{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:55:47.417622Z","repo":{"ref":{"host":"github.com","owner":"cpaczek","name":"vibe-interviewing"},"default_branch":"main","clone_url":"https://github.com/cpaczek/vibe-interviewing.git","html_url":"https://github.com/cpaczek/vibe-interviewing","description":"AI-era technical interview platform. Evaluate how engineers work WITH AI, not what they memorize.","stars":19,"forks":2,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":3194,"primary_language":"TypeScript","license_spdx":"MIT","created_at":"2026-03-21T23:06:51Z","pushed_at":"2026-03-22T07:37:35Z","security_policy_url":null,"distribution":{"owner_created_at":"2017-02-12T03:25:45Z","owner_type":"User","release_assets":[]}},"commit_sha":"da6867cf2b2bf4c83a9cbf249a9e96e20315ec46","profile":{"lines_by_language":{"TypeScript":5601,"JavaScript":306},"files_by_category":{"source":60,"config":27,"docs":16,"other":5,"test":5,"binary":4,"generated":1},"source_lines":4975,"test_lines":932},"pillars":{"ai_provenance":{"score":100.0,"confidence":0.78,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":1.0,"suspected_share":0.0,"estimated_share":1.0,"ai_artifacts":1.0,"flagged_work_units":3.0,"flagged_releases":null},"summary":"Explicit AI attribution on 100% of first-party code added; an estimated 100% including velocity signals."},"quality":{"score":68.8,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":52.4,"duplication":50.8,"lint":81.8,"testing":74.4,"docs":80.0,"type_safety":100.0,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.19, CI runs tests; 22% of function code in complex or long functions; 11% duplicated lines. Weakest area: duplication."},"security":{"score":55.5,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":100.0,"dependencies":3.9,"ci_actions":27.8,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 102 known vulnerabilities in 26 dependencies; 6 high-severity workflow issues. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":28.0,"checked":28.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":34.0,"attributed_commits":33.0,"attributed_commit_share":0.9705882352941176,"effective_loc":11630.0,"attributed_loc":11630.0,"attributed_loc_share":1.0,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 33 attributed commits, 11,630 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"da6867cf2b2bf4c83a9cbf249a9e96e20315ec46","url":"https://github.com/cpaczek/vibe-interviewing/commit/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"df99c29114fc913cd0890d64a9a6ad1562c4852c","url":"https://github.com/cpaczek/vibe-interviewing/commit/df99c29114fc913cd0890d64a9a6ad1562c4852c","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"987592c60333d76140db9073358bc812f0558609","url":"https://github.com/cpaczek/vibe-interviewing/commit/987592c60333d76140db9073358bc812f0558609","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"2e041f14f4921f221e0409aa9e7e78867d9746b8","url":"https://github.com/cpaczek/vibe-interviewing/commit/2e041f14f4921f221e0409aa9e7e78867d9746b8","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"f9fbb07b7d75f773f1151c4555460f52e9d0cc84","url":"https://github.com/cpaczek/vibe-interviewing/commit/f9fbb07b7d75f773f1151c4555460f52e9d0cc84","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"c42351627b339655ea0626ac57bba73112d7170f","url":"https://github.com/cpaczek/vibe-interviewing/commit/c42351627b339655ea0626ac57bba73112d7170f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"6baf3391360bf289cf646eb35533de0601e9acf9","url":"https://github.com/cpaczek/vibe-interviewing/commit/6baf3391360bf289cf646eb35533de0601e9acf9","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"6d8d6640c396a7b2ff5fe124c3b9d61a730fa689","url":"https://github.com/cpaczek/vibe-interviewing/commit/6d8d6640c396a7b2ff5fe124c3b9d61a730fa689","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"bbdd4df243f9601b59137d0e85e6a2d5b0f19ffc","url":"https://github.com/cpaczek/vibe-interviewing/commit/bbdd4df243f9601b59137d0e85e6a2d5b0f19ffc","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"a7657110a3fedf81b91f37e64bbf16e146201ca5","url":"https://github.com/cpaczek/vibe-interviewing/commit/a7657110a3fedf81b91f37e64bbf16e146201ca5","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"ff7904f08833a97adbd514e06647564f44a28947","url":"https://github.com/cpaczek/vibe-interviewing/commit/ff7904f08833a97adbd514e06647564f44a28947","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"7b7645b157e9a1a06615e86a142923debaff1ed7","url":"https://github.com/cpaczek/vibe-interviewing/commit/7b7645b157e9a1a06615e86a142923debaff1ed7","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