", "version": "0.8.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@whatwg-node/promise-helpers", "purl": "pkg:npm/%40whatwg-node/promise-helpers@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@whatwg-node/server", "purl": "pkg:npm/%40whatwg-node/server@0.10.18", "version": "0.10.18" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@xterm/addon-fit", "purl": "pkg:npm/%40xterm/addon-fit@0.11.0", "version": "0.11.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "@xterm/xterm", "purl": "pkg:npm/%40xterm/xterm@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "acorn", "purl": "pkg:npm/acorn@8.17.0", "version": "8.17.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "acorn-jsx", "purl": "pkg:npm/acorn-jsx@5.3.2", "version": "5.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "agent-base", "purl": "pkg:npm/agent-base@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "agent-base", "purl": "pkg:npm/agent-base@7.1.4", "version": "7.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ajv", "purl": "pkg:npm/ajv@6.15.0", "version": "6.15.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/kb-scripts/package-lock.json", "name": "ajv", "purl": "pkg:npm/ajv@8.20.0", "version": "8.20.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/kb-scripts/package-lock.json", "name": "ajv-formats", "purl": "pkg:npm/ajv-formats@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@6.3.0", "version": "6.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@6.2.3", "version": "6.2.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "ansis", "purl": "pkg:npm/ansis@4.3.1", "version": "4.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "any-promise", "purl": "pkg:npm/any-promise@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "Python-2.0" ], "location": ".github/guardrails-scripts/package-lock.json", "name": "argparse", "purl": "pkg:npm/argparse@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "aria-query", "purl": "pkg:npm/aria-query@5.3.0", "version": "5.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "assertion-error", "purl": "pkg:npm/assertion-error@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ast-types", "purl": "pkg:npm/ast-types@0.16.1", "version": "0.16.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ast-v8-to-istanbul", "purl": "pkg:npm/ast-v8-to-istanbul@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "asynckit", "purl": "pkg:npm/asynckit@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "axe-core", "purl": "pkg:npm/axe-core@4.13.0", "version": "4.13.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "axios", "purl": "pkg:npm/axios@1.18.1", "version": "1.18.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "bail", "purl": "pkg:npm/bail@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "balanced-match", "purl": "pkg:npm/balanced-match@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "balanced-match", "purl": "pkg:npm/balanced-match@4.0.4", "version": "4.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "base64-js", "purl": "pkg:npm/base64-js@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "baseline-browser-mapping", "purl": "pkg:npm/baseline-browser-mapping@2.11.20", "version": "2.11.20" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "bidi-js", "purl": "pkg:npm/bidi-js@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "bignumber.js", "purl": "pkg:npm/bignumber.js@9.3.1", "version": "9.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "brace-expansion", "purl": "pkg:npm/brace-expansion@2.1.4", "version": "2.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "brace-expansion", "purl": "pkg:npm/brace-expansion@5.0.9", "version": "5.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "browserslist", "purl": "pkg:npm/browserslist@4.28.8", "version": "4.28.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "buffer", "purl": "pkg:npm/buffer@6.0.3", "version": "6.0.3" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": ".github/ga4-scripts/package-lock.json", "name": "buffer-equal-constant-time", "purl": "pkg:npm/buffer-equal-constant-time@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "bundle-name", "purl": "pkg:npm/bundle-name@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "cacheable", "purl": "pkg:npm/cacheable@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "call-bind-apply-helpers", "purl": "pkg:npm/call-bind-apply-helpers@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "call-bound", "purl": "pkg:npm/call-bound@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "web/package-lock.json", "name": "callsite", "purl": "pkg:npm/callsite@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "camelcase", "purl": "pkg:npm/camelcase@5.3.1", "version": "5.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "camera-controls", "purl": "pkg:npm/camera-controls@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [ "CC-BY-4.0" ], "location": "web/package-lock.json", "name": "caniuse-lite", "purl": "pkg:npm/caniuse-lite@1.0.30001810", "version": "1.0.30001810" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".npm-caveman-cache/_npx/6a06cf38b325489e/package-lock.json", "name": "caveman-installer", "purl": "pkg:npm/caveman-installer@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ccount", "purl": "pkg:npm/ccount@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "chai", "purl": "pkg:npm/chai@5.3.3", "version": "5.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "chai", "purl": "pkg:npm/chai@6.2.2", "version": "6.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "character-entities", "purl": "pkg:npm/character-entities@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "character-entities-html4", "purl": "pkg:npm/character-entities-html4@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "character-entities-legacy", "purl": "pkg:npm/character-entities-legacy@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "character-reference-invalid", "purl": "pkg:npm/character-reference-invalid@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "check-error", "purl": "pkg:npm/check-error@2.1.3", "version": "2.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "chokidar", "purl": "pkg:npm/chokidar@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": ".npm-caveman-cache/_npx/ac0ed6aa23b37c1e/package-lock.json", "name": "chownr", "purl": "pkg:npm/chownr@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "cjs-module-lexer", "purl": "pkg:npm/cjs-module-lexer@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "cli-width", "purl": "pkg:npm/cli-width@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "cliui", "purl": "pkg:npm/cliui@8.0.1", "version": "8.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "clsx", "purl": "pkg:npm/clsx@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "codemirror", "purl": "pkg:npm/codemirror@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "color-convert", "purl": "pkg:npm/color-convert@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "color-name", "purl": "pkg:npm/color-name@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "combined-stream", "purl": "pkg:npm/combined-stream@1.0.8", "version": "1.0.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "comma-separated-tokens", "purl": "pkg:npm/comma-separated-tokens@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "commander", "purl": "pkg:npm/commander@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "convert-source-map", "purl": "pkg:npm/convert-source-map@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "cookie", "purl": "pkg:npm/cookie@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "cookie-es", "purl": "pkg:npm/cookie-es@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "crelt", "purl": "pkg:npm/crelt@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "cross-env", "purl": "pkg:npm/cross-env@7.0.3", "version": "7.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "cross-spawn", "purl": "pkg:npm/cross-spawn@7.0.6", "version": "7.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "css-tree", "purl": "pkg:npm/css-tree@3.2.1", "version": "3.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "css.escape", "purl": "pkg:npm/css.escape@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "csstype", "purl": "pkg:npm/csstype@3.2.3", "version": "3.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "data-uri-to-buffer", "purl": "pkg:npm/data-uri-to-buffer@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "data-urls", "purl": "pkg:npm/data-urls@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "debug", "purl": "pkg:npm/debug@4.4.3", "version": "4.4.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "decache", "purl": "pkg:npm/decache@4.6.2", "version": "4.6.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "decimal.js", "purl": "pkg:npm/decimal.js@10.6.0", "version": "10.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "decode-named-character-reference", "purl": "pkg:npm/decode-named-character-reference@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "deep-eql", "purl": "pkg:npm/deep-eql@5.0.2", "version": "5.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "deep-is", "purl": "pkg:npm/deep-is@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "default-browser", "purl": "pkg:npm/default-browser@5.5.0", "version": "5.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "default-browser-id", "purl": "pkg:npm/default-browser-id@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "define-lazy-prop", "purl": "pkg:npm/define-lazy-prop@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "delayed-stream", "purl": "pkg:npm/delayed-stream@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "dequal", "purl": "pkg:npm/dequal@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "detect-gpu", "purl": "pkg:npm/detect-gpu@5.0.70", "version": "5.0.70" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "detect-libc", "purl": "pkg:npm/detect-libc@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "devlop", "purl": "pkg:npm/devlop@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "doctrine", "purl": "pkg:npm/doctrine@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "dom-accessibility-api", "purl": "pkg:npm/dom-accessibility-api@0.5.16", "version": "0.5.16" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "dom-accessibility-api", "purl": "pkg:npm/dom-accessibility-api@0.6.3", "version": "0.6.3" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0 OR Apache-2.0" ], "location": "web/package-lock.json", "name": "dompurify", "purl": "pkg:npm/dompurify@3.4.15", "version": "3.4.15" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "dot-prop", "purl": "pkg:npm/dot-prop@9.0.0", "version": "9.0.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "draco3d", "purl": "pkg:npm/draco3d@1.5.7", "version": "1.5.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "dunder-proto", "purl": "pkg:npm/dunder-proto@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "eastasianwidth", "purl": "pkg:npm/eastasianwidth@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "ecdsa-sig-formatter", "purl": "pkg:npm/ecdsa-sig-formatter@1.0.11", "version": "1.0.11" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "echarts", "purl": "pkg:npm/echarts@6.1.0", "version": "6.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "electron-to-chromium", "purl": "pkg:npm/electron-to-chromium@1.5.418", "version": "1.5.418" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "emoji-regex", "purl": "pkg:npm/emoji-regex@8.0.0", "version": "8.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "emoji-regex", "purl": "pkg:npm/emoji-regex@9.2.2", "version": "9.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "empathic", "purl": "pkg:npm/empathic@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "enhanced-resolve", "purl": "pkg:npm/enhanced-resolve@5.24.3", "version": "5.24.3" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "web/package-lock.json", "name": "entities", "purl": "pkg:npm/entities@8.0.0", "version": "8.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "env-paths", "purl": "pkg:npm/env-paths@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "es-define-property", "purl": "pkg:npm/es-define-property@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "es-errors", "purl": "pkg:npm/es-errors@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "es-module-lexer", "purl": "pkg:npm/es-module-lexer@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "es-object-atoms", "purl": "pkg:npm/es-object-atoms@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "es-set-tostringtag", "purl": "pkg:npm/es-set-tostringtag@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "esbuild", "purl": "pkg:npm/esbuild@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "escalade", "purl": "pkg:npm/escalade@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "escape-string-regexp", "purl": "pkg:npm/escape-string-regexp@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "escape-string-regexp", "purl": "pkg:npm/escape-string-regexp@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "eslint", "purl": "pkg:npm/eslint@10.10.0", "version": "10.10.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "eslint-plugin-react-hooks", "purl": "pkg:npm/eslint-plugin-react-hooks@7.1.1", "version": "7.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "eslint-plugin-react-refresh", "purl": "pkg:npm/eslint-plugin-react-refresh@0.5.7", "version": "0.5.7" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "web/package-lock.json", "name": "eslint-scope", "purl": "pkg:npm/eslint-scope@9.1.2", "version": "9.1.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "eslint-visitor-keys", "purl": "pkg:npm/eslint-visitor-keys@3.4.3", "version": "3.4.3" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "eslint-visitor-keys", "purl": "pkg:npm/eslint-visitor-keys@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "web/package-lock.json", "name": "espree", "purl": "pkg:npm/espree@11.2.0", "version": "11.2.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "web/package-lock.json", "name": "esprima", "purl": "pkg:npm/esprima@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "esquery", "purl": "pkg:npm/esquery@1.7.0", "version": "1.7.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "web/package-lock.json", "name": "esrecurse", "purl": "pkg:npm/esrecurse@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "web/package-lock.json", "name": "estraverse", "purl": "pkg:npm/estraverse@5.3.0", "version": "5.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "estree-util-is-identifier-name", "purl": "pkg:npm/estree-util-is-identifier-name@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "estree-walker", "purl": "pkg:npm/estree-walker@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "estree-walker", "purl": "pkg:npm/estree-walker@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "web/package-lock.json", "name": "esutils", "purl": "pkg:npm/esutils@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "expect-type", "purl": "pkg:npm/expect-type@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "extend", "purl": "pkg:npm/extend@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/kb-scripts/package-lock.json", "name": "fast-deep-equal", "purl": "pkg:npm/fast-deep-equal@3.1.3", "version": "3.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fast-json-stable-stringify", "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fast-levenshtein", "purl": "pkg:npm/fast-levenshtein@2.0.6", "version": "2.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fast-string-truncated-width", "purl": "pkg:npm/fast-string-truncated-width@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fast-string-width", "purl": "pkg:npm/fast-string-width@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": ".github/kb-scripts/package-lock.json", "name": "fast-uri", "purl": "pkg:npm/fast-uri@4.1.4", "version": "4.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fast-wrap-ansi", "purl": "pkg:npm/fast-wrap-ansi@0.2.2", "version": "0.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fdir", "purl": "pkg:npm/fdir@6.5.0", "version": "6.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "fetch-blob", "purl": "pkg:npm/fetch-blob@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fflate", "purl": "pkg:npm/fflate@0.6.11", "version": "0.6.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fflate", "purl": "pkg:npm/fflate@0.8.3", "version": "0.8.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "file-entry-cache", "purl": "pkg:npm/file-entry-cache@11.1.5", "version": "11.1.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "flat-cache", "purl": "pkg:npm/flat-cache@6.1.23", "version": "6.1.23" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "flatted", "purl": "pkg:npm/flatted@3.4.4", "version": "3.4.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "follow-redirects", "purl": "pkg:npm/follow-redirects@1.16.0", "version": "1.16.