{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:04.352828Z","repo":{"ref":{"host":"github.com","owner":"fahad19","name":"proppy"},"default_branch":"master","clone_url":"https://github.com/fahad19/proppy.git","html_url":"https://github.com/fahad19/proppy","description":"Functional props composition for UI components (React.js & Vue.js)","stars":932,"forks":27,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":1343,"primary_language":"TypeScript","license_spdx":"MIT","created_at":"2018-05-26T18:04:01Z","pushed_at":"2019-04-13T22:05:43Z","security_policy_url":null,"distribution":{"owner_created_at":"2008-08-08T17:00:04Z","owner_type":"User","release_assets":[]}},"commit_sha":"4623c751cce1a2bd926ba2b25a0b41c54797e403","profile":{"lines_by_language":{"TypeScript":2510,"JavaScript":2143},"files_by_category":{"source":121,"config":41,"docs":41,"binary":23,"test":23,"other":18,"generated":1},"source_lines":3005,"test_lines":1648},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.61,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0,"style_index":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":72.1,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":100.0,"duplication":4.6,"lint":77.9,"testing":90.0,"docs":100.0,"type_safety":0.0,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.55, CI runs tests; 0% of function code in complex or long functions; 51% duplicated lines. Weakest area: type safety."},"security":{"score":50.6,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":64.6,"dependencies":0.0,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 216 known vulnerabilities in 96 dependencies. Weakest area: dependencies."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":39.0,"checked":39.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":85.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":4870.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2018-05":{"loc":3061,"attributed_loc":0},"2018-06":{"loc":1310,"attributed_loc":0},"2018-07":{"loc":153,"attributed_loc":0},"2018-09":{"loc":5,"attributed_loc":0},"2018-10":{"loc":257,"attributed_loc":0},"2018-12":{"loc":0,"attributed_loc":0},"2019-04":{"loc":84,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":18.0,"flagged_units":0.0,"pre_ai_era_bursts":1.0,"pre_ai_era_measured_loc":4870.0,"pre_ai_era_burst_loc":3036.0,"measured_loc":4870.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":736.8435245735859,"median_loc_per_hour":144.42938465708863,"pr_timed_units":13.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":11.0,"flagged_releases":0.0,"max_loc_per_day":138.1},"findings":[],"evidence":[],"data":{"releases":[{"from":"v1.0.0","to":"v1.1.0","loc":78,"days":3.71,"loc_per_day":21.0,"flagged":false},{"from":"v1.1.0","to":"v1.2.0","loc":25,"days":1.26,"loc_per_day":19.9,"flagged":false},{"from":"v1.2.0","to":"v1.2.1","loc":21,"days":6.09,"loc_per_day":3.5,"flagged":false},{"from":"v1.2.1","to":"v1.2.2","loc":594,"days":6.72,"loc_per_day":88.3,"flagged":false},{"from":"v1.2.2","to":"v1.2.3","loc":593,"days":32.27,"loc_per_day":18.4,"flagged":false},{"from":"v1.2.3","to":"v1.2.4","loc":149,"days":1.08,"loc_per_day":138.1,"flagged":false},{"from":"v1.2.4","to":"v1.2.5","loc":6,"days":47.87,"loc_per_day":0.1,"flagged":false},{"from":"v1.2.5","to":"v1.2.6","loc":2,"days":1.89,"loc_per_day":1.1,"flagged":false},{"from":"v1.2.6","to":"v1.2.7","loc":259,"days":206.27,"loc_per_day":1.3,"flagged":false},{"from":"v1.2.7","to":"v1.3.0","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v1.3.0","to":"v1.3.1","loc":82,"days":11.94,"loc_per_day":6.9,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":3005.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":15.0,"findings_high":0.0,"findings_medium":15.0,"findings_low":0.0,"weighted_findings":3.75,"scanned_lines":3005.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"site/assets/js/site.js","line":40,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:site/assets/js/site.js:40"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-method","severity":"medium","message":"User controlled data in a jQuery's `.after(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"site/assets/js/site.js","line":47,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-method:site/assets/js/site.js:47"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"site/assets/js/site.js","line":47,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:site/assets/js/site.js:47"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `name` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"site/bin/build.js","line":20,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:site/bin/build.js:20"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `name` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"site/bin/build.js","line":24,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:site/bin/build.js:24"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `file` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"site/bin/build.js","line":41,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:site/bin/build.js:41"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `obj` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"site/bin/build.js","line":121,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:site/bin/build.js:121"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `obj` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"site/bin/build.js","line":133,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:site/bin/build.js:133"},{"rule_id":"opengrep/javascript.lang.security.insecure-object-assign","severity":"medium","message":"Depending on the context, user control data in `Object.assign` can cause web response to include data that it should not have or can lead to a mass assignment vulnerability. [confidence low]","path":"site/bin/build.js","line":149,"fingerprint":"javascript.lang.security.insecure-object-assign:site/bin/build.js:149"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"site/bin/build.js","line":188,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:site/bin/build.js:188"},{"rule_id":"opengrep/javascript.lang.security.insecure-object-assign","severity":"medium","message":"Depending on the context, user control data in `Object.assign` can cause web response to include data that it should not have or can lead to a mass assignment vulnerability. [confidence low]","path":"site/bin/build.js","line":188,"fingerprint":"javascript.lang.security.insecure-object-assign:site/bin/build.js:188"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"site/bin/build.js","line":195,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:site/bin/build.js:195"},{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.var-in-href","severity":"medium","message":"Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the URL, like this: href='/<%= [confidence low]","path":"site/layouts/default.html","line":29,"fingerprint":"javascript.express.security.audit.xss.ejs.var-in-href:site/layouts/default.html:29"},{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.var-in-href","severity":"medium","message":"Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the URL, like this: href='/<%= [confidence low]","path":"site/layouts/default.html","line":41,"fingerprint":"javascript.express.security.audit.xss.ejs.var-in-href:site/layouts/default.html:41"},{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.var-in-href","severity":"medium","message":"Detected a template variable used in an anchor tag with the 'href' attribute. This allows a malicious actor to input the 'javascript:' URI and is subject to cross- site scripting (XSS) attacks. If using a relative URL, start with a literal forward slash and concatenate the URL, like this: href='/<%= [confidence low]","path":"site/partials/docsSidebar.html","line":11,"fingerprint":"javascript.express.security.audit.xss.ejs.var-in-href:site/partials/docsSidebar.html:11"}],"evidence":[],"data":{"rulesets":["javascript","typescript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":96.0,"vulnerabilities":216.0,"vulns_critical":27.0,"vulns_high":108.0,"vulns_medium":65.0,"vulns_low":9.0,"vulns_unknown":7.0,"penalty":752.0},"findings":[{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"babel-traverse@6.26.0 (npm) is affected by GHSA-67hx-6x53-jw92","path":"package-lock.json","line":null,"fingerprint":"babel-traverse@6.26.0 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-cpq7-6gpm-g9rc","severity":"critical","message":"cipher-base@1.0.4 (npm) is affected by GHSA-cpq7-6gpm-g9rc","path":"package-lock.json","line":null,"fingerprint":"cipher-base@1.0.4 (npm):GHSA-cpq7-6gpm-g9rc"},{"rule_id":"osv/GHSA-vjh7-7g9h-fjfh","severity":"critical","message":"elliptic@6.4.1 (npm) is affected by GHSA-vjh7-7g9h-fjfh","path":"package-lock.json","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-vjh7-7g9h-fjfh"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.3.2 