"9bdb1720fe5999eeb88c8fc2129ac74aef8e87f1","url":"https://github.com/cpaczek/vibe-interviewing/commit/9bdb1720fe5999eeb88c8fc2129ac74aef8e87f1","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"a1f35197b947a751df68721098c65344df24bfd9","url":"https://github.com/cpaczek/vibe-interviewing/commit/a1f35197b947a751df68721098c65344df24bfd9","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"b6bfb4aaeb96537b772a8b78bc11928d6ee94efc","url":"https://github.com/cpaczek/vibe-interviewing/commit/b6bfb4aaeb96537b772a8b78bc11928d6ee94efc","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"2319a4812c2b744e6f8223ea86626bd5b193bd00","url":"https://github.com/cpaczek/vibe-interviewing/commit/2319a4812c2b744e6f8223ea86626bd5b193bd00","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"9cd61464a93617198f8f8622d69907198f60044f","url":"https://github.com/cpaczek/vibe-interviewing/commit/9cd61464a93617198f8f8622d69907198f60044f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"45098f57f565dce36904ae91878da50fc46fab9a","url":"https://github.com/cpaczek/vibe-interviewing/commit/45098f57f565dce36904ae91878da50fc46fab9a","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"bf2f542e6ddb4c3bc2bcb7f6c0603d7affa35478","url":"https://github.com/cpaczek/vibe-interviewing/commit/bf2f542e6ddb4c3bc2bcb7f6c0603d7affa35478","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"787f7deff78648d9478b122cfa5ff306a8748817","url":"https://github.com/cpaczek/vibe-interviewing/commit/787f7deff78648d9478b122cfa5ff306a8748817","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"25184ffd6eca53c8dd7882c505cd10d037417b51","url":"https://github.com/cpaczek/vibe-interviewing/commit/25184ffd6eca53c8dd7882c505cd10d037417b51","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"f69a8de3e3bc85770a23bd665727c64fc0c42a8e","url":"https://github.com/cpaczek/vibe-interviewing/commit/f69a8de3e3bc85770a23bd665727c64fc0c42a8e","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"b46a6b30fee46dfbbb6f138693095f0ed8487b32","url":"https://github.com/cpaczek/vibe-interviewing/commit/b46a6b30fee46dfbbb6f138693095f0ed8487b32","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"90b189c7787b5c7410760818f46d6d844be034c2","url":"https://github.com/cpaczek/vibe-interviewing/commit/90b189c7787b5c7410760818f46d6d844be034c2","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"0dc18b5532051d593076c7de4831e1092b52d280","url":"https://github.com/cpaczek/vibe-interviewing/commit/0dc18b5532051d593076c7de4831e1092b52d280","weight":0.9}],"data":{"attributed_loc_by_commit":{"d06f4d60ee76df73064ea51187aa2bcda25dc3c3":3903,"4c8e3e79759b5ed220bbf33eae0466ee89d9252c":754,"c26c746751accea2a9979fd6a30b1075db170dd8":1933,"24b764d1420cf07189bb716c960da06a71df6813":348,"6818bb210a75402d54b1cd07a1847bf32d9fa73c":635,"2ae6114e3a2b8731c3c37a21547f1babc63f6a7f":2,"059c8498a11b0fc75d00bced97ff12ce653770d6":0,"9a9de3cdb7ad26a9ac51fe79092df47af2977b4e":0,"0dc18b5532051d593076c7de4831e1092b52d280":239,"90b189c7787b5c7410760818f46d6d844be034c2":0,"b46a6b30fee46dfbbb6f138693095f0ed8487b32":0,"f69a8de3e3bc85770a23bd665727c64fc0c42a8e":0,"25184ffd6eca53c8dd7882c505cd10d037417b51":0,"787f7deff78648d9478b122cfa5ff306a8748817":0,"bf2f542e6ddb4c3bc2bcb7f6c0603d7affa35478":0,"45098f57f565dce36904ae91878da50fc46fab9a":0,"9cd61464a93617198f8f8622d69907198f60044f":792,"2319a4812c2b744e6f8223ea86626bd5b193bd00":237,"b6bfb4aaeb96537b772a8b78bc11928d6ee94efc":649,"a1f35197b947a751df68721098c65344df24bfd9":0,"9bdb1720fe5999eeb88c8fc2129ac74aef8e87f1":5,"7b7645b157e9a1a06615e86a142923debaff1ed7":8,"ff7904f08833a97adbd514e06647564f44a28947":1,"a7657110a3fedf81b91f37e64bbf16e146201ca5":1001,"bbdd4df243f9601b59137d0e85e6a2d5b0f19ffc":5,"6d8d6640c396a7b2ff5fe124c3b9d61a730fa689":0,"6baf3391360bf289cf646eb35533de0601e9acf9":48,"c42351627b339655ea0626ac57bba73112d7170f":5,"f9fbb07b7d75f773f1151c4555460f52e9d0cc84":0,"2e041f14f4921f221e0409aa9e7e78867d9746b8":0,"987592c60333d76140db9073358bc812f0558609":727,"df99c29114fc913cd0890d64a9a6ad1562c4852c":0,"da6867cf2b2bf4c83a9cbf249a9e96e20315ec46":338},"tools":{"claude-code":{"name":"Claude Code","commits":33,"loc":11630,"first_seen":1774134398,"last_seen":1774165048}},"monthly":{"2026-03":{"loc":11630,"attributed_loc":11630}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":1.0,"workflow_agents":0.0,"tools_configured":1.0,"earliest_adoption":1774134398.0},"findings":[],"evidence":[{"kind":"ai-artifact","description":"CLAUDE.md (claude-code configuration)","ref":"CLAUDE.md","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/CLAUDE.md","weight":0.5}],"data":{"artifacts":[{"tool":"claude-code","path":"CLAUDE.md","added_at":1774134398}],"workflows":[],"tools":["claude-code"]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":4.0,"flagged_units":3.