{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:03.058569Z","repo":{"ref":{"host":"github.com","owner":"binder-git","name":"seth-haus"},"default_branch":"main","clone_url":"https://github.com/binder-git/seth-haus.git","html_url":"https://github.com/binder-git/seth-haus","description":"An ecommerce prototype for triathlon gear, built entirely with AI coding tools using React, TypeScript, the Commerce Layer API and micro frontends, and Netlify.","stars":1,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":48043,"primary_language":"TypeScript","license_spdx":"MIT","created_at":"2025-05-13T16:28:58Z","pushed_at":"2025-06-11T18:22:45Z","security_policy_url":null,"distribution":{"owner_created_at":"2011-08-03T22:43:06Z","owner_type":"User","release_assets":[]}},"commit_sha":"8277e62784c03b144feea6d4823aef5fcb681073","profile":{"lines_by_language":{"TypeScript":13972,"JavaScript":2444,"Shell":12},"files_by_category":{"source":277,"config":29,"oversized":16,"other":7,"binary":7,"test":5,"docs":4,"generated":3},"source_lines":15661,"test_lines":767},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.64,"coverage":1.0,"label":"possible","breakdown":{"attributed_share":0.0,"suspected_share":0.0428,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":1.0,"flagged_releases":null,"style_index":0.702},"summary":"Weak signals consistent with AI-assisted development."},"quality":{"score":44.1,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":68.3,"duplication":47.1,"lint":4.6,"testing":27.0,"docs":65.0,"type_safety":100.0,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.05, no CI test run detected; 13% of function code in complex or long functions; 13% duplicated lines. Weakest area: lint."},"security":{"score":57.9,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":92.0,"dependencies":0.0,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 331 known vulnerabilities in 94 dependencies. Weakest area: dependencies."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":97.0,"checked":97.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":96.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":91974.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2025-05":{"loc":91974,"attributed_loc":0},"2025-06":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":29.0,"flagged_units":1.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":10908.0,"flagged_loc":3940.0,"flagged_loc_share":0.3612027869453612,"max_loc_per_hour":985.0,"median_loc_per_hour":138.25,"pr_timed_units":0.0,"excluded_import_loc":81066.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"3,940 lines of first-party code in ~4.0h (985 lines/hour, 1 commit session)","ref":"6f1a97e48bcc86ecb6d9fd13db4865ac0ae47203","url":"https://github.com/binder-git/seth-haus/commit/6f1a97e48bcc86ecb6d9fd13db4865ac0ae47203","weight":0.2955}],"data":{"flagged_loc_by_commit":{"6f1a97e48bcc86ecb6d9fd13db4865ac0ae47203":3940},"excluded_import_commits":["40a4f527f24bf8c2c9d6e9da00122846b5bc75f5","dd6686edbc357167220780d20f1cc6c3584f304b","ee822bca0241db9fcb77254c53968906bed7f587"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":15661.0,"index":0.702,"count:narrated_steps":2.0,"per_kloc:narrated_steps":0.128,"files:narrated_steps":2.0,"count:placeholder":2.0,"per_kloc:placeholder":0.128,"files:placeholder":2.0,"count:emoji_in_code":10.0,"per_kloc:emoji_in_code":0.639,"files:emoji_in_code":4.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // First, fetch SKU list items to get the SKU IDs","ref":"netlify/functions/src/featured-products.ts:200","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/netlify/functions/src/featured-products.ts#L200","weight":0.0},{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // First, get the SKU list ID for the market","ref":"ui/src/api/commerceLayerClient.ts:134","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/api/commerceLayerClient.ts#L134","weight":0.0},{"kind":"stylometry:placeholder","description":"placeholder or demo-only phrasing: // This is a placeholder. In a real implementation, you would get the market from a store or props","ref":"ui/src/contexts/CommerceLayerContext.tsx:11","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/contexts/CommerceLayerContext.tsx#L11","weight":0.0},{"kind":"stylometry:placeholder","description":"placeholder or demo-only phrasing: // If you are still using these directly, you might need to add their VITE_ counterparts,","ref":"ui/src/vite-env.d.ts:15","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/vite-env.d.ts#L15","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":21.0,"findings_high":0.0,"findings_medium":13.0,"findings_low":8.0,"weighted_findings":3.75,"scanned_lines":15661.0,"parse_errors":38.0},"findings":[{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `prelayout` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"ui/.pnp.loader.mjs","line":104,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:ui/.pnp.loader.mjs:104"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `postlayout` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"ui/.pnp.loader.mjs","line":104,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:ui/.pnp.loader.mjs:104"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(\\/(?:[^/]+\\/)*?(?:\\$\\$virtual|__virtual__))((?:\\/((?:[^/]+-)?[a-f0-9]+)(?:\\/([^/]+))?)?((?:\\/.*)?))$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is  [confidence low]","path":"ui/.pnp.loader.mjs","line":1343,"fingerprint":"javascript.lang.security.audit.detect-redos:ui/.pnp.loader.mjs:1343"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(\\/(?:[^/]+\\/)*?(?:\\$\\$virtual|__virtual__))((?:\\/((?:[^/]+-)?[a-f0-9]+)(?:\\/([^/]+))?)?((?:\\/.*)?))$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is  [confidence low]","path":"ui/.pnp.loader.mjs","line":1364,"fingerprint":"javascript.lang.security.audit.detect-redos:ui/.pnp.loader.mjs:1364"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-redos","severity":"medium","message":"Detected the use of a regular expression `^(\\/(?:[^/]+\\/)*?(?:\\$\\$virtual|__virtual__))((?:\\/((?:[^/]+-)?[a-f0-9]+)(?:\\/([^/]+))?)?((?:\\/.*)?))$` which appears to be vulnerable to a Regular expression Denial-of-Service (ReDoS). For this reason, it is recommended to review the regex and ensure it is  [confidence low]","path":"ui/.pnp.loader.mjs","line":1373,"fingerprint":"javascript.lang.security.audit.detect-redos:ui/.pnp.loader.mjs:1373"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `requestPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"ui/.pnp.loader.mjs","line":1419,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:ui/.pnp.loader.mjs:1419"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `requestPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"ui/.pnp.loader.mjs","line":1421,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:ui/.pnp.loader.mjs:1421"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `path2` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"ui/.pnp.loader.mjs","line":1426,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:ui/.pnp.loader.mjs:1426"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `urlString` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"ui/.pnp.loader.mjs","line":1505,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:ui/.pnp.loader.mjs:1505"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"ui/.pnp.loader.mjs","line":1962,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:ui/.pnp.loader.mjs:1962"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"ui/src/brain/http-client.ts","line":181,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:ui/src/brain/http-client.ts:181"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"ui/src/brain/http-client.ts","line":199,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:ui/src/brain/http-client.ts:199"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `route` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-controlle [confidence low]","path":"ui/src/router.js","line":60,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:ui/src/router.js:60"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"netlify/functions/src/featured-products.ts","line":125,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:netlify/functions/src/featured-products.ts:125"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"netlify/functions/src/featured-products.ts","line":153,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:netlify/functions/src/featured-products.ts:153"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"ui/src/api/commerceLayerApi.ts","line":58,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:ui/src/api/commerceLayerApi.ts:58"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"ui/src/pages/App.tsx","line":84,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:ui/src/pages/App.tsx:84"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"ui/src/pages/App.tsx","line":94,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:ui/src/pages/App.tsx:94"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"ui/src/utils/product-store.ts","line":53,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:ui/src/utils/product-store.ts:53"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"ui/src/utils/product-store.ts","line":60,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:ui/src/utils/product-store.ts:60"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"ui/src/utils/product-store.ts","line":113,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:ui/src/utils/product-store.ts:113"}],"evidence":[],"data":{"rulesets":["typescript","javascript","bash"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":94.0,"vulnerabilities":331.0,"vulns_critical":7.0,"vulns_high":173.0,"vulns_medium":123.0,"vulns_low":28.0,"vulns_unknown":0.0,"penalty":651.0},"findings":[{"rule_id":"osv/GHSA-hrh2-vp3x-79xf","severity":"critical","message":"@xhmikosr/decompress@9.0.1 (npm) is affected by GHSA-hrh2-vp3x-79xf","path":"package-lock.json","line":null,"fingerprint":"@xhmikosr/decompress@9.0.1 (npm):GHSA-hrh2-vp3x-79xf"},{"rule_id":"osv/GHSA-mp2f-45pm-3cg9","severity":"critical","message":"@xhmikosr/decompress@9.0.1 (npm) is affected by GHSA-mp2f-45pm-3cg9","path":"package-lock.json","line":null,"fingerprint":"@xhmikosr/decompress@9.0.1 (npm):GHSA-mp2f-45pm-3cg9"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@4.0.3 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"package-lock.json","line":null,"fingerprint":"form-data@4.0.3 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.7 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"package-lock.json","line":null,"fingerprint":"proxy-addr@2.0.7 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@6.2.1 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@7.4.3 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@4.0.2 (npm) is affected by GHSA-fjxv-7rqg-78g4; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"form-data@4.0.2 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-x8mw-p69m-v3mx","severity":"high","message":"@fastify/busboy@3.1.1 (npm) is affected by GHSA-x8mw-p69m-v3mx","path":"package-lock.json","line":null,"fingerprint":"@fastify/busboy@3.1.1 (npm):GHSA-x8mw-p69m-v3mx"},{"rule_id":"osv/GHSA-xjh9-v7x6-24jw","severity":"high","message":"@fastify/busboy@3.1.1 (npm) is affected by GHSA-xjh9-v7x6-24jw","path":"package-lock.json","line":null,"fingerprint":"@fastify/busboy@3.1.1 (npm):GHSA-xjh9-v7x6-24jw"},{"rule_id":"osv/GHSA-83w8-p2f5-377r","severity":"high","message":"@fastify/static@7.0.4 (npm) is affected by GHSA-83w8-p2f5-377r","path":"package-lock.json","line":null,"fingerprint":"@fastify/static@7.0.4 (npm):GHSA-83w8-p2f5-377r"},{"rule_id":"osv/GHSA-35jp-ww65-95wh","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-35jp-ww65-95wh; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-35jp-ww65-95wh"},{"rule_id":"osv/GHSA-3g43-6gmg-66jw","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-3g43-6gmg-66jw; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-3g43-6gmg-66jw"},{"rule_id":"osv/GHSA-43fc-jf86-j433","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-43fc-jf86-j433; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-43fc-jf86-j433"},{"rule_id":"osv/GHSA-4hjh-wcwx-xvwj","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-4hjh-wcwx-xvwj; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-4hjh-wcwx-xvwj"},{"rule_id":"osv/GHSA-62hf-57xw-28j9","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-62hf-57xw-28j9; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-62hf-57xw-28j9"},{"rule_id":"osv/GHSA-6chq-wfr3-2hj9","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-6chq-wfr3-2hj9; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-6chq-wfr3-2hj9"},{"rule_id":"osv/GHSA-777c-7fjr-54vf","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-777c-7fjr-54vf; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-777c-7fjr-54vf"},{"rule_id":"osv/GHSA-hfxv-24rg-xrqf","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-hfxv-24rg-xrqf; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-hfxv-24rg-xrqf"},{"rule_id":"osv/GHSA-j5f8-grm9-p9fc","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-j5f8-grm9-p9fc; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-j5f8-grm9-p9fc"},{"rule_id":"osv/GHSA-p92q-9vqr-4j8v","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-p92q-9vqr-4j8v; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-p92q-9vqr-4j8v"},{"rule_id":"osv/GHSA-pf86-5x62-jrwf","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-pf86-5x62-jrwf; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-pf86-5x62-jrwf"},{"rule_id":"osv/GHSA-pmwg-cvhr-8vh7","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-pmwg-cvhr-8vh7; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-pmwg-cvhr-8vh7"},{"rule_id":"osv/GHSA-q8qp-cvcw-x6jj","severity":"high","message":"axios@1.9.0 (npm) is affected by GHSA-q8qp-cvcw-x6jj; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-q8qp-cvcw-x6jj"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.20.3 (npm) is affected by GHSA-27r3-jxmh-p828","path":"package-lock.json","line":null,"fingerprint":"body-parser@1.20.3 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@2.2.0 (npm) is affected by GHSA-27r3-jxmh-p828","path":"package-lock.json","line":null,"fingerprint":"body-parser@2.2.0 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-3jxr-9vmj-r5cp; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-6j4f-fj2g-mc7p; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-mh99-v99m-4gvg; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-qhr7-859c-m2p7; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-rgw5-rvv9-x895; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-3jxr-9vmj-r5cp; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-6j4f-fj2g-mc7p; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-mh99-v99m-4gvg; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-qhr7-859c-m2p7; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-rgw5-rvv9-x895; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-737v-mqg7-c878","severity":"high","message":"defu@6.1.4 (npm) is affected by GHSA-737v-mqg7-c878","path":"package-lock.json","line":null,"fingerprint":"defu@6.1.4 (npm):GHSA-737v-mqg7-c878"},{"rule_id":"osv/GHSA-7pqw-9j4j-h8q3","severity":"high","message":"extract-zip@2.0.1 (npm) is affected by GHSA-7pqw-9j4j-h8q3","path":"package-lock.json","line":null,"fingerprint":"extract-zip@2.0.1 (npm):GHSA-7pqw-9j4j-h8q3"},{"rule_id":"osv/GHSA-jmr9-qjv8-65gv","severity":"high","message":"extract-zip@2.0.1 (npm) is affected by GHSA-jmr9-qjv8-65gv","path":"package-lock.json","line":null,"fingerprint":"extract-zip@2.0.1 (npm):GHSA-jmr9-qjv8-65gv"},{"rule_id":"osv/GHSA-7p8r-x3mc-p8w7","severity":"high","message":"fast-uri@2.2.0 (npm) is affected by GHSA-7p8r-x3mc-p8w7","path":"package-lock.json","line":null,"fingerprint":"fast-uri@2.2.0 (npm):GHSA-7p8r-x3mc-p8w7"},{"rule_id":"osv/GHSA-q3j6-qgpj-74h6","severity":"high","message":"fast-uri@2.2.0 (npm) is affected by GHSA-q3j6-qgpj-74h6","path":"package-lock.json","line":null,"fingerprint":"fast-uri@2.2.0 (npm):GHSA-q3j6-qgpj-74h6"},{"rule_id":"osv/GHSA-qw65-cvwx-89v3","severity":"high","message":"fast-uri@2.2.0 (npm) is affected by GHSA-qw65-cvwx-89v3","path":"package-lock.json","line":null,"fingerprint":"fast-uri@2.2.0 (npm):GHSA-qw65-cvwx-89v3"},{"rule_id":"osv/GHSA-v39h-62p7-jpjc","severity":"high","message":"fast-uri@2.2.0 (npm) is affected by GHSA-v39h-62p7-jpjc","path":"package-lock.json","line":null,"fingerprint":"fast-uri@2.2.0 (npm):GHSA-v39h-62p7-jpjc"},{"rule_id":"osv/GHSA-4c8g-83qw-93j6","severity":"high","message":"fast-uri@3.0.3 (npm) is affected by GHSA-4c8g-83qw-93j6","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-4c8g-83qw-93j6"},{"rule_id":"osv/GHSA-7p8r-x3mc-p8w7","severity":"high","message":"fast-uri@3.0.3 (npm) is affected by GHSA-7p8r-x3mc-p8w7","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-7p8r-x3mc-p8w7"},{"rule_id":"osv/GHSA-f65p-4m7j-42xc","severity":"high","message":"fast-uri@3.0.3 (npm) is affected by GHSA-f65p-4m7j-42xc","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-f65p-4m7j-42xc"},{"rule_id":"osv/GHSA-jqff-g426-hqxp","severity":"high","message":"fast-uri@3.0.3 (npm) is affected by GHSA-jqff-g426-hqxp","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-jqff-g426-hqxp"},{"rule_id":"osv/GHSA-q3j6-qgpj-74h6","severity":"high","message":"fast-uri@3.0.3 (npm) is affected by GHSA-q3j6-qgpj-74h6","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-q3j6-qgpj-74h6"},{"rule_id":"osv/GHSA-qw65-cvwx-89v3","severity":"high","message":"fast-uri@3.0.3 (npm) is affected by GHSA-qw65-cvwx-89v3","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-qw65-cvwx-89v3"},{"rule_id":"osv/GHSA-v2hh-gcrm-f6hx","severity":"high","message":"fast-uri@3.0.3 (npm) is affected by GHSA-v2hh-gcrm-f6hx","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-v2hh-gcrm-f6hx"},{"rule_id":"osv/GHSA-v39h-62p7-jpjc","severity":"high","message":"fast-uri@3.0.3 (npm) is affected by GHSA-v39h-62p7-jpjc","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-v39h-62p7-jpjc"},{"rule_id":"osv/GHSA-667r-xxjv-c9mm","severity":"high","message":"fastify@4.28.1 (npm) is affected by GHSA-667r-xxjv-c9mm","path":"package-lock.json","line":null,"fingerprint":"fastify@4.28.1 (npm):GHSA-667r-xxjv-c9mm"},{"rule_id":"osv/GHSA-9q9j-q6p8-xq58","severity":"high","message":"fastify@4.28.1 (npm) is affected by GHSA-9q9j-q6p8-xq58","path":"package-lock.json","line":null,"fingerprint":"fastify@4.28.1 (npm):GHSA-9q9j-q6p8-xq58"},{"rule_id":"osv/GHSA-hwr6-493r-vm6h","severity":"high","message":"fastify@4.28.1 (npm) is affected by GHSA-hwr6-493r-vm6h","path":"package-lock.json","line":null,"fingerprint":"fastify@4.28.1 (npm):GHSA-hwr6-493r-vm6h"},{"rule_id":"osv/GHSA-jx2c-rxcm-jvmq","severity":"high","message":"fastify@4.28.1 (npm) is affected by GHSA-jx2c-rxcm-jvmq","path":"package-lock.json","line":null,"fingerprint":"fastify@4.28.1 (npm):GHSA-jx2c-rxcm-jvmq"},{"rule_id":"osv/GHSA-p68q-wchp-6fh7","severity":"high","message":"fastify@4.28.1 (npm) is affected by GHSA-p68q-wchp-6fh7","path":"package-lock.json","line":null,"fingerprint":"fastify@4.28.1 (npm):GHSA-p68q-wchp-6fh7"},{"rule_id":"osv/GHSA-c96f-x56v-gq3h","severity":"high","message":"find-my-way@8.2.2 (npm) is affected by GHSA-c96f-x56v-gq3h","path":"package-lock.json","line":null,"fingerprint":"find-my-way@8.2.2 (npm):GHSA-c96f-x56v-gq3h"},{"rule_id":"osv/GHSA-25h7-pfq9-p65f","severity":"high","message":"flatted@3.3.3 (npm) is affected by GHSA-25h7-pfq9-p65f; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"flatted@3.3.3 (npm):GHSA-25h7-pfq9-p65f"},{"rule_id":"osv/GHSA-rf6f-7fwh-wjgh","severity":"high","message":"flatted@3.3.3 (npm) is affected by GHSA-rf6f-7fwh-wjgh; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"flatted@3.3.3 (npm):GHSA-rf6f-7fwh-wjgh"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@4.0.3 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"package-lock.json","line":null,"fingerprint":"form-data@4.0.3 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-5j98-mcp5-4vw2","severity":"high","message":"glob@10.3.15 (npm) is affected by GHSA-5j98-mcp5-4vw2","path":"package-lock.json","line":null,"fingerprint":"glob@10.3.15 (npm):GHSA-5j98-mcp5-4vw2"},{"rule_id":"osv/GHSA-5j98-mcp5-4vw2","severity":"high","message":"glob@10.4.1 (npm) is affected by GHSA-5j98-mcp5-4vw2","path":"package-lock.json","line":null,"fingerprint":"glob@10.4.1 (npm):GHSA-5j98-mcp5-4vw2"},{"rule_id":"osv/GHSA-5j98-mcp5-4vw2","severity":"high","message":"glob@10.4.5 (npm) is affected by GHSA-5j98-mcp5-4vw2; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"glob@10.4.5 (npm):GHSA-5j98-mcp5-4vw2"},{"rule_id":"osv/GHSA-22cc-p3c6-wpvm","severity":"high","message":"h3@1.10.1 (npm) is affected by GHSA-22cc-p3c6-wpvm","path":"package-lock.json","line":null,"fingerprint":"h3@1.10.1 (npm):GHSA-22cc-p3c6-wpvm"},{"rule_id":"osv/GHSA-mp2g-9vg9-f4cg","severity":"high","message":"h3@1.10.1 (npm) is affected by GHSA-mp2g-9vg9-f4cg","path":"package-lock.json","line":null,"fingerprint":"h3@1.10.1 (npm):GHSA-mp2g-9vg9-f4cg"},{"rule_id":"osv/GHSA-gcq2-9pq2-cxqm","severity":"high","message":"http-proxy-middleware@3.0.5 (npm) is affected by GHSA-gcq2-9pq2-cxqm","path":"package-lock.json","line":null,"fingerprint":"http-proxy-middleware@3.0.5 (npm):GHSA-gcq2-9pq2-cxqm"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@4.1.0 (npm) is affected by GHSA-2883-xcg3-v3hh; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@4.1.0 (npm) is affected by GHSA-52cp-r559-cp3m; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@4.1.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-869p-cjfg-cm3x","severity":"high","message":"jws@3.2.2 (npm) is affected by GHSA-869p-cjfg-cm3x","path":"package-lock.json","line":null,"fingerprint":"jws@3.2.2 (npm):GHSA-869p-cjfg-cm3x"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.21 (npm) is affected by GHSA-r5fr-rjxr-66jc; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.21 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash-es@4.17.21 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"package-lock.json","line":null,"fingerprint":"lodash-es@4.17.21 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-23c5-xmqv-rm74; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-3ppc-4f35-3m26; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-7r86-cg39-jmmj; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@5.1.6 (npm) is affected by GHSA-23c5-xmqv-rm74; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@5.1.6 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@5.1.6 (npm) is affected by GHSA-3ppc-4f35-3m26; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@5.1.6 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@5.1.6 (npm) is affected by GHSA-7r86-cg39-jmmj; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@5.1.6 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@9.0.4 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.4 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@9.0.4 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.4 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@9.0.4 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.4 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-23c5-xmqv-rm74; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-3ppc-4f35-3m26; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-7r86-cg39-jmmj; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-65x3-rw7q-gx94","severity":"high","message":"multiparty@4.2.3 (npm) is affected by GHSA-65x3-rw7q-gx94","path":"package-lock.json","line":null,"fingerprint":"multiparty@4.2.3 (npm):GHSA-65x3-rw7q-gx94"},{"rule_id":"osv/GHSA-qxch-whhj-8956","severity":"high","message":"multiparty@4.2.3 (npm) is affected by