{ "history": [ { "added": 0, "commit": "4a83f28e6efc85722a21213b4c0071d8e14d3527", "date": "2026-11-01", "dependencies": 749, "errors": [], "fixable": 19, "go_version": "go1.26.10", "in_binary": { "dependencies": 6, "stdlib": 0, "total": 6 }, "new_vulnerabilities": 0, "osv_confirmed": 15, "osv_only": 67, "ref": "v1.1308.3", "release_changed": false, "release_integrity": "checksums-only", "removed": 0, "resolved_vulnerabilities": 0, "scorecard": null, "upgraded": 0, "vulnerabilities": { "Critical": 0, "High": 8, "Low": 3, "Medium": 8, "Negligible": 0, "Unknown": 3 }, "workflow": { "High": 38, "Low": 27, "Medium": 22, "files": 9 } }, { "added": 1176, "commit": "4a83f28e6efc85722a21213b4c0071d8e14d3527", "date": "2026-11-02", "dependencies": 1925, "errors": [], "fixable": 198, "go_version": "go1.26.10", "in_binary": { "dependencies": 6, "stdlib": 0, "total": 6 }, "kev": 1, "kev_new": 0, "new_vulnerabilities": 166, "osv_confirmed": 78, "osv_only": 6, "ref": "v1.1308.3", "release_changed": false, "release_integrity": "checksums-only", "removed": 0, "resolved_vulnerabilities": 5, "scorecard": null, "scorecard_date": null, "scorecard_note": "the project is not in the OpenSSF public dataset; the Scorecard CLI fallback was skipped because this shard's weekly budget was used", "scorecard_source": null, "upgraded": 0, "vulnerabilities": { "Critical": 12, "High": 95, "Low": 26, "Medium": 69, "Negligible": 0, "Unknown": 3 }, "vulnerable_packages": 85, "workflow": { "High": 38, "Low": 27, "Medium": 22, "files": 9 } } ], "latest": { "archived": false, "category": "Software Composition Analysis (SCA)", "changes": { "added": [ "@alcalzone/ansi-tokenize@0.1.3", "@ampproject/remapping@2.2.0", "@ampproject/remapping@2.3.0", "@babel/code-frame@7.18.6", "@babel/code-frame@7.23.5", "@babel/compat-data@7.20.14", "@babel/compat-data@7.23.5", "@babel/core@7.20.12", "@babel/core@7.24.0", "@babel/generator@7.18.2", "@babel/generator@7.20.14", "@babel/generator@7.23.6", "@babel/generator@7.27.3", "@babel/helper-compilation-targets@7.20.7", "@babel/helper-compilation-targets@7.23.6", "@babel/helper-environment-visitor@7.18.9", "@babel/helper-environment-visitor@7.22.20", "@babel/helper-function-name@7.19.0", "@babel/helper-function-name@7.23.0", "@babel/helper-hoist-variables@7.18.6", "@babel/helper-hoist-variables@7.22.5", "@babel/helper-module-imports@7.18.6", "@babel/helper-module-imports@7.22.15", "@babel/helper-module-transforms@7.20.11", "@babel/helper-module-transforms@7.23.3", "@babel/helper-plugin-utils@7.20.2", "@babel/helper-plugin-utils@7.24.0", "@babel/helper-simple-access@7.20.2", "@babel/helper-simple-access@7.22.5", "@babel/helper-split-export-declaration@7.18.6", "@babel/helper-split-export-declaration@7.22.6", "@babel/helper-string-parser@7.19.4", "@babel/helper-string-parser@7.27.1", "@babel/helper-validator-identifier@7.19.1", "@babel/helper-validator-identifier@7.27.1", "@babel/helper-validator-option@7.18.6", "@babel/helper-validator-option@7.23.5", "@babel/helpers@7.20.13", "@babel/helpers@7.24.0", "@babel/highlight@7.18.6", "@babel/highlight@7.23.4", "@babel/parser@7.16.4", "@babel/parser@7.18.4", "@babel/parser@7.20.15", "@babel/parser@7.24.0", "@babel/parser@7.27.4", "@babel/plugin-syntax-async-generators@7.8.4", "@babel/plugin-syntax-bigint@7.8.3", "@babel/plugin-syntax-class-properties@7.12.13", "@babel/plugin-syntax-import-meta@7.10.4", "@babel/plugin-syntax-json-strings@7.8.3", "@babel/plugin-syntax-jsx@7.18.6", "@babel/plugin-syntax-jsx@7.23.3", "@babel/plugin-syntax-logical-assignment-operators@7.10.4", "@babel/plugin-syntax-nullish-coalescing-operator@7.8.3", "@babel/plugin-syntax-numeric-separator@7.10.4", "@babel/plugin-syntax-object-rest-spread@7.8.3", "@babel/plugin-syntax-optional-catch-binding@7.8.3", "@babel/plugin-syntax-optional-chaining@7.8.3", "@babel/plugin-syntax-top-level-await@7.14.5", "@babel/plugin-syntax-typescript@7.20.0", "@babel/plugin-syntax-typescript@7.23.3", "@babel/polyfill@7.12.1", "@babel/template@7.20.7", "@babel/template@7.24.0", "@babel/traverse@7.20.13", "@babel/traverse@7.24.0", "@babel/types@7.18.4", "@babel/types@7.20.7", "@babel/types@7.24.0", "@babel/types@7.27.3", "@base2/pretty-print-object@1.0.1", "@bcoe/v8-coverage@0.2.3", "@cspotcode/source-map-support@0.8.1", "@discoveryjs/json-ext@0.5.3", "@esbuild/aix-ppc64@0.28.1", "@esbuild/android-arm@0.28.1", "@esbuild/android-arm64@0.28.1", "@esbuild/android-x64@0.28.1", "@esbuild/darwin-arm64@0.28.1", "@esbuild/darwin-x64@0.28.1", "@esbuild/freebsd-arm64@0.28.1", "@esbuild/freebsd-x64@0.28.1", "@esbuild/linux-arm@0.28.1", "@esbuild/linux-arm64@0.28.1", "@esbuild/linux-ia32@0.28.1", "@esbuild/linux-loong64@0.28.1", "@esbuild/linux-mips64el@0.28.1", "@esbuild/linux-ppc64@0.28.1", "@esbuild/linux-riscv64@0.28.1", "@esbuild/linux-s390x@0.28.1", "@esbuild/linux-x64@0.28.1", "@esbuild/netbsd-arm64@0.28.1", "@esbuild/netbsd-x64@0.28.1", "@esbuild/openbsd-arm64@0.28.1", "@esbuild/openbsd-x64@0.28.1", "@esbuild/openharmony-arm64@0.28.1", "@esbuild/sunos-x64@0.28.1", "@esbuild/win32-arm64@0.28.1", "@esbuild/win32-ia32@0.28.1", "@esbuild/win32-x64@0.28.1", "@hutson/parse-repository-url@5.0.0", "@isaacs/cliui@8.0.2", "@isaacs/ts-node-temp-fork-for-pr-2009@10.9.7", "@istanbuljs/load-nyc-config@1.1.0", "@istanbuljs/schema@0.1.3", "@jest/console@29.4.1", "@jest/console@29.7.0", "@jest/core@29.4.1", "@jest/core@29.7.0", "@jest/environment@29.4.1", "@jest/environment@29.7.0", "@jest/expect@29.4.1", "@jest/expect@29.7.0", "@jest/expect-utils@29.4.1", "@jest/expect-utils@29.7.0", "@jest/fake-timers@29.4.1", "@jest/fake-timers@29.7.0", "@jest/globals@29.4.1", "@jest/globals@29.7.0", "@jest/reporters@29.4.1", "@jest/reporters@29.7.0", "@jest/schemas@29.4.0", "@jest/schemas@29.6.3", "@jest/source-map@29.2.0", "@jest/source-map@29.6.3", "@jest/test-result@29.4.1", "@jest/test-result@29.7.0", "@jest/test-sequencer@29.4.1", "@jest/test-sequencer@29.7.0", "@jest/transform@29.4.1", "@jest/transform@29.7.0", "@jest/types@29.4.1", "@jest/types@29.6.3", "@jridgewell/gen-mapping@0.1.1", "@jridgewell/gen-mapping@0.3.2", "@jridgewell/gen-mapping@0.3.5", "@jridgewell/resolve-uri@3.1.0", "@jridgewell/set-array@1.1.2", "@jridgewell/set-array@1.2.1", "@jridgewell/sourcemap-codec@1.4.14", "@jridgewell/trace-mapping@0.3.17", "@jridgewell/trace-mapping@0.3.25", "@jridgewell/trace-mapping@0.3.9", "@npmcli/agent@2.2.2", "@npmcli/fs@3.1.1", "@npmcli/git@5.0.7", "@npmcli/installed-package-contents@2.1.0", "@npmcli/node-gyp@3.0.0", "@npmcli/package-json@5.1.1", "@npmcli/promise-spawn@7.0.2", "@npmcli/redact@1.1.0", "@npmcli/run-script@7.0.4", "@octokit/auth-token@2.4.5", "@octokit/core@3.5.1", "@octokit/endpoint@6.0.12", "@octokit/graphql@4.6.4", "@octokit/openapi-types@12.11.0", "@octokit/plugin-paginate-rest@1.1.2", "@octokit/plugin-paginate-rest@2.21.3", "@octokit/plugin-request-log@1.0.4", "@octokit/plugin-rest-endpoint-methods@2.4.0", "@octokit/plugin-rest-endpoint-methods@5.16.2", "@octokit/request@5.6.1", "@octokit/request-error@1.2.1", "@octokit/request-error@2.1.0", "@octokit/rest@16.43.2", "@octokit/rest@18.12.0", "@octokit/types@2.16.2", "@octokit/types@6.41.0", "@pkgjs/parseargs@0.11.0", "@roberts_lando/vfs@0.3.3", "@sigstore/bundle@2.3.2", "@sigstore/core@1.1.0", "@sigstore/protobuf-specs@0.3.2", "@sigstore/sign@2.3.2", "@sigstore/tuf@2.3.4", "@sigstore/verify@1.2.1", "@sinclair/typebox@0.25.21", "@sinclair/typebox@0.27.8", "@sinonjs/commons@1.8.3", "@sinonjs/commons@2.0.0", "@sinonjs/commons@3.0.1", "@sinonjs/fake-timers@10.0.2", "@sinonjs/fake-timers@10.3.0", "@sinonjs/formatio@2.0.0", "@sinonjs/formatio@3.2.2", "@sinonjs/samsam@3.3.3", "@sinonjs/text-encoding@0.7.1", "@tapjs/after@1.1.24", "@tapjs/after-each@2.0.1", "@tapjs/asserts@2.0.1", "@tapjs/before@2.0.1", "@tapjs/before-each@2.0.1", "@tapjs/config@3.0.1", "@tapjs/core@2.0.1", "@tapjs/error-serdes@2.0.1", "@tapjs/filter@2.0.1", "@tapjs/fixture@2.0.1", "@tapjs/intercept@2.0.1", "@tapjs/mock@2.0.1", "@tapjs/node-serialize@2.0.1", "@tapjs/processinfo@3.1.7", "@tapjs/reporter@2.0.1", "@tapjs/run@2.0.2", "@tapjs/snapshot@2.0.1", "@tapjs/spawn@2.0.1", "@tapjs/stack@2.0.1", "@tapjs/stdin@2.0.1", "@tapjs/test@2.0.1", "@tapjs/typescript@1.4.6", "@tapjs/worker@2.0.1", "@tsconfig/node10@1.0.9", "@tsconfig/node12@1.0.11", "@tsconfig/node14@1.0.3", "@tsconfig/node16@1.0.3", "@tsconfig/node18@18.2.4", "@tsconfig/node20@20.1.4", "@tufjs/canonical-json@2.0.0", "@tufjs/models@2.0.1", "@types/babel__core@7.20.0", "@types/babel__core@7.20.5", "@types/babel__generator@7.6.4", "@types/babel__generator@7.6.8", "@types/babel__template@7.4.1", "@types/babel__template@7.4.4", "@types/babel__traverse@7.18.3", "@types/babel__traverse@7.20.5", "@types/body-parser@1.19.1", "@types/connect@3.4.35", "@types/cross-spawn@6.0.2", "@types/eslint@7.28.0", "@types/eslint-scope@3.7.1", "@types/estree@0.0.48", "@types/estree@0.0.50", "@types/express@4.17.13", "@types/express-serve-static-core@4.17.24", "@types/fs-extra@9.0.12", "@types/graceful-fs@4.1.6", "@types/graceful-fs@4.1.9", "@types/istanbul-lib-coverage@2.0.3", "@types/istanbul-lib-coverage@2.0.4", "@types/istanbul-lib-report@3.0.0", "@types/istanbul-reports@3.0.1", "@types/jest@29.5.12", "@types/jest-json-schema@6.1.5", "@types/json-schema@7.0.9", "@types/mime@1.3.2", "@types/minimist@1.2.2", "@types/needle@3.3.0", "@types/node@14.17.10", "@types/node@18.11.19", "@types/normalize-package-data@2.4.1", "@types/parse-json@4.0.0", "@types/prettier@2.7.2", "@types/qs@6.9.7", "@types/range-parser@1.2.4", "@types/serve-static@1.13.10", "@types/sinon@7.5.2", "@types/stack-utils@2.0.1", "@types/stack-utils@2.0.3", "@types/yargs@17.0.22", "@types/yargs@17.0.32", "@types/yargs-parser@21.0.0", "@types/yargs-parser@21.0.3", "@typescript-eslint/eslint-plugin@4.30.0", "@typescript-eslint/experimental-utils@4.30.0", "@typescript-eslint/experimental-utils@4.31.0", "@typescript-eslint/parser@4.30.0", "@typescript-eslint/scope-manager@4.30.0", "@typescript-eslint/scope-manager@4.31.0", "@typescript-eslint/types@4.30.0", "@typescript-eslint/types@4.31.0", "@typescript-eslint/typescript-estree@4.30.0", "@typescript-eslint/typescript-estree@4.31.0", "@typescript-eslint/visitor-keys@4.30.0", "@typescript-eslint/visitor-keys@4.31.0", "@vue/compiler-core@3.2.4", "@vue/compiler-dom@3.2.4", "@vue/compiler-sfc@3.2.4", "@vue/compiler-ssr@3.2.4", "@vue/shared@3.2.4", "@webassemblyjs/ast@1.11.1", "@webassemblyjs/floating-point-hex-parser@1.11.1", "@webassemblyjs/helper-api-error@1.11.1", "@webassemblyjs/helper-buffer@1.11.1", "@webassemblyjs/helper-numbers@1.11.1", "@webassemblyjs/helper-wasm-bytecode@1.11.1", "@webassemblyjs/helper-wasm-section@1.11.1", "@webassemblyjs/ieee754@1.11.1", "@webassemblyjs/leb128@1.11.1", "@webassemblyjs/utf8@1.11.1", "@webassemblyjs/wasm-edit@1.11.1", "@webassemblyjs/wasm-gen@1.11.1", "@webassemblyjs/wasm-opt@1.11.1", "@webassemblyjs/wasm-parser@1.11.1", "@webassemblyjs/wast-printer@1.11.1", "@webpack-cli/configtest@1.0.4", "@webpack-cli/info@1.3.0", "@webpack-cli/serve@1.5.2", "@xtuc/ieee754@1.2.0", "@xtuc/long@4.2.2", "@yao-pkg/pkg@6.24.0", "@yao-pkg/pkg-fetch@3.6.7", "abbrev@2.0.0", "abort-controller@3.0.0", "accepts@1.3.7", "acorn@7.4.1", "acorn@8.11.3", "acorn@8.4.1", "acorn-import-assertions@1.7.6", "acorn-jsx@5.3.2", "acorn-walk@8.3.2", "add-stream@1.0.0", "agent-base@4.3.0", "agent-base@7.1.1", "ajv@6.12.6", "ajv@6.14.0", "ajv@8.18.0", "ajv-draft-04@1.0.0", "ajv-formats@2.1.1", "ajv-keywords@3.5.2", "ansi-escapes@4.3.2", "ansi-escapes@6.2.1", "ansi-regex@6.0.1", "ansi-styles@5.2.0", "ansi-styles@6.2.1", "anti-trojan-source@1.4.1", "anymatch@3.1.2", "anymatch@3.1.3", "arg@4.1.3", "array-differ@3.0.0", "array-flatten@1.1.1", "array-from@2.1.1", "array-ify@1.0.0", "array-union@2.1.0", "array-union@3.0.1", "arrify@1.0.1", "arrify@2.0.1", "astral-regex@1.0.0", "async-hook-domain@4.0.1", "async-retry@1.2.3", "asynckit@0.4.0", "at-least-node@1.0.0", "atob-lite@2.0.0", "auto-bind@5.0.1", "babel-jest@29.4.1", "babel-jest@29.7.0", "babel-plugin-istanbul@6.1.1", "babel-plugin-jest-hoist@29.4.0", "babel-plugin-jest-hoist@29.6.3", "babel-preset-current-node-syntax@1.0.1", "babel-preset-jest@29.4.0", "babel-preset-jest@29.6.3", "before-after-hook@2.2.2", "big.js@5.2.2", "binary-extensions@2.2.0", "bluebird@3.7.2", "body-parser@1.19.0", "brace-expansion@1.1.11", "braces@3.0.2", "browserslist@4.21.5", "browserslist@4.23.0", "bs-logger@0.2.6", "bser@2.1.1", "btoa-lite@1.0.0", "buffer-equal-constant-time@1.0.1", "bytes@3.1.0", "c8@9.1.0", "cacache@18.0.3", "call-bind@1.0.2", "call-bind-apply-helpers@1.0.2", "callsites@3.1.0", "camelcase@5.3.1", "camelcase@6.3.0", "camelcase-keys@7.0.2", "caniuse-lite@1.0.30001450", "caniuse-lite@1.0.30001597", "chalk@5.3.0", "char-regex@1.0.2", "chardet@0.7.0", "chokidar@3.6.0", "chownr@1.1.4", "chownr@2.0.0", "chrome-trace-event@1.0.3", "ci-info@2.0.0", "ci-info@3.2.0", "ci-info@3.7.1", "cjs-module-lexer@1.2.2", "cjs-module-lexer@1.2.3", "cli-boxes@3.0.0", "cli-cursor@4.0.0", "cli-truncate@3.1.0", "cli-width@3.0.0", "cliui@7.0.4", "cliui@8.0.1", "clone-deep@4.0.1", "co@4.6.0", "code-excerpt@4.0.0", "collect-v8-coverage@1.0.1", "collect-v8-coverage@1.0.2", "colorette@1.3.0", "colors@1.4.0", "combined-stream@1.0.8", "commander@2.20.3", "commander@7.2.0", "commander@9.5.0", "compare-func@2.0.0", "consolidate@0.16.0", "content-disposition@0.5.3", "content-type@1.0.4", "conventional-changelog@5.1.0", "conventional-changelog-angular@7.0.0", "conventional-changelog-atom@4.0.0", "conventional-changelog-cli@4.1.0", "conventional-changelog-codemirror@4.0.0", "conventional-changelog-conventionalcommits@7.0.2", "conventional-changelog-core@7.0.0", "conventional-changelog-ember@4.0.0", "conventional-changelog-eslint@5.0.0", "conventional-changelog-express@4.0.0", "conventional-changelog-jquery@5.0.0", "conventional-changelog-jshint@4.0.0", "conventional-changelog-preset-loader@4.1.0", "conventional-changelog-writer@7.0.1", "conventional-commits-filter@4.0.0", "conventional-commits-parser@5.0.0", "convert-source-map@1.9.0", "convert-source-map@2.0.0", "convert-to-spaces@2.0.1", "cookie@0.4.0", "cookie-signature@1.0.6", "copy-webpack-plugin@9.0.1", "core-js@2.6.12", "cosmiconfig@7.0.0", "create-jest@29.7.0", "create-require@1.1.1", "cross-spawn@6.0.5", "cross-spawn@6.0.6", "cross-spawn@7.0.3", "cssesc@3.0.0", "danger@10.9.0", "dargs@8.1.0", "debug@2.6.9", "debug@3.1.0", "debug@3.2.7", "decamelize@1.2.0", "decamelize@5.0.1", "decamelize-keys@1.1.0", "decode-uri-component@0.2.0", "decompress-response@6.0.0", "dedent@0.7.0", "dedent@1.5.1", "deep-extend@0.6.0", "deep-is@0.1.3", "deepmerge@4.3.0", "deepmerge@4.3.1", "delayed-stream@1.0.0", "depcheck@1.4.3", "depd@1.1.2", "deprecation@2.3.1", "deps-regex@0.1.4", "destroy@1.0.4", "detect-libc@2.0.4", "detect-newline@3.1.0", "diff@3.5.0", "diff@4.0.2", "diff@5.2.0", "diff-sequences@27.4.0", "diff-sequences@29.3.1", "diff-sequences@29.6.3", "dir-glob@3.0.1", "doctrine@3.0.0", "dunder-proto@1.0.1", "duplexer2@0.1.4", "eastasianwidth@0.2.0", "ecdsa-sig-formatter@1.0.11", "ee-first@1.1.1", "electron-to-chromium@1.4.286", "electron-to-chromium@1.4.701", "emittery@0.13.1", "emoji-regex@8.0.0", "emoji-regex@9.2.2", "emojis-list@3.0.0", "encodeurl@1.0.2", "encoding@0.1.13", "enhanced-resolve@5.15.0", "envinfo@7.8.1", "err-code@2.0.3", "error-ex@1.3.2", "es-abstract@1.18.5", "es-define-property@1.0.1", "es-errors@1.3.0", "es-module-lexer@0.9.3", "es-object-atoms@1.1.1", "es-to-primitive@1.2.1", "es6-promise@4.2.8", "es6-promisify@5.0.0", "esbuild@0.28.1", "escalade@3.1.1", "escape-html@1.0.3", "escape-string-regexp@2.0.0", "eslint@6.8.0", "eslint-config-prettier@6.15.0", "eslint-plugin-anti-trojan-source@1.1.1", "eslint-plugin-jest@24.4.0", "eslint-scope@5.1.1", "eslint-utils@1.4.3", "eslint-utils@3.0.0", "eslint-visitor-keys@1.3.0", "eslint-visitor-keys@2.1.0", "espree@6.2.1", "esquery@1.4.0", "esrecurse@4.3.0", "estraverse@4.3.0", "estraverse@5.2.0", "estree-walker@2.0.2", "esutils@2.0.3", "etag@1.8.1", "event-target-shim@5.0.1", "events@3.3.0", "events-to-array@2.0.3", "execa@1.0.0", "exit@0.1.2", "expand-template@2.0.3", "expand-tilde@2.0.2", "expect@29.4.1", "expect@29.7.0", "exponential-backoff@3.1.1", "express@4.17.1", "extend-shallow@2.0.1", "external-editor@3.1.0", "fast-deep-equal@3.1.3", "fast-glob@3.3.1", "fast-json-patch@3.1.0", "fast-json-stable-stringify@2.1.0", "fast-levenshtein@2.0.6", "fast-uri@3.0.6", "fastest-levenshtein@1.0.12", "fb-watchman@2.0.2", "fdir@6.4.5", "figures@3.2.0", "file-entry-cache@5.0.1", "fill-keys@1.0.2", "fill-range@7.0.1", "filter-obj@1.1.0", "finalhandler@1.1.2", "find-up@4.1.0", "find-up@5.0.0", "find-up@6.3.0", "find-yarn-workspace-root@2.0.0", "flat-cache@2.0.1", "flatted@2.0.2", "foreground-child@3.1.1", "form-data@2.5.1", "forwarded@0.2.0", "fresh@0.5.2", "fromentries@1.3.2", "fs-exists-sync@0.1.0", "fs-extra@11.3.4", "fs-extra@7.0.1", "fs-extra@9.1.0", "fs-minipass@2.1.0", "fs-minipass@3.0.3", "fsevents@2.3.2", "function-bind@1.1.2", "function-loop@4.0.0", "functional-red-black-tree@1.0.1", "generic-names@2.0.1", "gensync@1.0.0-beta.2", "get-caller-file@2.0.5", "get-intrinsic@1.3.0", "get-npm-tarball-url@2.0.2", "get-package-type@0.1.0", "get-proto@1.0.1", "get-stdin@6.0.0", "get-stream@4.1.0", "git-config-path@1.0.1", "git-raw-commits@4.0.0", "git-semver-tags@7.0.1", "github-from-package@0.0.0", "gitlab@10.2.1", "glob@10.4.1", "glob-parent@6.0.2", "glob-to-regexp@0.4.1", "globals@11.12.0", "globals@12.4.0", "globby@11.1.0", "globby@12.2.0", "gopd@1.2.0", "graceful-fs@4.2.10", "handlebars@4.7.8", "hard-rejection@2.1.0", "has-bigints@1.0.1", "has-flag@2.0.0", "has-symbols@1.1.0", "has-tostringtag@1.0.2", "hash-sum@2.0.0", "hasown@2.0.2", "hasurl@1.0.0", "homedir-polyfill@1.0.3", "hosted-git-info@2.8.9", "hosted-git-info@7.0.1", "hosted-git-info@7.0.2", "html-escaper@2.0.2", "http-cache-semantics@4.1.1", "http-errors@1.7.2", "http-errors@1.7.3", "http-proxy-agent@2.1.0", "http-proxy-agent@7.0.2", "https-proxy-agent@2.2.4", "https-proxy-agent@7.0.4", "humps@2.0.1", "hyperlinker@1.0.0", "iconv-lite@0.4.24", "icss-replace-symbols@1.1.0", "icss-utils@5.1.0", "ignore@4.0.6", "ignore@5.2.4", "ignore-walk@6.0.5", "import-fresh@3.3.0", "import-local@3.0.2", "import-local@3.1.0", "indent-string@5.0.0", "inherits@2.0.3", "ini@1.3.8", "ink@4.4.1", "inquirer@7.3.3", "internal-slot@1.0.3", "interpret@2.2.0", "into-stream@9.1.0", "invariant@2.2.4", "ip-address@9.0.5", "ipaddr.js@1.9.1", "is-actual-promise@1.0.2", "is-arrayish@0.2.1", "is-bigint@1.0.4", "is-binary-path@2.1.0", "is-boolean-object@1.1.2", "is-callable@1.2.4", "is-ci@2.0.0", "is-ci@3.0.1", "is-core-module@2.11.0", "is-core-module@2.16.1", "is-date-object@1.0.5", "is-extendable@0.1.1", "is-fullwidth-code-point@3.0.0", "is-fullwidth-code-point@4.0.0", "is-generator-fn@2.1.0", "is-lambda@1.0.1", "is-lower-case@2.0.2", "is-negative-zero@2.0.1", "is-number-object@1.0.6", "is-object@1.0.2", "is-plain-obj@1.1.0", "is-plain-object@2.0.4", "is-plain-object@5.0.0", "is-regex@1.1.4", "is-stream@1.1.0", "is-string@1.0.7", "is-symbol@1.0.4", "is-text-path@2.0.0", "is-upper-case@2.0.2", "isarray@0.0.1", "isexe@3.1.1", "isobject@3.0.1", "istanbul-lib-coverage@3.2.0", "istanbul-lib-instrument@5.2.1", "istanbul-lib-instrument@6.0.2", "istanbul-lib-report@3.0.0", "istanbul-lib-report@3.0.1", "istanbul-lib-source-maps@4.0.1", "istanbul-reports@3.1.5", "istanbul-reports@3.1.6", "jackspeak@3.1.2", "jest@29.4.1", "jest@29.7.0", "jest-changed-files@29.4.0", "jest-changed-files@29.7.0", "jest-circus@29.4.1", "jest-circus@29.7.0", "jest-cli@29.4.1", "jest-cli@29.7.0", "jest-config@29.4.1", "jest-config@29.7.0", "jest-diff@27.4.6", "jest-diff@29.4.1", "jest-diff@29.7.0", "jest-docblock@29.2.0", "jest-docblock@29.7.0", "jest-each@29.4.1", "jest-each@29.7.0", "jest-environment-node@29.4.1", "jest-environment-node@29.7.0", "jest-get-type@27.4.0", "jest-get-type@29.2.0", "jest-get-type@29.6.3", "jest-haste-map@29.4.1", "jest-haste-map@29.7.0", "jest-json-schema@6.1.0", "jest-junit@16.0.0", "jest-leak-detector@29.4.1", "jest-leak-detector@29.7.0", "jest-matcher-utils@27.4.6", "jest-matcher-utils@29.4.1", "jest-matcher-utils@29.7.0", "jest-message-util@29.4.1", "jest-message-util@29.7.0", "jest-mock@29.4.1", "jest-mock@29.7.0", "jest-pnp-resolver@1.2.3", "jest-regex-util@29.2.0", "jest-regex-util@29.6.3", "jest-resolve@29.4.1", "jest-resolve@29.7.0", "jest-resolve-dependencies@29.4.1", "jest-resolve-dependencies@29.7.0", "jest-runner@29.4.1", "jest-runner@29.7.0", "jest-runtime@29.4.1", "jest-runtime@29.7.0", "jest-snapshot@29.4.1", "jest-snapshot@29.7.0", "jest-util@29.4.1", "jest-util@29.7.0", "jest-validate@29.4.1", "jest-validate@29.7.0", "jest-watcher@29.4.1", "jest-watcher@29.7.0", "jest-worker@27.4.6", "jest-worker@29.4.1", "jest-worker@29.7.0", "js-tokens@4.0.0", "js-yaml@3.14.1", "jsbn@1.1.0", "jsesc@2.5.2", "jsesc@3.1.0", "json-parse-better-errors@1.0.2", "json-parse-even-better-errors@2.3.1", "json-parse-even-better-errors@3.0.1", "json-parse-even-better-errors@3.0.2", "json-schema-traverse@0.4.1", "json-schema-traverse@1.0.0", "json-stable-stringify-without-jsonify@1.0.1", "json5@1.0.1", "json5@2.2.3", "jsonfile@4.0.0", "jsonfile@6.1.0", "jsonparse@1.3.1", "jsonpointer@5.0.1", "JSONStream@1.3.5", "jsonwebtoken@8.5.1", "just-extend@4.2.1", "jwa@1.4.1", "jws@3.2.2", "kind-of@6.0.3", "klaw-sync@6.0.0", "kleur@3.0.3", "ky@0.12.0", "ky-universal@0.3.0", "leven@3.1.0", "levn@0.3.0", "li@1.3.0", "lines-and-columns@1.1.6", "lines-and-columns@1.2.4", "lines-and-columns@2.0.4", "load-json-file@4.0.0", "loader-runner@4.2.0", "loader-utils@1.4.0", "loader-utils@2.0.1", "locate-path@5.0.0", "locate-path@6.0.0", "locate-path@7.2.0", "lodash.find@4.6.0", "lodash.includes@4.3.0", "lodash.isboolean@3.0.3", "lodash.isinteger@4.0.4", "lodash.isnumber@3.0.3", "lodash.isplainobject@4.0.6", "lodash.isstring@4.0.1", "lodash.mapvalues@4.6.0", "lodash.memoize@4.1.2", "lodash.once@4.1.1", "lodash.set@4.3.2", "lolex@2.7.5", "lolex@5.1.2", "loose-envify@1.4.0", "lru-cache@10.1.0", "lru-cache@10.2.2", "macos-release@2.5.0", "magic-string@0.25.7", "make-dir@4.0.0", "make-error@1.3.6", "make-fetch-happen@13.0.1", "makeerror@1.0.12", "map-obj@1.0.1", "map-obj@4.2.1", "math-intrinsics@1.1.0", "media-typer@0.3.0", "memfs-or-file-map-to-github-branch@1.2.1", "memorystream@0.3.1", "meow@10.1.5", "meow@12.1.1", "merge-descriptors@1.0.1", "merge-source-map@1.1.0", "methods@1.1.2", "micromatch@4.0.5", "mime@1.6.0", "mime-db@1.49.0", "mime-types@2.1.32", "mimic-response@3.1.0", "min-indent@1.0.1", "minimatch@3.1.2", "minimatch@9.0.4", "minimist-options@4.1.0", "minipass@3.3.6", "minipass@5.0.0", "minipass@7.1.2", "minipass-collect@2.0.1", "minipass-fetch@3.0.5", "minipass-flush@1.0.5", "minipass-json-stream@1.0.1", "minipass-pipeline@1.2.4", "minipass-sized@1.0.3", "minizlib@2.1.2", "mkdirp@0.5.5", "mkdirp@1.0.4", "mkdirp@3.0.1", "mkdirp-classic@0.5.3", "mock-fs@4.14.0", "module-not-found-error@1.0.1", "ms@2.0.0", "ms@2.1.1", "multimatch@5.0.0", "multistream@4.1.0", "mute-stream@0.0.8", "nanoid@3.1.25", "napi-build-utils@2.0.0", "natural-compare@1.4.0", "needle@2.9.1", "negotiator@0.6.2", "negotiator@0.6.3", "neo-async@2.6.2", "nice-try@1.0.5", "nise@1.5.3", "node-abi@3.75.0", "node-cleanup@2.1.2", "node-fetch@2.7.0", "node-gyp@10.1.0", "node-int64@0.4.0", "node-loader@2.0.0", "node-releases@2.0.10", "node-releases@2.0.14", "nopt@7.2.1", "normalize-package-data@2.5.0", "normalize-package-data@3.0.3", "normalize-package-data@6.0.0", "normalize-package-data@6.0.1", "normalize-path@3.0.0", "normalize-registry-url@1.0.0", "npm-bundled@3.0.1", "npm-install-checks@6.3.0", "npm-normalize-package-bin@3.0.1", "npm-package-arg@11.0.2", "npm-packlist@8.0.2", "npm-pick-manifest@9.0.1", "npm-registry-fetch@16.2.1", "npm-run-all@4.1.5", "npm-run-path@2.0.2", "object-inspect@1.11.0", "object.assign@4.1.2", "octokit-pagination-methods@1.1.0", "on-finished@2.3.0", "opener@1.5.2", "optionator@0.8.3", "os-name@3.1.0", "os-tmpdir@1.0.2", "override-require@1.1.1", "p-finally@1.0.0", "p-limit@2.3.0", "p-limit@3.1.0", "p-limit@4.0.0", "p-locate@4.1.0", "p-locate@5.0.0", "p-locate@6.0.0", "p-try@2.2.0", "pacote@17.0.7", "parent-module@1.0.1", "parse-diff@0.7.1", "parse-git-config@2.0.3", "parse-github-url@1.0.2", "parse-json@4.0.0", "parse-json@5.2.0", "parse-json@7.1.1", "parse-passwd@1.0.0", "parseurl@1.3.3", "patch-console@2.0.0", "patch-package@6.5.0", "path-exists@4.0.0", "path-exists@5.0.0", "path-key@2.0.1", "path-parse@1.0.7", "path-scurry@1.11.1", "path-to-regexp@0.1.7", "path-to-regexp@1.8.0", "path-type@3.0.0", "path-type@4.0.0", "picocolors@1.0.0", "picocolors@1.1.1", "picomatch@2.3.1", "picomatch@4.0.4", "pidtree@0.3.1", "pify@3.0.0", "pinpoint@1.1.0", "pirates@4.0.5", "pkg-dir@4.2.0", "please-upgrade-node@3.2.0", "polite-json@4.0.1", "portfinder@1.0.38", "postcss@8.3.6", "postcss-modules@4.2.2", "postcss-modules-extract-imports@3.0.0", "postcss-modules-local-by-default@4.0.0", "postcss-modules-scope@3.0.0", "postcss-modules-values@4.0.0", "postcss-selector-parser@6.0.6", "postcss-value-parser@4.1.0", "postject@1.0.0-alpha.6", "prebuild-install@7.1.3", "prelude-ls@1.1.2", "prettier@3.3.3", "pretty-format@27.4.6", "pretty-format@29.4.1", "pretty-format@29.7.0", "prettyjson@1.2.1", "prismjs@1.29.0", "prismjs-terminal@1.2.3", "proc-log@3.0.0", "proc-log@4.2.0", "process-on-spawn@1.0.0", "progress@2.0.3", "promise-inflight@1.0.1", "promise-retry@2.0.1", "prompts@2.4.2", "proxy-addr@2.0.7", "proxyquire@1.8.0", "pure-rand@6.0.4", "qs@6.7.0", "query-ast@1.0.4", "query-string@6.14.1", "quick-lru@5.1.1", "randombytes@2.1.0", "range-parser@1.2.1", "raw-body@2.4.0", "rc@1.2.8", "react@18.3.1", "react-dom@18.3.1", "react-element-to-jsx-string@15.0.0", "react-is@17.0.2", "react-is@18.1.0", "react-is@18.2.0", "react-reconciler@0.29.2", "read-package-json@7.0.1", "read-package-json-fast@3.0.2", "read-pkg@3.0.0", "read-pkg@6.0.0", "read-pkg@8.1.0", "read-pkg-up@10.1.0", "read-pkg-up@8.0.0", "readable-stream@2.3.7", "readdirp@3.6.0", "readline-sync@1.4.10", "rechoir@0.7.1", "redent@4.0.0", "regenerator-runtime@0.13.9", "regexpp@2.0.1", "regexpp@3.2.0", "require-directory@2.1.1", "require-from-string@2.0.2", "require-package-name@2.0.1", "resolve@1.1.7", "resolve@1.22.1", "resolve@1.22.12", "resolve-cwd@3.0.0", "resolve-from@4.0.0", "resolve-from@5.0.0", "resolve-import@1.4.5", "resolve.exports@2.0.0", "resolve.exports@2.0.3", "restore-cursor@4.0.0", "retry@0.12.0", "rimraf@2.6.3", "rimraf@4.1.2", "rimraf@5.0.7", "run-async@2.4.1", "rxjs@6.6.7", "samsam@1.3.0", "sass@1.38.0", "scheduler@0.23.2", "schema-utils@3.1.1", "scss-parser@1.0.5", "semver@6.3.0", "semver@7.3.8", "semver@7.6.2", "semver@7.7.2", "send@0.17.1", "serialize-javascript@6.0.0", "serve-static@1.14.1", "setprototypeof@1.1.1", "shallow-clone@3.0.1", "shebang-command@1.2.0", "shebang-regex@1.0.0", "shell-quote@1.7.2", "side-channel@1.0.4", "signal-exit@4.1.0", "sigstore@2.3.1", "simple-concat@1.0.1", "simple-get@4.0.1", "sinon@4.5.0", "sisteransi@1.0.5", "slash@2.0.0", "slash@3.0.0", "slash@4.0.0", "slice-ansi@2.1.0", "slice-ansi@5.0.0", "slice-ansi@6.0.0", "smart-buffer@4.2.0", "socks@2.8.3", "socks-proxy-agent@8.0.3", "source-list-map@2.0.1", "source-map@0.7.3", "source-map@0.7.4", "source-map-js@0.6.2", "source-map-support@0.5.13", "sourcemap-codec@1.4.8", "spdx-correct@3.1.1", "spdx-exceptions@2.3.0", "spdx-expression-parse@3.0.1", "spdx-expression-validate@2.0.0", "spdx-license-ids@3.0.10", "split-on-first@1.1.0", "split2@4.2.0", "ssri@10.0.6", "stack-utils@2.0.6", "statuses@1.5.0", "stream-meter@1.0.4", "strict-uri-encode@2.0.0", "string-hash@1.1.3", "string-length@4.0.2", "string-length@6.0.0", "string-width@4.2.3", "string-width@5.1.2", "string.prototype.padend@3.1.2", "string.prototype.trimend@1.0.4", "string.prototype.trimstart@1.0.4", "strip-ansi@7.1.0", "strip-bom@3.0.0", "strip-bom@4.0.0", "strip-eof@1.0.0", "strip-indent@4.0.0", "strip-json-comments@2.0.1", "strip-json-comments@3.1.1", "supports-color@8.1.1", "supports-hyperlinks@1.0.1", "supports-preserve-symlinks-flag@1.0.0", "sync-content@1.0.2", "table@5.4.6", "tap@19.0.2", "tap-parser@16.0.1", "tap-yaml@2.2.2", "tapable@2.2.1", "tar@6.2.1", "tar-fs@2.1.1", "tar-fs@3.1.3", "tcompare@7.0.1", "temp-dir@3.0.0", "tempfile@5.0.0", "terser@5.7.1", "terser-webpack-plugin@5.1.4", "test-exclude@6.0.0", "text-extensions@2.4.0", "text-table@0.2.0", "through@2.3.8", "tinyglobby@0.2.14", "tmp@0.0.33", "tmpl@1.0.5", "to-fast-properties@2.0.0", "toidentifier@1.0.0", "tr46@0.0.3", "tr46@1.0.1", "trim-newlines@4.1.1", "trivial-deferred@2.0.0", "ts-jest@29.0.5", "ts-jest@29.1.2", "ts-loader@9.5.1", "ts-node@10.9.2", "tshy@1.14.0", "tsutils@3.21.0", "tuf-js@2.2.1", "tunnel-agent@0.6.0", "type-check@0.3.2", "type-detect@4.0.8", "type-fest@0.12.0", "type-fest@0.21.3", "type-fest@0.8.1", "type-fest@1.4.0", "type-fest@3.13.1", "type-fest@4.9.0", "type-is@1.6.18", "typescript@4.9.5", "typescript@5.4.5", "uglify-js@3.17.4", "unbox-primitive@1.0.1", "undici@7.29.0", "unique-filename@3.0.0", "unique-slug@4.0.0", "universal-url@2.0.0", "universal-user-agent@4.0.1", "universal-user-agent@6.0.0", "universalify@0.1.2", "universalify@2.0.0", "unpipe@1.0.0", "unzipper@0.12.3", "update-browserslist-db@1.0.10", "update-browserslist-db@1.0.13", "uri-js@4.4.1", "utils-merge@1.0.1", "uuid@8.3.2", "v8-compile-cache@2.3.0", "v8-compile-cache-lib@3.0.1", "v8-to-istanbul@9.0.1", "v8-to-istanbul@9.2.0", "validate-npm-package-license@3.0.4", "validate-npm-package-name@5.0.1", "vary@1.1.2", "vscode-jsonrpc@8.1.0", "walk-up-path@3.0.1", "walker@1.0.8", "watchpack@2.2.0", "webidl-conversions@3.0.1", "webidl-conversions@4.0.2", "webpack@5.54.0", "webpack-cli@4.8.0", "webpack-license-plugin@4.2.0", "webpack-merge@5.8.0", "webpack-sources@2.3.1", "webpack-sources@3.2.0", "whatwg-url@5.0.0", "whatwg-url@7.1.0", "which@1.3.1", "which@4.0.0", "which-boxed-primitive@1.0.2", "widest-line@4.0.1", "wildcard@2.0.0", "windows-release@3.3.3", "word-wrap@1.2.3", "wordwrap@1.0.0", "wrap-ansi@7.0.0", "wrap-ansi@8.1.0", "write@1.0.3", "write-file-atomic@4.0.2", "write-file-atomic@5.0.0", "ws@8.17.0", "xml@1.0.1", "y18n@5.0.8", "yaml@2.4.2", "yaml-types@0.3.0", "yargs@16.2.0", "yargs@17.6.2", "yargs@17.7.2", "yargs-parser@20.2.9", "yargs-parser@21.1.1", "yn@3.1.1", "yocto-queue@0.1.0", "yocto-queue@1.0.0", "yoga-wasm-web@0.3.3" ], "any": true, "baseline": false, "in_binary_new": [], "in_binary_resolved": [], "integrity_drift": 0, "license_changes": [ { "from": [], "package": "has", "to": [ "MIT" ] } ], "new_vulnerabilities": [ { "aliases": [ "CVE-2026-59873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59873", "percentile": 0.47807, "score": 0.00582 }, "fix_state": "fixed", "fixed_in": [ "7.5.19" ], "id": "GHSA-23hp-3jrh-7fpw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Critical", "summary": "node-tar: Decompression/parse DoS via unlimited input", "url": "https://github.com/advisories/GHSA-23hp-3jrh-7fpw", "version": "6.2.1" }, { "aliases": [ "CVE-2026-32141" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-32141", "percentile": 0.57853, "score": 0.00839 }, "fix_state": "fixed", "fixed_in": [ "3.4.0" ], "id": "GHSA-25h7-pfq9-p65f", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "flatted", "severity": "High", "summary": "flatted vulnerable to unbounded recursion DoS in parse() revive phase", "url": "https://github.com/advisories/GHSA-25h7-pfq9-p65f", "version": "2.0.2" }, { "aliases": [ "CVE-2026-111181" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111181", "percentile": 0.32919, "score": 0.00388 }, "fix_state": "fixed", "fixed_in": [ "1.20.9" ], "id": "GHSA-27r3-jxmh-p828", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "body-parser", "severity": "High", "summary": "body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body", "url": "https://github.com/advisories/GHSA-27r3-jxmh-p828", "version": "1.19.0" }, { "aliases": [ "CVE-2026-84375" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84375", "percentile": 0.45503, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "3.15.2" ], "id": "GHSA-2883-xcg3-v3hh", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources", "url": "https://github.com/advisories/GHSA-2883-xcg3-v3hh", "version": "3.14.1" }, { "aliases": [ "CVE-2026-67214" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-67214", "percentile": 0.26147, "score": 0.0033 }, "fix_state": "fixed", "fixed_in": [ "3.3.16" ], "id": "GHSA-28wg-ghj8-5hjv", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "nanoid", "severity": "High", "summary": "nanoid: non-secure generators can loop indefinitely with negative size", "url": "https://github.com/advisories/GHSA-28wg-ghj8-5hjv", "version": "3.1.25" }, { "aliases": [ "CVE-2025-69873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-69873", "percentile": 0.45842, "score": 0.00547 }, "fix_state": "fixed", "fixed_in": [ "6.14.0" ], "id": "GHSA-2g4f-4pwh-qvx6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ajv", "severity": "Medium", "summary": "ajv has ReDoS when using `$data` option", "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6", "version": "6.12.6" }, { "aliases": [ "CVE-2026-84947" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84947", "percentile": 0.09396, "score": 0.00196 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-2gqq-gqf2-x968", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Low", "summary": "undici vulnerable to response truncation via oversized chunked responses in the dump interceptor", "url": "https://github.com/advisories/GHSA-2gqq-gqf2-x968", "version": "7.29.0" }, { "aliases": [ "CVE-2026-84933" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84933", "percentile": 0.23063, "score": 0.00303 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-2jfj-6hjv-fm6j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches", "url": "https://github.com/advisories/GHSA-2jfj-6hjv-fm6j", "version": "7.29.0" }, { "aliases": [ "CVE-2026-109383" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109383", "percentile": 0.08019, "score": 0.00184 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-2m5v-pch6-74hx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent", "url": "https://github.com/advisories/GHSA-2m5v-pch6-74hx", "version": "7.29.0" }, { "aliases": [ "CVE-2026-33916" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33916", "percentile": 0.20535, "score": 0.0028 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-2qvq-rjwj-gvw9", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Medium", "summary": "Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection", "url": "https://github.com/advisories/GHSA-2qvq-rjwj-gvw9", "version": "4.7.8" }, { "aliases": [ "CVE-2026-67213" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-67213", "percentile": 0.26279, "score": 0.00331 }, "fix_state": "fixed", "fixed_in": [ "3.3.18" ], "id": "GHSA-2v37-7h3g-55p8", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "nanoid", "severity": "High", "summary": "nanoid: custom generators can loop indefinitely when size is zero", "url": "https://github.com/advisories/GHSA-2v37-7h3g-55p8", "version": "3.1.25" }, { "aliases": [ "CVE-2026-33937" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33937", "percentile": 0.79759, "score": 0.01907 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-2w6w-674q-4c4q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Critical", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion", "url": "https://github.com/advisories/GHSA-2w6w-674q-4c4q", "version": "4.7.8" }, { "aliases": [ "CVE-2026-110725" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110725", "percentile": 0.22997, "score": 0.00302 }, "fix_state": "fixed", "fixed_in": [ "3.1.9" ], "id": "GHSA-333x-w4r6-6crp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "Low", "summary": "fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references", "url": "https://github.com/advisories/GHSA-333x-w4r6-6crp", "version": "3.0.6" }, { "aliases": [ "CVE-2026-24842" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24842", "percentile": 0.49102, "score": 0.00608 }, "fix_state": "fixed", "fixed_in": [ "7.5.7" ], "id": "GHSA-34x7-hfp2-rc4v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal", "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "version": "6.2.1" }, { "aliases": [ "CVE-2026-4867" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-4867", "percentile": 0.43909, "score": 0.00515 }, "fix_state": "fixed", "fixed_in": [ "0.1.13" ], "id": "GHSA-37ch-88jc-xwx2", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters", "url": "https://github.com/advisories/GHSA-37ch-88jc-xwx2", "version": "0.1.7" }, { "aliases": [ "CVE-2025-68157" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-68157", "percentile": 0.13824, "score": 0.0023 }, "fix_state": "fixed", "fixed_in": [ "5.104.0" ], "id": "GHSA-38r7-794h-5758", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "webpack", "severity": "Low", "summary": "webpack buildHttp HttpUriPlugin allowedUris bypass via HTTP redirects \u2192 SSRF + cache persistence", "url": "https://github.com/advisories/GHSA-38r7-794h-5758", "version": "5.54.0" }, { "aliases": [ "CVE-2026-13311" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-13311", "percentile": 0.29829, "score": 0.0036 }, "fix_state": "fixed", "fixed_in": [ "1.9.0" ], "id": "GHSA-395f-4hp3-45gv", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "shell-quote", "severity": "High", "summary": "shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)", "url": "https://github.com/advisories/GHSA-395f-4hp3-45gv", "version": "1.7.2" }, { "aliases": [ "CVE-2026-118773" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118773", "percentile": 0.28707, "score": 0.0035 }, "fix_state": "fixed", "fixed_in": [ "14.0.2" ], "id": "GHSA-3g3m-2fjr-6pw4", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "glob", "severity": "Medium", "summary": "Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal", "url": "https://github.com/advisories/GHSA-3g3m-2fjr-6pw4", "version": "10.4.1" }, { "aliases": [ "CVE-2024-37890" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-37890", "percentile": 0.71668, "score": 0.01357 }, "fix_state": "fixed", "fixed_in": [ "8.17.1" ], "id": "GHSA-3h5v-q93c-6h6q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ws", "severity": "High", "summary": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "version": "8.17.0" }, { "aliases": [ "CVE-2026-13149" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-13149", "percentile": 0.3024, "score": 0.00364 }, "fix_state": "fixed", "fixed_in": [ "1.1.16" ], "id": "GHSA-3jxr-9vmj-r5cp", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups", "url": "https://github.com/advisories/GHSA-3jxr-9vmj-r5cp", "version": "1.1.11" }, { "aliases": [ "CVE-2026-33938" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33938", "percentile": 0.53978, "score": 0.00721 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-3mfm-83xf-c92r", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block", "url": "https://github.com/advisories/GHSA-3mfm-83xf-c92r", "version": "4.7.8" }, { "aliases": [ "CVE-2026-26996" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26996", "percentile": 0.47571, "score": 0.00577 }, "fix_state": "fixed", "fixed_in": [ "9.0.6" ], "id": "GHSA-3ppc-4f35-3m26", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "minimatch", "severity": "High", "summary": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "version": "9.0.4" }, { "aliases": [ "CVE-2022-37603" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-37603", "percentile": 0.85942, "score": 0.02702 }, "fix_state": "fixed", "fixed_in": [ "2.0.4" ], "id": "GHSA-3rfm-jhwj-7488", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "loader-utils", "severity": "High", "summary": "loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable", "url": "https://github.com/advisories/GHSA-3rfm-jhwj-7488", "version": "2.0.1" }, { "aliases": [ "CVE-2026-33672" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33672", "percentile": 0.36831, "score": 0.00425 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-3v7f-55p6-f55p", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "Medium", "summary": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching", "url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p", "version": "2.3.1" }, { "aliases": [ "CVE-2026-85024" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-85024", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-3wwx-pv8p-q78v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression", "url": "https://github.com/advisories/GHSA-3wwx-pv8p-q78v", "version": "7.29.0" }, { "aliases": [ "CVE-2026-16629" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-16629", "percentile": 0.65204, "score": 0.01083 }, "fix_state": "fixed", "fixed_in": [ "13.0.8" ], "id": "GHSA-3x93-p86w-5jvh", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "danger", "severity": "Medium", "summary": "danger allows local OS command injection through crafted file paths", "url": "https://github.com/advisories/GHSA-3x93-p86w-5jvh", "version": "10.9.0" }, { "aliases": [ "CVE-2024-21538" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-21538", "percentile": 0.58749, "score": 0.00868 }, "fix_state": "fixed", "fixed_in": [ "7.0.5" ], "id": "GHSA-3xgq-45jj-v275", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "cross-spawn", "severity": "High", "summary": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "version": "7.0.3" }, { "aliases": [ "CVE-2026-84890" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84890", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-3xpg-4rpp-hhhm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unbounded decompression of compressed responses", "url": "https://github.com/advisories/GHSA-3xpg-4rpp-hhhm", "version": "7.29.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-442j-39wm-28r2", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Low", "summary": "Handlebars.js has a Property Access Validation Bypass in container.lookup", "url": "https://github.com/advisories/GHSA-442j-39wm-28r2", "version": "4.7.8" }, { "aliases": [ "CVE-2026-33532" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33532", "percentile": 0.42049, "score": 0.00488 }, "fix_state": "fixed", "fixed_in": [ "2.8.3" ], "id": "GHSA-48c2-rrv3-qjmp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "yaml", "severity": "Medium", "summary": "yaml is vulnerable to Stack Overflow via deeply nested YAML collections", "url": "https://github.com/advisories/GHSA-48c2-rrv3-qjmp", "version": "2.4.2" }, { "aliases": [ "CVE-2026-13676" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-13676", "percentile": 0.52904, "score": 0.00692 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-4c8g-83qw-93j6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via failed IDN canonicalization", "url": "https://github.com/advisories/GHSA-4c8g-83qw-93j6", "version": "3.0.6" }, { "aliases": [ "CVE-2026-82417" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-82417", "percentile": 0.33809, "score": 0.00396 }, "fix_state": "fixed", "fixed_in": [ "6.16.0" ], "id": "GHSA-4mjr-xmp4-gh2g", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "Medium", "summary": "qs: Denial of Service via Attacker Controlled isBuffer", "url": "https://github.com/advisories/GHSA-4mjr-xmp4-gh2g", "version": "6.7.0" }, { "aliases": [ "CVE-2026-109924" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109924", "percentile": 0.25125, "score": 0.00321 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-4qv8-2p9j-2685", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unbounded memory in the EventSource parser", "url": "https://github.com/advisories/GHSA-4qv8-2p9j-2685", "version": "7.29.0" }, { "aliases": [ "CVE-2024-43788" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43788", "percentile": 0.61507, "score": 0.00959 }, "fix_state": "fixed", "fixed_in": [ "5.94.0" ], "id": "GHSA-4vvj-4cpr-p986", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "webpack", "severity": "Medium", "summary": "Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS", "url": "https://github.com/advisories/GHSA-4vvj-4cpr-p986", "version": "5.54.0" }, { "aliases": [ "CVE-2026-109829" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109829", "percentile": 0.04067, "score": 0.00149 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-4w7w-5xrc-9h26", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects", "url": "https://github.com/advisories/GHSA-4w7w-5xrc-9h26", "version": "7.29.0" }, { "aliases": [ "CVE-2022-25858" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25858", "percentile": 0.88347, "score": 0.03253 }, "fix_state": "fixed", "fixed_in": [ "5.14.2" ], "id": "GHSA-4wf5-vphf-c2xc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "terser", "severity": "High", "summary": "Terser insecure use of regular expressions leads to ReDoS", "url": "https://github.com/advisories/GHSA-4wf5-vphf-c2xc", "version": "5.7.1" }, { "aliases": [ "CVE-2026-49356" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-49356", "percentile": 0.04312, "score": 0.00152 }, "fix_state": "fixed", "fixed_in": [ "7.29.6" ], "id": "GHSA-4x5r-pxfx-6jf8", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@babel/core", "severity": "Low", "summary": "@babel/core: Arbitrary File Read via sourceMappingURL Comment", "url": "https://github.com/advisories/GHSA-4x5r-pxfx-6jf8", "version": "7.24.0" }, { "aliases": [ "CVE-2026-59869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59869", "percentile": 0.47992, "score": 0.00585 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-52cp-r559-cp3m", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: YAML merge-key chains can force quadratic CPU consumption", "url": "https://github.com/advisories/GHSA-52cp-r559-cp3m", "version": "3.14.1" }, { "aliases": [ "CVE-2025-54798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-54798", "percentile": 0.31622, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "0.2.4" ], "id": "GHSA-52f5-9888-hmc6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "Low", "summary": "tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter", "url": "https://github.com/advisories/GHSA-52f5-9888-hmc6", "version": "0.0.33" }, { "aliases": [ "CVE-2026-48815" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48815", "percentile": 0.06771, "score": 0.00173 }, "fix_state": "fixed", "fixed_in": [ "4.1.1" ], "id": "GHSA-52v5-jr5w-gjxr", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "sigstore", "severity": "High", "summary": "sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced", "url": "https://github.com/advisories/GHSA-52v5-jr5w-gjxr", "version": "2.3.1" }, { "aliases": [ "CVE-2026-87029" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-87029", "percentile": 0.178, "score": 0.0026 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-55wc-3pg8-jfw6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor", "url": "https://github.com/advisories/GHSA-55wc-3pg8-jfw6", "version": "7.29.0" }, { "aliases": [ "CVE-2026-45736" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-45736", "percentile": 0.54801, "score": 0.00745 }, "fix_state": "fixed", "fixed_in": [ "8.20.1" ], "id": "GHSA-58qx-3vcg-4xpx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ws", "severity": "Medium", "summary": "ws: Uninitialized memory disclosure", "url": "https://github.com/advisories/GHSA-58qx-3vcg-4xpx", "version": "8.17.