{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:00.401039Z","repo":{"ref":{"host":"github.com","owner":"Echo3ToEcho7","name":"chatgov"},"default_branch":"main","clone_url":"https://github.com/Echo3ToEcho7/chatgov.git","html_url":"https://github.com/Echo3ToEcho7/chatgov","description":"Politicians lie. Use LLMs to chat with the contents of US bills and laws to discover what they do. #vibecoded","stars":0,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":2788,"primary_language":"TypeScript","license_spdx":null,"created_at":"2025-06-01T20:26:08Z","pushed_at":"2025-06-02T22:25:12Z","security_policy_url":null,"distribution":{"owner_created_at":"2011-03-31T14:53:09Z","owner_type":"User","release_assets":[]}},"commit_sha":"47c27b68af2895bc681a7de675da5e351e5ee2da","profile":{"lines_by_language":{"TypeScript":4536,"JavaScript":34},"files_by_category":{"source":28,"config":8,"other":5,"docs":2,"binary":2,"generated":1,"oversized":1},"source_lines":4570,"test_lines":0},"pillars":{"ai_provenance":{"score":12.1,"confidence":0.75,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.121,"suspected_share":0.0,"estimated_share":0.121,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null,"style_index":4.048},"summary":"Explicit AI attribution on 12% of first-party code added; an estimated 12% including velocity signals."},"quality":{"score":43.8,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":46.7,"duplication":40.5,"lint":100.0,"testing":0.0,"docs":40.0,"type_safety":100.0,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 25% of function code in complex or long functions; 15% duplicated lines. Weakest area: testing."},"security":{"score":58.8,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":95.3,"dependencies":0.2,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 180 known vulnerabilities in 48 dependencies. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":34.0,"checked":34.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":20.0,"attributed_commits":18.0,"attributed_commit_share":0.9,"effective_loc":4742.0,"attributed_loc":574.0,"attributed_loc_share":0.12104597216364403,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 18 attributed commits, 574 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"47c27b68af2895bc681a7de675da5e351e5ee2da","url":"https://github.com/Echo3ToEcho7/chatgov/commit/47c27b68af2895bc681a7de675da5e351e5ee2da","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"a781ba53ed003da1e4cf3358c54961a6f5ac29c7","url":"https://github.com/Echo3ToEcho7/chatgov/commit/a781ba53ed003da1e4cf3358c54961a6f5ac29c7","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"6c67a8889984bb7d62fef98f836c314bc8765189","url":"https://github.com/Echo3ToEcho7/chatgov/commit/6c67a8889984bb7d62fef98f836c314bc8765189","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"42a6af9c82b228a83f8d4169b95aa7bdd9a44385","url":"https://github.com/Echo3ToEcho7/chatgov/commit/42a6af9c82b228a83f8d4169b95aa7bdd9a44385","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"4cc0de52a5e00c2f0a648199a2e096cc44581156","url":"https://github.com/Echo3ToEcho7/chatgov/commit/4cc0de52a5e00c2f0a648199a2e096cc44581156","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"8e128fdc4cde54a2d03372346d7340c47c973ce6","url":"https://github.com/Echo3ToEcho7/chatgov/commit/8e128fdc4cde54a2d03372346d7340c47c973ce6","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"8044dcd0949a3635663900fddf443790551a906d","url":"https://github.com/Echo3ToEcho7/chatgov/commit/8044dcd0949a3635663900fddf443790551a906d","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"1f7c2c75fad42248219d54c0ff087215da80f4d6","url":"https://github.com/Echo3ToEcho7/chatgov/commit/1f7c2c75fad42248219d54c0ff087215da80f4d6","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"4833f7d4442354f0907a136c6bee2167c9eeb09e","url":"https://github.com/Echo3ToEcho7/chatgov/commit/4833f7d4442354f0907a136c6bee2167c9eeb09e","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"f919b7be6135517a6df722c507bd51ed9f47c93a","url":"https://github.com/Echo3ToEcho7/chatgov/commit/f919b7be6135517a6df722c507bd51ed9f47c93a","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"080ad51361fec59f631b961446874035a18e7fd8","url":"https://github.com/Echo3ToEcho7/chatgov/commit/080ad51361fec59f631b961446874035a18e7fd8","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"5dccc10ce7aeca2fd4a687ed9d4f452fb4a71d1f","url":"https://github.com/Echo3ToEcho7/chatgov/commit/5dccc10ce7aeca2fd4a687ed9d4f452fb4a71d1f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"58cba1161399917f35450adf2fd05b6159f40a20","url":"https://github.com/Echo3ToEcho7/chatgov/commit/58cba1161399917f35450adf2fd05b6159f40a20","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"eb802420dbdf34ff9fcc0d7971e72f583934018b","url":"https://github.com/Echo3ToEcho7/chatgov/commit/eb802420dbdf34ff9fcc0d7971e72f583934018b","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"a2a6fe5a6c2f7d978a26c96d34aa3ecc1c97a531","url":"https://github.com/Echo3ToEcho7/chatgov/commit/a2a6fe5a6c2f7d978a26c96d34aa3ecc1c97a531","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"050471ad8c32a4b0b71a05b9862f860c6b108e3c","url":"https://github.com/Echo3ToEcho7/chatgov/commit/050471ad8c32a4b0b71a05b9862f860c6b108e3c","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"509ed2321222e0f7afda6cff81d56345fdbae3bc","url":"https://github.com/Echo3ToEcho7/chatgov/commit/509ed2321222e0f7afda6cff81d56345fdbae3bc","