{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:02.974940Z","repo":{"ref":{"host":"github.com","owner":"benawad","name":"graphql-ts-server-boilerplate"},"default_branch":"master","clone_url":"https://github.com/benawad/graphql-ts-server-boilerplate.git","html_url":"https://github.com/benawad/graphql-ts-server-boilerplate","description":"A GraphQL server boilerplate made with Typescript, PostgreSQL, and Redis","stars":696,"forks":169,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":221,"primary_language":"TypeScript","license_spdx":null,"created_at":"2018-04-22T14:17:29Z","pushed_at":"2019-07-28T01:45:11Z","security_policy_url":null,"distribution":{"owner_created_at":"2014-06-12T15:55:20Z","owner_type":"User","release_assets":[]}},"commit_sha":"ea96c26a257d7656903148cd90e368c4ea9ef28b","profile":{"lines_by_language":{"TypeScript":1195,"JavaScript":12},"files_by_category":{"source":34,"test":7,"other":7,"config":5,"docs":1,"generated":1},"source_lines":796,"test_lines":411},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.5,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null,"style_index":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":67.0,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":100.0,"duplication":100.0,"lint":50.3,"testing":55.0,"docs":40.0,"type_safety":0.0,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.52, no CI test run detected; 0% of function code in complex or long functions; 0% duplicated lines. Weakest area: type safety."},"security":{"score":47.8,"confidence":0.85,"coverage":1.0,"label":"poor","breakdown":{"secrets":100.0,"sast":54.2,"dependencies":0.0,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is poor: 211 known vulnerabilities in 87 dependencies. Weakest area: dependencies."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":50.0,"checked":50.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":39.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":1837.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2018-04":{"loc":245,"attributed_loc":0},"2018-05":{"loc":1520,"attributed_loc":0},"2018-06":{"loc":72,"attributed_loc":0},"2018-08":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":28.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":1837.0,"pre_ai_era_burst_loc":0.0,"measured_loc":1837.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":94.35188947582284,"median_loc_per_hour":33.125,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":796.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":4.0,"findings_high":0.0,"findings_medium":4.0,"findings_low":0.0,"weighted_findings":1.75,"scanned_lines":796.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.express.security.audit.express-session-hardcoded-secret","severity":"medium","message":"A hard-coded credential was detected. It is not recommended to store credentials in source-code, as this risks secrets being leaked and used by either an internal or external malicious adversary. It is recommended to use environment variables to securely provide credentials or retrieve credentials f [confidence high]","path":"src/startServer.ts","line":52,"fingerprint":"javascript.express.security.audit.express-session-hardcoded-secret:src/startServer.ts:52"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `x` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"src/utils/genSchema.ts","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:src/utils/genSchema.ts:11"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-require","severity":"medium","message":"Detected the use of require(variable). Calling require with a non-literal argument might allow an attacker to load and run arbitrary code, or access arbitrary files. [confidence low]","path":"src/utils/genSchema.ts","line":15,"fingerprint":"javascript.lang.security.audit.detect-non-literal-require:src/utils/genSchema.ts:15"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"src/utils/sendEmail.ts","line":12,"fingerprint":"javascript.lang.security.html-in-template-string:src/utils/sendEmail.ts:12"}],"evidence":[],"data":{"rulesets":["typescript","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":87.0,"vulnerabilities":211.0,"vulns_critical":25.0,"vulns_high":96.0,"vulns_medium":66.0,"vulns_low":11.0,"vulns_unknown":13.0,"penalty":678.0},"findings":[{"rule_id":"osv/GHSA-934x-72xh-5hrg","severity":"critical","message":"aws-lambda@0.1.2 (npm) is affected by GHSA-934x-72xh-5hrg","path":"yarn.lock","line":null,"fingerprint":"aws-lambda@0.1.2 (npm):GHSA-934x-72xh-5hrg"},{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"babel-traverse@6.26.0 (npm) is affected by GHSA-67hx-6x53-jw92","path":"yarn.lock","line":null,"fingerprint":"babel-traverse@6.26.0 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.3.2 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"yarn.lock","line":null,"fingerprint":"form-data@2.3.2 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-8r6j-v8pm-fqw3","severity":"critical","message":"fsevents@1.2.4 (npm) is affected by GHSA-8r6j-v8pm-fqw3","path":"yarn.lock","line":null,"fingerprint":"fsevents@1.2.4 (npm):GHSA-8r6j-v8pm-fqw3"},{"rule_id":"osv/GHSA-2w6w-674q-4c4q","severity":"critical","message":"handlebars@4.0.11 (npm) is affected by GHSA-2w6w-674q-4c4q","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-2w6w-674q-4c4q"},{"rule_id":"osv/GHSA-765h-qjxv-5f44","severity":"critical","message":"handlebars@4.0.11 (npm) is affected by GHSA-765h-qjxv-5f44","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-765h-qjxv-5f44"},{"rule_id":"osv/GHSA-8r5x-fm3f-whwj","severity":"critical","message":"handlebars@4.0.11 (npm) is affected by GHSA-8r5x-fm3f-whwj","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-8r5x-fm3f-whwj"},{"rule_id":"osv/GHSA-f2jv-r9rf-7988","severity":"critical","message":"handlebars@4.0.11 (npm) is affected by GHSA-f2jv-r9rf-7988","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-f2jv-r9rf-7988"},{"rule_id":"osv/GHSA-p8wg-vrv2-v86f","severity":"critical","message":"handlebars@4.0.11 (npm) is affected by GHSA-p8wg-vrv2-v86f","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-p8wg-vrv2-v86f"},{"rule_id":"osv/GHSA-w457-6q6x-cgp9","severity":"critical","message":"handlebars@4.0.11 (npm) is affected by GHSA-w457-6q6x-cgp9","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-w457-6q6x-cgp9"},{"rule_id":"osv/GHSA-896r-f27r-55mw","severity":"critical","message":"json-schema@0.2.3 (npm) is affected by GHSA-896r-f27r-55mw","path":"yarn.lock","line":null,"fingerprint":"json-schema@0.2.3 (npm):GHSA-896r-f27r-55mw"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.17.10 (npm) is affected by GHSA-jf85-cpcp-j695","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.10 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.10 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.10 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.8 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.8 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@1.2.0 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@1.2.0 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-fhjf-83wg-r2j9","severity":"critical","message":"mixin-deep@1.3.1 (npm) is affected by GHSA-fhjf-83wg-r2j9","path":"yarn.lock","line":null,"fingerprint":"mixin-deep@1.3.1 (npm):GHSA-fhjf-83wg-r2j9"},{"rule_id":"osv/GHSA-6fw4-hr69-g3rv","severity":"critical","message":"property-expr@1.3.2 (npm) is affected by GHSA-6fw4-hr69-g3rv","path":"yarn.lock","line":null,"fingerprint":"property-expr@1.3.2 (npm):GHSA-6fw4-hr69-g3rv"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.3 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"yarn.lock","line":null,"fingerprint":"proxy-addr@2.0.3 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-4g88-fppr-53pp","severity":"critical","message":"set-value@0.4.3 (npm) is affected by GHSA-4g88-fppr-53pp","path":"yarn.lock","line":null,"fingerprint":"set-value@0.4.3 (npm):GHSA-4g88-fppr-53pp"},{"rule_id":"osv/GHSA-4g88-fppr-53pp","severity":"critical","message":"set-value@2.0.0 (npm) is affected by GHSA-4g88-fppr-53pp","path":"yarn.lock","line":null,"fingerprint":"set-value@2.0.0 (npm):GHSA-4g88-fppr-53pp"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.6.1 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@4.4.4 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-29xr-v42j-r956","severity":"critical","message":"thenify@3.3.0 (npm) is affected by GHSA-29xr-v42j-r956","path":"yarn.lock","line":null,"fingerprint":"thenify@3.3.0 (npm):GHSA-29xr-v42j-r956"},{"rule_id":"osv/GHSA-fx4w-v43j-vc45","severity":"critical","message":"typeorm@0.2.0 (npm) is affected by GHSA-fx4w-v43j-vc45","path":"yarn.lock","line":null,"fingerprint":"typeorm@0.2.0 (npm):GHSA-fx4w-v43j-vc45"},{"rule_id":"osv/GHSA-pf2j-9qmp-jqr2","severity":"critical","message":"typeorm@0.2.0 (npm) is affected by GHSA-pf2j-9qmp-jqr2","path":"yarn.lock","line":null,"fingerprint":"typeorm@0.2.0 (npm):GHSA-pf2j-9qmp-jqr2"},{"rule_id":"osv/GHSA-6chw-6frg-f759","severity":"high","message":"acorn@5.6.2 (npm) is affected by GHSA-6chw-6frg-f759","path":"yarn.lock","line":null,"fingerprint":"acorn@5.6.2 (npm):GHSA-6chw-6frg-f759"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@3.0.0 (npm) is affected by GHSA-93q8-gq69-wqmw","path":"yarn.lock","line":null,"fingerprint":"ansi-regex@3.0.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-fwr7-v2mv-hh25","severity":"high","message":"async@2.6.1 (npm) is affected by GHSA-fwr7-v2mv-hh25","path":"yarn.lock","line":null,"fingerprint":"async@2.6.1 (npm):GHSA-fwr7-v2mv-hh25"},{"rule_id":"osv/GHSA-rrc9-gqf8-8rwg","severity":"high","message":"aws-sdk@2.255.1 (npm) is affected by GHSA-rrc9-gqf8-8rwg","path":"yarn.lock","line":null,"fingerprint":"aws-sdk@2.255.1 (npm):GHSA-rrc9-gqf8-8rwg"},{"rule_id":"osv/GHSA-42xw-2xvc-qx8m","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-42xw-2xvc-qx8m","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-42xw-2xvc-qx8m"},{"rule_id":"osv/GHSA-43fc-jf86-j433","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-43fc-jf86-j433","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-43fc-jf86-j433"},{"rule_id":"osv/GHSA-62hf-57xw-28j9","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-62hf-57xw-28j9","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-62hf-57xw-28j9"},{"rule_id":"osv/GHSA-6chq-wfr3-2hj9","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-6chq-wfr3-2hj9","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-6chq-wfr3-2hj9"},{"rule_id":"osv/GHSA-cph5-m8f7-6c5x","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-cph5-m8f7-6c5x","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-cph5-m8f7-6c5x"},{"rule_id":"osv/GHSA-hfxv-24rg-xrqf","