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":7727.0,"flagged_loc":6662.0,"flagged_loc_share":0.8621716060566843,"max_loc_per_hour":777.7273758221819,"median_loc_per_hour":715.6208868153811,"pr_timed_units":0.0,"excluded_import_loc":3903.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"1,905 lines of first-party code in ~2.4h (778 lines/hour, 5 commit session)","ref":"2319a4812c2b744e6f8223ea86626bd5b193bd00","url":"https://github.com/cpaczek/vibe-interviewing/commit/2319a4812c2b744e6f8223ea86626bd5b193bd00","weight":0.23331821274665454},{"kind":"velocity-burst","description":"1,722 lines of first-party code in ~2.2h (771 lines/hour, 8 commit session)","ref":"c42351627b339655ea0626ac57bba73112d7170f","url":"https://github.com/cpaczek/vibe-interviewing/commit/c42351627b339655ea0626ac57bba73112d7170f","weight":0.2311984087518647},{"kind":"velocity-burst","description":"3,035 lines of first-party code in ~4.6h (661 lines/hour, 3 commit session)","ref":"24b764d1420cf07189bb716c960da06a71df6813","url":"https://github.com/cpaczek/vibe-interviewing/commit/24b764d1420cf07189bb716c960da06a71df6813","weight":0.19817412333736398}],"data":{"flagged_loc_by_commit":{"4c8e3e79759b5ed220bbf33eae0466ee89d9252c":754,"c26c746751accea2a9979fd6a30b1075db170dd8":1933,"24b764d1420cf07189bb716c960da06a71df6813":348,"6818bb210a75402d54b1cd07a1847bf32d9fa73c":635,"2ae6114e3a2b8731c3c37a21547f1babc63f6a7f":2,"0dc18b5532051d593076c7de4831e1092b52d280":239,"9cd61464a93617198f8f8622d69907198f60044f":792,"2319a4812c2b744e6f8223ea86626bd5b193bd00":237,"b6bfb4aaeb96537b772a8b78bc11928d6ee94efc":649,"9bdb1720fe5999eeb88c8fc2129ac74aef8e87f1":5,"7b7645b157e9a1a06615e86a142923debaff1ed7":8,"ff7904f08833a97adbd514e06647564f44a28947":1,"a7657110a3fedf81b91f37e64bbf16e146201ca5":1001,"bbdd4df243f9601b59137d0e85e6a2d5b0f19ffc":5,"6baf3391360bf289cf646eb35533de0601e9acf9":48,"c42351627b339655ea0626ac57bba73112d7170f":5},"excluded_import_commits":["d06f4d60ee76df73064ea51187aa2bcda25dc3c3"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":4975.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":0.0,"findings_high":0.0,"findings_medium":0.0,"findings_low":0.0,"weighted_findings":0.0,"scanned_lines":4975.0,"parse_errors":1.0},"findings":[],"evidence":[],"data":{"rulesets":["typescript","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":26.0,"vulnerabilities":102.0,"vulns_critical":6.0,"vulns_high":43.0,"vulns_medium":43.0,"vulns_low":10.0,"vulns_unknown":0.0,"penalty":195.0},"findings":[{"rule_id":"osv/GHSA-hffm-xvc3-vprc","severity":"critical","message":"simple-git@3.33.0 (npm) is affected by GHSA-hffm-xvc3-vprc","path":"pnpm-lock.yaml","line":null,"fingerprint":"simple-git@3.33.0 (npm):GHSA-hffm-xvc3-vprc"},{"rule_id":"osv/GHSA-x6jw-m9v5-85vh","severity":"critical","message":"simple-git@3.33.0 (npm) is affected by GHSA-x6jw-m9v5-85vh","path":"pnpm-lock.yaml","line":null,"fingerprint":"simple-git@3.33.0 (npm):GHSA-x6jw-m9v5-85vh"},{"rule_id":"osv/GHSA-5gmw-xhrv-c9v3","severity":"critical","message":"tinypool@1.1.1 (npm) is affected by GHSA-5gmw-xhrv-c9v3","path":"pnpm-lock.yaml","line":null,"fingerprint":"tinypool@1.1.1 (npm):GHSA-5gmw-xhrv-c9v3"},{"rule_id":"osv/GHSA-85c8-ppgw-ccpr","severity":"critical","message":"tinypool@1.1.1 (npm) is affected by GHSA-85c8-ppgw-ccpr","path":"pnpm-lock.yaml","line":null,"fingerprint":"tinypool@1.1.1 (npm):GHSA-85c8-ppgw-ccpr"},{"rule_id":"osv/GHSA-3qcw-2rhx-2726","severity":"critical","message":"turbo@2.8.20 (npm) is affected by GHSA-3qcw-2rhx-2726","path":"pnpm-lock.yaml","line":null,"fingerprint":"turbo@2.8.20 (npm):GHSA-3qcw-2rhx-2726"},{"rule_id":"osv/GHSA-5xrq-8626-4rwp","severity":"critical","message":"vitest@3.2.4 (npm) is affected by GHSA-5xrq-8626-4rwp","path":"pnpm-lock.yaml","line":null,"fingerprint":"vitest@3.2.4 (npm):GHSA-5xrq-8626-4rwp"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.28.1 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"pnpm-lock.yaml","line":null,"fingerprint":"browserslist@4.28.1 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.28.1 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"pnpm-lock.yaml","line":null,"fingerprint":"browserslist@4.28.1 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.14.2 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@3.14.2 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.14.2 (npm) is affected by GHSA-52cp-r559-cp3m","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@3.14.2 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.14.2 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@3.14.2 