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"96851230b96365ff40731464ef892d07bfa43bb0","url":"https://github.com/Echo3ToEcho7/chatgov/commit/96851230b96365ff40731464ef892d07bfa43bb0","weight":0.9}],"data":{"attributed_loc_by_commit":{"96851230b96365ff40731464ef892d07bfa43bb0":0,"509ed2321222e0f7afda6cff81d56345fdbae3bc":0,"050471ad8c32a4b0b71a05b9862f860c6b108e3c":0,"a2a6fe5a6c2f7d978a26c96d34aa3ecc1c97a531":34,"eb802420dbdf34ff9fcc0d7971e72f583934018b":62,"58cba1161399917f35450adf2fd05b6159f40a20":17,"5dccc10ce7aeca2fd4a687ed9d4f452fb4a71d1f":1,"080ad51361fec59f631b961446874035a18e7fd8":44,"f919b7be6135517a6df722c507bd51ed9f47c93a":55,"4833f7d4442354f0907a136c6bee2167c9eeb09e":35,"1f7c2c75fad42248219d54c0ff087215da80f4d6":53,"8044dcd0949a3635663900fddf443790551a906d":13,"8e128fdc4cde54a2d03372346d7340c47c973ce6":23,"4cc0de52a5e00c2f0a648199a2e096cc44581156":77,"42a6af9c82b228a83f8d4169b95aa7bdd9a44385":110,"6c67a8889984bb7d62fef98f836c314bc8765189":37,"a781ba53ed003da1e4cf3358c54961a6f5ac29c7":13,"47c27b68af2895bc681a7de675da5e351e5ee2da":0},"tools":{"claude-code":{"name":"Claude Code","commits":18,"loc":574,"first_seen":1748810796,"last_seen":1748903097}},"monthly":{"2025-06":{"loc":4742,"attributed_loc":574}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":4.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":574.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":109.74978429680759,"median_loc_per_hour":68.6248921484038,"pr_timed_units":0.0,"excluded_import_loc":4168.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["79fcd45a40f3f2a9532540540f5d3b07fa1cf63a"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":4570.0,"index":4.048,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":2.0,"per_kloc:placeholder":0.438,"files:placeholder":1.0,"count:emoji_in_code":29.0,"per_kloc:emoji_in_code":6.346,"files:emoji_in_code":6.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:placeholder","description":"placeholder or demo-only phrasing: // In a real application, you might also send logs to a server","ref":"src/utils/logger.ts:70","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/utils/logger.ts#L70","weight":0.0},{"kind":"stylometry:placeholder","description":"placeholder or demo-only phrasing: // In a real app, send error logs to monitoring service","ref":"src/utils/logger.ts:77","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/utils/logger.ts#L77","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":10.0,"findings_high":0.0,"findings_medium":0.0,"findings_low":10.0,"weighted_findings":0.625,"scanned_lines":4570.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"server/routes/billText.ts","line":15,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:server/routes/billText.ts:15"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"server/routes/billText.ts","line":21,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:server/routes/billText.ts:21"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"server/routes/congress.ts","line":283,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:server/routes/congress.ts:283"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"server/routes/congress.ts","line":334,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:server/routes/congress.ts:334"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"server/routes/congress.ts","line":371,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:server/routes/congress.ts:371"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"src/services/congressApi.ts","line":88,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:src/services/congressApi.ts:88"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"src/utils/logger.ts","line":57,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:src/utils/logger.ts:57"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"src/utils/logger.ts","line":60,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:src/utils/logger.ts:60"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"src/utils/logger.ts","line":63,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:src/utils/logger.ts:63"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"src/utils/logger.ts","line":66,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:src/utils/logger.ts:66"}],"evidence":[],"data":{"rulesets":["typescript","javascript","dockerfile"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":48.0,"vulnerabilities":180.0,"vulns_critical":8.0,"vulns_high":89.0,"vulns_medium":70.0,"vulns_low":13.0,"vulns_unknown":0.0,"penalty":381.0},"findings":[{"rule_id":"osv/GHSA-q9v2-7m5w-4693","severity":"critical","message":"expr-eval@2.0.2 (npm) is affected by GHSA-q9v2-7m5w-4693","path":"package-lock.json","line":null,"fingerprint":"expr-eval@2.0.2 (npm):GHSA-q9v2-7m5w-4693"},{"rule_id":"osv/GHSA-m7jm-9gc2-mpf2","severity":"critical","message":"fast-xml-parser@4.5.3 (npm) is affected by GHSA-m7jm-9gc2-mpf2","path":"package-lock.json","line":null,"fingerprint":"fast-xml-parser@4.5.3 (npm):GHSA-m7jm-9gc2-mpf2"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@4.0.0 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"package-lock.json","line":null,"fingerprint":"form-data@4.0.0 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@4.0.2 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"package-lock.json","line":null,"fingerprint":"form-data@4.0.2 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-xq3m-2v4x-88gg","severity":"critical","message":"protobufjs@7.5.3 (npm) is affected by GHSA-xq3m-2v4x-88gg","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-xq3m-2v4x-88gg"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.7 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"package-lock.json","line":null,"fingerprint":"proxy-addr@2.0.7 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.8.2 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"package-lock.json","line":null,"fingerprint":"shell-quote@1.8.2 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@7.4.3 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-5375-pq7m-f5r2","severity":"high","message":"@grpc/grpc-js@1.13.4 (npm) is affected by GHSA-5375-pq7m-f5r2","path":"package-lock.json","line":null,"fingerprint":"@grpc/grpc-js@1.13.4 (npm):GHSA-5375-pq7m-f5r2"},{"rule_id":"osv/GHSA-99f4-grh7-6pcq","severity":"high","message":"@grpc/grpc-js@1.13.4 (npm) is affected by GHSA-99f4-grh7-6pcq","path":"package-lock.json","line":null,"fingerprint":"@grpc/grpc-js@1.13.4 (npm):GHSA-99f4-grh7-6pcq"},{"rule_id":"osv/GHSA-m9gg-hp2v-232j","severity":"high","message":"@grpc/grpc-js@1.13.4 (npm) is affected by GHSA-m9gg-hp2v-232j","path":"package-lock.json","line":null,"fingerprint":"@grpc/grpc-js@1.13.4 (npm):GHSA-m9gg-hp2v-232j"},{"rule_id":"osv/GHSA-r399-636x-v7f6","severity":"high","message":"@langchain/core@0.3.57 (npm) is affected by GHSA-r399-636x-v7f6","path":"package-lock.json","line":null,"fingerprint":"@langchain/core@0.3.57 (npm):GHSA-r399-636x-v7f6"},{"rule_id":"osv/GHSA-35jp-ww65-95wh","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-35jp-ww65-95wh","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-35jp-ww65-95wh"},{"rule_id":"osv/GHSA-3g43-6gmg-66jw","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-3g43-6gmg-66jw","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-3g43-6gmg-66jw"},{"rule_id":"osv/GHSA-43fc-jf86-j433","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-43fc-jf86-j433","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-43fc-jf86-j433"},{"rule_id":"osv/GHSA-4hjh-wcwx-xvwj","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-4hjh-wcwx-xvwj","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-4hjh-wcwx-xvwj"},{"rule_id":"osv/GHSA-62hf-57xw-28j9","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-62hf-57xw-28j9","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-62hf-57xw-28j9"},{"rule_id":"osv/GHSA-6chq-wfr3-2hj9","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-6chq-wfr3-2hj9","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-6chq-wfr3-2hj9"},{"rule_id":"osv/GHSA-777c-7fjr-54vf","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-777c-7fjr-54vf","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-777c-7fjr-54vf"},{"rule_id":"osv/GHSA-hfxv-24rg-xrqf","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-hfxv-24rg-xrqf","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-hfxv-24rg-xrqf"},{"rule_id":"osv/GHSA-j5f8-grm9-p9fc","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-j5f8-grm9-p9fc","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-j5f8-grm9-p9fc"},{"rule_id":"osv/GHSA-p92q-9vqr-4j8v","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-p92q-9vqr-4j8v","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-p92q-9vqr-4j8v"},{"rule_id":"osv/GHSA-pf86-5x62-jrwf","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-pf86-5x62-jrwf","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-pf86-5x62-jrwf"},{"rule_id":"osv/GHSA-pmwg-cvhr-8vh7","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-pmwg-cvhr-8vh7","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-pmwg-cvhr-8vh7"},{"rule_id":"osv/GHSA-q8qp-cvcw-x6jj","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-q8qp-cvcw-x6jj","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-q8qp-cvcw-x6jj"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.20.3 (npm) is affected by GHSA-27r3-jxmh-p828","path":"package-lock.json","line":null,"fingerprint":"body-parser@1.20.3 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.25.0 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"package-lock.json","line":null,"fingerprint":"browserslist@4.25.0 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.25.0 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"package-lock.json","line":null,"fingerprint":"browserslist@4.25.0 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-8gw3-rxh4-v6jx","severity":"high","message":"expr-eval@2.0.2 (npm) is affected by GHSA-8gw3-rxh4-v6jx","path":"package-lock.json","line":null,"fingerprint":"expr-eval@2.0.2 (npm):GHSA-8gw3-rxh4-v6jx"},{"rule_id":"osv/GHSA-jc85-fpwf-qm7x","severity":"high","message":"expr-eval@2.0.2 (npm) is affected by GHSA-jc85-fpwf-qm7x","path":"package-lock.json","line":null,"fingerprint":"expr-eval@2.0.2 (npm):GHSA-jc85-fpwf-qm7x"},{"rule_id":"osv/GHSA-8gc5-j5rx-235r","severity":"high","message":"fast-xml-parser@4.5.3 (npm) is affected by GHSA-8gc5-j5rx-235r","path":"package-lock.json","line":null,"fingerprint":"fast-xml-parser@4.5.3 (npm):GHSA-8gc5-j5rx-235r"},{"rule_id":"osv/GHSA-jmr7-xgp7-cmfj","severity":"high","message":"fast-xml-parser@4.5.3 (npm) is affected by GHSA-jmr7-xgp7-cmfj","path":"package-lock.json","line":null,"fingerprint":"fast-xml-parser@4.5.3 (npm):GHSA-jmr7-xgp7-cmfj"},{"rule_id":"osv/GHSA-25h7-pfq9-p65f","severity":"high","message":"flatted@3.3.3 (npm) is affected by GHSA-25h7-pfq9-p65f","path":"package-lock.json","line":null,"fingerprint":"flatted@3.3.3 (npm):GHSA-25h7-pfq9-p65f"},{"rule_id":"osv/GHSA-rf6f-7fwh-wjgh","severity":"high","message":"flatted@3.3.3 (npm) is affected by GHSA-rf6f-7fwh-wjgh","path":"package-lock.json","line":null,"fingerprint":"flatted@3.3.3 (npm):GHSA-rf6f-7fwh-wjgh"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@4.0.0 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"package-lock.json","line":null,"fingerprint":"form-data@4.0.0 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@4.0.2 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"package-lock.json","line":null,"fingerprint":"form-data@4.0.2 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@4.1.0 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@4.1.0 (npm) is affected by GHSA-52cp-r559-cp3m","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@4.1.