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "7.0.3" ], "id": "GHSA-5c6j-r48x-rmvq", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "serialize-javascript", "severity": "High", "summary": "Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()", "url": "https://github.com/advisories/GHSA-5c6j-r48x-rmvq", "version": "6.0.0" }, { "aliases": [ "CVE-2025-64756" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-64756", "percentile": 0.87717, "score": 0.0309 }, "fix_state": "fixed", "fixed_in": [ "10.5.0" ], "id": "GHSA-5j98-mcp5-4vw2", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "glob", "severity": "High", "summary": "glob CLI: Command injection via -c/--cmd executes matches with shell:true", "url": "https://github.com/advisories/GHSA-5j98-mcp5-4vw2", "version": "10.4.1" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.15.1" ], "id": "GHSA-5p4m-2wfm-xmqj", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) \u2014 CVE-2026-59870 fix not backported", "url": "https://github.com/advisories/GHSA-5p4m-2wfm-xmqj", "version": "3.14.1" }, { "aliases": [ "CVE-2023-45133" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-45133", "percentile": 0.44506, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "7.23.2" ], "id": "GHSA-67hx-6x53-jw92", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "@babel/traverse", "severity": "Critical", "summary": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "version": "7.20.13" }, { "aliases": [ "CVE-2026-45623" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-45623", "percentile": 0.49087, "score": 0.00608 }, "fix_state": "fixed", "fixed_in": [ "8.5.12" ], "id": "GHSA-6g55-p6wh-862q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss", "severity": "High", "summary": "PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments", "url": "https://github.com/advisories/GHSA-6g55-p6wh-862q", "version": "8.3.6" }, { "aliases": [ "CVE-2026-102276" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102276", "percentile": 0.39514, "score": 0.00455 }, "fix_state": "fixed", "fixed_in": [ "1.1.19" ], "id": "GHSA-6j4f-fj2g-mc7p", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion", "url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p", "version": "1.1.11" }, { "aliases": [ "CVE-2026-110816" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110816", "percentile": 0.30708, "score": 0.00368 }, "fix_state": "fixed", "fixed_in": [ "6.16.1" ], "id": "GHSA-6pq8-jhm2-2vcw", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "Medium", "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)", "url": "https://github.com/advisories/GHSA-6pq8-jhm2-2vcw", "version": "6.7.0" }, { "aliases": [ "CVE-2025-15284" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-15284", "percentile": 0.39084, "score": 0.0045 }, "fix_state": "fixed", "fixed_in": [ "6.14.1" ], "id": "GHSA-6rw7-vpxm-498p", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "Medium", "summary": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion", "url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p", "version": "6.7.0" }, { "aliases": [ "CVE-2026-24001" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24001", "percentile": 0.49541, "score": 0.00616 }, "fix_state": "fixed", "fixed_in": [ "5.2.2" ], "id": "GHSA-73rr-hh4g-fpgx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "diff", "severity": "Low", "summary": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch", "url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx", "version": "5.2.0" }, { "aliases": [ "CVE-2026-73088" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73088", "percentile": 0.51498, "score": 0.00658 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-73wf-gq98-2v4g", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "browserslist", "severity": "High", "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)", "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g", "version": "4.23.0" }, { "aliases": [ "CVE-2022-37601" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-37601", "percentile": 0.89173, "score": 0.03503 }, "fix_state": "fixed", "fixed_in": [ "2.0.3" ], "id": "GHSA-76p3-8jx3-jpfq", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "loader-utils", "severity": "Critical", "summary": "Prototype pollution in webpack loader-utils", "url": "https://github.com/advisories/GHSA-76p3-8jx3-jpfq", "version": "2.0.1" }, { "aliases": [ "CVE-2024-11831" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-11831", "percentile": 0.66226, "score": 0.01122 }, "fix_state": "fixed", "fixed_in": [ "6.0.2" ], "id": "GHSA-76p7-773f-r4q5", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "serialize-javascript", "severity": "Medium", "summary": "Cross-site Scripting (XSS) in serialize-javascript", "url": "https://github.com/advisories/GHSA-76p7-773f-r4q5", "version": "6.0.0" }, { "aliases": [ "CVE-2023-44270" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-44270", "percentile": 0.62035, "score": 0.00973 }, "fix_state": "fixed", "fixed_in": [ "8.4.31" ], "id": "GHSA-7fh5-64p2-3v2j", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss", "severity": "Medium", "summary": "PostCSS line return parsing error", "url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "version": "8.3.6" }, { "aliases": [ "CVE-2026-18446" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-18446", "percentile": 0.32004, "score": 0.0038 }, "fix_state": "fixed", "fixed_in": [ "3.1.5" ], "id": "GHSA-7p8r-x3mc-p8w7", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via backslash authority introducer", "url": "https://github.com/advisories/GHSA-7p8r-x3mc-p8w7", "version": "3.0.6" }, { "aliases": [ "CVE-2026-27903" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27903", "percentile": 0.4749, "score": 0.00576 }, "fix_state": "fixed", "fixed_in": [ "9.0.7" ], "id": "GHSA-7r86-cg39-jmmj", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "minimatch", "severity": "High", "summary": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments", "url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "version": "9.0.4" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-7rx3-28cr-v5wh", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Medium", "summary": "Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry", "url": "https://github.com/advisories/GHSA-7rx3-28cr-v5wh", "version": "4.7.8" }, { "aliases": [ "CVE-2026-26960" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26960", "percentile": 0.2599, "score": 0.00328 }, "fix_state": "fixed", "fixed_in": [ "7.5.8" ], "id": "GHSA-83g3-92jg-28cx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction", "url": "https://github.com/advisories/GHSA-83g3-92jg-28cx", "version": "6.2.1" }, { "aliases": [ "CVE-2026-85008" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-85008", "percentile": 0.01688, "score": 0.00118 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-8436-99hf-9mmv", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Low", "summary": "undici vulnerable to caching and replay of unsafe HTTP method responses", "url": "https://github.com/advisories/GHSA-8436-99hf-9mmv", "version": "7.29.0" }, { "aliases": [ "CVE-2025-65945" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-65945", "percentile": 0.11984, "score": 0.00215 }, "fix_state": "fixed", "fixed_in": [ "3.2.3" ], "id": "GHSA-869p-cjfg-cm3x", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "jws", "severity": "High", "summary": "auth0/node-jws Improperly Verifies HMAC Signature", "url": "https://github.com/advisories/GHSA-869p-cjfg-cm3x", "version": "3.2.2" }, { "aliases": [ "CVE-2022-23539" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-23539", "percentile": 0.44463, "score": 0.00524 }, "fix_state": "fixed", "fixed_in": [ "9.0.0" ], "id": "GHSA-8cf7-32gw-wr33", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "jsonwebtoken", "severity": "High", "summary": "jsonwebtoken unrestricted key type could lead to legacy keys usage", "url": "https://github.com/advisories/GHSA-8cf7-32gw-wr33", "version": "8.5.1" }, { "aliases": [ "CVE-2025-48387" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-48387", "percentile": 0.47656, "score": 0.00579 }, "fix_state": "fixed", "fixed_in": [ "2.1.3" ], "id": "GHSA-8cj5-5rvv-wf4v", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "tar-fs", "severity": "High", "summary": "tar-fs can extract outside the specified dir with a specific tarball", "url": "https://github.com/advisories/GHSA-8cj5-5rvv-wf4v", "version": "2.1.1" }, { "aliases": [ "CVE-2025-68458" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-68458", "percentile": 0.13824, "score": 0.0023 }, "fix_state": "fixed", "fixed_in": [ "5.104.1" ], "id": "GHSA-8fgc-7cc6-rx7x", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "webpack", "severity": "Low", "summary": "webpack buildHttp: allowedUris allow-list bypass via URL userinfo (@) leading to build-time SSRF behavior", "url": "https://github.com/advisories/GHSA-8fgc-7cc6-rx7x", "version": "5.54.0" }, { "aliases": [ "CVE-2025-25975" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25975", "percentile": 0.40899, "score": 0.00473 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-8g77-54rh-46hx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "parse-git-config", "severity": "High", "summary": "Prototype Pollution Vulnerability in parse-git-config", "url": "https://github.com/advisories/GHSA-8g77-54rh-46hx", "version": "2.0.3" }, { "aliases": [ "CVE-2021-4279" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-4279", "percentile": 0.67054, "score": 0.01156 }, "fix_state": "fixed", "fixed_in": [ "3.1.1" ], "id": "GHSA-8gh8-hqwg-xf34", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-json-patch", "severity": "High", "summary": "Starcounter-Jack JSON-Patch Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-8gh8-hqwg-xf34", "version": "3.1.0" }, { "aliases": [ "CVE-2026-23745" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23745", "percentile": 0.31588, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "7.5.3" ], "id": "GHSA-8qq5-rm4j-mr97", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization", "url": "https://github.com/advisories/GHSA-8qq5-rm4j-mr97", "version": "6.2.1" }, { "aliases": [ "CVE-2026-106446" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106446", "percentile": 0.56143, "score": 0.00786 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-8r5x-fm3f-whwj", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Critical", "summary": "Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)", "url": "https://github.com/advisories/GHSA-8r5x-fm3f-whwj", "version": "4.7.8" }, { "aliases": [ "CVE-2026-59874" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59874", "percentile": 0.37686, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-8x88-c5mf-7j5w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Negative tar entry size causes infinite loop in archive replace", "url": "https://github.com/advisories/GHSA-8x88-c5mf-7j5w", "version": "6.2.1" }, { "aliases": [ "CVE-2024-4067" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4067", "percentile": 0.73001, "score": 0.01429 }, "fix_state": "fixed", "fixed_in": [ "4.0.8" ], "id": "GHSA-952p-6rrq-rcjv", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "micromatch", "severity": "Medium", "summary": "Regular Expression Denial of Service (ReDoS) in micromatch", "url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "version": "4.0.5" }, { "aliases": [ "CVE-2025-27789" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-27789", "percentile": 0.46829, "score": 0.00563 }, "fix_state": "fixed", "fixed_in": [ "7.26.10" ], "id": "GHSA-968p-4wvh-cqc8", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@babel/helpers", "severity": "Medium", "summary": "Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups", "url": "https://github.com/advisories/GHSA-968p-4wvh-cqc8", "version": "7.24.0" }, { "aliases": [ "CVE-2026-48779" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48779", "percentile": 0.72944, "score": 0.01426 }, "fix_state": "fixed", "fixed_in": [ "8.21.0" ], "id": "GHSA-96hv-2xvq-fx4p", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ws", "severity": "High", "summary": "ws: Memory exhaustion DoS from tiny fragments and data chunks", "url": "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "version": "8.17.0" }, { "aliases": [ "CVE-2022-46175" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-46175", "percentile": 0.95511, "score": 0.09698 }, "fix_state": "fixed", "fixed_in": [ "1.0.2" ], "id": "GHSA-9c47-m6qq-7p4h", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "json5", "severity": "High", "summary": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "version": "1.0.1" }, { "aliases": [ "CVE-2026-33939" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33939", "percentile": 0.50065, "score": 0.00627 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-9cx6-37pm-9jff", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation", "url": "https://github.com/advisories/GHSA-9cx6-37pm-9jff", "version": "4.7.8" }, { "aliases": [ "CVE-2026-109932" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109932", "percentile": 0.25126, "score": 0.00321 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-9fm3-97px-rjf6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering", "url": "https://github.com/advisories/GHSA-9fm3-97px-rjf6", "version": "7.29.0" }, { "aliases": [ "CVE-2026-31802" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-31802", "percentile": 0.19054, "score": 0.00269 }, "fix_state": "fixed", "fixed_in": [ "7.5.11" ], "id": "GHSA-9ppj-qmqm-q256", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Symlink Path Traversal via Drive-Relative Linkpath", "url": "https://github.com/advisories/GHSA-9ppj-qmqm-q256", "version": "6.2.1" }, { "aliases": [ "CVE-2024-45296" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-45296", "percentile": 0.60707, "score": 0.00932 }, "fix_state": "fixed", "fixed_in": [ "1.9.0" ], "id": "GHSA-9wv6-86v2-598j", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp outputs backtracking regular expressions", "url": "https://github.com/advisories/GHSA-9wv6-86v2-598j", "version": "1.8.0" }, { "aliases": [ "CVE-2026-33671" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33671", "percentile": 0.36317, "score": 0.0042 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-c2c7-rcm5-vvqj", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "High", "summary": "Picomatch has a ReDoS vulnerability via extglob quantifiers", "url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj", "version": "2.3.1" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "7.5.2" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "7.3.8" }, { "aliases": [ "CVE-2026-73089" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73089", "percentile": 0.51386, "score": 0.00655 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-c83g-rgw3-j3cx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "browserslist", "severity": "High", "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM", "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx", "version": "4.23.0" }, { "aliases": [ "CVE-2024-43800" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43800", "percentile": 0.50252, "score": 0.00631 }, "fix_state": "fixed", "fixed_in": [ "1.16.0" ], "id": "GHSA-cm22-4g7w-348p", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "serve-static", "severity": "Low", "summary": "serve-static vulnerable to template injection that can lead to XSS", "url": "https://github.com/advisories/GHSA-cm22-4g7w-348p", "version": "1.14.1" }, { "aliases": [ "CVE-2026-75975" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-75975", "percentile": 0.12576, "score": 0.0022 }, "fix_state": "fixed", "fixed_in": [ "3.1.6" ], "id": "GHSA-f65p-4m7j-42xc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization", "url": "https://github.com/advisories/GHSA-f65p-4m7j-42xc", "version": "3.0.6" }, { "aliases": [ "CVE-2026-109841" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109841", "percentile": 0.16687, "score": 0.00252 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-f72v-6w45-q472", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens", "url": "https://github.com/advisories/GHSA-f72v-6w45-q472", "version": "7.29.0" }, { "aliases": [ "CVE-2026-33750" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33750", "percentile": 0.38904, "score": 0.00447 }, "fix_state": "fixed", "fixed_in": [ "1.1.13" ], "id": "GHSA-f886-m6hf-6m8v", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Medium", "summary": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion", "url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v", "version": "1.1.11" }, { "aliases": [ "CVE-2025-7783" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-7783", "percentile": 0.78615, "score": 0.0181 }, "fix_state": "fixed", "fixed_in": [ "2.5.4" ], "id": "GHSA-fjxv-7rqg-78g4", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "form-data", "severity": "Critical", "summary": "form-data uses unsafe random function in form-data for choosing boundary", "url": "https://github.com/advisories/GHSA-fjxv-7rqg-78g4", "version": "2.5.1" }, { "aliases": [ "CVE-2026-69153" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69153", "percentile": 0.39208, "score": 0.00451 }, "fix_state": "fixed", "fixed_in": [ "8.5.23" ], "id": "GHSA-fxqj-rqcc-2cmp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss", "severity": "Medium", "summary": "PostCSS: incomplete fix of GHSA-6g55-p6wh-862q \u2014 attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset", "url": "https://github.com/advisories/GHSA-fxqj-rqcc-2cmp", "version": "8.3.6" }, { "aliases": [ "CVE-2021-42740" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-42740", "percentile": 0.90999, "score": 0.04221 }, "fix_state": "fixed", "fixed_in": [ "1.7.3" ], "id": "GHSA-g4rg-993r-mgx7", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "shell-quote", "severity": "Critical", "summary": "Improper Neutralization of Special Elements used in a Command in Shell-quote", "url": "https://github.com/advisories/GHSA-g4rg-993r-mgx7", "version": "1.7.2" }, { "aliases": [ "CVE-2026-93753" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-93753", "percentile": 0.43819, "score": 0.00514 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-gcqx-w48m-w2h4", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "deepmerge", "severity": "Low", "summary": "deepmerge mergeObject() allows prototype poisoning of returned objects", "url": "https://github.com/advisories/GHSA-gcqx-w48m-w2h4", "version": "4.3.1" }, { "aliases": [ "CVE-2024-4068" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4068", "percentile": 0.73774, "score": 0.01471 }, "fix_state": "fixed", "fixed_in": [ "3.0.3" ], "id": "GHSA-grv7-fg5c-xmjg", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "braces", "severity": "High", "summary": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "version": "3.0.2" }, { "aliases": [ "CVE-2026-59875" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59875", "percentile": 0.29158, "score": 0.00354 }, "fix_state": "fixed", "fixed_in": [ "7.5.17" ], "id": "GHSA-gvwx-54wh-qm9j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records", "url": "https://github.com/advisories/GHSA-gvwx-54wh-qm9j", "version": "6.2.1" }, { "aliases": [ "CVE-2026-101911" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101911", "percentile": 0.32357, "score": 0.00383 }, "fix_state": "fixed", "fixed_in": [ "10.7.1" ], "id": "GHSA-h3mg-xc3c-68pw", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process", "url": "https://github.com/advisories/GHSA-h3mg-xc3c-68pw", "version": "9.0.5" }, { "aliases": [ "CVE-2025-25288" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25288", "percentile": 0.50086, "score": 0.00628 }, "fix_state": "fixed", "fixed_in": [ "9.2.2" ], "id": "GHSA-h5c3-5r3r-rr8q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@octokit/plugin-paginate-rest", "severity": "Medium", "summary": "@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking", "url": "https://github.com/advisories/GHSA-h5c3-5r3r-rr8q", "version": "2.21.3" }, { "aliases": [ "CVE-2026-53550" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53550", "percentile": 0.35866, "score": 0.00415 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-h67p-54hq-rp68", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases", "url": "https://github.com/advisories/GHSA-h67p-54hq-rp68", "version": "3.14.1" }, { "aliases": [ "CVE-2023-28154" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-28154", "percentile": 0.72638, "score": 0.01409 }, "fix_state": "fixed", "fixed_in": [ "5.76.0" ], "id": "GHSA-hc6q-2mpp-qw7j", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "webpack", "severity": "Critical", "summary": "Cross-realm object access in Webpack 5", "url": "https://github.com/advisories/GHSA-hc6q-2mpp-qw7j", "version": "5.54.0" }, { "aliases": [ "CVE-2022-37599" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-37599", "percentile": 0.86275, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "2.0.4" ], "id": "GHSA-hhq3-ff78-jv3g", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "loader-utils", "severity": "High", "summary": "loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)", "url": "https://github.com/advisories/GHSA-hhq3-ff78-jv3g", "version": "2.0.1" }, { "aliases": [ "CVE-2022-23541" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-23541", "percentile": 0.56923, "score": 0.0081 }, "fix_state": "fixed", "fixed_in": [ "9.0.0" ], "id": "GHSA-hjrf-2m68-5959", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "jsonwebtoken", "severity": "Medium", "summary": "jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC", "url": "https://github.com/advisories/GHSA-hjrf-2m68-5959", "version": "8.5.1" }, { "aliases": [ "CVE-2026-12143" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-12143", "percentile": 0.51965, "score": 0.00669 }, "fix_state": "fixed", "fixed_in": [ "2.5.6" ], "id": "GHSA-hmw2-7cc7-3qxx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "form-data", "severity": "High", "summary": "form-data: CRLF injection in form-data via unescaped multipart field names and filenames", "url": "https://github.com/advisories/GHSA-hmw2-7cc7-3qxx", "version": "2.5.1" }, { "aliases": [ "CVE-2022-24999" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-24999", "percentile": 0.9686, "score": 0.15695 }, "fix_state": "fixed", "fixed_in": [ "6.7.3" ], "id": "GHSA-hrpp-h998-j3pp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "High", "summary": "qs vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-hrpp-h998-j3pp", "version": "6.7.0" }, { "aliases": [ "CVE-2026-86472" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-86472", "percentile": 0.16796, "score": 0.00253 }, "fix_state": "fixed", "fixed_in": [ "3.1.8" ], "id": "GHSA-hrr3-gc8f-f4qj", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "Medium", "summary": "fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets", "url": "https://github.com/advisories/GHSA-hrr3-gc8f-f4qj", "version": "3.0.6" }, { "aliases": [ "CVE-2026-101912" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101912", "percentile": 0.30994, "score": 0.0037 }, "fix_state": "fixed", "fixed_in": [ "10.7.1" ], "id": "GHSA-j6r3-76f7-8jcv", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range", "url": "https://github.com/advisories/GHSA-j6r3-76f7-8jcv", "version": "9.0.5" }, { "aliases": [ "CVE-2023-26115" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-26115", "percentile": 0.77329, "score": 0.01709 }, "fix_state": "fixed", "fixed_in": [ "1.2.4" ], "id": "GHSA-j8xg-fqg3-53r7", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "word-wrap", "severity": "Medium", "summary": "word-wrap vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "version": "1.2.3" }, { "aliases": [ "CVE-2026-48758" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48758", "percentile": 0.1497, "score": 0.00239 }, "fix_state": "fixed", "fixed_in": [ "3.2.1" ], "id": "GHSA-jfc7-64v2-mr8c", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@sigstore/core", "severity": "Medium", "summary": "@sigstore/core has DSSE payloadType type-binding failure", "url": "https://github.com/advisories/GHSA-jfc7-64v2-mr8c", "version": "1.1.0" }, { "aliases": [ "CVE-2026-90711" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-90711", "percentile": 0.177, "score": 0.0026 }, "fix_state": "fixed", "fixed_in": [ "2.0.8" ], "id": "GHSA-jqcg-44mw-7w3h", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "proxy-addr", "severity": "Critical", "summary": "proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet", "url": "https://github.com/advisories/GHSA-jqcg-44mw-7w3h", "version": "2.0.7" }, { "aliases": [ "CVE-2026-76172" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-76172", "percentile": 0.14134, "score": 0.00232 }, "fix_state": "fixed", "fixed_in": [ "3.1.6" ], "id": "GHSA-jqff-g426-hqxp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via percent-encoded scheme normalization", "url": "https://github.com/advisories/GHSA-jqff-g426-hqxp", "version": "3.0.6" }, { "aliases": [ "CVE-2026-115897" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-115897", "percentile": 0.23496, "score": 0.00307 }, "fix_state": "fixed", "fixed_in": [ "7.1.3" ], "id": "GHSA-m5mm-p8h7-m29v", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "serialize-javascript", "severity": "Low", "summary": "Serialize JavaScript: Cross-site scripting (XSS) via unescaped in its CSS Stringify Output", "url": "https://github.com/advisories/GHSA-qx2v-qp2m-jg93", "version": "8.3.6" }, { "aliases": [ "CVE-2026-73646" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73646", "percentile": 0.44814, "score": 0.0053 }, "fix_state": "fixed", "fixed_in": [ "8.5.18" ], "id": "GHSA-r28c-9q8g-f849", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss", "severity": "High", "summary": "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure", "url": "https://github.com/advisories/GHSA-r28c-9q8g-f849", "version": "8.3.6" }, { "aliases": [ "CVE-2026-73566" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73566", "percentile": 0.44902, "score": 0.00531 }, "fix_state": "fixed", "fixed_in": [ "7.5.21" ], "id": "GHSA-r292-9mhp-454m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection", "url": "https://github.com/advisories/GHSA-r292-9mhp-454m", "version": "6.2.1" }, { "aliases": [ "CVE-2026-18540" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-18540", "percentile": 0.23781, "score": 0.00309 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-r53p-7pc4-xj5r", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Low", "summary": "undici vulnerable to downstream response splitting via retry interceptor", "url": "https://github.com/advisories/GHSA-r53p-7pc4-xj5r", "version": "7.29.0" }, { "aliases": [ "CVE-2026-23950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23950", "percentile": 0.18342, "score": 0.00264 }, "fix_state": "fixed", "fixed_in": [ "7.5.4" ], "id": "GHSA-r6q2-hw4h-h46w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS", "url": "https://github.com/advisories/GHSA-r6q2-hw4h-h46w", "version": "6.2.1" }, { "aliases": [ "CVE-2026-33228" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33228", "percentile": 0.57797, "score": 0.00838 }, "fix_state": "fixed", "fixed_in": [ "3.4.2" ], "id": "GHSA-rf6f-7fwh-wjgh", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "flatted", "severity": "High", "summary": "Prototype Pollution via parse() in NodeJS flatted", "url": "https://github.com/advisories/GHSA-rf6f-7fwh-wjgh", "version": "2.0.2" }, { "aliases": [ "CVE-2026-19534" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-19534", "percentile": 0.33598, "score": 0.00394 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-rfgv-xxqx-mfg5", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to Denial of Service via unrequested WebSocket subprotocol", "url": "https://github.com/advisories/GHSA-rfgv-xxqx-mfg5", "version": "7.29.0" }, { "aliases": [ "CVE-2026-69152" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69152", "percentile": 0.51004, "score": 0.00647 }, "fix_state": "fixed", "fixed_in": [ "1.1.18" ], "id": "GHSA-rgw5-rvv9-x895", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation", "url": "https://github.com/advisories/GHSA-rgw5-rvv9-x895", "version": "1.1.11" }, { "aliases": [ "CVE-2024-52798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-52798", "percentile": 0.56158, "score": 0.00787 }, "fix_state": "fixed", "fixed_in": [ "0.1.12" ], "id": "GHSA-rhx6-c78j-4q9w", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp contains a ReDoS", "url": "https://github.com/advisories/GHSA-rhx6-c78j-4q9w", "version": "0.1.7" }, { "aliases": [ "CVE-2026-104844" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-104844", "percentile": 0.32994, "score": 0.00389 }, "fix_state": "fixed", "fixed_in": [ "6.1.5" ], "id": "GHSA-rj75-hqrm-r3gf", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss-selector-parser", "severity": "Medium", "summary": "PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion", "url": "https://github.com/advisories/GHSA-rj75-hqrm-r3gf", "version": "6.0.6" }, { "aliases": [ "CVE-2025-25290" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25290", "percentile": 0.5603, "score": 0.00783 }, "fix_state": "fixed", "fixed_in": [ "8.4.1" ], "id": "GHSA-rmvr-2pp2-xj38", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@octokit/request", "severity": "Medium", "summary": "@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking", "url": "https://github.com/advisories/GHSA-rmvr-2pp2-xj38", "version": "5.6.1" }, { "aliases": [ "CVE-2026-101913" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101913", "percentile": 0.32683, "score": 0.00386 }, "fix_state": "fixed", "fixed_in": [ "10.5.1" ], "id": "GHSA-rpw4-54j3-4h4q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts", "url": "https://github.com/advisories/GHSA-rpw4-54j3-4h4q", "version": "9.0.5" }, { "aliases": [ "CVE-2024-29041" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-29041", "percentile": 0.56127, "score": 0.00786 }, "fix_state": "fixed", "fixed_in": [ "4.19.2" ], "id": "GHSA-rv95-896h-c2vc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "express", "severity": "Medium", "summary": "Express.js Open Redirect in malformed URLs", "url": "https://github.com/advisories/GHSA-rv95-896h-c2vc", "version": "4.17.1" }, { "aliases": [ "CVE-2026-85014" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-85014", "percentile": 0.30654, "score": 0.00368 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-rx4f-c7p8-82vq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via WebSocketStream unclean close", "url": "https://github.com/advisories/GHSA-rx4f-c7p8-82vq", "version": "7.29.0" }, { "aliases": [ "CVE-2026-111997" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111997", "percentile": 0.24409, "score": 0.00315 }, "fix_state": "fixed", "fixed_in": [ "10.7.4" ], "id": "GHSA-rxp7-6hxx-x8q5", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process", "url": "https://github.com/advisories/GHSA-rxp7-6hxx-x8q5", "version": "9.0.5" }, { "aliases": [ "CVE-2026-16221" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-16221", "percentile": 0.37862, "score": 0.00436 }, "fix_state": "fixed", "fixed_in": [ "3.1.4" ], "id": "GHSA-v2hh-gcrm-f6hx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via literal backslash authority delimiter", "url": "https://github.com/advisories/GHSA-v2hh-gcrm-f6hx", "version": "3.0.6" }, { "aliases": [ "CVE-2026-42338" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-42338", "percentile": 0.40732, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "10.1.1" ], "id": "GHSA-v2v4-37r5-5v8g", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address has XSS in Address6 HTML-emitting methods", "url": "https://github.com/advisories/GHSA-v2v4-37r5-5v8g", "version": "9.0.5" }, { "aliases": [ "CVE-2026-6322" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-6322", "percentile": 0.43672, "score": 0.00512 }, "fix_state": "fixed", "fixed_in": [ "3.1.2" ], "id": "GHSA-v39h-62p7-jpjc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via percent-encoded authority delimiters", "url": "https://github.com/advisories/GHSA-v39h-62p7-jpjc", "version": "3.0.6" }, { "aliases": [ "CVE-2026-12590" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-12590", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "1.20.6" ], "id": "GHSA-v422-hmwv-36x6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "body-parser", "severity": "Low", "summary": "body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement", "url": "https://github.com/advisories/GHSA-v422-hmwv-36x6", "version": "1.19.0" }, { "aliases": [ "CVE-2025-5889" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-5889", "percentile": 0.47999, "score": 0.00586 }, "fix_state": "fixed", "fixed_in": [ "1.1.12" ], "id": "GHSA-v6h2-p8h4-qcjw", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Low", "summary": "brace-expansion Regular Expression Denial of Service vulnerability", "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw", "version": "1.1.11" }, { "aliases": [ "CVE-2026-45822" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-45822", "percentile": 0.43261, "score": 0.00507 }, "fix_state": "fixed", "fixed_in": [ "0.5.0" ], "id": "GHSA-vcc3-ghjq-m6fr", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "decode-uri-component", "severity": "Medium", "summary": "decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input", "url": "https://github.com/advisories/GHSA-vcc3-ghjq-m6fr", "version": "0.2.0" }, { "aliases": [ "CVE-2025-59343" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-59343", "percentile": 0.46196, "score": 0.00553 }, "fix_state": "fixed", "fixed_in": [ "2.1.4" ], "id": "GHSA-vj76-c3g6-qr5v", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "tar-fs", "severity": "High", "summary": "tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball", "url": "https://github.com/advisories/GHSA-vj76-c3g6-qr5v", "version": "2.1.1" }, { "aliases": [ "CVE-2026-53655" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53655", "percentile": 0.04762, "score": 0.00156 }, "fix_state": "fixed", "fixed_in": [ "7.5.16" ], "id": "GHSA-vmf3-w455-68vh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)", "url": "https://github.com/advisories/GHSA-vmf3-w455-68vh", "version": "6.2.1" }, { "aliases": [ "CVE-2026-84961" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84961", "percentile": 0.07388, "score": 0.00178 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-w293-vg96-wgc3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool", "url": "https://github.com/advisories/GHSA-w293-vg96-wgc3", "version": "7.29.0" }, { "aliases": [ "CVE-2026-9496" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-9496", "percentile": 0.28185, "score": 0.00346 }, "fix_state": "fixed", "fixed_in": [ "21.5.1" ], "id": "GHSA-w4pp-8pjf-rmxw", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "pacote", "severity": "High", "summary": "pacote is vulnerable to Denial of Service (DoS) via the addGitSha function", "url": "https://github.com/advisories/GHSA-w4pp-8pjf-rmxw", "version": "17.0.7" }, { "aliases": [ "CVE-2022-38900" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-38900", "percentile": 0.97809, "score": 0.2361 }, "fix_state": "fixed", "fixed_in": [ "0.2.1" ], "id": "GHSA-w573-4hg7-7wgq", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "decode-uri-component", "severity": "High", "summary": "decode-uri-component vulnerable to Denial of Service (DoS)", "url": "https://github.com/advisories/GHSA-w573-4hg7-7wgq", "version": "0.2.0" }, { "aliases": [ "CVE-2026-41907" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41907", "percentile": 0.28633, "score": 0.0035 }, "fix_state": "fixed", "fixed_in": [ "11.1.1" ], "id": "GHSA-w5hq-g745-h8pq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "uuid", "severity": "Medium", "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq", "version": "8.3.2" }, { "aliases": [ "CVE-2026-110306" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110306", "percentile": 0.1635, "score": 0.0025 }, "fix_state": "fixed", "fixed_in": [ "3.1.9" ], "id": "GHSA-w74x-v6f9-j3xg", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "Medium", "summary": "fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding", "url": "https://github.com/advisories/GHSA-w74x-v6f9-j3xg", "version": "3.0.6" }, { "aliases": [ "CVE-2026-2391" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-2391", "percentile": 0.45582, "score": 0.00542 }, "fix_state": "fixed", "fixed_in": [ "6.14.2" ], "id": "GHSA-w7fw-mjwx-w883", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "Low", "summary": "qs's arrayLimit bypass in comma parsing allows denial of service", "url": "https://github.com/advisories/GHSA-w7fw-mjwx-w883", "version": "6.7.0" }, { "aliases": [ "CVE-2026-9277" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-9277", "percentile": 0.56374, "score": 0.00793 }, "fix_state": "fixed", "fixed_in": [ "1.8.4" ], "id": "GHSA-w7jw-789q-3m8p", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "shell-quote", "severity": "Critical", "summary": "shell-quote quote() does not escape newlines in object .op values", "url": "https://github.com/advisories/GHSA-w7jw-789q-3m8p", "version": "1.7.2" }, { "aliases": [ "CVE-2026-59871" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59871", "percentile": 0.50871, "score": 0.00644 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-w8wr-v893-vjvp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Process crash via PAX numeric path type confusion", "url": "https://github.com/advisories/GHSA-w8wr-v893-vjvp", "version": "6.2.1" }, { "aliases": [ "CVE-2024-53382" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-53382", "percentile": 0.27699, "score": 0.00342 }, "fix_state": "fixed", "fixed_in": [ "1.30.0" ], "id": "GHSA-x7hr-w5r2-h6wg", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "prismjs", "severity": "Medium", "summary": "PrismJS DOM Clobbering vulnerability", "url": "https://github.com/advisories/GHSA-x7hr-w5r2-h6wg", "version": "1.29.0" }, { "aliases": [ "CVE-2026-33940" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33940", "percentile": 0.5377, "score": 0.00715 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-xhpv-hc6g-r9c6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial", "url": "https://github.com/advisories/GHSA-xhpv-hc6g-r9c6", "version": "4.7.8" }, { "aliases": [ "CVE-2026-110095" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110095", "percentile": 0.21547, "score": 0.00289 }, "fix_state": "fixed", "fixed_in": [ "3.1.9" ], "id": "GHSA-xhq7-xmqj-769h", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "Low", "summary": "fast-uri vulnerable to improper path equivalence in relative reference normalization", "url": "https://github.com/advisories/GHSA-xhq7-xmqj-769h", "version": "3.0.6" }, { "aliases": [ "CVE-2026-109869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109869", "percentile": 0.27938, "score": 0.00344 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-xjj6-f33q-929c", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to Denial of Service via unhandled error on excessive content-encodings", "url": "https://github.com/advisories/GHSA-xjj6-f33q-929c", "version": "7.29.0" }, { "aliases": [ "CVE-2026-33941" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33941", "percentile": 0.22305, "score": 0.00296 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-xjpj-3mr7-gcpf", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options", "url": "https://github.com/advisories/GHSA-xjpj-3mr7-gcpf", "version": "4.7.8" }, { "aliases": [ "CVE-2026-106444" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106444", "percentile": 0.21629, "score": 0.0029 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-xw65-4hp5-5hc7", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Medium", "summary": "Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates", "url": "https://github.com/advisories/GHSA-xw65-4hp5-5hc7", "version": "4.7.8" }, { "aliases": [ "CVE-2026-73086" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73086", "percentile": 0.2234, "score": 0.00296 }, "fix_state": "fixed", "fixed_in": [ "3.3.12" ], "id": "GHSA-xwg4-73v4-xw9w", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "nanoid", "severity": "High", "summary": "nanoid: Integer Overflow or Wraparound", "url": "https://github.com/advisories/GHSA-xwg4-73v4-xw9w", "version": "3.1.25" }, { "aliases": [ "CVE-2025-25289" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25289", "percentile": 0.50087, "score": 0.00628 }, "fix_state": "fixed", "fixed_in": [ "5.1.1" ], "id": "GHSA-xx4v-prfh-6cgc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@octokit/request-error", "severity": "Medium", "summary": "@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking", "url": "https://github.com/advisories/GHSA-xx4v-prfh-6cgc", "version": "2.1.0" } ], "previous_ref": "v1.1308.3", "release_changed": false, "removed": [], "resolved_vulnerabilities": [ { "aliases": [ "CVE-2022-24441" ], "ecosystem": "npm", "fix_state": "fixed", "fixed_in": [ "1.1064.0" ], "id": "GHSA-4vrv-93c7-m92j", "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": false, "package": "snyk", "severity": "High", "url": "https://github.com/advisories/GHSA-4vrv-93c7-m92j", "version": "1.0.0-monorepo" }, { "aliases": [ "CVE-2022-22984" ], "ecosystem": "npm", "fix_state": "fixed", "fixed_in": [ "1.1064.0" ], "id": "GHSA-4x6g-3cmx-w76r", "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": false, "package": "snyk", "severity": "Medium", "url": "https://github.com/advisories/GHSA-4x6g-3cmx-w76r", "version": "1.0.0-monorepo" }, { "aliases": [ "CVE-2025-6624" ], "ecosystem": "npm", "fix_state": "fixed", "fixed_in": [ "1.1297.3" ], "id": "GHSA-6hwc-9h8r-3vmf", "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": false, "package": "snyk", "severity": "Low", "url": "https://github.com/advisories/GHSA-6hwc-9h8r-3vmf", "version": "1.0.0-monorepo" }, { "aliases": [], "ecosystem": "github", "fix_state": "fixed", "fixed_in": [ "4.1.3" ], "id": "GHSA-cxww-7g56-2vh6", "location": ".github/workflows/deployment-monitor.yml", "osv_confirmed": false, "package": "actions/download-artifact", "severity": "High", "url": "https://github.com/advisories/GHSA-cxww-7g56-2vh6", "version": "v4" }, { "aliases": [ "CVE-2022-40764" ], "ecosystem": "npm", "fix_state": "fixed", "fixed_in": [ "1.996.0" ], "id": "GHSA-hpqj-7cj6-hfj8", "location": "package-lock.json", "osv_confirmed": false, "package": "snyk", "severity": "High", "url": "https://github.com/advisories/GHSA-hpqj-7cj6-hfj8", "version": "1.0.0-monorepo" } ], "upgraded": [], "workflow_new": 0, "workflow_resolved": 0 }, "commit": "4a83f28e6efc85722a21213b4c0071d8e14d3527", "compliance": { "overall_score": 55, "standards": { "bsi_tr03183": { "failed_checks": [ "Component Creator", "Distribution Licences", "SHA-512 Hash", "Dependency Relationship", "SBOM Creator Contact" ], "passed": 4, "score": 44, "total": 9 }, "cisa": { "failed_checks": [ "Software Producer", "Dependency Relationship", "License Information", "Component Hash", "SBOM Author" ], "passed": 5, "score": 50, "total": 10 }, "ntia": { "failed_checks": [ "Supplier Name", "Dependency Relationship" ], "passed": 5, "score": 71, "total": 7 } } }, "components": [ { "ecosystem": "github", "licenses": [], "location": ".github/workflows/snyk-protect-production-smoke-tests.yml", "name": "actions/cache", "purl": "pkg:github/actions/cache@v4", "version": "v4" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/iac-smoke-tests-pulls.yml", "name": "actions/checkout", "purl": "pkg:github/actions/checkout@v2", "version": "v2" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/deployment-monitor.yml", "name": "actions/checkout", "purl": "pkg:github/actions/checkout@v4", "version": "v4" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/create-build-image.yml", "name": "actions/checkout", "purl": "pkg:github/actions/checkout@v5", "version": "v5" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/check-dependencies.yml", "name": "actions/checkout", "purl": "pkg:github/actions/checkout@v6.0.2", "version": "v6.0.2" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/deployment-monitor.yml", "name": "actions/download-artifact", "purl": "pkg:github/actions/download-artifact@v4", "version": "v4" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/deployment-monitor.yml", "name": "actions/setup-go", "purl": "pkg:github/actions/setup-go@v5", "version": "v5" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/deployment-monitor.yml", "name": "actions/setup-node", "purl": "pkg:github/actions/setup-node@v4", "version": "v4" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/check-dependencies.yml", "name": "actions/setup-node", "purl": "pkg:github/actions/setup-node@v6.4.0", "version": "v6.4.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/pr-housekeeping.yml", "name": "actions/stale", "purl": "pkg:github/actions/stale@v9.1.0", "version": "v9.1.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/deployment-monitor.yml", "name": "actions/upload-artifact", "purl": "pkg:github/actions/upload-artifact@v4", "version": "v4" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/create-build-image.yml", "name": "docker/login-action", "purl": "pkg:github/docker/login-action@v3", "version": "v3" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/create-build-image.yml", "name": "docker/setup-buildx-action", "purl": "pkg:github/docker/setup-buildx-action@v3", "version": "v3" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/deployment-monitor.yml", "name": "slackapi/slack-github-action", "purl": "pkg:github/slackapi/slack-github-action@v2.1.0", "version": "v2.1.0" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/iac-smoke-tests-pulls.yml", "name": "SvanBoxel/codeowners-action", "purl": "pkg:github/SvanBoxel/codeowners-action@v2.2", "version": "v2.2" }, { "ecosystem": "github", "licenses": [], "location": ".github/workflows/iac-smoke-tests-pulls.yml", "name": "tj-actions/changed-files", "purl": "pkg:github/tj-actions/changed-files@v44.5.2", "version": "v44.5.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "cel.dev/expr", "purl": "pkg:golang/cel.dev/expr@v0.25.2", "version": "v0.25.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "cloud.google.com/go", "purl": "pkg:golang/cloud.google.com/go@v0.123.0", "version": "v0.123.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "cloud.google.com/go/auth", "purl": "pkg:golang/cloud.google.com/go/auth@v0.22.0", "version": "v0.22.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "cloud.google.com/go/auth/oauth2adapt", "purl": "pkg:golang/cloud.google.com/go/auth/oauth2adapt@v0.2.8", "version": "v0.2.8" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "cloud.google.com/go/compute/metadata", "purl": "pkg:golang/cloud.google.com/go/compute/metadata@v0.9.0", "version": "v0.9.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "cloud.google.com/go/iam", "purl": "pkg:golang/cloud.google.com/go/iam@v1.11.0", "version": "v1.11.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "cloud.google.com/go/monitoring", "purl": "pkg:golang/cloud.google.com/go/monitoring@v1.29.0", "version": "v1.29.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "cloud.google.com/go/storage", "purl": "pkg:golang/cloud.google.com/go/storage@v1.64.0", "version": "v1.64.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "dario.cat/mergo", "purl": "pkg:golang/dario.cat/mergo@v1.0.2", "version": "v1.0.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/adrg/strutil", "purl": "pkg:golang/github.com/adrg/strutil@v0.3.1", "version": "v0.3.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/adrg/xdg", "purl": "pkg:golang/github.com/adrg/xdg@v0.5.3", "version": "v0.5.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/agext/levenshtein", "purl": "pkg:golang/github.com/agext/levenshtein@v1.2.3", "version": "v1.2.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/agnivade/levenshtein", "purl": "pkg:golang/github.com/agnivade/levenshtein@v1.2.0", "version": "v1.2.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/alecthomas/chroma/v2", "purl": "pkg:golang/github.com/alecthomas/chroma/v2@v2.20.0", "version": "v2.20.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/alexbrainman/sspi", "purl": "pkg:golang/github.com/alexbrainman/sspi@v0.0.0-20250919150558-7d374ff0d59e", "version": "v0.0.0-20250919150558-7d374ff0d59e" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/anthropics/anthropic-sdk-go", "purl": "pkg:golang/github.com/anthropics/anthropic-sdk-go@v1.50.2", "version": "v1.50.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/apapsch/go-jsonmerge/v2", "purl": "pkg:golang/github.com/apapsch/go-jsonmerge/v2@v2.0.0", "version": "v2.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/apparentlymart/go-cidr", "purl": "pkg:golang/github.com/apparentlymart/go-cidr@v1.1.0", "version": "v1.1.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/apparentlymart/go-textseg/v15", "purl": "pkg:golang/github.com/apparentlymart/go-textseg/v15@v15.0.0", "version": "v15.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/apparentlymart/go-versions", "purl": "pkg:golang/github.com/apparentlymart/go-versions@v1.0.2", "version": "v1.0.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/atotto/clipboard", "purl": "pkg:golang/github.com/atotto/clipboard@v0.1.4", "version": "v0.1.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2@v1.43.6", "version": "v1.43.6" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.18", "version": "v1.7.18" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/config", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/config@v1.32.35", "version": "v1.32.35" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/credentials", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/credentials@v1.19.34", "version": "v1.19.34" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/feature/ec2/imds", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.35", "version": "v1.18.35" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/internal/configsources", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.37", "version": "v1.4.37" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/internal/endpoints/v2", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.37", "version": "v2.7.37" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/internal/v4a", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.38", "version": "v1.4.38" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/bedrockruntime", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/bedrockruntime@v1.50.4", "version": "v1.50.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.17", "version": "v1.13.17" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/internal/checksum", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/checksum@v1.9.30", "version": "v1.9.30" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/internal/presigned-url", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.37", "version": "v1.13.37" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/internal/s3shared", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/internal/s3shared@v1.19.38", "version": "v1.19.38" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/s3", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/s3@v1.107.2", "version": "v1.107.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/signin", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/signin@v1.5.4", "version": "v1.5.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/sso", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sso@v1.33.4", "version": "v1.33.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/ssooidc", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.38.4", "version": "v1.38.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/aws-sdk-go-v2/service/sts", "purl": "pkg:golang/github.com/aws/aws-sdk-go-v2/service/sts@v1.45.4", "version": "v1.45.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aws/smithy-go", "purl": "pkg:golang/github.com/aws/smithy-go@v1.27.8", "version": "v1.27.8" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aymanbagabas/go-osc52/v2", "purl": "pkg:golang/github.com/aymanbagabas/go-osc52/v2@v2.0.1", "version": "v2.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/aymerick/douceur", "purl": "pkg:golang/github.com/aymerick/douceur@v0.2.0", "version": "v0.2.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/bahlo/generic-list-go", "purl": "pkg:golang/github.com/bahlo/generic-list-go@v0.2.0", "version": "v0.2.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/bazelbuild/bazel-gazelle", "purl": "pkg:golang/github.com/bazelbuild/bazel-gazelle@v0.47.0", "version": "v0.47.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/bazelbuild/buildtools", "purl": "pkg:golang/github.com/bazelbuild/buildtools@v0.0.0-20250930140053-2eb4fccefb52", "version": "v0.0.0-20250930140053-2eb4fccefb52" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/beorn7/perks", "purl": "pkg:golang/github.com/beorn7/perks@v1.0.1", "version": "v1.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/bgentry/go-netrc", "purl": "pkg:golang/github.com/bgentry/go-netrc@v0.0.0-20140422174119-9fd32a8b3d3d", "version": "v0.0.0-20140422174119-9fd32a8b3d3d" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/bmatcuk/doublestar", "purl": "pkg:golang/github.com/bmatcuk/doublestar@v1.3.4", "version": "v1.3.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/bmatcuk/doublestar/v4", "purl": "pkg:golang/github.com/bmatcuk/doublestar/v4@v4.9.1", "version": "v4.9.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/buger/jsonparser", "purl": "pkg:golang/github.com/buger/jsonparser@v1.1.2", "version": "v1.1.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/cenkalti/backoff/v5", "purl": "pkg:golang/github.com/cenkalti/backoff/v5@v5.0.3", "version": "v5.0.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/cespare/xxhash/v2", "purl": "pkg:golang/github.com/cespare/xxhash/v2@v2.3.0", "version": "v2.3.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/charmbracelet/bubbles", "purl": "pkg:golang/github.com/charmbracelet/bubbles@v0.14.0", "version": "v0.14.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/charmbracelet/bubbletea", "purl": "pkg:golang/github.com/charmbracelet/bubbletea@v0.23.1", "version": "v0.23.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/charmbracelet/colorprofile", "purl": "pkg:golang/github.com/charmbracelet/colorprofile@v0.4.3", "version": "v0.4.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/charmbracelet/glamour", "purl": "pkg:golang/github.com/charmbracelet/glamour@v1.0.0", "version": "v1.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/charmbracelet/lipgloss", "purl": "pkg:golang/github.com/charmbracelet/lipgloss@v1.1.1-0.20250404203927-76690c660834", "version": "v1.1.1-0.20250404203927-76690c660834" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/charmbracelet/x/ansi", "purl": "pkg:golang/github.com/charmbracelet/x/ansi@v0.11.7", "version": "v0.11.7" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/charmbracelet/x/cellbuf", "purl": "pkg:golang/github.com/charmbracelet/x/cellbuf@v0.0.15", "version": "v0.0.15" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/charmbracelet/x/exp/slice", "purl": "pkg:golang/github.com/charmbracelet/x/exp/slice@v0.0.0-20250327172914-2fdc97757edf", "version": "v0.0.0-20250327172914-2fdc97757edf" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/charmbracelet/x/term", "purl": "pkg:golang/github.com/charmbracelet/x/term@v0.2.2", "version": "v0.2.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/chzyer/readline", "purl": "pkg:golang/github.com/chzyer/readline@v1.5.1", "version": "v1.5.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/clipperhouse/displaywidth", "purl": "pkg:golang/github.com/clipperhouse/displaywidth@v0.11.0", "version": "v0.11.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/clipperhouse/uax29/v2", "purl": "pkg:golang/github.com/clipperhouse/uax29/v2@v2.7.0", "version": "v2.7.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/cloudflare/circl", "purl": "pkg:golang/github.com/cloudflare/circl@v1.6.5", "version": "v1.6.5" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/cncf/xds/go", "purl": "pkg:golang/github.com/cncf/xds/go@v0.0.0-20260202195803-dba9d589def2", "version": "v0.0.0-20260202195803-dba9d589def2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/containerd/console", "purl": "pkg:golang/github.com/containerd/console@v1.0.5", "version": "v1.0.5" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/containerd/typeurl/v2", "purl": "pkg:golang/github.com/containerd/typeurl/v2@v2.2.3", "version": "v2.2.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/creachadair/jrpc2", "purl": "pkg:golang/github.com/creachadair/jrpc2@v1.3.0", "version": "v1.3.