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"package-lock.json","line":null,"fingerprint":"form-data@2.3.2 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-8r6j-v8pm-fqw3","severity":"critical","message":"fsevents@1.2.4 (npm) is affected by GHSA-8r6j-v8pm-fqw3","path":"package-lock.json","line":null,"fingerprint":"fsevents@1.2.4 (npm):GHSA-8r6j-v8pm-fqw3"},{"rule_id":"osv/GHSA-2w6w-674q-4c4q","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-2w6w-674q-4c4q","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-2w6w-674q-4c4q"},{"rule_id":"osv/GHSA-765h-qjxv-5f44","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-765h-qjxv-5f44","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-765h-qjxv-5f44"},{"rule_id":"osv/GHSA-8r5x-fm3f-whwj","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-8r5x-fm3f-whwj","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-8r5x-fm3f-whwj"},{"rule_id":"osv/GHSA-f2jv-r9rf-7988","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-f2jv-r9rf-7988","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-f2jv-r9rf-7988"},{"rule_id":"osv/GHSA-p8wg-vrv2-v86f","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-p8wg-vrv2-v86f","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-p8wg-vrv2-v86f"},{"rule_id":"osv/GHSA-w457-6q6x-cgp9","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-w457-6q6x-cgp9","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-w457-6q6x-cgp9"},{"rule_id":"osv/GHSA-896r-f27r-55mw","severity":"critical","message":"json-schema@0.2.3 (npm) is affected by GHSA-896r-f27r-55mw","path":"package-lock.json","line":null,"fingerprint":"json-schema@0.2.3 (npm):GHSA-896r-f27r-55mw"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@1.1.0 (npm) is affected by GHSA-76p3-8jx3-jpfq","path":"package-lock.json","line":null,"fingerprint":"loader-utils@1.1.0 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.17.11 (npm) is affected by GHSA-jf85-cpcp-j695","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.8 (npm) is affected by GHSA-xvch-5gv4-984h","path":"package-lock.json","line":null,"fingerprint":"minimist@0.0.8 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.1.0 (npm) is affected by GHSA-xvch-5gv4-984h","path":"package-lock.json","line":null,"fingerprint":"minimist@0.1.0 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@1.2.0 (npm) is affected by GHSA-xvch-5gv4-984h","path":"package-lock.json","line":null,"fingerprint":"minimist@1.2.0 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-fhjf-83wg-r2j9","severity":"critical","message":"mixin-deep@1.3.1 (npm) is affected by GHSA-fhjf-83wg-r2j9","path":"package-lock.json","line":null,"fingerprint":"mixin-deep@1.3.1 (npm):GHSA-fhjf-83wg-r2j9"},{"rule_id":"osv/GHSA-h7cp-r72f-jxh6","severity":"critical","message":"pbkdf2@3.0.17 (npm) is affected by GHSA-h7cp-r72f-jxh6","path":"package-lock.json","line":null,"fingerprint":"pbkdf2@3.0.17 (npm):GHSA-h7cp-r72f-jxh6"},{"rule_id":"osv/GHSA-v62p-rq8g-8h59","severity":"critical","message":"pbkdf2@3.0.17 (npm) is affected by GHSA-v62p-rq8g-8h59","path":"package-lock.json","line":null,"fingerprint":"pbkdf2@3.0.17 (npm):GHSA-v62p-rq8g-8h59"},{"rule_id":"osv/GHSA-4g88-fppr-53pp","severity":"critical","message":"set-value@0.4.3 (npm) is affected by GHSA-4g88-fppr-53pp","path":"package-lock.json","line":null,"fingerprint":"set-value@0.4.3 (npm):GHSA-4g88-fppr-53pp"},{"rule_id":"osv/GHSA-4g88-fppr-53pp","severity":"critical","message":"set-value@2.0.0 (npm) is affected by GHSA-4g88-fppr-53pp","path":"package-lock.json","line":null,"fingerprint":"set-value@2.0.0 (npm):GHSA-4g88-fppr-53pp"},{"rule_id":"osv/GHSA-95m3-7q98-8xr5","severity":"critical","message":"sha.js@2.4.11 (npm) is affected by GHSA-95m3-7q98-8xr5","path":"package-lock.json","line":null,"fingerprint":"sha.js@2.4.11 (npm):GHSA-95m3-7q98-8xr5"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.6.1 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"package-lock.json","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@2.2.1 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@4.4.1 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-xv26-6w52-cph6","severity":"critical","message":"websocket-driver@0.7.0 (npm) is affected by GHSA-xv26-6w52-cph6","path":"package-lock.json","line":null,"fingerprint":"websocket-driver@0.7.0 (npm):GHSA-xv26-6w52-cph6"},{"rule_id":"osv/GHSA-6chw-6frg-f759","severity":"high","message":"acorn@5.7.3 (npm) is affected by GHSA-6chw-6frg-f759","path":"package-lock.json","line":null,"fingerprint":"acorn@5.7.3 (npm):GHSA-6chw-6frg-f759"},{"rule_id":"osv/GHSA-6chw-6frg-f759","severity":"high","message":"acorn@6.0.2 (npm) is affected by GHSA-6chw-6frg-f759","path":"package-lock.json","line":null,"fingerprint":"acorn@6.0.2 (npm):GHSA-6chw-6frg-f759"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@3.0.0 (npm) is affected by GHSA-93q8-gq69-wqmw","path":"package-lock.json","line":null,"fingerprint":"ansi-regex@3.0.