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-hfxv-24rg-xrqf","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-hfxv-24rg-xrqf"},{"rule_id":"osv/GHSA-j5f8-grm9-p9fc","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-j5f8-grm9-p9fc","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-j5f8-grm9-p9fc"},{"rule_id":"osv/GHSA-jr5f-v2jv-69x6","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-jr5f-v2jv-69x6","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-jr5f-v2jv-69x6"},{"rule_id":"osv/GHSA-p92q-9vqr-4j8v","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-p92q-9vqr-4j8v","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-p92q-9vqr-4j8v"},{"rule_id":"osv/GHSA-pf86-5x62-jrwf","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-pf86-5x62-jrwf","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-pf86-5x62-jrwf"},{"rule_id":"osv/GHSA-pjwm-pj3p-43mv","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-pjwm-pj3p-43mv","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-pjwm-pj3p-43mv"},{"rule_id":"osv/GHSA-pmwg-cvhr-8vh7","severity":"high","message":"axios@0.18.0 (npm) is affected by GHSA-pmwg-cvhr-8vh7","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-pmwg-cvhr-8vh7"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.18.2 (npm) is affected by GHSA-27r3-jxmh-p828","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.2 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-qwcr-r2fm-qrc7","severity":"high","message":"body-parser@1.18.2 (npm) is affected by GHSA-qwcr-r2fm-qrc7","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.2 (npm):GHSA-qwcr-r2fm-qrc7"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.18.3 (npm) is affected by GHSA-27r3-jxmh-p828","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.3 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-qwcr-r2fm-qrc7","severity":"high","message":"body-parser@1.18.3 (npm) is affected by GHSA-qwcr-r2fm-qrc7","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.3 (npm):GHSA-qwcr-r2fm-qrc7"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@1.8.5 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"yarn.lock","line":null,"fingerprint":"braces@1.8.5 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@2.3.2 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"yarn.lock","line":null,"fingerprint":"braces@2.3.2 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@5.1.0 (npm) is affected by GHSA-3xgq-45jj-v275","path":"yarn.lock","line":null,"fingerprint":"cross-spawn@5.1.0 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-qr28-fpjm-wq7f","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-qr28-fpjm-wq7f","path":"yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-qr28-fpjm-wq7f"},{"rule_id":"osv/GHSA-w573-4hg7-7wgq","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-w573-4hg7-7wgq","path":"yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-w573-4hg7-7wgq"},{"rule_id":"osv/GHSA-wm7h-9275-46v2","severity":"high","message":"dicer@0.2.5 (npm) is affected by GHSA-wm7h-9275-46v2","path":"yarn.lock","line":null,"fingerprint":"dicer@0.2.5 (npm):GHSA-wm7h-9275-46v2"},{"rule_id":"osv/GHSA-ff7x-qrg7-qggm","severity":"high","message":"dot-prop@4.2.0 (npm) is affected by GHSA-ff7x-qrg7-qggm","path":"yarn.lock","line":null,"fingerprint":"dot-prop@4.2.0 (npm):GHSA-ff7x-qrg7-qggm"},{"rule_id":"osv/GHSA-62ch-8vmq-8xm7","severity":"high","message":"figlet@1.2.0 (npm) is affected by GHSA-62ch-8vmq-8xm7","path":"yarn.lock","line":null,"fingerprint":"figlet@1.2.0 (npm):GHSA-62ch-8vmq-8xm7"},{"rule_id":"osv/GHSA-74fj-2j2h-c42q","severity":"high","message":"follow-redirects@1.5.0 (npm) is affected by GHSA-74fj-2j2h-c42q","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.0 (npm):GHSA-74fj-2j2h-c42q"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.3.2 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"yarn.lock","line":null,"fingerprint":"form-data@2.3.2 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-4852-vrh7-28rf","severity":"high","message":"graphql-playground-html@1.5.5 (npm) is affected by GHSA-4852-vrh7-28rf","path":"yarn.lock","line":null,"fingerprint":"graphql-playground-html@1.5.5 (npm):GHSA-4852-vrh7-28rf"},{"rule_id":"osv/GHSA-2cf5-4w76-r9qv","severity":"high","message":"handlebars@4.0.11 (npm) is affected by GHSA-2cf5-4w76-r9qv","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-2cf5-4w76-r9qv"},{"rule_id":"osv/GHSA-3cqr-58rm-57f8","severity":"high","message":"handlebars@4.0.11 (npm) is affected by GHSA-3cqr-58rm-57f8","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-3cqr-58rm-57f8"},{"rule_id":"osv/GHSA-3mfm-83xf-c92r","severity":"high","message":"handlebars@4.0.11 (npm) is affected by GHSA-3mfm-83xf-c92r","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-3mfm-83xf-c92r"},{"rule_id":"osv/GHSA-62gr-4qp9-h98f","severity":"high","message":"handlebars@4.0.11 (npm) is affected by GHSA-62gr-4qp9-h98f","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-62gr-4qp9-h98f"},{"rule_id":"osv/GHSA-9cx6-37pm-9jff","severity":"high","message":"handlebars@4.0.11 (npm) is affected by GHSA-9cx6-37pm-9jff","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-9cx6-37pm-9jff"},{"rule_id":"osv/GHSA-q42p-pg8m-cqh6","severity":"high","message":"handlebars@4.0.11 (npm) is affected by