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/creachadair/mds", "purl": "pkg:golang/github.com/creachadair/mds@v0.23.0", "version": "v0.23.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/cyphar/filepath-securejoin", "purl": "pkg:golang/github.com/cyphar/filepath-securejoin@v0.7.0", "version": "v0.7.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/davecgh/go-spew", "purl": "pkg:golang/github.com/davecgh/go-spew@v1.1.2-0.20180830191138-d8f796af33cc", "version": "v1.1.2-0.20180830191138-d8f796af33cc" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/denisbrodbeck/machineid", "purl": "pkg:golang/github.com/denisbrodbeck/machineid@v1.0.1", "version": "v1.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/dlclark/regexp2", "purl": "pkg:golang/github.com/dlclark/regexp2@v1.11.5", "version": "v1.11.5" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/docker/distribution", "purl": "pkg:golang/github.com/docker/distribution@v2.8.2%2Bincompatible", "version": "v2.8.2+incompatible" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/dop251/goja", "purl": "pkg:golang/github.com/dop251/goja@v0.0.0-20251008123653-cf18d89f3cf6", "version": "v0.0.0-20251008123653-cf18d89f3cf6" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/dop251/goja_nodejs", "purl": "pkg:golang/github.com/dop251/goja_nodejs@v0.0.0-20250409162600-f7acab6894b0", "version": "v0.0.0-20250409162600-f7acab6894b0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/elazarl/goproxy", "purl": "pkg:golang/github.com/elazarl/goproxy@v1.7.2", "version": "v1.7.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/elazarl/goproxy/ext", "purl": "pkg:golang/github.com/elazarl/goproxy/ext@v0.0.0-20230808193330-2592e75ae04a", "version": "v0.0.0-20230808193330-2592e75ae04a" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/elliotchance/orderedmap/v3", "purl": "pkg:golang/github.com/elliotchance/orderedmap/v3@v3.1.0", "version": "v3.1.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/emirpasic/gods", "purl": "pkg:golang/github.com/emirpasic/gods@v1.18.1", "version": "v1.18.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/envoyproxy/go-control-plane/envoy", "purl": "pkg:golang/github.com/envoyproxy/go-control-plane/envoy@v1.37.0", "version": "v1.37.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/envoyproxy/protoc-gen-validate", "purl": "pkg:golang/github.com/envoyproxy/protoc-gen-validate@v1.3.3", "version": "v1.3.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/erikgeiser/promptkit", "purl": "pkg:golang/github.com/erikgeiser/promptkit@v0.8.0", "version": "v0.8.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/erni27/imcache", "purl": "pkg:golang/github.com/erni27/imcache@v1.2.1", "version": "v1.2.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/fatih/color", "purl": "pkg:golang/github.com/fatih/color@v1.19.0", "version": "v1.19.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/felixge/httpsnoop", "purl": "pkg:golang/github.com/felixge/httpsnoop@v1.0.4", "version": "v1.0.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/fsnotify/fsnotify", "purl": "pkg:golang/github.com/fsnotify/fsnotify@v1.10.1", "version": "v1.10.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/gertd/go-pluralize", "purl": "pkg:golang/github.com/gertd/go-pluralize@v0.2.1", "version": "v0.2.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/getsentry/sentry-go", "purl": "pkg:golang/github.com/getsentry/sentry-go@v0.31.1", "version": "v0.31.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-git/gcfg", "purl": "pkg:golang/github.com/go-git/gcfg@v1.5.1-0.20230307220236-3a3c6141e376", "version": "v1.5.1-0.20230307220236-3a3c6141e376" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-git/go-billy/v5", "purl": "pkg:golang/github.com/go-git/go-billy/v5@v5.9.1", "version": "v5.9.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-git/go-git/v5", "purl": "pkg:golang/github.com/go-git/go-git/v5@v5.19.2", "version": "v5.19.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-ini/ini", "purl": "pkg:golang/github.com/go-ini/ini@v1.67.0", "version": "v1.67.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-jose/go-jose/v4", "purl": "pkg:golang/github.com/go-jose/go-jose/v4@v4.1.4", "version": "v4.1.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-logr/logr", "purl": "pkg:golang/github.com/go-logr/logr@v1.4.4", "version": "v1.4.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-logr/stdr", "purl": "pkg:golang/github.com/go-logr/stdr@v1.2.2", "version": "v1.2.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-ole/go-ole", "purl": "pkg:golang/github.com/go-ole/go-ole@v1.3.0", "version": "v1.3.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-sourcemap/sourcemap", "purl": "pkg:golang/github.com/go-sourcemap/sourcemap@v2.1.4%2Bincompatible", "version": "v2.1.4+incompatible" }, { "ecosystem": "golang", "licenses": [], "location": "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.mod", "name": "github.com/go-test/deep", "purl": "pkg:golang/github.com/go-test/deep@v1.0.7", "version": "v1.0.7" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2/go.mod", "name": "github.com/go-test/deep", "purl": "pkg:golang/github.com/go-test/deep@v1.0.8", "version": "v1.0.8" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/go-viper/mapstructure/v2", "purl": "pkg:golang/github.com/go-viper/mapstructure/v2@v2.5.0", "version": "v2.5.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/gobwas/glob", "purl": "pkg:golang/github.com/gobwas/glob@v0.2.3", "version": "v0.2.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/gofrs/flock", "purl": "pkg:golang/github.com/gofrs/flock@v0.13.0", "version": "v0.13.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/gogo/protobuf", "purl": "pkg:golang/github.com/gogo/protobuf@v1.3.2", "version": "v1.3.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/golang/groupcache", "purl": "pkg:golang/github.com/golang/groupcache@v0.0.0-20241129210726-2c02b8208cf8", "version": "v0.0.0-20241129210726-2c02b8208cf8" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/golang/mock", "purl": "pkg:golang/github.com/golang/mock@v1.6.0", "version": "v1.6.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/gomarkdown/markdown", "purl": "pkg:golang/github.com/gomarkdown/markdown@v0.0.0-20260724235538-61af6e1e6971", "version": "v0.0.0-20260724235538-61af6e1e6971" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/google/go-cmp", "purl": "pkg:golang/github.com/google/go-cmp@v0.7.0", "version": "v0.7.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/google/go-querystring", "purl": "pkg:golang/github.com/google/go-querystring@v1.1.0", "version": "v1.1.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/google/pprof", "purl": "pkg:golang/github.com/google/pprof@v0.0.0-20250820193118-f64d9cf942d6", "version": "v0.0.0-20250820193118-f64d9cf942d6" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/google/s2a-go", "purl": "pkg:golang/github.com/google/s2a-go@v0.1.9", "version": "v0.1.9" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/google/uuid", "purl": "pkg:golang/github.com/google/uuid@v1.6.0", "version": "v1.6.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/googleapis/enterprise-certificate-proxy", "purl": "pkg:golang/github.com/googleapis/enterprise-certificate-proxy@v0.3.19", "version": "v0.3.19" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/googleapis/gax-go/v2", "purl": "pkg:golang/github.com/googleapis/gax-go/v2@v2.23.0", "version": "v2.23.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp", "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp@v1.33.0", "version": "v1.33.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric", "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric@v0.57.0", "version": "v0.57.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping", "purl": "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping@v0.57.0", "version": "v0.57.0" }, { "ecosystem": "golang", "licenses": [], "location": "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.mod", "name": "github.com/gopherjs/gopherjs", "purl": "pkg:golang/github.com/gopherjs/gopherjs@v0.0.0-20210413103415-7d3cbed7d026", "version": "v0.0.0-20210413103415-7d3cbed7d026" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/gorilla/css", "purl": "pkg:golang/github.com/gorilla/css@v1.0.1", "version": "v1.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/gorilla/mux", "purl": "pkg:golang/github.com/gorilla/mux@v1.8.1", "version": "v1.8.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/gorilla/websocket", "purl": "pkg:golang/github.com/gorilla/websocket@v1.5.3", "version": "v1.5.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/gosimple/hashdir", "purl": "pkg:golang/github.com/gosimple/hashdir@v1.0.2", "version": "v1.0.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/aws-sdk-go-base/v2", "purl": "pkg:golang/github.com/hashicorp/aws-sdk-go-base/v2@v2.0.0-beta.74", "version": "v2.0.0-beta.74" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/errwrap", "purl": "pkg:golang/github.com/hashicorp/errwrap@v1.1.0", "version": "v1.1.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/go-cleanhttp", "purl": "pkg:golang/github.com/hashicorp/go-cleanhttp@v0.5.2", "version": "v0.5.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/go-getter", "purl": "pkg:golang/github.com/hashicorp/go-getter@v1.8.8", "version": "v1.8.8" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/go-hclog", "purl": "pkg:golang/github.com/hashicorp/go-hclog@v1.6.3", "version": "v1.6.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/go-multierror", "purl": "pkg:golang/github.com/hashicorp/go-multierror@v1.1.1", "version": "v1.1.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/go-retryablehttp", "purl": "pkg:golang/github.com/hashicorp/go-retryablehttp@v0.7.8", "version": "v0.7.8" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/go-uuid", "purl": "pkg:golang/github.com/hashicorp/go-uuid@v1.0.3", "version": "v1.0.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/go-version", "purl": "pkg:golang/github.com/hashicorp/go-version@v1.9.0", "version": "v1.9.0" }, { "ecosystem": "golang", "licenses": [], "location": "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.mod", "name": "github.com/hashicorp/hcl/v2", "purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.11.1", "version": "v2.11.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/hcl/v2", "purl": "pkg:golang/github.com/hashicorp/hcl/v2@v2.18.0", "version": "v2.18.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/terraform-registry-address", "purl": "pkg:golang/github.com/hashicorp/terraform-registry-address@v0.2.2", "version": "v0.2.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hashicorp/terraform-svchost", "purl": "pkg:golang/github.com/hashicorp/terraform-svchost@v0.1.1", "version": "v0.1.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/hexops/gotextdiff", "purl": "pkg:golang/github.com/hexops/gotextdiff@v1.0.3", "version": "v1.0.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/inconshreveable/mousetrap", "purl": "pkg:golang/github.com/inconshreveable/mousetrap@v1.1.0", "version": "v1.1.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/invopop/jsonschema", "purl": "pkg:golang/github.com/invopop/jsonschema@v0.14.0", "version": "v0.14.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/jackc/puddle/v2", "purl": "pkg:golang/github.com/jackc/puddle/v2@v2.2.2", "version": "v2.2.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/jbenet/go-context", "purl": "pkg:golang/github.com/jbenet/go-context@v0.0.0-20150711004518-d14ea06fba99", "version": "v0.0.0-20150711004518-d14ea06fba99" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/jcmturner/aescts/v2", "purl": "pkg:golang/github.com/jcmturner/aescts/v2@v2.0.0", "version": "v2.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/jcmturner/dnsutils/v2", "purl": "pkg:golang/github.com/jcmturner/dnsutils/v2@v2.0.0", "version": "v2.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/jcmturner/gofork", "purl": "pkg:golang/github.com/jcmturner/gofork@v1.7.6", "version": "v1.7.6" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/jcmturner/goidentity/v6", "purl": "pkg:golang/github.com/jcmturner/goidentity/v6@v6.0.1", "version": "v6.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/jcmturner/gokrb5/v8", "purl": "pkg:golang/github.com/jcmturner/gokrb5/v8@v8.4.4", "version": "v8.4.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/jcmturner/rpc/v2", "purl": "pkg:golang/github.com/jcmturner/rpc/v2@v2.0.3", "version": "v2.0.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/kevinburke/ssh_config", "purl": "pkg:golang/github.com/kevinburke/ssh_config@v1.6.0", "version": "v1.6.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/klauspost/compress", "purl": "pkg:golang/github.com/klauspost/compress@v1.19.2", "version": "v1.19.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/klauspost/cpuid/v2", "purl": "pkg:golang/github.com/klauspost/cpuid/v2@v2.4.0", "version": "v2.4.0" }, { "ecosystem": "golang", "licenses": [], "location": "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.mod", "name": "github.com/kr/pretty", "purl": "pkg:golang/github.com/kr/pretty@v0.2.1", "version": "v0.2.1" }, { "ecosystem": "golang", "licenses": [], "location": "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.mod", "name": "github.com/kr/text", "purl": "pkg:golang/github.com/kr/text@v0.2.0", "version": "v0.2.0" }, { "ecosystem": "golang", "licenses": [], "location": "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.mod", "name": "github.com/kylelemons/godebug", "purl": "pkg:golang/github.com/kylelemons/godebug@v1.1.0", "version": "v1.1.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/lucasb-eyer/go-colorful", "purl": "pkg:golang/github.com/lucasb-eyer/go-colorful@v1.4.1", "version": "v1.4.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/manifoldco/promptui", "purl": "pkg:golang/github.com/manifoldco/promptui@v0.9.0", "version": "v0.9.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/mark3labs/mcp-go", "purl": "pkg:golang/github.com/mark3labs/mcp-go@v0.31.0", "version": "v0.31.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/Masterminds/semver/v3", "purl": "pkg:golang/github.com/Masterminds/semver/v3@v3.4.0", "version": "v3.4.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/mattn/go-colorable", "purl": "pkg:golang/github.com/mattn/go-colorable@v0.1.15", "version": "v0.1.15" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/mattn/go-isatty", "purl": "pkg:golang/github.com/mattn/go-isatty@v0.0.24", "version": "v0.0.24" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/mattn/go-localereader", "purl": "pkg:golang/github.com/mattn/go-localereader@v0.0.1", "version": "v0.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2/go.mod", "name": "github.com/mattn/go-localereader", "purl": "pkg:golang/github.com/mattn/go-localereader@v0.0.2-0.20220822084749-2491eb6c1c75", "version": "v0.0.2-0.20220822084749-2491eb6c1c75" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/mattn/go-runewidth", "purl": "pkg:golang/github.com/mattn/go-runewidth@v0.0.27", "version": "v0.0.27" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/microcosm-cc/bluemonday", "purl": "pkg:golang/github.com/microcosm-cc/bluemonday@v1.0.27", "version": "v1.0.27" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/Microsoft/go-winio", "purl": "pkg:golang/github.com/Microsoft/go-winio@v0.6.2", "version": "v0.6.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/mitchellh/go-homedir", "purl": "pkg:golang/github.com/mitchellh/go-homedir@v1.1.0", "version": "v1.1.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/mitchellh/go-wordwrap", "purl": "pkg:golang/github.com/mitchellh/go-wordwrap@v1.0.1", "version": "v1.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/moby/buildkit", "purl": "pkg:golang/github.com/moby/buildkit@v0.30.0", "version": "v0.30.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/muesli/ansi", "purl": "pkg:golang/github.com/muesli/ansi@v0.0.0-20221106050444-61f0cd9a192a", "version": "v0.0.0-20221106050444-61f0cd9a192a" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/muesli/cancelreader", "purl": "pkg:golang/github.com/muesli/cancelreader@v0.2.2", "version": "v0.2.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/muesli/reflow", "purl": "pkg:golang/github.com/muesli/reflow@v0.3.0", "version": "v0.3.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/muesli/termenv", "purl": "pkg:golang/github.com/muesli/termenv@v0.16.0", "version": "v0.16.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/munnerz/goautoneg", "purl": "pkg:golang/github.com/munnerz/goautoneg@v0.0.0-20191010083416-a7dc8b61c822", "version": "v0.0.0-20191010083416-a7dc8b61c822" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/oapi-codegen/runtime", "purl": "pkg:golang/github.com/oapi-codegen/runtime@v1.6.0", "version": "v1.6.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/olekukonko/tablewriter", "purl": "pkg:golang/github.com/olekukonko/tablewriter@v0.0.5", "version": "v0.0.5" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/OneOfOne/xxhash", "purl": "pkg:golang/github.com/OneOfOne/xxhash@v1.2.8", "version": "v1.2.8" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/open-policy-agent/opa", "purl": "pkg:golang/github.com/open-policy-agent/opa@v0.69.0", "version": "v0.69.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/opencontainers/go-digest", "purl": "pkg:golang/github.com/opencontainers/go-digest@v1.0.0", "version": "v1.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/otiai10/copy", "purl": "pkg:golang/github.com/otiai10/copy@v1.14.1", "version": "v1.14.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/otiai10/mint", "purl": "pkg:golang/github.com/otiai10/mint@v1.6.3", "version": "v1.6.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/package-url/packageurl-go", "purl": "pkg:golang/github.com/package-url/packageurl-go@v0.1.3", "version": "v0.1.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/patrickmn/go-cache", "purl": "pkg:golang/github.com/patrickmn/go-cache@v2.1.0%2Bincompatible", "version": "v2.1.0+incompatible" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/pb33f/ordered-map/v2", "purl": "pkg:golang/github.com/pb33f/ordered-map/v2@v2.3.1", "version": "v2.3.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/pelletier/go-toml/v2", "purl": "pkg:golang/github.com/pelletier/go-toml/v2@v2.4.3", "version": "v2.4.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/peterh/liner", "purl": "pkg:golang/github.com/peterh/liner@v1.2.2", "version": "v1.2.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/pjbgf/sha1cd", "purl": "pkg:golang/github.com/pjbgf/sha1cd@v0.6.0", "version": "v0.6.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/pkg/browser", "purl": "pkg:golang/github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c", "version": "v0.0.0-20240102092130-5ac0b6a4141c" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/pkg/errors", "purl": "pkg:golang/github.com/pkg/errors@v0.9.1", "version": "v0.9.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/pkoukk/tiktoken-go", "purl": "pkg:golang/github.com/pkoukk/tiktoken-go@v0.1.6", "version": "v0.1.6" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/planetscale/vtprotobuf", "purl": "pkg:golang/github.com/planetscale/vtprotobuf@v0.6.1-0.20240319094008-0393e58bdf10", "version": "v0.6.1-0.20240319094008-0393e58bdf10" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/pmezard/go-difflib", "purl": "pkg:golang/github.com/pmezard/go-difflib@v1.0.1-0.20181226105442-5d4384ee4fb2", "version": "v1.0.1-0.20181226105442-5d4384ee4fb2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/prometheus/client_golang", "purl": "pkg:golang/github.com/prometheus/client_golang@v1.23.2", "version": "v1.23.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/prometheus/client_model", "purl": "pkg:golang/github.com/prometheus/client_model@v0.6.2", "version": "v0.6.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/prometheus/common", "purl": "pkg:golang/github.com/prometheus/common@v0.66.1", "version": "v0.66.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/prometheus/procfs", "purl": "pkg:golang/github.com/prometheus/procfs@v0.17.0", "version": "v0.17.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/ProtonMail/go-crypto", "purl": "pkg:golang/github.com/ProtonMail/go-crypto@v1.4.1", "version": "v1.4.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/puzpuzpuz/xsync", "purl": "pkg:golang/github.com/puzpuzpuz/xsync@v1.5.2", "version": "v1.5.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/puzpuzpuz/xsync/v3", "purl": "pkg:golang/github.com/puzpuzpuz/xsync/v3@v3.5.1", "version": "v3.5.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/rcrowley/go-metrics", "purl": "pkg:golang/github.com/rcrowley/go-metrics@v0.0.0-20201227073835-cf1acfcdf475", "version": "v0.0.0-20201227073835-cf1acfcdf475" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/rivo/uniseg", "purl": "pkg:golang/github.com/rivo/uniseg@v0.4.7", "version": "v0.4.7" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/rs/zerolog", "purl": "pkg:golang/github.com/rs/zerolog@v1.35.1", "version": "v1.35.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/sabhiram/go-gitignore", "purl": "pkg:golang/github.com/sabhiram/go-gitignore@v0.0.0-20210923224102-525f6e181f06", "version": "v0.0.0-20210923224102-525f6e181f06" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/sagikazarmark/locafero", "purl": "pkg:golang/github.com/sagikazarmark/locafero@v0.12.0", "version": "v0.12.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/samber/lo", "purl": "pkg:golang/github.com/samber/lo@v1.53.0", "version": "v1.53.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/sergi/go-diff", "purl": "pkg:golang/github.com/sergi/go-diff@v1.4.0", "version": "v1.4.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/shirou/gopsutil", "purl": "pkg:golang/github.com/shirou/gopsutil@v3.21.11%2Bincompatible", "version": "v3.21.11+incompatible" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/sirupsen/logrus", "purl": "pkg:golang/github.com/sirupsen/logrus@v1.9.4", "version": "v1.9.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/skeema/knownhosts", "purl": "pkg:golang/github.com/skeema/knownhosts@v1.3.2", "version": "v1.3.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-agent-scan", "purl": "pkg:golang/github.com/snyk/cli-extension-agent-scan@v0.0.0-20260821092236-dc228259a004", "version": "v0.0.0-20260821092236-dc228259a004" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-ai-bom", "purl": "pkg:golang/github.com/snyk/cli-extension-ai-bom@v0.0.0-20260817214817-d0a81ac40172", "version": "v0.0.0-20260817214817-d0a81ac40172" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-axi", "purl": "pkg:golang/github.com/snyk/cli-extension-axi@v0.0.0-20260901142946-cb915113acb7", "version": "v0.0.0-20260901142946-cb915113acb7" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-cos", "purl": "pkg:golang/github.com/snyk/cli-extension-cos@v0.0.0-20260818151318-d63bb9db9484", "version": "v0.0.0-20260818151318-d63bb9db9484" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-dep-graph/v2", "purl": "pkg:golang/github.com/snyk/cli-extension-dep-graph/v2@v2.19.2", "version": "v2.19.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-iac", "purl": "pkg:golang/github.com/snyk/cli-extension-iac@v0.0.0-20260515092252-505c498f1077", "version": "v0.0.0-20260515092252-505c498f1077" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-iac-rules", "purl": "pkg:golang/github.com/snyk/cli-extension-iac-rules@v0.0.0-20260818142329-df932cc1794f", "version": "v0.0.0-20260818142329-df932cc1794f" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-os-flows", "purl": "pkg:golang/github.com/snyk/cli-extension-os-flows@v0.0.0-20261019113940-6bd18a6c09b8", "version": "v0.0.0-20261019113940-6bd18a6c09b8" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-sbom", "purl": "pkg:golang/github.com/snyk/cli-extension-sbom@v0.0.0-20260818092356-16ee760085f9", "version": "v0.0.0-20260818092356-16ee760085f9" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-secrets", "purl": "pkg:golang/github.com/snyk/cli-extension-secrets@v0.0.0-20260811115637-ee872c26b0cd", "version": "v0.0.0-20260811115637-ee872c26b0cd" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli-extension-studio", "purl": "pkg:golang/github.com/snyk/cli-extension-studio@v1.0.3", "version": "v1.0.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/cli/cliv2", "purl": "pkg:golang/github.com/snyk/cli/cliv2", "version": "UNKNOWN" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/code-client-go", "purl": "pkg:golang/github.com/snyk/code-client-go@v1.31.9", "version": "v1.31.9" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/container-cli", "purl": "pkg:golang/github.com/snyk/container-cli@v0.0.0-20260213211631-cd2b2cf8f3ea", "version": "v0.0.0-20260213211631-cd2b2cf8f3ea" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/dep-graph/go", "purl": "pkg:golang/github.com/snyk/dep-graph/go@v0.0.0-20260127160647-c836da762c62", "version": "v0.0.0-20260127160647-c836da762c62" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/error-catalog-golang-public", "purl": "pkg:golang/github.com/snyk/error-catalog-golang-public@v0.0.0-20260930150215-d822bd122137", "version": "v0.0.0-20260930150215-d822bd122137" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/go-application-framework", "purl": "pkg:golang/github.com/snyk/go-application-framework@v0.30.2", "version": "v0.30.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/go-httpauth", "purl": "pkg:golang/github.com/snyk/go-httpauth@v0.0.0-20260810142636-0f6182aaccbc", "version": "v0.0.0-20260810142636-0f6182aaccbc" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/policy-engine", "purl": "pkg:golang/github.com/snyk/policy-engine@v1.1.4", "version": "v1.1.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/remy-cli-extension", "purl": "pkg:golang/github.com/snyk/remy-cli-extension@v1.45.0", "version": "v1.45.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/rift-cli-extension", "purl": "pkg:golang/github.com/snyk/rift-cli-extension@v1.2.2", "version": "v1.2.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/snyk-iac-capture", "purl": "pkg:golang/github.com/snyk/snyk-iac-capture@v0.6.5", "version": "v0.6.5" }, { "ecosystem": "golang", "licenses": [], "location": "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.mod", "name": "github.com/snyk/snyk-iac-parsers", "purl": "pkg:golang/github.com/snyk/snyk-iac-parsers@v1.3.1", "version": "v1.3.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/snyk-ls", "purl": "pkg:golang/github.com/snyk/snyk-ls@v0.0.0-20261014173353-6ed3290ddc95", "version": "v0.0.0-20261014173353-6ed3290ddc95" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/snyk/studio-mcp", "purl": "pkg:golang/github.com/snyk/studio-mcp@v1.15.4", "version": "v1.15.4" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/sourcegraph/go-lsp", "purl": "pkg:golang/github.com/sourcegraph/go-lsp@v0.0.0-20240223163137-f80c5dd31dfd", "version": "v0.0.0-20240223163137-f80c5dd31dfd" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/spf13/afero", "purl": "pkg:golang/github.com/spf13/afero@v1.15.0", "version": "v1.15.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/spf13/cast", "purl": "pkg:golang/github.com/spf13/cast@v1.10.0", "version": "v1.10.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/spf13/cobra", "purl": "pkg:golang/github.com/spf13/cobra@v1.9.1", "version": "v1.9.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/spf13/pflag", "purl": "pkg:golang/github.com/spf13/pflag@v1.0.10", "version": "v1.0.10" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/spf13/viper", "purl": "pkg:golang/github.com/spf13/viper@v1.21.0", "version": "v1.21.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/spiffe/go-spiffe/v2", "purl": "pkg:golang/github.com/spiffe/go-spiffe/v2@v2.7.0", "version": "v2.7.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/standard-webhooks/standard-webhooks/libraries", "purl": "pkg:golang/github.com/standard-webhooks/standard-webhooks/libraries@v0.0.1", "version": "v0.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/stretchr/testify", "purl": "pkg:golang/github.com/stretchr/testify@v1.11.1", "version": "v1.11.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/subosito/gotenv", "purl": "pkg:golang/github.com/subosito/gotenv@v1.6.0", "version": "v1.6.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/tchap/go-patricia/v2", "purl": "pkg:golang/github.com/tchap/go-patricia/v2@v2.3.1", "version": "v2.3.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/tidwall/gjson", "purl": "pkg:golang/github.com/tidwall/gjson@v1.18.0", "version": "v1.18.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/tidwall/match", "purl": "pkg:golang/github.com/tidwall/match@v1.1.1", "version": "v1.1.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/tidwall/pretty", "purl": "pkg:golang/github.com/tidwall/pretty@v1.2.1", "version": "v1.2.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/tidwall/sjson", "purl": "pkg:golang/github.com/tidwall/sjson@v1.2.5", "version": "v1.2.5" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/tklauser/go-sysconf", "purl": "pkg:golang/github.com/tklauser/go-sysconf@v0.3.15", "version": "v0.3.15" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/tklauser/numcpus", "purl": "pkg:golang/github.com/tklauser/numcpus@v0.10.0", "version": "v0.10.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/tmc/langchaingo", "purl": "pkg:golang/github.com/tmc/langchaingo@v0.1.14", "version": "v0.1.14" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/toon-format/toon-go", "purl": "pkg:golang/github.com/toon-format/toon-go@v0.0.0-20251202084852-7ca0e27c4e8c", "version": "v0.0.0-20251202084852-7ca0e27c4e8c" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/ulikunitz/xz", "purl": "pkg:golang/github.com/ulikunitz/xz@v0.5.16", "version": "v0.5.16" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/vercel/detect-agent", "purl": "pkg:golang/github.com/vercel/detect-agent@v1.2.0", "version": "v1.2.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/vincent-petithory/dataurl", "purl": "pkg:golang/github.com/vincent-petithory/dataurl@v1.0.0", "version": "v1.0.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/writeas/go-strip-markdown", "purl": "pkg:golang/github.com/writeas/go-strip-markdown@v2.0.1%2Bincompatible", "version": "v2.0.1+incompatible" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/xanzy/ssh-agent", "purl": "pkg:golang/github.com/xanzy/ssh-agent@v0.3.3", "version": "v0.3.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/xeipuuv/gojsonpointer", "purl": "pkg:golang/github.com/xeipuuv/gojsonpointer@v0.0.0-20190905194746-02993c407bfb", "version": "v0.0.0-20190905194746-02993c407bfb" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/xeipuuv/gojsonreference", "purl": "pkg:golang/github.com/xeipuuv/gojsonreference@v0.0.0-20180127040603-bd5ef7bd5415", "version": "v0.0.0-20180127040603-bd5ef7bd5415" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/xeipuuv/gojsonschema", "purl": "pkg:golang/github.com/xeipuuv/gojsonschema@v1.2.0", "version": "v1.2.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/xo/terminfo", "purl": "pkg:golang/github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e", "version": "v0.0.0-20220910002029-abceb7e1c41e" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/yashtewari/glob-intersection", "purl": "pkg:golang/github.com/yashtewari/glob-intersection@v0.2.0", "version": "v0.2.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/yosida95/uritemplate/v3", "purl": "pkg:golang/github.com/yosida95/uritemplate/v3@v3.0.2", "version": "v3.0.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/yuin/goldmark", "purl": "pkg:golang/github.com/yuin/goldmark@v1.7.17", "version": "v1.7.17" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/yuin/goldmark-emoji", "purl": "pkg:golang/github.com/yuin/goldmark-emoji@v1.0.6", "version": "v1.0.6" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/yusufpapurcu/wmi", "purl": "pkg:golang/github.com/yusufpapurcu/wmi@v1.2.4", "version": "v1.2.4" }, { "ecosystem": "golang", "licenses": [], "location": "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.mod", "name": "github.com/zclconf/go-cty", "purl": "pkg:golang/github.com/zclconf/go-cty@v1.10.0", "version": "v1.10.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/zclconf/go-cty", "purl": "pkg:golang/github.com/zclconf/go-cty@v1.14.0", "version": "v1.14.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "github.com/zclconf/go-cty-yaml", "purl": "pkg:golang/github.com/zclconf/go-cty-yaml@v1.0.3", "version": "v1.0.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.lsp.dev/uri", "purl": "pkg:golang/go.lsp.dev/uri@v0.3.0", "version": "v0.3.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.opentelemetry.io/auto/sdk", "purl": "pkg:golang/go.opentelemetry.io/auto/sdk@v1.2.1", "version": "v1.2.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.opentelemetry.io/contrib/detectors/gcp", "purl": "pkg:golang/go.opentelemetry.io/contrib/detectors/gcp@v1.44.0", "version": "v1.44.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc", "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc@v0.68.0", "version": "v0.68.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp", "purl": "pkg:golang/go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.68.0", "version": "v0.68.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.opentelemetry.io/otel", "purl": "pkg:golang/go.opentelemetry.io/otel@v1.45.0", "version": "v1.45.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.opentelemetry.io/otel/metric", "purl": "pkg:golang/go.opentelemetry.io/otel/metric@v1.45.0", "version": "v1.45.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.opentelemetry.io/otel/sdk", "purl": "pkg:golang/go.opentelemetry.io/otel/sdk@v1.45.0", "version": "v1.45.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.opentelemetry.io/otel/sdk/metric", "purl": "pkg:golang/go.opentelemetry.io/otel/sdk/metric@v1.45.0", "version": "v1.45.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.opentelemetry.io/otel/trace", "purl": "pkg:golang/go.opentelemetry.io/otel/trace@v1.45.0", "version": "v1.45.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.yaml.in/yaml/v2", "purl": "pkg:golang/go.yaml.in/yaml/v2@v2.4.3", "version": "v2.4.3" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.yaml.in/yaml/v3", "purl": "pkg:golang/go.yaml.in/yaml/v3@v3.0.5", "version": "v3.0.5" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "go.yaml.in/yaml/v4", "purl": "pkg:golang/go.yaml.in/yaml/v4@v4.0.0-rc.2", "version": "v4.0.0-rc.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/crypto", "purl": "pkg:golang/golang.org/x/crypto@v0.57.0", "version": "v0.57.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/exp", "purl": "pkg:golang/golang.org/x/exp@v0.0.0-20260410095643-746e56fc9e2f", "version": "v0.0.0-20260410095643-746e56fc9e2f" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/mod", "purl": "pkg:golang/golang.org/x/mod@v0.41.0", "version": "v0.41.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/net", "purl": "pkg:golang/golang.org/x/net@v0.60.0", "version": "v0.60.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/oauth2", "purl": "pkg:golang/golang.org/x/oauth2@v0.36.0", "version": "v0.36.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/sync", "purl": "pkg:golang/golang.org/x/sync@v0.23.0", "version": "v0.23.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/sys", "purl": "pkg:golang/golang.org/x/sys@v0.48.0", "version": "v0.48.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/term", "purl": "pkg:golang/golang.org/x/term@v0.46.0", "version": "v0.46.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/text", "purl": "pkg:golang/golang.org/x/text@v0.42.0", "version": "v0.42.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "golang.org/x/time", "purl": "pkg:golang/golang.org/x/time@v0.15.0", "version": "v0.15.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "google.golang.org/api", "purl": "pkg:golang/google.golang.org/api@v0.292.0", "version": "v0.292.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "google.golang.org/genai", "purl": "pkg:golang/google.golang.org/genai@v1.60.0", "version": "v1.60.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "google.golang.org/genproto", "purl": "pkg:golang/google.golang.org/genproto@v0.0.0-20260519071638-aa98bba5eb94", "version": "v0.0.0-20260519071638-aa98bba5eb94" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "google.golang.org/genproto/googleapis/api", "purl": "pkg:golang/google.golang.org/genproto/googleapis/api@v0.0.0-20260630182238-925bb5da69e7", "version": "v0.0.0-20260630182238-925bb5da69e7" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "google.golang.org/genproto/googleapis/rpc", "purl": "pkg:golang/google.golang.org/genproto/googleapis/rpc@v0.0.0-20260803160001-6ac0973c030d", "version": "v0.0.0-20260803160001-6ac0973c030d" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "google.golang.org/grpc", "purl": "pkg:golang/google.golang.org/grpc@v1.83.2", "version": "v1.83.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "google.golang.org/protobuf", "purl": "pkg:golang/google.golang.org/protobuf@v1.36.11", "version": "v1.36.11" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "gopkg.in/warnings.v0", "purl": "pkg:golang/gopkg.in/warnings.v0@v0.1.2", "version": "v0.1.2" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "gopkg.in/yaml.v2", "purl": "pkg:golang/gopkg.in/yaml.v2@v2.4.0", "version": "v2.4.0" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "gopkg.in/yaml.v3", "purl": "pkg:golang/gopkg.in/yaml.v3@v3.0.1", "version": "v3.0.1" }, { "ecosystem": "golang", "licenses": [], "location": "cliv2-private/go.mod", "name": "sigs.k8s.io/yaml", "purl": "pkg:golang/sigs.k8s.io/yaml@v1.6.0", "version": "v1.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@alcalzone/ansi-tokenize", "purl": "pkg:npm/%40alcalzone/ansi-tokenize@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@ampproject/remapping", "purl": "pkg:npm/%40ampproject/remapping@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@ampproject/remapping", "purl": "pkg:npm/%40ampproject/remapping@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/code-frame", "purl": "pkg:npm/%40babel/code-frame@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/code-frame", "purl": "pkg:npm/%40babel/code-frame@7.23.5", "version": "7.23.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/compat-data", "purl": "pkg:npm/%40babel/compat-data@7.20.14", "version": "7.20.14" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/compat-data", "purl": "pkg:npm/%40babel/compat-data@7.23.5", "version": "7.23.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/core", "purl": "pkg:npm/%40babel/core@7.20.12", "version": "7.20.12" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/core", "purl": "pkg:npm/%40babel/core@7.24.0", "version": "7.24.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/generator", "purl": "pkg:npm/%40babel/generator@7.18.2", "version": "7.18.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/generator", "purl": "pkg:npm/%40babel/generator@7.20.14", "version": "7.20.14" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/generator", "purl": "pkg:npm/%40babel/generator@7.23.6", "version": "7.23.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/generator", "purl": "pkg:npm/%40babel/generator@7.27.3", "version": "7.27.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-compilation-targets", "purl": "pkg:npm/%40babel/helper-compilation-targets@7.20.7", "version": "7.20.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-compilation-targets", "purl": "pkg:npm/%40babel/helper-compilation-targets@7.23.6", "version": "7.23.6" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-environment-visitor", "purl": "pkg:npm/%40babel/helper-environment-visitor@7.18.9", "version": "7.18.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-environment-visitor", "purl": "pkg:npm/%40babel/helper-environment-visitor@7.22.20", "version": "7.22.20" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-function-name", "purl": "pkg:npm/%40babel/helper-function-name@7.19.0", "version": "7.19.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-function-name", "purl": "pkg:npm/%40babel/helper-function-name@7.23.0", "version": "7.23.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-hoist-variables", "purl": "pkg:npm/%40babel/helper-hoist-variables@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-hoist-variables", "purl": "pkg:npm/%40babel/helper-hoist-variables@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-module-imports", "purl": "pkg:npm/%40babel/helper-module-imports@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-module-imports", "purl": "pkg:npm/%40babel/helper-module-imports@7.22.15", "version": "7.22.15" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-module-transforms", "purl": "pkg:npm/%40babel/helper-module-transforms@7.20.11", "version": "7.20.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-module-transforms", "purl": "pkg:npm/%40babel/helper-module-transforms@7.23.3", "version": "7.23.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-plugin-utils", "purl": "pkg:npm/%40babel/helper-plugin-utils@7.20.2", "version": "7.20.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-plugin-utils", "purl": "pkg:npm/%40babel/helper-plugin-utils@7.24.0", "version": "7.24.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-simple-access", "purl": "pkg:npm/%40babel/helper-simple-access@7.20.2", "version": "7.20.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-simple-access", "purl": "pkg:npm/%40babel/helper-simple-access@7.22.5", "version": "7.22.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-split-export-declaration", "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-split-export-declaration", "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.22.6", "version": "7.22.6" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-string-parser", "purl": "pkg:npm/%40babel/helper-string-parser@7.19.4", "version": "7.19.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-string-parser", "purl": "pkg:npm/%40babel/helper-string-parser@7.27.1", "version": "7.27.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-validator-identifier", "purl": "pkg:npm/%40babel/helper-validator-identifier@7.19.1", "version": "7.19.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-validator-identifier", "purl": "pkg:npm/%40babel/helper-validator-identifier@7.27.1", "version": "7.27.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helper-validator-option", "purl": "pkg:npm/%40babel/helper-validator-option@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helper-validator-option", "purl": "pkg:npm/%40babel/helper-validator-option@7.23.5", "version": "7.23.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/helpers", "purl": "pkg:npm/%40babel/helpers@7.20.13", "version": "7.20.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/helpers", "purl": "pkg:npm/%40babel/helpers@7.24.0", "version": "7.24.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/highlight", "purl": "pkg:npm/%40babel/highlight@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/highlight", "purl": "pkg:npm/%40babel/highlight@7.23.4", "version": "7.23.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/parser", "purl": "pkg:npm/%40babel/parser@7.16.4", "version": "7.16.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/parser", "purl": "pkg:npm/%40babel/parser@7.18.4", "version": "7.18.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/parser", "purl": "pkg:npm/%40babel/parser@7.20.15", "version": "7.20.15" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/parser", "purl": "pkg:npm/%40babel/parser@7.24.0", "version": "7.24.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/parser", "purl": "pkg:npm/%40babel/parser@7.27.4", "version": "7.27.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-async-generators", "purl": "pkg:npm/%40babel/plugin-syntax-async-generators@7.8.4", "version": "7.8.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-bigint", "purl": "pkg:npm/%40babel/plugin-syntax-bigint@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-class-properties", "purl": "pkg:npm/%40babel/plugin-syntax-class-properties@7.12.13", "version": "7.12.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-import-meta", "purl": "pkg:npm/%40babel/plugin-syntax-import-meta@7.10.4", "version": "7.10.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-json-strings", "purl": "pkg:npm/%40babel/plugin-syntax-json-strings@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/plugin-syntax-jsx", "purl": "pkg:npm/%40babel/plugin-syntax-jsx@7.18.6", "version": "7.18.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-jsx", "purl": "pkg:npm/%40babel/plugin-syntax-jsx@7.23.3", "version": "7.23.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-logical-assignment-operators", "purl": "pkg:npm/%40babel/plugin-syntax-logical-assignment-operators@7.10.4", "version": "7.10.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-nullish-coalescing-operator", "purl": "pkg:npm/%40babel/plugin-syntax-nullish-coalescing-operator@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-numeric-separator", "purl": "pkg:npm/%40babel/plugin-syntax-numeric-separator@7.10.4", "version": "7.10.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-object-rest-spread", "purl": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-optional-catch-binding", "purl": "pkg:npm/%40babel/plugin-syntax-optional-catch-binding@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-optional-chaining", "purl": "pkg:npm/%40babel/plugin-syntax-optional-chaining@7.8.3", "version": "7.8.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-top-level-await", "purl": "pkg:npm/%40babel/plugin-syntax-top-level-await@7.14.5", "version": "7.14.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/plugin-syntax-typescript", "purl": "pkg:npm/%40babel/plugin-syntax-typescript@7.20.0", "version": "7.20.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/plugin-syntax-typescript", "purl": "pkg:npm/%40babel/plugin-syntax-typescript@7.23.3", "version": "7.23.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/polyfill", "purl": "pkg:npm/%40babel/polyfill@7.12.1", "version": "7.12.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/template", "purl": "pkg:npm/%40babel/template@7.20.7", "version": "7.20.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/template", "purl": "pkg:npm/%40babel/template@7.24.0", "version": "7.24.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/traverse", "purl": "pkg:npm/%40babel/traverse@7.20.13", "version": "7.20.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/traverse", "purl": "pkg:npm/%40babel/traverse@7.24.0", "version": "7.24.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/types", "purl": "pkg:npm/%40babel/types@7.18.4", "version": "7.18.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@babel/types", "purl": "pkg:npm/%40babel/types@7.20.7", "version": "7.20.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/types", "purl": "pkg:npm/%40babel/types@7.24.0", "version": "7.24.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@babel/types", "purl": "pkg:npm/%40babel/types@7.27.3", "version": "7.27.3" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "@base2/pretty-print-object", "purl": "pkg:npm/%40base2/pretty-print-object@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@bcoe/v8-coverage", "purl": "pkg:npm/%40bcoe/v8-coverage@0.2.3", "version": "0.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@common.js/yocto-queue", "purl": "pkg:npm/%40common.js/yocto-queue@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@cspotcode/source-map-support", "purl": "pkg:npm/%40cspotcode/source-map-support@0.8.1", "version": "0.8.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@deepcode/dcignore", "purl": "pkg:npm/%40deepcode/dcignore@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@discoveryjs/json-ext", "purl": "pkg:npm/%40discoveryjs/json-ext@0.5.3", "version": "0.5.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/aix-ppc64", "purl": "pkg:npm/%40esbuild/aix-ppc64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/android-arm", "purl": "pkg:npm/%40esbuild/android-arm@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/android-arm64", "purl": "pkg:npm/%40esbuild/android-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/android-x64", "purl": "pkg:npm/%40esbuild/android-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/darwin-arm64", "purl": "pkg:npm/%40esbuild/darwin-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/darwin-x64", "purl": "pkg:npm/%40esbuild/darwin-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/freebsd-arm64", "purl": "pkg:npm/%40esbuild/freebsd-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/freebsd-x64", "purl": "pkg:npm/%40esbuild/freebsd-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/linux-arm", "purl": "pkg:npm/%40esbuild/linux-arm@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/linux-arm64", "purl": "pkg:npm/%40esbuild/linux-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/linux-ia32", "purl": "pkg:npm/%40esbuild/linux-ia32@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/linux-loong64", "purl": "pkg:npm/%40esbuild/linux-loong64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/linux-mips64el", "purl": "pkg:npm/%40esbuild/linux-mips64el@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/linux-ppc64", "purl": "pkg:npm/%40esbuild/linux-ppc64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/linux-riscv64", "purl": "pkg:npm/%40esbuild/linux-riscv64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/linux-s390x", "purl": "pkg:npm/%40esbuild/linux-s390x@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/linux-x64", "purl": "pkg:npm/%40esbuild/linux-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/netbsd-arm64", "purl": "pkg:npm/%40esbuild/netbsd-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/netbsd-x64", "purl": "pkg:npm/%40esbuild/netbsd-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/openbsd-arm64", "purl": "pkg:npm/%40esbuild/openbsd-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/openbsd-x64", "purl": "pkg:npm/%40esbuild/openbsd-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/openharmony-arm64", "purl": "pkg:npm/%40esbuild/openharmony-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/sunos-x64", "purl": "pkg:npm/%40esbuild/sunos-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/win32-arm64", "purl": "pkg:npm/%40esbuild/win32-arm64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/win32-ia32", "purl": "pkg:npm/%40esbuild/win32-ia32@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@esbuild/win32-x64", "purl": "pkg:npm/%40esbuild/win32-x64@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@hutson/parse-repository-url", "purl": "pkg:npm/%40hutson/parse-repository-url@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@iarna/toml", "purl": "pkg:npm/%40iarna/toml@2.2.5", "version": "2.2.5" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@isaacs/cliui", "purl": "pkg:npm/%40isaacs/cliui@8.0.2", "version": "8.