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-52cp-r559-cp3m","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-28wg-ghj8-5hjv","path":"pnpm-lock.yaml","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-2v37-7h3g-55p8","path":"pnpm-lock.yaml","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-xwg4-73v4-xw9w","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-xwg4-73v4-xw9w","path":"pnpm-lock.yaml","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-xwg4-73v4-xw9w"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@2.3.1 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"pnpm-lock.yaml","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@4.0.3 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"pnpm-lock.yaml","line":null,"fingerprint":"picomatch@4.0.3 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.5.8 (npm) is affected by GHSA-6g55-p6wh-862q","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.5.8 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.5.8 (npm) is affected by GHSA-r28c-9q8g-f849","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.5.8 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-f88m-g3jw-g9cj","severity":"high","message":"sharp@0.34.5 (npm) is affected by GHSA-f88m-g3jw-g9cj","path":"pnpm-lock.yaml","line":null,"fingerprint":"sharp@0.34.5 (npm):GHSA-f88m-g3jw-g9cj"},{"rule_id":"osv/GHSA-rgj7-g3m4-5g8c","severity":"high","message":"sharp@0.34.5 (npm) is affected by GHSA-rgj7-g3m4-5g8c","path":"pnpm-lock.yaml","line":null,"fingerprint":"sharp@0.34.5 (npm):GHSA-rgj7-g3m4-5g8c"},{"rule_id":"osv/GHSA-wq5f-xc86-pv6w","severity":"high","message":"sharp@0.34.5 (npm) is affected by GHSA-wq5f-xc86-pv6w","path":"pnpm-lock.yaml","line":null,"fingerprint":"sharp@0.34.5 (npm):GHSA-wq5f-xc86-pv6w"},{"rule_id":"osv/GHSA-858h-whjf-mvg5","severity":"high","message":"simple-git@3.33.0 (npm) is affected by GHSA-858h-whjf-mvg5","path":"pnpm-lock.yaml","line":null,"fingerprint":"simple-git@3.33.0 (npm):GHSA-858h-whjf-mvg5"},{"rule_id":"osv/GHSA-g4wm-2vf7-vfgr","severity":"high","message":"simple-git@3.33.0 (npm) is affected by GHSA-g4wm-2vf7-vfgr","path":"pnpm-lock.yaml","line":null,"fingerprint":"simple-git@3.33.0 (npm):GHSA-g4wm-2vf7-vfgr"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q","path":"pnpm-lock.yaml","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-2m5v-pch6-74hx","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-4cwx-7wf7-3272","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-4cwx-7wf7-3272","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-4cwx-7wf7-3272"},{"rule_id":"osv/GHSA-4w7w-5xrc-9h26","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-4w7w-5xrc-9h26","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-4w7w-5xrc-9h26"},{"rule_id":"osv/GHSA-hm92-r4w5-c3mj","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-hm92-r4w5-c3mj","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-hm92-r4w5-c3mj"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-rfgv-xxqx-mfg5","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-vmh5-mc38-953g","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-vmh5-mc38-953g","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-vmh5-mc38-953g"},{"rule_id":"osv/GHSA-vxpw-j846-p89q","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-vxpw-j846-p89q","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-vxpw-j846-p89q"},{"rule_id":"osv/GHSA-w293-vg96-wgc3","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-w293-vg96-wgc3","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-w293-vg96-wgc3"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-xjj6-f33q-929c","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@6.4.1 (npm) is affected by GHSA-587h-7wmj-h5pm","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@6.4.1 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-p9ff-h696-f583","severity":"high","message":"vite@6.4.1 (npm) is affected by GHSA-p9ff-h696-f583","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@6.4.1 (npm):GHSA-p9ff-h696-f583"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@7.3.1 (npm) is affected by GHSA-587h-7wmj-h5pm","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-p9ff-h696-f583","severity":"high","message":"vite@7.3.1 (npm) is affected by GHSA-p9ff-h696-f583","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-p9ff-h696-f583"},{"rule_id":"osv/GHSA-v2wj-q39q-566r","severity":"high","message":"vite@7.3.1 (npm) is affected by GHSA-v2wj-q39q-566r","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-v2wj-q39q-566r"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@8.18.0 