GHSA-qxch-whhj-8956","path":"package-lock.json","line":null,"fingerprint":"multiparty@4.2.3 (npm):GHSA-qxch-whhj-8956"},{"rule_id":"osv/GHSA-xh3c-6gcq-g4rv","severity":"high","message":"multiparty@4.2.3 (npm) is affected by GHSA-xh3c-6gcq-g4rv","path":"package-lock.json","line":null,"fingerprint":"multiparty@4.2.3 (npm):GHSA-xh3c-6gcq-g4rv"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-28wg-ghj8-5hjv; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-2v37-7h3g-55p8; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-xwg4-73v4-xw9w","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-xwg4-73v4-xw9w; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-xwg4-73v4-xw9w"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.7 (npm) is affected by GHSA-28wg-ghj8-5hjv","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.7 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.7 (npm) is affected by GHSA-2v37-7h3g-55p8","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.7 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-xwg4-73v4-xw9w","severity":"high","message":"nanoid@3.3.7 (npm) is affected by GHSA-xwg4-73v4-xw9w","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.7 (npm):GHSA-xwg4-73v4-xw9w"},{"rule_id":"osv/GHSA-2328-f5f3-gj25","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-2328-f5f3-gj25","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-2328-f5f3-gj25"},{"rule_id":"osv/GHSA-554w-wpv2-vw27","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-554w-wpv2-vw27","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-554w-wpv2-vw27"},{"rule_id":"osv/GHSA-5gfm-wpxj-wjgq","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-5gfm-wpxj-wjgq","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-5gfm-wpxj-wjgq"},{"rule_id":"osv/GHSA-5m6q-g25r-mvwx","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-5m6q-g25r-mvwx","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-5m6q-g25r-mvwx"},{"rule_id":"osv/GHSA-5x38-2vff-x55p","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-5x38-2vff-x55p","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-5x38-2vff-x55p"},{"rule_id":"osv/GHSA-6qrw-m8cv-hcxf","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-6qrw-m8cv-hcxf","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-6qrw-m8cv-hcxf"},{"rule_id":"osv/GHSA-7wch-p9px-956x","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-7wch-p9px-956x","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-7wch-p9px-956x"},{"rule_id":"osv/GHSA-86w9-cpqp-85rv","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-86w9-cpqp-85rv, GHSA-ppp5-5v6c-4jwp","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-86w9-cpqp-85rv"},{"rule_id":"osv/GHSA-8hrf-8g6f-7xwp","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-8hrf-8g6f-7xwp","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-8hrf-8g6f-7xwp"},{"rule_id":"osv/GHSA-hqq3-7jhf-c5jx","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-hqq3-7jhf-c5jx","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-hqq3-7jhf-c5jx"},{"rule_id":"osv/GHSA-jc66-7q78-782g","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-jc66-7q78-782g","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-jc66-7q78-782g"},{"rule_id":"osv/GHSA-q67f-28xg-22rw","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-q67f-28xg-22rw","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-q67f-28xg-22rw"},{"rule_id":"osv/GHSA-rhr8-3pm8-cq29","severity":"high","message":"node-forge@1.3.1 (npm) is affected by GHSA-rhr8-3pm8-cq29","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-rhr8-3pm8-cq29"},{"rule_id":"osv/GHSA-37ch-88jc-xwx2","severity":"high","message":"path-to-regexp@0.1.12 (npm) is affected by GHSA-37ch-88jc-xwx2","path":"package-lock.json","line":null,"fingerprint":"path-to-regexp@0.1.12 (npm):GHSA-37ch-88jc-xwx2"},{"rule_id":"osv/GHSA-j3q9-mxjg-w52f","severity":"high","message":"path-to-regexp@8.2.0 (npm) is affected by GHSA-j3q9-mxjg-w52f","path":"package-lock.json","line":null,"fingerprint":"path-to-regexp@8.2.0 (npm):GHSA-j3q9-mxjg-w52f"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@2.3.1 (npm) is affected by GHSA-c2c7-rcm5-vvqj; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@4.0.2 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"package-lock.json","line":null,"fingerprint":"picomatch@4.0.2 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.4.47 (npm) is affected by GHSA-6g55-p6wh-862q","path":"package-lock.json","line":null,"fingerprint":"postcss@8.4.47 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.4.47 (npm) is affected by GHSA-r28c-9q8g-f849","path":"package-lock.json","line":null,"fingerprint":"postcss@8.4.47 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.5.3 (npm) is affected by GHSA-6g55-p6wh-862q; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.3 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.5.3 (npm) is affected by GHSA-r28c-9q8g-f849; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.3 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-2w69-qvjg-hvjx","severity":"high","message":"react-router@7.6.2 (npm) is affected by GHSA-2w69-qvjg-hvjx","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-2w69-qvjg-hvjx"},{"rule_id":"osv/GHSA-3cgp-3xvw-98x8","severity":"high","message":"react-router@7.6.2 (npm) is affected by GHSA-3cgp-3xvw-98x8","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-3cgp-3xvw-98x8"},{"rule_id":"osv/GHSA-49rj-9fvp-4h2h","severity":"high","message":"react-router@7.6.2 (npm) is affected by GHSA-49rj-9fvp-4h2h","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-49rj-9fvp-4h2h"},{"rule_id":"osv/GHSA-8v8x-cx79-35w7","severity":"high","message":"react-router@7.6.2 (npm) is affected by GHSA-8v8x-cx79-35w7","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-8v8x-cx79-35w7"},{"rule_id":"osv/GHSA-8x6r-g9mw-2r78","severity":"high","message":"react-router@7.6.2 (npm) is affected by GHSA-8x6r-g9mw-2r78","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-8x6r-g9mw-2r78"},{"rule_id":"osv/GHSA-chx6-hx7r-mcp5","severity":"high","message":"react-router@7.6.2 (npm) is affected by GHSA-chx6-hx7r-mcp5","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-chx6-hx7r-mcp5"},{"rule_id":"osv/GHSA-rxv8-25v2-qmq8","severity":"high","message":"react-router@7.6.2 (npm) is affected by GHSA-rxv8-25v2-qmq8","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-rxv8-25v2-qmq8"},{"rule_id":"osv/GHSA-mw96-cpmx-2vgc","severity":"high","message":"rollup@4.22.4 (npm) is affected by GHSA-mw96-cpmx-2vgc","path":"package-lock.json","line":null,"fingerprint":"rollup@4.22.4 (npm):GHSA-mw96-cpmx-2vgc"},{"rule_id":"osv/GHSA-mw96-cpmx-2vgc","severity":"high","message":"rollup@4.40.2 (npm) is affected by GHSA-mw96-cpmx-2vgc; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"rollup@4.40.2 (npm):GHSA-mw96-cpmx-2vgc"},{"rule_id":"osv/GHSA-f88m-g3jw-g9cj","severity":"high","message":"sharp@0.32.6 (npm) is affected by GHSA-f88m-g3jw-g9cj","path":"package-lock.json","line":null,"fingerprint":"sharp@0.32.6 (npm):GHSA-f88m-g3jw-g9cj"},{"rule_id":"osv/GHSA-rgj7-g3m4-5g8c","severity":"high","message":"sharp@0.32.6 (npm) is affected by GHSA-rgj7-g3m4-5g8c","path":"package-lock.json","line":null,"fingerprint":"sharp@0.32.6 (npm):GHSA-rgj7-g3m4-5g8c"},{"rule_id":"osv/GHSA-wq5f-xc86-pv6w","severity":"high","message":"sharp@0.32.6 (npm) is affected by GHSA-wq5f-xc86-pv6w","path":"package-lock.json","line":null,"fingerprint":"sharp@0.32.6 (npm):GHSA-wq5f-xc86-pv6w"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-2p49-hgcm-8545","severity":"high","message":"svgo@3.2.0 (npm) is affected by GHSA-2p49-hgcm-8545","path":"package-lock.json","line":null,"fingerprint":"svgo@3.2.0 (npm):GHSA-2p49-hgcm-8545"},{"rule_id":"osv/GHSA-w27v-7q3p-w38r","severity":"high","message":"svgo@3.2.0 (npm) is affected by GHSA-w27v-7q3p-w38r","path":"package-lock.json","line":null,"fingerprint":"svgo@3.2.0 (npm):GHSA-w27v-7q3p-w38r"},{"rule_id":"osv/GHSA-xpqw-6gx7-v673","severity":"high","message":"svgo@3.2.0 (npm) is affected by GHSA-xpqw-6gx7-v673","path":"package-lock.json","line":null,"fingerprint":"svgo@3.2.0 (npm):GHSA-xpqw-6gx7-v673"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-83g3-92jg-28cx","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-r292-9mhp-454m","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-83g3-92jg-28cx","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-r292-9mhp-454m","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@7.4.3 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-8cj5-5rvv-wf4v","severity":"high","message":"tar-fs@2.1.1 (npm) is affected by GHSA-8cj5-5rvv-wf4v","path":"package-lock.json","line":null,"fingerprint":"tar-fs@2.1.1 (npm):GHSA-8cj5-5rvv-wf4v"},{"rule_id":"osv/GHSA-pq67-2wwv-3xjx","severity":"high","message":"tar-fs@2.1.1 (npm) is affected by GHSA-pq67-2wwv-3xjx","path":"package-lock.json","line":null,"fingerprint":"tar-fs@2.1.1 (npm):GHSA-pq67-2wwv-3xjx"},{"rule_id":"osv/GHSA-vj76-c3g6-qr5v","severity":"high","message":"tar-fs@2.1.1 (npm) is affected by GHSA-vj76-c3g6-qr5v","path":"package-lock.json","line":null,"fingerprint":"tar-fs@2.1.1 (npm):GHSA-vj76-c3g6-qr5v"},{"rule_id":"osv/GHSA-8cj5-5rvv-wf4v","severity":"high","message":"tar-fs@3.0.4 (npm) is affected by GHSA-8cj5-5rvv-wf4v","path":"package-lock.json","line":null,"fingerprint":"tar-fs@3.0.4 (npm):GHSA-8cj5-5rvv-wf4v"},{"rule_id":"osv/GHSA-pq67-2wwv-3xjx","severity":"high","message":"tar-fs@3.0.4 (npm) is affected by GHSA-pq67-2wwv-3xjx","path":"package-lock.json","line":null,"fingerprint":"tar-fs@3.0.4 (npm):GHSA-pq67-2wwv-3xjx"},{"rule_id":"osv/GHSA-vj76-c3g6-qr5v","severity":"high","message":"tar-fs@3.0.4 (npm) is affected by GHSA-vj76-c3g6-qr5v","path":"package-lock.json","line":null,"fingerprint":"tar-fs@3.0.4 (npm):GHSA-vj76-c3g6-qr5v"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.33 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"package-lock.json","line":null,"fingerprint":"tmp@0.0.33 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.2.1 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"package-lock.json","line":null,"fingerprint":"tmp@0.2.1 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.2.3 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"package-lock.json","line":null,"fingerprint":"tmp@0.2.3 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-4qx8-w7c3-pj3p","severity":"high","message":"toml@3.0.0 (npm) is affected by GHSA-4qx8-w7c3-pj3p","path":"package-lock.json","line":null,"fingerprint":"toml@3.0.0 (npm):GHSA-4qx8-w7c3-pj3p"},{"rule_id":"osv/GHSA-82x6-q7mm-w9cf","severity":"high","message":"toml@3.0.0 (npm) is affected by GHSA-82x6-q7mm-w9cf","path":"package-lock.json","line":null,"fingerprint":"toml@3.0.0 (npm):GHSA-82x6-q7mm-w9cf"},{"rule_id":"osv/GHSA-9j65-hcg3-gc64","severity":"high","message":"toml@3.0.0 (npm) is affected by GHSA-9j65-hcg3-gc64","path":"package-lock.json","line":null,"fingerprint":"toml@3.0.0 (npm):GHSA-9j65-hcg3-gc64"},{"rule_id":"osv/GHSA-9qmh-m7c6-f92p","severity":"high","message":"toml@3.0.0 (npm) is affected by GHSA-9qmh-m7c6-f92p","path":"package-lock.json","line":null,"fingerprint":"toml@3.0.0 (npm):GHSA-9qmh-m7c6-f92p"},{"rule_id":"osv/GHSA-h895-cgqg-jf52","severity":"high","message":"toml@3.0.0 (npm) is affected by GHSA-h895-cgqg-jf52","path":"package-lock.json","line":null,"fingerprint":"toml@3.0.0 (npm):GHSA-h895-cgqg-jf52"},{"rule_id":"osv/GHSA-v5mp-jgw5-2x6j","severity":"high","message":"toml@3.0.0 (npm) is affected by GHSA-v5mp-jgw5-2x6j","path":"package-lock.json","line":null,"fingerprint":"toml@3.0.0 (npm):GHSA-v5mp-jgw5-2x6j"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@11.1.0 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"package-lock.json","line":null,"fingerprint":"uuid@11.1.0 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@9.0.1 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"package-lock.json","line":null,"fingerprint":"uuid@9.0.1 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@8.18.0 