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@isaacs/fs-minipass", "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@isaacs/ts-node-temp-fork-for-pr-2009", "purl": "pkg:npm/%40isaacs/ts-node-temp-fork-for-pr-2009@10.9.7", "version": "10.9.7" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@istanbuljs/load-nyc-config", "purl": "pkg:npm/%40istanbuljs/load-nyc-config@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@istanbuljs/schema", "purl": "pkg:npm/%40istanbuljs/schema@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/console", "purl": "pkg:npm/%40jest/console@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/console", "purl": "pkg:npm/%40jest/console@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/core", "purl": "pkg:npm/%40jest/core@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/core", "purl": "pkg:npm/%40jest/core@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/environment", "purl": "pkg:npm/%40jest/environment@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/environment", "purl": "pkg:npm/%40jest/environment@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/expect", "purl": "pkg:npm/%40jest/expect@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/expect", "purl": "pkg:npm/%40jest/expect@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/expect-utils", "purl": "pkg:npm/%40jest/expect-utils@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/expect-utils", "purl": "pkg:npm/%40jest/expect-utils@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/fake-timers", "purl": "pkg:npm/%40jest/fake-timers@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/fake-timers", "purl": "pkg:npm/%40jest/fake-timers@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/globals", "purl": "pkg:npm/%40jest/globals@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/globals", "purl": "pkg:npm/%40jest/globals@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/reporters", "purl": "pkg:npm/%40jest/reporters@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/reporters", "purl": "pkg:npm/%40jest/reporters@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/schemas", "purl": "pkg:npm/%40jest/schemas@29.4.0", "version": "29.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/schemas", "purl": "pkg:npm/%40jest/schemas@29.6.3", "version": "29.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/source-map", "purl": "pkg:npm/%40jest/source-map@29.2.0", "version": "29.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/source-map", "purl": "pkg:npm/%40jest/source-map@29.6.3", "version": "29.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/test-result", "purl": "pkg:npm/%40jest/test-result@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/test-result", "purl": "pkg:npm/%40jest/test-result@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/test-sequencer", "purl": "pkg:npm/%40jest/test-sequencer@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/test-sequencer", "purl": "pkg:npm/%40jest/test-sequencer@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/transform", "purl": "pkg:npm/%40jest/transform@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/transform", "purl": "pkg:npm/%40jest/transform@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jest/types", "purl": "pkg:npm/%40jest/types@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jest/types", "purl": "pkg:npm/%40jest/types@29.6.3", "version": "29.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jridgewell/gen-mapping", "purl": "pkg:npm/%40jridgewell/gen-mapping@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jridgewell/gen-mapping", "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.2", "version": "0.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jridgewell/gen-mapping", "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.5", "version": "0.3.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jridgewell/resolve-uri", "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jridgewell/set-array", "purl": "pkg:npm/%40jridgewell/set-array@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jridgewell/set-array", "purl": "pkg:npm/%40jridgewell/set-array@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jridgewell/sourcemap-codec", "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14", "version": "1.4.14" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@jridgewell/trace-mapping", "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.17", "version": "0.3.17" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jridgewell/trace-mapping", "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.25", "version": "0.3.25" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@jridgewell/trace-mapping", "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.9", "version": "0.3.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@nodelib/fs.scandir", "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5", "version": "2.1.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@nodelib/fs.stat", "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5", "version": "2.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@nodelib/fs.walk", "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8", "version": "1.2.8" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@npmcli/agent", "purl": "pkg:npm/%40npmcli/agent@2.2.2", "version": "2.2.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@npmcli/fs", "purl": "pkg:npm/%40npmcli/fs@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@npmcli/git", "purl": "pkg:npm/%40npmcli/git@5.0.7", "version": "5.0.7" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@npmcli/installed-package-contents", "purl": "pkg:npm/%40npmcli/installed-package-contents@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@npmcli/node-gyp", "purl": "pkg:npm/%40npmcli/node-gyp@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@npmcli/package-json", "purl": "pkg:npm/%40npmcli/package-json@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@npmcli/promise-spawn", "purl": "pkg:npm/%40npmcli/promise-spawn@7.0.2", "version": "7.0.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@npmcli/redact", "purl": "pkg:npm/%40npmcli/redact@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@npmcli/run-script", "purl": "pkg:npm/%40npmcli/run-script@7.0.4", "version": "7.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octetstream/promisify", "purl": "pkg:npm/%40octetstream/promisify@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/auth-token", "purl": "pkg:npm/%40octokit/auth-token@2.4.5", "version": "2.4.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/core", "purl": "pkg:npm/%40octokit/core@3.5.1", "version": "3.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/endpoint", "purl": "pkg:npm/%40octokit/endpoint@6.0.12", "version": "6.0.12" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/graphql", "purl": "pkg:npm/%40octokit/graphql@4.6.4", "version": "4.6.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/openapi-types", "purl": "pkg:npm/%40octokit/openapi-types@12.11.0", "version": "12.11.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/plugin-paginate-rest", "purl": "pkg:npm/%40octokit/plugin-paginate-rest@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/plugin-paginate-rest", "purl": "pkg:npm/%40octokit/plugin-paginate-rest@2.21.3", "version": "2.21.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/plugin-request-log", "purl": "pkg:npm/%40octokit/plugin-request-log@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/plugin-rest-endpoint-methods", "purl": "pkg:npm/%40octokit/plugin-rest-endpoint-methods@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/plugin-rest-endpoint-methods", "purl": "pkg:npm/%40octokit/plugin-rest-endpoint-methods@5.16.2", "version": "5.16.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/request", "purl": "pkg:npm/%40octokit/request@5.6.1", "version": "5.6.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/request-error", "purl": "pkg:npm/%40octokit/request-error@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/request-error", "purl": "pkg:npm/%40octokit/request-error@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/rest", "purl": "pkg:npm/%40octokit/rest@16.43.2", "version": "16.43.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/rest", "purl": "pkg:npm/%40octokit/rest@18.12.0", "version": "18.12.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/types", "purl": "pkg:npm/%40octokit/types@2.16.2", "version": "2.16.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@octokit/types", "purl": "pkg:npm/%40octokit/types@6.41.0", "version": "6.41.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@open-policy-agent/opa-wasm", "purl": "pkg:npm/%40open-policy-agent/opa-wasm@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@pkgjs/parseargs", "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0", "version": "0.11.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@pnpm/crypto.base32-hash", "purl": "pkg:npm/%40pnpm/crypto.base32-hash@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@pnpm/types", "purl": "pkg:npm/%40pnpm/types@8.9.0", "version": "8.9.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@roberts_lando/vfs", "purl": "pkg:npm/%40roberts_lando/vfs@0.3.3", "version": "0.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@sentry-internal/tracing", "purl": "pkg:npm/%40sentry-internal/tracing@7.120.4", "version": "7.120.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@sentry/core", "purl": "pkg:npm/%40sentry/core@7.120.4", "version": "7.120.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@sentry/core", "purl": "pkg:npm/%40sentry/core@7.36.0", "version": "7.36.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@sentry/integrations", "purl": "pkg:npm/%40sentry/integrations@7.120.4", "version": "7.120.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@sentry/node", "purl": "pkg:npm/%40sentry/node@7.120.4", "version": "7.120.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@sentry/node", "purl": "pkg:npm/%40sentry/node@7.36.0", "version": "7.36.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@sentry/types", "purl": "pkg:npm/%40sentry/types@7.120.4", "version": "7.120.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@sentry/types", "purl": "pkg:npm/%40sentry/types@7.36.0", "version": "7.36.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@sentry/utils", "purl": "pkg:npm/%40sentry/utils@7.120.4", "version": "7.120.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@sentry/utils", "purl": "pkg:npm/%40sentry/utils@7.36.0", "version": "7.36.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@sigstore/bundle", "purl": "pkg:npm/%40sigstore/bundle@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@sigstore/core", "purl": "pkg:npm/%40sigstore/core@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@sigstore/protobuf-specs", "purl": "pkg:npm/%40sigstore/protobuf-specs@0.3.2", "version": "0.3.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@sigstore/sign", "purl": "pkg:npm/%40sigstore/sign@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@sigstore/tuf", "purl": "pkg:npm/%40sigstore/tuf@2.3.4", "version": "2.3.4" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@sigstore/verify", "purl": "pkg:npm/%40sigstore/verify@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@sinclair/typebox", "purl": "pkg:npm/%40sinclair/typebox@0.25.21", "version": "0.25.21" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@sinclair/typebox", "purl": "pkg:npm/%40sinclair/typebox@0.27.8", "version": "0.27.8" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "@sinonjs/commons", "purl": "pkg:npm/%40sinonjs/commons@1.8.3", "version": "1.8.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@sinonjs/commons", "purl": "pkg:npm/%40sinonjs/commons@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "@sinonjs/commons", "purl": "pkg:npm/%40sinonjs/commons@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@sinonjs/fake-timers", "purl": "pkg:npm/%40sinonjs/fake-timers@10.0.2", "version": "10.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "@sinonjs/fake-timers", "purl": "pkg:npm/%40sinonjs/fake-timers@10.3.0", "version": "10.3.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "@sinonjs/formatio", "purl": "pkg:npm/%40sinonjs/formatio@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "@sinonjs/formatio", "purl": "pkg:npm/%40sinonjs/formatio@3.2.2", "version": "3.2.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "@sinonjs/samsam", "purl": "pkg:npm/%40sinonjs/samsam@3.3.3", "version": "3.3.3" }, { "ecosystem": "npm", "licenses": [ "Unlicense OR Apache-2.0" ], "location": "package-lock.json", "name": "@sinonjs/text-encoding", "purl": "pkg:npm/%40sinonjs/text-encoding@0.7.1", "version": "0.7.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/child-process", "purl": "pkg:npm/%40snyk/child-process@0.4.1", "version": "0.4.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/cli-interface", "purl": "pkg:npm/%40snyk/cli-interface@2.14.1", "version": "2.14.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/cli-interface", "purl": "pkg:npm/%40snyk/cli-interface@2.15.0", "version": "2.15.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/cloud-config-parser", "purl": "pkg:npm/%40snyk/cloud-config-parser@1.14.5", "version": "1.14.5" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/cocoapods-lockfile-parser", "purl": "pkg:npm/%40snyk/cocoapods-lockfile-parser@3.10.3", "version": "3.10.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@snyk/code-client", "purl": "pkg:npm/%40snyk/code-client@4.26.2", "version": "4.26.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/composer-lockfile-parser", "purl": "pkg:npm/%40snyk/composer-lockfile-parser@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/dep-graph", "purl": "pkg:npm/%40snyk/dep-graph@1.31.0", "version": "1.31.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/dep-graph", "purl": "pkg:npm/%40snyk/dep-graph@2.16.11", "version": "2.16.11" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@snyk/dep-graph", "purl": "pkg:npm/%40snyk/dep-graph@2.16.4", "version": "2.16.4" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/docker-registry-v2-client", "purl": "pkg:npm/%40snyk/docker-registry-v2-client@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/error-catalog-nodejs-public", "purl": "pkg:npm/%40snyk/error-catalog-nodejs-public@4.0.4", "version": "4.0.4" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/error-catalog-nodejs-public", "purl": "pkg:npm/%40snyk/error-catalog-nodejs-public@5.82.1", "version": "5.82.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/fix", "purl": "pkg:npm/%40snyk/fix@1.0.0-monorepo", "version": "1.0.0-monorepo" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@snyk/fix", "purl": "pkg:npm/%40snyk/fix", "version": "UNKNOWN" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/fix-pipenv-pipfile", "purl": "pkg:npm/%40snyk/fix-pipenv-pipfile@0.7.1", "version": "0.7.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/fix-poetry", "purl": "pkg:npm/%40snyk/fix-poetry@0.9.1", "version": "0.9.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@snyk/gemfile", "purl": "pkg:npm/%40snyk/gemfile@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/go-semver", "purl": "pkg:npm/%40snyk/go-semver@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@snyk/graphlib", "purl": "pkg:npm/%40snyk/graphlib@2.1.9-patch.3", "version": "2.1.9-patch.3" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/mix-parser", "purl": "pkg:npm/%40snyk/mix-parser@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/protect", "purl": "pkg:npm/%40snyk/protect@1.0.0-monorepo", "version": "1.0.0-monorepo" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@snyk/protect", "purl": "pkg:npm/%40snyk/protect", "version": "UNKNOWN" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/rpm-parser", "purl": "pkg:npm/%40snyk/rpm-parser@3.4.1", "version": "3.4.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/snyk-cocoapods-plugin", "purl": "pkg:npm/%40snyk/snyk-cocoapods-plugin@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/snyk-docker-pull", "purl": "pkg:npm/%40snyk/snyk-docker-pull@3.17.1", "version": "3.17.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@snyk/snyk-hex-plugin", "purl": "pkg:npm/%40snyk/snyk-hex-plugin@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@swimlane/docker-reference", "purl": "pkg:npm/%40swimlane/docker-reference@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/after", "purl": "pkg:npm/%40tapjs/after@1.1.24", "version": "1.1.24" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/after-each", "purl": "pkg:npm/%40tapjs/after-each@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/asserts", "purl": "pkg:npm/%40tapjs/asserts@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/before", "purl": "pkg:npm/%40tapjs/before@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/before-each", "purl": "pkg:npm/%40tapjs/before-each@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/config", "purl": "pkg:npm/%40tapjs/config@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/core", "purl": "pkg:npm/%40tapjs/core@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/error-serdes", "purl": "pkg:npm/%40tapjs/error-serdes@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/filter", "purl": "pkg:npm/%40tapjs/filter@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/fixture", "purl": "pkg:npm/%40tapjs/fixture@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/intercept", "purl": "pkg:npm/%40tapjs/intercept@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/mock", "purl": "pkg:npm/%40tapjs/mock@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/node-serialize", "purl": "pkg:npm/%40tapjs/node-serialize@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "@tapjs/processinfo", "purl": "pkg:npm/%40tapjs/processinfo@3.1.7", "version": "3.1.7" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/reporter", "purl": "pkg:npm/%40tapjs/reporter@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/run", "purl": "pkg:npm/%40tapjs/run@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/snapshot", "purl": "pkg:npm/%40tapjs/snapshot@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/spawn", "purl": "pkg:npm/%40tapjs/spawn@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/stack", "purl": "pkg:npm/%40tapjs/stack@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/stdin", "purl": "pkg:npm/%40tapjs/stdin@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/test", "purl": "pkg:npm/%40tapjs/test@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/typescript", "purl": "pkg:npm/%40tapjs/typescript@1.4.6", "version": "1.4.6" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "@tapjs/worker", "purl": "pkg:npm/%40tapjs/worker@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@tsconfig/node10", "purl": "pkg:npm/%40tsconfig/node10@1.0.9", "version": "1.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@tsconfig/node12", "purl": "pkg:npm/%40tsconfig/node12@1.0.11", "version": "1.0.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@tsconfig/node14", "purl": "pkg:npm/%40tsconfig/node14@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@tsconfig/node16", "purl": "pkg:npm/%40tsconfig/node16@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@tsconfig/node18", "purl": "pkg:npm/%40tsconfig/node18@18.2.4", "version": "18.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@tsconfig/node20", "purl": "pkg:npm/%40tsconfig/node20@20.1.4", "version": "20.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@tufjs/canonical-json", "purl": "pkg:npm/%40tufjs/canonical-json@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@tufjs/models", "purl": "pkg:npm/%40tufjs/models@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/babel__core", "purl": "pkg:npm/%40types/babel__core@7.20.0", "version": "7.20.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/babel__core", "purl": "pkg:npm/%40types/babel__core@7.20.5", "version": "7.20.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/babel__generator", "purl": "pkg:npm/%40types/babel__generator@7.6.4", "version": "7.6.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/babel__generator", "purl": "pkg:npm/%40types/babel__generator@7.6.8", "version": "7.6.8" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/babel__template", "purl": "pkg:npm/%40types/babel__template@7.4.1", "version": "7.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/babel__template", "purl": "pkg:npm/%40types/babel__template@7.4.4", "version": "7.4.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/babel__traverse", "purl": "pkg:npm/%40types/babel__traverse@7.18.3", "version": "7.18.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/babel__traverse", "purl": "pkg:npm/%40types/babel__traverse@7.20.5", "version": "7.20.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/body-parser", "purl": "pkg:npm/%40types/body-parser@1.19.1", "version": "1.19.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/connect", "purl": "pkg:npm/%40types/connect@3.4.35", "version": "3.4.35" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/cross-spawn", "purl": "pkg:npm/%40types/cross-spawn@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/debug", "purl": "pkg:npm/%40types/debug@4.1.13", "version": "4.1.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/eslint", "purl": "pkg:npm/%40types/eslint@7.28.0", "version": "7.28.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/eslint-scope", "purl": "pkg:npm/%40types/eslint-scope@3.7.1", "version": "3.7.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/estree", "purl": "pkg:npm/%40types/estree@0.0.48", "version": "0.0.48" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/estree", "purl": "pkg:npm/%40types/estree@0.0.50", "version": "0.0.50" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/express", "purl": "pkg:npm/%40types/express@4.17.13", "version": "4.17.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/express-serve-static-core", "purl": "pkg:npm/%40types/express-serve-static-core@4.17.24", "version": "4.17.24" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/fs-extra", "purl": "pkg:npm/%40types/fs-extra@9.0.12", "version": "9.0.12" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/graceful-fs", "purl": "pkg:npm/%40types/graceful-fs@4.1.6", "version": "4.1.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/graceful-fs", "purl": "pkg:npm/%40types/graceful-fs@4.1.9", "version": "4.1.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/graphlib", "purl": "pkg:npm/%40types/graphlib@2.1.8", "version": "2.1.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/istanbul-lib-coverage", "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/istanbul-lib-coverage", "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/istanbul-lib-report", "purl": "pkg:npm/%40types/istanbul-lib-report@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/istanbul-reports", "purl": "pkg:npm/%40types/istanbul-reports@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/jest", "purl": "pkg:npm/%40types/jest@29.5.12", "version": "29.5.12" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "@types/jest-json-schema", "purl": "pkg:npm/%40types/jest-json-schema@6.1.5", "version": "6.1.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/js-yaml", "purl": "pkg:npm/%40types/js-yaml@3.12.10", "version": "3.12.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/json-schema", "purl": "pkg:npm/%40types/json-schema@7.0.9", "version": "7.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/lodash", "purl": "pkg:npm/%40types/lodash@4.14.172", "version": "4.14.172" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/lodash.omit", "purl": "pkg:npm/%40types/lodash.omit@4.5.7", "version": "4.5.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/lodash.union", "purl": "pkg:npm/%40types/lodash.union@4.6.7", "version": "4.6.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/marked", "purl": "pkg:npm/%40types/marked@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/mime", "purl": "pkg:npm/%40types/mime@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/minimatch", "purl": "pkg:npm/%40types/minimatch@3.0.5", "version": "3.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/minimist", "purl": "pkg:npm/%40types/minimist@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/ms", "purl": "pkg:npm/%40types/ms@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/needle", "purl": "pkg:npm/%40types/needle@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/node", "purl": "pkg:npm/%40types/node@14.17.10", "version": "14.17.10" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/node", "purl": "pkg:npm/%40types/node@18.11.19", "version": "18.11.19" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/normalize-package-data", "purl": "pkg:npm/%40types/normalize-package-data@2.4.1", "version": "2.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/parse-json", "purl": "pkg:npm/%40types/parse-json@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/prettier", "purl": "pkg:npm/%40types/prettier@2.7.2", "version": "2.7.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/qs", "purl": "pkg:npm/%40types/qs@6.9.7", "version": "6.9.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/range-parser", "purl": "pkg:npm/%40types/range-parser@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/sarif", "purl": "pkg:npm/%40types/sarif@2.1.7", "version": "2.1.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/serve-static", "purl": "pkg:npm/%40types/serve-static@1.13.10", "version": "1.13.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/sinon", "purl": "pkg:npm/%40types/sinon@7.5.2", "version": "7.5.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/stack-utils", "purl": "pkg:npm/%40types/stack-utils@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/stack-utils", "purl": "pkg:npm/%40types/stack-utils@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/uuid", "purl": "pkg:npm/%40types/uuid@8.3.4", "version": "8.3.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/yargs", "purl": "pkg:npm/%40types/yargs@17.0.22", "version": "17.0.22" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/yargs", "purl": "pkg:npm/%40types/yargs@17.0.32", "version": "17.0.32" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "@types/yargs-parser", "purl": "pkg:npm/%40types/yargs-parser@21.0.0", "version": "21.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@types/yargs-parser", "purl": "pkg:npm/%40types/yargs-parser@21.0.3", "version": "21.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@typescript-eslint/eslint-plugin", "purl": "pkg:npm/%40typescript-eslint/eslint-plugin@4.30.0", "version": "4.30.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@typescript-eslint/experimental-utils", "purl": "pkg:npm/%40typescript-eslint/experimental-utils@4.30.0", "version": "4.30.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@typescript-eslint/experimental-utils", "purl": "pkg:npm/%40typescript-eslint/experimental-utils@4.31.0", "version": "4.31.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "@typescript-eslint/parser", "purl": "pkg:npm/%40typescript-eslint/parser@4.30.0", "version": "4.30.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@typescript-eslint/scope-manager", "purl": "pkg:npm/%40typescript-eslint/scope-manager@4.30.0", "version": "4.30.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@typescript-eslint/scope-manager", "purl": "pkg:npm/%40typescript-eslint/scope-manager@4.31.0", "version": "4.31.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@typescript-eslint/types", "purl": "pkg:npm/%40typescript-eslint/types@4.30.0", "version": "4.30.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@typescript-eslint/types", "purl": "pkg:npm/%40typescript-eslint/types@4.31.0", "version": "4.31.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "@typescript-eslint/typescript-estree", "purl": "pkg:npm/%40typescript-eslint/typescript-estree@4.30.0", "version": "4.30.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "@typescript-eslint/typescript-estree", "purl": "pkg:npm/%40typescript-eslint/typescript-estree@4.31.0", "version": "4.31.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@typescript-eslint/visitor-keys", "purl": "pkg:npm/%40typescript-eslint/visitor-keys@4.30.0", "version": "4.30.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@typescript-eslint/visitor-keys", "purl": "pkg:npm/%40typescript-eslint/visitor-keys@4.31.0", "version": "4.31.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@vue/compiler-core", "purl": "pkg:npm/%40vue/compiler-core@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@vue/compiler-dom", "purl": "pkg:npm/%40vue/compiler-dom@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@vue/compiler-sfc", "purl": "pkg:npm/%40vue/compiler-sfc@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@vue/compiler-ssr", "purl": "pkg:npm/%40vue/compiler-ssr@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@vue/shared", "purl": "pkg:npm/%40vue/shared@3.2.4", "version": "3.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/ast", "purl": "pkg:npm/%40webassemblyjs/ast@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/floating-point-hex-parser", "purl": "pkg:npm/%40webassemblyjs/floating-point-hex-parser@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/helper-api-error", "purl": "pkg:npm/%40webassemblyjs/helper-api-error@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/helper-buffer", "purl": "pkg:npm/%40webassemblyjs/helper-buffer@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/helper-numbers", "purl": "pkg:npm/%40webassemblyjs/helper-numbers@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/helper-wasm-bytecode", "purl": "pkg:npm/%40webassemblyjs/helper-wasm-bytecode@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/helper-wasm-section", "purl": "pkg:npm/%40webassemblyjs/helper-wasm-section@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/ieee754", "purl": "pkg:npm/%40webassemblyjs/ieee754@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@webassemblyjs/leb128", "purl": "pkg:npm/%40webassemblyjs/leb128@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/utf8", "purl": "pkg:npm/%40webassemblyjs/utf8@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/wasm-edit", "purl": "pkg:npm/%40webassemblyjs/wasm-edit@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/wasm-gen", "purl": "pkg:npm/%40webassemblyjs/wasm-gen@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/wasm-opt", "purl": "pkg:npm/%40webassemblyjs/wasm-opt@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/wasm-parser", "purl": "pkg:npm/%40webassemblyjs/wasm-parser@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webassemblyjs/wast-printer", "purl": "pkg:npm/%40webassemblyjs/wast-printer@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webpack-cli/configtest", "purl": "pkg:npm/%40webpack-cli/configtest@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webpack-cli/info", "purl": "pkg:npm/%40webpack-cli/info@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@webpack-cli/serve", "purl": "pkg:npm/%40webpack-cli/serve@1.5.2", "version": "1.5.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "@xtuc/ieee754", "purl": "pkg:npm/%40xtuc/ieee754@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "@xtuc/long", "purl": "pkg:npm/%40xtuc/long@4.2.2", "version": "4.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@yao-pkg/pkg", "purl": "pkg:npm/%40yao-pkg/pkg@6.24.0", "version": "6.24.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "@yao-pkg/pkg-fetch", "purl": "pkg:npm/%40yao-pkg/pkg-fetch@3.6.7", "version": "3.6.7" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "@yarnpkg/lockfile", "purl": "pkg:npm/%40yarnpkg/lockfile@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "abbrev", "purl": "pkg:npm/abbrev@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "abbrev", "purl": "pkg:npm/abbrev@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "abort-controller", "purl": "pkg:npm/abort-controller@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "accepts", "purl": "pkg:npm/accepts@1.3.7", "version": "1.3.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "acorn", "purl": "pkg:npm/acorn@7.4.1", "version": "7.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "acorn", "purl": "pkg:npm/acorn@8.11.3", "version": "8.11.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "acorn", "purl": "pkg:npm/acorn@8.4.1", "version": "8.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "acorn-import-assertions", "purl": "pkg:npm/acorn-import-assertions@1.7.6", "version": "1.7.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "acorn-jsx", "purl": "pkg:npm/acorn-jsx@5.3.2", "version": "5.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "acorn-walk", "purl": "pkg:npm/acorn-walk@8.3.2", "version": "8.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "add-stream", "purl": "pkg:npm/add-stream@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "adm-zip", "purl": "pkg:npm/adm-zip@0.6.1", "version": "0.6.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "agent-base", "purl": "pkg:npm/agent-base@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "agent-base", "purl": "pkg:npm/agent-base@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "agent-base", "purl": "pkg:npm/agent-base@7.1.1", "version": "7.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "aggregate-error", "purl": "pkg:npm/aggregate-error@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ajv", "purl": "pkg:npm/ajv@6.12.6", "version": "6.12.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ajv", "purl": "pkg:npm/ajv@6.14.0", "version": "6.14.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ajv", "purl": "pkg:npm/ajv@8.18.0", "version": "8.18.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ajv-draft-04", "purl": "pkg:npm/ajv-draft-04@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ajv-formats", "purl": "pkg:npm/ajv-formats@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ajv-keywords", "purl": "pkg:npm/ajv-keywords@3.5.2", "version": "3.5.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-colors", "purl": "pkg:npm/ansi-colors@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-escapes", "purl": "pkg:npm/ansi-escapes@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-escapes", "purl": "pkg:npm/ansi-escapes@4.3.2", "version": "4.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-escapes", "purl": "pkg:npm/ansi-escapes@6.2.1", "version": "6.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-regex", "purl": "pkg:npm/ansi-regex@6.0.1", "version": "6.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@3.2.1", "version": "3.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansi-styles", "purl": "pkg:npm/ansi-styles@6.2.1", "version": "6.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ansicolors", "purl": "pkg:npm/ansicolors@0.3.2", "version": "0.3.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "anti-trojan-source", "purl": "pkg:npm/anti-trojan-source@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "anymatch", "purl": "pkg:npm/anymatch@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "anymatch", "purl": "pkg:npm/anymatch@3.1.3", "version": "3.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "archy", "purl": "pkg:npm/archy@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "arg", "purl": "pkg:npm/arg@4.1.3", "version": "4.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "argparse", "purl": "pkg:npm/argparse@1.0.10", "version": "1.0.10" }, { "ecosystem": "npm", "licenses": [ "Python-2.0" ], "location": "package-lock.json", "name": "argparse", "purl": "pkg:npm/argparse@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "array-differ", "purl": "pkg:npm/array-differ@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "array-flatten", "purl": "pkg:npm/array-flatten@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "array-from", "purl": "pkg:npm/array-from@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "array-ify", "purl": "pkg:npm/array-ify@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "array-union", "purl": "pkg:npm/array-union@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "array-union", "purl": "pkg:npm/array-union@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "arrify", "purl": "pkg:npm/arrify@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "arrify", "purl": "pkg:npm/arrify@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "asap", "purl": "pkg:npm/asap@2.0.6", "version": "2.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "asn1", "purl": "pkg:npm/asn1@0.2.6", "version": "0.2.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "astral-regex", "purl": "pkg:npm/astral-regex@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "async", "purl": "pkg:npm/async@3.2.6", "version": "3.2.6" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "async-hook-domain", "purl": "pkg:npm/async-hook-domain@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "async-retry", "purl": "pkg:npm/async-retry@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "asynckit", "purl": "pkg:npm/asynckit@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "at-least-node", "purl": "pkg:npm/at-least-node@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "atob-lite", "purl": "pkg:npm/atob-lite@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "auto-bind", "purl": "pkg:npm/auto-bind@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "b4a", "purl": "pkg:npm/b4a@1.8.0", "version": "1.8.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "b4a", "purl": "pkg:npm/b4a@1.8.1", "version": "1.8.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "babel-jest", "purl": "pkg:npm/babel-jest@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "babel-jest", "purl": "pkg:npm/babel-jest@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "babel-plugin-istanbul", "purl": "pkg:npm/babel-plugin-istanbul@6.1.1", "version": "6.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "babel-plugin-jest-hoist", "purl": "pkg:npm/babel-plugin-jest-hoist@29.4.0", "version": "29.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "babel-plugin-jest-hoist", "purl": "pkg:npm/babel-plugin-jest-hoist@29.6.3", "version": "29.6.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "babel-preset-current-node-syntax", "purl": "pkg:npm/babel-preset-current-node-syntax@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "babel-preset-jest", "purl": "pkg:npm/babel-preset-jest@29.4.0", "version": "29.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "babel-preset-jest", "purl": "pkg:npm/babel-preset-jest@29.6.3", "version": "29.6.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "balanced-match", "purl": "pkg:npm/balanced-match@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "balanced-match", "purl": "pkg:npm/balanced-match@4.0.4", "version": "4.0.4" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "bare-events", "purl": "pkg:npm/bare-events@2.8.2", "version": "2.8.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "bare-fs", "purl": "pkg:npm/bare-fs@4.5.5", "version": "4.5.5" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "bare-os", "purl": "pkg:npm/bare-os@3.7.0", "version": "3.7.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "bare-path", "purl": "pkg:npm/bare-path@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "bare-stream", "purl": "pkg:npm/bare-stream@2.8.0", "version": "2.8.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "bare-url", "purl": "pkg:npm/bare-url@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "base64-js", "purl": "pkg:npm/base64-js@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "bcrypt-pbkdf", "purl": "pkg:npm/bcrypt-pbkdf@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "before-after-hook", "purl": "pkg:npm/before-after-hook@2.2.2", "version": "2.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "big.js", "purl": "pkg:npm/big.js@5.2.2", "version": "5.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "binary-extensions", "purl": "pkg:npm/binary-extensions@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "bl", "purl": "pkg:npm/bl@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "bluebird", "purl": "pkg:npm/bluebird@3.7.2", "version": "3.7.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "body-parser", "purl": "pkg:npm/body-parser@1.19.0", "version": "1.19.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "boolean", "purl": "pkg:npm/boolean@3.1.4", "version": "3.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "boolean", "purl": "pkg:npm/boolean@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "bottleneck", "purl": "pkg:npm/bottleneck@2.19.5", "version": "2.19.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "brace-expansion", "purl": "pkg:npm/brace-expansion@1.1.11", "version": "1.1.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "brace-expansion", "purl": "pkg:npm/brace-expansion@1.1.21", "version": "1.1.21" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "brace-expansion", "purl": "pkg:npm/brace-expansion@2.1.7", "version": "2.1.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "brace-expansion", "purl": "pkg:npm/brace-expansion@5.0.12", "version": "5.0.12" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "braces", "purl": "pkg:npm/braces@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "braces", "purl": "pkg:npm/braces@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "browserify-zlib", "purl": "pkg:npm/browserify-zlib@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "browserslist", "purl": "pkg:npm/browserslist@4.21.5", "version": "4.21.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "browserslist", "purl": "pkg:npm/browserslist@4.23.0", "version": "4.23.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "bs-logger", "purl": "pkg:npm/bs-logger@0.2.6", "version": "0.2.6" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "bser", "purl": "pkg:npm/bser@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "btoa-lite", "purl": "pkg:npm/btoa-lite@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "buffer", "purl": "pkg:npm/buffer@5.7.1", "version": "5.7.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "buffer-equal-constant-time", "purl": "pkg:npm/buffer-equal-constant-time@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "buffer-from", "purl": "pkg:npm/buffer-from@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "buildcheck", "purl": "pkg:npm/buildcheck@0.0.7", "version": "0.0.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "bytes", "purl": "pkg:npm/bytes@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "c8", "purl": "pkg:npm/c8@9.1.0", "version": "9.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "cacache", "purl": "pkg:npm/cacache@18.0.3", "version": "18.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "call-bind", "purl": "pkg:npm/call-bind@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "call-bind-apply-helpers", "purl": "pkg:npm/call-bind-apply-helpers@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "callsites", "purl": "pkg:npm/callsites@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "camelcase", "purl": "pkg:npm/camelcase@5.3.1", "version": "5.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "camelcase", "purl": "pkg:npm/camelcase@6.3.0", "version": "6.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "camelcase-keys", "purl": "pkg:npm/camelcase-keys@7.0.2", "version": "7.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "caniuse-lite", "purl": "pkg:npm/caniuse-lite@1.0.30001450", "version": "1.0.30001450" }, { "ecosystem": "npm", "licenses": [ "CC-BY-4.0" ], "location": "package-lock.json", "name": "caniuse-lite", "purl": "pkg:npm/caniuse-lite@1.0.30001597", "version": "1.0.30001597" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "chalk", "purl": "pkg:npm/chalk@2.4.2", "version": "2.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "chalk", "purl": "pkg:npm/chalk@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "chalk", "purl": "pkg:npm/chalk@4.1.2", "version": "4.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "chalk", "purl": "pkg:npm/chalk@5.3.0", "version": "5.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "char-regex", "purl": "pkg:npm/char-regex@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "chardet", "purl": "pkg:npm/chardet@0.7.0", "version": "0.7.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "child-process", "purl": "pkg:npm/child-process@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "chokidar", "purl": "pkg:npm/chokidar@3.6.0", "version": "3.6.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "chownr", "purl": "pkg:npm/chownr@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chownr", "purl": "pkg:npm/chownr@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "chownr", "purl": "pkg:npm/chownr@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "chrome-trace-event", "purl": "pkg:npm/chrome-trace-event@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ci-info", "purl": "pkg:npm/ci-info@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ci-info", "purl": "pkg:npm/ci-info@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "ci-info", "purl": "pkg:npm/ci-info@3.7.1", "version": "3.7.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "cjs-module-lexer", "purl": "pkg:npm/cjs-module-lexer@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cjs-module-lexer", "purl": "pkg:npm/cjs-module-lexer@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "clean-stack", "purl": "pkg:npm/clean-stack@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cli-boxes", "purl": "pkg:npm/cli-boxes@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cli-cursor", "purl": "pkg:npm/cli-cursor@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cli-cursor", "purl": "pkg:npm/cli-cursor@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cli-spinner", "purl": "pkg:npm/cli-spinner@0.2.10", "version": "0.2.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cli-spinners", "purl": "pkg:npm/cli-spinners@2.6.0", "version": "2.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cli-truncate", "purl": "pkg:npm/cli-truncate@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "cli-width", "purl": "pkg:npm/cli-width@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "cliui", "purl": "pkg:npm/cliui@7.0.4", "version": "7.0.4" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "cliui", "purl": "pkg:npm/cliui@8.0.1", "version": "8.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "clone", "purl": "pkg:npm/clone@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "clone", "purl": "pkg:npm/clone@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "clone-deep", "purl": "pkg:npm/clone-deep@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "co", "purl": "pkg:npm/co@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "code-excerpt", "purl": "pkg:npm/code-excerpt@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "collect-v8-coverage", "purl": "pkg:npm/collect-v8-coverage@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "collect-v8-coverage", "purl": "pkg:npm/collect-v8-coverage@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "color-convert", "purl": "pkg:npm/color-convert@1.9.3", "version": "1.9.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "color-convert", "purl": "pkg:npm/color-convert@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "color-name", "purl": "pkg:npm/color-name@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "color-name", "purl": "pkg:npm/color-name@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "colorette", "purl": "pkg:npm/colorette@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "colors", "purl": "pkg:npm/colors@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "combined-stream", "purl": "pkg:npm/combined-stream@1.0.8", "version": "1.0.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@2.20.3", "version": "2.20.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@7.2.0", "version": "7.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "commander", "purl": "pkg:npm/commander@9.5.0", "version": "9.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "compare-func", "purl": "pkg:npm/compare-func@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "concat-map", "purl": "pkg:npm/concat-map@0.0.1", "version": "0.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "configstore", "purl": "pkg:npm/configstore@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "consolidate", "purl": "pkg:npm/consolidate@0.16.0", "version": "0.16.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "content-disposition", "purl": "pkg:npm/content-disposition@0.5.3", "version": "0.5.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "content-type", "purl": "pkg:npm/content-type@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "conventional-changelog", "purl": "pkg:npm/conventional-changelog@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "conventional-changelog-angular", "purl": "pkg:npm/conventional-changelog-angular@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "conventional-changelog-atom", "purl": "pkg:npm/conventional-changelog-atom@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "conventional-changelog-cli", "purl": "pkg:npm/conventional-changelog-cli@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "conventional-changelog-codemirror", "purl": "pkg:npm/conventional-changelog-codemirror@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "conventional-changelog-conventionalcommits", "purl": "pkg:npm/conventional-changelog-conventionalcommits@7.0.2", "version": "7.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "conventional-changelog-core", "purl": "pkg:npm/conventional-changelog-core@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "conventional-changelog-ember", "purl": "pkg:npm/conventional-changelog-ember@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "conventional-changelog-eslint", "purl": "pkg:npm/conventional-changelog-eslint@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "conventional-changelog-express", "purl": "pkg:npm/conventional-changelog-express@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "conventional-changelog-jquery", "purl": "pkg:npm/conventional-changelog-jquery@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "conventional-changelog-jshint", "purl": "pkg:npm/conventional-changelog-jshint@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "conventional-changelog-preset-loader", "purl": "pkg:npm/conventional-changelog-preset-loader@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "conventional-changelog-writer", "purl": "pkg:npm/conventional-changelog-writer@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "conventional-commits-filter", "purl": "pkg:npm/conventional-commits-filter@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "conventional-commits-parser", "purl": "pkg:npm/conventional-commits-parser@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "convert-source-map", "purl": "pkg:npm/convert-source-map@1.9.0", "version": "1.9.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "convert-source-map", "purl": "pkg:npm/convert-source-map@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "convert-to-spaces", "purl": "pkg:npm/convert-to-spaces@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cookie", "purl": "pkg:npm/cookie@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "cookie", "purl": "pkg:npm/cookie@0.4.2", "version": "0.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cookie-signature", "purl": "pkg:npm/cookie-signature@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "copy-webpack-plugin", "purl": "pkg:npm/copy-webpack-plugin@9.0.1", "version": "9.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "core-js", "purl": "pkg:npm/core-js@2.6.12", "version": "2.6.12" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "core-js", "purl": "pkg:npm/core-js@3.25.0", "version": "3.25.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "core-util-is", "purl": "pkg:npm/core-util-is@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cosmiconfig", "purl": "pkg:npm/cosmiconfig@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "cpu-features", "purl": "pkg:npm/cpu-features@0.0.10", "version": "0.0.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "create-jest", "purl": "pkg:npm/create-jest@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "create-require", "purl": "pkg:npm/create-require@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cross-spawn", "purl": "pkg:npm/cross-spawn@6.0.5", "version": "6.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cross-spawn", "purl": "pkg:npm/cross-spawn@6.0.6", "version": "6.0.6" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "cross-spawn", "purl": "pkg:npm/cross-spawn@7.0.3", "version": "7.