GHSA-q42p-pg8m-cqh6","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-q42p-pg8m-cqh6"},{"rule_id":"osv/GHSA-xhpv-hc6g-r9c6","severity":"high","message":"handlebars@4.0.11 (npm) is affected by GHSA-xhpv-hc6g-r9c6","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-xhpv-hc6g-r9c6"},{"rule_id":"osv/GHSA-xjpj-3mr7-gcpf","severity":"high","message":"handlebars@4.0.11 (npm) is affected by GHSA-xjpj-3mr7-gcpf","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-xjpj-3mr7-gcpf"},{"rule_id":"osv/GHSA-qqgx-2p2h-9c37","severity":"high","message":"ini@1.3.5 (npm) is affected by GHSA-qqgx-2p2h-9c37","path":"yarn.lock","line":null,"fingerprint":"ini@1.3.5 (npm):GHSA-qqgx-2p2h-9c37"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.12.0 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.12.0 (npm) is affected by GHSA-52cp-r559-cp3m","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.12.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@0.5.1 (npm) is affected by GHSA-9c47-m6qq-7p4h","path":"yarn.lock","line":null,"fingerprint":"json5@0.5.1 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-6c8f-qphg-qjgp","severity":"high","message":"kind-of@6.0.2 (npm) is affected by GHSA-6c8f-qphg-qjgp","path":"yarn.lock","line":null,"fingerprint":"kind-of@6.0.2 (npm):GHSA-6c8f-qphg-qjgp"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.10 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.10 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.17.10 (npm) is affected by GHSA-p6mc-m468-83gw","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.10 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.10 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.10 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash.pick@4.4.0 (npm) is affected by GHSA-p6mc-m468-83gw","path":"yarn.lock","line":null,"fingerprint":"lodash.pick@4.4.0 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-7wpw-2hjm-89gp","severity":"high","message":"merge@1.2.0 (npm) is affected by GHSA-7wpw-2hjm-89gp","path":"yarn.lock","line":null,"fingerprint":"merge@1.2.0 (npm):GHSA-7wpw-2hjm-89gp"},{"rule_id":"osv/GHSA-f9cm-qmx5-m98h","severity":"high","message":"merge@1.2.0 (npm) is affected by GHSA-f9cm-qmx5-m98h","path":"yarn.lock","line":null,"fingerprint":"merge@1.2.0 (npm):GHSA-f9cm-qmx5-m98h"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-f8q6-p94x-37v3","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-f8q6-p94x-37v3","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-f8q6-p94x-37v3"},{"rule_id":"osv/GHSA-r683-j2x4-v87g","severity":"high","message":"node-fetch@2.0.0 (npm) is affected by GHSA-r683-j2x4-v87g","path":"yarn.lock","line":null,"fingerprint":"node-fetch@2.0.0 (npm):GHSA-r683-j2x4-v87g"},{"rule_id":"osv/GHSA-r683-j2x4-v87g","severity":"high","message":"node-fetch@2.1.2 (npm) is affected by GHSA-r683-j2x4-v87g","path":"yarn.lock","line":null,"fingerprint":"node-fetch@2.1.2 (npm):GHSA-r683-j2x4-v87g"},{"rule_id":"osv/GHSA-8v63-cqqc-6r2c","severity":"high","message":"object-path@0.11.4 (npm) is affected by GHSA-8v63-cqqc-6r2c","path":"yarn.lock","line":null,"fingerprint":"object-path@0.11.4 (npm):GHSA-8v63-cqqc-6r2c"},{"rule_id":"osv/GHSA-cwx2-736x-mf6w","severity":"high","message":"object-path@0.11.4 (npm) is affected by GHSA-cwx2-736x-mf6w","path":"yarn.lock","line":null,"fingerprint":"object-path@0.11.4 (npm):GHSA-cwx2-736x-mf6w"},{"rule_id":"osv/GHSA-37ch-88jc-xwx2","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-37ch-88jc-xwx2, GHSA-9wv6-86v2-598j","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-37ch-88jc-xwx2"},{"rule_id":"osv/GHSA-rhx6-c78j-4q9w","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-rhx6-c78j-4q9w","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-rhx6-c78j-4q9w"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.5.1 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.1 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.5.2 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-35q2-47q7-3pc3","severity":"high","message":"redis@2.8.0 (npm) is affected by GHSA-35q2-47q7-3pc3","path":"yarn.lock","line":null,"fingerprint":"redis@2.8.0 (npm):GHSA-35q2-47q7-3pc3"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@4.3.2 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@4.3.2 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.5.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@5.5.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-4jqc-8m5r-9rpr","severity":"high","message":"set-value@0.4.3 (npm) is affected by GHSA-4jqc-8m5r-9rpr","path":"yarn.lock","line":null,"fingerprint":"set-value@0.4.3 (npm):GHSA-4jqc-8m5r-9rpr"},{"rule_id":"osv/GHSA-4jqc-8m5r-9rpr","severity":"high","message":"set-value@2.0.0 (npm) is affected by GHSA-4jqc-8m5r-9rpr","path":"yarn.lock","line":null,"fingerprint":"set-value@2.0.0 (npm):GHSA-4jqc-8m5r-9rpr"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.6.1 (npm) is affected by