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"pnpm-lock.yaml","line":null,"fingerprint":"ws@8.18.0 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-mrhx-c7xc-m3w5","severity":"high","message":"zod@3.25.76 (npm) is affected by GHSA-mrhx-c7xc-m3w5","path":"pnpm-lock.yaml","line":null,"fingerprint":"zod@3.25.76 (npm):GHSA-mrhx-c7xc-m3w5"},{"rule_id":"osv/GHSA-p498-v437-472g","severity":"medium","message":"@humanfs/node@0.16.7 (npm) is affected by GHSA-p498-v437-472g","path":"pnpm-lock.yaml","line":null,"fingerprint":"@humanfs/node@0.16.7 (npm):GHSA-p498-v437-472g"},{"rule_id":"osv/GHSA-82fw-gwwq-j7x9","severity":"medium","message":"@vitest/mocker@3.2.4 (npm) is affected by GHSA-82fw-gwwq-j7x9","path":"pnpm-lock.yaml","line":null,"fingerprint":"@vitest/mocker@3.2.4 (npm):GHSA-82fw-gwwq-j7x9"},{"rule_id":"osv/GHSA-qxg6-89mg-rqv8","severity":"medium","message":"@vitest/mocker@3.2.4 (npm) is affected by GHSA-qxg6-89mg-rqv8","path":"pnpm-lock.yaml","line":null,"fingerprint":"@vitest/mocker@3.2.4 (npm):GHSA-qxg6-89mg-rqv8"},{"rule_id":"osv/GHSA-w5vr-8v7q-w6rv","severity":"medium","message":"baseline-browser-mapping@2.10.10 (npm) is affected by GHSA-w5vr-8v7q-w6rv","path":"pnpm-lock.yaml","line":null,"fingerprint":"baseline-browser-mapping@2.10.10 (npm):GHSA-w5vr-8v7q-w6rv"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-jxxr-4gwj-5jf2","severity":"medium","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-jxxr-4gwj-5jf2","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-jxxr-4gwj-5jf2"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"pnpm-lock.yaml","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.14.2 (npm) is affected by GHSA-h67p-54hq-rp68","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@3.14.2 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@4.1.1 (npm) is affected by GHSA-h67p-54hq-rp68","path":"pnpm-lock.yaml","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@10.2.4 (npm) is affected by GHSA-g3hv-75wg-m249","path":"pnpm-lock.yaml","line":null,"fingerprint":"minimatch@10.2.4 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@2.3.1 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"pnpm-lock.yaml","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@4.0.3 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"pnpm-lock.yaml","line":null,"fingerprint":"picomatch@4.0.3 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.8 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.5.8 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.5.8 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"pnpm-lock.yaml","line":null,"fingerprint":"postcss@8.5.8 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-hcf7-66rw-9f5r","severity":"medium","message":"turbo@2.8.20 (npm) is affected by GHSA-hcf7-66rw-9f5r","path":"pnpm-lock.yaml","line":null,"fingerprint":"turbo@2.8.20 (npm):GHSA-hcf7-66rw-9f5r"},{"rule_id":"osv/GHSA-2jfj-6hjv-fm6j","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-2jfj-6hjv-fm6j","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-2jfj-6hjv-fm6j"},{"rule_id":"osv/GHSA-3xpg-4rpp-hhhm","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-3xpg-4rpp-hhhm","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-3xpg-4rpp-hhhm"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-4qv8-2p9j-2685","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-55wc-3pg8-jfw6","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-55wc-3pg8-jfw6","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-55wc-3pg8-jfw6"},{"rule_id":"osv/GHSA-8xcm-r25x-g524","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-8xcm-r25x-g524","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-8xcm-r25x-g524"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-9fm3-97px-rjf6","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-f72v-6w45-q472","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-f72v-6w45-q472","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-f72v-6w45-q472"},{"rule_id":"osv/GHSA-jr45-8vmc-qm54","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-jr45-8vmc-qm54","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-jr45-8vmc-qm54"},{"rule_id":"osv/GHSA-m8rv-5g2x-5cg5","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-m8rv-5g2x-5cg5","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-m8rv-5g2x-5cg5"},{"rule_id":"osv/GHSA-p88m-4jfj-68fv","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-p88m-4jfj-68fv","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-p88m-4jfj-68fv"},{"rule_id":"osv/GHSA-pmjh-fq2x-6v4x","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-pmjh-fq2x-6v4x","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-pmjh-fq2x-6v4x"},{"rule_id":"osv/GHSA-pr7r-676h-xcf6","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-pr7r-676h-xcf6","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-pr7r-676h-xcf6"},{"rule_id":"osv/GHSA-rx4f-c7p8-82vq","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-rx4f-c7p8-82vq","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-rx4f-c7p8-82vq"},{"rule_id":"osv/GHSA-v3r7-h72x-cjcm","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-v3r7-h72x-cjcm","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-v3r7-h72x-cjcm"},{"rule_id":"osv/GHSA-4w7w-66w2-5vf9","severity":"medium","message":"vite@6.4.1 (npm) is affected by GHSA-4w7w-66w2-5vf9","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@6.4.1 (npm):GHSA-4w7w-66w2-5vf9"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@6.4.1 (npm) is affected by GHSA-698v-4r3x-3vcv","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@6.4.1 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-fx2h-pf6j-xcff","severity":"medium","message":"vite@6.4.1 (npm) is affected by GHSA-fx2h-pf6j-xcff","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@6.4.1 (npm):GHSA-fx2h-pf6j-xcff"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@6.4.1 (npm) is affected by GHSA-r825-w8mm-5pxw","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@6.4.1 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@6.4.1 (npm) is affected by GHSA-rq7h-c2jc-7f22","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@6.4.1 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/GHSA-v6wh-96g9-6wx3","severity":"medium","message":"vite@6.4.1 (npm) is affected by GHSA-v6wh-96g9-6wx3","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@6.4.1 (npm):GHSA-v6wh-96g9-6wx3"},{"rule_id":"osv/GHSA-4w7w-66w2-5vf9","severity":"medium","message":"vite@7.3.1 (npm) is affected by GHSA-4w7w-66w2-5vf9","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-4w7w-66w2-5vf9"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@7.3.1 (npm) is affected by GHSA-698v-4r3x-3vcv","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-fx2h-pf6j-xcff","severity":"medium","message":"vite@7.3.1 (npm) is affected by GHSA-fx2h-pf6j-xcff","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-fx2h-pf6j-xcff"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@7.3.1 (npm) is affected by GHSA-r825-w8mm-5pxw","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@7.3.1 (npm) is affected by GHSA-rq7h-c2jc-7f22","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/GHSA-v6wh-96g9-6wx3","severity":"medium","message":"vite@7.3.1 (npm) is affected by GHSA-v6wh-96g9-6wx3","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-v6wh-96g9-6wx3"},{"rule_id":"osv/GHSA-82fw-gwwq-j7x9","severity":"medium","message":"vitest@3.2.4 (npm) is affected by GHSA-82fw-gwwq-j7x9","path":"pnpm-lock.yaml","line":null,"fingerprint":"vitest@3.2.4 (npm):GHSA-82fw-gwwq-j7x9"},{"rule_id":"osv/GHSA-58qx-3vcg-4xpx","severity":"medium","message":"ws@8.18.0 (npm) is affected by GHSA-58qx-3vcg-4xpx","path":"pnpm-lock.yaml","line":null,"fingerprint":"ws@8.18.0 (npm):GHSA-58qx-3vcg-4xpx"},{"rule_id":"osv/GHSA-4x5r-pxfx-6jf8","severity":"low","message":"@babel/core@7.29.0 (npm) is affected by GHSA-4x5r-pxfx-6jf8","path":"pnpm-lock.yaml","line":null,"fingerprint":"@babel/core@7.29.0 (npm):GHSA-4x5r-pxfx-6jf8"},{"rule_id":"osv/GHSA-g7r4-m6w7-qqqr","severity":"low","message":"esbuild@0.27.3 (npm) is affected by GHSA-g7r4-m6w7-qqqr","path":"pnpm-lock.yaml","line":null,"fingerprint":"esbuild@0.27.3 (npm):GHSA-g7r4-m6w7-qqqr"},{"rule_id":"osv/GHSA-g7r4-m6w7-qqqr","severity":"low","message":"esbuild@0.27.4 (npm) is affected by GHSA-g7r4-m6w7-qqqr","path":"pnpm-lock.yaml","line":null,"fingerprint":"esbuild@0.27.4 (npm):GHSA-g7r4-m6w7-qqqr"},{"rule_id":"osv/GHSA-2gqq-gqf2-x968","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-2gqq-gqf2-x968","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-2gqq-gqf2-x968"},{"rule_id":"osv/GHSA-35p6-xmwp-9g52","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-35p6-xmwp-9g52","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-35p6-xmwp-9g52"},{"rule_id":"osv/GHSA-8436-99hf-9mmv","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-8436-99hf-9mmv","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-8436-99hf-9mmv"},{"rule_id":"osv/GHSA-g8m3-5g58-fq7m","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-g8m3-5g58-fq7m","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-g8m3-5g58-fq7m"},{"rule_id":"osv/GHSA-r53p-7pc4-xj5r","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-r53p-7pc4-xj5r","path":"pnpm-lock.yaml","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-r53p-7pc4-xj5r"},{"rule_id":"osv/GHSA-9jrq-w75r-8gcw","severity":"low","message":"vite@6.4.1 (npm) is affected by GHSA-9jrq-w75r-8gcw","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@6.4.1 (npm):GHSA-9jrq-w75r-8gcw"},{"rule_id":"osv/GHSA-9jrq-w75r-8gcw","severity":"low","message":"vite@7.3.1 (npm) is affected by GHSA-9jrq-w75r-8gcw","path":"pnpm-lock.yaml","line":null,"fingerprint":"vite@7.3.1 (npm):GHSA-9jrq-w75r-8gcw"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":2.0,"findings":9.0,"findings_high":6.0,"findings_medium":3.0,"findings_low":0.0,"penalty":76.8},"findings":[{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":12,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:12"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":14,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:14"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/ci.yml","line":16,"fingerprint":"unpinned-uses:.github/workflows/ci.yml:16"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":16,"fingerprint":"unpinned-uses:.github/workflows/release.yml:16"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":19,"fingerprint":"unpinned-uses:.github/workflows/release.yml:19"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":22,"fingerprint":"unpinned-uses:.github/workflows/release.yml:22"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/ci.yml","line":12,"fingerprint":"artipacked:.github/workflows/ci.yml:12"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/ci.yml","line":9,"fingerprint":"excessive-permissions:.github/workflows/ci.yml:9"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/release.yml","line":15,"fingerprint":"artipacked:.github/workflows/release.yml:15"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":0.0,"signed_commit_share":0.0294,"unpinned_manifests":5.0},"findings":[],"evidence":[{"kind":"posture","description":"packages/cli/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/cli/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/cloudflare/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/cloudflare/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/core/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/core/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/scenarios/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/scenarios/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/web/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/web/package.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":268.0,"function_nloc":3088.0,"mean_ccn":2.7,"p90_ccn":6.0,"complex_functions":7.0,"long_functions":3.0,"many_param_functions":0.0,"risky_nloc_share":0.2153},"findings":[],"evidence":[{"kind":"complex-function","description":"(anonymous) in packages/web/src/components/Terminal.tsx: complexity 27, 59 lines","ref":"packages/web/src/components/Terminal.tsx","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/web/src/components/Terminal.tsx#L74","weight":0.45},{"kind":"complex-function","description":"(anonymous) in packages/cli/src/commands/join.ts: complexity 24, 144 lines","ref":"packages/cli/src/commands/join.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/cli/src/commands/join.ts#L45","weight":0.4},{"kind":"complex-function","description":"handleCreateSession in packages/cloudflare/src/index.ts: complexity 24, 80 lines","ref":"packages/cloudflare/src/index.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/cloudflare/src/index.ts#L106","weight":0.4},{"kind":"complex-function","description":"(anonymous) in packages/web/src/hooks/useTerminalFlow.ts: complexity 22, 87 lines","ref":"packages/web/src/hooks/useTerminalFlow.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/web/src/hooks/useTerminalFlow.ts#L74","weight":0.36666666666666664},{"kind":"complex-function","description":"(anonymous) in packages/cli/src/commands/start.ts: complexity 20, 105 lines","ref":"packages/cli/src/commands/start.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/cli/src/commands/start.ts#L38","weight":0.3333333333333333},{"kind":"complex-function","description":"validateScenario in packages/core/src/scenario/validator.ts: complexity 18, 54 lines","ref":"packages/core/src/scenario/validator.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/core/src/scenario/validator.ts#L20","weight":0.3},{"kind":"complex-function","description":"Terminal in packages/web/src/components/Terminal.tsx: complexity 17, 136 lines","ref":"packages/web/src/components/Terminal.tsx","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/web/src/components/Terminal.tsx#L11","weight":0.2833333333333333}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":3393.0,"duplicated_lines":383.0,"duplicated_share":0.1129,"files":60.