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cross-spawn", "purl": "pkg:npm/cross-spawn@7.0.6", "version": "7.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "crypto-random-string", "purl": "pkg:npm/crypto-random-string@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "cssesc", "purl": "pkg:npm/cssesc@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "danger", "purl": "pkg:npm/danger@10.9.0", "version": "10.9.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "dargs", "purl": "pkg:npm/dargs@8.1.0", "version": "8.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "debug", "purl": "pkg:npm/debug@2.6.9", "version": "2.6.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "debug", "purl": "pkg:npm/debug@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "debug", "purl": "pkg:npm/debug@3.2.7", "version": "3.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "debug", "purl": "pkg:npm/debug@4.3.4", "version": "4.3.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "debug", "purl": "pkg:npm/debug@4.4.3", "version": "4.4.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "decamelize", "purl": "pkg:npm/decamelize@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "decamelize", "purl": "pkg:npm/decamelize@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "decamelize-keys", "purl": "pkg:npm/decamelize-keys@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "decode-uri-component", "purl": "pkg:npm/decode-uri-component@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "decompress-response", "purl": "pkg:npm/decompress-response@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "dedent", "purl": "pkg:npm/dedent@0.7.0", "version": "0.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "dedent", "purl": "pkg:npm/dedent@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "deep-extend", "purl": "pkg:npm/deep-extend@0.6.0", "version": "0.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "deep-is", "purl": "pkg:npm/deep-is@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "deepmerge", "purl": "pkg:npm/deepmerge@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "deepmerge", "purl": "pkg:npm/deepmerge@4.3.1", "version": "4.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "defaults", "purl": "pkg:npm/defaults@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "define-properties", "purl": "pkg:npm/define-properties@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "define-properties", "purl": "pkg:npm/define-properties@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "delayed-stream", "purl": "pkg:npm/delayed-stream@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "depcheck", "purl": "pkg:npm/depcheck@1.4.3", "version": "1.4.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "depd", "purl": "pkg:npm/depd@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "dependency-path", "purl": "pkg:npm/dependency-path@9.2.8", "version": "9.2.8" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "deprecation", "purl": "pkg:npm/deprecation@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "deps-regex", "purl": "pkg:npm/deps-regex@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "destroy", "purl": "pkg:npm/destroy@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "detect-libc", "purl": "pkg:npm/detect-libc@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "detect-newline", "purl": "pkg:npm/detect-newline@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "detect-node", "purl": "pkg:npm/detect-node@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "diff", "purl": "pkg:npm/diff@3.5.0", "version": "3.5.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "diff", "purl": "pkg:npm/diff@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "diff", "purl": "pkg:npm/diff@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "diff-sequences", "purl": "pkg:npm/diff-sequences@27.4.0", "version": "27.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "diff-sequences", "purl": "pkg:npm/diff-sequences@29.3.1", "version": "29.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "diff-sequences", "purl": "pkg:npm/diff-sequences@29.6.3", "version": "29.6.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "dir-glob", "purl": "pkg:npm/dir-glob@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "docker-modem", "purl": "pkg:npm/docker-modem@3.0.8", "version": "3.0.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "dockerfile-ast", "purl": "pkg:npm/dockerfile-ast@0.7.1", "version": "0.7.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "doctrine", "purl": "pkg:npm/doctrine@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "dot-prop", "purl": "pkg:npm/dot-prop@5.3.0", "version": "5.3.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "dotnet-deps-parser", "purl": "pkg:npm/dotnet-deps-parser@6.1.7", "version": "6.1.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "dunder-proto", "purl": "pkg:npm/dunder-proto@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "duplexer2", "purl": "pkg:npm/duplexer2@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "duplexify", "purl": "pkg:npm/duplexify@3.7.1", "version": "3.7.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "eastasianwidth", "purl": "pkg:npm/eastasianwidth@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "ecdsa-sig-formatter", "purl": "pkg:npm/ecdsa-sig-formatter@1.0.11", "version": "1.0.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ee-first", "purl": "pkg:npm/ee-first@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "electron-to-chromium", "purl": "pkg:npm/electron-to-chromium@1.4.286", "version": "1.4.286" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "electron-to-chromium", "purl": "pkg:npm/electron-to-chromium@1.4.701", "version": "1.4.701" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "elfy", "purl": "pkg:npm/elfy@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "email-validator", "purl": "pkg:npm/email-validator@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "emittery", "purl": "pkg:npm/emittery@0.13.1", "version": "0.13.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "emoji-regex", "purl": "pkg:npm/emoji-regex@7.0.3", "version": "7.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "emoji-regex", "purl": "pkg:npm/emoji-regex@8.0.0", "version": "8.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "emoji-regex", "purl": "pkg:npm/emoji-regex@9.2.2", "version": "9.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "emojis-list", "purl": "pkg:npm/emojis-list@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "encode-registry", "purl": "pkg:npm/encode-registry@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "encodeurl", "purl": "pkg:npm/encodeurl@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "encoding", "purl": "pkg:npm/encoding@0.1.13", "version": "0.1.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "end-of-stream", "purl": "pkg:npm/end-of-stream@1.4.4", "version": "1.4.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "endian-reader", "purl": "pkg:npm/endian-reader@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "enhanced-resolve", "purl": "pkg:npm/enhanced-resolve@5.15.0", "version": "5.15.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "enquirer", "purl": "pkg:npm/enquirer@2.3.6", "version": "2.3.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "env-paths", "purl": "pkg:npm/env-paths@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "envinfo", "purl": "pkg:npm/envinfo@7.8.1", "version": "7.8.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "err-code", "purl": "pkg:npm/err-code@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "error-ex", "purl": "pkg:npm/error-ex@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "es-abstract", "purl": "pkg:npm/es-abstract@1.18.5", "version": "1.18.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "es-define-property", "purl": "pkg:npm/es-define-property@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "es-errors", "purl": "pkg:npm/es-errors@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "es-module-lexer", "purl": "pkg:npm/es-module-lexer@0.9.3", "version": "0.9.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "es-object-atoms", "purl": "pkg:npm/es-object-atoms@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "es-to-primitive", "purl": "pkg:npm/es-to-primitive@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "es6-error", "purl": "pkg:npm/es6-error@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "es6-promise", "purl": "pkg:npm/es6-promise@4.2.8", "version": "4.2.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "es6-promisify", "purl": "pkg:npm/es6-promisify@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "esbuild", "purl": "pkg:npm/esbuild@0.28.1", "version": "0.28.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "escalade", "purl": "pkg:npm/escalade@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "escape-html", "purl": "pkg:npm/escape-html@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "escape-string-regexp", "purl": "pkg:npm/escape-string-regexp@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "escape-string-regexp", "purl": "pkg:npm/escape-string-regexp@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "escape-string-regexp", "purl": "pkg:npm/escape-string-regexp@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "eslint", "purl": "pkg:npm/eslint@6.8.0", "version": "6.8.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "eslint-config-prettier", "purl": "pkg:npm/eslint-config-prettier@6.15.0", "version": "6.15.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "eslint-plugin-anti-trojan-source", "purl": "pkg:npm/eslint-plugin-anti-trojan-source@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "eslint-plugin-jest", "purl": "pkg:npm/eslint-plugin-jest@24.4.0", "version": "24.4.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "eslint-scope", "purl": "pkg:npm/eslint-scope@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "eslint-utils", "purl": "pkg:npm/eslint-utils@1.4.3", "version": "1.4.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "eslint-utils", "purl": "pkg:npm/eslint-utils@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "eslint-visitor-keys", "purl": "pkg:npm/eslint-visitor-keys@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "eslint-visitor-keys", "purl": "pkg:npm/eslint-visitor-keys@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "espree", "purl": "pkg:npm/espree@6.2.1", "version": "6.2.1" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "esprima", "purl": "pkg:npm/esprima@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "esquery", "purl": "pkg:npm/esquery@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "esrecurse", "purl": "pkg:npm/esrecurse@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "estraverse", "purl": "pkg:npm/estraverse@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "estraverse", "purl": "pkg:npm/estraverse@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "estree-walker", "purl": "pkg:npm/estree-walker@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "esutils", "purl": "pkg:npm/esutils@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "etag", "purl": "pkg:npm/etag@1.8.1", "version": "1.8.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "event-loop-spinner", "purl": "pkg:npm/event-loop-spinner@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "event-target-shim", "purl": "pkg:npm/event-target-shim@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "events", "purl": "pkg:npm/events@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "events-to-array", "purl": "pkg:npm/events-to-array@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "events-universal", "purl": "pkg:npm/events-universal@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "execa", "purl": "pkg:npm/execa@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "execa", "purl": "pkg:npm/execa@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "exit", "purl": "pkg:npm/exit@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT OR WTFPL" ], "location": "package-lock.json", "name": "expand-template", "purl": "pkg:npm/expand-template@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "expand-tilde", "purl": "pkg:npm/expand-tilde@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "expect", "purl": "pkg:npm/expect@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "expect", "purl": "pkg:npm/expect@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "exponential-backoff", "purl": "pkg:npm/exponential-backoff@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "express", "purl": "pkg:npm/express@4.17.1", "version": "4.17.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "extend-shallow", "purl": "pkg:npm/extend-shallow@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "external-editor", "purl": "pkg:npm/external-editor@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fast-deep-equal", "purl": "pkg:npm/fast-deep-equal@3.1.3", "version": "3.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fast-fifo", "purl": "pkg:npm/fast-fifo@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fast-glob", "purl": "pkg:npm/fast-glob@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fast-glob", "purl": "pkg:npm/fast-glob@3.3.3", "version": "3.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fast-json-patch", "purl": "pkg:npm/fast-json-patch@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fast-json-stable-stringify", "purl": "pkg:npm/fast-json-stable-stringify@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fast-levenshtein", "purl": "pkg:npm/fast-levenshtein@2.0.6", "version": "2.0.6" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "fast-uri", "purl": "pkg:npm/fast-uri@3.0.6", "version": "3.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fastest-levenshtein", "purl": "pkg:npm/fastest-levenshtein@1.0.12", "version": "1.0.12" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "fastq", "purl": "pkg:npm/fastq@1.12.0", "version": "1.12.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "fb-watchman", "purl": "pkg:npm/fb-watchman@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fdir", "purl": "pkg:npm/fdir@6.4.5", "version": "6.4.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "figures", "purl": "pkg:npm/figures@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "file-entry-cache", "purl": "pkg:npm/file-entry-cache@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fill-keys", "purl": "pkg:npm/fill-keys@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "fill-range", "purl": "pkg:npm/fill-range@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fill-range", "purl": "pkg:npm/fill-range@7.1.1", "version": "7.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "filter-obj", "purl": "pkg:npm/filter-obj@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "finalhandler", "purl": "pkg:npm/finalhandler@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "find-up", "purl": "pkg:npm/find-up@6.3.0", "version": "6.3.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "find-yarn-workspace-root", "purl": "pkg:npm/find-yarn-workspace-root@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "flat-cache", "purl": "pkg:npm/flat-cache@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "flatted", "purl": "pkg:npm/flatted@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "foreground-child", "purl": "pkg:npm/foreground-child@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "form-data", "purl": "pkg:npm/form-data@2.5.1", "version": "2.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "forwarded", "purl": "pkg:npm/forwarded@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fresh", "purl": "pkg:npm/fresh@0.5.2", "version": "0.5.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fromentries", "purl": "pkg:npm/fromentries@1.3.2", "version": "1.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fs-constants", "purl": "pkg:npm/fs-constants@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fs-exists-sync", "purl": "pkg:npm/fs-exists-sync@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@11.3.4", "version": "11.3.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fs-extra", "purl": "pkg:npm/fs-extra@9.1.0", "version": "9.1.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "fs-minipass", "purl": "pkg:npm/fs-minipass@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "fs-minipass", "purl": "pkg:npm/fs-minipass@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "fs.realpath", "purl": "pkg:npm/fs.realpath@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fsevents", "purl": "pkg:npm/fsevents@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "function-bind", "purl": "pkg:npm/function-bind@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "function-bind", "purl": "pkg:npm/function-bind@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "function-loop", "purl": "pkg:npm/function-loop@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "functional-red-black-tree", "purl": "pkg:npm/functional-red-black-tree@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "fzstd", "purl": "pkg:npm/fzstd@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "generic-names", "purl": "pkg:npm/generic-names@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "gensync", "purl": "pkg:npm/gensync@1.0.0-beta.2", "version": "1.0.0-beta.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "get-caller-file", "purl": "pkg:npm/get-caller-file@2.0.5", "version": "2.0.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "get-intrinsic", "purl": "pkg:npm/get-intrinsic@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "get-intrinsic", "purl": "pkg:npm/get-intrinsic@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "get-npm-tarball-url", "purl": "pkg:npm/get-npm-tarball-url@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "get-package-type", "purl": "pkg:npm/get-package-type@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "get-proto", "purl": "pkg:npm/get-proto@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "get-stdin", "purl": "pkg:npm/get-stdin@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "get-stream", "purl": "pkg:npm/get-stream@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "get-stream", "purl": "pkg:npm/get-stream@6.0.1", "version": "6.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "git-config-path", "purl": "pkg:npm/git-config-path@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "git-raw-commits", "purl": "pkg:npm/git-raw-commits@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "git-semver-tags", "purl": "pkg:npm/git-semver-tags@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "github-from-package", "purl": "pkg:npm/github-from-package@0.0.0", "version": "0.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "gitlab", "purl": "pkg:npm/gitlab@10.2.1", "version": "10.2.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "glob", "purl": "pkg:npm/glob@10.4.1", "version": "10.4.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "glob", "purl": "pkg:npm/glob@7.2.3", "version": "7.2.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "glob-parent", "purl": "pkg:npm/glob-parent@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "glob-parent", "purl": "pkg:npm/glob-parent@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "glob-to-regexp", "purl": "pkg:npm/glob-to-regexp@0.4.1", "version": "0.4.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "global-agent", "purl": "pkg:npm/global-agent@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "global-agent", "purl": "pkg:npm/global-agent@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "globals", "purl": "pkg:npm/globals@11.12.0", "version": "11.12.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "globals", "purl": "pkg:npm/globals@12.4.0", "version": "12.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "globalthis", "purl": "pkg:npm/globalthis@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "globalthis", "purl": "pkg:npm/globalthis@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "globby", "purl": "pkg:npm/globby@11.1.0", "version": "11.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "globby", "purl": "pkg:npm/globby@12.2.0", "version": "12.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "gopd", "purl": "pkg:npm/gopd@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "graceful-fs", "purl": "pkg:npm/graceful-fs@4.2.10", "version": "4.2.10" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "graceful-fs", "purl": "pkg:npm/graceful-fs@4.2.11", "version": "4.2.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "gunzip-maybe", "purl": "pkg:npm/gunzip-maybe@1.4.2", "version": "1.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "handlebars", "purl": "pkg:npm/handlebars@4.7.8", "version": "4.7.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "hard-rejection", "purl": "pkg:npm/hard-rejection@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "has", "purl": "pkg:npm/has@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "has-bigints", "purl": "pkg:npm/has-bigints@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "has-flag", "purl": "pkg:npm/has-flag@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "has-flag", "purl": "pkg:npm/has-flag@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "has-flag", "purl": "pkg:npm/has-flag@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "has-property-descriptors", "purl": "pkg:npm/has-property-descriptors@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "has-symbols", "purl": "pkg:npm/has-symbols@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "has-symbols", "purl": "pkg:npm/has-symbols@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "has-tostringtag", "purl": "pkg:npm/has-tostringtag@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "hash-sum", "purl": "pkg:npm/hash-sum@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "hasown", "purl": "pkg:npm/hasown@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "hasurl", "purl": "pkg:npm/hasurl@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "homedir-polyfill", "purl": "pkg:npm/homedir-polyfill@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "hosted-git-info", "purl": "pkg:npm/hosted-git-info@2.8.9", "version": "2.8.9" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "hosted-git-info", "purl": "pkg:npm/hosted-git-info@3.0.8", "version": "3.0.8" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "hosted-git-info", "purl": "pkg:npm/hosted-git-info@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "hosted-git-info", "purl": "pkg:npm/hosted-git-info@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "hosted-git-info", "purl": "pkg:npm/hosted-git-info@7.0.2", "version": "7.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "html-escaper", "purl": "pkg:npm/html-escaper@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "http-cache-semantics", "purl": "pkg:npm/http-cache-semantics@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "http-errors", "purl": "pkg:npm/http-errors@1.7.2", "version": "1.7.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "http-errors", "purl": "pkg:npm/http-errors@1.7.3", "version": "1.7.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "http-proxy-agent", "purl": "pkg:npm/http-proxy-agent@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "http-proxy-agent", "purl": "pkg:npm/http-proxy-agent@7.0.2", "version": "7.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "https-proxy-agent", "purl": "pkg:npm/https-proxy-agent@2.2.4", "version": "2.2.4" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "https-proxy-agent", "purl": "pkg:npm/https-proxy-agent@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "https-proxy-agent", "purl": "pkg:npm/https-proxy-agent@7.0.4", "version": "7.0.4" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "human-signals", "purl": "pkg:npm/human-signals@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "humps", "purl": "pkg:npm/humps@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "hyperlinker", "purl": "pkg:npm/hyperlinker@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "iconv-lite", "purl": "pkg:npm/iconv-lite@0.4.24", "version": "0.4.24" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "iconv-lite", "purl": "pkg:npm/iconv-lite@0.6.3", "version": "0.6.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "icss-replace-symbols", "purl": "pkg:npm/icss-replace-symbols@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "icss-utils", "purl": "pkg:npm/icss-utils@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "ieee754", "purl": "pkg:npm/ieee754@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ignore", "purl": "pkg:npm/ignore@4.0.6", "version": "4.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ignore", "purl": "pkg:npm/ignore@5.2.4", "version": "5.2.4" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "ignore-walk", "purl": "pkg:npm/ignore-walk@6.0.5", "version": "6.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "immediate", "purl": "pkg:npm/immediate@3.0.6", "version": "3.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "import-fresh", "purl": "pkg:npm/import-fresh@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "import-local", "purl": "pkg:npm/import-local@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "import-local", "purl": "pkg:npm/import-local@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "imurmurhash", "purl": "pkg:npm/imurmurhash@0.1.4", "version": "0.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "indent-string", "purl": "pkg:npm/indent-string@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "indent-string", "purl": "pkg:npm/indent-string@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "inflight", "purl": "pkg:npm/inflight@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "inherits", "purl": "pkg:npm/inherits@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "inherits", "purl": "pkg:npm/inherits@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "ini", "purl": "pkg:npm/ini@1.3.8", "version": "1.3.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ink", "purl": "pkg:npm/ink@4.4.1", "version": "4.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "inquirer", "purl": "pkg:npm/inquirer@7.3.3", "version": "7.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "internal-slot", "purl": "pkg:npm/internal-slot@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "interpret", "purl": "pkg:npm/interpret@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "into-stream", "purl": "pkg:npm/into-stream@9.1.0", "version": "9.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "invariant", "purl": "pkg:npm/invariant@2.2.4", "version": "2.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ip-address", "purl": "pkg:npm/ip-address@9.0.5", "version": "9.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ipaddr.js", "purl": "pkg:npm/ipaddr.js@1.9.1", "version": "1.9.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "is-actual-promise", "purl": "pkg:npm/is-actual-promise@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-arrayish", "purl": "pkg:npm/is-arrayish@0.2.1", "version": "0.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-bigint", "purl": "pkg:npm/is-bigint@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-binary-path", "purl": "pkg:npm/is-binary-path@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-boolean-object", "purl": "pkg:npm/is-boolean-object@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-callable", "purl": "pkg:npm/is-callable@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-ci", "purl": "pkg:npm/is-ci@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-ci", "purl": "pkg:npm/is-ci@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "is-core-module", "purl": "pkg:npm/is-core-module@2.11.0", "version": "2.11.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-core-module", "purl": "pkg:npm/is-core-module@2.16.1", "version": "2.16.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-date-object", "purl": "pkg:npm/is-date-object@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-deflate", "purl": "pkg:npm/is-deflate@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-docker", "purl": "pkg:npm/is-docker@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-extendable", "purl": "pkg:npm/is-extendable@0.1.1", "version": "0.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-extglob", "purl": "pkg:npm/is-extglob@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-fullwidth-code-point", "purl": "pkg:npm/is-fullwidth-code-point@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-fullwidth-code-point", "purl": "pkg:npm/is-fullwidth-code-point@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-fullwidth-code-point", "purl": "pkg:npm/is-fullwidth-code-point@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-generator-fn", "purl": "pkg:npm/is-generator-fn@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-glob", "purl": "pkg:npm/is-glob@4.0.3", "version": "4.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-gzip", "purl": "pkg:npm/is-gzip@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-interactive", "purl": "pkg:npm/is-interactive@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-lambda", "purl": "pkg:npm/is-lambda@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-lower-case", "purl": "pkg:npm/is-lower-case@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-negative-zero", "purl": "pkg:npm/is-negative-zero@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-number", "purl": "pkg:npm/is-number@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-number-object", "purl": "pkg:npm/is-number-object@1.0.6", "version": "1.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-obj", "purl": "pkg:npm/is-obj@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-object", "purl": "pkg:npm/is-object@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-plain-obj", "purl": "pkg:npm/is-plain-obj@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-plain-object", "purl": "pkg:npm/is-plain-object@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-plain-object", "purl": "pkg:npm/is-plain-object@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-regex", "purl": "pkg:npm/is-regex@1.1.4", "version": "1.1.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-stream", "purl": "pkg:npm/is-stream@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-stream", "purl": "pkg:npm/is-stream@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-string", "purl": "pkg:npm/is-string@1.0.7", "version": "1.0.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-symbol", "purl": "pkg:npm/is-symbol@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-text-path", "purl": "pkg:npm/is-text-path@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-typedarray", "purl": "pkg:npm/is-typedarray@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-unicode-supported", "purl": "pkg:npm/is-unicode-supported@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-upper-case", "purl": "pkg:npm/is-upper-case@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "is-wsl", "purl": "pkg:npm/is-wsl@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "isarray", "purl": "pkg:npm/isarray@0.0.1", "version": "0.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "isarray", "purl": "pkg:npm/isarray@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "isexe", "purl": "pkg:npm/isexe@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "isexe", "purl": "pkg:npm/isexe@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "isexe", "purl": "pkg:npm/isexe@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "isobject", "purl": "pkg:npm/isobject@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "istanbul-lib-coverage", "purl": "pkg:npm/istanbul-lib-coverage@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "istanbul-lib-instrument", "purl": "pkg:npm/istanbul-lib-instrument@5.2.1", "version": "5.2.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "istanbul-lib-instrument", "purl": "pkg:npm/istanbul-lib-instrument@6.0.2", "version": "6.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "istanbul-lib-report", "purl": "pkg:npm/istanbul-lib-report@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "istanbul-lib-report", "purl": "pkg:npm/istanbul-lib-report@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "istanbul-lib-source-maps", "purl": "pkg:npm/istanbul-lib-source-maps@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "istanbul-reports", "purl": "pkg:npm/istanbul-reports@3.1.5", "version": "3.1.5" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "istanbul-reports", "purl": "pkg:npm/istanbul-reports@3.1.6", "version": "3.1.6" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "jackspeak", "purl": "pkg:npm/jackspeak@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest", "purl": "pkg:npm/jest@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest", "purl": "pkg:npm/jest@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-changed-files", "purl": "pkg:npm/jest-changed-files@29.4.0", "version": "29.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-changed-files", "purl": "pkg:npm/jest-changed-files@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-circus", "purl": "pkg:npm/jest-circus@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-circus", "purl": "pkg:npm/jest-circus@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-cli", "purl": "pkg:npm/jest-cli@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-cli", "purl": "pkg:npm/jest-cli@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-config", "purl": "pkg:npm/jest-config@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-config", "purl": "pkg:npm/jest-config@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-diff", "purl": "pkg:npm/jest-diff@27.4.6", "version": "27.4.6" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-diff", "purl": "pkg:npm/jest-diff@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-diff", "purl": "pkg:npm/jest-diff@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-docblock", "purl": "pkg:npm/jest-docblock@29.2.0", "version": "29.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-docblock", "purl": "pkg:npm/jest-docblock@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-each", "purl": "pkg:npm/jest-each@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-each", "purl": "pkg:npm/jest-each@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-environment-node", "purl": "pkg:npm/jest-environment-node@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-environment-node", "purl": "pkg:npm/jest-environment-node@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-get-type", "purl": "pkg:npm/jest-get-type@27.4.0", "version": "27.4.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-get-type", "purl": "pkg:npm/jest-get-type@29.2.0", "version": "29.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-get-type", "purl": "pkg:npm/jest-get-type@29.6.3", "version": "29.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-haste-map", "purl": "pkg:npm/jest-haste-map@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-haste-map", "purl": "pkg:npm/jest-haste-map@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "jest-json-schema", "purl": "pkg:npm/jest-json-schema@6.1.0", "version": "6.1.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "jest-junit", "purl": "pkg:npm/jest-junit@16.0.0", "version": "16.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-leak-detector", "purl": "pkg:npm/jest-leak-detector@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-leak-detector", "purl": "pkg:npm/jest-leak-detector@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-matcher-utils", "purl": "pkg:npm/jest-matcher-utils@27.4.6", "version": "27.4.6" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-matcher-utils", "purl": "pkg:npm/jest-matcher-utils@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-matcher-utils", "purl": "pkg:npm/jest-matcher-utils@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-message-util", "purl": "pkg:npm/jest-message-util@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-message-util", "purl": "pkg:npm/jest-message-util@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-mock", "purl": "pkg:npm/jest-mock@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-mock", "purl": "pkg:npm/jest-mock@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-pnp-resolver", "purl": "pkg:npm/jest-pnp-resolver@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-regex-util", "purl": "pkg:npm/jest-regex-util@29.2.0", "version": "29.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-regex-util", "purl": "pkg:npm/jest-regex-util@29.6.3", "version": "29.6.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-resolve", "purl": "pkg:npm/jest-resolve@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-resolve", "purl": "pkg:npm/jest-resolve@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-resolve-dependencies", "purl": "pkg:npm/jest-resolve-dependencies@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-resolve-dependencies", "purl": "pkg:npm/jest-resolve-dependencies@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-runner", "purl": "pkg:npm/jest-runner@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-runner", "purl": "pkg:npm/jest-runner@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-runtime", "purl": "pkg:npm/jest-runtime@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-runtime", "purl": "pkg:npm/jest-runtime@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-snapshot", "purl": "pkg:npm/jest-snapshot@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-snapshot", "purl": "pkg:npm/jest-snapshot@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-util", "purl": "pkg:npm/jest-util@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-util", "purl": "pkg:npm/jest-util@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-validate", "purl": "pkg:npm/jest-validate@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-validate", "purl": "pkg:npm/jest-validate@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-watcher", "purl": "pkg:npm/jest-watcher@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-watcher", "purl": "pkg:npm/jest-watcher@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-worker", "purl": "pkg:npm/jest-worker@27.4.6", "version": "27.4.6" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "jest-worker", "purl": "pkg:npm/jest-worker@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jest-worker", "purl": "pkg:npm/jest-worker@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "js-tokens", "purl": "pkg:npm/js-tokens@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@3.14.1", "version": "3.14.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@3.15.2", "version": "3.15.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@4.3.2", "version": "4.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "js-yaml", "purl": "pkg:npm/js-yaml@5.4.2", "version": "5.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jsbn", "purl": "pkg:npm/jsbn@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jsesc", "purl": "pkg:npm/jsesc@2.5.2", "version": "2.5.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jsesc", "purl": "pkg:npm/jsesc@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json-parse-better-errors", "purl": "pkg:npm/json-parse-better-errors@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json-parse-even-better-errors", "purl": "pkg:npm/json-parse-even-better-errors@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json-parse-even-better-errors", "purl": "pkg:npm/json-parse-even-better-errors@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json-parse-even-better-errors", "purl": "pkg:npm/json-parse-even-better-errors@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json-schema-traverse", "purl": "pkg:npm/json-schema-traverse@0.4.1", "version": "0.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json-schema-traverse", "purl": "pkg:npm/json-schema-traverse@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json-stable-stringify-without-jsonify", "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json-stream-stringify", "purl": "pkg:npm/json-stream-stringify@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "json-stringify-safe", "purl": "pkg:npm/json-stringify-safe@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json5", "purl": "pkg:npm/json5@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "json5", "purl": "pkg:npm/json5@2.2.3", "version": "2.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jsonc-parser", "purl": "pkg:npm/jsonc-parser@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jsonfile", "purl": "pkg:npm/jsonfile@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jsonfile", "purl": "pkg:npm/jsonfile@6.1.0", "version": "6.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jsonparse", "purl": "pkg:npm/jsonparse@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jsonpointer", "purl": "pkg:npm/jsonpointer@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT OR Apache-2.0" ], "location": "package-lock.json", "name": "JSONStream", "purl": "pkg:npm/JSONStream@1.3.5", "version": "1.3.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jsonwebtoken", "purl": "pkg:npm/jsonwebtoken@8.5.1", "version": "8.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT OR GPL-3.0-or-later" ], "location": "package-lock.json", "name": "jszip", "purl": "pkg:npm/jszip@3.10.1", "version": "3.10.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "just-extend", "purl": "pkg:npm/just-extend@4.2.1", "version": "4.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jwa", "purl": "pkg:npm/jwa@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "jws", "purl": "pkg:npm/jws@3.2.2", "version": "3.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "kind-of", "purl": "pkg:npm/kind-of@6.0.3", "version": "6.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "klaw-sync", "purl": "pkg:npm/klaw-sync@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "kleur", "purl": "pkg:npm/kleur@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ky", "purl": "pkg:npm/ky@0.12.0", "version": "0.12.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ky-universal", "purl": "pkg:npm/ky-universal@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "leven", "purl": "pkg:npm/leven@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "levn", "purl": "pkg:npm/levn@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "li", "purl": "pkg:npm/li@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lie", "purl": "pkg:npm/lie@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lie", "purl": "pkg:npm/lie@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lines-and-columns", "purl": "pkg:npm/lines-and-columns@1.1.6", "version": "1.1.6" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "lines-and-columns", "purl": "pkg:npm/lines-and-columns@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lines-and-columns", "purl": "pkg:npm/lines-and-columns@2.0.4", "version": "2.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "load-json-file", "purl": "pkg:npm/load-json-file@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "loader-runner", "purl": "pkg:npm/loader-runner@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "loader-utils", "purl": "pkg:npm/loader-utils@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "loader-utils", "purl": "pkg:npm/loader-utils@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "localforage", "purl": "pkg:npm/localforage@1.10.0", "version": "1.10.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "locate-path", "purl": "pkg:npm/locate-path@7.2.0", "version": "7.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "lodash", "purl": "pkg:npm/lodash@4.18.1", "version": "4.18.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.assign", "purl": "pkg:npm/lodash.assign@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.camelcase", "purl": "pkg:npm/lodash.camelcase@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.capitalize", "purl": "pkg:npm/lodash.capitalize@4.2.1", "version": "4.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.clone", "purl": "pkg:npm/lodash.clone@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.clonedeep", "purl": "pkg:npm/lodash.clonedeep@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.constant", "purl": "pkg:npm/lodash.constant@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.filter", "purl": "pkg:npm/lodash.filter@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.find", "purl": "pkg:npm/lodash.find@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.findkey", "purl": "pkg:npm/lodash.findkey@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.flatmap", "purl": "pkg:npm/lodash.flatmap@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.flatten", "purl": "pkg:npm/lodash.flatten@4.4.0", "version": "4.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.foreach", "purl": "pkg:npm/lodash.foreach@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.get", "purl": "pkg:npm/lodash.get@4.4.2", "version": "4.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.groupby", "purl": "pkg:npm/lodash.groupby@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.has", "purl": "pkg:npm/lodash.has@4.5.2", "version": "4.5.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.includes", "purl": "pkg:npm/lodash.includes@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.invert", "purl": "pkg:npm/lodash.invert@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isboolean", "purl": "pkg:npm/lodash.isboolean@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isempty", "purl": "pkg:npm/lodash.isempty@4.4.0", "version": "4.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isequal", "purl": "pkg:npm/lodash.isequal@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isfunction", "purl": "pkg:npm/lodash.isfunction@3.0.9", "version": "3.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isinteger", "purl": "pkg:npm/lodash.isinteger@4.0.4", "version": "4.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isnumber", "purl": "pkg:npm/lodash.isnumber@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isobject", "purl": "pkg:npm/lodash.isobject@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isplainobject", "purl": "pkg:npm/lodash.isplainobject@4.0.6", "version": "4.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isstring", "purl": "pkg:npm/lodash.isstring@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.isundefined", "purl": "pkg:npm/lodash.isundefined@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.keys", "purl": "pkg:npm/lodash.keys@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.map", "purl": "pkg:npm/lodash.map@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.mapvalues", "purl": "pkg:npm/lodash.mapvalues@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.memoize", "purl": "pkg:npm/lodash.memoize@4.1.2", "version": "4.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.merge", "purl": "pkg:npm/lodash.merge@4.6.2", "version": "4.6.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.omit", "purl": "pkg:npm/lodash.omit@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.once", "purl": "pkg:npm/lodash.once@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.orderby", "purl": "pkg:npm/lodash.orderby@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.pick", "purl": "pkg:npm/lodash.pick@4.4.0", "version": "4.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.reduce", "purl": "pkg:npm/lodash.reduce@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.set", "purl": "pkg:npm/lodash.set@4.3.2", "version": "4.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.size", "purl": "pkg:npm/lodash.size@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.sortby", "purl": "pkg:npm/lodash.sortby@4.7.0", "version": "4.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.topairs", "purl": "pkg:npm/lodash.topairs@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.transform", "purl": "pkg:npm/lodash.transform@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.union", "purl": "pkg:npm/lodash.union@4.6.0", "version": "4.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.uniq", "purl": "pkg:npm/lodash.uniq@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.upperfirst", "purl": "pkg:npm/lodash.upperfirst@4.3.1", "version": "4.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lodash.values", "purl": "pkg:npm/lodash.values@4.3.0", "version": "4.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "log-symbols", "purl": "pkg:npm/log-symbols@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "lolex", "purl": "pkg:npm/lolex@2.7.5", "version": "2.7.5" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "lolex", "purl": "pkg:npm/lolex@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "lookpath", "purl": "pkg:npm/lookpath@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "loose-envify", "purl": "pkg:npm/loose-envify@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@10.1.0", "version": "10.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@10.2.2", "version": "10.2.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@4.1.5", "version": "4.1.5" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "lru-cache", "purl": "pkg:npm/lru-cache@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "lru_map", "purl": "pkg:npm/lru_map@0.3.3", "version": "0.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "macos-release", "purl": "pkg:npm/macos-release@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "macos-release", "purl": "pkg:npm/macos-release@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "magic-string", "purl": "pkg:npm/magic-string@0.25.7", "version": "0.25.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "make-dir", "purl": "pkg:npm/make-dir@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "make-dir", "purl": "pkg:npm/make-dir@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "make-error", "purl": "pkg:npm/make-error@1.3.6", "version": "1.3.6" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "make-fetch-happen", "purl": "pkg:npm/make-fetch-happen@13.0.1", "version": "13.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "makeerror", "purl": "pkg:npm/makeerror@1.0.12", "version": "1.0.12" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "map-age-cleaner", "purl": "pkg:npm/map-age-cleaner@0.1.3", "version": "0.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "map-obj", "purl": "pkg:npm/map-obj@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "map-obj", "purl": "pkg:npm/map-obj@4.2.1", "version": "4.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "marked", "purl": "pkg:npm/marked@4.0.10", "version": "4.0.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "matcher", "purl": "pkg:npm/matcher@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "math-intrinsics", "purl": "pkg:npm/math-intrinsics@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "media-typer", "purl": "pkg:npm/media-typer@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mem", "purl": "pkg:npm/mem@8.1.1", "version": "8.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "memfs-or-file-map-to-github-branch", "purl": "pkg:npm/memfs-or-file-map-to-github-branch@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "memorystream", "purl": "pkg:npm/memorystream@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "meow", "purl": "pkg:npm/meow@10.1.5", "version": "10.1.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "meow", "purl": "pkg:npm/meow@12.1.1", "version": "12.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "merge-descriptors", "purl": "pkg:npm/merge-descriptors@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "merge-source-map", "purl": "pkg:npm/merge-source-map@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "merge-stream", "purl": "pkg:npm/merge-stream@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "merge2", "purl": "pkg:npm/merge2@1.4.1", "version": "1.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "methods", "purl": "pkg:npm/methods@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "micromatch", "purl": "pkg:npm/micromatch@4.0.5", "version": "4.