GHSA-395f-4hp3-45gv","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-3jfq-g458-7qm9","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-5955-9wpr-37jh","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-83g3-92jg-28cx","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-9r2w-394v-53qc","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-9r2w-394v-53qc","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-9r2w-394v-53qc"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-qq89-hq3f-393p","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-qq89-hq3f-393p","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-qq89-hq3f-393p"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-r292-9mhp-454m","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r628-mhmh-qjhw","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-r628-mhmh-qjhw","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-r628-mhmh-qjhw"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@4.4.4 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-jgrx-mgxx-jf9v","severity":"high","message":"tmpl@1.0.4 (npm) is affected by GHSA-jgrx-mgxx-jf9v","path":"yarn.lock","line":null,"fingerprint":"tmpl@1.0.4 (npm):GHSA-jgrx-mgxx-jf9v"},{"rule_id":"osv/GHSA-q2pj-6v73-8rgj","severity":"high","message":"typeorm@0.2.0 (npm) is affected by GHSA-q2pj-6v73-8rgj","path":"yarn.lock","line":null,"fingerprint":"typeorm@0.2.0 (npm):GHSA-q2pj-6v73-8rgj"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.1.0 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"yarn.lock","line":null,"fingerprint":"uuid@3.1.0 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.2.1 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"yarn.lock","line":null,"fingerprint":"uuid@3.2.1 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@4.1.0 (npm) is affected by GHSA-3h5v-q93c-6h6q","path":"yarn.lock","line":null,"fingerprint":"ws@4.1.0 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@4.1.0 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"yarn.lock","line":null,"fingerprint":"ws@4.1.0 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@5.2.0 (npm) is affected by GHSA-3h5v-q93c-6h6q","path":"yarn.lock","line":null,"fingerprint":"ws@5.2.0 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@5.2.0 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"yarn.lock","line":null,"fingerprint":"ws@5.2.0 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@3.2.1 (npm) is affected by GHSA-c4w7-xm78-47vh","path":"yarn.lock","line":null,"fingerprint":"y18n@3.2.1 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-968p-4wvh-cqc8","severity":"medium","message":"@babel/runtime@7.0.0-beta.49 (npm) is affected by GHSA-968p-4wvh-cqc8","path":"yarn.lock","line":null,"fingerprint":"@babel/runtime@7.0.0-beta.49 (npm):GHSA-968p-4wvh-cqc8"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@5.5.2 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"yarn.lock","line":null,"fingerprint":"ajv@5.5.2 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-v88g-cgmw-v5xw","severity":"medium","message":"ajv@5.5.2 (npm) is affected by GHSA-v88g-cgmw-v5xw","path":"yarn.lock","line":null,"fingerprint":"ajv@5.5.2 (npm):GHSA-v88g-cgmw-v5xw"},{"rule_id":"osv/GHSA-9q82-xgwf-vj6h","severity":"medium","message":"apollo-server-core@1.3.6 (npm) is affected by GHSA-9q82-xgwf-vj6h","path":"yarn.lock","line":null,"fingerprint":"apollo-server-core@1.3.6 (npm):GHSA-9q82-xgwf-vj6h"},{"rule_id":"osv/GHSA-j5g3-5c8r-7qfx","severity":"medium","message":"apollo-server-core@1.3.6 (npm) is affected by GHSA-j5g3-5c8r-7qfx","path":"yarn.lock","line":null,"fingerprint":"apollo-server-core@1.3.6 (npm):GHSA-j5g3-5c8r-7qfx"},{"rule_id":"osv/GHSA-w42g-7vfc-xf37","severity":"medium","message":"apollo-server-core@1.3.6 (npm) is affected by GHSA-w42g-7vfc-xf37","path":"yarn.lock","line":null,"fingerprint":"apollo-server-core@1.3.6 (npm):GHSA-w42g-7vfc-xf37"},{"rule_id":"osv/GHSA-w42g-7vfc-xf37","severity":"medium","message":"apollo-server-express@1.3.6 (npm) is affected by GHSA-w42g-7vfc-xf37","path":"yarn.lock","line":null,"fingerprint":"apollo-server-express@1.3.6 (npm):GHSA-w42g-7vfc-xf37"},{"rule_id":"osv/GHSA-w42g-7vfc-xf37","severity":"medium","message":"apollo-server-lambda@1.3.6 (npm) is affected by GHSA-w42g-7vfc-xf37","path":"yarn.lock","line":null,"fingerprint":"apollo-server-lambda@1.3.6 (npm):GHSA-w42g-7vfc-xf37"},{"rule_id":"osv/GHSA-3p68-rc4w-qgx5","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-3p68-rc4w-qgx5","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-3p68-rc4w-qgx5"},{"rule_id":"osv/GHSA-4w2v-q235-vp99","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-4w2v-q235-vp99","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-4w2v-q235-vp99"},{"rule_id":"osv/GHSA-5c9x-8gcm-mpgx","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-5c9x-8gcm-mpgx","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-5c9x-8gcm-mpgx"},{"rule_id":"osv/GHSA-7q8q-rj6j-mhjq","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-7q8q-rj6j-mhjq","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-7q8q-rj6j-mhjq"},{"rule_id":"osv/GHSA-898c-q2cr-xwhg","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-898c-q2cr-xwhg","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-898c-q2cr-xwhg"},{"rule_id":"osv/GHSA-fvcv-3m26-pcqx","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-fvcv-3m26-pcqx","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-fvcv-3m26-pcqx"},{"rule_id":"osv/GHSA-m7pr-hjqh-92cm","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-m7pr-hjqh-92cm","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-m7pr-hjqh-92cm"},{"rule_id":"osv/GHSA-mmx7-hfxf-jppx","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-mmx7-hfxf-jppx","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-mmx7-hfxf-jppx"},{"rule_id":"osv/GHSA-vf2m-468p-8v99","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-vf2m-468p-8v99","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-vf2m-468p-8v99"},{"rule_id":"osv/GHSA-w9j2-pvgh-6h63","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-w9j2-pvgh-6h63","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-w9j2-pvgh-6h63"},{"rule_id":"osv/GHSA-wf5p-g6vw-rhxx","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-wf5p-g6vw-rhxx","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-wf5p-g6vw-rhxx"},{"rule_id":"osv/GHSA-xx6v-rp6x-q39c","severity":"medium","message":"axios@0.18.0 (npm) is affected by GHSA-xx6v-rp6x-q39c","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-xx6v-rp6x-q39c"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-pxg6-pf52-xh8x","severity":"medium","message":"cookie@0.3.1 (npm) is affected by GHSA-pxg6-pf52-xh8x","path":"yarn.lock","line":null,"fingerprint":"cookie@0.3.1 (npm):GHSA-pxg6-pf52-xh8x"},{"rule_id":"osv/GHSA-vcc3-ghjq-m6fr","severity":"medium","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-vcc3-ghjq-m6fr","path":"yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-vcc3-ghjq-m6fr"},{"rule_id":"osv/GHSA-qw6h-vgh9-j6wx","severity":"medium","message":"express@4.16.3 (npm) is affected by GHSA-qw6h-vgh9-j6wx","path":"yarn.lock","line":null,"fingerprint":"express@4.16.3 (npm):GHSA-qw6h-vgh9-j6wx"},{"rule_id":"osv/GHSA-rv95-896h-c2vc","severity":"medium","message":"express@4.16.3 (npm) is affected by GHSA-rv95-896h-c2vc","path":"yarn.lock","line":null,"fingerprint":"express@4.16.3 (npm):GHSA-rv95-896h-c2vc"},{"rule_id":"osv/GHSA-qrmc-fj45-qfc2","severity":"medium","message":"extend@3.0.1 (npm) is affected by GHSA-qrmc-fj45-qfc2","path":"yarn.lock","line":null,"fingerprint":"extend@3.0.1 (npm):GHSA-qrmc-fj45-qfc2"},{"rule_id":"osv/GHSA-cxjh-pqwp-8mfp","severity":"medium","message":"follow-redirects@1.5.0 (npm) is affected by GHSA-cxjh-pqwp-8mfp","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.0 (npm):GHSA-cxjh-pqwp-8mfp"},{"rule_id":"osv/GHSA-jchw-25xp-jwwc","severity":"medium","message":"follow-redirects@1.5.0 (npm) is affected by GHSA-jchw-25xp-jwwc","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.0 (npm):GHSA-jchw-25xp-jwwc"},{"rule_id":"osv/GHSA-pw2r-vq6v-hr8c","severity":"medium","message":"follow-redirects@1.5.0 (npm) is affected by GHSA-pw2r-vq6v-hr8c","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.0 (npm):GHSA-pw2r-vq6v-hr8c"},{"rule_id":"osv/GHSA-r4q5-vmmm-2653","severity":"medium","message":"follow-redirects@1.5.0 (npm) is affected by GHSA-r4q5-vmmm-2653","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.0 (npm):GHSA-r4q5-vmmm-2653"},{"rule_id":"osv/MAL-2023-462","severity":"medium","message":"fsevents@1.2.4 (npm) is affected by MAL-2023-462","path":"yarn.lock","line":null,"fingerprint":"fsevents@1.2.4 (npm):MAL-2023-462"},{"rule_id":"osv/GHSA-pfrx-2q88-qq97","severity":"medium","message":"got@6.7.1 (npm) is affected by GHSA-pfrx-2q88-qq97","path":"yarn.lock","line":null,"fingerprint":"got@6.7.1 (npm):GHSA-pfrx-2q88-qq97"},{"rule_id":"osv/GHSA-2qvq-rjwj-gvw9","severity":"medium","message":"handlebars@4.0.11 (npm) is affected by GHSA-2qvq-rjwj-gvw9","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-2qvq-rjwj-gvw9"},{"rule_id":"osv/GHSA-f52g-6jhx-586p","severity":"medium","message":"handlebars@4.0.11 (npm) is affected by GHSA-f52g-6jhx-586p","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-f52g-6jhx-586p"},{"rule_id":"osv/GHSA-g9r4-xpmj-mj65","severity":"medium","message":"handlebars@4.0.11 (npm) is affected by GHSA-g9r4-xpmj-mj65","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-g9r4-xpmj-mj65"},{"rule_id":"osv/GHSA-q2c6-c6pm-g3gh","severity":"medium","message":"handlebars@4.0.11 (npm) is affected by GHSA-q2c6-c6pm-g3gh","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-q2c6-c6pm-g3gh"},{"rule_id":"osv/GHSA-xw65-4hp5-5hc7","severity":"medium","message":"handlebars@4.0.11 (npm) is affected by GHSA-xw65-4hp5-5hc7","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-xw65-4hp5-5hc7"},{"rule_id":"osv/GHSA-7wwv-vh3v-89cq","severity":"medium","message":"highlight.js@9.12.0 (npm) is affected by GHSA-7wwv-vh3v-89cq","path":"yarn.lock","line":null,"fingerprint":"highlight.js@9.12.0 (npm):GHSA-7wwv-vh3v-89cq"},{"rule_id":"osv/GHSA-vfrc-7r7c-w9mx","severity":"medium","message":"highlight.js@9.12.0 (npm) is affected by GHSA-vfrc-7r7c-w9mx","path":"yarn.lock","line":null,"fingerprint":"highlight.js@9.12.0 (npm):GHSA-vfrc-7r7c-w9mx"},{"rule_id":"osv/GHSA-43f8-2h32-f4cj","severity":"medium","message":"hosted-git-info@2.6.0 (npm) is affected by GHSA-43f8-2h32-f4cj","path":"yarn.lock","line":null,"fingerprint":"hosted-git-info@2.6.0 (npm):GHSA-43f8-2h32-f4cj"},{"rule_id":"osv/GHSA-2pr6-76vf-7546","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-2pr6-76vf-7546","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-2pr6-76vf-7546"},{"rule_id":"osv/GHSA-8j8c-7jfh-h6hx","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-8j8c-7jfh-h6hx","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-8j8c-7jfh-h6hx"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-h67p-54hq-rp68","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-mh29-5h37-fv8m","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.17.10 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.10 