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: docs/screenshots/sim-candidate.mjs:3 and docs/screenshots/sim-host.mjs:3","ref":"docs/screenshots/sim-candidate.mjs","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/docs/screenshots/sim-candidate.mjs#L3","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: docs/screenshots/sim-candidate.mjs:14 and docs/screenshots/sim-interviewer.mjs:14","ref":"docs/screenshots/sim-candidate.mjs","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/docs/screenshots/sim-candidate.mjs#L14","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: docs/screenshots/sim-candidate.mjs:47 and docs/screenshots/sim-start.mjs:48","ref":"docs/screenshots/sim-candidate.mjs","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/docs/screenshots/sim-candidate.mjs#L47","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: docs/screenshots/sim-host.mjs:37 and docs/screenshots/sim-start.mjs:37","ref":"docs/screenshots/sim-host.mjs","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/docs/screenshots/sim-host.mjs#L37","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/cli/src/commands/host.ts:44 and packages/cli/src/commands/start.ts:38","ref":"packages/cli/src/commands/host.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/cli/src/commands/host.ts#L44","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/cli/src/commands/host.ts:119 and packages/cli/src/commands/host.ts:169","ref":"packages/cli/src/commands/host.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/cli/src/commands/host.ts#L119","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/cli/src/commands/host.ts:189 and packages/core/src/network/server.ts:41","ref":"packages/cli/src/commands/host.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/cli/src/commands/host.ts#L189","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/cli/src/commands/join.ts:128 and packages/cli/src/commands/start.ts:77","ref":"packages/cli/src/commands/join.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/cli/src/commands/join.ts#L128","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/cloudflare/src/index.ts:15 and packages/core/src/network/server.ts:13","ref":"packages/cloudflare/src/index.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/cloudflare/src/index.ts#L15","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/core/src/network/client.ts:32 and packages/core/src/network/client.ts:60","ref":"packages/core/src/network/client.ts","url":"https://github.com/cpaczek/vibe-interviewing/blob/da6867cf2b2bf4c83a9cbf249a9e96e20315ec46/packages/core/src/network/client.ts#L32","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":2.0,"weighted_findings":4.0,"scanned_lines":4975.0,"category:best-practice":1.0,"category:correctness":1.0},"findings":[{"rule_id":"opengrep/typescript.lang.correctness.useless-ternary","severity":"high","message":"It looks like no matter how steps is evaluated, this expression returns 'idle'. This is probably a copy-paste error.","path":"packages/web/src/hooks/useTerminalFlow.ts","line":63,"fingerprint":"typescript.lang.correctness.useless-ternary:packages/web/src/hooks/useTerminalFlow.ts:63"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"packages/cli/src/ui/prompts.ts","line":39,"fingerprint":"javascript.lang.best-practice.javascript-confirm:packages/cli/src/ui/prompts.ts:39"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.3747,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":932.0,"source_lines":4975.0,"test_ratio":0.1873,"ci_files":2.0,"cochange_share":0.3684,"cochange_commits":19.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/ci.yml","ref":".github/workflows/ci.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI config: .github/workflows/release.yml","ref":".github/workflows/release.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (npm test, pnpm test)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["npm test","pnpm test"],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":0.0,"readme_lines":189.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":1.0,"escapes":2.0,"escapes_per_kloc":0.428},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: packages/cloudflare/tsconfig.json","ref":"packages/cloudflare/tsconfig.json","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":4975.0,"other_lines":0.0,"files_blamed":60.0,"blame_failures":0.0,"quality:ai_findings":2.0,"quality:ai_per_kloc":0.402,"quality:other_findings":0.0,"security:ai_findings":0.0,"security:ai_per_kloc":0.0,"security:other_findings":0.0},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":false},"error":null}],"flags":[]}