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "micromatch", "purl": "pkg:npm/micromatch@4.0.8", "version": "4.0.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mime", "purl": "pkg:npm/mime@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mime-db", "purl": "pkg:npm/mime-db@1.49.0", "version": "1.49.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mime-types", "purl": "pkg:npm/mime-types@2.1.32", "version": "2.1.32" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mimic-fn", "purl": "pkg:npm/mimic-fn@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mimic-fn", "purl": "pkg:npm/mimic-fn@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mimic-response", "purl": "pkg:npm/mimic-response@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "min-indent", "purl": "pkg:npm/min-indent@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@10.2.5", "version": "10.2.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@3.1.3", "version": "3.1.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@9.0.4", "version": "9.0.4" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minimatch", "purl": "pkg:npm/minimatch@9.0.9", "version": "9.0.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "minimist", "purl": "pkg:npm/minimist@1.2.6", "version": "1.2.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "minimist-options", "purl": "pkg:npm/minimist-options@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "minipass", "purl": "pkg:npm/minipass@3.3.6", "version": "3.3.6" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minipass", "purl": "pkg:npm/minipass@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "minipass", "purl": "pkg:npm/minipass@7.1.2", "version": "7.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minipass", "purl": "pkg:npm/minipass@7.1.3", "version": "7.1.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "minipass-collect", "purl": "pkg:npm/minipass-collect@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "minipass-fetch", "purl": "pkg:npm/minipass-fetch@3.0.5", "version": "3.0.5" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "minipass-flush", "purl": "pkg:npm/minipass-flush@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "minipass-json-stream", "purl": "pkg:npm/minipass-json-stream@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "minipass-pipeline", "purl": "pkg:npm/minipass-pipeline@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "minipass-sized", "purl": "pkg:npm/minipass-sized@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "minizlib", "purl": "pkg:npm/minizlib@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "minizlib", "purl": "pkg:npm/minizlib@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mkdirp", "purl": "pkg:npm/mkdirp@0.5.5", "version": "0.5.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mkdirp", "purl": "pkg:npm/mkdirp@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mkdirp", "purl": "pkg:npm/mkdirp@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mkdirp-classic", "purl": "pkg:npm/mkdirp-classic@0.5.3", "version": "0.5.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "mock-fs", "purl": "pkg:npm/mock-fs@4.14.0", "version": "4.14.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "module-not-found-error", "purl": "pkg:npm/module-not-found-error@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ms", "purl": "pkg:npm/ms@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ms", "purl": "pkg:npm/ms@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ms", "purl": "pkg:npm/ms@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ms", "purl": "pkg:npm/ms@2.1.3", "version": "2.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "multimatch", "purl": "pkg:npm/multimatch@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "multistream", "purl": "pkg:npm/multistream@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "mute-stream", "purl": "pkg:npm/mute-stream@0.0.8", "version": "0.0.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "nan", "purl": "pkg:npm/nan@2.25.0", "version": "2.25.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "nanoid", "purl": "pkg:npm/nanoid@3.1.25", "version": "3.1.25" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "napi-build-utils", "purl": "pkg:npm/napi-build-utils@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "natural-compare", "purl": "pkg:npm/natural-compare@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "needle", "purl": "pkg:npm/needle@2.9.1", "version": "2.9.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "needle", "purl": "pkg:npm/needle@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "needle", "purl": "pkg:npm/needle@3.5.0", "version": "3.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "negotiator", "purl": "pkg:npm/negotiator@0.6.2", "version": "0.6.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "negotiator", "purl": "pkg:npm/negotiator@0.6.3", "version": "0.6.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "neo-async", "purl": "pkg:npm/neo-async@2.6.2", "version": "2.6.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "nice-try", "purl": "pkg:npm/nice-try@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "nise", "purl": "pkg:npm/nise@1.5.3", "version": "1.5.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "node-abi", "purl": "pkg:npm/node-abi@3.75.0", "version": "3.75.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "node-cache", "purl": "pkg:npm/node-cache@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "node-cleanup", "purl": "pkg:npm/node-cleanup@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "node-fetch", "purl": "pkg:npm/node-fetch@2.7.0", "version": "2.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "node-gyp", "purl": "pkg:npm/node-gyp@10.1.0", "version": "10.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "node-int64", "purl": "pkg:npm/node-int64@0.4.0", "version": "0.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "node-loader", "purl": "pkg:npm/node-loader@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "node-releases", "purl": "pkg:npm/node-releases@2.0.10", "version": "2.0.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "node-releases", "purl": "pkg:npm/node-releases@2.0.14", "version": "2.0.14" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "nopt", "purl": "pkg:npm/nopt@7.2.1", "version": "7.2.1" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "normalize-package-data", "purl": "pkg:npm/normalize-package-data@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "normalize-package-data", "purl": "pkg:npm/normalize-package-data@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "normalize-package-data", "purl": "pkg:npm/normalize-package-data@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "normalize-package-data", "purl": "pkg:npm/normalize-package-data@6.0.1", "version": "6.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "normalize-path", "purl": "pkg:npm/normalize-path@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "normalize-registry-url", "purl": "pkg:npm/normalize-registry-url@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "npm-bundled", "purl": "pkg:npm/npm-bundled@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "npm-install-checks", "purl": "pkg:npm/npm-install-checks@6.3.0", "version": "6.3.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "npm-normalize-package-bin", "purl": "pkg:npm/npm-normalize-package-bin@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "npm-package-arg", "purl": "pkg:npm/npm-package-arg@11.0.2", "version": "11.0.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "npm-packlist", "purl": "pkg:npm/npm-packlist@8.0.2", "version": "8.0.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "npm-pick-manifest", "purl": "pkg:npm/npm-pick-manifest@9.0.1", "version": "9.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "npm-registry-fetch", "purl": "pkg:npm/npm-registry-fetch@16.2.1", "version": "16.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "npm-run-all", "purl": "pkg:npm/npm-run-all@4.1.5", "version": "4.1.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "npm-run-path", "purl": "pkg:npm/npm-run-path@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "npm-run-path", "purl": "pkg:npm/npm-run-path@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "object-hash", "purl": "pkg:npm/object-hash@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "object-hash", "purl": "pkg:npm/object-hash@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "object-inspect", "purl": "pkg:npm/object-inspect@1.11.0", "version": "1.11.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "object-keys", "purl": "pkg:npm/object-keys@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "object.assign", "purl": "pkg:npm/object.assign@4.1.2", "version": "4.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "octokit-pagination-methods", "purl": "pkg:npm/octokit-pagination-methods@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "on-finished", "purl": "pkg:npm/on-finished@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "once", "purl": "pkg:npm/once@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "onetime", "purl": "pkg:npm/onetime@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "open", "purl": "pkg:npm/open@7.4.2", "version": "7.4.2" }, { "ecosystem": "npm", "licenses": [ "WTFPL OR MIT" ], "location": "package-lock.json", "name": "opener", "purl": "pkg:npm/opener@1.5.2", "version": "1.5.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "optionator", "purl": "pkg:npm/optionator@0.8.3", "version": "0.8.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ora", "purl": "pkg:npm/ora@5.4.0", "version": "5.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "os-name", "purl": "pkg:npm/os-name@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "os-name", "purl": "pkg:npm/os-name@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "os-tmpdir", "purl": "pkg:npm/os-tmpdir@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "override-require", "purl": "pkg:npm/override-require@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-defer", "purl": "pkg:npm/p-defer@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-finally", "purl": "pkg:npm/p-finally@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-limit", "purl": "pkg:npm/p-limit@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-locate", "purl": "pkg:npm/p-locate@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-map", "purl": "pkg:npm/p-map@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-map", "purl": "pkg:npm/p-map@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "p-try", "purl": "pkg:npm/p-try@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "packageurl-js", "purl": "pkg:npm/packageurl-js@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "packageurl-js", "purl": "pkg:npm/packageurl-js@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "packageurl-js", "purl": "pkg:npm/packageurl-js@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "pacote", "purl": "pkg:npm/pacote@17.0.7", "version": "17.0.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pako", "purl": "pkg:npm/pako@0.2.9", "version": "0.2.9" }, { "ecosystem": "npm", "licenses": [ "MIT AND Zlib" ], "location": "package-lock.json", "name": "pako", "purl": "pkg:npm/pako@1.0.11", "version": "1.0.11" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parent-module", "purl": "pkg:npm/parent-module@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parse-diff", "purl": "pkg:npm/parse-diff@0.7.1", "version": "0.7.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parse-git-config", "purl": "pkg:npm/parse-git-config@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parse-github-url", "purl": "pkg:npm/parse-github-url@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parse-json", "purl": "pkg:npm/parse-json@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parse-json", "purl": "pkg:npm/parse-json@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parse-json", "purl": "pkg:npm/parse-json@7.1.1", "version": "7.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parse-link-header", "purl": "pkg:npm/parse-link-header@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parse-passwd", "purl": "pkg:npm/parse-passwd@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "parseurl", "purl": "pkg:npm/parseurl@1.3.3", "version": "1.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "patch-console", "purl": "pkg:npm/patch-console@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "patch-package", "purl": "pkg:npm/patch-package@6.5.0", "version": "6.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-exists", "purl": "pkg:npm/path-exists@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-exists", "purl": "pkg:npm/path-exists@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-is-absolute", "purl": "pkg:npm/path-is-absolute@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-key", "purl": "pkg:npm/path-key@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-key", "purl": "pkg:npm/path-key@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-parse", "purl": "pkg:npm/path-parse@1.0.7", "version": "1.0.7" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "path-scurry", "purl": "pkg:npm/path-scurry@1.11.1", "version": "1.11.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-to-regexp", "purl": "pkg:npm/path-to-regexp@0.1.7", "version": "0.1.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-to-regexp", "purl": "pkg:npm/path-to-regexp@1.8.0", "version": "1.8.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-type", "purl": "pkg:npm/path-type@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "path-type", "purl": "pkg:npm/path-type@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "peek-stream", "purl": "pkg:npm/peek-stream@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "peggy", "purl": "pkg:npm/peggy@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "picocolors", "purl": "pkg:npm/picocolors@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "picocolors", "purl": "pkg:npm/picocolors@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "picomatch", "purl": "pkg:npm/picomatch@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "picomatch", "purl": "pkg:npm/picomatch@2.3.2", "version": "2.3.2" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "picomatch", "purl": "pkg:npm/picomatch@4.0.4", "version": "4.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pidtree", "purl": "pkg:npm/pidtree@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pify", "purl": "pkg:npm/pify@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pinpoint", "purl": "pkg:npm/pinpoint@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pirates", "purl": "pkg:npm/pirates@4.0.5", "version": "4.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pkg-dir", "purl": "pkg:npm/pkg-dir@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "please-upgrade-node", "purl": "pkg:npm/please-upgrade-node@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "polite-json", "purl": "pkg:npm/polite-json@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "portfinder", "purl": "pkg:npm/portfinder@1.0.38", "version": "1.0.38" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "postcss", "purl": "pkg:npm/postcss@8.3.6", "version": "8.3.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "postcss-modules", "purl": "pkg:npm/postcss-modules@4.2.2", "version": "4.2.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "postcss-modules-extract-imports", "purl": "pkg:npm/postcss-modules-extract-imports@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "postcss-modules-local-by-default", "purl": "pkg:npm/postcss-modules-local-by-default@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "postcss-modules-scope", "purl": "pkg:npm/postcss-modules-scope@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "postcss-modules-values", "purl": "pkg:npm/postcss-modules-values@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "postcss-selector-parser", "purl": "pkg:npm/postcss-selector-parser@6.0.6", "version": "6.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "postcss-value-parser", "purl": "pkg:npm/postcss-value-parser@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "postject", "purl": "pkg:npm/postject@1.0.0-alpha.6", "version": "1.0.0-alpha.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "prebuild-install", "purl": "pkg:npm/prebuild-install@7.1.3", "version": "7.1.3" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "prelude-ls", "purl": "pkg:npm/prelude-ls@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "prettier", "purl": "pkg:npm/prettier@3.3.3", "version": "3.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pretty-format", "purl": "pkg:npm/pretty-format@27.4.6", "version": "27.4.6" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "pretty-format", "purl": "pkg:npm/pretty-format@29.4.1", "version": "29.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pretty-format", "purl": "pkg:npm/pretty-format@29.7.0", "version": "29.7.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "prettyjson", "purl": "pkg:npm/prettyjson@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "prismjs", "purl": "pkg:npm/prismjs@1.29.0", "version": "1.29.0" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "prismjs-terminal", "purl": "pkg:npm/prismjs-terminal@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "proc-log", "purl": "pkg:npm/proc-log@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "proc-log", "purl": "pkg:npm/proc-log@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "process-nextick-args", "purl": "pkg:npm/process-nextick-args@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "process-on-spawn", "purl": "pkg:npm/process-on-spawn@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "progress", "purl": "pkg:npm/progress@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "promise", "purl": "pkg:npm/promise@7.3.1", "version": "7.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "promise-fs", "purl": "pkg:npm/promise-fs@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "promise-inflight", "purl": "pkg:npm/promise-inflight@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "promise-retry", "purl": "pkg:npm/promise-retry@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "prompts", "purl": "pkg:npm/prompts@2.4.2", "version": "2.4.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "proxy-addr", "purl": "pkg:npm/proxy-addr@2.0.7", "version": "2.0.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "proxy-from-env", "purl": "pkg:npm/proxy-from-env@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "proxyquire", "purl": "pkg:npm/proxyquire@1.8.0", "version": "1.8.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "pseudomap", "purl": "pkg:npm/pseudomap@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "psl", "purl": "pkg:npm/psl@1.15.0", "version": "1.15.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pump", "purl": "pkg:npm/pump@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pump", "purl": "pkg:npm/pump@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pumpify", "purl": "pkg:npm/pumpify@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "punycode", "purl": "pkg:npm/punycode@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "pure-rand", "purl": "pkg:npm/pure-rand@6.0.4", "version": "6.0.4" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "qs", "purl": "pkg:npm/qs@6.7.0", "version": "6.7.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "query-ast", "purl": "pkg:npm/query-ast@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "query-string", "purl": "pkg:npm/query-string@6.14.1", "version": "6.14.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "queue-microtask", "purl": "pkg:npm/queue-microtask@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "quick-lru", "purl": "pkg:npm/quick-lru@5.1.1", "version": "5.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "randombytes", "purl": "pkg:npm/randombytes@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "range-parser", "purl": "pkg:npm/range-parser@1.2.1", "version": "1.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "raw-body", "purl": "pkg:npm/raw-body@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause OR MIT OR Apache-2.0" ], "location": "package-lock.json", "name": "rc", "purl": "pkg:npm/rc@1.2.8", "version": "1.2.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "react", "purl": "pkg:npm/react@18.3.1", "version": "18.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "react-dom", "purl": "pkg:npm/react-dom@18.3.1", "version": "18.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "react-element-to-jsx-string", "purl": "pkg:npm/react-element-to-jsx-string@15.0.0", "version": "15.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "react-is", "purl": "pkg:npm/react-is@17.0.2", "version": "17.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "react-is", "purl": "pkg:npm/react-is@18.1.0", "version": "18.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "react-is", "purl": "pkg:npm/react-is@18.2.0", "version": "18.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "react-reconciler", "purl": "pkg:npm/react-reconciler@0.29.2", "version": "0.29.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "read-package-json", "purl": "pkg:npm/read-package-json@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "read-package-json-fast", "purl": "pkg:npm/read-package-json-fast@3.0.2", "version": "3.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "read-pkg", "purl": "pkg:npm/read-pkg@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "read-pkg", "purl": "pkg:npm/read-pkg@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "read-pkg", "purl": "pkg:npm/read-pkg@8.1.0", "version": "8.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "read-pkg-up", "purl": "pkg:npm/read-pkg-up@10.1.0", "version": "10.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "read-pkg-up", "purl": "pkg:npm/read-pkg-up@8.0.0", "version": "8.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@2.3.7", "version": "2.3.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@2.3.8", "version": "2.3.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "readable-stream", "purl": "pkg:npm/readable-stream@3.6.0", "version": "3.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "readdirp", "purl": "pkg:npm/readdirp@3.6.0", "version": "3.6.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "readline-sync", "purl": "pkg:npm/readline-sync@1.4.10", "version": "1.4.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "rechoir", "purl": "pkg:npm/rechoir@0.7.1", "version": "0.7.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "redent", "purl": "pkg:npm/redent@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "regenerator-runtime", "purl": "pkg:npm/regenerator-runtime@0.13.9", "version": "0.13.9" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "regexpp", "purl": "pkg:npm/regexpp@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "regexpp", "purl": "pkg:npm/regexpp@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "require-directory", "purl": "pkg:npm/require-directory@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "require-from-string", "purl": "pkg:npm/require-from-string@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "require-package-name", "purl": "pkg:npm/require-package-name@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.1.7", "version": "1.1.7" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.22.1", "version": "1.22.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "resolve", "purl": "pkg:npm/resolve@1.22.12", "version": "1.22.12" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "resolve-cwd", "purl": "pkg:npm/resolve-cwd@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "resolve-from", "purl": "pkg:npm/resolve-from@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "resolve-from", "purl": "pkg:npm/resolve-from@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "resolve-import", "purl": "pkg:npm/resolve-import@1.4.5", "version": "1.4.5" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "resolve.exports", "purl": "pkg:npm/resolve.exports@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "resolve.exports", "purl": "pkg:npm/resolve.exports@2.0.3", "version": "2.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "restore-cursor", "purl": "pkg:npm/restore-cursor@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "restore-cursor", "purl": "pkg:npm/restore-cursor@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "retry", "purl": "pkg:npm/retry@0.12.0", "version": "0.12.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "reusify", "purl": "pkg:npm/reusify@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "rfc4648", "purl": "pkg:npm/rfc4648@1.5.3", "version": "1.5.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@2.6.3", "version": "2.6.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@2.7.1", "version": "2.7.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@4.1.2", "version": "4.1.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "rimraf", "purl": "pkg:npm/rimraf@5.0.7", "version": "5.0.7" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "roarr", "purl": "pkg:npm/roarr@2.15.4", "version": "2.15.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "run-async", "purl": "pkg:npm/run-async@2.4.1", "version": "2.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "run-parallel", "purl": "pkg:npm/run-parallel@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "rxjs", "purl": "pkg:npm/rxjs@6.6.7", "version": "6.6.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "safe-buffer", "purl": "pkg:npm/safe-buffer@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "safe-buffer", "purl": "pkg:npm/safe-buffer@5.2.1", "version": "5.2.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "safer-buffer", "purl": "pkg:npm/safer-buffer@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "samsam", "purl": "pkg:npm/samsam@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "sass", "purl": "pkg:npm/sass@1.38.0", "version": "1.38.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "sax", "purl": "pkg:npm/sax@1.2.4", "version": "1.2.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "scheduler", "purl": "pkg:npm/scheduler@0.23.2", "version": "0.23.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "schema-utils", "purl": "pkg:npm/schema-utils@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "SEE LICENSE IN README" ], "location": "package-lock.json", "name": "scss-parser", "purl": "pkg:npm/scss-parser@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@5.7.2", "version": "5.7.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "semver", "purl": "pkg:npm/semver@6.3.0", "version": "6.3.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@6.3.1", "version": "6.3.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.3.8", "version": "7.3.8" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.5.2", "version": "7.5.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.5.4", "version": "7.5.4" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.6.0", "version": "7.6.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.6.2", "version": "7.6.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.6.3", "version": "7.6.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.7.2", "version": "7.7.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.7.4", "version": "7.7.4" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "semver", "purl": "pkg:npm/semver@7.8.5", "version": "7.8.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "semver-compare", "purl": "pkg:npm/semver-compare@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "send", "purl": "pkg:npm/send@0.17.1", "version": "0.17.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "serialize-error", "purl": "pkg:npm/serialize-error@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "serialize-javascript", "purl": "pkg:npm/serialize-javascript@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "serve-static", "purl": "pkg:npm/serve-static@1.14.1", "version": "1.14.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "setimmediate", "purl": "pkg:npm/setimmediate@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "setprototypeof", "purl": "pkg:npm/setprototypeof@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "shallow-clone", "purl": "pkg:npm/shallow-clone@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "shebang-command", "purl": "pkg:npm/shebang-command@1.2.0", "version": "1.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "shebang-command", "purl": "pkg:npm/shebang-command@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "shebang-regex", "purl": "pkg:npm/shebang-regex@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "shebang-regex", "purl": "pkg:npm/shebang-regex@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "shell-quote", "purl": "pkg:npm/shell-quote@1.7.2", "version": "1.7.2" }, { "ecosystem": "npm", "licenses": [ "MPL-2.0" ], "location": "package-lock.json", "name": "shescape", "purl": "pkg:npm/shescape@2.1.15", "version": "2.1.15" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "side-channel", "purl": "pkg:npm/side-channel@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "signal-exit", "purl": "pkg:npm/signal-exit@3.0.7", "version": "3.0.7" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "signal-exit", "purl": "pkg:npm/signal-exit@4.1.0", "version": "4.1.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "sigstore", "purl": "pkg:npm/sigstore@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "simple-concat", "purl": "pkg:npm/simple-concat@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "simple-get", "purl": "pkg:npm/simple-get@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "sinon", "purl": "pkg:npm/sinon@4.5.0", "version": "4.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "sisteransi", "purl": "pkg:npm/sisteransi@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "slash", "purl": "pkg:npm/slash@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "slash", "purl": "pkg:npm/slash@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "slash", "purl": "pkg:npm/slash@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "slice-ansi", "purl": "pkg:npm/slice-ansi@2.1.0", "version": "2.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "slice-ansi", "purl": "pkg:npm/slice-ansi@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "slice-ansi", "purl": "pkg:npm/slice-ansi@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "smart-buffer", "purl": "pkg:npm/smart-buffer@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk", "purl": "pkg:npm/snyk@1.0.0-monorepo", "version": "1.0.0-monorepo" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0 AND MIT" ], "location": "package-lock.json", "name": "snyk-config", "purl": "pkg:npm/snyk-config@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "snyk-cpp-plugin", "purl": "pkg:npm/snyk-cpp-plugin@2.24.3", "version": "2.24.3" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-docker-plugin", "purl": "pkg:npm/snyk-docker-plugin@9.20.2", "version": "9.20.2" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-go-parser", "purl": "pkg:npm/snyk-go-parser@1.13.0", "version": "1.13.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-go-plugin", "purl": "pkg:npm/snyk-go-plugin@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-gradle-plugin", "purl": "pkg:npm/snyk-gradle-plugin@7.1.6", "version": "7.1.6" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-module", "purl": "pkg:npm/snyk-module@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-module", "purl": "pkg:npm/snyk-module@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-module", "purl": "pkg:npm/snyk-module@3.3.0", "version": "3.3.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-mvn-plugin", "purl": "pkg:npm/snyk-mvn-plugin@4.9.4", "version": "4.9.4" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-nodejs-lockfile-parser", "purl": "pkg:npm/snyk-nodejs-lockfile-parser@2.10.4", "version": "2.10.4" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-nodejs-plugin", "purl": "pkg:npm/snyk-nodejs-plugin@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-nuget-plugin", "purl": "pkg:npm/snyk-nuget-plugin@4.5.6", "version": "4.5.6" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-paket-parser", "purl": "pkg:npm/snyk-paket-parser@1.6.0", "version": "1.6.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-php-plugin", "purl": "pkg:npm/snyk-php-plugin@1.12.1", "version": "1.12.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-poetry-lockfile-parser", "purl": "pkg:npm/snyk-poetry-lockfile-parser@1.10.1", "version": "1.10.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-poetry-lockfile-parser", "purl": "pkg:npm/snyk-poetry-lockfile-parser@1.9.1", "version": "1.9.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-policy", "purl": "pkg:npm/snyk-policy@4.1.6", "version": "4.1.6" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-python-plugin", "purl": "pkg:npm/snyk-python-plugin@3.3.1", "version": "3.3.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-resolve", "purl": "pkg:npm/snyk-resolve@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-resolve-deps", "purl": "pkg:npm/snyk-resolve-deps@4.10.0", "version": "4.10.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-resolve-deps", "purl": "pkg:npm/snyk-resolve-deps@4.8.0", "version": "4.8.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "snyk-sbt-plugin", "purl": "pkg:npm/snyk-sbt-plugin@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-swiftpm-plugin", "purl": "pkg:npm/snyk-swiftpm-plugin@1.5.1", "version": "1.5.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-tree", "purl": "pkg:npm/snyk-tree@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "snyk-try-require", "purl": "pkg:npm/snyk-try-require@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "socks", "purl": "pkg:npm/socks@2.8.3", "version": "2.8.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "socks-proxy-agent", "purl": "pkg:npm/socks-proxy-agent@8.0.3", "version": "8.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "source-list-map", "purl": "pkg:npm/source-list-map@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.6.1", "version": "0.6.1" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.7.3", "version": "0.7.3" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "source-map", "purl": "pkg:npm/source-map@0.7.4", "version": "0.7.4" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "source-map-js", "purl": "pkg:npm/source-map-js@0.6.2", "version": "0.6.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "source-map-support", "purl": "pkg:npm/source-map-support@0.5.13", "version": "0.5.13" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "source-map-support", "purl": "pkg:npm/source-map-support@0.5.21", "version": "0.5.21" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "sourcemap-codec", "purl": "pkg:npm/sourcemap-codec@1.4.8", "version": "1.4.8" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "spdx-correct", "purl": "pkg:npm/spdx-correct@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "CC-BY-3.0" ], "location": "package-lock.json", "name": "spdx-exceptions", "purl": "pkg:npm/spdx-exceptions@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "spdx-expression-parse", "purl": "pkg:npm/spdx-expression-parse@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT AND CC-BY-3.0" ], "location": "package-lock.json", "name": "spdx-expression-validate", "purl": "pkg:npm/spdx-expression-validate@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "CC0-1.0" ], "location": "package-lock.json", "name": "spdx-license-ids", "purl": "pkg:npm/spdx-license-ids@3.0.10", "version": "3.0.10" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "split-ca", "purl": "pkg:npm/split-ca@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "split-on-first", "purl": "pkg:npm/split-on-first@1.1.0", "version": "1.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "split2", "purl": "pkg:npm/split2@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "sprintf-js", "purl": "pkg:npm/sprintf-js@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "sprintf-js", "purl": "pkg:npm/sprintf-js@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "sprintf-js", "purl": "pkg:npm/sprintf-js@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "sql.js", "purl": "pkg:npm/sql.js@1.14.0", "version": "1.14.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "ssh2", "purl": "pkg:npm/ssh2@1.17.0", "version": "1.17.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "ssri", "purl": "pkg:npm/ssri@10.0.6", "version": "10.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "stack-utils", "purl": "pkg:npm/stack-utils@2.0.6", "version": "2.0.6" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "statuses", "purl": "pkg:npm/statuses@1.5.0", "version": "1.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "stream-meter", "purl": "pkg:npm/stream-meter@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "stream-shift", "purl": "pkg:npm/stream-shift@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "streamx", "purl": "pkg:npm/streamx@2.23.0", "version": "2.23.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strict-uri-encode", "purl": "pkg:npm/strict-uri-encode@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "CC0-1.0" ], "location": "package-lock.json", "name": "string-hash", "purl": "pkg:npm/string-hash@1.1.3", "version": "1.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string-length", "purl": "pkg:npm/string-length@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string-length", "purl": "pkg:npm/string-length@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string-width", "purl": "pkg:npm/string-width@3.1.0", "version": "3.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string-width", "purl": "pkg:npm/string-width@4.2.3", "version": "4.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string-width", "purl": "pkg:npm/string-width@5.1.2", "version": "5.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string.prototype.padend", "purl": "pkg:npm/string.prototype.padend@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string.prototype.trimend", "purl": "pkg:npm/string.prototype.trimend@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string.prototype.trimstart", "purl": "pkg:npm/string.prototype.trimstart@1.0.4", "version": "1.0.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string_decoder", "purl": "pkg:npm/string_decoder@1.1.1", "version": "1.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "string_decoder", "purl": "pkg:npm/string_decoder@1.3.0", "version": "1.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-ansi", "purl": "pkg:npm/strip-ansi@5.2.0", "version": "5.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-ansi", "purl": "pkg:npm/strip-ansi@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-ansi", "purl": "pkg:npm/strip-ansi@6.0.1", "version": "6.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-ansi", "purl": "pkg:npm/strip-ansi@7.1.0", "version": "7.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-bom", "purl": "pkg:npm/strip-bom@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-bom", "purl": "pkg:npm/strip-bom@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-eof", "purl": "pkg:npm/strip-eof@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-final-newline", "purl": "pkg:npm/strip-final-newline@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-indent", "purl": "pkg:npm/strip-indent@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-json-comments", "purl": "pkg:npm/strip-json-comments@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "strip-json-comments", "purl": "pkg:npm/strip-json-comments@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "supports-color", "purl": "pkg:npm/supports-color@5.5.0", "version": "5.5.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "supports-color", "purl": "pkg:npm/supports-color@7.2.0", "version": "7.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "supports-color", "purl": "pkg:npm/supports-color@8.1.1", "version": "8.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "supports-hyperlinks", "purl": "pkg:npm/supports-hyperlinks@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "supports-preserve-symlinks-flag", "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "sync-content", "purl": "pkg:npm/sync-content@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "table", "purl": "pkg:npm/table@5.4.6", "version": "5.4.6" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "tap", "purl": "pkg:npm/tap@19.0.2", "version": "19.0.2" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "tap-parser", "purl": "pkg:npm/tap-parser@16.0.1", "version": "16.0.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "tap-yaml", "purl": "pkg:npm/tap-yaml@2.2.2", "version": "2.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tapable", "purl": "pkg:npm/tapable@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "tar", "purl": "pkg:npm/tar@6.2.1", "version": "6.2.1" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "tar", "purl": "pkg:npm/tar@7.5.21", "version": "7.5.21" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tar-fs", "purl": "pkg:npm/tar-fs@2.1.1", "version": "2.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tar-fs", "purl": "pkg:npm/tar-fs@3.1.2", "version": "3.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tar-fs", "purl": "pkg:npm/tar-fs@3.1.3", "version": "3.1.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tar-stream", "purl": "pkg:npm/tar-stream@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tar-stream", "purl": "pkg:npm/tar-stream@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "tcompare", "purl": "pkg:npm/tcompare@7.0.1", "version": "7.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "teex", "purl": "pkg:npm/teex@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "temp-dir", "purl": "pkg:npm/temp-dir@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tempfile", "purl": "pkg:npm/tempfile@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "terser", "purl": "pkg:npm/terser@5.7.1", "version": "5.7.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "terser-webpack-plugin", "purl": "pkg:npm/terser-webpack-plugin@5.1.4", "version": "5.1.4" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "test-exclude", "purl": "pkg:npm/test-exclude@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "text-decoder", "purl": "pkg:npm/text-decoder@1.2.7", "version": "1.2.7" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "text-extensions", "purl": "pkg:npm/text-extensions@2.4.0", "version": "2.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "text-table", "purl": "pkg:npm/text-table@0.2.0", "version": "0.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "then-fs", "purl": "pkg:npm/then-fs@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "through", "purl": "pkg:npm/through@2.3.8", "version": "2.3.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "through2", "purl": "pkg:npm/through2@2.0.5", "version": "2.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tinyglobby", "purl": "pkg:npm/tinyglobby@0.2.14", "version": "0.2.14" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tmp", "purl": "pkg:npm/tmp@0.0.33", "version": "0.0.33" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tmp", "purl": "pkg:npm/tmp@0.2.7", "version": "0.2.7" }, { "ecosystem": "npm", "licenses": [ "BSD-3-Clause" ], "location": "package-lock.json", "name": "tmpl", "purl": "pkg:npm/tmpl@1.0.5", "version": "1.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "to-fast-properties", "purl": "pkg:npm/to-fast-properties@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "to-regex-range", "purl": "pkg:npm/to-regex-range@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "toidentifier", "purl": "pkg:npm/toidentifier@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "toml", "purl": "pkg:npm/toml@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tr46", "purl": "pkg:npm/tr46@0.0.3", "version": "0.0.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tr46", "purl": "pkg:npm/tr46@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tree-kill", "purl": "pkg:npm/tree-kill@1.2.2", "version": "1.2.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "trim-newlines", "purl": "pkg:npm/trim-newlines@4.1.1", "version": "4.1.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "trivial-deferred", "purl": "pkg:npm/trivial-deferred@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "ts-jest", "purl": "pkg:npm/ts-jest@29.0.5", "version": "29.0.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ts-jest", "purl": "pkg:npm/ts-jest@29.1.2", "version": "29.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ts-loader", "purl": "pkg:npm/ts-loader@9.5.1", "version": "9.5.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ts-node", "purl": "pkg:npm/ts-node@10.9.2", "version": "10.9.2" }, { "ecosystem": "npm", "licenses": [ "BlueOak-1.0.0" ], "location": "package-lock.json", "name": "tshy", "purl": "pkg:npm/tshy@1.14.0", "version": "1.14.0" }, { "ecosystem": "npm", "licenses": [ "0BSD" ], "location": "package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@1.14.1", "version": "1.14.1" }, { "ecosystem": "npm", "licenses": [ "0BSD" ], "location": "package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [ "0BSD" ], "location": "package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@2.5.0", "version": "2.5.0" }, { "ecosystem": "npm", "licenses": [ "0BSD" ], "location": "package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@2.6.0", "version": "2.6.0" }, { "ecosystem": "npm", "licenses": [ "0BSD" ], "location": "package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@2.6.2", "version": "2.6.2" }, { "ecosystem": "npm", "licenses": [ "0BSD" ], "location": "package-lock.json", "name": "tslib", "purl": "pkg:npm/tslib@2.8.1", "version": "2.8.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tsutils", "purl": "pkg:npm/tsutils@3.21.0", "version": "3.21.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "tuf-js", "purl": "pkg:npm/tuf-js@2.2.1", "version": "2.2.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "tunnel-agent", "purl": "pkg:npm/tunnel-agent@0.6.0", "version": "0.6.0" }, { "ecosystem": "npm", "licenses": [ "Unlicense" ], "location": "package-lock.json", "name": "tweetnacl", "purl": "pkg:npm/tweetnacl@0.14.5", "version": "0.14.5" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "type-check", "purl": "pkg:npm/type-check@0.3.2", "version": "0.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "type-detect", "purl": "pkg:npm/type-detect@4.0.8", "version": "4.0.8" }, { "ecosystem": "npm", "licenses": [ "MIT OR CC0-1.0" ], "location": "package-lock.json", "name": "type-fest", "purl": "pkg:npm/type-fest@0.12.0", "version": "0.12.0" }, { "ecosystem": "npm", "licenses": [ "MIT OR CC0-1.0" ], "location": "package-lock.json", "name": "type-fest", "purl": "pkg:npm/type-fest@0.13.1", "version": "0.13.1" }, { "ecosystem": "npm", "licenses": [ "MIT OR CC0-1.0" ], "location": "package-lock.json", "name": "type-fest", "purl": "pkg:npm/type-fest@0.21.3", "version": "0.21.3" }, { "ecosystem": "npm", "licenses": [ "MIT OR CC0-1.0" ], "location": "package-lock.json", "name": "type-fest", "purl": "pkg:npm/type-fest@0.8.1", "version": "0.8.1" }, { "ecosystem": "npm", "licenses": [ "MIT OR CC0-1.0" ], "location": "package-lock.json", "name": "type-fest", "purl": "pkg:npm/type-fest@1.4.0", "version": "1.4.0" }, { "ecosystem": "npm", "licenses": [ "MIT OR CC0-1.0" ], "location": "package-lock.json", "name": "type-fest", "purl": "pkg:npm/type-fest@3.13.1", "version": "3.13.1" }, { "ecosystem": "npm", "licenses": [ "MIT OR CC0-1.0" ], "location": "package-lock.json", "name": "type-fest", "purl": "pkg:npm/type-fest@4.9.0", "version": "4.9.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "type-is", "purl": "pkg:npm/type-is@1.6.18", "version": "1.6.18" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "typedarray-to-buffer", "purl": "pkg:npm/typedarray-to-buffer@3.1.5", "version": "3.1.5" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "typescript", "purl": "pkg:npm/typescript@4.9.5", "version": "4.9.5" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "typescript", "purl": "pkg:npm/typescript@5.4.5", "version": "5.4.5" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "uglify-js", "purl": "pkg:npm/uglify-js@3.17.4", "version": "3.17.4" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "unbox-primitive", "purl": "pkg:npm/unbox-primitive@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "undici", "purl": "pkg:npm/undici@7.29.0", "version": "7.29.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "unique-filename", "purl": "pkg:npm/unique-filename@3.0.0", "version": "3.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "unique-slug", "purl": "pkg:npm/unique-slug@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "unique-string", "purl": "pkg:npm/unique-string@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "universal-url", "purl": "pkg:npm/universal-url@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "universal-user-agent", "purl": "pkg:npm/universal-user-agent@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "universal-user-agent", "purl": "pkg:npm/universal-user-agent@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "universalify", "purl": "pkg:npm/universalify@0.1.2", "version": "0.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "universalify", "purl": "pkg:npm/universalify@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "unpipe", "purl": "pkg:npm/unpipe@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "unzipper", "purl": "pkg:npm/unzipper@0.12.3", "version": "0.12.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "upath", "purl": "pkg:npm/upath@2.0.1", "version": "2.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "update-browserslist-db", "purl": "pkg:npm/update-browserslist-db@1.0.10", "version": "1.0.10" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "update-browserslist-db", "purl": "pkg:npm/update-browserslist-db@1.0.13", "version": "1.0.13" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "uri-js", "purl": "pkg:npm/uri-js@4.4.1", "version": "4.4.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "util-deprecate", "purl": "pkg:npm/util-deprecate@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "utils-merge", "purl": "pkg:npm/utils-merge@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "uuid", "purl": "pkg:npm/uuid@11.1.1", "version": "11.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "uuid", "purl": "pkg:npm/uuid@8.3.2", "version": "8.3.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "v8-compile-cache", "purl": "pkg:npm/v8-compile-cache@2.3.0", "version": "2.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "v8-compile-cache-lib", "purl": "pkg:npm/v8-compile-cache-lib@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "v8-to-istanbul", "purl": "pkg:npm/v8-to-istanbul@9.0.1", "version": "9.0.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "v8-to-istanbul", "purl": "pkg:npm/v8-to-istanbul@9.2.0", "version": "9.2.0" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "validate-npm-package-license", "purl": "pkg:npm/validate-npm-package-license@3.0.4", "version": "3.0.4" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "validate-npm-package-name", "purl": "pkg:npm/validate-npm-package-name@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "varint", "purl": "pkg:npm/varint@6.0.0", "version": "6.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "vary", "purl": "pkg:npm/vary@1.1.2", "version": "1.1.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "vscode-jsonrpc", "purl": "pkg:npm/vscode-jsonrpc@8.1.0", "version": "8.