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-4xc9-xhrj-v574","severity":"medium","message":"lodash@4.17.10 (npm) is affected by GHSA-4xc9-xhrj-v574","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.10 (npm):GHSA-4xc9-xhrj-v574"},{"rule_id":"osv/GHSA-x5rq-j2xg-h7qm","severity":"medium","message":"lodash@4.17.10 (npm) is affected by GHSA-x5rq-j2xg-h7qm","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.10 (npm):GHSA-x5rq-j2xg-h7qm"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.17.10 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.10 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-4xcv-9jjx-gfj3","severity":"medium","message":"mem@1.1.0 (npm) is affected by GHSA-4xcv-9jjx-gfj3","path":"yarn.lock","line":null,"fingerprint":"mem@1.1.0 (npm):GHSA-4xcv-9jjx-gfj3"},{"rule_id":"osv/GHSA-952p-6rrq-rcjv","severity":"medium","message":"micromatch@2.3.11 (npm) is affected by GHSA-952p-6rrq-rcjv","path":"yarn.lock","line":null,"fingerprint":"micromatch@2.3.11 (npm):GHSA-952p-6rrq-rcjv"},{"rule_id":"osv/GHSA-952p-6rrq-rcjv","severity":"medium","message":"micromatch@3.1.10 (npm) is affected by GHSA-952p-6rrq-rcjv","path":"yarn.lock","line":null,"fingerprint":"micromatch@3.1.10 (npm):GHSA-952p-6rrq-rcjv"},{"rule_id":"osv/GHSA-vh95-rmgr-6w4m","severity":"medium","message":"minimist@0.0.10 (npm) is affected by GHSA-vh95-rmgr-6w4m","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.10 (npm):GHSA-vh95-rmgr-6w4m"},{"rule_id":"osv/GHSA-vh95-rmgr-6w4m","severity":"medium","message":"minimist@0.0.8 (npm) is affected by GHSA-vh95-rmgr-6w4m","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.8 (npm):GHSA-vh95-rmgr-6w4m"},{"rule_id":"osv/GHSA-vh95-rmgr-6w4m","severity":"medium","message":"minimist@1.2.0 (npm) is affected by GHSA-vh95-rmgr-6w4m","path":"yarn.lock","line":null,"fingerprint":"minimist@1.2.0 (npm):GHSA-vh95-rmgr-6w4m"},{"rule_id":"osv/GHSA-5fw9-fq32-wv5p","severity":"medium","message":"node-notifier@5.2.1 (npm) is affected by GHSA-5fw9-fq32-wv5p","path":"yarn.lock","line":null,"fingerprint":"node-notifier@5.2.1 (npm):GHSA-5fw9-fq32-wv5p"},{"rule_id":"osv/GHSA-v39p-96qg-c8rf","severity":"medium","message":"object-path@0.11.4 (npm) is affected by GHSA-v39p-96qg-c8rf","path":"yarn.lock","line":null,"fingerprint":"object-path@0.11.4 (npm):GHSA-v39p-96qg-c8rf"},{"rule_id":"osv/GHSA-hj48-42vr-x3v9","severity":"medium","message":"path-parse@1.0.5 (npm) is affected by GHSA-hj48-42vr-x3v9","path":"yarn.lock","line":null,"fingerprint":"path-parse@1.0.5 (npm):GHSA-hj48-42vr-x3v9"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.5.1 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.1 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.5.1 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.1 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.5.2 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.5.2 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-p8p7-x288-28g6","severity":"medium","message":"request@2.87.0 (npm) is affected by GHSA-p8p7-x288-28g6","path":"yarn.lock","line":null,"fingerprint":"request@2.87.0 (npm):GHSA-p8p7-x288-28g6"},{"rule_id":"osv/GHSA-m6fv-jmcg-4jfg","severity":"medium","message":"send@0.16.2 (npm) is affected by GHSA-m6fv-jmcg-4jfg","path":"yarn.lock","line":null,"fingerprint":"send@0.16.2 (npm):GHSA-m6fv-jmcg-4jfg"},{"rule_id":"osv/GHSA-cm22-4g7w-348p","severity":"medium","message":"serve-static@1.13.2 (npm) is affected by GHSA-cm22-4g7w-348p","path":"yarn.lock","line":null,"fingerprint":"serve-static@1.13.2 (npm):GHSA-cm22-4g7w-348p"},{"rule_id":"osv/GHSA-f5x3-32g6-xq36","severity":"medium","message":"tar@4.4.4 (npm) is affected by GHSA-f5x3-32g6-xq36","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-f5x3-32g6-xq36"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@4.4.4 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@4.4.4 (npm) is affected by GHSA-vmf3-w455-68vh","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@4.4.4 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.4 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-72xf-g2v4-qvf3","severity":"medium","message":"tough-cookie@2.3.4 (npm) is affected by GHSA-72xf-g2v4-qvf3","path":"yarn.lock","line":null,"fingerprint":"tough-cookie@2.3.4 (npm):GHSA-72xf-g2v4-qvf3"},{"rule_id":"osv/GHSA-72xf-g2v4-qvf3","severity":"medium","message":"tough-cookie@2.4.2 (npm) is affected by GHSA-72xf-g2v4-qvf3","path":"yarn.lock","line":null,"fingerprint":"tough-cookie@2.4.2 (npm):GHSA-72xf-g2v4-qvf3"},{"rule_id":"osv/GHSA-2rp8-mm9q-fp49","severity":"medium","message":"typeorm@0.2.0 (npm) is affected by GHSA-2rp8-mm9q-fp49","path":"yarn.lock","line":null,"fingerprint":"typeorm@0.2.0 (npm):GHSA-2rp8-mm9q-fp49"},{"rule_id":"osv/GHSA-9ggv-8w38-r7pm","severity":"medium","message":"typeorm@0.2.0 (npm) is affected by GHSA-9ggv-8w38-r7pm","path":"yarn.lock","line":null,"fingerprint":"typeorm@0.2.0 (npm):GHSA-9ggv-8w38-r7pm"},{"rule_id":"osv/GHSA-332q-7ff2-57h2","severity":"medium","message":"undefsafe@2.0.2 (npm) is affected by GHSA-332q-7ff2-57h2","path":"yarn.lock","line":null,"fingerprint":"undefsafe@2.0.2 (npm):GHSA-332q-7ff2-57h2"},{"rule_id":"osv/GHSA-6fc8-4gx4-v693","severity":"medium","message":"ws@5.2.0 (npm) is affected by GHSA-6fc8-4gx4-v693","path":"yarn.lock","line":null,"fingerprint":"ws@5.2.0 (npm):GHSA-6fc8-4gx4-v693"},{"rule_id":"osv/GHSA-776f-qx25-q3cc","severity":"medium","message":"xml2js@0.4.17 (npm) is affected by GHSA-776f-qx25-q3cc","path":"yarn.lock","line":null,"fingerprint":"xml2js@0.4.17 (npm):GHSA-776f-qx25-q3cc"},{"rule_id":"osv/GHSA-776f-qx25-q3cc","severity":"medium","message":"xml2js@0.4.19 (npm) is affected by GHSA-776f-qx25-q3cc","path":"yarn.lock","line":null,"fingerprint":"xml2js@0.4.19 (npm):GHSA-776f-qx25-q3cc"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@8.1.0 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"yarn.lock","line":null,"fingerprint":"yargs-parser@8.1.0 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@9.0.2 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"yarn.lock","line":null,"fingerprint":"yargs-parser@9.0.2 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-j965-2qgj-vjmq","severity":"low","message":"aws-sdk@2.255.1 (npm) is affected by GHSA-j965-2qgj-vjmq","path":"yarn.lock","line":null,"fingerprint":"aws-sdk@2.255.1 (npm):GHSA-j965-2qgj-vjmq"},{"rule_id":"osv/GHSA-xhjh-pmcv-23jw","severity":"low","message":"axios@0.18.0 (npm) is affected by GHSA-xhjh-pmcv-23jw","path":"yarn.lock","line":null,"fingerprint":"axios@0.18.0 (npm):GHSA-xhjh-pmcv-23jw"},{"rule_id":"osv/GHSA-v422-hmwv-36x6","severity":"low","message":"body-parser@1.18.2 (npm) is affected by GHSA-v422-hmwv-36x6","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.2 (npm):GHSA-v422-hmwv-36x6"},{"rule_id":"osv/GHSA-v422-hmwv-36x6","severity":"low","message":"body-parser@1.18.3 (npm) is affected by GHSA-v422-hmwv-36x6","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.3 (npm):GHSA-v422-hmwv-36x6"},{"rule_id":"osv/GHSA-v6h2-p8h4-qcjw","severity":"low","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-v6h2-p8h4-qcjw","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-v6h2-p8h4-qcjw"},{"rule_id":"osv/GHSA-c6rq-rjc2-86v2","severity":"low","message":"chownr@1.0.1 (npm) is affected by GHSA-c6rq-rjc2-86v2","path":"yarn.lock","line":null,"fingerprint":"chownr@1.0.1 (npm):GHSA-c6rq-rjc2-86v2"},{"rule_id":"osv/GHSA-73rr-hh4g-fpgx","severity":"low","message":"diff@3.5.0 (npm) is affected by GHSA-73rr-hh4g-fpgx","path":"yarn.lock","line":null,"fingerprint":"diff@3.5.0 (npm):GHSA-73rr-hh4g-fpgx"},{"rule_id":"osv/GHSA-442j-39wm-28r2","severity":"low","message":"handlebars@4.0.11 (npm) is affected by GHSA-442j-39wm-28r2","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.11 (npm):GHSA-442j-39wm-28r2"},{"rule_id":"osv/GHSA-w7rc-rwvf-8q5r","severity":"low","message":"node-fetch@2.0.0 (npm) is affected by GHSA-w7rc-rwvf-8q5r","path":"yarn.lock","line":null,"fingerprint":"node-fetch@2.0.0 (npm):GHSA-w7rc-rwvf-8q5r"},{"rule_id":"osv/GHSA-w7rc-rwvf-8q5r","severity":"low","message":"node-fetch@2.1.2 (npm) is affected by GHSA-w7rc-rwvf-8q5r","path":"yarn.lock","line":null,"fingerprint":"node-fetch@2.1.2 (npm):GHSA-w7rc-rwvf-8q5r"},{"rule_id":"osv/GHSA-76c9-3jph-rj3q","severity":"low","message":"on-headers@1.0.1 (npm) is affected by GHSA-76c9-3jph-rj3q","path":"yarn.lock","line":null,"fingerprint":"on-headers@1.0.1 (npm):GHSA-76c9-3jph-rj3q"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.2308,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":36.0,"function_nloc":403.0,"mean_ccn":1.56,"p90_ccn":3.0,"complex_functions":0.0,"long_functions":0.0,"many_param_functions":0.0,"risky_nloc_share":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":465.0,"duplicated_lines":0.0,"duplicated_share":0.0,"files":34.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":8.0,"weighted_findings":2.75,"scanned_lines":796.0,"category:best-practice":1.0,"category:correctness":7.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"src/utils/genSchema.ts","line":15,"fingerprint":"javascript.lang.best-practice.lazy-load-module:src/utils/genSchema.ts:15"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/utils/TestClient.ts","line":25,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/utils/TestClient.ts:25"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/utils/TestClient.ts","line":39,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/utils/TestClient.ts:39"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/utils/TestClient.ts","line":39,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/utils/TestClient.ts:39"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/utils/TestClient.ts","line":54,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/utils/TestClient.ts:54"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/utils/TestClient.ts","line":68,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/utils/TestClient.ts:68"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/utils/TestClient.ts","line":68,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/utils/TestClient.ts:68"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/utils/TestClient.ts","line":86,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/utils/TestClient.ts:86"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":411.0,"source_lines":796.0,"test_ratio":0.5163,"ci_files":0.0,"cochange_share":0.6774,"cochange_commits":31.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":0.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":36.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":0.0,"escapes":20.0,"escapes_per_kloc":20.0},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}