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"package-lock.json","line":null,"fingerprint":"ws@8.18.0 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-mrhx-c7xc-m3w5","severity":"high","message":"zod@3.23.8 (npm) is affected by GHSA-mrhx-c7xc-m3w5","path":"package-lock.json","line":null,"fingerprint":"zod@3.23.8 (npm):GHSA-mrhx-c7xc-m3w5"},{"rule_id":"osv/GHSA-mrhx-c7xc-m3w5","severity":"high","message":"zod@3.25.23 (npm) is affected by GHSA-mrhx-c7xc-m3w5","path":"package-lock.json","line":null,"fingerprint":"zod@3.25.23 (npm):GHSA-mrhx-c7xc-m3w5"},{"rule_id":"osv/GHSA-fv7c-fp4j-7gwp","severity":"high","message":"@babel/plugin-transform-modules-systemjs@7.27.1 (npm) is affected by GHSA-fv7c-fp4j-7gwp; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"@babel/plugin-transform-modules-systemjs@7.27.1 (npm):GHSA-fv7c-fp4j-7gwp"},{"rule_id":"osv/GHSA-2w69-qvjg-hvjx","severity":"high","message":"@remix-run/router@1.23.0 (npm) is affected by GHSA-2w69-qvjg-hvjx; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"@remix-run/router@1.23.0 (npm):GHSA-2w69-qvjg-hvjx"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.24.5 (npm) is affected by GHSA-73wf-gq98-2v4g; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"browserslist@4.24.5 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.24.5 (npm) is affected by GHSA-c83g-rgw3-j3cx; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"browserslist@4.24.5 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@4.0.2 (npm) is affected by GHSA-hmw2-7cc7-3qxx; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"form-data@4.0.2 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.14.1 (npm) is affected by GHSA-2883-xcg3-v3hh; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.14.1 (npm) is affected by GHSA-52cp-r559-cp3m; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.14.1 (npm) is affected by GHSA-5p4m-2wfm-xmqj; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@5.4.19 (npm) is affected by GHSA-587h-7wmj-h5pm; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"vite@5.4.19 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@8.18.2 (npm) is affected by GHSA-96hv-2xvq-fx4p; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"ws@8.18.2 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-gxm5-99cw-xjw9","severity":"medium","message":"@fastify/busboy@3.1.1 (npm) is affected by GHSA-gxm5-99cw-xjw9","path":"package-lock.json","line":null,"fingerprint":"@fastify/busboy@3.1.1 (npm):GHSA-gxm5-99cw-xjw9"},{"rule_id":"osv/GHSA-8pvw-jcv7-9cmj","severity":"medium","message":"@fastify/static@7.0.4 (npm) is affected by GHSA-8pvw-jcv7-9cmj","path":"package-lock.json","line":null,"fingerprint":"@fastify/static@7.0.4 (npm):GHSA-8pvw-jcv7-9cmj"},{"rule_id":"osv/GHSA-x4c5-c7rf-jjgv","severity":"medium","message":"@octokit/endpoint@9.0.5 (npm) is affected by GHSA-x4c5-c7rf-jjgv","path":"package-lock.json","line":null,"fingerprint":"@octokit/endpoint@9.0.5 (npm):GHSA-x4c5-c7rf-jjgv"},{"rule_id":"osv/GHSA-h5c3-5r3r-rr8q","severity":"medium","message":"@octokit/plugin-paginate-rest@11.3.1 (npm) is affected by GHSA-h5c3-5r3r-rr8q","path":"package-lock.json","line":null,"fingerprint":"@octokit/plugin-paginate-rest@11.3.1 (npm):GHSA-h5c3-5r3r-rr8q"},{"rule_id":"osv/GHSA-rmvr-2pp2-xj38","severity":"medium","message":"@octokit/request@8.4.0 (npm) is affected by GHSA-rmvr-2pp2-xj38","path":"package-lock.json","line":null,"fingerprint":"@octokit/request@8.4.0 (npm):GHSA-rmvr-2pp2-xj38"},{"rule_id":"osv/GHSA-xx4v-prfh-6cgc","severity":"medium","message":"@octokit/request-error@5.1.0 (npm) is affected by GHSA-xx4v-prfh-6cgc","path":"package-lock.json","line":null,"fingerprint":"@octokit/request-error@5.1.0 (npm):GHSA-xx4v-prfh-6cgc"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@6.12.6 (npm) is affected by GHSA-2g4f-4pwh-qvx6; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"ajv@6.12.6 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@8.12.0 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"package-lock.json","line":null,"fingerprint":"ajv@8.12.0 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@8.17.1 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"package-lock.json","line":null,"fingerprint":"ajv@8.17.1 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-3p68-rc4w-qgx5","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-3p68-rc4w-qgx5; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-3p68-rc4w-qgx5"},{"rule_id":"osv/GHSA-3w6x-2g7m-8v23","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-3w6x-2g7m-8v23; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-3w6x-2g7m-8v23"},{"rule_id":"osv/GHSA-42h9-826w-cgv3","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-42h9-826w-cgv3; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-42h9-826w-cgv3"},{"rule_id":"osv/GHSA-445q-vr5w-6q77","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-445q-vr5w-6q77; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-445q-vr5w-6q77"},{"rule_id":"osv/GHSA-5c9x-8gcm-mpgx","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-5c9x-8gcm-mpgx; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-5c9x-8gcm-mpgx"},{"rule_id":"osv/GHSA-7q8q-rj6j-mhjq","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-7q8q-rj6j-mhjq; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-7q8q-rj6j-mhjq"},{"rule_id":"osv/GHSA-898c-q2cr-xwhg","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-898c-q2cr-xwhg; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-898c-q2cr-xwhg"},{"rule_id":"osv/GHSA-9fr6-4gfg-395g","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-9fr6-4gfg-395g; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-9fr6-4gfg-395g"},{"rule_id":"osv/GHSA-fvcv-3m26-pcqx","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-fvcv-3m26-pcqx; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-fvcv-3m26-pcqx"},{"rule_id":"osv/GHSA-j8rh-479h-cp32","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-j8rh-479h-cp32; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-j8rh-479h-cp32"},{"rule_id":"osv/GHSA-jqh4-m9w3-8hp9","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-jqh4-m9w3-8hp9; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-jqh4-m9w3-8hp9"},{"rule_id":"osv/GHSA-m7pr-hjqh-92cm","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-m7pr-hjqh-92cm; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-m7pr-hjqh-92cm"},{"rule_id":"osv/GHSA-mmx7-hfxf-jppx","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-mmx7-hfxf-jppx; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-mmx7-hfxf-jppx"},{"rule_id":"osv/GHSA-pmv8-rq9r-6j72","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-pmv8-rq9r-6j72; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-pmv8-rq9r-6j72"},{"rule_id":"osv/GHSA-vf2m-468p-8v99","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-vf2m-468p-8v99; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-vf2m-468p-8v99"},{"rule_id":"osv/GHSA-vh66-26gq-q6x8","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-vh66-26gq-q6x8; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-vh66-26gq-q6x8"},{"rule_id":"osv/GHSA-w9j2-pvgh-6h63","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-w9j2-pvgh-6h63; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-w9j2-pvgh-6h63"},{"rule_id":"osv/GHSA-xx6v-rp6x-q39c","severity":"medium","message":"axios@1.9.0 (npm) is affected by GHSA-xx6v-rp6x-q39c; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"axios@1.9.0 (npm):GHSA-xx6v-rp6x-q39c"},{"rule_id":"osv/GHSA-wqch-xfxh-vrr4","severity":"medium","message":"body-parser@2.2.0 (npm) is affected by GHSA-wqch-xfxh-vrr4","path":"package-lock.json","line":null,"fingerprint":"body-parser@2.2.0 (npm):GHSA-wqch-xfxh-vrr4"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-f886-m6hf-6m8v; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-q2hr-2g5m-vwhr; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-f886-m6hf-6m8v; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@2.0.1 (npm) is affected by GHSA-q2hr-2g5m-vwhr; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.1 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-gcqx-w48m-w2h4","severity":"medium","message":"deepmerge@4.3.1 (npm) is affected by GHSA-gcqx-w48m-w2h4; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"deepmerge@4.3.1 (npm):GHSA-gcqx-w48m-w2h4"},{"rule_id":"osv/GHSA-67mh-4wv8-2f99","severity":"medium","message":"esbuild@0.19.11 (npm) is affected by GHSA-67mh-4wv8-2f99","path":"package-lock.json","line":null,"fingerprint":"esbuild@0.19.11 (npm):GHSA-67mh-4wv8-2f99"},{"rule_id":"osv/GHSA-67mh-4wv8-2f99","severity":"medium","message":"esbuild@0.21.2 (npm) is affected by GHSA-67mh-4wv8-2f99","path":"package-lock.json","line":null,"fingerprint":"esbuild@0.21.2 (npm):GHSA-67mh-4wv8-2f99"},{"rule_id":"osv/GHSA-hrr3-gc8f-f4qj","severity":"medium","message":"fast-uri@2.2.0 (npm) is affected by GHSA-hrr3-gc8f-f4qj","path":"package-lock.json","line":null,"fingerprint":"fast-uri@2.2.0 (npm):GHSA-hrr3-gc8f-f4qj"},{"rule_id":"osv/GHSA-w74x-v6f9-j3xg","severity":"medium","message":"fast-uri@2.2.0 (npm) is affected by GHSA-w74x-v6f9-j3xg","path":"package-lock.json","line":null,"fingerprint":"fast-uri@2.2.0 (npm):GHSA-w74x-v6f9-j3xg"},{"rule_id":"osv/GHSA-hrr3-gc8f-f4qj","severity":"medium","message":"fast-uri@3.0.3 (npm) is affected by GHSA-hrr3-gc8f-f4qj","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-hrr3-gc8f-f4qj"},{"rule_id":"osv/GHSA-w74x-v6f9-j3xg","severity":"medium","message":"fast-uri@3.0.3 (npm) is affected by GHSA-w74x-v6f9-j3xg","path":"package-lock.json","line":null,"fingerprint":"fast-uri@3.0.3 (npm):GHSA-w74x-v6f9-j3xg"},{"rule_id":"osv/GHSA-444r-cwp2-x5xf","severity":"medium","message":"fastify@4.28.1 (npm) is affected by GHSA-444r-cwp2-x5xf","path":"package-lock.json","line":null,"fingerprint":"fastify@4.28.1 (npm):GHSA-444r-cwp2-x5xf"},{"rule_id":"osv/GHSA-4mh8-r7rc-xpvc","severity":"medium","message":"fastify@4.28.1 (npm) is affected by GHSA-4mh8-r7rc-xpvc","path":"package-lock.json","line":null,"fingerprint":"fastify@4.28.1 (npm):GHSA-4mh8-r7rc-xpvc"},{"rule_id":"osv/GHSA-w2qp-rph6-63g4","severity":"medium","message":"fastify@4.28.1 (npm) is affected by GHSA-w2qp-rph6-63g4","path":"package-lock.json","line":null,"fingerprint":"fastify@4.28.1 (npm):GHSA-w2qp-rph6-63g4"},{"rule_id":"osv/GHSA-5v7r-6r5c-r473","severity":"medium","message":"file-type@18.5.0 (npm) is affected by GHSA-5v7r-6r5c-r473","path":"package-lock.json","line":null,"fingerprint":"file-type@18.5.0 (npm):GHSA-5v7r-6r5c-r473"},{"rule_id":"osv/GHSA-r4q5-vmmm-2653","severity":"medium","message":"follow-redirects@1.15.6 (npm) is affected by GHSA-r4q5-vmmm-2653","path":"package-lock.json","line":null,"fingerprint":"follow-redirects@1.15.6 (npm):GHSA-r4q5-vmmm-2653"},{"rule_id":"osv/GHSA-r4q5-vmmm-2653","severity":"medium","message":"follow-redirects@1.15.9 (npm) is affected by GHSA-r4q5-vmmm-2653; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"follow-redirects@1.15.9 (npm):GHSA-r4q5-vmmm-2653"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@10.3.15 (npm) is affected by GHSA-3g3m-2fjr-6pw4","path":"package-lock.json","line":null,"fingerprint":"glob@10.3.15 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@10.4.1 (npm) is affected by GHSA-3g3m-2fjr-6pw4","path":"package-lock.json","line":null,"fingerprint":"glob@10.4.1 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@10.4.5 (npm) is affected by GHSA-3g3m-2fjr-6pw4; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"glob@10.4.5 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-4hxc-9384-m385","severity":"medium","message":"h3@1.10.1 (npm) is affected by GHSA-4hxc-9384-m385","path":"package-lock.json","line":null,"fingerprint":"h3@1.10.1 (npm):GHSA-4hxc-9384-m385"},{"rule_id":"osv/GHSA-72gr-qfp7-vwhw","severity":"medium","message":"h3@1.10.1 (npm) is affected by GHSA-72gr-qfp7-vwhw","path":"package-lock.json","line":null,"fingerprint":"h3@1.10.1 (npm):GHSA-72gr-qfp7-vwhw"},{"rule_id":"osv/GHSA-wr4h-v87w-p3r7","severity":"medium","message":"h3@1.10.1 (npm) is affected by GHSA-wr4h-v87w-p3r7","path":"package-lock.json","line":null,"fingerprint":"h3@1.10.1 (npm):GHSA-wr4h-v87w-p3r7"},{"rule_id":"osv/GHSA-4www-5p9h-95mh","severity":"medium","message":"http-proxy-middleware@2.0.7 (npm) is affected by GHSA-4www-5p9h-95mh","path":"package-lock.json","line":null,"fingerprint":"http-proxy-middleware@2.0.7 (npm):GHSA-4www-5p9h-95mh"},{"rule_id":"osv/GHSA-64mm-vxmg-q3vj","severity":"medium","message":"http-proxy-middleware@2.0.7 (npm) is affected by GHSA-64mm-vxmg-q3vj","path":"package-lock.json","line":null,"fingerprint":"http-proxy-middleware@2.0.7 (npm):GHSA-64mm-vxmg-q3vj"},{"rule_id":"osv/GHSA-9gqv-wp59-fq42","severity":"medium","message":"http-proxy-middleware@2.0.7 (npm) is affected by GHSA-9gqv-wp59-fq42","path":"package-lock.json","line":null,"fingerprint":"http-proxy-middleware@2.0.7 (npm):GHSA-9gqv-wp59-fq42"},{"rule_id":"osv/GHSA-64mm-vxmg-q3vj","severity":"medium","message":"http-proxy-middleware@3.0.5 (npm) is affected by GHSA-64mm-vxmg-q3vj","path":"package-lock.json","line":null,"fingerprint":"http-proxy-middleware@3.0.5 (npm):GHSA-64mm-vxmg-q3vj"},{"rule_id":"osv/GHSA-mm3p-j368-7jcr","severity":"medium","message":"ipx@2.1.0 (npm) is affected by GHSA-mm3p-j368-7jcr","path":"package-lock.json","line":null,"fingerprint":"ipx@2.1.0 (npm):GHSA-mm3p-j368-7jcr"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@4.1.0 (npm) is affected by GHSA-h67p-54hq-rp68; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@4.1.0 (npm) is affected by GHSA-mh29-5h37-fv8m; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.0 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.17.21 (npm) is affected by GHSA-xxjr-mmjv-4gpg; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.21 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash-es@4.17.21 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"package-lock.json","line":null,"fingerprint":"lodash-es@4.17.21 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@9.0.4 (npm) is affected by GHSA-g3hv-75wg-m249","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.4 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@9.0.5 (npm) is affected by GHSA-g3hv-75wg-m249; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-mwcw-c2x4-8c55","severity":"medium","message":"nanoid@3.3.7 (npm) is affected by GHSA-mwcw-c2x4-8c55","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.7 (npm):GHSA-mwcw-c2x4-8c55"},{"rule_id":"osv/GHSA-525v-9gp9-w22h","severity":"medium","message":"node-forge@1.3.1 (npm) is affected by GHSA-525v-9gp9-w22h","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-525v-9gp9-w22h"},{"rule_id":"osv/GHSA-5cwg-6vw7-rj6p","severity":"medium","message":"node-forge@1.3.1 (npm) is affected by GHSA-5cwg-6vw7-rj6p","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-5cwg-6vw7-rj6p"},{"rule_id":"osv/GHSA-65ch-62r8-g69g","severity":"medium","message":"node-forge@1.3.1 (npm) is affected by GHSA-65ch-62r8-g69g","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-65ch-62r8-g69g"},{"rule_id":"osv/GHSA-6cv4-p8m7-4r25","severity":"medium","message":"node-forge@1.3.1 (npm) is affected by GHSA-6cv4-p8m7-4r25","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-6cv4-p8m7-4r25"},{"rule_id":"osv/GHSA-6wvx-3r32-xmcg","severity":"medium","message":"node-forge@1.3.1 (npm) is affected by GHSA-6wvx-3r32-xmcg","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-6wvx-3r32-xmcg"},{"rule_id":"osv/GHSA-h46v-rmh6-fq4f","severity":"medium","message":"node-forge@1.3.1 (npm) is affected by GHSA-h46v-rmh6-fq4f","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-h46v-rmh6-fq4f"},{"rule_id":"osv/GHSA-j8rw-jp99-435v","severity":"medium","message":"node-forge@1.3.1 (npm) is affected by GHSA-j8rw-jp99-435v","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-j8rw-jp99-435v"},{"rule_id":"osv/GHSA-w4xr-hqv8-ch44","severity":"medium","message":"node-forge@1.3.1 (npm) is affected by GHSA-w4xr-hqv8-ch44","path":"package-lock.json","line":null,"fingerprint":"node-forge@1.3.1 (npm):GHSA-w4xr-hqv8-ch44"},{"rule_id":"osv/GHSA-27v5-c462-wpq7","severity":"medium","message":"path-to-regexp@8.2.0 (npm) is affected by GHSA-27v5-c462-wpq7","path":"package-lock.json","line":null,"fingerprint":"path-to-regexp@8.2.0 (npm):GHSA-27v5-c462-wpq7"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@2.3.1 (npm) is affected by GHSA-3v7f-55p6-f55p; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@4.0.2 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"package-lock.json","line":null,"fingerprint":"picomatch@4.0.2 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.4.47 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"package-lock.json","line":null,"fingerprint":"postcss@8.4.47 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.4.47 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"package-lock.json","line":null,"fingerprint":"postcss@8.4.47 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.3 (npm) is affected by GHSA-fxqj-rqcc-2cmp; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.3 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.5.3 (npm) is affected by GHSA-qx2v-qp2m-jg93; also in ui/package-lock.json; also in ui/yarn.lock","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.3 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.13.0 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"package-lock.json","line":null,"fingerprint":"qs@6.13.0 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.13.0 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"package-lock.json","line":null,"fingerprint":"qs@6.13.0 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.13.0 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"package-lock.json","line":null,"fingerprint":"qs@6.13.0 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-q8mj-m7cp-5q26","severity":"medium","message":"qs@6.13.0 (npm) is affected by GHSA-q8mj-m7cp-5q26","path":"package-lock.json","line":null,"fingerprint":"qs@6.13.0 (npm):GHSA-q8mj-m7cp-5q26"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.14.0 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"package-lock.json","line":null,"fingerprint":"qs@6.14.0 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.14.0 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"package-lock.json","line":null,"fingerprint":"qs@6.14.0 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.14.0 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"package-lock.json","line":null,"fingerprint":"qs@6.14.0 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-q8mj-m7cp-5q26","severity":"medium","message":"qs@6.14.0 (npm) is affected by GHSA-q8mj-m7cp-5q26","path":"package-lock.json","line":null,"fingerprint":"qs@6.14.0 (npm):GHSA-q8mj-m7cp-5q26"},{"rule_id":"osv/GHSA-2j2x-hqr9-3h42","severity":"medium","message":"react-router@7.6.2 (npm) is affected by GHSA-2j2x-hqr9-3h42","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-2j2x-hqr9-3h42"},{"rule_id":"osv/GHSA-337j-9hxr-rhxg","severity":"medium","message":"react-router@7.6.2 (npm) is affected by GHSA-337j-9hxr-rhxg","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-337j-9hxr-rhxg"},{"rule_id":"osv/GHSA-9jcx-v3wj-wh4m","severity":"medium","message":"react-router@7.6.2 (npm) is affected by GHSA-9jcx-v3wj-wh4m","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-9jcx-v3wj-wh4m"},{"rule_id":"osv/GHSA-f22v-gfqf-p8f3","severity":"medium","message":"react-router@7.6.2 (npm) is affected by GHSA-f22v-gfqf-p8f3","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-f22v-gfqf-p8f3"},{"rule_id":"osv/GHSA-h5cw-625j-3rxh","severity":"medium","message":"react-router@7.6.2 (npm) is affected by GHSA-h5cw-625j-3rxh","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-h5cw-625j-3rxh"},{"rule_id":"osv/GHSA-wrjc-x8rr-h8h6","severity":"medium","message":"react-router@7.6.2 (npm) is affected by GHSA-wrjc-x8rr-h8h6","path":"package-lock.json","line":null,"fingerprint":"react-router@7.6.2 (npm):GHSA-wrjc-x8rr-h8h6"},{"rule_id":"osv/GHSA-4vpr-x523-8j87","severity":"medium","message":"svgo@3.2.0 (npm) is affected by GHSA-4vpr-x523-8j87","path":"package-lock.json","line":null,"fingerprint":"svgo@3.2.0 (npm):GHSA-4vpr-x523-8j87"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@6.2.1 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@6.2.1 (npm) is affected by GHSA-vmf3-w455-68vh","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@6.2.1 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@7.4.3 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@7.4.3 (npm) is affected by GHSA-vmf3-w455-68vh","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@7.4.3 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"package-lock.json","line":null,"fingerprint":"tar@7.4.3 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-58qx-3vcg-4xpx","severity":"medium","message":"ws@8.18.0 (npm) is affected by GHSA-58qx-3vcg-4xpx","path":"package-lock.json","line":null,"fingerprint":"ws@8.18.0 (npm):GHSA-58qx-3vcg-4xpx"},{"rule_id":"osv/GHSA-48c2-rrv3-qjmp","severity":"medium","message":"yaml@2.6.1 (npm) is affected by GHSA-48c2-rrv3-qjmp","path":"package-lock.json","line":null,"fingerprint":"yaml@2.6.1 (npm):GHSA-48c2-rrv3-qjmp"},{"rule_id":"osv/GHSA-2j2x-hqr9-3h42","severity":"medium","message":"@remix-run/router@1.23.0 (npm) is affected by GHSA-2j2x-hqr9-3h42; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"@remix-run/router@1.23.0 (npm):GHSA-2j2x-hqr9-3h42"},{"rule_id":"osv/GHSA-67mh-4wv8-2f99","severity":"medium","message":"esbuild@0.21.5 (npm) is affected by GHSA-67mh-4wv8-2f99; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"esbuild@0.21.5 (npm):GHSA-67mh-4wv8-2f99"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.14.1 (npm) is affected by GHSA-h67p-54hq-rp68; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@3.14.1 (npm) is affected by GHSA-mh29-5h37-fv8m; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"js-yaml@3.14.1 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-rj75-hqrm-r3gf","severity":"medium","message":"postcss-selector-parser@6.1.2 (npm) is affected by GHSA-rj75-hqrm-r3gf; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"postcss-selector-parser@6.1.2 (npm):GHSA-rj75-hqrm-r3gf"},{"rule_id":"osv/GHSA-w9m9-85wc-3x92","severity":"medium","message":"postcss-selector-parser@6.1.2 (npm) is affected by GHSA-w9m9-85wc-3x92; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"postcss-selector-parser@6.1.2 (npm):GHSA-w9m9-85wc-3x92"},{"rule_id":"osv/GHSA-2j2x-hqr9-3h42","severity":"medium","message":"react-router@6.30.0 (npm) is affected by GHSA-2j2x-hqr9-3h42; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"react-router@6.30.0 (npm):GHSA-2j2x-hqr9-3h42"},{"rule_id":"osv/GHSA-337j-9hxr-rhxg","severity":"medium","message":"react-router@6.30.0 (npm) is affected by GHSA-337j-9hxr-rhxg; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"react-router@6.30.0 (npm):GHSA-337j-9hxr-rhxg"},{"rule_id":"osv/GHSA-9jcx-v3wj-wh4m","severity":"medium","message":"react-router@6.30.0 (npm) is affected by GHSA-9jcx-v3wj-wh4m; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"react-router@6.30.0 (npm):GHSA-9jcx-v3wj-wh4m"},{"rule_id":"osv/GHSA-wrjc-x8rr-h8h6","severity":"medium","message":"react-router@6.30.0 (npm) is affected by GHSA-wrjc-x8rr-h8h6; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"react-router@6.30.0 (npm):GHSA-wrjc-x8rr-h8h6"},{"rule_id":"osv/GHSA-4w7w-66w2-5vf9","severity":"medium","message":"vite@5.4.19 (npm) is affected by GHSA-4w7w-66w2-5vf9; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"vite@5.4.19 (npm):GHSA-4w7w-66w2-5vf9"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@5.4.19 (npm) is affected by GHSA-698v-4r3x-3vcv; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"vite@5.4.19 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-93m4-6634-74q7","severity":"medium","message":"vite@5.4.19 (npm) is affected by GHSA-93m4-6634-74q7; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"vite@5.4.19 (npm):GHSA-93m4-6634-74q7"},{"rule_id":"osv/GHSA-fx2h-pf6j-xcff","severity":"medium","message":"vite@5.4.19 (npm) is affected by GHSA-fx2h-pf6j-xcff; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"vite@5.4.19 (npm):GHSA-fx2h-pf6j-xcff"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@5.4.19 (npm) is affected by GHSA-r825-w8mm-5pxw; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"vite@5.4.19 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@5.4.19 (npm) is affected by GHSA-rq7h-c2jc-7f22; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"vite@5.4.19 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/GHSA-v6wh-96g9-6wx3","severity":"medium","message":"vite@5.4.19 (npm) is affected by GHSA-v6wh-96g9-6wx3; also in ui/yarn.lock","path":"ui/package-lock.json","line":null,"fingerprint":"vite@5.4.19 (npm):GHSA-v6wh-96g9-6wx3"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.0,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":883.0,"function_nloc":8198.0,"mean_ccn":2.3,"p90_ccn":4.0,"complex_functions":13.0,"long_functions":2.0,"many_param_functions":7.0,"risky_nloc_share":0.127},"findings":[],"evidence":[{"kind":"complex-function","description":"requestStream in ui/src/brain/http-client.ts: complexity 28, 71 lines","ref":"ui/src/brain/http-client.