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "vscode-languageserver-textdocument", "purl": "pkg:npm/vscode-languageserver-textdocument@1.0.12", "version": "1.0.12" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "vscode-languageserver-types", "purl": "pkg:npm/vscode-languageserver-types@3.17.5", "version": "3.17.5" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "walk-up-path", "purl": "pkg:npm/walk-up-path@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "Apache-2.0" ], "location": "package-lock.json", "name": "walker", "purl": "pkg:npm/walker@1.0.8", "version": "1.0.8" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "watchpack", "purl": "pkg:npm/watchpack@2.2.0", "version": "2.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "wcwidth", "purl": "pkg:npm/wcwidth@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "webidl-conversions", "purl": "pkg:npm/webidl-conversions@3.0.1", "version": "3.0.1" }, { "ecosystem": "npm", "licenses": [ "BSD-2-Clause" ], "location": "package-lock.json", "name": "webidl-conversions", "purl": "pkg:npm/webidl-conversions@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "webpack", "purl": "pkg:npm/webpack@5.54.0", "version": "5.54.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "webpack-cli", "purl": "pkg:npm/webpack-cli@4.8.0", "version": "4.8.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "webpack-license-plugin", "purl": "pkg:npm/webpack-license-plugin@4.2.0", "version": "4.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "webpack-merge", "purl": "pkg:npm/webpack-merge@5.8.0", "version": "5.8.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "webpack-sources", "purl": "pkg:npm/webpack-sources@2.3.1", "version": "2.3.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "webpack-sources", "purl": "pkg:npm/webpack-sources@3.2.0", "version": "3.2.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "whatwg-url", "purl": "pkg:npm/whatwg-url@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "whatwg-url", "purl": "pkg:npm/whatwg-url@7.1.0", "version": "7.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "which", "purl": "pkg:npm/which@1.3.1", "version": "1.3.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "which", "purl": "pkg:npm/which@2.0.2", "version": "2.0.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "which", "purl": "pkg:npm/which@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "which", "purl": "pkg:npm/which@6.0.1", "version": "6.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "which-boxed-primitive", "purl": "pkg:npm/which-boxed-primitive@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "widest-line", "purl": "pkg:npm/widest-line@4.0.1", "version": "4.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "wildcard", "purl": "pkg:npm/wildcard@2.0.0", "version": "2.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "windows-release", "purl": "pkg:npm/windows-release@3.3.3", "version": "3.3.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "windows-release", "purl": "pkg:npm/windows-release@5.0.1", "version": "5.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "word-wrap", "purl": "pkg:npm/word-wrap@1.2.3", "version": "1.2.3" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "wordwrap", "purl": "pkg:npm/wordwrap@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "wrap-ansi", "purl": "pkg:npm/wrap-ansi@5.1.0", "version": "5.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "wrap-ansi", "purl": "pkg:npm/wrap-ansi@7.0.0", "version": "7.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "wrap-ansi", "purl": "pkg:npm/wrap-ansi@8.1.0", "version": "8.1.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "wrappy", "purl": "pkg:npm/wrappy@1.0.2", "version": "1.0.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "write", "purl": "pkg:npm/write@1.0.3", "version": "1.0.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "write-file-atomic", "purl": "pkg:npm/write-file-atomic@3.0.3", "version": "3.0.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "write-file-atomic", "purl": "pkg:npm/write-file-atomic@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "write-file-atomic", "purl": "pkg:npm/write-file-atomic@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "ws", "purl": "pkg:npm/ws@8.17.0", "version": "8.17.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "xdg-basedir", "purl": "pkg:npm/xdg-basedir@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "xml", "purl": "pkg:npm/xml@1.0.1", "version": "1.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "xml2js", "purl": "pkg:npm/xml2js@0.6.2", "version": "0.6.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "xmlbuilder", "purl": "pkg:npm/xmlbuilder@11.0.1", "version": "11.0.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "xtend", "purl": "pkg:npm/xtend@4.0.2", "version": "4.0.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "y18n", "purl": "pkg:npm/y18n@5.0.8", "version": "5.0.8" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@2.1.2", "version": "2.1.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@4.0.0", "version": "4.0.0" }, { "ecosystem": "npm", "licenses": [], "location": "package-lock.json", "name": "yallist", "purl": "pkg:npm/yallist@5.0.0", "version": "5.0.0" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "yaml", "purl": "pkg:npm/yaml@1.10.3", "version": "1.10.3" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "yaml", "purl": "pkg:npm/yaml@2.4.2", "version": "2.4.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "yaml", "purl": "pkg:npm/yaml@2.9.0", "version": "2.9.0" }, { "ecosystem": "npm", "licenses": [ "WTFPL" ], "location": "package-lock.json", "name": "yaml-js", "purl": "pkg:npm/yaml-js@0.3.1", "version": "0.3.1" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "yaml-types", "purl": "pkg:npm/yaml-types@0.3.0", "version": "0.3.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@16.2.0", "version": "16.2.0" }, { "ecosystem": "npm", "licenses": [], "location": "ts-binary-wrapper/package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@17.6.2", "version": "17.6.2" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "yargs", "purl": "pkg:npm/yargs@17.7.2", "version": "17.7.2" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@20.2.9", "version": "20.2.9" }, { "ecosystem": "npm", "licenses": [ "ISC" ], "location": "package-lock.json", "name": "yargs-parser", "purl": "pkg:npm/yargs-parser@21.1.1", "version": "21.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "yn", "purl": "pkg:npm/yn@3.1.1", "version": "3.1.1" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "yocto-queue", "purl": "pkg:npm/yocto-queue@0.1.0", "version": "0.1.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "yocto-queue", "purl": "pkg:npm/yocto-queue@1.0.0", "version": "1.0.0" }, { "ecosystem": "npm", "licenses": [ "MIT" ], "location": "package-lock.json", "name": "yoga-wasm-web", "purl": "pkg:npm/yoga-wasm-web@0.3.3", "version": "0.3.3" }, { "ecosystem": "unknown", "licenses": [], "location": ".github/workflows/iac-smoke-tests-pulls.yml", "name": "./.github/workflows/iac-smoke-tests.yml", "purl": "", "version": "UNKNOWN" } ], "description": "Find and fix vulnerabilities in dependencies", "errors": [], "excluded_matches": { "action reference to a moving tag or branch": 1, "package defined in the repository itself": 4 }, "go_binary": { "asset": "snyk-linux", "binary": "snyk-linux", "db": "https://vuln.go.dev", "db_last_modified": "2026-10-27T21:16:18Z", "findings": [ { "aliases": [ "CVE-2026-61711", "GHSA-7236-3392-c5c6" ], "epss": { "cve": "CVE-2026-61711", "percentile": 0.29451, "score": 0.00357 }, "fixed_version": "v0.31.1", "id": "GO-2026-6255", "kev": null, "level": "symbol", "module": "github.com/moby/buildkit", "summary": "BuildKit: Custom frontend could bypass Seccomp/AppArmor in github.com/moby/buildkit", "version": "v0.30.0" }, { "aliases": [ "CVE-2026-61712", "GHSA-72x6-4j93-7w86" ], "epss": { "cve": "CVE-2026-61712", "percentile": 0.34089, "score": 0.00399 }, "fixed_version": "v0.31.1", "id": "GO-2026-6256", "kev": null, "level": "symbol", "module": "github.com/moby/buildkit", "summary": "BuildKit has a possible runtime DoS via unbounded group parsing in github.com/moby/buildkit", "version": "v0.30.0" }, { "aliases": [ "CVE-2025-46569", "GHSA-6m8w-jc87-6cr7" ], "epss": { "cve": "CVE-2025-46569", "percentile": 0.45503, "score": 0.00541 }, "fixed_version": "v1.4.0", "id": "GO-2025-3660", "kev": null, "level": "symbol", "module": "github.com/open-policy-agent/opa", "summary": "OPA server Data API HTTP path injection of Rego in github.com/open-policy-agent/opa", "version": "v0.69.0" }, { "aliases": [], "epss": null, "fixed_version": "", "id": "GO-2026-5932", "kev": null, "level": "symbol", "module": "golang.org/x/crypto", "summary": "The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues", "version": "v0.57.0" }, { "aliases": [ "CVE-2026-78661" ], "epss": { "cve": "CVE-2026-78661", "percentile": 0.08063, "score": 0.00185 }, "fixed_version": "v0.62.0", "id": "GO-2026-6860", "kev": null, "level": "symbol", "module": "golang.org/x/net", "summary": "Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net", "version": "v0.60.0" }, { "aliases": [ "CVE-2026-97045" ], "epss": { "cve": "CVE-2026-97045", "percentile": 0.10117, "score": 0.00202 }, "fixed_version": "v0.62.0", "id": "GO-2026-6866", "kev": null, "level": "symbol", "module": "golang.org/x/net", "summary": "Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net", "version": "v0.60.0" }, { "aliases": [ "CVE-2025-6624", "GHSA-6hwc-9h8r-3vmf" ], "epss": { "cve": "CVE-2025-6624", "percentile": 0.07482, "score": 0.00179 }, "fixed_version": "", "id": "GO-2025-3789", "kev": null, "level": "module", "module": "github.com/snyk/go-application-framework", "summary": "Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode in github.com/snyk/go-application-framework", "version": "v0.30.2" } ], "go_version": "go1.26.10", "main_module": "github.com/snyk/cli/cliv2-private" }, "id": "snyk__cli", "manifests": [ ".github/scripts/deployment-monitor/go.mod", ".github/workflows/check-dependencies.yml", ".github/workflows/create-build-image.yml", ".github/workflows/danger-zone.yml", ".github/workflows/deployment-monitor.yml", ".github/workflows/iac-smoke-tests-pulls.yml", ".github/workflows/pr-housekeeping.yml", ".github/workflows/snyk-protect-production-smoke-tests.yml", ".github/workflows/sync-cli-help-to-user-docs.yml", ".github/workflows/sync-cli-readme.yml", "cliv2-private/go.mod", "cliv2-private/go.sum", "cliv2/go.mod", "cliv2/go.sum", "package-lock.json", "package.json", "packages/snyk-fix/package.json", "packages/snyk-protect/package.json", "release-scripts/go.mod", "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.mod", "release-scripts/hcl-to-json-parser-generator-v2/src/hcltojson-v2/go.sum", "ts-binary-wrapper/package-lock.json", "ts-binary-wrapper/package.json" ], "name": "snyk-cli", "osv": { "advisories": 92, "available": true, "confirmed": 78, "osv_only": [ { "ecosystem": "Go", "ids": [ "CVE-2025-6624", "GHSA-6hwc-9h8r-3vmf", "GO-2025-3789" ], "package": "github.com/snyk/go-application-framework", "score": "7.2", "severity": "High", "version": "0.30.2" }, { "ecosystem": "Go", "ids": [ "CVE-2025-6624", "GHSA-6hwc-9h8r-3vmf", "GO-2025-3789" ], "package": "github.com/snyk/go-application-framework", "score": "7.2", "severity": "High", "version": "0.30.2" }, { "ecosystem": "Go", "ids": [ "CVE-2022-32149", "GHSA-69ch-w2m2-3vjp", "GO-2022-1059" ], "package": "golang.org/x/text", "score": "7.5", "severity": "High", "version": "0.3.7" }, { "ecosystem": "Go", "ids": [ "CVE-2026-56852", "GO-2026-5970" ], "package": "golang.org/x/text", "score": "", "severity": "Unknown", "version": "0.3.7" }, { "ecosystem": "Go", "ids": [ "CVE-2026-56851", "GO-2026-6629" ], "package": "golang.org/x/text", "score": "", "severity": "Unknown", "version": "0.3.7" }, { "ecosystem": "Go", "ids": [ "CVE-2022-28948", "GHSA-hp87-p4gw-j4gq", "GO-2022-0603" ], "package": "gopkg.in/yaml.v3", "score": "7.5", "severity": "High", "version": "3.0.0-20200313102051-9f266ea9e77c" } ], "warning": null }, "ref": "v1.1308.3", "ref_kind": "release", "release_integrity": { "asset": "snyk-linux", "assets": 16, "build_provenance": null, "checksums_published": true, "digest_matches_github": true, "immutable_release": null, "methods": [], "provenance_published": false, "sbom_published": false, "signature": null, "signatures_published": true, "signer": null, "verdict": "checksums-only" }, "released_at": "2026-10-23T10:47:03Z", "repository": "snyk/cli", "sbomlyze_diff": { "added": 848, "changed": 45, "drift": { "integrity_drift": 0, "metadata_drift": 1, "version_drift": 44 }, "findings": [ "Attack surface: +1337 packages (125.4%)", "42 version downgrades detected: agent-base 6.0.2\u21924.3.0, brace-expansion 1.1.21\u21921.1.11, braces 3.0.3\u21923.0.2, chownr 3.0.0\u21921.1.4, cookie 0.4.2\u21920.4.0 + 37 more", "2 version upgrades (2 major) among 1,066 shared packages", "Core system packages stable: golang (559), github (22), file (14) unchanged", "License shift: permissive +1009" ], "html": "sbomlyze-diff.html", "removed": 0 }, "scanned_at": "2026-11-02T03:07:53+00:00", "scorecard": null, "scorecard_note": "the project is not in the OpenSSF public dataset; the Scorecard CLI fallback was skipped because this shard's weekly budget was used", "vulnerabilities": [ { "aliases": [ "CVE-2023-45133" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-45133", "percentile": 0.44506, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "7.23.2" ], "id": "GHSA-67hx-6x53-jw92", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "@babel/traverse", "severity": "Critical", "summary": "Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code", "url": "https://github.com/advisories/GHSA-67hx-6x53-jw92", "version": "7.20.13" }, { "aliases": [ "CVE-2025-7783" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-7783", "percentile": 0.78615, "score": 0.0181 }, "fix_state": "fixed", "fixed_in": [ "2.5.4" ], "id": "GHSA-fjxv-7rqg-78g4", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "form-data", "severity": "Critical", "summary": "form-data uses unsafe random function in form-data for choosing boundary", "url": "https://github.com/advisories/GHSA-fjxv-7rqg-78g4", "version": "2.5.1" }, { "aliases": [ "CVE-2026-33937" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33937", "percentile": 0.79759, "score": 0.01907 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-2w6w-674q-4c4q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Critical", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion", "url": "https://github.com/advisories/GHSA-2w6w-674q-4c4q", "version": "4.7.8" }, { "aliases": [ "CVE-2026-106446" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106446", "percentile": 0.56143, "score": 0.00786 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-8r5x-fm3f-whwj", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Critical", "summary": "Handlebars: JavaScript Injection via AST Type Confusion in compile (bypass of CVE-2026-33937)", "url": "https://github.com/advisories/GHSA-8r5x-fm3f-whwj", "version": "4.7.8" }, { "aliases": [ "CVE-2026-106445" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106445", "percentile": 0.48158, "score": 0.00589 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-p8wg-vrv2-v86f", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Critical", "summary": "Handlebars: JavaScript Injection via Own Property Check Bypass", "url": "https://github.com/advisories/GHSA-p8wg-vrv2-v86f", "version": "4.7.8" }, { "aliases": [ "CVE-2022-37601" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-37601", "percentile": 0.89173, "score": 0.03503 }, "fix_state": "fixed", "fixed_in": [ "1.4.1" ], "id": "GHSA-76p3-8jx3-jpfq", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "loader-utils", "severity": "Critical", "summary": "Prototype pollution in webpack loader-utils", "url": "https://github.com/advisories/GHSA-76p3-8jx3-jpfq", "version": "1.4.0" }, { "aliases": [ "CVE-2022-37601" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-37601", "percentile": 0.89173, "score": 0.03503 }, "fix_state": "fixed", "fixed_in": [ "2.0.3" ], "id": "GHSA-76p3-8jx3-jpfq", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "loader-utils", "severity": "Critical", "summary": "Prototype pollution in webpack loader-utils", "url": "https://github.com/advisories/GHSA-76p3-8jx3-jpfq", "version": "2.0.1" }, { "aliases": [ "CVE-2026-90711" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-90711", "percentile": 0.177, "score": 0.0026 }, "fix_state": "fixed", "fixed_in": [ "2.0.8" ], "id": "GHSA-jqcg-44mw-7w3h", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "proxy-addr", "severity": "Critical", "summary": "proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet", "url": "https://github.com/advisories/GHSA-jqcg-44mw-7w3h", "version": "2.0.7" }, { "aliases": [ "CVE-2021-42740" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-42740", "percentile": 0.90999, "score": 0.04221 }, "fix_state": "fixed", "fixed_in": [ "1.7.3" ], "id": "GHSA-g4rg-993r-mgx7", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "shell-quote", "severity": "Critical", "summary": "Improper Neutralization of Special Elements used in a Command in Shell-quote", "url": "https://github.com/advisories/GHSA-g4rg-993r-mgx7", "version": "1.7.2" }, { "aliases": [ "CVE-2026-9277" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-9277", "percentile": 0.56374, "score": 0.00793 }, "fix_state": "fixed", "fixed_in": [ "1.8.4" ], "id": "GHSA-w7jw-789q-3m8p", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "shell-quote", "severity": "Critical", "summary": "shell-quote quote() does not escape newlines in object .op values", "url": "https://github.com/advisories/GHSA-w7jw-789q-3m8p", "version": "1.7.2" }, { "aliases": [ "CVE-2026-59873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59873", "percentile": 0.47807, "score": 0.00582 }, "fix_state": "fixed", "fixed_in": [ "7.5.19" ], "id": "GHSA-23hp-3jrh-7fpw", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Critical", "summary": "node-tar: Decompression/parse DoS via unlimited input", "url": "https://github.com/advisories/GHSA-23hp-3jrh-7fpw", "version": "6.2.1" }, { "aliases": [ "CVE-2023-28154" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-28154", "percentile": 0.72638, "score": 0.01409 }, "fix_state": "fixed", "fixed_in": [ "5.76.0" ], "id": "GHSA-hc6q-2mpp-qw7j", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "webpack", "severity": "Critical", "summary": "Cross-realm object access in Webpack 5", "url": "https://github.com/advisories/GHSA-hc6q-2mpp-qw7j", "version": "5.54.0" }, { "aliases": [ "CVE-2026-111181" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111181", "percentile": 0.32919, "score": 0.00388 }, "fix_state": "fixed", "fixed_in": [ "1.20.9" ], "id": "GHSA-27r3-jxmh-p828", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "body-parser", "severity": "High", "summary": "body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body", "url": "https://github.com/advisories/GHSA-27r3-jxmh-p828", "version": "1.19.0" }, { "aliases": [ "CVE-2024-45590" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-45590", "percentile": 0.5739, "score": 0.00824 }, "fix_state": "fixed", "fixed_in": [ "1.20.3" ], "id": "GHSA-qwcr-r2fm-qrc7", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "body-parser", "severity": "High", "summary": "body-parser vulnerable to denial of service when url encoding is enabled", "url": "https://github.com/advisories/GHSA-qwcr-r2fm-qrc7", "version": "1.19.0" }, { "aliases": [ "CVE-2026-13149" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-13149", "percentile": 0.3024, "score": 0.00364 }, "fix_state": "fixed", "fixed_in": [ "1.1.16" ], "id": "GHSA-3jxr-9vmj-r5cp", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups", "url": "https://github.com/advisories/GHSA-3jxr-9vmj-r5cp", "version": "1.1.11" }, { "aliases": [ "CVE-2026-102276" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102276", "percentile": 0.39514, "score": 0.00455 }, "fix_state": "fixed", "fixed_in": [ "1.1.19" ], "id": "GHSA-6j4f-fj2g-mc7p", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion", "url": "https://github.com/advisories/GHSA-6j4f-fj2g-mc7p", "version": "1.1.11" }, { "aliases": [ "CVE-2026-14257" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-14257", "percentile": 0.50816, "score": 0.00643 }, "fix_state": "fixed", "fixed_in": [ "1.1.17" ], "id": "GHSA-mh99-v99m-4gvg", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash", "url": "https://github.com/advisories/GHSA-mh99-v99m-4gvg", "version": "1.1.11" }, { "aliases": [ "CVE-2026-102278" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102278", "percentile": 0.42209, "score": 0.00491 }, "fix_state": "fixed", "fixed_in": [ "1.1.20" ], "id": "GHSA-qhr7-859c-m2p7", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion", "url": "https://github.com/advisories/GHSA-qhr7-859c-m2p7", "version": "1.1.11" }, { "aliases": [ "CVE-2026-69152" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69152", "percentile": 0.51004, "score": 0.00647 }, "fix_state": "fixed", "fixed_in": [ "1.1.18" ], "id": "GHSA-rgw5-rvv9-x895", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "High", "summary": "brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation", "url": "https://github.com/advisories/GHSA-rgw5-rvv9-x895", "version": "1.1.11" }, { "aliases": [ "CVE-2024-4068" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4068", "percentile": 0.73774, "score": 0.01471 }, "fix_state": "fixed", "fixed_in": [ "3.0.3" ], "id": "GHSA-grv7-fg5c-xmjg", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "braces", "severity": "High", "summary": "Uncontrolled resource consumption in braces", "url": "https://github.com/advisories/GHSA-grv7-fg5c-xmjg", "version": "3.0.2" }, { "aliases": [ "CVE-2026-73088" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73088", "percentile": 0.51498, "score": 0.00658 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-73wf-gq98-2v4g", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)", "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g", "version": "4.21.5" }, { "aliases": [ "CVE-2026-73088" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73088", "percentile": 0.51498, "score": 0.00658 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-73wf-gq98-2v4g", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "browserslist", "severity": "High", "summary": "Browserslist: Uncaught crash / prototype write via untrusted browserslist-stats.json custom stats (normalizeStats)", "url": "https://github.com/advisories/GHSA-73wf-gq98-2v4g", "version": "4.23.0" }, { "aliases": [ "CVE-2026-73089" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73089", "percentile": 0.51386, "score": 0.00655 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-c83g-rgw3-j3cx", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "browserslist", "severity": "High", "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM", "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx", "version": "4.21.5" }, { "aliases": [ "CVE-2026-73089" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73089", "percentile": 0.51386, "score": 0.00655 }, "fix_state": "fixed", "fixed_in": [ "4.28.7" ], "id": "GHSA-c83g-rgw3-j3cx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "browserslist", "severity": "High", "summary": "Browserslist: Unbounded memory growth (no cache eviction) via distinct query results, leading to eventual OOM", "url": "https://github.com/advisories/GHSA-c83g-rgw3-j3cx", "version": "4.23.0" }, { "aliases": [ "CVE-2024-21538" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-21538", "percentile": 0.58749, "score": 0.00868 }, "fix_state": "fixed", "fixed_in": [ "6.0.6" ], "id": "GHSA-3xgq-45jj-v275", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "cross-spawn", "severity": "High", "summary": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "version": "6.0.5" }, { "aliases": [ "CVE-2024-21538" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-21538", "percentile": 0.58749, "score": 0.00868 }, "fix_state": "fixed", "fixed_in": [ "7.0.5" ], "id": "GHSA-3xgq-45jj-v275", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "cross-spawn", "severity": "High", "summary": "Regular Expression Denial of Service (ReDoS) in cross-spawn", "url": "https://github.com/advisories/GHSA-3xgq-45jj-v275", "version": "7.0.3" }, { "aliases": [ "CVE-2026-118664" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118664", "percentile": 0.24812, "score": 0.00318 }, "fix_state": "fixed", "fixed_in": [ "0.5.1" ], "id": "GHSA-qr28-fpjm-wq7f", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "decode-uri-component", "severity": "High", "summary": "decode-uri-component vulnerable to denial of service via quadratic replacement of percent-encoded runs", "url": "https://github.com/advisories/GHSA-qr28-fpjm-wq7f", "version": "0.2.0" }, { "aliases": [ "CVE-2022-38900" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-38900", "percentile": 0.97809, "score": 0.2361 }, "fix_state": "fixed", "fixed_in": [ "0.2.1" ], "id": "GHSA-w573-4hg7-7wgq", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "decode-uri-component", "severity": "High", "summary": "decode-uri-component vulnerable to Denial of Service (DoS)", "url": "https://github.com/advisories/GHSA-w573-4hg7-7wgq", "version": "0.2.0" }, { "aliases": [ "CVE-2021-4279" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-4279", "percentile": 0.67054, "score": 0.01156 }, "fix_state": "fixed", "fixed_in": [ "3.1.1" ], "id": "GHSA-8gh8-hqwg-xf34", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-json-patch", "severity": "High", "summary": "Starcounter-Jack JSON-Patch Prototype Pollution vulnerability", "url": "https://github.com/advisories/GHSA-8gh8-hqwg-xf34", "version": "3.1.0" }, { "aliases": [ "CVE-2026-13676" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-13676", "percentile": 0.52904, "score": 0.00692 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-4c8g-83qw-93j6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via failed IDN canonicalization", "url": "https://github.com/advisories/GHSA-4c8g-83qw-93j6", "version": "3.0.6" }, { "aliases": [ "CVE-2026-18446" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-18446", "percentile": 0.32004, "score": 0.0038 }, "fix_state": "fixed", "fixed_in": [ "3.1.5" ], "id": "GHSA-7p8r-x3mc-p8w7", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via backslash authority introducer", "url": "https://github.com/advisories/GHSA-7p8r-x3mc-p8w7", "version": "3.0.6" }, { "aliases": [ "CVE-2026-75975" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-75975", "percentile": 0.12576, "score": 0.0022 }, "fix_state": "fixed", "fixed_in": [ "3.1.6" ], "id": "GHSA-f65p-4m7j-42xc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization", "url": "https://github.com/advisories/GHSA-f65p-4m7j-42xc", "version": "3.0.6" }, { "aliases": [ "CVE-2026-76172" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-76172", "percentile": 0.14134, "score": 0.00232 }, "fix_state": "fixed", "fixed_in": [ "3.1.6" ], "id": "GHSA-jqff-g426-hqxp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via percent-encoded scheme normalization", "url": "https://github.com/advisories/GHSA-jqff-g426-hqxp", "version": "3.0.6" }, { "aliases": [ "CVE-2026-6321" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-6321", "percentile": 0.50395, "score": 0.00634 }, "fix_state": "fixed", "fixed_in": [ "3.1.1" ], "id": "GHSA-q3j6-qgpj-74h6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to path traversal via percent-encoded dot segments", "url": "https://github.com/advisories/GHSA-q3j6-qgpj-74h6", "version": "3.0.6" }, { "aliases": [ "CVE-2026-84292" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84292", "percentile": 0.15041, "score": 0.00239 }, "fix_state": "fixed", "fixed_in": [ "3.1.7" ], "id": "GHSA-qw65-cvwx-89v3", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to authority injection via an unvalidated port in serialize", "url": "https://github.com/advisories/GHSA-qw65-cvwx-89v3", "version": "3.0.6" }, { "aliases": [ "CVE-2026-16221" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-16221", "percentile": 0.37862, "score": 0.00436 }, "fix_state": "fixed", "fixed_in": [ "3.1.4" ], "id": "GHSA-v2hh-gcrm-f6hx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via literal backslash authority delimiter", "url": "https://github.com/advisories/GHSA-v2hh-gcrm-f6hx", "version": "3.0.6" }, { "aliases": [ "CVE-2026-6322" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-6322", "percentile": 0.43672, "score": 0.00512 }, "fix_state": "fixed", "fixed_in": [ "3.1.2" ], "id": "GHSA-v39h-62p7-jpjc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "High", "summary": "fast-uri vulnerable to host confusion via percent-encoded authority delimiters", "url": "https://github.com/advisories/GHSA-v39h-62p7-jpjc", "version": "3.0.6" }, { "aliases": [ "CVE-2026-32141" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-32141", "percentile": 0.57853, "score": 0.00839 }, "fix_state": "fixed", "fixed_in": [ "3.4.0" ], "id": "GHSA-25h7-pfq9-p65f", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "flatted", "severity": "High", "summary": "flatted vulnerable to unbounded recursion DoS in parse() revive phase", "url": "https://github.com/advisories/GHSA-25h7-pfq9-p65f", "version": "2.0.2" }, { "aliases": [ "CVE-2026-33228" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33228", "percentile": 0.57797, "score": 0.00838 }, "fix_state": "fixed", "fixed_in": [ "3.4.2" ], "id": "GHSA-rf6f-7fwh-wjgh", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "flatted", "severity": "High", "summary": "Prototype Pollution via parse() in NodeJS flatted", "url": "https://github.com/advisories/GHSA-rf6f-7fwh-wjgh", "version": "2.0.2" }, { "aliases": [ "CVE-2026-12143" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-12143", "percentile": 0.51965, "score": 0.00669 }, "fix_state": "fixed", "fixed_in": [ "2.5.6" ], "id": "GHSA-hmw2-7cc7-3qxx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "form-data", "severity": "High", "summary": "form-data: CRLF injection in form-data via unescaped multipart field names and filenames", "url": "https://github.com/advisories/GHSA-hmw2-7cc7-3qxx", "version": "2.5.1" }, { "aliases": [ "CVE-2026-116587" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-116587", "percentile": 0.3048, "score": 0.00366 }, "fix_state": "fixed", "fixed_in": [ "4.1.6" ], "id": "GHSA-mgcc-cww5-fp2q", "in_binary": "vulnerable code not in binary", "kev": null, "location": "cliv2-private/go.mod", "osv_confirmed": true, "package": "github.com/go-jose/go-jose/v4", "severity": "High", "summary": "Go JOSE: DoS when parsing JWKs that contain RSA keys", "url": "https://github.com/advisories/GHSA-mgcc-cww5-fp2q", "version": "v4.1.4" }, { "aliases": [ "CVE-2025-46569" ], "ecosystem": "golang", "epss": { "cve": "CVE-2025-46569", "percentile": 0.45503, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "1.4.0" ], "id": "GHSA-6m8w-jc87-6cr7", "in_binary": "vulnerable code in binary", "kev": null, "location": "cliv2/go.mod", "osv_confirmed": true, "package": "github.com/open-policy-agent/opa", "severity": "High", "summary": "OPA server Data API HTTP path injection of Rego", "url": "https://github.com/advisories/GHSA-6m8w-jc87-6cr7", "version": "v0.69.0" }, { "aliases": [ "CVE-2025-64756" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-64756", "percentile": 0.87717, "score": 0.0309 }, "fix_state": "fixed", "fixed_in": [ "10.5.0" ], "id": "GHSA-5j98-mcp5-4vw2", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "glob", "severity": "High", "summary": "glob CLI: Command injection via -c/--cmd executes matches with shell:true", "url": "https://github.com/advisories/GHSA-5j98-mcp5-4vw2", "version": "10.4.1" }, { "aliases": [ "CVE-2026-33938" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33938", "percentile": 0.53978, "score": 0.00721 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-3mfm-83xf-c92r", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block", "url": "https://github.com/advisories/GHSA-3mfm-83xf-c92r", "version": "4.7.8" }, { "aliases": [ "CVE-2026-33939" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33939", "percentile": 0.50065, "score": 0.00627 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-9cx6-37pm-9jff", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation", "url": "https://github.com/advisories/GHSA-9cx6-37pm-9jff", "version": "4.7.8" }, { "aliases": [ "CVE-2026-33940" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33940", "percentile": 0.5377, "score": 0.00715 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-xhpv-hc6g-r9c6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial", "url": "https://github.com/advisories/GHSA-xhpv-hc6g-r9c6", "version": "4.7.8" }, { "aliases": [ "CVE-2026-33941" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33941", "percentile": 0.22305, "score": 0.00296 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-xjpj-3mr7-gcpf", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "High", "summary": "Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options", "url": "https://github.com/advisories/GHSA-xjpj-3mr7-gcpf", "version": "4.7.8" }, { "aliases": [ "CVE-2026-69192" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69192", "percentile": 0.40267, "score": 0.00465 }, "fix_state": "fixed", "fixed_in": [ "10.3.1" ], "id": "GHSA-mwp4-54f8-5fhr", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "High", "summary": "ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass", "url": "https://github.com/advisories/GHSA-mwp4-54f8-5fhr", "version": "9.0.5" }, { "aliases": [ "CVE-2026-84375" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84375", "percentile": 0.45503, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "3.15.2" ], "id": "GHSA-2883-xcg3-v3hh", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: maxTotalMergeKeys does not limit CPU use for empty merge sources", "url": "https://github.com/advisories/GHSA-2883-xcg3-v3hh", "version": "3.14.1" }, { "aliases": [ "CVE-2026-59869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59869", "percentile": 0.47992, "score": 0.00585 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-52cp-r559-cp3m", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "js-yaml: YAML merge-key chains can force quadratic CPU consumption", "url": "https://github.com/advisories/GHSA-52cp-r559-cp3m", "version": "3.14.1" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "3.15.1" ], "id": "GHSA-5p4m-2wfm-xmqj", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "High", "summary": "JS-YAML: Quadratic CPU consumption in !!omap resolution (3.x and 4.x) \u2014 CVE-2026-59870 fix not backported", "url": "https://github.com/advisories/GHSA-5p4m-2wfm-xmqj", "version": "3.14.1" }, { "aliases": [ "CVE-2022-46175" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-46175", "percentile": 0.95511, "score": 0.09698 }, "fix_state": "fixed", "fixed_in": [ "1.0.2" ], "id": "GHSA-9c47-m6qq-7p4h", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "json5", "severity": "High", "summary": "Prototype Pollution in JSON5 via Parse Method", "url": "https://github.com/advisories/GHSA-9c47-m6qq-7p4h", "version": "1.0.1" }, { "aliases": [ "CVE-2022-23539" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-23539", "percentile": 0.44463, "score": 0.00524 }, "fix_state": "fixed", "fixed_in": [ "9.0.0" ], "id": "GHSA-8cf7-32gw-wr33", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "jsonwebtoken", "severity": "High", "summary": "jsonwebtoken unrestricted key type could lead to legacy keys usage", "url": "https://github.com/advisories/GHSA-8cf7-32gw-wr33", "version": "8.5.1" }, { "aliases": [ "CVE-2025-65945" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-65945", "percentile": 0.11984, "score": 0.00215 }, "fix_state": "fixed", "fixed_in": [ "3.2.3" ], "id": "GHSA-869p-cjfg-cm3x", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "jws", "severity": "High", "summary": "auth0/node-jws Improperly Verifies HMAC Signature", "url": "https://github.com/advisories/GHSA-869p-cjfg-cm3x", "version": "3.2.2" }, { "aliases": [ "CVE-2022-37603" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-37603", "percentile": 0.85942, "score": 0.02702 }, "fix_state": "fixed", "fixed_in": [ "1.4.2" ], "id": "GHSA-3rfm-jhwj-7488", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "loader-utils", "severity": "High", "summary": "loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable", "url": "https://github.com/advisories/GHSA-3rfm-jhwj-7488", "version": "1.4.0" }, { "aliases": [ "CVE-2022-37603" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-37603", "percentile": 0.85942, "score": 0.02702 }, "fix_state": "fixed", "fixed_in": [ "2.0.4" ], "id": "GHSA-3rfm-jhwj-7488", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "loader-utils", "severity": "High", "summary": "loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS) via url variable", "url": "https://github.com/advisories/GHSA-3rfm-jhwj-7488", "version": "2.0.1" }, { "aliases": [ "CVE-2022-37599" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-37599", "percentile": 0.86275, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "1.4.2" ], "id": "GHSA-hhq3-ff78-jv3g", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "loader-utils", "severity": "High", "summary": "loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)", "url": "https://github.com/advisories/GHSA-hhq3-ff78-jv3g", "version": "1.4.0" }, { "aliases": [ "CVE-2022-37599" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-37599", "percentile": 0.86275, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "2.0.4" ], "id": "GHSA-hhq3-ff78-jv3g", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "loader-utils", "severity": "High", "summary": "loader-utils is vulnerable to Regular Expression Denial of Service (ReDoS)", "url": "https://github.com/advisories/GHSA-hhq3-ff78-jv3g", "version": "2.0.1" }, { "aliases": [ "CVE-2020-8203" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-8203", "percentile": 0.92501, "score": 0.05213 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-p6mc-m468-83gw", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "lodash.pick", "severity": "High", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-p6mc-m468-83gw", "version": "4.4.0" }, { "aliases": [ "CVE-2020-8203" ], "ecosystem": "npm", "epss": { "cve": "CVE-2020-8203", "percentile": 0.92501, "score": 0.05213 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-p6mc-m468-83gw", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "lodash.set", "severity": "High", "summary": "Prototype Pollution in lodash", "url": "https://github.com/advisories/GHSA-p6mc-m468-83gw", "version": "4.3.2" }, { "aliases": [ "CVE-2026-27904" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27904", "percentile": 0.44525, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "3.1.4" ], "id": "GHSA-23c5-xmqv-rm74", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions", "url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "version": "3.1.2" }, { "aliases": [ "CVE-2026-27904" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27904", "percentile": 0.44525, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "3.1.4" ], "id": "GHSA-23c5-xmqv-rm74", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions", "url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "version": "3.1.3" }, { "aliases": [ "CVE-2026-27904" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27904", "percentile": 0.44525, "score": 0.00525 }, "fix_state": "fixed", "fixed_in": [ "9.0.7" ], "id": "GHSA-23c5-xmqv-rm74", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "minimatch", "severity": "High", "summary": "minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions", "url": "https://github.com/advisories/GHSA-23c5-xmqv-rm74", "version": "9.0.4" }, { "aliases": [ "CVE-2026-26996" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26996", "percentile": 0.47571, "score": 0.00577 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-3ppc-4f35-3m26", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "version": "3.1.2" }, { "aliases": [ "CVE-2026-26996" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26996", "percentile": 0.47571, "score": 0.00577 }, "fix_state": "fixed", "fixed_in": [ "9.0.6" ], "id": "GHSA-3ppc-4f35-3m26", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "minimatch", "severity": "High", "summary": "minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern", "url": "https://github.com/advisories/GHSA-3ppc-4f35-3m26", "version": "9.0.4" }, { "aliases": [ "CVE-2026-27903" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27903", "percentile": 0.4749, "score": 0.00576 }, "fix_state": "fixed", "fixed_in": [ "3.1.3" ], "id": "GHSA-7r86-cg39-jmmj", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "High", "summary": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments", "url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "version": "3.1.2" }, { "aliases": [ "CVE-2026-27903" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-27903", "percentile": 0.4749, "score": 0.00576 }, "fix_state": "fixed", "fixed_in": [ "9.0.7" ], "id": "GHSA-7r86-cg39-jmmj", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "minimatch", "severity": "High", "summary": "minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments", "url": "https://github.com/advisories/GHSA-7r86-cg39-jmmj", "version": "9.0.4" }, { "aliases": [ "CVE-2026-67214" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-67214", "percentile": 0.26147, "score": 0.0033 }, "fix_state": "fixed", "fixed_in": [ "3.3.16" ], "id": "GHSA-28wg-ghj8-5hjv", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "nanoid", "severity": "High", "summary": "nanoid: non-secure generators can loop indefinitely with negative size", "url": "https://github.com/advisories/GHSA-28wg-ghj8-5hjv", "version": "3.1.25" }, { "aliases": [ "CVE-2026-67213" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-67213", "percentile": 0.26279, "score": 0.00331 }, "fix_state": "fixed", "fixed_in": [ "3.3.18" ], "id": "GHSA-2v37-7h3g-55p8", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "nanoid", "severity": "High", "summary": "nanoid: custom generators can loop indefinitely when size is zero", "url": "https://github.com/advisories/GHSA-2v37-7h3g-55p8", "version": "3.1.25" }, { "aliases": [ "CVE-2026-73086" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73086", "percentile": 0.2234, "score": 0.00296 }, "fix_state": "fixed", "fixed_in": [ "3.3.12" ], "id": "GHSA-xwg4-73v4-xw9w", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "nanoid", "severity": "High", "summary": "nanoid: Integer Overflow or Wraparound", "url": "https://github.com/advisories/GHSA-xwg4-73v4-xw9w", "version": "3.1.25" }, { "aliases": [ "CVE-2026-9496" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-9496", "percentile": 0.28185, "score": 0.00346 }, "fix_state": "fixed", "fixed_in": [ "21.5.1" ], "id": "GHSA-w4pp-8pjf-rmxw", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "pacote", "severity": "High", "summary": "pacote is vulnerable to Denial of Service (DoS) via the addGitSha function", "url": "https://github.com/advisories/GHSA-w4pp-8pjf-rmxw", "version": "17.0.7" }, { "aliases": [ "CVE-2025-25975" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25975", "percentile": 0.40899, "score": 0.00473 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-8g77-54rh-46hx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "parse-git-config", "severity": "High", "summary": "Prototype Pollution Vulnerability in parse-git-config", "url": "https://github.com/advisories/GHSA-8g77-54rh-46hx", "version": "2.0.3" }, { "aliases": [ "CVE-2026-4867" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-4867", "percentile": 0.43909, "score": 0.00515 }, "fix_state": "fixed", "fixed_in": [ "0.1.13" ], "id": "GHSA-37ch-88jc-xwx2", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters", "url": "https://github.com/advisories/GHSA-37ch-88jc-xwx2", "version": "0.1.7" }, { "aliases": [ "CVE-2024-45296" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-45296", "percentile": 0.60707, "score": 0.00932 }, "fix_state": "fixed", "fixed_in": [ "0.1.10" ], "id": "GHSA-9wv6-86v2-598j", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp outputs backtracking regular expressions", "url": "https://github.com/advisories/GHSA-9wv6-86v2-598j", "version": "0.1.7" }, { "aliases": [ "CVE-2024-45296" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-45296", "percentile": 0.60707, "score": 0.00932 }, "fix_state": "fixed", "fixed_in": [ "1.9.0" ], "id": "GHSA-9wv6-86v2-598j", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp outputs backtracking regular expressions", "url": "https://github.com/advisories/GHSA-9wv6-86v2-598j", "version": "1.8.0" }, { "aliases": [ "CVE-2024-52798" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-52798", "percentile": 0.56158, "score": 0.00787 }, "fix_state": "fixed", "fixed_in": [ "0.1.12" ], "id": "GHSA-rhx6-c78j-4q9w", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "path-to-regexp", "severity": "High", "summary": "path-to-regexp contains a ReDoS", "url": "https://github.com/advisories/GHSA-rhx6-c78j-4q9w", "version": "0.1.7" }, { "aliases": [ "CVE-2026-33671" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33671", "percentile": 0.36317, "score": 0.0042 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-c2c7-rcm5-vvqj", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "High", "summary": "Picomatch has a ReDoS vulnerability via extglob quantifiers", "url": "https://github.com/advisories/GHSA-c2c7-rcm5-vvqj", "version": "2.3.1" }, { "aliases": [ "CVE-2026-45623" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-45623", "percentile": 0.49087, "score": 0.00608 }, "fix_state": "fixed", "fixed_in": [ "8.5.12" ], "id": "GHSA-6g55-p6wh-862q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss", "severity": "High", "summary": "PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments", "url": "https://github.com/advisories/GHSA-6g55-p6wh-862q", "version": "8.3.6" }, { "aliases": [ "CVE-2026-73646" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73646", "percentile": 0.44814, "score": 0.0053 }, "fix_state": "fixed", "fixed_in": [ "8.5.18" ], "id": "GHSA-r28c-9q8g-f849", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss", "severity": "High", "summary": "PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure", "url": "https://github.com/advisories/GHSA-r28c-9q8g-f849", "version": "8.3.6" }, { "aliases": [ "CVE-2022-24999" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-24999", "percentile": 0.9686, "score": 0.15695 }, "fix_state": "fixed", "fixed_in": [ "6.7.3" ], "id": "GHSA-hrpp-h998-j3pp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "High", "summary": "qs vulnerable to Prototype Pollution", "url": "https://github.com/advisories/GHSA-hrpp-h998-j3pp", "version": "6.7.0" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "6.3.1" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "6.3.0" }, { "aliases": [ "CVE-2022-25883" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25883", "percentile": 0.86273, "score": 0.02761 }, "fix_state": "fixed", "fixed_in": [ "7.5.2" ], "id": "GHSA-c2qf-rxjj-qqgw", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "semver", "severity": "High", "summary": "semver vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-c2qf-rxjj-qqgw", "version": "7.3.8" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "7.0.3" ], "id": "GHSA-5c6j-r48x-rmvq", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "serialize-javascript", "severity": "High", "summary": "Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString()", "url": "https://github.com/advisories/GHSA-5c6j-r48x-rmvq", "version": "6.0.0" }, { "aliases": [ "CVE-2026-13311" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-13311", "percentile": 0.29829, "score": 0.0036 }, "fix_state": "fixed", "fixed_in": [ "1.9.0" ], "id": "GHSA-395f-4hp3-45gv", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "shell-quote", "severity": "High", "summary": "shell-quote: Quadratic-complexity Denial of Service in `parse()` (CWE-407)", "url": "https://github.com/advisories/GHSA-395f-4hp3-45gv", "version": "1.7.2" }, { "aliases": [ "CVE-2026-48815" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48815", "percentile": 0.06771, "score": 0.00173 }, "fix_state": "fixed", "fixed_in": [ "4.1.1" ], "id": "GHSA-52v5-jr5w-gjxr", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "sigstore", "severity": "High", "summary": "sigstore's `certificateOIDs` verification constraints are silently dropped and never enforced", "url": "https://github.com/advisories/GHSA-52v5-jr5w-gjxr", "version": "2.3.1" }, { "aliases": [ "CVE-2026-24842" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24842", "percentile": 0.49102, "score": 0.00608 }, "fix_state": "fixed", "fixed_in": [ "7.5.7" ], "id": "GHSA-34x7-hfp2-rc4v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Vulnerable to Arbitrary File Creation/Overwrite via Hardlink Path Traversal", "url": "https://github.com/advisories/GHSA-34x7-hfp2-rc4v", "version": "6.2.1" }, { "aliases": [ "CVE-2026-26960" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-26960", "percentile": 0.2599, "score": 0.00328 }, "fix_state": "fixed", "fixed_in": [ "7.5.8" ], "id": "GHSA-83g3-92jg-28cx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Arbitrary File Read/Write via Hardlink Target Escape Through Symlink Chain in node-tar Extraction", "url": "https://github.com/advisories/GHSA-83g3-92jg-28cx", "version": "6.2.1" }, { "aliases": [ "CVE-2026-23745" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23745", "percentile": 0.31588, "score": 0.00376 }, "fix_state": "fixed", "fixed_in": [ "7.5.3" ], "id": "GHSA-8qq5-rm4j-mr97", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar is Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path Sanitization", "url": "https://github.com/advisories/GHSA-8qq5-rm4j-mr97", "version": "6.2.1" }, { "aliases": [ "CVE-2026-59874" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59874", "percentile": 0.37686, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-8x88-c5mf-7j5w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Negative tar entry size causes infinite loop in archive replace", "url": "https://github.com/advisories/GHSA-8x88-c5mf-7j5w", "version": "6.2.1" }, { "aliases": [ "CVE-2026-31802" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-31802", "percentile": 0.19054, "score": 0.00269 }, "fix_state": "fixed", "fixed_in": [ "7.5.11" ], "id": "GHSA-9ppj-qmqm-q256", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar Symlink Path Traversal via Drive-Relative Linkpath", "url": "https://github.com/advisories/GHSA-9ppj-qmqm-q256", "version": "6.2.1" }, { "aliases": [ "CVE-2026-29786" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-29786", "percentile": 0.40344, "score": 0.00466 }, "fix_state": "fixed", "fixed_in": [ "7.5.10" ], "id": "GHSA-qffp-2rhf-9h96", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "tar has Hardlink Path Traversal via Drive-Relative Linkpath", "url": "https://github.com/advisories/GHSA-qffp-2rhf-9h96", "version": "6.2.1" }, { "aliases": [ "CVE-2026-73566" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-73566", "percentile": 0.44902, "score": 0.00531 }, "fix_state": "fixed", "fixed_in": [ "7.5.21" ], "id": "GHSA-r292-9mhp-454m", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection", "url": "https://github.com/advisories/GHSA-r292-9mhp-454m", "version": "6.2.1" }, { "aliases": [ "CVE-2026-23950" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-23950", "percentile": 0.18342, "score": 0.00264 }, "fix_state": "fixed", "fixed_in": [ "7.5.4" ], "id": "GHSA-r6q2-hw4h-h46w", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "High", "summary": "Race Condition in node-tar Path Reservations via Unicode Ligature Collisions on macOS APFS", "url": "https://github.com/advisories/GHSA-r6q2-hw4h-h46w", "version": "6.2.1" }, { "aliases": [ "CVE-2025-48387" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-48387", "percentile": 0.47656, "score": 0.00579 }, "fix_state": "fixed", "fixed_in": [ "2.1.3" ], "id": "GHSA-8cj5-5rvv-wf4v", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "tar-fs", "severity": "High", "summary": "tar-fs can extract outside the specified dir with a specific tarball", "url": "https://github.com/advisories/GHSA-8cj5-5rvv-wf4v", "version": "2.1.1" }, { "aliases": [ "CVE-2024-12905" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-12905", "percentile": 0.83296, "score": 0.02299 }, "fix_state": "fixed", "fixed_in": [ "2.1.2" ], "id": "GHSA-pq67-2wwv-3xjx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "tar-fs", "severity": "High", "summary": "tar-fs Vulnerable to Link Following and Path Traversal via Extracting a Crafted tar File", "url": "https://github.com/advisories/GHSA-pq67-2wwv-3xjx", "version": "2.1.1" }, { "aliases": [ "CVE-2025-59343" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-59343", "percentile": 0.46196, "score": 0.00553 }, "fix_state": "fixed", "fixed_in": [ "2.1.4" ], "id": "GHSA-vj76-c3g6-qr5v", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "tar-fs", "severity": "High", "summary": "tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball", "url": "https://github.com/advisories/GHSA-vj76-c3g6-qr5v", "version": "2.1.1" }, { "aliases": [ "CVE-2022-25858" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-25858", "percentile": 0.88347, "score": 0.03253 }, "fix_state": "fixed", "fixed_in": [ "5.14.2" ], "id": "GHSA-4wf5-vphf-c2xc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "terser", "severity": "High", "summary": "Terser insecure use of regular expressions leads to ReDoS", "url": "https://github.com/advisories/GHSA-4wf5-vphf-c2xc", "version": "5.7.1" }, { "aliases": [ "CVE-2025-30066" ], "ecosystem": "github", "epss": { "cve": "CVE-2025-30066", "percentile": 0.99431, "score": 0.72092 }, "fix_state": "fixed", "fixed_in": [ "46.0.1" ], "id": "GHSA-mrrh-fwg8-r2c3", "kev": { "cve": "CVE-2025-30066", "date_added": "2025-03-18" }, "location": ".github/workflows/iac-smoke-tests-pulls.yml", "osv_confirmed": false, "package": "tj-actions/changed-files", "severity": "High", "summary": "tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs.", "url": "https://github.com/advisories/GHSA-mrrh-fwg8-r2c3", "version": "v44.5.2" }, { "aliases": [ "CVE-2026-44705" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-44705", "percentile": 0.37705, "score": 0.00434 }, "fix_state": "fixed", "fixed_in": [ "0.2.6" ], "id": "GHSA-ph9p-34f9-6g65", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tmp", "severity": "High", "summary": "tmp has Path Traversal via unsanitized prefix/postfix that enables directory escape", "url": "https://github.com/advisories/GHSA-ph9p-34f9-6g65", "version": "0.0.33" }, { "aliases": [ "CVE-2026-109383" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109383", "percentile": 0.08019, "score": 0.00184 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-2m5v-pch6-74hx", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to TLS certificate validation bypass via dropped tls options in Agent", "url": "https://github.com/advisories/GHSA-2m5v-pch6-74hx", "version": "7.29.0" }, { "aliases": [ "CVE-2026-109829" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109829", "percentile": 0.04067, "score": 0.00149 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-4w7w-5xrc-9h26", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to cache poisoning and cross-user disclosure via cross-origin redirects", "url": "https://github.com/advisories/GHSA-4w7w-5xrc-9h26", "version": "7.29.0" }, { "aliases": [ "CVE-2026-87018" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-87018", "percentile": 0.08361, "score": 0.00187 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-qrxm-fqhp-jwvm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to Denial of Service via TLS 1.2 certificate-changing renegotiation", "url": "https://github.com/advisories/GHSA-qrxm-fqhp-jwvm", "version": "7.29.0" }, { "aliases": [ "CVE-2026-19534" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-19534", "percentile": 0.33598, "score": 0.00394 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-rfgv-xxqx-mfg5", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to Denial of Service via unrequested WebSocket subprotocol", "url": "https://github.com/advisories/GHSA-rfgv-xxqx-mfg5", "version": "7.29.0" }, { "aliases": [ "CVE-2026-84961" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84961", "percentile": 0.07388, "score": 0.00178 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-w293-vg96-wgc3", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool", "url": "https://github.com/advisories/GHSA-w293-vg96-wgc3", "version": "7.29.0" }, { "aliases": [ "CVE-2026-109869" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109869", "percentile": 0.27938, "score": 0.00344 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-xjj6-f33q-929c", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "High", "summary": "undici vulnerable to Denial of Service via unhandled error on excessive content-encodings", "url": "https://github.com/advisories/GHSA-xjj6-f33q-929c", "version": "7.29.0" }, { "aliases": [ "CVE-2024-37890" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-37890", "percentile": 0.71668, "score": 0.01357 }, "fix_state": "fixed", "fixed_in": [ "8.17.1" ], "id": "GHSA-3h5v-q93c-6h6q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ws", "severity": "High", "summary": "ws affected by a DoS when handling a request with many HTTP headers", "url": "https://github.com/advisories/GHSA-3h5v-q93c-6h6q", "version": "8.17.0" }, { "aliases": [ "CVE-2026-48779" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48779", "percentile": 0.72944, "score": 0.01426 }, "fix_state": "fixed", "fixed_in": [ "8.21.0" ], "id": "GHSA-96hv-2xvq-fx4p", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ws", "severity": "High", "summary": "ws: Memory exhaustion DoS from tiny fragments and data chunks", "url": "https://github.com/advisories/GHSA-96hv-2xvq-fx4p", "version": "8.17.0" }, { "aliases": [ "CVE-2025-27789" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-27789", "percentile": 0.46829, "score": 0.00563 }, "fix_state": "fixed", "fixed_in": [ "7.26.10" ], "id": "GHSA-968p-4wvh-cqc8", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "@babel/helpers", "severity": "Medium", "summary": "Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups", "url": "https://github.com/advisories/GHSA-968p-4wvh-cqc8", "version": "7.20.13" }, { "aliases": [ "CVE-2025-27789" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-27789", "percentile": 0.46829, "score": 0.00563 }, "fix_state": "fixed", "fixed_in": [ "7.26.10" ], "id": "GHSA-968p-4wvh-cqc8", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@babel/helpers", "severity": "Medium", "summary": "Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups", "url": "https://github.com/advisories/GHSA-968p-4wvh-cqc8", "version": "7.24.0" }, { "aliases": [ "CVE-2025-25288" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25288", "percentile": 0.50086, "score": 0.00628 }, "fix_state": "fixed", "fixed_in": [ "9.2.2" ], "id": "GHSA-h5c3-5r3r-rr8q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@octokit/plugin-paginate-rest", "severity": "Medium", "summary": "@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking", "url": "https://github.com/advisories/GHSA-h5c3-5r3r-rr8q", "version": "1.1.2" }, { "aliases": [ "CVE-2025-25288" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25288", "percentile": 0.50086, "score": 0.00628 }, "fix_state": "fixed", "fixed_in": [ "9.2.2" ], "id": "GHSA-h5c3-5r3r-rr8q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@octokit/plugin-paginate-rest", "severity": "Medium", "summary": "@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking", "url": "https://github.com/advisories/GHSA-h5c3-5r3r-rr8q", "version": "2.21.3" }, { "aliases": [ "CVE-2025-25290" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25290", "percentile": 0.5603, "score": 0.00783 }, "fix_state": "fixed", "fixed_in": [ "8.4.1" ], "id": "GHSA-rmvr-2pp2-xj38", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@octokit/request", "severity": "Medium", "summary": "@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking", "url": "https://github.com/advisories/GHSA-rmvr-2pp2-xj38", "version": "5.6.1" }, { "aliases": [ "CVE-2025-25289" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25289", "percentile": 0.50087, "score": 0.00628 }, "fix_state": "fixed", "fixed_in": [ "5.1.1" ], "id": "GHSA-xx4v-prfh-6cgc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@octokit/request-error", "severity": "Medium", "summary": "@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking", "url": "https://github.com/advisories/GHSA-xx4v-prfh-6cgc", "version": "1.2.1" }, { "aliases": [ "CVE-2025-25289" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-25289", "percentile": 0.50087, "score": 0.00628 }, "fix_state": "fixed", "fixed_in": [ "5.1.1" ], "id": "GHSA-xx4v-prfh-6cgc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@octokit/request-error", "severity": "Medium", "summary": "@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking", "url": "https://github.com/advisories/GHSA-xx4v-prfh-6cgc", "version": "2.1.0" }, { "aliases": [ "CVE-2026-48758" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-48758", "percentile": 0.1497, "score": 0.00239 }, "fix_state": "fixed", "fixed_in": [ "3.2.1" ], "id": "GHSA-jfc7-64v2-mr8c", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@sigstore/core", "severity": "Medium", "summary": "@sigstore/core has DSSE payloadType type-binding failure", "url": "https://github.com/advisories/GHSA-jfc7-64v2-mr8c", "version": "1.1.0" }, { "aliases": [ "CVE-2025-69873" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-69873", "percentile": 0.45842, "score": 0.00547 }, "fix_state": "fixed", "fixed_in": [ "6.14.0" ], "id": "GHSA-2g4f-4pwh-qvx6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ajv", "severity": "Medium", "summary": "ajv has ReDoS when using `$data` option", "url": "https://github.com/advisories/GHSA-2g4f-4pwh-qvx6", "version": "6.12.6" }, { "aliases": [ "CVE-2026-33750" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33750", "percentile": 0.38904, "score": 0.00447 }, "fix_state": "fixed", "fixed_in": [ "1.1.13" ], "id": "GHSA-f886-m6hf-6m8v", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Medium", "summary": "brace-expansion: Zero-step sequence causes process hang and memory exhaustion", "url": "https://github.com/advisories/GHSA-f886-m6hf-6m8v", "version": "1.1.11" }, { "aliases": [ "CVE-2026-102277" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-102277", "percentile": 0.37116, "score": 0.00428 }, "fix_state": "fixed", "fixed_in": [ "1.1.21" ], "id": "GHSA-q2hr-2g5m-vwhr", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Medium", "summary": "brace-expansion: Quadratic-time expansion of the `{a},b}` rewrite causes CPU denial of service", "url": "https://github.com/advisories/GHSA-q2hr-2g5m-vwhr", "version": "1.1.11" }, { "aliases": [ "CVE-2026-16629" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-16629", "percentile": 0.65204, "score": 0.01083 }, "fix_state": "fixed", "fixed_in": [ "13.0.8" ], "id": "GHSA-3x93-p86w-5jvh", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "danger", "severity": "Medium", "summary": "danger allows local OS command injection through crafted file paths", "url": "https://github.com/advisories/GHSA-3x93-p86w-5jvh", "version": "10.9.0" }, { "aliases": [ "CVE-2026-45822" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-45822", "percentile": 0.43261, "score": 0.00507 }, "fix_state": "fixed", "fixed_in": [ "0.5.0" ], "id": "GHSA-vcc3-ghjq-m6fr", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "decode-uri-component", "severity": "Medium", "summary": "decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input", "url": "https://github.com/advisories/GHSA-vcc3-ghjq-m6fr", "version": "0.2.0" }, { "aliases": [ "CVE-2024-29041" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-29041", "percentile": 0.56127, "score": 0.00786 }, "fix_state": "fixed", "fixed_in": [ "4.19.2" ], "id": "GHSA-rv95-896h-c2vc", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "express", "severity": "Medium", "summary": "Express.js Open Redirect in malformed URLs", "url": "https://github.com/advisories/GHSA-rv95-896h-c2vc", "version": "4.17.1" }, { "aliases": [ "CVE-2026-86472" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-86472", "percentile": 0.16796, "score": 0.00253 }, "fix_state": "fixed", "fixed_in": [ "3.1.8" ], "id": "GHSA-hrr3-gc8f-f4qj", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "Medium", "summary": "fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets", "url": "https://github.com/advisories/GHSA-hrr3-gc8f-f4qj", "version": "3.0.6" }, { "aliases": [ "CVE-2026-110306" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110306", "percentile": 0.1635, "score": 0.0025 }, "fix_state": "fixed", "fixed_in": [ "3.1.9" ], "id": "GHSA-w74x-v6f9-j3xg", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "Medium", "summary": "fast-uri vulnerable to URI scheme spoofing via percent-encoded scheme decoding", "url": "https://github.com/advisories/GHSA-w74x-v6f9-j3xg", "version": "3.0.6" }, { "aliases": [ "CVE-2026-85747" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-85747", "percentile": 0.12276, "score": 0.00218 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-685w-q87j-wqw3", "in_binary": "vulnerable code not in binary", "kev": null, "location": "cliv2/go.mod", "osv_confirmed": true, "package": "github.com/docker/distribution", "severity": "Medium", "summary": "Distribution: Client `manifests.Get()` does not verify returned content against requested digest", "url": "https://github.com/advisories/GHSA-685w-q87j-wqw3", "version": "v2.8.2+incompatible" }, { "aliases": [ "CVE-2026-116585" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-116585", "percentile": 0.18368, "score": 0.00264 }, "fix_state": "fixed", "fixed_in": [ "4.1.5" ], "id": "GHSA-4w3g-jfj2-cw2q", "in_binary": "vulnerable code not in binary", "kev": null, "location": "cliv2-private/go.mod", "osv_confirmed": true, "package": "github.com/go-jose/go-jose/v4", "severity": "Medium", "summary": "Go JOSE: Panic during CBC-HMAC processing", "url": "https://github.com/advisories/GHSA-4w3g-jfj2-cw2q", "version": "v4.1.4" }, { "aliases": [ "CVE-2026-116586" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-116586", "percentile": 0.21769, "score": 0.00292 }, "fix_state": "fixed", "fixed_in": [ "4.1.5" ], "id": "GHSA-vvm8-gf78-28g4", "in_binary": "vulnerable code not in binary", "kev": null, "location": "cliv2-private/go.mod", "osv_confirmed": true, "package": "github.com/go-jose/go-jose/v4", "severity": "Medium", "summary": "Go JOSE: Panics in JSON parsing", "url": "https://github.com/advisories/GHSA-vvm8-gf78-28g4", "version": "v4.1.4" }, { "aliases": [ "CVE-2026-61711" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-61711", "percentile": 0.29451, "score": 0.00357 }, "fix_state": "fixed", "fixed_in": [ "0.31.1" ], "id": "GHSA-7236-3392-c5c6", "in_binary": "vulnerable code in binary", "kev": null, "location": "cliv2-private/go.mod", "osv_confirmed": true, "package": "github.com/moby/buildkit", "severity": "Medium", "summary": "BuildKit: Custom frontend could bypass Seccomp/AppArmor", "url": "https://github.com/advisories/GHSA-7236-3392-c5c6", "version": "v0.30.0" }, { "aliases": [ "CVE-2026-118773" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118773", "percentile": 0.28707, "score": 0.0035 }, "fix_state": "fixed", "fixed_in": [ "14.0.2" ], "id": "GHSA-3g3m-2fjr-6pw4", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "glob", "severity": "Medium", "summary": "Glob: AbortSignal cancellation bypass allows post-timeout filesystem traversal", "url": "https://github.com/advisories/GHSA-3g3m-2fjr-6pw4", "version": "10.4.1" }, { "aliases": [ "CVE-2026-33916" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33916", "percentile": 0.20535, "score": 0.0028 }, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-2qvq-rjwj-gvw9", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Medium", "summary": "Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection", "url": "https://github.com/advisories/GHSA-2qvq-rjwj-gvw9", "version": "4.7.8" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-7rx3-28cr-v5wh", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Medium", "summary": "Handlebars.js has a Prototype Method Access Control Gap via Missing __lookupSetter__ Blocklist Entry", "url": "https://github.com/advisories/GHSA-7rx3-28cr-v5wh", "version": "4.7.8" }, { "aliases": [ "CVE-2026-106444" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-106444", "percentile": 0.21629, "score": 0.0029 }, "fix_state": "fixed", "fixed_in": [ "4.7.10" ], "id": "GHSA-xw65-4hp5-5hc7", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Medium", "summary": "Handlebars: JavaScript Injection via Unsafe Inline Embedding of Precompiled Templates", "url": "https://github.com/advisories/GHSA-xw65-4hp5-5hc7", "version": "4.7.8" }, { "aliases": [ "CVE-2026-101911" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101911", "percentile": 0.32357, "score": 0.00383 }, "fix_state": "fixed", "fixed_in": [ "10.7.1" ], "id": "GHSA-h3mg-xc3c-68pw", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process", "url": "https://github.com/advisories/GHSA-h3mg-xc3c-68pw", "version": "9.0.5" }, { "aliases": [ "CVE-2026-101912" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101912", "percentile": 0.30994, "score": 0.0037 }, "fix_state": "fixed", "fixed_in": [ "10.7.1" ], "id": "GHSA-j6r3-76f7-8jcv", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range", "url": "https://github.com/advisories/GHSA-j6r3-76f7-8jcv", "version": "9.0.5" }, { "aliases": [ "CVE-2026-101913" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-101913", "percentile": 0.32683, "score": 0.00386 }, "fix_state": "fixed", "fixed_in": [ "10.5.1" ], "id": "GHSA-rpw4-54j3-4h4q", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts", "url": "https://github.com/advisories/GHSA-rpw4-54j3-4h4q", "version": "9.0.5" }, { "aliases": [ "CVE-2026-111997" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-111997", "percentile": 0.24409, "score": 0.00315 }, "fix_state": "fixed", "fixed_in": [ "10.7.4" ], "id": "GHSA-rxp7-6hxx-x8q5", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process", "url": "https://github.com/advisories/GHSA-rxp7-6hxx-x8q5", "version": "9.0.5" }, { "aliases": [ "CVE-2026-42338" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-42338", "percentile": 0.40732, "score": 0.00471 }, "fix_state": "fixed", "fixed_in": [ "10.1.1" ], "id": "GHSA-v2v4-37r5-5v8g", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ip-address", "severity": "Medium", "summary": "ip-address has XSS in Address6 HTML-emitting methods", "url": "https://github.com/advisories/GHSA-v2v4-37r5-5v8g", "version": "9.0.5" }, { "aliases": [ "CVE-2026-53550" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53550", "percentile": 0.35866, "score": 0.00415 }, "fix_state": "fixed", "fixed_in": [ "3.15.0" ], "id": "GHSA-h67p-54hq-rp68", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "JS-YAML: Quadratic-complexity DoS in merge key handling via repeated aliases", "url": "https://github.com/advisories/GHSA-h67p-54hq-rp68", "version": "3.14.1" }, { "aliases": [ "CVE-2025-64718" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-64718", "percentile": 0.36631, "score": 0.00423 }, "fix_state": "fixed", "fixed_in": [ "3.14.2" ], "id": "GHSA-mh29-5h37-fv8m", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "js-yaml", "severity": "Medium", "summary": "js-yaml has prototype pollution in merge (<<)", "url": "https://github.com/advisories/GHSA-mh29-5h37-fv8m", "version": "3.14.1" }, { "aliases": [ "CVE-2022-23541" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-23541", "percentile": 0.56923, "score": 0.0081 }, "fix_state": "fixed", "fixed_in": [ "9.0.0" ], "id": "GHSA-hjrf-2m68-5959", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "jsonwebtoken", "severity": "Medium", "summary": "jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC", "url": "https://github.com/advisories/GHSA-hjrf-2m68-5959", "version": "8.5.1" }, { "aliases": [ "CVE-2022-23540" ], "ecosystem": "npm", "epss": { "cve": "CVE-2022-23540", "percentile": 0.47291, "score": 0.00572 }, "fix_state": "fixed", "fixed_in": [ "9.0.0" ], "id": "GHSA-qwph-4952-7xr6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "jsonwebtoken", "severity": "Medium", "summary": "jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()", "url": "https://github.com/advisories/GHSA-qwph-4952-7xr6", "version": "8.5.1" }, { "aliases": [ "CVE-2024-4067" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-4067", "percentile": 0.73001, "score": 0.01429 }, "fix_state": "fixed", "fixed_in": [ "4.0.8" ], "id": "GHSA-952p-6rrq-rcjv", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "micromatch", "severity": "Medium", "summary": "Regular Expression Denial of Service (ReDoS) in micromatch", "url": "https://github.com/advisories/GHSA-952p-6rrq-rcjv", "version": "4.0.5" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "10.2.5" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "3.1.2" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "3.1.3" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "9.0.4" }, { "aliases": [ "CVE-2026-118764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-118764", "percentile": 0.21751, "score": 0.00291 }, "fix_state": "fixed", "fixed_in": [ "11.0.1" ], "id": "GHSA-g3hv-75wg-m249", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "minimatch", "severity": "Medium", "summary": "minimatch has potential denial of service via globparts amplification", "url": "https://github.com/advisories/GHSA-g3hv-75wg-m249", "version": "9.0.9" }, { "aliases": [ "CVE-2024-55565" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-55565", "percentile": 0.51785, "score": 0.00665 }, "fix_state": "fixed", "fixed_in": [ "3.3.8" ], "id": "GHSA-mwcw-c2x4-8c55", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "nanoid", "severity": "Medium", "summary": "Predictable results in nanoid generation when given non-integer values", "url": "https://github.com/advisories/GHSA-mwcw-c2x4-8c55", "version": "3.1.25" }, { "aliases": [ "CVE-2021-23566" ], "ecosystem": "npm", "epss": { "cve": "CVE-2021-23566", "percentile": 0.38258, "score": 0.0044 }, "fix_state": "fixed", "fixed_in": [ "3.1.31" ], "id": "GHSA-qrpm-p2h7-hrv2", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "nanoid", "severity": "Medium", "summary": "Exposure of Sensitive Information to an Unauthorized Actor in nanoid", "url": "https://github.com/advisories/GHSA-qrpm-p2h7-hrv2", "version": "3.1.25" }, { "aliases": [ "CVE-2026-33672" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33672", "percentile": 0.36831, "score": 0.00425 }, "fix_state": "fixed", "fixed_in": [ "2.3.2" ], "id": "GHSA-3v7f-55p6-f55p", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "picomatch", "severity": "Medium", "summary": "Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching", "url": "https://github.com/advisories/GHSA-3v7f-55p6-f55p", "version": "2.3.1" }, { "aliases": [ "CVE-2023-44270" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-44270", "percentile": 0.62035, "score": 0.00973 }, "fix_state": "fixed", "fixed_in": [ "8.4.31" ], "id": "GHSA-7fh5-64p2-3v2j", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss", "severity": "Medium", "summary": "PostCSS line return parsing error", "url": "https://github.com/advisories/GHSA-7fh5-64p2-3v2j", "version": "8.3.6" }, { "aliases": [ "CVE-2026-69153" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-69153", "percentile": 0.39208, "score": 0.00451 }, "fix_state": "fixed", "fixed_in": [ "8.5.23" ], "id": "GHSA-fxqj-rqcc-2cmp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss", "severity": "Medium", "summary": "PostCSS: incomplete fix of GHSA-6g55-p6wh-862q \u2014 attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset", "url": "https://github.com/advisories/GHSA-fxqj-rqcc-2cmp", "version": "8.3.6" }, { "aliases": [ "CVE-2026-41305" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41305", "percentile": 0.10477, "score": 0.00205 }, "fix_state": "fixed", "fixed_in": [ "8.5.10" ], "id": "GHSA-qx2v-qp2m-jg93", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss", "severity": "Medium", "summary": "PostCSS has XSS via Unescaped in its CSS Stringify Output", "url": "https://github.com/advisories/GHSA-qx2v-qp2m-jg93", "version": "8.3.6" }, { "aliases": [ "CVE-2026-104844" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-104844", "percentile": 0.32994, "score": 0.00389 }, "fix_state": "fixed", "fixed_in": [ "6.1.5" ], "id": "GHSA-rj75-hqrm-r3gf", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "postcss-selector-parser", "severity": "Medium", "summary": "PostCSS: Quadratic complexity in flat selector parsing allows CPU exhaustion", "url": "https://github.com/advisories/GHSA-rj75-hqrm-r3gf", "version": "6.0.6" }, { "aliases": [ "CVE-2024-53382" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-53382", "percentile": 0.27699, "score": 0.00342 }, "fix_state": "fixed", "fixed_in": [ "1.30.0" ], "id": "GHSA-x7hr-w5r2-h6wg", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "prismjs", "severity": "Medium", "summary": "PrismJS DOM Clobbering vulnerability", "url": "https://github.com/advisories/GHSA-x7hr-w5r2-h6wg", "version": "1.29.0" }, { "aliases": [ "CVE-2026-82417" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-82417", "percentile": 0.33809, "score": 0.00396 }, "fix_state": "fixed", "fixed_in": [ "6.16.0" ], "id": "GHSA-4mjr-xmp4-gh2g", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "Medium", "summary": "qs: Denial of Service via Attacker Controlled isBuffer", "url": "https://github.com/advisories/GHSA-4mjr-xmp4-gh2g", "version": "6.7.0" }, { "aliases": [ "CVE-2026-110816" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110816", "percentile": 0.30708, "score": 0.00368 }, "fix_state": "fixed", "fixed_in": [ "6.16.1" ], "id": "GHSA-6pq8-jhm2-2vcw", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "Medium", "summary": "qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)", "url": "https://github.com/advisories/GHSA-6pq8-jhm2-2vcw", "version": "6.7.0" }, { "aliases": [ "CVE-2025-15284" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-15284", "percentile": 0.39084, "score": 0.0045 }, "fix_state": "fixed", "fixed_in": [ "6.14.1" ], "id": "GHSA-6rw7-vpxm-498p", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "Medium", "summary": "qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion", "url": "https://github.com/advisories/GHSA-6rw7-vpxm-498p", "version": "6.7.0" }, { "aliases": [ "CVE-2024-11831" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-11831", "percentile": 0.66226, "score": 0.01122 }, "fix_state": "fixed", "fixed_in": [ "6.0.2" ], "id": "GHSA-76p7-773f-r4q5", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "serialize-javascript", "severity": "Medium", "summary": "Cross-site Scripting (XSS) in serialize-javascript", "url": "https://github.com/advisories/GHSA-76p7-773f-r4q5", "version": "6.0.0" }, { "aliases": [ "CVE-2026-34043" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-34043", "percentile": 0.42201, "score": 0.00491 }, "fix_state": "fixed", "fixed_in": [ "7.0.5" ], "id": "GHSA-qj8w-gfj5-8c6v", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "serialize-javascript", "severity": "Medium", "summary": "Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects", "url": "https://github.com/advisories/GHSA-qj8w-gfj5-8c6v", "version": "6.0.0" }, { "aliases": [ "CVE-2026-59875" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59875", "percentile": 0.29158, "score": 0.00354 }, "fix_state": "fixed", "fixed_in": [ "7.5.17" ], "id": "GHSA-gvwx-54wh-qm9j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records", "url": "https://github.com/advisories/GHSA-gvwx-54wh-qm9j", "version": "6.2.1" }, { "aliases": [ "CVE-2026-53655" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-53655", "percentile": 0.04762, "score": 0.00156 }, "fix_state": "fixed", "fixed_in": [ "7.5.16" ], "id": "GHSA-vmf3-w455-68vh", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar applies PAX size override to intermediary GNU long-name/long-link headers, causing tar parser interpretation differential (file smuggling)", "url": "https://github.com/advisories/GHSA-vmf3-w455-68vh", "version": "6.2.1" }, { "aliases": [ "CVE-2026-59871" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-59871", "percentile": 0.50871, "score": 0.00644 }, "fix_state": "fixed", "fixed_in": [ "7.5.18" ], "id": "GHSA-w8wr-v893-vjvp", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "tar", "severity": "Medium", "summary": "node-tar: Process crash via PAX numeric path type confusion", "url": "https://github.com/advisories/GHSA-w8wr-v893-vjvp", "version": "6.2.1" }, { "aliases": [ "CVE-2026-84933" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84933", "percentile": 0.23063, "score": 0.00303 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-2jfj-6hjv-fm6j", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches", "url": "https://github.com/advisories/GHSA-2jfj-6hjv-fm6j", "version": "7.29.0" }, { "aliases": [ "CVE-2026-85024" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-85024", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-3wwx-pv8p-q78v", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unhandled error in WebSocket permessage-deflate decompression", "url": "https://github.com/advisories/GHSA-3wwx-pv8p-q78v", "version": "7.29.0" }, { "aliases": [ "CVE-2026-84890" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-84890", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-3xpg-4rpp-hhhm", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unbounded decompression of compressed responses", "url": "https://github.com/advisories/GHSA-3xpg-4rpp-hhhm", "version": "7.29.0" }, { "aliases": [ "CVE-2026-109924" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109924", "percentile": 0.25125, "score": 0.00321 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-4qv8-2p9j-2685", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unbounded memory in the EventSource parser", "url": "https://github.com/advisories/GHSA-4qv8-2p9j-2685", "version": "7.29.0" }, { "aliases": [ "CVE-2026-87029" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-87029", "percentile": 0.178, "score": 0.0026 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-55wc-3pg8-jfw6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via unhandled exception in the decompress interceptor", "url": "https://github.com/advisories/GHSA-55wc-3pg8-jfw6", "version": "7.29.0" }, { "aliases": [ "CVE-2026-109932" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109932", "percentile": 0.25126, "score": 0.00321 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-9fm3-97px-rjf6", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering", "url": "https://github.com/advisories/GHSA-9fm3-97px-rjf6", "version": "7.29.0" }, { "aliases": [ "CVE-2026-109841" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-109841", "percentile": 0.16687, "score": 0.00252 }, "fix_state": "fixed", "fixed_in": [ "7.30.1" ], "id": "GHSA-f72v-6w45-q472", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Subresource Integrity bypass via non-lowercase algorithm tokens", "url": "https://github.com/advisories/GHSA-f72v-6w45-q472", "version": "7.29.0" }, { "aliases": [ "CVE-2026-18149" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-18149", "percentile": 0.41492, "score": 0.00481 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-pmjh-fq2x-6v4x", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via orphaned RetryHandler response body", "url": "https://github.com/advisories/GHSA-pmjh-fq2x-6v4x", "version": "7.29.0" }, { "aliases": [ "CVE-2026-85014" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-85014", "percentile": 0.30654, "score": 0.00368 }, "fix_state": "fixed", "fixed_in": [ "7.29.1" ], "id": "GHSA-rx4f-c7p8-82vq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "undici", "severity": "Medium", "summary": "undici vulnerable to Denial of Service via WebSocketStream unclean close", "url": "https://github.com/advisories/GHSA-rx4f-c7p8-82vq", "version": "7.29.0" }, { "aliases": [ "CVE-2026-41907" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-41907", "percentile": 0.28633, "score": 0.0035 }, "fix_state": "fixed", "fixed_in": [ "11.1.1" ], "id": "GHSA-w5hq-g745-h8pq", "kev": null, "location": "package-lock.json", "osv_confirmed": true, "package": "uuid", "severity": "Medium", "summary": "uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided", "url": "https://github.com/advisories/GHSA-w5hq-g745-h8pq", "version": "8.3.2" }, { "aliases": [ "CVE-2024-43788" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43788", "percentile": 0.61507, "score": 0.00959 }, "fix_state": "fixed", "fixed_in": [ "5.94.0" ], "id": "GHSA-4vvj-4cpr-p986", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "webpack", "severity": "Medium", "summary": "Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS", "url": "https://github.com/advisories/GHSA-4vvj-4cpr-p986", "version": "5.54.0" }, { "aliases": [ "CVE-2023-26115" ], "ecosystem": "npm", "epss": { "cve": "CVE-2023-26115", "percentile": 0.77329, "score": 0.01709 }, "fix_state": "fixed", "fixed_in": [ "1.2.4" ], "id": "GHSA-j8xg-fqg3-53r7", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "word-wrap", "severity": "Medium", "summary": "word-wrap vulnerable to Regular Expression Denial of Service", "url": "https://github.com/advisories/GHSA-j8xg-fqg3-53r7", "version": "1.2.3" }, { "aliases": [ "CVE-2026-45736" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-45736", "percentile": 0.54801, "score": 0.00745 }, "fix_state": "fixed", "fixed_in": [ "8.20.1" ], "id": "GHSA-58qx-3vcg-4xpx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "ws", "severity": "Medium", "summary": "ws: Uninitialized memory disclosure", "url": "https://github.com/advisories/GHSA-58qx-3vcg-4xpx", "version": "8.17.0" }, { "aliases": [ "CVE-2026-33532" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-33532", "percentile": 0.42049, "score": 0.00488 }, "fix_state": "fixed", "fixed_in": [ "2.8.3" ], "id": "GHSA-48c2-rrv3-qjmp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "yaml", "severity": "Medium", "summary": "yaml is vulnerable to Stack Overflow via deeply nested YAML collections", "url": "https://github.com/advisories/GHSA-48c2-rrv3-qjmp", "version": "2.4.2" }, { "aliases": [ "CVE-2026-49356" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-49356", "percentile": 0.04312, "score": 0.00152 }, "fix_state": "fixed", "fixed_in": [ "7.29.6" ], "id": "GHSA-4x5r-pxfx-6jf8", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "@babel/core", "severity": "Low", "summary": "@babel/core: Arbitrary File Read via sourceMappingURL Comment", "url": "https://github.com/advisories/GHSA-4x5r-pxfx-6jf8", "version": "7.20.12" }, { "aliases": [ "CVE-2026-49356" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-49356", "percentile": 0.04312, "score": 0.00152 }, "fix_state": "fixed", "fixed_in": [ "7.29.6" ], "id": "GHSA-4x5r-pxfx-6jf8", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "@babel/core", "severity": "Low", "summary": "@babel/core: Arbitrary File Read via sourceMappingURL Comment", "url": "https://github.com/advisories/GHSA-4x5r-pxfx-6jf8", "version": "7.24.0" }, { "aliases": [ "CVE-2026-12590" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-12590", "percentile": 0.3549, "score": 0.00412 }, "fix_state": "fixed", "fixed_in": [ "1.20.6" ], "id": "GHSA-v422-hmwv-36x6", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "body-parser", "severity": "Low", "summary": "body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement", "url": "https://github.com/advisories/GHSA-v422-hmwv-36x6", "version": "1.19.0" }, { "aliases": [ "CVE-2025-5889" ], "ecosystem": "npm", "epss": { "cve": "CVE-2025-5889", "percentile": 0.47999, "score": 0.00586 }, "fix_state": "fixed", "fixed_in": [ "1.1.12" ], "id": "GHSA-v6h2-p8h4-qcjw", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "brace-expansion", "severity": "Low", "summary": "brace-expansion Regular Expression Denial of Service vulnerability", "url": "https://github.com/advisories/GHSA-v6h2-p8h4-qcjw", "version": "1.1.11" }, { "aliases": [ "CVE-2024-47764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-47764", "percentile": 0.54777, "score": 0.00744 }, "fix_state": "fixed", "fixed_in": [ "0.7.0" ], "id": "GHSA-pxg6-pf52-xh8x", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "cookie", "severity": "Low", "summary": "cookie accepts cookie name, path, and domain with out of bounds characters", "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "version": "0.4.0" }, { "aliases": [ "CVE-2024-47764" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-47764", "percentile": 0.54777, "score": 0.00744 }, "fix_state": "fixed", "fixed_in": [ "0.7.0" ], "id": "GHSA-pxg6-pf52-xh8x", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "cookie", "severity": "Low", "summary": "cookie accepts cookie name, path, and domain with out of bounds characters", "url": "https://github.com/advisories/GHSA-pxg6-pf52-xh8x", "version": "0.4.2" }, { "aliases": [ "CVE-2026-93753" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-93753", "percentile": 0.43819, "score": 0.00514 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-gcqx-w48m-w2h4", "kev": null, "location": "ts-binary-wrapper/package-lock.json", "osv_confirmed": true, "package": "deepmerge", "severity": "Low", "summary": "deepmerge mergeObject() allows prototype poisoning of returned objects", "url": "https://github.com/advisories/GHSA-gcqx-w48m-w2h4", "version": "4.3.0" }, { "aliases": [ "CVE-2026-93753" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-93753", "percentile": 0.43819, "score": 0.00514 }, "fix_state": "not-fixed", "fixed_in": [], "id": "GHSA-gcqx-w48m-w2h4", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "deepmerge", "severity": "Low", "summary": "deepmerge mergeObject() allows prototype poisoning of returned objects", "url": "https://github.com/advisories/GHSA-gcqx-w48m-w2h4", "version": "4.3.1" }, { "aliases": [ "CVE-2026-24001" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24001", "percentile": 0.49541, "score": 0.00616 }, "fix_state": "fixed", "fixed_in": [ "3.5.1" ], "id": "GHSA-73rr-hh4g-fpgx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "diff", "severity": "Low", "summary": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch", "url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx", "version": "3.5.0" }, { "aliases": [ "CVE-2026-24001" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24001", "percentile": 0.49541, "score": 0.00616 }, "fix_state": "fixed", "fixed_in": [ "4.0.4" ], "id": "GHSA-73rr-hh4g-fpgx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "diff", "severity": "Low", "summary": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch", "url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx", "version": "4.0.2" }, { "aliases": [ "CVE-2026-24001" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-24001", "percentile": 0.49541, "score": 0.00616 }, "fix_state": "fixed", "fixed_in": [ "5.2.2" ], "id": "GHSA-73rr-hh4g-fpgx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "diff", "severity": "Low", "summary": "jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch", "url": "https://github.com/advisories/GHSA-73rr-hh4g-fpgx", "version": "5.2.0" }, { "aliases": [ "CVE-2024-43796" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43796", "percentile": 0.41875, "score": 0.00486 }, "fix_state": "fixed", "fixed_in": [ "4.20.0" ], "id": "GHSA-qw6h-vgh9-j6wx", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "express", "severity": "Low", "summary": "express vulnerable to XSS via response.redirect()", "url": "https://github.com/advisories/GHSA-qw6h-vgh9-j6wx", "version": "4.17.1" }, { "aliases": [ "CVE-2026-110725" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110725", "percentile": 0.22997, "score": 0.00302 }, "fix_state": "fixed", "fixed_in": [ "3.1.9" ], "id": "GHSA-333x-w4r6-6crp", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "Low", "summary": "fast-uri vulnerable to scheme injection via an unescaped first-segment colon in suffix references", "url": "https://github.com/advisories/GHSA-333x-w4r6-6crp", "version": "3.0.6" }, { "aliases": [ "CVE-2026-110095" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-110095", "percentile": 0.21547, "score": 0.00289 }, "fix_state": "fixed", "fixed_in": [ "3.1.9" ], "id": "GHSA-xhq7-xmqj-769h", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "fast-uri", "severity": "Low", "summary": "fast-uri vulnerable to improper path equivalence in relative reference normalization", "url": "https://github.com/advisories/GHSA-xhq7-xmqj-769h", "version": "3.0.6" }, { "aliases": [ "CVE-2026-61712" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-61712", "percentile": 0.34089, "score": 0.00399 }, "fix_state": "fixed", "fixed_in": [ "0.31.1" ], "id": "GHSA-72x6-4j93-7w86", "in_binary": "vulnerable code in binary", "kev": null, "location": "cliv2-private/go.mod", "osv_confirmed": true, "package": "github.com/moby/buildkit", "severity": "Low", "summary": "BuildKit has a possible runtime DoS via unbounded group parsing", "url": "https://github.com/advisories/GHSA-72x6-4j93-7w86", "version": "v0.30.0" }, { "aliases": [], "ecosystem": "npm", "epss": null, "fix_state": "fixed", "fixed_in": [ "4.7.9" ], "id": "GHSA-442j-39wm-28r2", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "handlebars", "severity": "Low", "summary": "Handlebars.js has a Property Access Validation Bypass in container.lookup", "url": "https://github.com/advisories/GHSA-442j-39wm-28r2", "version": "4.7.8" }, { "aliases": [ "CVE-2026-2391" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-2391", "percentile": 0.45582, "score": 0.00542 }, "fix_state": "fixed", "fixed_in": [ "6.14.2" ], "id": "GHSA-w7fw-mjwx-w883", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "qs", "severity": "Low", "summary": "qs's arrayLimit bypass in comma parsing allows denial of service", "url": "https://github.com/advisories/GHSA-w7fw-mjwx-w883", "version": "6.7.0" }, { "aliases": [ "CVE-2024-43799" ], "ecosystem": "npm", "epss": { "cve": "CVE-2024-43799", "percentile": 0.45545, "score": 0.00541 }, "fix_state": "fixed", "fixed_in": [ "0.19.0" ], "id": "GHSA-m6fv-jmcg-4jfg", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "send", "severity": "Low", "summary": "send vulnerable to template injection that can lead to XSS", "url": "https://github.com/advisories/GHSA-m6fv-jmcg-4jfg", "version": "0.17.1" }, { "aliases": [ "CVE-2026-115897" ], "ecosystem": "npm", "epss": { "cve": "CVE-2026-115897", "percentile": 0.23496, "score": 0.00307 }, "fix_state": "fixed", "fixed_in": [ "7.1.3" ], "id": "GHSA-m5mm-p8h7-m29v", "kev": null, "location": "package-lock.json", "osv_confirmed": false, "package": "serialize-javascript", "severity": "Low", "summary": "Serialize JavaScript: Cross-site scripting (XSS) via unescaped \") cau", "url": "https://go.dev/cl/849365", "version": "v0.60.0" }, { "aliases": [ "CVE-2026-97045" ], "ecosystem": "golang", "epss": { "cve": "CVE-2026-97045", "percentile": 0.10117, "score": 0.00202 }, "fix_state": "fixed", "fixed_in": [ "0.62.0" ], "id": "GO-2026-6866", "in_binary": "vulnerable code in binary", "kev": null, "location": "cliv2/go.mod", "osv_confirmed": true, "package": "golang.org/x/net", "severity": "Unknown", "summary": "In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace (such as or f", "url": "https://go.dev/cl/855121", "version": "v0.60.0" } ], "workflow_audit": { "files": 9, "findings": [ { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/create-build-image.yml", "line": 31, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/create-build-image.yml", "line": 32, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/create-build-image.yml", "line": 33, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 28, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 45, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 48, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 75, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 87, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 88, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 91, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 103, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 115, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 197, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 209, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 210, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 213, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 216, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 231, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 245, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 246, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 258, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 279, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 280, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 289, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/deployment-monitor.yml", "line": 340, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/iac-smoke-tests-pulls.yml", "line": 15, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/iac-smoke-tests-pulls.yml", "line": 21, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/iac-smoke-tests-pulls.yml", "line": 28, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/pr-housekeeping.yml", "line": 13, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/snyk-protect-production-smoke-tests.yml", "line": 22, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/snyk-protect-production-smoke-tests.yml", "line": 24, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/snyk-protect-production-smoke-tests.yml", "line": 32, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 16, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 24, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 92, "note": "this step", "rule": "template-injection", "severity": "High", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/sync-cli-readme.yml", "line": 16, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "unpinned action reference", "file": ".github/workflows/sync-cli-readme.yml", "line": 24, "note": "this step", "rule": "unpinned-uses", "severity": "High", "url": "https://docs.zizmor.sh/audits/#unpinned-uses" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-readme.yml", "line": 105, "note": "this step", "rule": "template-injection", "severity": "High", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/create-build-image.yml", "line": 1, "note": "default permissions used due to no permissions: block", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/create-build-image.yml", "line": 9, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/create-build-image.yml", "line": 18, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 1, "note": "default permissions used due to no permissions: block", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 19, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 34, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 82, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 110, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 204, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 238, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 265, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 297, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 316, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/deployment-monitor.yml", "line": 334, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/iac-smoke-tests-pulls.yml", "line": 1, "note": "default permissions used due to no permissions: block", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/iac-smoke-tests-pulls.yml", "line": 8, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/iac-smoke-tests-pulls.yml", "line": 87, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "secrets unconditionally inherited by called workflow", "file": ".github/workflows/iac-smoke-tests-pulls.yml", "line": 89, "note": "this reusable workflow", "rule": "secrets-inherit", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#secrets-inherit" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/pr-housekeeping.yml", "line": 9, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/snyk-protect-production-smoke-tests.yml", "line": 12, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 12, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "Medium", "description": "overly broad permissions", "file": ".github/workflows/sync-cli-readme.yml", "line": 12, "note": "this job", "rule": "excessive-permissions", "severity": "Medium", "url": "https://docs.zizmor.sh/audits/#excessive-permissions" }, { "confidence": "High", "description": "ad-hoc installation of packages", "file": ".github/workflows/check-dependencies.yml", "line": 28, "note": "this step", "rule": "adhoc-packages", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#adhoc-packages" }, { "confidence": "High", "description": "ad-hoc installation of packages", "file": ".github/workflows/danger-zone.yml", "line": 33, "note": "this step", "rule": "adhoc-packages", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#adhoc-packages" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/deployment-monitor.yml", "line": 23, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/deployment-monitor.yml", "line": 67, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/deployment-monitor.yml", "line": 67, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/deployment-monitor.yml", "line": 67, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/deployment-monitor.yml", "line": 67, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/deployment-monitor.yml", "line": 125, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/deployment-monitor.yml", "line": 125, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "ad-hoc installation of packages", "file": ".github/workflows/deployment-monitor.yml", "line": 221, "note": "this step", "rule": "adhoc-packages", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#adhoc-packages" }, { "confidence": "High", "description": "use GitHub's dedicated self-repository syntax", "file": ".github/workflows/iac-smoke-tests-pulls.yml", "line": 88, "note": "this job", "rule": "self-repository", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#self-repository" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 46, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 46, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 46, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 46, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 46, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 84, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 92, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-help-to-user-docs.yml", "line": 92, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-readme.yml", "line": 45, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-readme.yml", "line": 45, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-readme.yml", "line": 45, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-readme.yml", "line": 45, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-readme.yml", "line": 45, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-readme.yml", "line": 97, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-readme.yml", "line": 105, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" }, { "confidence": "High", "description": "code injection via template expansion", "file": ".github/workflows/sync-cli-readme.yml", "line": 105, "note": "this step", "rule": "template-injection", "severity": "Low", "url": "https://docs.zizmor.sh/audits/#template-injection" } ] } }, "updated": "2026-11-02" }