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".github/ga4-scripts/package-lock.json", "name": "foreground-child", "purl": "pkg:npm/foreground-child@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "form-data", "purl": "pkg:npm/form-data@4.0.6", "version": "4.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "formdata-polyfill", "purl": "pkg:npm/formdata-polyfill@4.0.10", "version": "4.0.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "framer-motion", "purl": "pkg:npm/framer-motion@13.3.0", "version": "13.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fsevents", "purl": "pkg:npm/fsevents@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "fsevents", "purl": "pkg:npm/fsevents@2.3.3", "version": "2.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "function-bind", "purl": "pkg:npm/function-bind@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": ".github/ga4-scripts/package-lock.json", "name": "ga4-scripts", "purl": "pkg:npm/ga4-scripts@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "gaxios", "purl": "pkg:npm/gaxios@7.1.3", "version": "7.1.3" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "gaxios", "purl": "pkg:npm/gaxios@7.3.1", "version": "7.3.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "gcp-metadata", "purl": "pkg:npm/gcp-metadata@8.1.4", "version": "8.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "gensync", "purl": "pkg:npm/gensync@1.0.0-beta.2", "version": "1.0.0-beta.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "get-caller-file", "purl": "pkg:npm/get-caller-file@2.0.5", "version": "2.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "get-intrinsic", "purl": "pkg:npm/get-intrinsic@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "get-package-type", "purl": "pkg:npm/get-package-type@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "get-proto", "purl": "pkg:npm/get-proto@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".github/ga4-scripts/package-lock.json", "name": "glob", "purl": "pkg:npm/glob@10.5.0", "version": "10.5.0" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "web/package-lock.json", "name": "glob", "purl": "pkg:npm/glob@13.0.6", "version": "13.0.6" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "glob-parent", "purl": "pkg:npm/glob-parent@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "globals", "purl": "pkg:npm/globals@17.12.0", "version": "17.12.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "glsl-noise", "purl": "pkg:npm/glsl-noise@0.0.0", "version": "0.0.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "google-auth-library", "purl": "pkg:npm/google-auth-library@10.5.0", "version": "10.5.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "google-logging-utils", "purl": "pkg:npm/google-logging-utils@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "google-logging-utils", "purl": "pkg:npm/google-logging-utils@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "googleapis", "purl": "pkg:npm/googleapis@178.0.0", "version": "178.0.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "googleapis-common", "purl": "pkg:npm/googleapis-common@8.0.3", "version": "8.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "gopd", "purl": "pkg:npm/gopd@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "graceful-fs", "purl": "pkg:npm/graceful-fs@4.2.11", "version": "4.2.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "graphql", "purl": "pkg:npm/graphql@16.14.2", "version": "16.14.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "gtoken", "purl": "pkg:npm/gtoken@8.0.0", "version": "8.0.0" }, { "ecosystem": "npm", "licenses": [], "location": ".github/guardrails-scripts/package-lock.json", "name": "guardrails-scripts", "purl": "pkg:npm/guardrails-scripts@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "has-flag", "purl": "pkg:npm/has-flag@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "has-symbols", "purl": "pkg:npm/has-symbols@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "has-tostringtag", "purl": "pkg:npm/has-tostringtag@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "hashery", "purl": "pkg:npm/hashery@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "hasown", "purl": "pkg:npm/hasown@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "hast-util-sanitize", "purl": "pkg:npm/hast-util-sanitize@5.0.2", "version": "5.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "hast-util-to-jsx-runtime", "purl": "pkg:npm/hast-util-to-jsx-runtime@2.3.6", "version": "2.3.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "hast-util-whitespace", "purl": "pkg:npm/hast-util-whitespace@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "headers-polyfill", "purl": "pkg:npm/headers-polyfill@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "hermes-estree", "purl": "pkg:npm/hermes-estree@0.25.1", "version": "0.25.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "hermes-parser", "purl": "pkg:npm/hermes-parser@0.25.1", "version": "0.25.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "hls.js", "purl": "pkg:npm/hls.js@1.6.16", "version": "1.6.16" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "hookified", "purl": "pkg:npm/hookified@1.15.1", "version": "1.15.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "hookified", "purl": "pkg:npm/hookified@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "html-encoding-sniffer", "purl": "pkg:npm/html-encoding-sniffer@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "html-escaper", "purl": "pkg:npm/html-escaper@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "html-parse-stringify", "purl": "pkg:npm/html-parse-stringify@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "html-url-attributes", "purl": "pkg:npm/html-url-attributes@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "https-proxy-agent", "purl": "pkg:npm/https-proxy-agent@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "https-proxy-agent", "purl": "pkg:npm/https-proxy-agent@7.0.6", "version": "7.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "i18next", "purl": "pkg:npm/i18next@26.4.2", "version": "26.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "i18next-browser-languagedetector", "purl": "pkg:npm/i18next-browser-languagedetector@8.2.1", "version": "8.2.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "ieee754", "purl": "pkg:npm/ieee754@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ignore", "purl": "pkg:npm/ignore@5.3.2", "version": "5.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ignore", "purl": "pkg:npm/ignore@7.0.9", "version": "7.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "immediate", "purl": "pkg:npm/immediate@3.0.6", "version": "3.0.6" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "import-in-the-middle", "purl": "pkg:npm/import-in-the-middle@3.3.3", "version": "3.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "imurmurhash", "purl": "pkg:npm/imurmurhash@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "indent-string", "purl": "pkg:npm/indent-string@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "inline-style-parser", "purl": "pkg:npm/inline-style-parser@0.2.7", "version": "0.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-alphabetical", "purl": "pkg:npm/is-alphabetical@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-alphanumerical", "purl": "pkg:npm/is-alphanumerical@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-core-module", "purl": "pkg:npm/is-core-module@2.16.2", "version": "2.16.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-decimal", "purl": "pkg:npm/is-decimal@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-docker", "purl": "pkg:npm/is-docker@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-extglob", "purl": "pkg:npm/is-extglob@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "is-fullwidth-code-point", "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-glob", "purl": "pkg:npm/is-glob@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-hexadecimal", "purl": "pkg:npm/is-hexadecimal@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-inside-container", "purl": "pkg:npm/is-inside-container@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-node-process", "purl": "pkg:npm/is-node-process@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-plain-obj", "purl": "pkg:npm/is-plain-obj@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-potential-custom-element-name", "purl": "pkg:npm/is-potential-custom-element-name@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-promise", "purl": "pkg:npm/is-promise@2.2.2", "version": "2.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "is-wsl", "purl": "pkg:npm/is-wsl@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".github/ga4-scripts/package-lock.json", "name": "isexe", "purl": "pkg:npm/isexe@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "isomorphic-dompurify", "purl": "pkg:npm/isomorphic-dompurify@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "istanbul-lib-coverage", "purl": "pkg:npm/istanbul-lib-coverage@3.2.2", "version": "3.2.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "istanbul-lib-instrument", "purl": "pkg:npm/istanbul-lib-instrument@6.0.3", "version": "6.0.3" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "istanbul-lib-report", "purl": "pkg:npm/istanbul-lib-report@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "istanbul-reports", "purl": "pkg:npm/istanbul-reports@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "its-fine", "purl": "pkg:npm/its-fine@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "jackspeak", "purl": "pkg:npm/jackspeak@3.4.3", "version": "3.4.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "jiti", "purl": "pkg:npm/jiti@2.7.0", "version": "2.7.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "joi", "purl": "pkg:npm/joi@18.2.8", "version": "18.2.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "jose", "purl": "pkg:npm/jose@6.2.12", "version": "6.2.12" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "js-tokens", "purl": "pkg:npm/js-tokens@10.0.0", "version": "10.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "js-tokens", "purl": "pkg:npm/js-tokens@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/guardrails-scripts/package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@4.3.2", "version": "4.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@5.4.2", "version": "5.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "jsdom", "purl": "pkg:npm/jsdom@30.0.1", "version": "30.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "jsesc", "purl": "pkg:npm/jsesc@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "json-bigint", "purl": "pkg:npm/json-bigint@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "json-schema-traverse", "purl": "pkg:npm/json-schema-traverse@0.4.1", "version": "0.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/kb-scripts/package-lock.json", "name": "json-schema-traverse", "purl": "pkg:npm/json-schema-traverse@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "json-stable-stringify-without-jsonify", "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "json5", "purl": "pkg:npm/json5@2.2.3", "version": "2.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "jsonc-parser", "purl": "pkg:npm/jsonc-parser@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "jwa", "purl": "pkg:npm/jwa@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "jws", "purl": "pkg:npm/jws@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": ".github/kb-scripts/package-lock.json", "name": "kb-scripts", "purl": "pkg:npm/kb-scripts@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "keyv", "purl": "pkg:npm/keyv@5.6.0", "version": "5.6.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "kubestellar-console", "purl": "pkg:npm/kubestellar-console@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "levn", "purl": "pkg:npm/levn@0.4.1", "version": "0.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "lie", "purl": "pkg:npm/lie@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss", "purl": "pkg:npm/lightningcss@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss", "purl": "pkg:npm/lightningcss@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-android-arm64", "purl": "pkg:npm/lightningcss-android-arm64@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-android-arm64", "purl": "pkg:npm/lightningcss-android-arm64@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-darwin-arm64", "purl": "pkg:npm/lightningcss-darwin-arm64@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-darwin-arm64", "purl": "pkg:npm/lightningcss-darwin-arm64@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-darwin-x64", "purl": "pkg:npm/lightningcss-darwin-x64@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-darwin-x64", "purl": "pkg:npm/lightningcss-darwin-x64@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-freebsd-x64", "purl": "pkg:npm/lightningcss-freebsd-x64@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-freebsd-x64", "purl": "pkg:npm/lightningcss-freebsd-x64@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-arm-gnueabihf", "purl": "pkg:npm/lightningcss-linux-arm-gnueabihf@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-arm-gnueabihf", "purl": "pkg:npm/lightningcss-linux-arm-gnueabihf@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-arm64-gnu", "purl": "pkg:npm/lightningcss-linux-arm64-gnu@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-arm64-gnu", "purl": "pkg:npm/lightningcss-linux-arm64-gnu@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-arm64-musl", "purl": "pkg:npm/lightningcss-linux-arm64-musl@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-arm64-musl", "purl": "pkg:npm/lightningcss-linux-arm64-musl@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-x64-gnu", "purl": "pkg:npm/lightningcss-linux-x64-gnu@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-x64-gnu", "purl": "pkg:npm/lightningcss-linux-x64-gnu@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-x64-musl", "purl": "pkg:npm/lightningcss-linux-x64-musl@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-linux-x64-musl", "purl": "pkg:npm/lightningcss-linux-x64-musl@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-win32-arm64-msvc", "purl": "pkg:npm/lightningcss-win32-arm64-msvc@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-win32-arm64-msvc", "purl": "pkg:npm/lightningcss-win32-arm64-msvc@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-win32-x64-msvc", "purl": "pkg:npm/lightningcss-win32-x64-msvc@1.32.0", "version": "1.32.0" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "web/package-lock.json", "name": "lightningcss-win32-x64-msvc", "purl": "pkg:npm/lightningcss-win32-x64-msvc@1.33.0", "version": "1.33.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "lines-and-columns", "purl": "pkg:npm/lines-and-columns@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@7.2.0", "version": "7.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "lodash", "purl": "pkg:npm/lodash@4.18.1", "version": "4.18.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "lodash.debounce", "purl": "pkg:npm/lodash.debounce@4.0.8", "version": "4.0.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "longest-streak", "purl": "pkg:npm/longest-streak@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "loupe", "purl": "pkg:npm/loupe@3.2.1", "version": "3.2.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".github/ga4-scripts/package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@10.4.3", "version": "10.4.3" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "web/package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@11.5.1", "version": "11.5.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "web/package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@11.5.2", "version": "11.5.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "lucide-react", "purl": "pkg:npm/lucide-react@1.45.0", "version": "1.45.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "lz-string", "purl": "pkg:npm/lz-string@1.5.0", "version": "1.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "maath", "purl": "pkg:npm/maath@0.10.8", "version": "0.10.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "magic-string", "purl": "pkg:npm/magic-string@0.30.21", "version": "0.30.21" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "magic-string", "purl": "pkg:npm/magic-string@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "magic-string", "purl": "pkg:npm/magic-string@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "magicast", "purl": "pkg:npm/magicast@0.5.5", "version": "0.5.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "make-dir", "purl": "pkg:npm/make-dir@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "markdown-table", "purl": "pkg:npm/markdown-table@3.0.4", "version": "3.