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-869p-cjfg-cm3x","severity":"high","message":"jws@3.2.2 (npm) is affected by GHSA-869p-cjfg-cm3x","path":"package-lock.json","line":null,"fingerprint":"jws@3.2.2 (npm):GHSA-869p-cjfg-cm3x"},{"rule_id":"osv/GHSA-r399-636x-v7f6","severity":"high","message":"langchain@0.3.27 (npm) is affected by GHSA-r399-636x-v7f6","path":"package-lock.json","line":null,"fingerprint":"langchain@0.3.27 (npm):GHSA-r399-636x-v7f6"},{"rule_id":"osv/GHSA-3644-q5cj-c5c7","severity":"high","message":"langsmith@0.3.29 (npm) is affected by GHSA-3644-q5cj-c5c7","path":"package-lock.json","line":null,"fingerprint":"langsmith@0.3.29 (npm):GHSA-3644-q5cj-c5c7"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.21 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.21 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-28wg-ghj8-5hjv","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-2v37-7h3g-55p8","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-xwg4-73v4-xw9w","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-xwg4-73v4-xw9w","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-xwg4-73v4-xw9w"},{"rule_id":"osv/GHSA-37ch-88jc-xwx2","severity":"high","message":"path-to-regexp@0.1.12 (npm) is affected by GHSA-37ch-88jc-xwx2","path":"package-lock.json","line":null,"fingerprint":"path-to-regexp@0.1.12 (npm):GHSA-37ch-88jc-xwx2"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@2.3.1 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"package-lock.json","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@4.0.2 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"package-lock.json","line":null,"fingerprint":"picomatch@4.0.2 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-7mvr-c777-76hp","severity":"high","message":"playwright@1.52.0 (npm) is affected by GHSA-7mvr-c777-76hp","path":"package-lock.json","line":null,"fingerprint":"playwright@1.52.0 (npm):GHSA-7mvr-c777-76hp"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.5.4 (npm) is affected by GHSA-6g55-p6wh-862q","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.4 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.5.4 (npm) is affected by GHSA-r28c-9q8g-f849","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.4 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-66ff-xgx4-vchm","severity":"high","message":"protobufjs@7.5.3 (npm) is affected by GHSA-66ff-xgx4-vchm","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-66ff-xgx4-vchm"},{"rule_id":"osv/GHSA-685m-2w69-288q","severity":"high","message":"protobufjs@7.5.3 (npm) is affected by GHSA-685m-2w69-288q","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-685m-2w69-288q"},{"rule_id":"osv/GHSA-75px-5xx7-5xc7","severity":"high","message":"protobufjs@7.5.3 (npm) is affected by GHSA-75px-5xx7-5xc7","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-75px-5xx7-5xc7"},{"rule_id":"osv/GHSA-jvwf-75h9-cwgg","severity":"high","message":"protobufjs@7.5.3 (npm) is affected by GHSA-jvwf-75h9-cwgg","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-jvwf-75h9-cwgg"},{"rule_id":"osv/GHSA-wcpc-wj8m-hjx6","severity":"high","message":"protobufjs@7.5.3 (npm) is affected by GHSA-wcpc-wj8m-hjx6","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-wcpc-wj8m-hjx6"},{"rule_id":"osv/GHSA-2w69-qvjg-hvjx","severity":"high","message":"react-router@7.6.1 (npm) is affected by GHSA-2w69-qvjg-hvjx","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-2w69-qvjg-hvjx"},{"rule_id":"osv/GHSA-3cgp-3xvw-98x8","severity":"high","message":"react-router@7.6.1 (npm) is affected by GHSA-3cgp-3xvw-98x8","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-3cgp-3xvw-98x8"},{"rule_id":"osv/GHSA-49rj-9fvp-4h2h","severity":"high","message":"react-router@7.6.1 (npm) is affected by GHSA-49rj-9fvp-4h2h","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-49rj-9fvp-4h2h"},{"rule_id":"osv/GHSA-8v8x-cx79-35w7","severity":"high","message":"react-router@7.6.1 (npm) is affected by GHSA-8v8x-cx79-35w7","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-8v8x-cx79-35w7"},{"rule_id":"osv/GHSA-8x6r-g9mw-2r78","severity":"high","message":"react-router@7.6.1 (npm) is affected by GHSA-8x6r-g9mw-2r78","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-8x6r-g9mw-2r78"},{"rule_id":"osv/GHSA-chx6-hx7r-mcp5","severity":"high","message":"react-router@7.6.1 (npm) is affected by GHSA-chx6-hx7r-mcp5","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-chx6-hx7r-mcp5"},{"rule_id":"osv/GHSA-rxv8-25v2-qmq8","severity":"high","message":"react-router@7.6.1 (npm) is affected by GHSA-rxv8-25v2-qmq8","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-rxv8-25v2-qmq8"},{"rule_id":"osv/GHSA-mw96-cpmx-2vgc","severity":"high","message":"rollup@4.41.1 (npm) is affected by GHSA-mw96-cpmx-2vgc","path":"package-lock.json","line":null,"fingerprint":"rollup@4.41.1 (npm):GHSA-mw96-cpmx-2vgc"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.8.2 (npm) is affected by GHSA-395f-4hp3-45gv","path":"package-lock.json","line":null,"fingerprint":"shell-quote@1.8.2 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q","path":"package-lock.json","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-83g3-92jg-28cx","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-r292-9mhp-454m","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@10.0.0 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"package-lock.json","line":null,"fingerprint":"uuid@10.0.0 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@9.0.1 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"package-lock.json","line":null,"fingerprint":"uuid@9.0.1 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@6.3.5 (npm) is affected by GHSA-587h-7wmj-h5pm","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-p9ff-h696-f583","severity":"high","message":"vite@6.3.5 (npm) is affected by GHSA-p9ff-h696-f583","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-p9ff-h696-f583"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@8.18.2 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"package-lock.json","line":null,"fingerprint":"ws@8.18.2 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-mrhx-c7xc-m3w5","severity":"high","message":"zod@3.25.45 (npm) is affected by GHSA-mrhx-c7xc-m3w5","path":"package-lock.json","line":null,"fingerprint":"zod@3.25.45 (npm):GHSA-mrhx-c7xc-m3w5"},{"rule_id":"osv/GHSA-p498-v437-472g","severity":"medium","message":"@humanfs/node@0.16.6 (npm) is affected by GHSA-p498-v437-472g","path":"package-lock.json","line":null,"fingerprint":"@humanfs/node@0.16.6 (npm):GHSA-p498-v437-472g"},{"rule_id":"osv/GHSA-gf3v-fwqg-4vh7","severity":"medium","message":"@langchain/community@0.3.45 (npm) is affected by GHSA-gf3v-fwqg-4vh7","path":"package-lock.json","line":null,"fingerprint":"@langchain/community@0.3.45 (npm):GHSA-gf3v-fwqg-4vh7"},{"rule_id":"osv/GHSA-mphv-75cg-56wg","severity":"medium","message":"@langchain/community@0.3.45 (npm) is affected by GHSA-mphv-75cg-56wg","path":"package-lock.json","line":null,"fingerprint":"@langchain/community@0.3.45 (npm):GHSA-mphv-75cg-56wg"},{"rule_id":"osv/GHSA-q6x5-8v7m-xcrf","severity":"medium","message":"@protobufjs/utf8@1.1.0 (npm) is affected by GHSA-q6x5-8v7m-xcrf","path":"package-lock.json","line":null,"fingerprint":"@protobufjs/utf8@1.1.0 (npm):GHSA-q6x5-8v7m-xcrf"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@6.12.6 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"package-lock.json","line":null,"fingerprint":"ajv@6.12.6 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-3p68-rc4w-qgx5","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-3p68-rc4w-qgx5","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-3p68-rc4w-qgx5"},{"rule_id":"osv/GHSA-3w6x-2g7m-8v23","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-3w6x-2g7m-8v23","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-3w6x-2g7m-8v23"},{"rule_id":"osv/GHSA-42h9-826w-cgv3","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-42h9-826w-cgv3","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-42h9-826w-cgv3"},{"rule_id":"osv/GHSA-445q-vr5w-6q77","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-445q-vr5w-6q77","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-445q-vr5w-6q77"},{"rule_id":"osv/GHSA-5c9x-8gcm-mpgx","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-5c9x-8gcm-mpgx","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-5c9x-8gcm-mpgx"},{"rule_id":"osv/GHSA-7q8q-rj6j-mhjq","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-7q8q-rj6j-mhjq","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-7q8q-rj6j-mhjq"},{"rule_id":"osv/GHSA-898c-q2cr-xwhg","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-898c-q2cr-xwhg","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-898c-q2cr-xwhg"},{"rule_id":"osv/GHSA-9fr6-4gfg-395g","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-9fr6-4gfg-395g","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-9fr6-4gfg-395g"},{"rule_id":"osv/GHSA-fvcv-3m26-pcqx","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-fvcv-3m26-pcqx","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-fvcv-3m26-pcqx"},{"rule_id":"osv/GHSA-j8rh-479h-cp32","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-j8rh-479h-cp32","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-j8rh-479h-cp32"},{"rule_id":"osv/GHSA-jqh4-m9w3-8hp9","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-jqh4-m9w3-8hp9","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-jqh4-m9w3-8hp9"},{"rule_id":"osv/GHSA-m7pr-hjqh-92cm","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-m7pr-hjqh-92cm","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-m7pr-hjqh-92cm"},{"rule_id":"osv/GHSA-mmx7-hfxf-jppx","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-mmx7-hfxf-jppx","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-mmx7-hfxf-jppx"},{"rule_id":"osv/GHSA-pmv8-rq9r-6j72","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-pmv8-rq9r-6j72","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-pmv8-rq9r-6j72"},{"rule_id":"osv/GHSA-vf2m-468p-8v99","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-vf2m-468p-8v99","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-vf2m-468p-8v99"},{"rule_id":"osv/GHSA-vh66-26gq-q6x8","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-vh66-26gq-q6x8","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-vh66-26gq-q6x8"},{"rule_id":"osv/GHSA-w9j2-pvgh-6h63","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-w9j2-pvgh-6h63","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-w9j2-pvgh-6h63"},{"rule_id":"osv/GHSA-xx6v-rp6x-q39c","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-xx6v-rp6x-q39c","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-xx6v-rp6x-q39c"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-gcqx-w48m-w2h4","severity":"medium","message":"deepmerge@4.3.1 (npm) is affected by GHSA-gcqx-w48m-w2h4","path":"package-lock.json","line":null,"fingerprint":"deepmerge@4.3.1 (npm):GHSA-gcqx-w48m-w2h4"},{"rule_id":"osv/GHSA-gh4j-gqv2-49f6","severity":"medium","message":"fast-xml-parser@4.5.3 (npm) is affected by GHSA-gh4j-gqv2-49f6","path":"package-lock.json","line":null,"fingerprint":"fast-xml-parser@4.5.3 (npm):GHSA-gh4j-gqv2-49f6"},{"rule_id":"osv/GHSA-jp2q-39xq-3w4g","severity":"medium","message":"fast-xml-parser@4.5.3 (npm) is affected by GHSA-jp2q-39xq-3w4g","path":"package-lock.json","line":null,"fingerprint":"fast-xml-parser@4.5.3 (npm):GHSA-jp2q-39xq-3w4g"},{"rule_id":"osv/GHSA-5v7r-6r5c-r473","severity":"medium","message":"file-type@16.5.4 (npm) is affected by GHSA-5v7r-6r5c-r473","path":"package-lock.json","line":null,"fingerprint":"file-type@16.5.4 (npm):GHSA-5v7r-6r5c-r473"},{"rule_id":"osv/GHSA-r4q5-vmmm-2653","severity":"medium","message":"follow-redirects@1.15.9 (npm) is affected by GHSA-r4q5-vmmm-2653","path":"package-lock.json","line":null,"fingerprint":"follow-redirects@1.15.9 (npm):GHSA-r4q5-vmmm-2653"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@4.1.0 (npm) is affected by GHSA-h67p-54hq-rp68","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@4.1.0 (npm) is affected by GHSA-mh29-5h37-fv8m","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-fw9q-39r9-c252","severity":"medium","message":"langsmith@0.3.29 (npm) is affected by GHSA-fw9q-39r9-c252","path":"package-lock.json","line":null,"fingerprint":"langsmith@0.3.29 (npm):GHSA-fw9q-39r9-c252"},{"rule_id":"osv/GHSA-rr7j-v2q5-chgv","severity":"medium","message":"langsmith@0.3.29 (npm) is affected by GHSA-rr7j-v2q5-chgv","path":"package-lock.json","line":null,"fingerprint":"langsmith@0.3.29 (npm):GHSA-rr7j-v2q5-chgv"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.17.21 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.21 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@9.0.5 (npm) is affected by GHSA-g3hv-75wg-m249","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@2.3.1 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"package-lock.json","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@4.0.2 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"package-lock.json","line":null,"fingerprint":"picomatch@4.0.2 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.4 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.4 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.5.4 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.4 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-2pr8-phx7-x9h3","severity":"medium","message":"protobufjs@7.5.3 (npm) is affected by GHSA-2pr8-phx7-x9h3","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-2pr8-phx7-x9h3"},{"rule_id":"osv/GHSA-f38q-mgvj-vph7","severity":"medium","message":"protobufjs@7.5.3 (npm) is affected by GHSA-f38q-mgvj-vph7","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-f38q-mgvj-vph7"},{"rule_id":"osv/GHSA-fx83-v9x8-x52w","severity":"medium","message":"protobufjs@7.5.3 (npm) is affected by GHSA-fx83-v9x8-x52w","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-fx83-v9x8-x52w"},{"rule_id":"osv/GHSA-j3f2-48v5-ccww","severity":"medium","message":"protobufjs@7.5.3 (npm) is affected by GHSA-j3f2-48v5-ccww","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-j3f2-48v5-ccww"},{"rule_id":"osv/GHSA-jggg-4jg4-v7c6","severity":"medium","message":"protobufjs@7.5.3 (npm) is affected by GHSA-jggg-4jg4-v7c6","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-jggg-4jg4-v7c6"},{"rule_id":"osv/GHSA-q6x5-8v7m-xcrf","severity":"medium","message":"protobufjs@7.5.3 (npm) is affected by GHSA-q6x5-8v7m-xcrf","path":"package-lock.json","line":null,"fingerprint":"protobufjs@7.5.3 (npm):GHSA-q6x5-8v7m-xcrf"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.13.0 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"package-lock.json","line":null,"fingerprint":"qs@6.13.0 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.13.0 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"package-lock.json","line":null,"fingerprint":"qs@6.13.0 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.13.0 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"package-lock.json","line":null,"fingerprint":"qs@6.13.0 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-q8mj-m7cp-5q26","severity":"medium","message":"qs@6.13.0 (npm) is affected by GHSA-q8mj-m7cp-5q26","path":"package-lock.json","line":null,"fingerprint":"qs@6.13.0 (npm):GHSA-q8mj-m7cp-5q26"},{"rule_id":"osv/GHSA-2j2x-hqr9-3h42","severity":"medium","message":"react-router@7.6.1 (npm) is affected by GHSA-2j2x-hqr9-3h42","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-2j2x-hqr9-3h42"},{"rule_id":"osv/GHSA-337j-9hxr-rhxg","severity":"medium","message":"react-router@7.6.1 (npm) is affected by GHSA-337j-9hxr-rhxg","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-337j-9hxr-rhxg"},{"rule_id":"osv/GHSA-9jcx-v3wj-wh4m","severity":"medium","message":"react-router@7.6.1 (npm) is affected by GHSA-9jcx-v3wj-wh4m","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-9jcx-v3wj-wh4m"},{"rule_id":"osv/GHSA-f22v-gfqf-p8f3","severity":"medium","message":"react-router@7.6.1 (npm) is affected by GHSA-f22v-gfqf-p8f3","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-f22v-gfqf-p8f3"},{"rule_id":"osv/GHSA-h5cw-625j-3rxh","severity":"medium","message":"react-router@7.6.1 (npm) is affected by GHSA-h5cw-625j-3rxh","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-h5cw-625j-3rxh"},{"rule_id":"osv/GHSA-wrjc-x8rr-h8h6","severity":"medium","message":"react-router@7.6.1 (npm) is affected by GHSA-wrjc-x8rr-h8h6","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.1 (npm):GHSA-wrjc-x8rr-h8h6"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@7.4.3 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@7.4.3 (npm) is affected by GHSA-vmf3-w455-68vh","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@7.4.3 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-4w7w-66w2-5vf9","severity":"medium","message":"vite@6.3.5 (npm) is affected by GHSA-4w7w-66w2-5vf9","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-4w7w-66w2-5vf9"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@6.3.5 (npm) is affected by GHSA-698v-4r3x-3vcv","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-93m4-6634-74q7","severity":"medium","message":"vite@6.3.5 (npm) is affected by GHSA-93m4-6634-74q7","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-93m4-6634-74q7"},{"rule_id":"osv/GHSA-fx2h-pf6j-xcff","severity":"medium","message":"vite@6.3.5 (npm) is affected by GHSA-fx2h-pf6j-xcff","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-fx2h-pf6j-xcff"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@6.3.5 (npm) is affected by GHSA-r825-w8mm-5pxw","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@6.3.5 (npm) is affected by GHSA-rq7h-c2jc-7f22","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/GHSA-v6wh-96g9-6wx3","severity":"medium","message":"vite@6.3.5 (npm) is affected by GHSA-v6wh-96g9-6wx3","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-v6wh-96g9-6wx3"},{"rule_id":"osv/GHSA-58qx-3vcg-4xpx","severity":"medium","message":"ws@8.18.2 (npm) is affected by GHSA-58qx-3vcg-4xpx","path":"package-lock.json","line":null,"fingerprint":"ws@8.18.2 (npm):GHSA-58qx-3vcg-4xpx"},{"rule_id":"osv/GHSA-48c2-rrv3-qjmp","severity":"medium","message":"yaml@2.8.0 (npm) is affected by GHSA-48c2-rrv3-qjmp","path":"package-lock.json","line":null,"fingerprint":"yaml@2.8.0 (npm):GHSA-48c2-rrv3-qjmp"},{"rule_id":"osv/GHSA-4x5r-pxfx-6jf8","severity":"low","message":"@babel/core@7.27.4 (npm) is affected by GHSA-4x5r-pxfx-6jf8","path":"package-lock.json","line":null,"fingerprint":"@babel/core@7.27.4 (npm):GHSA-4x5r-pxfx-6jf8"},{"rule_id":"osv/GHSA-xffm-g5w8-qvg7","severity":"low","message":"@eslint/plugin-kit@0.3.1 (npm) is affected by GHSA-xffm-g5w8-qvg7","path":"package-lock.json","line":null,"fingerprint":"@eslint/plugin-kit@0.3.1 (npm):GHSA-xffm-g5w8-qvg7"},{"rule_id":"osv/GHSA-f596-whhp-79r4","severity":"low","message":"@grpc/grpc-js@1.13.4 (npm) is affected by GHSA-f596-whhp-79r4","path":"package-lock.json","line":null,"fingerprint":"@grpc/grpc-js@1.13.4 (npm):GHSA-f596-whhp-79r4"},{"rule_id":"osv/GHSA-xhjh-pmcv-23jw","severity":"low","message":"axios@1.9.0 (npm) is affected by GHSA-xhjh-pmcv-23jw","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-xhjh-pmcv-23jw"},{"rule_id":"osv/GHSA-v422-hmwv-36x6","severity":"low","message":"body-parser@1.20.3 (npm) is affected by GHSA-v422-hmwv-36x6","path":"package-lock.json","line":null,"fingerprint":"body-parser@1.20.3 (npm):GHSA-v422-hmwv-36x6"},{"rule_id":"osv/GHSA-v6h2-p8h4-qcjw","severity":"low","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-v6h2-p8h4-qcjw","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-v6h2-p8h4-qcjw"},{"rule_id":"osv/GHSA-v6h2-p8h4-qcjw","severity":"low","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-v6h2-p8h4-qcjw","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-v6h2-p8h4-qcjw"},{"rule_id":"osv/GHSA-474x-hrwr-fgx4","severity":"low","message":"fast-xml-parser@4.5.3 (npm) is affected by GHSA-474x-hrwr-fgx4","path":"package-lock.json","line":null,"fingerprint":"fast-xml-parser@4.5.3 (npm):GHSA-474x-hrwr-fgx4"},{"rule_id":"osv/GHSA-fj3w-jwp8-x2g3","severity":"low","message":"fast-xml-parser@4.5.3 (npm) is affected by GHSA-fj3w-jwp8-x2g3","path":"package-lock.json","line":null,"fingerprint":"fast-xml-parser@4.5.3 (npm):GHSA-fj3w-jwp8-x2g3"},{"rule_id":"osv/GHSA-w7fw-mjwx-w883","severity":"low","message":"qs@6.13.0 (npm) is affected by GHSA-w7fw-mjwx-w883","path":"package-lock.json","line":null,"fingerprint":"qs@6.13.0 (npm):GHSA-w7fw-mjwx-w883"},{"rule_id":"osv/GHSA-9jrq-w75r-8gcw","severity":"low","message":"vite@6.3.5 (npm) is affected by GHSA-9jrq-w75r-8gcw","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-9jrq-w75r-8gcw"},{"rule_id":"osv/GHSA-g4jq-h2w9-997c","severity":"low","message":"vite@6.3.5 (npm) is affected by GHSA-g4jq-h2w9-997c","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-g4jq-h2w9-997c"},{"rule_id":"osv/GHSA-jqfw-vq24-v9c3","severity":"low","message":"vite@6.3.5 (npm) is affected by GHSA-jqfw-vq24-v9c3","path":"package-lock.json","line":null,"fingerprint":"vite@6.3.5 (npm):GHSA-jqfw-vq24-v9c3"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.0,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":236.0,"function_nloc":3380.0,"mean_ccn":2.74,"p90_ccn":7.0,"complex_functions":2.0,"long_functions":6.0,"many_param_functions":0.0,"risky_nloc_share":0.2536},"findings":[],"evidence":[{"kind":"complex-function","description":"SettingsPanel in src/components/SettingsPanel.tsx: complexity 23, 211 lines","ref":"src/components/SettingsPanel.tsx","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/components/SettingsPanel.tsx#L42","weight":0.38333333333333336},{"kind":"complex-function","description":"generateResponse in src/services/aiService.ts: complexity 16, 61 lines","ref":"src/services/aiService.