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-fwr7-v2mv-hh25","severity":"high","message":"async@2.6.1 (npm) is affected by GHSA-fwr7-v2mv-hh25","path":"package-lock.json","line":null,"fingerprint":"async@2.6.1 (npm):GHSA-fwr7-v2mv-hh25"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@1.8.5 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"package-lock.json","line":null,"fingerprint":"braces@1.8.5 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@2.3.2 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"package-lock.json","line":null,"fingerprint":"braces@2.3.2 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-x9w5-v3q2-3rhw","severity":"high","message":"browserify-sign@4.0.4 (npm) is affected by GHSA-x9w5-v3q2-3rhw","path":"package-lock.json","line":null,"fingerprint":"browserify-sign@4.0.4 (npm):GHSA-x9w5-v3q2-3rhw"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@3.0.1 (npm) is affected by GHSA-3xgq-45jj-v275","path":"package-lock.json","line":null,"fingerprint":"cross-spawn@3.0.1 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@5.1.0 (npm) is affected by GHSA-3xgq-45jj-v275","path":"package-lock.json","line":null,"fingerprint":"cross-spawn@5.1.0 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@6.0.5 (npm) is affected by GHSA-3xgq-45jj-v275","path":"package-lock.json","line":null,"fingerprint":"cross-spawn@6.0.5 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-9vvw-cc9w-f27h","severity":"high","message":"debug@2.2.0 (npm) is affected by GHSA-9vvw-cc9w-f27h","path":"package-lock.json","line":null,"fingerprint":"debug@2.2.0 (npm):GHSA-9vvw-cc9w-f27h"},{"rule_id":"osv/GHSA-qr28-fpjm-wq7f","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-qr28-fpjm-wq7f","path":"package-lock.json","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-qr28-fpjm-wq7f"},{"rule_id":"osv/GHSA-w573-4hg7-7wgq","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-w573-4hg7-7wgq","path":"package-lock.json","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-w573-4hg7-7wgq"},{"rule_id":"osv/GHSA-ff7x-qrg7-qggm","severity":"high","message":"dot-prop@3.0.0 (npm) is affected by GHSA-ff7x-qrg7-qggm","path":"package-lock.json","line":null,"fingerprint":"dot-prop@3.0.0 (npm):GHSA-ff7x-qrg7-qggm"},{"rule_id":"osv/GHSA-vh7m-p724-62c2","severity":"high","message":"elliptic@6.4.1 (npm) is affected by GHSA-vh7m-p724-62c2","path":"package-lock.json","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-vh7m-p724-62c2"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.3.2 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"package-lock.json","line":null,"fingerprint":"form-data@2.3.2 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-xf7w-r453-m56c","severity":"high","message":"fstream@1.0.11 (npm) is affected by GHSA-xf7w-r453-m56c","path":"package-lock.json","line":null,"fingerprint":"fstream@1.0.11 (npm):GHSA-xf7w-r453-m56c"},{"rule_id":"osv/GHSA-2cf5-4w76-r9qv","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-2cf5-4w76-r9qv","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-2cf5-4w76-r9qv"},{"rule_id":"osv/GHSA-3cqr-58rm-57f8","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-3cqr-58rm-57f8","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-3cqr-58rm-57f8"},{"rule_id":"osv/GHSA-3mfm-83xf-c92r","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-3mfm-83xf-c92r","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-3mfm-83xf-c92r"},{"rule_id":"osv/GHSA-62gr-4qp9-h98f","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-62gr-4qp9-h98f","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-62gr-4qp9-h98f"},{"rule_id":"osv/GHSA-9cx6-37pm-9jff","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-9cx6-37pm-9jff","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-9cx6-37pm-9jff"},{"rule_id":"osv/GHSA-q42p-pg8m-cqh6","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-q42p-pg8m-cqh6","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-q42p-pg8m-cqh6"},{"rule_id":"osv/GHSA-xhpv-hc6g-r9c6","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-xhpv-hc6g-r9c6","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-xhpv-hc6g-r9c6"},{"rule_id":"osv/GHSA-xjpj-3mr7-gcpf","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-xjpj-3mr7-gcpf","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-xjpj-3mr7-gcpf"},{"rule_id":"osv/GHSA-rc47-6667-2j5j","severity":"high","message":"http-cache-semantics@3.8.1 (npm) is affected by GHSA-rc47-6667-2j5j","path":"package-lock.json","line":null,"fingerprint":"http-cache-semantics@3.8.1 (npm):GHSA-rc47-6667-2j5j"},{"rule_id":"osv/GHSA-qqgx-2p2h-9c37","severity":"high","message":"ini@1.3.5 (npm) is affected by GHSA-qqgx-2p2h-9c37","path":"package-lock.json","line":null,"fingerprint":"ini@1.3.5 (npm):GHSA-qqgx-2p2h-9c37"},{"rule_id":"osv/GHSA-2p57-rm9w-gvfp","severity":"high","message":"ip@1.1.5 (npm) is affected by GHSA-2p57-rm9w-gvfp","path":"package-lock.json","line":null,"fingerprint":"ip@1.1.5 (npm):GHSA-2p57-rm9w-gvfp"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.12.0 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.12.0 (npm) is affected by GHSA-52cp-r559-cp3m","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.12.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@0.5.1 (npm) is affected by GHSA-9c47-m6qq-7p4h","path":"package-lock.json","line":null,"fingerprint":"json5@0.5.1 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-6c8f-qphg-qjgp","severity":"high","message":"kind-of@6.0.2 (npm) is affected by GHSA-6c8f-qphg-qjgp","path":"package-lock.json","line":null,"fingerprint":"kind-of@6.0.2 (npm):GHSA-6c8f-qphg-qjgp"},{"rule_id":"osv/GHSA-3rfm-jhwj-7488","severity":"high","message":"loader-utils@1.1.0 (npm) is affected by GHSA-3rfm-jhwj-7488","path":"package-lock.json","line":null,"fingerprint":"loader-utils@1.1.0 (npm):GHSA-3rfm-jhwj-7488"},{"rule_id":"osv/GHSA-hhq3-ff78-jv3g","severity":"high","message":"loader-utils@1.1.0 (npm) is affected by GHSA-hhq3-ff78-jv3g","path":"package-lock.json","line":null,"fingerprint":"loader-utils@1.1.0 (npm):GHSA-hhq3-ff78-jv3g"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.11 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.17.11 (npm) is affected by GHSA-p6mc-m468-83gw","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.11 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash.template@4.4.0 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"package-lock.json","line":null,"fingerprint":"lodash.template@4.4.0 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash.template@4.4.0 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"package-lock.json","line":null,"fingerprint":"lodash.template@4.4.0 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-5v2h-r2cx-5xgj","severity":"high","message":"marked@0.3.19 (npm) is affected by GHSA-5v2h-r2cx-5xgj","path":"package-lock.json","line":null,"fingerprint":"marked@0.3.19 (npm):GHSA-5v2h-r2cx-5xgj"},{"rule_id":"osv/GHSA-rrrm-qjm4-v8hf","severity":"high","message":"marked@0.3.19 (npm) is affected by GHSA-rrrm-qjm4-v8hf","path":"package-lock.json","line":null,"fingerprint":"marked@0.3.19 (npm):GHSA-rrrm-qjm4-v8hf"},{"rule_id":"osv/GHSA-7wpw-2hjm-89gp","severity":"high","message":"merge@1.2.0 (npm) is affected by GHSA-7wpw-2hjm-89gp","path":"package-lock.json","line":null,"fingerprint":"merge@1.2.0 (npm):GHSA-7wpw-2hjm-89gp"},{"rule_id":"osv/GHSA-f9cm-qmx5-m98h","severity":"high","message":"merge@1.2.0 (npm) is affected by GHSA-f9cm-qmx5-m98h","path":"package-lock.json","line":null,"fingerprint":"merge@1.2.0 (npm):GHSA-f9cm-qmx5-m98h"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-f8q6-p94x-37v3","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-f8q6-p94x-37v3","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-f8q6-p94x-37v3"},{"rule_id":"osv/GHSA-8hfj-j24r-96c4","severity":"high","message":"moment@2.22.2 (npm) is affected by GHSA-8hfj-j24r-96c4","path":"package-lock.json","line":null,"fingerprint":"moment@2.22.2 (npm):GHSA-8hfj-j24r-96c4"},{"rule_id":"osv/GHSA-wc69-rhjr-hc9g","severity":"high","message":"moment@2.22.2 (npm) is affected by GHSA-wc69-rhjr-hc9g","path":"package-lock.json","line":null,"fingerprint":"moment@2.22.2 (npm):GHSA-wc69-rhjr-hc9g"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.5.2 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"package-lock.json","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-7mwh-4pqv-wmr8","severity":"high","message":"scss-tokenizer@0.2.3 (npm) is affected by GHSA-7mwh-4pqv-wmr8","path":"package-lock.json","line":null,"fingerprint":"scss-tokenizer@0.2.3 (npm):GHSA-7mwh-4pqv-wmr8"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.3.