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "math-intrinsics", "purl": "pkg:npm/math-intrinsics@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-find-and-replace", "purl": "pkg:npm/mdast-util-find-and-replace@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-from-markdown", "purl": "pkg:npm/mdast-util-from-markdown@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-gfm", "purl": "pkg:npm/mdast-util-gfm@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-gfm-autolink-literal", "purl": "pkg:npm/mdast-util-gfm-autolink-literal@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-gfm-footnote", "purl": "pkg:npm/mdast-util-gfm-footnote@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-gfm-strikethrough", "purl": "pkg:npm/mdast-util-gfm-strikethrough@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-gfm-table", "purl": "pkg:npm/mdast-util-gfm-table@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-gfm-task-list-item", "purl": "pkg:npm/mdast-util-gfm-task-list-item@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-mdx-expression", "purl": "pkg:npm/mdast-util-mdx-expression@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-mdx-jsx", "purl": "pkg:npm/mdast-util-mdx-jsx@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-mdxjs-esm", "purl": "pkg:npm/mdast-util-mdxjs-esm@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-newline-to-break", "purl": "pkg:npm/mdast-util-newline-to-break@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-phrasing", "purl": "pkg:npm/mdast-util-phrasing@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-to-hast", "purl": "pkg:npm/mdast-util-to-hast@13.2.1", "version": "13.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-to-markdown", "purl": "pkg:npm/mdast-util-to-markdown@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mdast-util-to-string", "purl": "pkg:npm/mdast-util-to-string@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "CC0-1.0" ], "location": "web/package-lock.json", "name": "mdn-data", "purl": "pkg:npm/mdn-data@2.27.1", "version": "2.27.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "meshline", "purl": "pkg:npm/meshline@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "meshoptimizer", "purl": "pkg:npm/meshoptimizer@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark", "purl": "pkg:npm/micromark@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-core-commonmark", "purl": "pkg:npm/micromark-core-commonmark@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-extension-gfm", "purl": "pkg:npm/micromark-extension-gfm@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-extension-gfm-autolink-literal", "purl": "pkg:npm/micromark-extension-gfm-autolink-literal@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-extension-gfm-footnote", "purl": "pkg:npm/micromark-extension-gfm-footnote@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-extension-gfm-strikethrough", "purl": "pkg:npm/micromark-extension-gfm-strikethrough@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-extension-gfm-table", "purl": "pkg:npm/micromark-extension-gfm-table@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-extension-gfm-tagfilter", "purl": "pkg:npm/micromark-extension-gfm-tagfilter@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-extension-gfm-task-list-item", "purl": "pkg:npm/micromark-extension-gfm-task-list-item@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-factory-destination", "purl": "pkg:npm/micromark-factory-destination@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-factory-label", "purl": "pkg:npm/micromark-factory-label@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-factory-space", "purl": "pkg:npm/micromark-factory-space@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-factory-title", "purl": "pkg:npm/micromark-factory-title@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-factory-whitespace", "purl": "pkg:npm/micromark-factory-whitespace@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-character", "purl": "pkg:npm/micromark-util-character@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-chunked", "purl": "pkg:npm/micromark-util-chunked@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-classify-character", "purl": "pkg:npm/micromark-util-classify-character@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-combine-extensions", "purl": "pkg:npm/micromark-util-combine-extensions@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-decode-numeric-character-reference", "purl": "pkg:npm/micromark-util-decode-numeric-character-reference@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-decode-string", "purl": "pkg:npm/micromark-util-decode-string@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-encode", "purl": "pkg:npm/micromark-util-encode@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-html-tag-name", "purl": "pkg:npm/micromark-util-html-tag-name@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-normalize-identifier", "purl": "pkg:npm/micromark-util-normalize-identifier@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-resolve-all", "purl": "pkg:npm/micromark-util-resolve-all@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-sanitize-uri", "purl": "pkg:npm/micromark-util-sanitize-uri@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-subtokenize", "purl": "pkg:npm/micromark-util-subtokenize@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-symbol", "purl": "pkg:npm/micromark-util-symbol@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "micromark-util-types", "purl": "pkg:npm/micromark-util-types@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mime-db", "purl": "pkg:npm/mime-db@1.52.0", "version": "1.52.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mime-types", "purl": "pkg:npm/mime-types@2.1.35", "version": "2.1.35" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "min-indent", "purl": "pkg:npm/min-indent@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "web/package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@10.2.5", "version": "10.2.5" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".github/ga4-scripts/package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@9.0.9", "version": "9.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "minimist", "purl": "pkg:npm/minimist@1.2.8", "version": "1.2.8" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "minipass", "purl": "pkg:npm/minipass@7.1.3", "version": "7.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".npm-caveman-cache/_npx/ac0ed6aa23b37c1e/package-lock.json", "name": "minizlib", "purl": "pkg:npm/minizlib@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "module-details-from-path", "purl": "pkg:npm/module-details-from-path@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "motion-dom", "purl": "pkg:npm/motion-dom@13.3.0", "version": "13.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "motion-utils", "purl": "pkg:npm/motion-utils@13.3.0", "version": "13.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mrmime", "purl": "pkg:npm/mrmime@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "ms", "purl": "pkg:npm/ms@2.1.3", "version": "2.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "msw", "purl": "pkg:npm/msw@2.15.0", "version": "2.15.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "mute-stream", "purl": "pkg:npm/mute-stream@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "mz", "purl": "pkg:npm/mz@2.7.0", "version": "2.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "nanoid", "purl": "pkg:npm/nanoid@3.3.18", "version": "3.3.18" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "natural-compare", "purl": "pkg:npm/natural-compare@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "node-domexception", "purl": "pkg:npm/node-domexception@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "node-fetch", "purl": "pkg:npm/node-fetch@3.3.2", "version": "3.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "node-releases", "purl": "pkg:npm/node-releases@2.0.54", "version": "2.0.54" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "object-assign", "purl": "pkg:npm/object-assign@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "object-inspect", "purl": "pkg:npm/object-inspect@1.13.4", "version": "1.13.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "obug", "purl": "pkg:npm/obug@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "open", "purl": "pkg:npm/open@10.2.0", "version": "10.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "optionator", "purl": "pkg:npm/optionator@0.9.4", "version": "0.9.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "outvariant", "purl": "pkg:npm/outvariant@1.4.3", "version": "1.4.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "oxc-parser", "purl": "pkg:npm/oxc-parser@0.127.0", "version": "0.127.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "oxc-resolver", "purl": "pkg:npm/oxc-resolver@11.21.2", "version": "11.21.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "p-try", "purl": "pkg:npm/p-try@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "package-json-from-dist", "purl": "pkg:npm/package-json-from-dist@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "parse-entities", "purl": "pkg:npm/parse-entities@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "parse-gitignore", "purl": "pkg:npm/parse-gitignore@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "parse5", "purl": "pkg:npm/parse5@8.0.1", "version": "8.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "path-exists", "purl": "pkg:npm/path-exists@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "path-exists", "purl": "pkg:npm/path-exists@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "path-key", "purl": "pkg:npm/path-key@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "path-parse", "purl": "pkg:npm/path-parse@1.0.7", "version": "1.0.7" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": ".github/ga4-scripts/package-lock.json", "name": "path-scurry", "purl": "pkg:npm/path-scurry@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "web/package-lock.json", "name": "path-scurry", "purl": "pkg:npm/path-scurry@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "path-to-regexp", "purl": "pkg:npm/path-to-regexp@6.3.0", "version": "6.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "pathe", "purl": "pkg:npm/pathe@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "pathval", "purl": "pkg:npm/pathval@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "picocolors", "purl": "pkg:npm/picocolors@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "picomatch", "purl": "pkg:npm/picomatch@4.0.7", "version": "4.0.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "pirates", "purl": "pkg:npm/pirates@4.0.7", "version": "4.0.7" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "playwright", "purl": "pkg:npm/playwright@1.61.1", "version": "1.61.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "playwright-core", "purl": "pkg:npm/playwright-core@1.61.1", "version": "1.61.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "postcss", "purl": "pkg:npm/postcss@8.5.28", "version": "8.5.28" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "potpack", "purl": "pkg:npm/potpack@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "prelude-ls", "purl": "pkg:npm/prelude-ls@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "pretty-format", "purl": "pkg:npm/pretty-format@27.5.1", "version": "27.5.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "promise-worker-transferable", "purl": "pkg:npm/promise-worker-transferable@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "property-information", "purl": "pkg:npm/property-information@7.2.0", "version": "7.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "proxy-from-env", "purl": "pkg:npm/proxy-from-env@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "punycode", "purl": "pkg:npm/punycode@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "qified", "purl": "pkg:npm/qified@0.10.1", "version": "0.10.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": ".github/ga4-scripts/package-lock.json", "name": "qs", "purl": "pkg:npm/qs@6.16.0", "version": "6.16.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react", "purl": "pkg:npm/react@19.3.0", "version": "19.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react-docgen", "purl": "pkg:npm/react-docgen@8.0.3", "version": "8.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react-docgen-typescript", "purl": "pkg:npm/react-docgen-typescript@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react-dom", "purl": "pkg:npm/react-dom@19.3.0", "version": "19.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react-i18next", "purl": "pkg:npm/react-i18next@17.0.14", "version": "17.0.14" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react-is", "purl": "pkg:npm/react-is@17.0.2", "version": "17.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react-markdown", "purl": "pkg:npm/react-markdown@10.1.0", "version": "10.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react-router", "purl": "pkg:npm/react-router@8.3.0", "version": "8.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react-router-dom", "purl": "pkg:npm/react-router-dom@7.18.3", "version": "7.18.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "react-use-measure", "purl": "pkg:npm/react-use-measure@2.1.7", "version": "2.1.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "readdirp", "purl": "pkg:npm/readdirp@4.1.2", "version": "4.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "recast", "purl": "pkg:npm/recast@0.23.11", "version": "0.23.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "redent", "purl": "pkg:npm/redent@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "rehype-sanitize", "purl": "pkg:npm/rehype-sanitize@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "remark-breaks", "purl": "pkg:npm/remark-breaks@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "remark-gfm", "purl": "pkg:npm/remark-gfm@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "remark-parse", "purl": "pkg:npm/remark-parse@11.0.0", "version": "11.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "remark-rehype", "purl": "pkg:npm/remark-rehype@11.1.2", "version": "11.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "remark-stringify", "purl": "pkg:npm/remark-stringify@11.0.0", "version": "11.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "require-directory", "purl": "pkg:npm/require-directory@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/kb-scripts/package-lock.json", "name": "require-from-string", "purl": "pkg:npm/require-from-string@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "require-in-the-middle", "purl": "pkg:npm/require-in-the-middle@8.0.1", "version": "8.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.22.12", "version": "1.22.12" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "resolve-from", "purl": "pkg:npm/resolve-from@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "rettime", "purl": "pkg:npm/rettime@0.11.11", "version": "0.11.11" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".github/ga4-scripts/package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@5.0.10", "version": "5.0.10" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "web/package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@6.1.3", "version": "6.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "rolldown", "purl": "pkg:npm/rolldown@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "run-applescript", "purl": "pkg:npm/run-applescript@7.1.0", "version": "7.1.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "rxjs", "purl": "pkg:npm/rxjs@7.8.2", "version": "7.8.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "safe-buffer", "purl": "pkg:npm/safe-buffer@5.2.1", "version": "5.2.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "saxes", "purl": "pkg:npm/saxes@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "scheduler", "purl": "pkg:npm/scheduler@0.27.0", "version": "0.27.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "scheduler", "purl": "pkg:npm/scheduler@0.28.0", "version": "0.28.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "semver", "purl": "pkg:npm/semver@6.3.1", "version": "6.3.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.8.5", "version": "7.8.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "set-cookie-parser", "purl": "pkg:npm/set-cookie-parser@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "shebang-command", "purl": "pkg:npm/shebang-command@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "shebang-regex", "purl": "pkg:npm/shebang-regex@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "side-channel", "purl": "pkg:npm/side-channel@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "side-channel-list", "purl": "pkg:npm/side-channel-list@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "side-channel-map", "purl": "pkg:npm/side-channel-map@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "side-channel-weakmap", "purl": "pkg:npm/side-channel-weakmap@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "siginfo", "purl": "pkg:npm/siginfo@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".github/ga4-scripts/package-lock.json", "name": "signal-exit", "purl": "pkg:npm/signal-exit@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "sirv", "purl": "pkg:npm/sirv@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".npm-caveman-cache/_npx/ac0ed6aa23b37c1e/package-lock.json", "name": "skills", "purl": "pkg:npm/skills@1.5.21", "version": "1.5.21" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.6.1", "version": "0.6.