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/brain/http-client.ts#L222","weight":0.4666666666666667},{"kind":"complex-function","description":"resolve$1 in ui/.pnp.loader.mjs: complexity 26, 58 lines","ref":"ui/.pnp.loader.mjs","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/.pnp.loader.mjs#L1984","weight":0.43333333333333335},{"kind":"complex-function","description":"mapCommerceLayerProductToAppProduct in ui/src/utils/commerce-layer-mapper.ts: complexity 25, 48 lines","ref":"ui/src/utils/commerce-layer-mapper.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/utils/commerce-layer-mapper.ts#L8","weight":0.4166666666666667},{"kind":"complex-function","description":"getAccessToken in netlify/functions/src/product-listing.ts: complexity 24, 99 lines","ref":"netlify/functions/src/product-listing.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/netlify/functions/src/product-listing.ts#L171","weight":0.4},{"kind":"complex-function","description":"getAccessToken in netlify/functions/src/featured-products.ts: complexity 21, 83 lines","ref":"netlify/functions/src/featured-products.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/netlify/functions/src/featured-products.ts#L93","weight":0.35},{"kind":"complex-function","description":"resolvePackageTarget in ui/.pnp.loader.mjs: complexity 20, 91 lines","ref":"ui/.pnp.loader.mjs","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/.pnp.loader.mjs#L1779","weight":0.3333333333333333},{"kind":"complex-function","description":"(anonymous) in ui/src/utils/commerce-layer-mapper.ts: complexity 19, 38 lines","ref":"ui/src/utils/commerce-layer-mapper.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/utils/commerce-layer-mapper.ts#L95","weight":0.31666666666666665},{"kind":"complex-function","description":"packageImportsResolve in ui/.pnp.loader.mjs: complexity 18, 68 lines","ref":"ui/.pnp.loader.mjs","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/.pnp.loader.mjs#L1889","weight":0.3},{"kind":"complex-function","description":"E in ui/src/brain/http-client.ts: complexity 18, 20 lines","ref":"ui/src/brain/http-client.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/brain/http-client.ts#L173","weight":0.3},{"kind":"complex-function","description":"handler in netlify/functions/src/product-listing.ts: complexity 17, 57 lines","ref":"netlify/functions/src/product-listing.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/netlify/functions/src/product-listing.ts#L381","weight":0.2833333333333333}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":11197.0,"duplicated_lines":1405.0,"duplicated_share":0.1255,"files":277.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: netlify/functions/src/commerce-layer-auth.ts:19 and netlify/functions/src/validate-token.ts:16","ref":"netlify/functions/src/commerce-layer-auth.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/netlify/functions/src/commerce-layer-auth.ts#L19","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: netlify/functions/src/featured-products.ts:73 and ui/src/api/commerceLayerApi.ts:5","ref":"netlify/functions/src/featured-products.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/netlify/functions/src/featured-products.ts#L73","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: netlify/functions/src/featured-products.ts:236 and netlify/functions/src/product-listing.ts:333","ref":"netlify/functions/src/featured-products.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/netlify/functions/src/featured-products.ts#L236","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: netlify/functions/src/product-listing.ts:85 and ui/src/pages/ProductDetailPage.tsx:16","ref":"netlify/functions/src/product-listing.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/netlify/functions/src/product-listing.ts#L85","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: netlify/functions/src/validate-token.ts:6 and ui/src/services/commerce-layer-auth-service.d.ts:9","ref":"netlify/functions/src/validate-token.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/netlify/functions/src/validate-token.ts#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ui/.pnp.loader.mjs:243 and ui/.pnp.loader.mjs:265","ref":"ui/.pnp.loader.mjs","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/.pnp.loader.mjs#L243","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ui/src/api/commerceLayerApi.ts:67 and ui/src/api/commerceLayerApi.ts:131","ref":"ui/src/api/commerceLayerApi.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/api/commerceLayerApi.ts#L67","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ui/src/brain/BrainRoute.ts:53 and ui/src/brain/data-contracts.d.ts:226","ref":"ui/src/brain/BrainRoute.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/brain/BrainRoute.ts#L53","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ui/src/brain/data-contracts.d.ts:1 and ui/src/brain/data-contracts.ts:1","ref":"ui/src/brain/data-contracts.d.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/brain/data-contracts.d.ts#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: ui/src/brain/http-client.d.ts:1 and ui/src/brain/http-client.ts:1","ref":"ui/src/brain/http-client.d.ts","url":"https://github.com/binder-git/seth-haus/blob/8277e62784c03b144feea6d4823aef5fcb681073/ui/src/brain/http-client.d.ts#L1","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":193.0,"weighted_findings":193.0,"scanned_lines":15661.0,"category:best-practice":191.0,"category:correctness":2.0},"findings":[{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"netlify/functions/src/product-listing.ts","line":419,"fingerprint":"javascript.lang.correctness.no-stringify-keys:netlify/functions/src/product-listing.ts:419"},{"rule_id":"opengrep/javascript.lang.correctness.no-stringify-keys","severity":"medium","message":"JSON stringify does not produce a stable key ordering, and should not be relied on for producing object keys. Consider using json-stable-stringify instead.","path":"netlify/functions/src/product-listing.ts","line":475,"fingerprint":"javascript.lang.correctness.no-stringify-keys:netlify/functions/src/product-listing.ts:475"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ThemeProvider.tsx","line":61,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ThemeProvider.tsx:61"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/TrackableComponent.tsx","line":72,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/TrackableComponent.tsx:72"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/TrackableComponent.tsx","line":73,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/TrackableComponent.tsx:73"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/accordion.tsx","line":10,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/accordion.tsx:10"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/accordion.tsx","line":21,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/accordion.tsx:21"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/accordion.tsx","line":39,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/accordion.tsx:39"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/accordion.tsx","line":57,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/accordion.tsx:57"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/alert.tsx","line":32,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/alert.tsx:32"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/alert.tsx","line":45,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/alert.tsx:45"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/alert.tsx","line":61,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/alert.tsx:61"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/badge.tsx","line":41,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/badge.tsx:41"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/button.tsx","line":54,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/button.tsx:54"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/card.tsx","line":13,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/card.tsx:13"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/card.tsx","line":26,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/card.tsx:26"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/card.tsx","line":36,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/card.tsx:36"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/card.tsx","line":46,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/card.tsx:46"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/card.tsx","line":59,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/card.tsx:59"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/card.tsx","line":69,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/card.tsx:69"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/card.tsx","line":79,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/card.tsx:79"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/checkbox.tsx","line":18,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/checkbox.tsx:18"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/input.tsx","line":17,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/input.tsx:17"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/label.tsx","line":21,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/label.tsx:21"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/separator.tsx","line":21,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/separator.tsx:21"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/skeleton.tsx","line":8,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/skeleton.tsx:8"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/components/ui/slider.tsx","line":17,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/components/ui/slider.tsx:17"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/accordion.tsx","line":16,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/accordion.tsx:16"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/accordion.tsx","line":32,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/accordion.tsx:32"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/accordion.tsx","line":48,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/accordion.tsx:48"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert-dialog.tsx","line":22,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert-dialog.tsx:22"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert-dialog.tsx","line":40,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert-dialog.tsx:40"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert-dialog.tsx","line":55,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert-dialog.tsx:55"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert-dialog.tsx","line":69,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert-dialog.tsx:69"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert-dialog.tsx","line":81,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert-dialog.tsx:81"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert-dialog.tsx","line":93,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert-dialog.tsx:93"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert-dialog.tsx","line":106,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert-dialog.tsx:106"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert-dialog.tsx","line":122,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert-dialog.tsx:122"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert.tsx","line":30,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert.tsx:30"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert.tsx","line":42,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert.tsx:42"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/alert.tsx","line":54,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/alert.tsx:54"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/avatar.tsx","line":16,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/avatar.tsx:16"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/avatar.tsx","line":28,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/avatar.tsx:28"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/avatar.tsx","line":43,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/avatar.tsx:43"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/badge.tsx","line":32,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/badge.tsx:32"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/breadcrumb.tsx","line":12,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/breadcrumb.tsx:12"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/breadcrumb.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/breadcrumb.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/breadcrumb.tsx","line":37,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/breadcrumb.tsx:37"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/breadcrumb.tsx","line":54,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/breadcrumb.tsx:54"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/breadcrumb.tsx","line":70,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/breadcrumb.tsx:70"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/breadcrumb.tsx","line":84,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/breadcrumb.tsx:84"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/breadcrumb.tsx","line":99,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/breadcrumb.tsx:99"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/button.tsx","line":50,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/button.tsx:50"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/calendar.tsx","line":64,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/calendar.tsx:64"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/card.tsx","line":15,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/card.tsx:15"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/card.tsx","line":27,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/card.tsx:27"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/card.tsx","line":39,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/card.tsx:39"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/card.tsx","line":51,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/card.tsx:51"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/card.tsx","line":60,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/card.tsx:60"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/card.tsx","line":71,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/card.tsx:71"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/carousel.tsx","line":141,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/carousel.tsx:141"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/carousel.tsx","line":166,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/carousel.tsx:166"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/carousel.tsx","line":189,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/carousel.tsx:189"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/carousel.tsx","line":215,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/carousel.tsx:215"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/carousel.tsx","line":244,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/carousel.tsx:244"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/chart.tsx","line":61,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/chart.tsx:61"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/checkbox.tsx","line":17,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/checkbox.tsx:17"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/command.tsx","line":19,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/command.tsx:19"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/command.tsx","line":28,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/command.tsx:28"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/command.tsx","line":50,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/command.tsx:50"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/command.tsx","line":64,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/command.tsx:64"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/command.tsx","line":77,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/command.tsx:77"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/command.tsx","line":93,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/command.tsx:93"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/command.tsx","line":106,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/command.tsx:106"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/command.tsx","line":121,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/command.tsx:121"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/command.tsx","line":137,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/command.tsx:137"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/context-menu.tsx","line":36,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/context-menu.tsx:36"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/context-menu.tsx","line":54,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/context-menu.tsx:54"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/context-menu.tsx","line":70,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/context-menu.tsx:70"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/context-menu.tsx","line":89,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/context-menu.tsx:89"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/context-menu.tsx","line":105,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/context-menu.tsx:105"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/context-menu.tsx","line":128,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/context-menu.tsx:128"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/context-menu.tsx","line":153,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/context-menu.tsx:153"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/context-menu.tsx","line":165,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/context-menu.tsx:165"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/context-menu.tsx","line":180,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/context-menu.tsx:180"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dialog.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dialog.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dialog.tsx","line":42,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dialog.tsx:42"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dialog.tsx","line":63,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dialog.tsx:63"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dialog.tsx","line":77,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dialog.tsx:77"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dialog.tsx","line":92,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dialog.tsx:92"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dialog.tsx","line":104,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dialog.tsx:104"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/drawer.tsx","line":12,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/drawer.tsx:12"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/drawer.tsx","line":30,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/drawer.tsx:30"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/drawer.tsx","line":47,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/drawer.tsx:47"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/drawer.tsx","line":62,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/drawer.tsx:62"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/drawer.tsx","line":73,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/drawer.tsx:73"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/drawer.tsx","line":88,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/drawer.tsx:88"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/drawer.tsx","line":100,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/drawer.tsx:100"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dropdown-menu.tsx","line":36,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dropdown-menu.tsx:36"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dropdown-menu.tsx","line":55,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dropdown-menu.tsx:55"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dropdown-menu.tsx","line":74,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dropdown-menu.tsx:74"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dropdown-menu.tsx","line":93,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dropdown-menu.tsx:93"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dropdown-menu.tsx","line":109,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dropdown-menu.tsx:109"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dropdown-menu.tsx","line":132,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dropdown-menu.tsx:132"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dropdown-menu.tsx","line":157,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dropdown-menu.tsx:157"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dropdown-menu.tsx","line":169,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dropdown-menu.tsx:169"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/dropdown-menu.tsx","line":181,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/dropdown-menu.tsx:181"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/form.tsx","line":37,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/form.tsx:37"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/form.tsx","line":81,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/form.tsx:81"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/form.tsx","line":98,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/form.tsx:98"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/form.tsx","line":121,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/form.tsx:121"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/form.tsx","line":138,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/form.tsx:138"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/form.tsx","line":160,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/form.tsx:160"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/hover-card.tsx","line":22,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