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/services/aiService.ts#L72","weight":0.26666666666666666},{"kind":"complex-function","description":"BrowseBills in src/components/BrowseBills.tsx: complexity 12, 117 lines","ref":"src/components/BrowseBills.tsx","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/components/BrowseBills.tsx#L14","weight":0.2},{"kind":"complex-function","description":"ChatInterface in src/components/ChatInterface.tsx: complexity 12, 109 lines","ref":"src/components/ChatInterface.tsx","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/components/ChatInterface.tsx#L23","weight":0.2},{"kind":"complex-function","description":"getMockRecentBills in server/routes/congress.ts: complexity 1, 110 lines","ref":"server/routes/congress.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/server/routes/congress.ts#L84","weight":0.016666666666666666},{"kind":"complex-function","description":"getMockRecentBills in src/services/congressApi.ts: complexity 1, 109 lines","ref":"src/services/congressApi.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/services/congressApi.ts#L169","weight":0.016666666666666666},{"kind":"complex-function","description":"getMockPassedLegislation in src/services/congressApi.ts: complexity 1, 140 lines","ref":"src/services/congressApi.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/services/congressApi.ts#L279","weight":0.016666666666666666}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":3279.0,"duplicated_lines":494.0,"duplicated_share":0.1507,"files":28.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: server/routes/billText.ts:123 and src/services/billTextService.ts:86","ref":"server/routes/billText.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/server/routes/billText.ts#L123","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: server/routes/billText.ts:285 and server/routes/billText.ts:309","ref":"server/routes/billText.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/server/routes/billText.ts#L285","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: server/routes/congress.ts:44 and src/services/congressApi.ts:130","ref":"server/routes/congress.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/server/routes/congress.ts#L44","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: server/routes/congress.ts:320 and server/routes/congress.ts:390","ref":"server/routes/congress.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/server/routes/congress.ts#L320","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/BillSearch.tsx:120 and src/components/PassedLegislation.tsx:57","ref":"src/components/BillSearch.tsx","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/components/BillSearch.tsx#L120","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/SettingsPanel.tsx:161 and src/components/SettingsPanel.tsx:171","ref":"src/components/SettingsPanel.tsx","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/components/SettingsPanel.tsx#L161","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/services/billTextService.ts:20 and src/services/billTextService.ts:195","ref":"src/services/billTextService.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/services/billTextService.ts#L20","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/services/billTextService.ts:72 and src/services/congressApi.ts:5","ref":"src/services/billTextService.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/services/billTextService.ts#L72","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/types/index.ts:2 and src/types/index.ts:33","ref":"src/types/index.ts","url":"https://github.com/Echo3ToEcho7/chatgov/blob/47c27b68af2895bc681a7de675da5e351e5ee2da/src/types/index.ts#L2","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":0.0,"weighted_findings":0.0,"scanned_lines":4570.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":4570.0,"test_ratio":0.0,"ci_files":0.0,"cochange_share":0.0,"cochange_commits":15.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":0.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":156.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":1.0,"escapes":21.0,"escapes_per_kloc":4.63},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: tsconfig.app.json","ref":"tsconfig.app.json","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":475.0,"other_lines":4095.0,"files_blamed":28.0,"blame_failures":0.0,"quality:ai_findings":0.0,"quality:ai_per_kloc":0.0,"quality:other_findings":0.0,"quality:other_per_kloc":0.0,"security:ai_findings":0.0,"security:ai_per_kloc":0.0,"security:other_findings":10.0,"security:other_per_kloc":2.442},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":false},"error":null}],"flags":[]}