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.7.6", "version": "0.7.6" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "source-map-js", "purl": "pkg:npm/source-map-js@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "space-separated-tokens", "purl": "pkg:npm/space-separated-tokens@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "stackback", "purl": "pkg:npm/stackback@0.0.2", "version": "0.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "stats-gl", "purl": "pkg:npm/stats-gl@2.4.2", "version": "2.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "stats.js", "purl": "pkg:npm/stats.js@0.17.0", "version": "0.17.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "statuses", "purl": "pkg:npm/statuses@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "std-env", "purl": "pkg:npm/std-env@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "storybook", "purl": "pkg:npm/storybook@10.6.0", "version": "10.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "strict-event-emitter", "purl": "pkg:npm/strict-event-emitter@0.5.1", "version": "0.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "string-width", "purl": "pkg:npm/string-width@4.2.3", "version": "4.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "string-width", "purl": "pkg:npm/string-width@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "stringify-entities", "purl": "pkg:npm/stringify-entities@4.0.4", "version": "4.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "strip-ansi", "purl": "pkg:npm/strip-ansi@6.0.1", "version": "6.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "strip-ansi", "purl": "pkg:npm/strip-ansi@7.2.0", "version": "7.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "strip-bom", "purl": "pkg:npm/strip-bom@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "strip-indent", "purl": "pkg:npm/strip-indent@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "strip-indent", "purl": "pkg:npm/strip-indent@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "style-mod", "purl": "pkg:npm/style-mod@4.1.3", "version": "4.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "style-to-js", "purl": "pkg:npm/style-to-js@1.1.21", "version": "1.1.21" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "style-to-object", "purl": "pkg:npm/style-to-object@1.0.14", "version": "1.0.14" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "sucrase", "purl": "pkg:npm/sucrase@3.35.1", "version": "3.35.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "supports-color", "purl": "pkg:npm/supports-color@7.2.0", "version": "7.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "supports-preserve-symlinks-flag", "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "suspend-react", "purl": "pkg:npm/suspend-react@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "symbol-tree", "purl": "pkg:npm/symbol-tree@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tagged-tag", "purl": "pkg:npm/tagged-tag@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tailwind-merge", "purl": "pkg:npm/tailwind-merge@3.6.0", "version": "3.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tailwindcss", "purl": "pkg:npm/tailwindcss@4.3.3", "version": "4.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tapable", "purl": "pkg:npm/tapable@2.3.3", "version": "2.3.3" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": ".npm-caveman-cache/_npx/ac0ed6aa23b37c1e/package-lock.json", "name": "tar", "purl": "pkg:npm/tar@7.5.22", "version": "7.5.22" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tar-mini", "purl": "pkg:npm/tar-mini@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "test-exclude", "purl": "pkg:npm/test-exclude@8.0.0", "version": "8.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "thenify", "purl": "pkg:npm/thenify@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "thenify-all", "purl": "pkg:npm/thenify-all@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "three", "purl": "pkg:npm/three@0.170.0", "version": "0.170.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "three", "purl": "pkg:npm/three@0.186.0", "version": "0.186.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "three-mesh-bvh", "purl": "pkg:npm/three-mesh-bvh@0.8.3", "version": "0.8.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "three-stdlib", "purl": "pkg:npm/three-stdlib@2.36.1", "version": "2.36.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tiny-invariant", "purl": "pkg:npm/tiny-invariant@1.3.3", "version": "1.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tinybench", "purl": "pkg:npm/tinybench@6.1.4", "version": "6.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tinyexec", "purl": "pkg:npm/tinyexec@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tinyglobby", "purl": "pkg:npm/tinyglobby@0.2.17", "version": "0.2.17" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tinyrainbow", "purl": "pkg:npm/tinyrainbow@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tinyrainbow", "purl": "pkg:npm/tinyrainbow@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tinyspy", "purl": "pkg:npm/tinyspy@4.0.4", "version": "4.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tldts", "purl": "pkg:npm/tldts@7.4.3", "version": "7.4.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tldts-core", "purl": "pkg:npm/tldts-core@7.4.3", "version": "7.4.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "totalist", "purl": "pkg:npm/totalist@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "tough-cookie", "purl": "pkg:npm/tough-cookie@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tr46", "purl": "pkg:npm/tr46@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "trim-lines", "purl": "pkg:npm/trim-lines@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "troika-three-text", "purl": "pkg:npm/troika-three-text@0.52.4", "version": "0.52.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "troika-three-utils", "purl": "pkg:npm/troika-three-utils@0.52.4", "version": "0.52.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "troika-worker-utils", "purl": "pkg:npm/troika-worker-utils@0.52.0", "version": "0.52.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "trough", "purl": "pkg:npm/trough@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ts-api-utils", "purl": "pkg:npm/ts-api-utils@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ts-dedent", "purl": "pkg:npm/ts-dedent@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "ts-interface-checker", "purl": "pkg:npm/ts-interface-checker@0.1.13", "version": "0.1.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tsconfig-paths", "purl": "pkg:npm/tsconfig-paths@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "0BSD" ], "location": "web/package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [ "0BSD" ], "location": "web/package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@2.8.1", "version": "2.8.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "tunnel-rat", "purl": "pkg:npm/tunnel-rat@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "type-check", "purl": "pkg:npm/type-check@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT OR CC0-1.0" ], "location": "web/package-lock.json", "name": "type-fest", "purl": "pkg:npm/type-fest@4.41.0", "version": "4.41.0" }, { "ecosystem": "npm", "licenses": [ "MIT OR CC0-1.0" ], "location": "web/package-lock.json", "name": "type-fest", "purl": "pkg:npm/type-fest@5.7.0", "version": "5.7.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "typescript", "purl": "pkg:npm/typescript@6.0.3", "version": "6.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "typescript-eslint", "purl": "pkg:npm/typescript-eslint@8.70.0", "version": "8.70.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "undici", "purl": "pkg:npm/undici@8.9.0", "version": "8.9.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "undici-types", "purl": "pkg:npm/undici-types@8.9.0", "version": "8.9.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "unicorn-magic", "purl": "pkg:npm/unicorn-magic@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "unified", "purl": "pkg:npm/unified@11.0.5", "version": "11.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "unist-util-is", "purl": "pkg:npm/unist-util-is@6.0.1", "version": "6.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "unist-util-position", "purl": "pkg:npm/unist-util-position@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "unist-util-stringify-position", "purl": "pkg:npm/unist-util-stringify-position@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "unist-util-visit", "purl": "pkg:npm/unist-util-visit@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "unist-util-visit-parents", "purl": "pkg:npm/unist-util-visit-parents@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "until-async", "purl": "pkg:npm/until-async@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "update-browserslist-db", "purl": "pkg:npm/update-browserslist-db@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "web/package-lock.json", "name": "uri-js", "purl": "pkg:npm/uri-js@4.4.1", "version": "4.4.1" }, { "ecosystem": "npm", "licenses": [ "BSD" ], "location": ".github/ga4-scripts/package-lock.json", "name": "url-template", "purl": "pkg:npm/url-template@2.0.8", "version": "2.0.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "urlpattern-polyfill", "purl": "pkg:npm/urlpattern-polyfill@10.1.0", "version": "10.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "use-sync-external-store", "purl": "pkg:npm/use-sync-external-store@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "utility-types", "purl": "pkg:npm/utility-types@3.11.0", "version": "3.11.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "uuid", "purl": "pkg:npm/uuid@14.0.1", "version": "14.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "vfile", "purl": "pkg:npm/vfile@6.0.3", "version": "6.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "vfile-message", "purl": "pkg:npm/vfile-message@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "vite", "purl": "pkg:npm/vite@8.3.0", "version": "8.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "vite-plugin-compression2", "purl": "pkg:npm/vite-plugin-compression2@2.5.3", "version": "2.5.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "vite-plugin-istanbul", "purl": "pkg:npm/vite-plugin-istanbul@9.0.1", "version": "9.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "vitest", "purl": "pkg:npm/vitest@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "w3c-keyname", "purl": "pkg:npm/w3c-keyname@2.2.8", "version": "2.2.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "w3c-xmlserializer", "purl": "pkg:npm/w3c-xmlserializer@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "wait-on", "purl": "pkg:npm/wait-on@9.1.0", "version": "9.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "web-streams-polyfill", "purl": "pkg:npm/web-streams-polyfill@3.3.3", "version": "3.3.3" }, { "ecosystem": "npm", "licenses": [], "location": "web/package-lock.json", "name": "webgl-constants", "purl": "pkg:npm/webgl-constants@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "webgl-sdf-generator", "purl": "pkg:npm/webgl-sdf-generator@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "web/package-lock.json", "name": "webidl-conversions", "purl": "pkg:npm/webidl-conversions@8.0.1", "version": "8.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "whatwg-mimetype", "purl": "pkg:npm/whatwg-mimetype@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "whatwg-url", "purl": "pkg:npm/whatwg-url@16.0.1", "version": "16.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "whatwg-url", "purl": "pkg:npm/whatwg-url@17.1.0", "version": "17.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".github/ga4-scripts/package-lock.json", "name": "which", "purl": "pkg:npm/which@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "why-is-node-running", "purl": "pkg:npm/why-is-node-running@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "word-wrap", "purl": "pkg:npm/word-wrap@1.2.5", "version": "1.2.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "wrap-ansi", "purl": "pkg:npm/wrap-ansi@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": ".github/ga4-scripts/package-lock.json", "name": "wrap-ansi", "purl": "pkg:npm/wrap-ansi@8.1.0", "version": "8.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "write-file-atomic", "purl": "pkg:npm/write-file-atomic@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "ws", "purl": "pkg:npm/ws@8.21.3", "version": "8.21.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "wsl-utils", "purl": "pkg:npm/wsl-utils@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "web/package-lock.json", "name": "xml-name-validator", "purl": "pkg:npm/xml-name-validator@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "xmlchars", "purl": "pkg:npm/xmlchars@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "y18n", "purl": "pkg:npm/y18n@5.0.8", "version": "5.0.8" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": ".npm-caveman-cache/_npx/ac0ed6aa23b37c1e/package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": ".npm-caveman-cache/_npx/ac0ed6aa23b37c1e/package-lock.json", "name": "yaml", "purl": "pkg:npm/yaml@2.9.0", "version": "2.9.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@17.7.3", "version": "17.7.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "web/package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@21.1.1", "version": "21.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "yocto-queue", "purl": "pkg:npm/yocto-queue@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "yocto-queue", "purl": "pkg:npm/yocto-queue@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "zod", "purl": "pkg:npm/zod@4.6.5", "version": "4.6.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "zod-validation-error", "purl": "pkg:npm/zod-validation-error@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "web/package-lock.json", "name": "zrender", "purl": "pkg:npm/zrender@6.1.0", "version": "6.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "zustand", "purl": "pkg:npm/zustand@4.5.7", "version": "4.5.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "zustand", "purl": "pkg:npm/zustand@5.0.14", "version": "5.0.14" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "web/package-lock.json", "name": "zwitch", "purl": "pkg:npm/zwitch@2.0.4", "version": "2.0.4" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "attrs", "purl": "pkg:pypi/attrs@26.1.0", "version": "26.1.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "boltons", "purl": "pkg:pypi/boltons@21.0.0", "version": "21.0.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "bracex", "purl": "pkg:pypi/bracex@3.0", "version": "3.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "certifi", "purl": "pkg:pypi/certifi@2026.6.17", "version": "2026.6.17" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-smoke.txt", "name": "cffi", "purl": "pkg:pypi/cffi@2.1.1", "version": "2.1.1" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "charset-normalizer", "purl": "pkg:pypi/charset-normalizer@3.4.9", "version": "3.4.9" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "click", "purl": "pkg:pypi/click@8.5.0", "version": "8.5.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "click-option-group", "purl": "pkg:pypi/click-option-group@0.5.9", "version": "0.5.9" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "colorama", "purl": "pkg:pypi/colorama@0.4.6", "version": "0.4.6" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-smoke.txt", "name": "cryptography", "purl": "pkg:pypi/cryptography@50.0.0", "version": "50.0.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "defusedxml", "purl": "pkg:pypi/defusedxml@0.7.1", "version": "0.7.1" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "deprecated", "purl": "pkg:pypi/deprecated@1.3.1", "version": "1.3.1" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "exceptiongroup", "purl": "pkg:pypi/exceptiongroup@1.2.2", "version": "1.2.2" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "face", "purl": "pkg:pypi/face@26.0.1", "version": "26.0.1" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "glom", "purl": "pkg:pypi/glom@22.1.0", "version": "22.1.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "googleapis-common-protos", "purl": "pkg:pypi/googleapis-common-protos@1.75.3", "version": "1.75.3" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "idna", "purl": "pkg:pypi/idna@3.18", "version": "3.18" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "importlib-metadata", "purl": "pkg:pypi/importlib-metadata@7.1.0", "version": "7.1.