/hover-card.tsx:22"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/input-otp.tsx","line":18,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/input-otp.tsx:18"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/input-otp.tsx","line":27,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/input-otp.tsx:27"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/input-otp.tsx","line":46,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/input-otp.tsx:46"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/input-otp.tsx","line":63,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/input-otp.tsx:63"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/input.tsx","line":18,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/input.tsx:18"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/label.tsx","line":19,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/label.tsx:19"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":31,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:31"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":46,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:46"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":64,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:64"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":82,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:82"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":105,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:105"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":125,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:125"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":141,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:141"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":163,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:163"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":188,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:188"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":200,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:200"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/menubar.tsx","line":215,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/menubar.tsx:215"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/navigation-menu.tsx","line":18,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/navigation-menu.tsx:18"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/navigation-menu.tsx","line":36,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/navigation-menu.tsx:36"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/navigation-menu.tsx","line":54,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/navigation-menu.tsx:54"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/navigation-menu.tsx","line":75,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/navigation-menu.tsx:75"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/navigation-menu.tsx","line":93,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/navigation-menu.tsx:93"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/navigation-menu.tsx","line":110,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/navigation-menu.tsx:110"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/pagination.tsx","line":16,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/pagination.tsx:16"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/pagination.tsx","line":28,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/pagination.tsx:28"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/pagination.tsx","line":37,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/pagination.tsx:37"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/pagination.tsx","line":61,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/pagination.tsx:61"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/pagination.tsx","line":74,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/pagination.tsx:74"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/pagination.tsx","line":90,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/pagination.tsx:90"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/pagination.tsx","line":105,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/pagination.tsx:105"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/popover.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/popover.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/progress.tsx","line":16,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/progress.tsx:16"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/radio-group.tsx","line":14,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/radio-group.tsx:14"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/radio-group.tsx","line":32,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/radio-group.tsx:32"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/resizable.tsx","line":15,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/resizable.tsx:15"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/resizable.tsx","line":33,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/resizable.tsx:33"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/scroll-area.tsx","line":13,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/scroll-area.tsx:13"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/scroll-area.tsx","line":39,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/scroll-area.tsx:39"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/select.tsx","line":28,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/select.tsx:28"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/select.tsx","line":48,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/select.tsx:48"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/select.tsx","line":65,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/select.tsx:65"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/select.tsx","line":87,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/select.tsx:87"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/select.tsx","line":112,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/select.tsx:112"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/select.tsx","line":127,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/select.tsx:127"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/select.tsx","line":146,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/select.tsx:146"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/separator.tsx","line":23,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/separator.tsx:23"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/sheet.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/sheet.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/sheet.tsx","line":63,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/sheet.tsx:63"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/sheet.tsx","line":84,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/sheet.tsx:84"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/sheet.tsx","line":98,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/sheet.tsx:98"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/sheet.tsx","line":110,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/sheet.tsx:110"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/sheet.tsx","line":122,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/sheet.tsx:122"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/skeleton.tsx","line":10,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/skeleton.tsx:10"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/slider.tsx","line":16,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/slider.tsx:16"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/sonner.tsx","line":24,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/sonner.tsx:24"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/switch.tsx","line":15,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/switch.tsx:15"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/table.tsx","line":13,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/table.tsx:13"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/table.tsx","line":23,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/table.tsx:23"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/table.tsx","line":34,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/table.tsx:34"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/table.tsx","line":49,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/table.tsx:49"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/table.tsx","line":64,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/table.tsx:64"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/table.tsx","line":79,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/table.tsx:79"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/table.tsx","line":94,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/table.tsx:94"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/table.tsx","line":106,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/table.tsx:106"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/tabs.tsx","line":18,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/tabs.tsx:18"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/tabs.tsx","line":33,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/tabs.tsx:33"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/tabs.tsx","line":48,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/tabs.tsx:48"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/textarea.tsx","line":17,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/textarea.tsx:17"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toast.tsx","line":20,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toast.tsx:20"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toast.tsx","line":50,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toast.tsx:50"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toast.tsx","line":66,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toast.tsx:66"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toast.tsx","line":82,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toast.tsx:82"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toast.tsx","line":96,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toast.tsx:96"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toast.tsx","line":108,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toast.tsx:108"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toaster.tsx","line":18,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toaster.tsx:18"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toggle-group.tsx","line":23,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toggle-group.tsx:23"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toggle-group.tsx","line":50,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toggle-group.tsx:50"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/toggle.tsx","line":37,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/toggle.tsx:37"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"ui/src/extensions/shadcn/components/tooltip.tsx","line":23,"fingerprint":"typescript.react.best-practice.react-props-spreading:ui/src/extensions/shadcn/components/tooltip.tsx:23"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.098,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.4545,"test_lines":767.0,"source_lines":15661.0,"test_ratio":0.049,"ci_files":0.0,"cochange_share":0.1136,"cochange_commits":44.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":100.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":1.0,"escapes":54.0,"escapes_per_kloc":4.089},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: netlify/functions/tsconfig.functions.json","ref":"netlify/functions/tsconfig.functions.json","url":null,"weight":0.0}],"data":{},"error":null}],"flags":[]}