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "jsonschema", "purl": "pkg:pypi/jsonschema@4.26.0", "version": "4.26.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "jsonschema-specifications", "purl": "pkg:pypi/jsonschema-specifications@2025.9.1", "version": "2025.9.1" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "markdown-it-py", "purl": "pkg:pypi/markdown-it-py@4.2.0", "version": "4.2.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "mdurl", "purl": "pkg:pypi/mdurl@0.1.2", "version": "0.1.2" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "opentelemetry-api", "purl": "pkg:pypi/opentelemetry-api@1.44.0", "version": "1.44.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "opentelemetry-exporter-otlp-proto-common", "purl": "pkg:pypi/opentelemetry-exporter-otlp-proto-common@1.25.0", "version": "1.25.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "opentelemetry-exporter-otlp-proto-http", "purl": "pkg:pypi/opentelemetry-exporter-otlp-proto-http@1.25.0", "version": "1.25.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "opentelemetry-instrumentation", "purl": "pkg:pypi/opentelemetry-instrumentation@0.46b0", "version": "0.46b0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "opentelemetry-instrumentation-requests", "purl": "pkg:pypi/opentelemetry-instrumentation-requests@0.65b0", "version": "0.65b0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "opentelemetry-proto", "purl": "pkg:pypi/opentelemetry-proto@1.25.0", "version": "1.25.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "opentelemetry-sdk", "purl": "pkg:pypi/opentelemetry-sdk@1.25.0", "version": "1.25.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "opentelemetry-semantic-conventions", "purl": "pkg:pypi/opentelemetry-semantic-conventions@0.65b0", "version": "0.65b0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "opentelemetry-util-http", "purl": "pkg:pypi/opentelemetry-util-http@0.46b0", "version": "0.46b0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "packaging", "purl": "pkg:pypi/packaging@26.3", "version": "26.3" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "peewee", "purl": "pkg:pypi/peewee@3.19.0", "version": "3.19.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "protobuf", "purl": "pkg:pypi/protobuf@5.29.6", "version": "5.29.6" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-smoke.txt", "name": "pycparser", "purl": "pkg:pypi/pycparser@3.0", "version": "3.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "pygments", "purl": "pkg:pypi/pygments@2.20.0", "version": "2.20.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-smoke.txt", "name": "pyjwt", "purl": "pkg:pypi/pyjwt@2.13.0", "version": "2.13.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "referencing", "purl": "pkg:pypi/referencing@0.37.0", "version": "0.37.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "requests", "purl": "pkg:pypi/requests@2.34.2", "version": "2.34.2" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "rich", "purl": "pkg:pypi/rich@13.5.3", "version": "13.5.3" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "rpds-py", "purl": "pkg:pypi/rpds-py@2026.6.3", "version": "2026.6.3" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "ruamel-yaml", "purl": "pkg:pypi/ruamel-yaml@0.19.1", "version": "0.19.1" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "semgrep", "purl": "pkg:pypi/semgrep@1.102.0", "version": "1.102.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "setuptools", "purl": "pkg:pypi/setuptools@84.0.0", "version": "84.0.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "tomli", "purl": "pkg:pypi/tomli@2.4.1", "version": "2.4.1" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "typing-extensions", "purl": "pkg:pypi/typing-extensions@4.16.0", "version": "4.16.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "urllib3", "purl": "pkg:pypi/urllib3@2.7.0", "version": "2.7.0" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "wcmatch", "purl": "pkg:pypi/wcmatch@11.0.1", "version": "11.0.1" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "wrapt", "purl": "pkg:pypi/wrapt@1.17.3", "version": "1.17.3" }, { "ecosystem": "pypi", "licenses": [], "location": ".github/requirements-nightly.txt", "name": "zipp", "purl": "pkg:pypi/zipp@4.1.0", "version": "4.1.0" }, { "ecosystem": "unknown", "licenses": [], "location": ".github/workflows/perf-bundle-size.yml", "name": "./.github/workflows/_perf-regression-issue.yml", "purl": "", "version": "UNKNOWN" }, { "ecosystem": "unknown", "licenses": [], "location": ".github/workflows/release.yml", "name": "./.github/workflows/helm-test.yml", "purl": "", "version": "UNKNOWN" }, { "ecosystem": "unknown", "licenses": [], "location": ".github/workflows/hive-interactive.yml", "name": "./.github/workflows/hive-trust-gate.yml", "purl": "", "version": "UNKNOWN" } ], "description": "View security signals across multiple Kubernetes clusters", "errors": [], "go_binary": { "asset": "console_0.3.42_linux_amd64.tar.gz", "binary": "console", "db": "https://vuln.go.dev", "db_last_modified": "2026-10-27T21:16:18Z", "findings": [ { "aliases": [ "CVE-2026-94448" ], "epss": { "cve": "CVE-2026-94448", "percentile": 0.21475, "score": 0.00289 }, "fixed_version": "v1.26.9", "id": "GO-2026-6599", "kev": null, "level": "symbol", "module": "stdlib", "summary": "Reset context tracking on consecutive template expressions in html/template", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-97030" ], "epss": { "cve": "CVE-2026-97030", "percentile": 0.21475, "score": 0.00289 }, "fixed_version": "v1.26.9", "id": "GO-2026-6600", "kev": null, "level": "symbol", "module": "stdlib", "summary": "Recognize yield as regexp preceder keyword in html/template", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-78659" ], "epss": { "cve": "CVE-2026-78659", "percentile": 0.50082, "score": 0.00627 }, "fixed_version": "v1.26.9", "id": "GO-2026-6603", "kev": null, "level": "symbol", "module": "stdlib", "summary": "HTTP/2 server memory exhaustion due to Trailer headers in net/http", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-56866" ], "epss": { "cve": "CVE-2026-56866", "percentile": 0.40968, "score": 0.00473 }, "fixed_version": "v1.26.9", "id": "GO-2026-6605", "kev": null, "level": "symbol", "module": "stdlib", "summary": "HTTP/1 client connection desynchronization after CONNECT rejection in net/http", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-97031" ], "epss": { "cve": "CVE-2026-97031", "percentile": 0.44095, "score": 0.00519 }, "fixed_version": "v1.26.9", "id": "GO-2026-6607", "kev": null, "level": "symbol", "module": "stdlib", "summary": "Reject malformed ECH outer extension references in crypto/tls", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-94440" ], "epss": { "cve": "CVE-2026-94440", "percentile": 0.4362, "score": 0.00511 }, "fixed_version": "v1.26.9", "id": "GO-2026-6608", "kev": null, "level": "symbol", "module": "stdlib", "summary": "Memory limit bypass when parsing MIME headers in net/textproto, mime/multipart", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-78667" ], "epss": { "cve": "CVE-2026-78667", "percentile": 0.41455, "score": 0.0048 }, "fixed_version": "v1.26.9", "id": "GO-2026-6609", "kev": null, "level": "symbol", "module": "stdlib", "summary": "Lack of limit on size of parsed Range headers in net/http", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-78660" ], "epss": { "cve": "CVE-2026-78660", "percentile": 0.36838, "score": 0.00425 }, "fixed_version": "v1.26.9", "id": "GO-2026-6610", "kev": null, "level": "symbol", "module": "stdlib", "summary": "HTTP/2 transport accepts malformed framing-related headers in net/http", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-78669" ], "epss": { "cve": "CVE-2026-78669", "percentile": 0.49426, "score": 0.00614 }, "fixed_version": "v1.26.9", "id": "GO-2026-6611", "kev": null, "level": "symbol", "module": "stdlib", "summary": "Excessive CPU consumption from repeated initial window changes in net/http", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-78663" ], "epss": { "cve": "CVE-2026-78663", "percentile": 0.49813, "score": 0.00622 }, "fixed_version": "v1.26.9", "id": "GO-2026-6612", "kev": null, "level": "symbol", "module": "stdlib", "summary": "Double flow control refund on HTTP/2 server streams in net/http", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-94439" ], "epss": { "cve": "CVE-2026-94439", "percentile": 0.35772, "score": 0.00414 }, "fixed_version": "v1.26.9", "id": "GO-2026-6613", "kev": null, "level": "symbol", "module": "stdlib", "summary": "HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-97032" ], "epss": { "cve": "CVE-2026-97032", "percentile": 0.42154, "score": 0.0049 }, "fixed_version": "v1.26.9", "id": "GO-2026-6617", "kev": null, "level": "symbol", "module": "stdlib", "summary": "HTTP/2 server crash due to HPACK encoder race in net/http", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-111943" ], "epss": { "cve": "CVE-2026-111943", "percentile": 0.33793, "score": 0.00396 }, "fixed_version": "v1.26.10", "id": "GO-2026-6809", "kev": null, "level": "symbol", "module": "stdlib", "summary": "Distrust compromised intermediate certificates in crypto/x509", "version": "v1.26.6" }, { "aliases": [ "CVE-2026-78661" ], "epss": { "cve": "CVE-2026-78661", "percentile": 0.08063, "score": 0.00185 }, "fixed_version": "v0.62.0", "id": "GO-2026-6860", "kev": null, "level": "symbol", "module": "golang.org/x/net", "summary": "Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net", "version": "v0.58.0" }, { "aliases": [ "CVE-2026-97045" ], "epss": { "cve": "CVE-2026-97045", "percentile": 0.10117, "score": 0.00202 }, "fixed_version": "v0.62.0", "id": "GO-2026-6866", "kev": null, "level": "symbol", "module": "golang.org/x/net", "summary": "Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net", "version": "v0.58.0" }, { "aliases": [ "CVE-2026-84445", "GHSA-2v4p-qf9q-27wj" ], "epss": { "cve": "CVE-2026-84445", "percentile": 0.5072, "score": 0.00641 }, "fixed_version": "v1.83.2", "id": "GO-2026-6443", "kev": null, "level": "symbol", "module": "google.golang.org/grpc", "summary": "Server panic via missing authority or Host headers in google.golang.org/grpc", "version": "v1.83.1" }, { "aliases": [ "CVE-2026-81870", "GHSA-8wmf-6v46-5gfg" ], "epss": { "cve": "CVE-2026-81870", "percentile": 0.18557, "score": 0.00266 }, "fixed_version": "v1.45.0", "id": "GO-2026-6505", "kev": null, "level": "module", "module": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "summary": "OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace", "version": "v1.44.0" } ], "go_version": "go1.26.6", "main_module": "github.com/kubestellar/console" }, "id": "kubestellar__console", "manifests": [ ".github/ga4-scripts/package-lock.json", ".github/ga4-scripts/package.json", ".github/guardrails-scripts/package-lock.json", ".github/guardrails-scripts/package.json", ".github/kb-scripts/package-lock.json", ".github/kb-scripts/package.json", ".github/requirements-nightly.txt", ".github/requirements-smoke.txt", ".github/workflows/_perf-regression-issue.yml", ".github/workflows/a11y-audit.yml", ".github/workflows/accm-history-update.yml", ".github/workflows/acmm-level-monitor.yml", ".github/workflows/add-help-wanted.yml", ".github/workflows/ai-attribution.yml", ".github/workflows/ai-fix.yml", ".github/workflows/api-contract.yml", ".github/workflows/assignment-helper.yml", ".github/workflows/auth-login-smoke.yml", ".github/workflows/auto-qa-tuner.yml", ".github/workflows/auto-qa.yml", ".github/workflows/auto-test-gen.yml", ".github/workflows/auto-triage.lock.yml", ".github/workflows/build-deploy.yml", ".github/workflows/card-standard-nightly.yml", ".github/workflows/ci-cluster-probe.yml", ".github/workflows/claude-code-review.yml", ".github/workflows/claude.yml", ".github/workflows/cleanup-screenshots.yml", ".github/workflows/codeql.yml", ".github/workflows/console-app-roundtrip.yml", ".github/workflows/console-app-smoke.yml", ".github/workflows/console-issue-labels.yml", ".github/workflows/console-live-macos-canary.yml", ".github/workflows/console-live-promote-failure-issue.yml", ".github/workflows/console-live-promote.yml", ".github/workflows/copilot-automation.yml", ".github/workflows/copilot-dco.yml", ".github/workflows/coverage-gate.yml", ".github/workflows/coverage-hourly.yml", ".github/workflows/coverage-report.yml", ".github/workflows/coverage-weekly-review.yml", ".github/workflows/cross-platform-build.yml", ".github/workflows/dashboard-lint.yml", ".github/workflows/deploy-checksum.yml", ".github/workflows/feedback.yml", ".github/workflows/forensics-on-fix.yml", ".github/workflows/fullstack-e2e.yml", ".github/workflows/ga4-error-monitor.yml", ".github/workflows/ga4-error-regression.yml", ".github/workflows/ga4-mobile-monitor.yml", ".github/workflows/go-test.yml", ".github/workflows/greetings.yml", ".github/workflows/helm-release.yml", ".github/workflows/helm-test.yml", ".github/workflows/hive-interactive.yml", ".github/workflows/hive-trust-gate.yml", ".github/workflows/hold-issue-guard.yml", ".github/workflows/implement-fix.lock.yml", ".github/workflows/kb-nightly-validation.yml", ".github/workflows/label-helper.yml", ".github/workflows/lint-warning-gate.yml", ".github/workflows/mission-control-kind-e2e.yml", ".github/workflows/mttr-badge.yml", ".github/workflows/netlify-error-reporter.yml", ".github/workflows/new-contributor-pr-gate.yml", ".github/workflows/nightly-compliance.yml", ".github/workflows/nightly-dashboard-health.yml", ".github/workflows/nightly-dast.yml", ".github/workflows/nightly-gh-aw-version-check.yml", ".github/workflows/nightly-llmd-guides.yml", ".github/workflows/nightly-test-suite.yml", ".github/workflows/nightly-ux-journeys.yml", ".github/workflows/nil-safety.yml", ".github/workflows/perf-bundle-size.yml", ".github/workflows/perf-react-commits-idle.yml", ".github/workflows/perf-react-commits.yml", ".github/workflows/perf-ttfi.yml", ".github/workflows/playwright-nightly.yml", ".github/workflows/playwright.yml", ".github/workflows/post-merge-verify.yml", ".github/workflows/pr-claude-notice.yml", ".github/workflows/pr-closed-verification.yml", ".github/workflows/pre-merge-gate.yml", ".github/workflows/preview-status.yml", ".github/workflows/privileged-client-lint.yml", ".github/workflows/process-screenshots.yml", ".github/workflows/release.yml", ".github/workflows/rewards-types-drift.yml", ".github/workflows/route-smoke.yml", ".github/workflows/scanner-merge-guardrails.yml", ".github/workflows/scorecard.yml", ".github/workflows/stale.yml", ".github/workflows/startup-smoke-test.yml", ".github/workflows/startup-smoke.yml", ".github/workflows/stuck-detection.yml", ".github/workflows/submodule-guard.yml", ".github/workflows/test-coverage-check.yml", ".github/workflows/test-installer.yml", ".github/workflows/tier-classifier.yml", ".github/workflows/triage-command.yml", ".github/workflows/ui-ux-standard.yml", ".github/workflows/update-guard.yml", ".github/workflows/upgrade-smoke.yml", ".github/workflows/visual-regression.yml", ".github/workflows/workflow-failure-issue.yml", ".npm-caveman-cache/_npx/6a06cf38b325489e/package-lock.json", ".npm-caveman-cache/_npx/6a06cf38b325489e/package.json", ".npm-caveman-cache/_npx/ac0ed6aa23b37c1e/package-lock.json", ".npm-caveman-cache/_npx/ac0ed6aa23b37c1e/package.json", "go.mod", "go.sum", "package-lock.json", "web/package-lock.json", "web/package.json" ], "name": "KubeStellar Console", "osv": { "advisories": 105, "available": true, "confirmed": 105, "osv_only": [], "warning": null }, "ref": "v0.3.42", "ref_kind": "release", "release_integrity": { "asset": "console_0.3.42_linux_amd64.tar.gz", "assets": 10, "build_provenance": "verified", "checksums_published": true, "digest_matches_github": true, "immutable_release": null, "methods": [ { "covers": "checksums file checksums.txt", "identity": "GitHub Actions workflow in kubestellar/console", "method": "cosign", "signer": "URI:https://github.com/kubestellar/console/.github/workflows/release.yml@refs/heads/main", "status": "verified" }, { "method": "github-attestation", "predicates": [ "https://slsa.dev/provenance/v1" ], "status": "verified" } ], "provenance_published": false, "sbom_published": false, "signature": "own-workflow", "signatures_published": true, "signer": "URI:https://github.com/kubestellar/console/.github/workflows/release.yml@refs/heads/main", "verdict": "verified" }, "released_at": "2026-09-20T08:15:03Z", "repository": "kubestellar/console", "sbomlyze_diff": { "added": 421, "changed": 13, "drift": { "integrity_drift": 0, "metadata_drift": 0, "version_drift": 13 }, "findings": [ "Attack surface: +512 packages (54.9%)", "12 version downgrades detected: agent-base 7.1.4\u21926.0.2, ajv 8.20.0\u21926.15.0, escape-string-regexp 5.0.0\u21924.0.0, find-up 7.0.0\u21924.1.0, https-proxy-agent 7.0.6\u21925.0.1 + 7 more", "1 version upgrades (1 major) among 933 shared packages", "Core system packages stable: github (249), golang (102), file (98), pypi (50) unchanged", "License shift: copyleft +26, permissive +478" ], "html": "sbomlyze-diff.html", "removed": 0 }, "scanned_at": "2026-11-02T03:07:22+00:00", "scorecard": null, "scorecard_note": "the OpenSSF public dataset entry is 197 days old (limit 30); the Scorecard CLI fallback was skipped because this shard's weekly budget was used", "vulnerabilities": [ { "aliases": [], "ecosystem": "pypi", "epss": null, "fix_state": "fixed", "fixed_in": [ "2026.10.18" ], "id": "GHSA-6q48-6c7w-9gw2", "kev": null, "location": ".github/requirements-nightly.txt", "osv_confirmed": true, "package": "certifi", "severity": "Critical", "summary": "certifi bundles emSign root CAs with compromised intermediate CA keys", "url": "https://github.com/advisories/GHSA-6q48-6c7w-9gw2", "version": "2026.6.17" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.4.17" ], "id": "GHSA-cg2g-xh64-v4q7", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "dompurify", "severity": "Critical", "summary": "DOMPurify SAFE_FOR_TEMPLATES bypass: split template expressions survive in attached shadow root content on DOM output modes", "url": "https://github.com/advisories/GHSA-cg2g-xh64-v4q7", "version": "3.4.15" }, { "aliases": [ "CVE-2026-78663" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-78663", "percentile": 0.49813, "score": 0.00622 }, "fix_state": "fixed", "fixed_in": [ "0.60.0" ], "id": "GO-2026-6612", "in_binary": "vulnerable code in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "golang.org/x/net", "severity": "Critical", "summary": "The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a request handler reads the buffered data. A malicious client can exploit this to bypass the configure", "url": "https://go.dev/cl/847187", "version": "v0.58.0" }, { "aliases": [ "CVE-2026-102268" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102268", "percentile": 0.14618, "score": 0.00236 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-ffc3-869f-jxw9", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "Critical", "summary": "PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard", "url": "https://github.com/advisories/GHSA-ffc3-869f-jxw9", "version": "2.13.0" }, { "aliases": [ "CVE-2026-114125" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114125", "percentile": 0.32565, "score": 0.00385 }, "fix_state": "fixed", "fixed_in": [ "10.6.2" ], "id": "GHSA-f2ph-cmg5-wxc8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "storybook", "severity": "Critical", "summary": "Storybook: Missing origin validation in Storybook preview allows code injection from malicious websites", "url": "https://github.com/advisories/GHSA-f2ph-cmg5-wxc8", "version": "10.6.0" }, { "aliases": [ "CVE-2026-19481" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-19481", "percentile": 0.42376, "score": 0.00493 }, "fix_state": "fixed", "fixed_in": [ "3.2.1" ], "id": "GHSA-x8mw-p69m-v3mx", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "@fastify/busboy", "severity": "High", "summary": "@fastify/busboy vulnerable to Denial of Service via prototype-named multipart part header", "url": "https://github.com/advisories/GHSA-x8mw-p69m-v3mx", "version": "3.2.0" }, { "aliases": [ "CVE-2026-19484" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-19484", "percentile": 0.49449, "score": 0.00615 }, "fix_state": "fixed", "fixed_in": [ "3.2.1" ], "id": "GHSA-xjh9-v7x6-24jw", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "@fastify/busboy", "severity": "High", "summary": "@fastify/busboy vulnerable to Denial of Service via oversized multipart boundary", "url": "https://github.com/advisories/GHSA-xjh9-v7x6-24jw", "version": "3.2.0" }, { "aliases": [ "CVE-2026-101898" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101898", "percentile": 0.45765, "score": 0.00545 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-3pq3-5fj3-cg6v", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls", "url": "https://github.com/advisories/GHSA-3pq3-5fj3-cg6v", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101901" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101901", "percentile": 0.45207, "score": 0.00536 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-542g-h47m-68v8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization", "url": "https://github.com/advisories/GHSA-542g-h47m-68v8", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101903" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101903", "percentile": 0.37877, "score": 0.00436 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-c29m-xwm3-cm6r", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)", "url": "https://github.com/advisories/GHSA-c29m-xwm3-cm6r", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101905" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101905", "percentile": 0.36122, "score": 0.00418 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-m8m8-qj5v-23w3", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection", "url": "https://github.com/advisories/GHSA-m8m8-qj5v-23w3", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101906" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101906", "percentile": 0.39677, "score": 0.00457 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-mghh-pgcx-3jjj", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: ReDoS (O(N\u00b2)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location", "url": "https://github.com/advisories/GHSA-mghh-pgcx-3jjj", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101907" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101907", "percentile": 0.40789, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-r4gj-5m52-g5wh", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF", "url": "https://github.com/advisories/GHSA-r4gj-5m52-g5wh", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101909" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101909", "percentile": 0.42646, "score": 0.00497 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-x97p-jq2g-jp4f", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "High", "summary": "Axios: Prototype Pollution Gadget in axios toFormData Options", "url": "https://github.com/advisories/GHSA-x97p-jq2g-jp4f", "version": "1.18.1" }, { "aliases": [ "CVE-2026-102276" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102276", "percentile": 0.39514, "score": 0.00455 }, "fix_state": "fixed", "fixed_in": [ "2.1.5" ], "id": "GHSA-6j4f-fj2g-mc7p", "kev": null, "location": ".github/ga4-scripts/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion", "url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p", "version": "2.1.4" }, { "aliases": [ "CVE-2026-102276" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102276", "percentile": 0.39514, "score": 0.00455 }, "fix_state": "fixed", "fixed_in": [ "5.0.10" ], "id": "GHSA-6j4f-fj2g-mc7p", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion", "url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p", "version": "5.0.9" }, { "aliases": [ "CVE-2026-102278" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102278", "percentile": 0.42209, "score": 0.00491 }, "fix_state": "fixed", "fixed_in": [ "2.1.6" ], "id": "GHSA-qhr7-859c-m2p7", "kev": null, "location": ".github/ga4-scripts/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion", "url": "https://github.com/advisories/GHSA-qhr7-859c-m2p7", "version": "2.1.4" }, { "aliases": [ "CVE-2026-102278" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102278", "percentile": 0.42209, "score": 0.00491 }, "fix_state": "fixed", "fixed_in": [ "5.0.11" ], "id": "GHSA-qhr7-859c-m2p7", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion", "url": "https://github.com/advisories/GHSA-qhr7-859c-m2p7", "version": "5.0.9" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.4.17" ], "id": "GHSA-mrv2-3pqr-j5jr", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "dompurify", "severity": "High", "summary": "DOMPurify IN_PLACE: hook that removes a parent or sibling leaves the detached subtree's event handlers armed (incomplete fix for GHSA-p98j-92pf-mc4p)", "url": "https://github.com/advisories/GHSA-mrv2-3pqr-j5jr", "version": "3.4.15" }, { "aliases": [ "CVE-2026-111755" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111755", "percentile": 0.40761, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "1.16.1" ], "id": "GHSA-8r9p-f939-6h3c", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "High", "summary": "follow-redirects sensitiveHeaders regex escaping can expose credential headers", "url": "https://github.com/advisories/GHSA-8r9p-f939-6h3c", "version": "1.16.0" }, { "aliases": [ "CVE-2026-116689" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-116689", "percentile": 0.18802, "score": 0.00266 }, "fix_state": "fixed", "fixed_in": [ "1.16.2" ], "id": "GHSA-mrwp-f3q8-3g9p", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "High", "summary": "follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects", "url": "https://github.com/advisories/GHSA-mrwp-f3q8-3g9p", "version": "1.16.0" }, { "aliases": [ "CVE-2026-111756" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111756", "percentile": 0.40762, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "1.16.1" ], "id": "GHSA-q3jh-wrc6-jgq8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "follow-redirects", "severity": "High", "summary": "follow-redirects array-form headers bypass cross-origin credential stripping", "url": "https://github.com/advisories/GHSA-q3jh-wrc6-jgq8", "version": "1.16.0" }, { "aliases": [ "CVE-2026-78659" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-78659", "percentile": 0.50082, "score": 0.00627 }, "fix_state": "fixed", "fixed_in": [ "0.60.0" ], "id": "GO-2026-6603", "in_binary": "vulnerable code in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "golang.org/x/net", "severity": "High", "summary": "When \"Trailer\" headers are sent by a client, the HTTP server internally uses the header values to populate the Request.Trailer map passed to the server handler. Because Request.Trailer is a map, each entry incurs memory overhead. For HTTP/2 servers, a malicious client can exploit this by sending a \"", "url": "https://go.dev/cl/847185", "version": "v0.58.0" }, { "aliases": [ "CVE-2026-78660" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-78660", "percentile": 0.36838, "score": 0.00425 }, "fix_state": "fixed", "fixed_in": [ "0.60.0" ], "id": "GO-2026-6610", "in_binary": "vulnerable code in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "golang.org/x/net", "severity": "High", "summary": "Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. However, this makes it possible for our HTTP/2 implementation to forward responses containing such headers to an HTTP/1 client when acting as a re", "url": "https://go.dev/cl/835145", "version": "v0.58.0" }, { "aliases": [ "CVE-2026-78669" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-78669", "percentile": 0.49426, "score": 0.00614 }, "fix_state": "fixed", "fixed_in": [ "0.60.0" ], "id": "GO-2026-6611", "in_binary": "vulnerable code in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "golang.org/x/net", "severity": "High", "summary": "A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.", "url": "https://go.dev/cl/847186", "version": "v0.58.0" }, { "aliases": [ "CVE-2026-97032" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-97032", "percentile": 0.42154, "score": 0.0049 }, "fix_state": "fixed", "fixed_in": [ "0.60.0" ], "id": "GO-2026-6617", "in_binary": "vulnerable code in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "golang.org/x/net", "severity": "High", "summary": "HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. This happens because the server modifies the HPACK encoder from two goroutines without synchronization: one uses the encoder to encode a HEADERS frame as part of a response sent to a client and the ot", "url": "https://go.dev/cl/847188", "version": "v0.58.0" }, { "aliases": [ "CVE-2026-84445" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-84445", "percentile": 0.5072, "score": 0.00641 }, "fix_state": "fixed", "fixed_in": [ "1.83.2" ], "id": "GHSA-2v4p-qf9q-27wj", "in_binary": "vulnerable code in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "google.golang.org/grpc", "severity": "High", "summary": "gRPC-Go xDS servers: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers", "url": "https://github.com/advisories/GHSA-2v4p-qf9q-27wj", "version": "v1.83.1" }, { "aliases": [ "CVE-2026-118772" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118772", "percentile": 0.40455, "score": 0.00467 }, "fix_state": "fixed", "fixed_in": [ "18.3.1" ], "id": "GHSA-4528-x5fx-h6hg", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "joi", "severity": "High", "summary": "joi: quadratic-time split in `string().email({ multiple: true })` allows denial of service", "url": "https://github.com/advisories/GHSA-4528-x5fx-h6hg", "version": "18.2.8" }, { "aliases": [ "CVE-2026-102266" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102266", "percentile": 0.13175, "score": 0.00225 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-9j54-fg26-wv3r", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "High", "summary": "PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation", "url": "https://github.com/advisories/GHSA-9j54-fg26-wv3r", "version": "2.13.0" }, { "aliases": [ "CVE-2026-102267" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102267", "percentile": 0.05009, "score": 0.00159 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-9v7f-9g4p-ffgj", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "High", "summary": "PyJWT: PyJWKClient follows redirects when fetching JWKS", "url": "https://github.com/advisories/GHSA-9v7f-9g4p-ffgj", "version": "2.13.0" }, { "aliases": [ "CVE-2026-102271" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102271", "percentile": 0.11893, "score": 0.00215 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-p4g4-x82p-q773", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "High", "summary": "PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard", "url": "https://github.com/advisories/GHSA-p4g4-x82p-q773", "version": "2.13.0" }, { "aliases": [], "ecosystem": "pypi", "epss": null, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-pxh4-856f-4h89", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "High", "summary": "PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery", "url": "https://github.com/advisories/GHSA-pxh4-856f-4h89", "version": "2.13.0" }, { "aliases": [ "CVE-2026-102272" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102272", "percentile": 0.12147, "score": 0.00216 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-r6x4-923q-g947", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "High", "summary": "PyJWT BOM Bypass", "url": "https://github.com/advisories/GHSA-r6x4-923q-g947", "version": "2.13.0" }, { "aliases": [ "CVE-2026-102273" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102273", "percentile": 0.0693, "score": 0.00175 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-w2cx-738m-mc7w", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "High", "summary": "PyJWT accepts public JWK containers as HMAC secrets", "url": "https://github.com/advisories/GHSA-w2cx-738m-mc7w", "version": "2.13.0" }, { "aliases": [ "CVE-2026-93749" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-93749", "percentile": 0.39513, "score": 0.00455 }, "fix_state": "fixed", "fixed_in": [ "1.2.2" ], "id": "GHSA-68fv-2mgg-jv7q", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "source-map-js", "severity": "High", "summary": "source-map-js allows event-loop denial of service through indexed source-map section offsets", "url": "https://github.com/advisories/GHSA-68fv-2mgg-jv7q", "version": "1.2.1" }, { "aliases": [ "CVE-2026-114126" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-114126", "percentile": 0.44775, "score": 0.00529 }, "fix_state": "fixed", "fixed_in": [ "10.6.2" ], "id": "GHSA-px85-f4q5-jh77", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "storybook", "severity": "High", "summary": "Storybook dev server vulnerable to code injection from the local network", "url": "https://github.com/advisories/GHSA-px85-f4q5-jh77", "version": "10.6.0" }, { "aliases": [ "CVE-2026-109383" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109383", "percentile": 0.08019, "score": 0.00184 }, "fix_state": "fixed", "fixed_in": [ "8.12.2" ], "id": "GHSA-2m5v-pch6-74hx", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent", "url": "https://github.com/advisories/GHSA-2m5v-pch6-74hx", "version": "8.9.0" }, { "aliases": [ "CVE-2026-109829" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109829", "percentile": 0.04067, "score": 0.00149 }, "fix_state": "fixed", "fixed_in": [ "8.12.2" ], "id": "GHSA-4w7w-5xrc-9h26", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects", "url": "https://github.com/advisories/GHSA-4w7w-5xrc-9h26", "version": "8.9.0" }, { "aliases": [ "CVE-2026-87018" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-87018", "percentile": 0.08361, "score": 0.00187 }, "fix_state": "fixed", "fixed_in": [ "8.12.2" ], "id": "GHSA-qrxm-fqhp-jwvm", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation", "url": "https://github.com/advisories/GHSA-qrxm-fqhp-jwvm", "version": "8.9.0" }, { "aliases": [ "CVE-2026-19534" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-19534", "percentile": 0.33598, "score": 0.00394 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-rfgv-xxqx-mfg5", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to Denial of Service via unrequested WebSocket subprotocol", "url": "https://github.com/advisories/GHSA-rfgv-xxqx-mfg5", "version": "8.9.0" }, { "aliases": [ "CVE-2026-84961" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84961", "percentile": 0.07388, "score": 0.00178 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-w293-vg96-wgc3", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool", "url": "https://github.com/advisories/GHSA-w293-vg96-wgc3", "version": "8.9.0" }, { "aliases": [ "CVE-2026-109869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109869", "percentile": 0.27938, "score": 0.00344 }, "fix_state": "fixed", "fixed_in": [ "8.12.2" ], "id": "GHSA-xjj6-f33q-929c", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to Denial of Service via unhandled error on excessive content-encodings", "url": "https://github.com/advisories/GHSA-xjj6-f33q-929c", "version": "8.9.0" }, { "aliases": [ "CVE-2026-97687" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-97687", "percentile": 0.10658, "score": 0.00206 }, "fix_state": "fixed", "fixed_in": [ "2.8.0" ], "id": "GHSA-8988-9cw3-xx77", "kev": null, "location": ".github/requirements-nightly.txt", "osv_confirmed": true, "package": "urllib3", "severity": "High", "summary": "urllib3: HTTPS proxy TLS configuration may be ignored or overridden", "url": "https://github.com/advisories/GHSA-8988-9cw3-xx77", "version": "2.7.0" }, { "aliases": [ "CVE-2026-97689" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-97689", "percentile": 0.26853, "score": 0.00335 }, "fix_state": "fixed", "fixed_in": [ "2.8.0" ], "id": "GHSA-vxq7-64xx-v4gw", "kev": null, "location": ".github/requirements-nightly.txt", "osv_confirmed": true, "package": "urllib3", "severity": "High", "summary": "urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory", "url": "https://github.com/advisories/GHSA-vxq7-64xx-v4gw", "version": "2.7.0" }, { "aliases": [ "CVE-2026-112942" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112942", "percentile": 0.71406, "score": 0.01344 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-587h-7wmj-h5pm", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "High", "summary": "launch-editor: `fs.existsSync()` existence check can be bypassed on Windows", "url": "https://github.com/advisories/GHSA-587h-7wmj-h5pm", "version": "8.3.0" }, { "aliases": [ "CVE-2023-54404" ], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.6.6" ], "id": "GHSA-mrhx-c7xc-m3w5", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "zod", "severity": "High", "summary": "Zod can exhaust memory while validating oversized constrained collections", "url": "https://github.com/advisories/GHSA-mrhx-c7xc-m3w5", "version": "4.6.5" }, { "aliases": [ "CVE-2026-74866" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-74866", "percentile": 0.25722, "score": 0.00326 }, "fix_state": "fixed", "fixed_in": [ "3.2.2" ], "id": "GHSA-gxm5-99cw-xjw9", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "@fastify/busboy", "severity": "Medium", "summary": "@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name", "url": "https://github.com/advisories/GHSA-gxm5-99cw-xjw9", "version": "3.2.0" }, { "aliases": [ "CVE-2026-112949" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112949", "percentile": 0.27043, "score": 0.00336 }, "fix_state": "fixed", "fixed_in": [ "5.0.3" ], "id": "GHSA-qxg6-89mg-rqv8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "@vitest/mocker", "severity": "Medium", "summary": "Vitest: Code injection via unauthenticated manual mock registration", "url": "https://github.com/advisories/GHSA-qxg6-89mg-rqv8", "version": "5.0.1" }, { "aliases": [ "CVE-2026-112950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112950", "percentile": 0.4557, "score": 0.00542 }, "fix_state": "fixed", "fixed_in": [ "5.0.3" ], "id": "GHSA-xp26-3454-mjgp", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "@vitest/mocker", "severity": "Medium", "summary": "Vitest: Windows backslash traversal bypasses the @vitest/mocker redirect allowlist fix", "url": "https://github.com/advisories/GHSA-xp26-3454-mjgp", "version": "5.0.1" }, { "aliases": [ "CVE-2026-112948" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112948", "percentile": 0.34308, "score": 0.004 }, "fix_state": "fixed", "fixed_in": [ "5.0.5" ], "id": "GHSA-p458-7748-mcp3", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "@vitest/ui", "severity": "Medium", "summary": "Vitest: Servers misapply `server.fs.deny`, serving `.env`, private keys, `.git`, and the API token file", "url": "https://github.com/advisories/GHSA-p458-7748-mcp3", "version": "5.0.0" }, { "aliases": [ "CVE-2026-101899" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101899", "percentile": 0.4369, "score": 0.00512 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-44g4-m2mj-wpvx", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: CIDR-form NO_PROXY entries are ignored, causing proxy exclusion bypass for internal IP ranges", "url": "https://github.com/advisories/GHSA-44g4-m2mj-wpvx", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101900" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101900", "percentile": 0.45807, "score": 0.00546 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-4hqw-qxg8-jxx2", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: Fetch Adapter Header Injection via Inherited FormData getHeaders", "url": "https://github.com/advisories/GHSA-4hqw-qxg8-jxx2", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101902" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101902", "percentile": 0.35667, "score": 0.00414 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-9fr6-4gfg-395g", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: Prototype-Pollution Gadget in the Default Instance Allows Inherited Object.prototype.method to Override HTTP Method", "url": "https://github.com/advisories/GHSA-9fr6-4gfg-395g", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101904" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101904", "percentile": 0.42037, "score": 0.00488 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-j8rh-479h-cp32", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: Header Injection via Inherited headers After Minimal Interceptor", "url": "https://github.com/advisories/GHSA-j8rh-479h-cp32", "version": "1.18.1" }, { "aliases": [ "CVE-2026-101908" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101908", "percentile": 0.40711, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "1.20.0" ], "id": "GHSA-vh66-26gq-q6x8", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "axios", "severity": "Medium", "summary": "Axios: Prototype pollution gadget in fetch adapter can alter outbound requests", "url": "https://github.com/advisories/GHSA-vh66-26gq-q6x8", "version": "1.18.1" }, { "aliases": [ "CVE-2026-102277" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102277", "percentile": 0.37116, "score": 0.00428 }, "fix_state": "fixed", "fixed_in": [ "2.1.7" ], "id": "GHSA-q2hr-2g5m-vwhr", "kev": null, "location": ".github/ga4-scripts/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Medium", "summary": "brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service", "url": "https://github.com/advisories/GHSA-q2hr-2g5m-vwhr", "version": "2.1.4" }, { "aliases": [ "CVE-2026-102277" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102277", "percentile": 0.37116, "score": 0.00428 }, "fix_state": "fixed", "fixed_in": [ "5.0.12" ], "id": "GHSA-q2hr-2g5m-vwhr", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Medium", "summary": "brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service", "url": "https://github.com/advisories/GHSA-q2hr-2g5m-vwhr", "version": "5.0.9" }, { "aliases": [ "CVE-2026-86472" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-86472", "percentile": 0.16796, "score": 0.00253 }, "fix_state": "fixed", "fixed_in": [ "4.1.5" ], "id": "GHSA-hrr3-gc8f-f4qj", "kev": null, "location": ".github/kb-scripts/package-lock.json", "osv_confirmed": true, "package": "fast-uri", "severity": "Medium", "summary": "fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets", "url": "https://github.com/advisories/GHSA-hrr3-gc8f-f4qj", "version": "4.1.4" }, { "aliases": [ "CVE-2026-86818" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-86818", "percentile": 0.16796, "score": 0.00253 }, "fix_state": "fixed", "fixed_in": [ "4.1.5" ], "id": "GHSA-jvvf-x445-j334", "kev": null, "location": ".github/kb-scripts/package-lock.json", "osv_confirmed": true, "package": "fast-uri", "severity": "Medium", "summary": "fast-uri vulnerable to mailto header injection via percent-encoded field-name desynchronization", "url": "https://github.com/advisories/GHSA-jvvf-x445-j334", "version": "4.1.4" }, { "aliases": [ "CVE-2026-110306" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110306", "percentile": 0.1635, "score": 0.0025 }, "fix_state": "fixed", "fixed_in": [ "4.2.3" ], "id": "GHSA-w74x-v6f9-j3xg", "kev": null, "location": ".github/kb-scripts/package-lock.json", "osv_confirmed": true, "package": "fast-uri", "severity": "Medium", "summary": "fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding", "url": "https://github.com/advisories/GHSA-w74x-v6f9-j3xg", "version": "4.1.4" }, { "aliases": [ "CVE-2026-110180" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110180", "percentile": 0.17118, "score": 0.00255 }, "fix_state": "fixed", "fixed_in": [ "4.2.3" ], "id": "GHSA-wjr9-j795-jxcr", "kev": null, "location": ".github/kb-scripts/package-lock.json", "osv_confirmed": true, "package": "fast-uri", "severity": "Medium", "summary": "fast-uri vulnerable to host confusion via unchecked WHATWG host canonicalization", "url": "https://github.com/advisories/GHSA-wjr9-j795-jxcr", "version": "4.1.4" }, { "aliases": [ "CVE-2026-118773" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118773", "percentile": 0.28707, "score": 0.0035 }, "fix_state": "fixed", "fixed_in": [ "14.0.2" ], "id": "GHSA-3g3m-2fjr-6pw4", "kev": null, "location": ".github/ga4-scripts/package-lock.json", "osv_confirmed": true, "package": "glob", "severity": "Medium", "summary": "Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal", "url": "https://github.com/advisories/GHSA-3g3m-2fjr-6pw4", "version": "10.5.0" }, { "aliases": [ "CVE-2026-118773" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118773", "percentile": 0.28707, "score": 0.0035 }, "fix_state": "fixed", "fixed_in": [ "14.0.2" ], "id": "GHSA-3g3m-2fjr-6pw4", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "glob", "severity": "Medium", "summary": "Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal", "url": "https://github.com/advisories/GHSA-3g3m-2fjr-6pw4", "version": "13.0.6" }, { "aliases": [ "CVE-2026-90771" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-90771", "percentile": 0.33029, "score": 0.00389 }, "fix_state": "fixed", "fixed_in": [ "18.2.9" ], "id": "GHSA-wr44-6hxh-3jwq", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "joi", "severity": "Medium", "summary": "joi messages compilation allows prototype replacement through __proto__ error codes", "url": "https://github.com/advisories/GHSA-wr44-6hxh-3jwq", "version": "18.2.8" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "10.2.5" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": ".github/ga4-scripts/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "9.0.9" }, { "aliases": [ "CVE-2026-114603" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-114603", "percentile": 0.41947, "score": 0.00487 }, "fix_state": "fixed", "fixed_in": [ "1.45.1" ], "id": "GHSA-xcq7-p3pf-p88h", "kev": null, "location": ".github/requirements-nightly.txt", "osv_confirmed": true, "package": "opentelemetry-api", "severity": "Medium", "summary": "OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api", "url": "https://github.com/advisories/GHSA-xcq7-p3pf-p88h", "version": "1.44.0" }, { "aliases": [ "CVE-2026-101917" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-101917", "percentile": 0.37038, "score": 0.00428 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-2gx3-rcp4-g85q", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "Medium", "summary": "PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)", "url": "https://github.com/advisories/GHSA-2gx3-rcp4-g85q", "version": "2.13.0" }, { "aliases": [ "CVE-2026-101918" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-101918", "percentile": 0.35593, "score": 0.00413 }, "fix_state": "fixed", "fixed_in": [ "2.15.0" ], "id": "GHSA-42vr-xj54-vc7v", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "Medium", "summary": "PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)", "url": "https://github.com/advisories/GHSA-42vr-xj54-vc7v", "version": "2.13.0" }, { "aliases": [ "CVE-2026-102265" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102265", "percentile": 0.27857, "score": 0.00343 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-8wjv-2p76-3863", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "Medium", "summary": "PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header", "url": "https://github.com/advisories/GHSA-8wjv-2p76-3863", "version": "2.13.0" }, { "aliases": [ "CVE-2026-103001" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-103001", "percentile": 0.17386, "score": 0.00257 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-gvp8-978c-rx2q", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "Medium", "summary": "PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse", "url": "https://github.com/advisories/GHSA-gvp8-978c-rx2q", "version": "2.13.0" }, { "aliases": [ "CVE-2026-102269" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102269", "percentile": 0.13017, "score": 0.00224 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-hxm8-2xgr-2p9m", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "Medium", "summary": "PyJWT: Non-canonical signature segments enable raw-token revocation bypass", "url": "https://github.com/advisories/GHSA-hxm8-2xgr-2p9m", "version": "2.13.0" }, { "aliases": [ "CVE-2026-102270" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102270", "percentile": 0.1585, "score": 0.00246 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-jwrc-g2q2-pq5p", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "Medium", "summary": "PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.", "url": "https://github.com/advisories/GHSA-jwrc-g2q2-pq5p", "version": "2.13.0" }, { "aliases": [ "CVE-2026-102274" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102274", "percentile": 0.45977, "score": 0.00549 }, "fix_state": "fixed", "fixed_in": [ "2.14.0" ], "id": "GHSA-w6j9-cwv2-h6wq", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "Medium", "summary": "PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set", "url": "https://github.com/advisories/GHSA-w6j9-cwv2-h6wq", "version": "2.13.0" }, { "aliases": [ "CVE-2026-102275" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-102275", "percentile": 0.05939, "score": 0.00167 }, "fix_state": "fixed", "fixed_in": [ "2.15.0" ], "id": "GHSA-x33g-cr3x-6449", "kev": null, "location": ".github/requirements-smoke.txt", "osv_confirmed": true, "package": "pyjwt", "severity": "Medium", "summary": "PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion", "url": "https://github.com/advisories/GHSA-x33g-cr3x-6449", "version": "2.13.0" }, { "aliases": [ "CVE-2026-110816" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110816", "percentile": 0.30708, "score": 0.00368 }, "fix_state": "fixed", "fixed_in": [ "6.16.1" ], "id": "GHSA-6pq8-jhm2-2vcw", "kev": null, "location": ".github/ga4-scripts/package-lock.json", "osv_confirmed": true, "package": "qs", "severity": "Medium", "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)", "url": "https://github.com/advisories/GHSA-6pq8-jhm2-2vcw", "version": "6.16.0" }, { "aliases": [ "CVE-2026-84933" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84933", "percentile": 0.23063, "score": 0.00303 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-2jfj-6hjv-fm6j", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches", "url": "https://github.com/advisories/GHSA-2jfj-6hjv-fm6j", "version": "8.9.0" }, { "aliases": [ "CVE-2026-85024" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-85024", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-3wwx-pv8p-q78v", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression", "url": "https://github.com/advisories/GHSA-3wwx-pv8p-q78v", "version": "8.9.0" }, { "aliases": [ "CVE-2026-84890" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84890", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-3xpg-4rpp-hhhm", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unbounded decompression of compressed responses", "url": "https://github.com/advisories/GHSA-3xpg-4rpp-hhhm", "version": "8.9.0" }, { "aliases": [ "CVE-2026-109924" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109924", "percentile": 0.25125, "score": 0.00321 }, "fix_state": "fixed", "fixed_in": [ "8.12.2" ], "id": "GHSA-4qv8-2p9j-2685", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unbounded memory in the EventSource parser", "url": "https://github.com/advisories/GHSA-4qv8-2p9j-2685", "version": "8.9.0" }, { "aliases": [ "CVE-2026-87029" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-87029", "percentile": 0.178, "score": 0.0026 }, "fix_state": "fixed", "fixed_in": [ "8.12.2" ], "id": "GHSA-55wc-3pg8-jfw6", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor", "url": "https://github.com/advisories/GHSA-55wc-3pg8-jfw6", "version": "8.9.0" }, { "aliases": [ "CVE-2026-109932" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109932", "percentile": 0.25126, "score": 0.00321 }, "fix_state": "fixed", "fixed_in": [ "8.12.2" ], "id": "GHSA-9fm3-97px-rjf6", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering", "url": "https://github.com/advisories/GHSA-9fm3-97px-rjf6", "version": "8.9.0" }, { "aliases": [ "CVE-2026-109841" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109841", "percentile": 0.16687, "score": 0.00252 }, "fix_state": "fixed", "fixed_in": [ "8.12.2" ], "id": "GHSA-f72v-6w45-q472", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens", "url": "https://github.com/advisories/GHSA-f72v-6w45-q472", "version": "8.9.0" }, { "aliases": [ "CVE-2026-18149" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-18149", "percentile": 0.41492, "score": 0.00481 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-pmjh-fq2x-6v4x", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via orphaned RetryHandler response body", "url": "https://github.com/advisories/GHSA-pmjh-fq2x-6v4x", "version": "8.9.0" }, { "aliases": [ "CVE-2026-85014" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-85014", "percentile": 0.30654, "score": 0.00368 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-rx4f-c7p8-82vq", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via WebSocketStream unclean close", "url": "https://github.com/advisories/GHSA-rx4f-c7p8-82vq", "version": "8.9.0" }, { "aliases": [ "CVE-2026-97688" ], "ecosystem": "pypi", "epss": { "cve": "CVE-2026-97688", "percentile": 0.21778, "score": 0.00292 }, "fix_state": "fixed", "fixed_in": [ "2.8.0" ], "id": "GHSA-gh4c-6fx4-qh6g", "kev": null, "location": ".github/requirements-nightly.txt", "osv_confirmed": true, "package": "urllib3", "severity": "Medium", "summary": "urllib3: Chunked Deflate streaming can enter an infinite loop", "url": "https://github.com/advisories/GHSA-gh4c-6fx4-qh6g", "version": "2.7.0" }, { "aliases": [ "CVE-2026-112943" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112943", "percentile": 0.35737, "score": 0.00414 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-698v-4r3x-3vcv", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Medium", "summary": "launch-editor: escapeCmdArgs() omits % escaping on Windows", "url": "https://github.com/advisories/GHSA-698v-4r3x-3vcv", "version": "8.3.0" }, { "aliases": [ "CVE-2026-112944" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112944", "percentile": 0.5338, "score": 0.00705 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-r825-w8mm-5pxw", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Medium", "summary": "launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors", "url": "https://github.com/advisories/GHSA-r825-w8mm-5pxw", "version": "8.3.0" }, { "aliases": [ "CVE-2026-112946" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112946", "percentile": 0.58267, "score": 0.00852 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-rq7h-c2jc-7f22", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Medium", "summary": "Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine", "url": "https://github.com/advisories/GHSA-rq7h-c2jc-7f22", "version": "8.3.0" }, { "aliases": [ "CVE-2026-112947" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112947", "percentile": 0.42982, "score": 0.00502 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-vfpm-58rq-9qcg", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Medium", "summary": "Vite: First 4 bytes of files outside of `server.fs` setting is exposed by `?vite-wasm-instance`", "url": "https://github.com/advisories/GHSA-vfpm-58rq-9qcg", "version": "8.3.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.4.16" ], "id": "GHSA-6688-9rhm-gjv2", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "dompurify", "severity": "Low", "summary": "DOMPurify: IN_PLACE returns a force-removed rawtext root whose text carries attacker markup \u2014 pure HTML reparse executes", "url": "https://github.com/advisories/GHSA-6688-9rhm-gjv2", "version": "3.4.15" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.4.17" ], "id": "GHSA-c6gr-qvv4-5v3f", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "dompurify", "severity": "Low", "summary": "DOMPurify: SMIL attributeName=href guard is skipped when PARSER_MEDIA_TYPE is application/xhtml+xml", "url": "https://github.com/advisories/GHSA-c6gr-qvv4-5v3f", "version": "3.4.15" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.4.16" ], "id": "GHSA-p98j-92pf-mc4p", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "dompurify", "severity": "Low", "summary": "DOMPurify: IN_PLACE: node-removing afterSanitize hook leaves detached subtree event handlers armed, causing DOM XSS", "url": "https://github.com/advisories/GHSA-p98j-92pf-mc4p", "version": "3.4.15" }, { "aliases": [ "CVE-2026-110725" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110725", "percentile": 0.22997, "score": 0.00302 }, "fix_state": "fixed", "fixed_in": [ "4.2.3" ], "id": "GHSA-333x-w4r6-6crp", "kev": null, "location": ".github/kb-scripts/package-lock.json", "osv_confirmed": true, "package": "fast-uri", "severity": "Low", "summary": "fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references", "url": "https://github.com/advisories/GHSA-333x-w4r6-6crp", "version": "4.1.4" }, { "aliases": [ "CVE-2026-110095" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110095", "percentile": 0.21547, "score": 0.00289 }, "fix_state": "fixed", "fixed_in": [ "4.2.3" ], "id": "GHSA-xhq7-xmqj-769h", "kev": null, "location": ".github/kb-scripts/package-lock.json", "osv_confirmed": true, "package": "fast-uri", "severity": "Low", "summary": "fast-uri vulnerable to improper path equivalence in relative reference normalization", "url": "https://github.com/advisories/GHSA-xhq7-xmqj-769h", "version": "4.1.4" }, { "aliases": [ "CVE-2026-81870" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-81870", "percentile": 0.18557, "score": 0.00266 }, "fix_state": "fixed", "fixed_in": [ "1.45.0" ], "id": "GHSA-8wmf-6v46-5gfg", "in_binary": "module in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace", "severity": "Low", "summary": "OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs", "url": "https://github.com/advisories/GHSA-8wmf-6v46-5gfg", "version": "v1.44.0" }, { "aliases": [ "CVE-2026-81870" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-81870", "percentile": 0.18557, "score": 0.00266 }, "fix_state": "fixed", "fixed_in": [ "1.45.0" ], "id": "GHSA-8wmf-6v46-5gfg", "in_binary": "module in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp", "severity": "Low", "summary": "OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs", "url": "https://github.com/advisories/GHSA-8wmf-6v46-5gfg", "version": "v1.44.0" }, { "aliases": [ "CVE-2026-81870" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-81870", "percentile": 0.18557, "score": 0.00266 }, "fix_state": "fixed", "fixed_in": [ "1.45.0" ], "id": "GHSA-8wmf-6v46-5gfg", "in_binary": "module in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "go.opentelemetry.io/otel/sdk", "severity": "Low", "summary": "OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs", "url": "https://github.com/advisories/GHSA-8wmf-6v46-5gfg", "version": "v1.43.0" }, { "aliases": [], "ecosystem": "pypi", "epss": null, "fix_state": "fixed", "fixed_in": [ "84.1.0" ], "id": "GHSA-xmj3-9gf7-h52w", "kev": null, "location": ".github/requirements-nightly.txt", "osv_confirmed": true, "package": "setuptools", "severity": "Low", "summary": "setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description", "url": "https://github.com/advisories/GHSA-xmj3-9gf7-h52w", "version": "84.0.0" }, { "aliases": [ "CVE-2026-84947" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84947", "percentile": 0.09396, "score": 0.00196 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-2gqq-gqf2-x968", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Low", "summary": "undici vulnerable to response truncation via oversized chunked responses in the dump interceptor", "url": "https://github.com/advisories/GHSA-2gqq-gqf2-x968", "version": "8.9.0" }, { "aliases": [ "CVE-2026-85008" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-85008", "percentile": 0.01688, "score": 0.00118 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-8436-99hf-9mmv", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Low", "summary": "undici vulnerable to caching and replay of unsafe HTTP method responses", "url": "https://github.com/advisories/GHSA-8436-99hf-9mmv", "version": "8.9.0" }, { "aliases": [ "CVE-2026-18540" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-18540", "percentile": 0.23781, "score": 0.00309 }, "fix_state": "fixed", "fixed_in": [ "8.10.2" ], "id": "GHSA-r53p-7pc4-xj5r", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Low", "summary": "undici vulnerable to downstream response splitting via retry interceptor", "url": "https://github.com/advisories/GHSA-r53p-7pc4-xj5r", "version": "8.9.0" }, { "aliases": [ "CVE-2026-112945" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-112945", "percentile": 0.5207, "score": 0.00672 }, "fix_state": "fixed", "fixed_in": [ "8.3.3" ], "id": "GHSA-9jrq-w75r-8gcw", "kev": null, "location": "web/package-lock.json", "osv_confirmed": true, "package": "vite", "severity": "Low", "summary": "Vite: Cross origin script execution through Vite custom middleware", "url": "https://github.com/advisories/GHSA-9jrq-w75r-8gcw", "version": "8.3.0" }, { "aliases": [ "CVE-2026-78661" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-78661", "percentile": 0.08063, "score": 0.00185 }, "fix_state": "fixed", "fixed_in": [ "0.62.0" ], "id": "GO-2026-6860", "in_binary": "vulnerable code in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "golang.org/x/net", "severity": "Unknown", "summary": "When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n.Data += text) reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags (such as \"a\") cau", "url": "https://go.dev/cl/849365", "version": "v0.58.0" }, { "aliases": [ "CVE-2026-97045" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-97045", "percentile": 0.10117, "score": 0.00202 }, "fix_state": "fixed", "fixed_in": [ "0.62.0" ], "id": "GO-2026-6866", "in_binary": "vulnerable code in binary", "kev": null, "location": "go.mod", "osv_confirmed": true, "package": "golang.org/x/net", "severity": "Unknown", "summary": "In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as or f", "url": "https://go.dev/cl/855121", "version": "v0.58.0" } ], "workflow_audit": { "files": 97, "findings": [ { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/ai-fix.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/assignment-helper.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/claude.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/console-live-promote-failure-issue.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/copilot-automation.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/forensics-on-fix.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/greetings.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/hive-interactive.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/hive-interactive.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/hold-issue-guard.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/label-helper.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/netlify-error-reporter.yml", "line": 20, "note": "this step", "rule": "template-injection", "severity": "High", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/new-contributor-pr-gate.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/nil-safety.yml", "line": 42, "note": "this step", "rule": "template-injection", "severity": "High", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/pr-claude-notice.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/process-screenshots.yml", "line": 13, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/tier-classifier.yml", "line": 16, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/triage-command.yml", "line": 7, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "Medium", "description": "use of fundamentally insecure workflow trigger", "file": ".github/workflows/workflow-failure-issue.yml", "line": 3, "note": "this workflow", "rule": "dangerous-triggers", "severity": "High", "url": "https://docs.zizmor.sh/audits/#dangerous-triggers" }, { "confidence": "High", "description": "overly broad permissions", "file": ".github/workflows/build-deploy.yml", "line": 39, "note": "uses read-all permissions", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "overly broad permissions", "file": ".github/workflows/implement-fix.lock.yml", "line": 66, "note": "uses read-all permissions", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "overly broad permissions", "file": ".github/workflows/playwright-nightly.yml", "line": 9, "note": "uses read-all permissions", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "overly broad permissions", "file": ".github/workflows/playwright.yml", "line": 22, "note": "uses read-all permissions", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "overly broad permissions", "file": ".github/workflows/release.yml", "line": 30, "note": "uses read-all permissions", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "overly broad permissions", "file": ".github/workflows/startup-smoke.yml", "line": 31, "note": "uses read-all permissions", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "overly broad permissions", "file": ".github/workflows/test-installer.yml", "line": 18, "note": "uses read-all permissions", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/build-deploy.yml", "line": 194, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/build-deploy.yml", "line": 200, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/build-deploy.yml", "line": 559, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "use GitHub's dedicated self-repository syntax", "file": ".github/workflows/hive-interactive.yml", "line": 52, "note": "this job", "rule": "self-repository", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#self-repository" }, { "confidence": "High", "description": "use GitHub's dedicated self-repository syntax", "file": ".github/workflows/perf-bundle-size.yml", "line": 117, "note": "this job", "rule": "self-repository", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#self-repository" }, { "confidence": "High", "description": "use GitHub's dedicated self-repository syntax", "file": ".github/workflows/perf-react-commits-idle.yml", "line": 101, "note": "this job", "rule": "self-repository", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#self-repository" }, { "confidence": "High", "description": "use GitHub's dedicated self-repository syntax", "file": ".github/workflows/perf-react-commits.yml", "line": 94, "note": "this job", "rule": "self-repository", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#self-repository" }, { "confidence": "High", "description": "use GitHub's dedicated self-repository syntax", "file": ".github/workflows/perf-ttfi.yml", "line": 155, "note": "this job", "rule": "self-repository", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#self-repository" }, { "confidence": "High", "description": "use GitHub's dedicated self-repository syntax", "file": ".github/workflows/release.yml", "line": 42, "note": "this job", "rule": "self-repository", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#self-repository" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/release.yml", "line": 516, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/release.yml", "line": 633, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" } ] } }, "updated": "2026-11-02" }