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"package-lock.json","line":null,"fingerprint":"semver@5.3.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.5.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"package-lock.json","line":null,"fingerprint":"semver@5.5.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.6.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"package-lock.json","line":null,"fingerprint":"semver@5.6.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-5c6j-r48x-rmvq","severity":"high","message":"serialize-javascript@1.5.0 (npm) is affected by GHSA-5c6j-r48x-rmvq","path":"package-lock.json","line":null,"fingerprint":"serialize-javascript@1.5.0 (npm):GHSA-5c6j-r48x-rmvq"},{"rule_id":"osv/GHSA-hxcc-f52p-wc94","severity":"high","message":"serialize-javascript@1.5.0 (npm) is affected by GHSA-hxcc-f52p-wc94","path":"package-lock.json","line":null,"fingerprint":"serialize-javascript@1.5.0 (npm):GHSA-hxcc-f52p-wc94"},{"rule_id":"osv/GHSA-4jqc-8m5r-9rpr","severity":"high","message":"set-value@0.4.3 (npm) is affected by GHSA-4jqc-8m5r-9rpr","path":"package-lock.json","line":null,"fingerprint":"set-value@0.4.3 (npm):GHSA-4jqc-8m5r-9rpr"},{"rule_id":"osv/GHSA-4jqc-8m5r-9rpr","severity":"high","message":"set-value@2.0.0 (npm) is affected by GHSA-4jqc-8m5r-9rpr","path":"package-lock.json","line":null,"fingerprint":"set-value@2.0.0 (npm):GHSA-4jqc-8m5r-9rpr"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.6.1 (npm) is affected by GHSA-395f-4hp3-45gv","path":"package-lock.json","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-vx3p-948g-6vhq","severity":"high","message":"ssri@5.3.0 (npm) is affected by GHSA-vx3p-948g-6vhq","path":"package-lock.json","line":null,"fingerprint":"ssri@5.3.0 (npm):GHSA-vx3p-948g-6vhq"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-3jfq-g458-7qm9","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-5955-9wpr-37jh","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-83g3-92jg-28cx","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-j44m-qm6p-hp7m","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-j44m-qm6p-hp7m","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-j44m-qm6p-hp7m"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-r292-9mhp-454m","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-3jfq-g458-7qm9","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-5955-9wpr-37jh","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-83g3-92jg-28cx","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-9r2w-394v-53qc","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-9r2w-394v-53qc","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-9r2w-394v-53qc"},{"rule_id":"osv/GHSA-j44m-qm6p-hp7m","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-j44m-qm6p-hp7m","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-j44m-qm6p-hp7m"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-qq89-hq3f-393p","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-qq89-hq3f-393p","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-qq89-hq3f-393p"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-r292-9mhp-454m","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r628-mhmh-qjhw","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-r628-mhmh-qjhw","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-r628-mhmh-qjhw"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@4.4.1 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.33 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"package-lock.json","line":null,"fingerprint":"tmp@0.0.33 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-jgrx-mgxx-jf9v","severity":"high","message":"tmpl@1.0.4 (npm) is affected by GHSA-jgrx-mgxx-jf9v","path":"package-lock.json","line":null,"fingerprint":"tmpl@1.0.4 (npm):GHSA-jgrx-mgxx-jf9v"},{"rule_id":"osv/GHSA-4qx8-w7c3-pj3p","severity":"high","message":"toml@2.3.3 (npm) is affected by GHSA-4qx8-w7c3-pj3p","path":"package-lock.json","line":null,"fingerprint":"toml@2.3.3 (npm):GHSA-4qx8-w7c3-pj3p"},{"rule_id":"osv/GHSA-82x6-q7mm-w9cf","severity":"high","message":"toml@2.3.3 (npm) is affected by GHSA-82x6-q7mm-w9cf","path":"package-lock.json","line":null,"fingerprint":"toml@2.3.3 (npm):GHSA-82x6-q7mm-w9cf"},{"rule_id":"osv/GHSA-9j65-hcg3-gc64","severity":"high","message":"toml@2.3.3 (npm) is affected by GHSA-9j65-hcg3-gc64","path":"package-lock.json","line":null,"fingerprint":"toml@2.3.3 (npm):GHSA-9j65-hcg3-gc64"},{"rule_id":"osv/GHSA-9qmh-m7c6-f92p","severity":"high","message":"toml@2.3.3 (npm) is affected by GHSA-9qmh-m7c6-f92p","path":"package-lock.json","line":null,"fingerprint":"toml@2.3.3 (npm):GHSA-9qmh-m7c6-f92p"},{"rule_id":"osv/GHSA-h895-cgqg-jf52","severity":"high","message":"toml@2.3.3 (npm) is affected by GHSA-h895-cgqg-jf52","path":"package-lock.json","line":null,"fingerprint":"toml@2.3.3 (npm):GHSA-h895-cgqg-jf52"},{"rule_id":"osv/GHSA-v5mp-jgw5-2x6j","severity":"high","message":"toml@2.3.3 (npm) is affected by GHSA-v5mp-jgw5-2x6j","path":"package-lock.json","line":null,"fingerprint":"toml@2.3.3 (npm):GHSA-v5mp-jgw5-2x6j"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@1.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v","path":"package-lock.json","line":null,"fingerprint":"trim-newlines@1.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@2.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v","path":"package-lock.json","line":null,"fingerprint":"trim-newlines@2.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@2.0.3 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"package-lock.json","line":null,"fingerprint":"uuid@2.0.3 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.3.2 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"package-lock.json","line":null,"fingerprint":"uuid@3.3.2 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-g78m-2chm-r7qv","severity":"high","message":"websocket-extensions@0.1.3 (npm) is affected by GHSA-g78m-2chm-r7qv","path":"package-lock.json","line":null,"fingerprint":"websocket-extensions@0.1.3 (npm):GHSA-g78m-2chm-r7qv"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@4.1.0 (npm) is affected by GHSA-3h5v-q93c-6h6q","path":"package-lock.json","line":null,"fingerprint":"ws@4.1.0 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@4.1.0 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"package-lock.json","line":null,"fingerprint":"ws@4.1.0 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@3.2.1 (npm) is affected by GHSA-c4w7-xm78-47vh","path":"package-lock.json","line":null,"fingerprint":"y18n@3.2.1 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@4.0.0 (npm) is affected by GHSA-c4w7-xm78-47vh","path":"package-lock.json","line":null,"fingerprint":"y18n@4.0.0 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@5.5.2 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"package-lock.json","line":null,"fingerprint":"ajv@5.5.2 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-v88g-cgmw-v5xw","severity":"medium","message":"ajv@5.5.2 (npm) is affected by GHSA-v88g-cgmw-v5xw","path":"package-lock.json","line":null,"fingerprint":"ajv@5.5.2 (npm):GHSA-v88g-cgmw-v5xw"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@6.5.4 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"package-lock.json","line":null,"fingerprint":"ajv@6.5.4 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-v88g-cgmw-v5xw","severity":"medium","message":"ajv@6.5.4 (npm) is affected by GHSA-v88g-cgmw-v5xw","path":"package-lock.json","line":null,"fingerprint":"ajv@6.5.4 (npm):GHSA-v88g-cgmw-v5xw"},{"rule_id":"osv/GHSA-378v-28hj-76wf","severity":"medium","message":"bn.js@4.11.8 (npm) is affected by GHSA-378v-28hj-76wf","path":"package-lock.json","line":null,"fingerprint":"bn.js@4.11.8 (npm):GHSA-378v-28hj-76wf"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-vcc3-ghjq-m6fr","severity":"medium","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-vcc3-ghjq-m6fr","path":"package-lock.json","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-vcc3-ghjq-m6fr"},{"rule_id":"osv/GHSA-434g-2637-qmqr","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-434g-2637-qmqr","path":"package-lock.json","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-434g-2637-qmqr"},{"rule_id":"osv/GHSA-49q7-c7j4-3p7m","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-49q7-c7j4-3p7m","path":"package-lock.json","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-49q7-c7j4-3p7m"},{"rule_id":"osv/GHSA-848j-6mx2-7j84","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-848j-6mx2-7j84","path":"package-lock.json","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-848j-6mx2-7j84"},{"rule_id":"osv/GHSA-977x-g7h5-7qgw","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-977x-g7h5-7qgw","path":"package-lock.json","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-977x-g7h5-7qgw"},{"rule_id":"osv/GHSA-f7q4-pwc6-w24p","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-f7q4-pwc6-w24p","path":"package-lock.json","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-f7q4-pwc6-w24p"},{"rule_id":"osv/GHSA-fc9h-whq2-v747","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-fc9h-whq2-v747","path":"package-lock.json","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-fc9h-whq2-v747"},{"rule_id":"osv/GHSA-r9p9-mrjm-926w","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-r9p9-mrjm-926w","path":"package-lock.json","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-r9p9-mrjm-926w"},{"rule_id":"osv/MAL-2023-462","severity":"medium","message":"fsevents@1.2.4 (npm) is affected by MAL-2023-462","path":"package-lock.json","line":null,"fingerprint":"fsevents@1.2.4 (npm):MAL-2023-462"},{"rule_id":"osv/GHSA-pfrx-2q88-qq97","severity":"medium","message":"got@6.7.1 (npm) is affected by GHSA-pfrx-2q88-qq97","path":"package-lock.json","line":null,"fingerprint":"got@6.7.1 (npm):GHSA-pfrx-2q88-qq97"},{"rule_id":"osv/GHSA-2qvq-rjwj-gvw9","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-2qvq-rjwj-gvw9","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-2qvq-rjwj-gvw9"},{"rule_id":"osv/GHSA-f52g-6jhx-586p","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-f52g-6jhx-586p","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-f52g-6jhx-586p"},{"rule_id":"osv/GHSA-g9r4-xpmj-mj65","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-g9r4-xpmj-mj65","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-g9r4-xpmj-mj65"},{"rule_id":"osv/GHSA-q2c6-c6pm-g3gh","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-q2c6-c6pm-g3gh","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-q2c6-c6pm-g3gh"},{"rule_id":"osv/GHSA-xw65-4hp5-5hc7","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-xw65-4hp5-5hc7","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-xw65-4hp5-5hc7"},{"rule_id":"osv/GHSA-43f8-2h32-f4cj","severity":"medium","message":"hosted-git-info@2.7.1 (npm) is affected by GHSA-43f8-2h32-f4cj","path":"package-lock.json","line":null,"fingerprint":"hosted-git-info@2.7.1 (npm):GHSA-43f8-2h32-f4cj"},{"rule_id":"osv/GHSA-pc5p-h8pf-mvwp","severity":"medium","message":"https-proxy-agent@2.2.1 (npm) is affected by GHSA-pc5p-h8pf-mvwp","path":"package-lock.json","line":null,"fingerprint":"https-proxy-agent@2.2.1 (npm):GHSA-pc5p-h8pf-mvwp"},{"rule_id":"osv/GHSA-78xj-cgh5-2h22","severity":"medium","message":"ip@1.1.5 (npm) is affected by GHSA-78xj-cgh5-2h22","path":"package-lock.json","line":null,"fingerprint":"ip@1.1.5 (npm):GHSA-78xj-cgh5-2h22"},{"rule_id":"osv/GHSA-2pr6-76vf-7546","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-2pr6-76vf-7546","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-2pr6-76vf-7546"},{"rule_id":"osv/GHSA-8j8c-7jfh-h6hx","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-8j8c-7jfh-h6hx","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-8j8c-7jfh-h6hx"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-h67p-54hq-rp68","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-mh29-5h37-fv8m","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.17.11 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.17.11 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-779f-wgxg-qr8f","severity":"medium","message":"lodash.mergewith@4.6.1 (npm) is affected by GHSA-779f-wgxg-qr8f","path":"package-lock.json","line":null,"fingerprint":"lodash.mergewith@4.6.1 (npm):GHSA-779f-wgxg-qr8f"},{"rule_id":"osv/GHSA-xf5p-87ch-gxw2","severity":"medium","message":"marked@0.3.19 (npm) is affected by GHSA-xf5p-87ch-gxw2","path":"package-lock.json","line":null,"fingerprint":"marked@0.3.19 (npm):GHSA-xf5p-87ch-gxw2"},{"rule_id":"osv/GHSA-4xcv-9jjx-gfj3","severity":"medium","message":"mem@1.1.0 (npm) is affected by GHSA-4xcv-9jjx-gfj3","path":"package-lock.json","line":null,"fingerprint":"mem@1.1.0 (npm):GHSA-4xcv-9jjx-gfj3"},{"rule_id":"osv/GHSA-952p-6rrq-rcjv","severity":"medium","message":"micromatch@2.3.11 (npm) is affected by GHSA-952p-6rrq-rcjv","path":"package-lock.json","line":null,"fingerprint":"micromatch@2.3.11 (npm):GHSA-952p-6rrq-rcjv"},{"rule_id":"osv/GHSA-952p-6rrq-rcjv","severity":"medium","message":"micromatch@3.1.10 (npm) is affected by GHSA-952p-6rrq-rcjv","path":"package-lock.json","line":null,"fingerprint":"micromatch@3.1.10 (npm):GHSA-952p-6rrq-rcjv"},{"rule_id":"osv/GHSA-vh95-rmgr-6w4m","severity":"medium","message":"minimist@0.0.8 (npm) is affected by GHSA-vh95-rmgr-6w4m","path":"package-lock.json","line":null,"fingerprint":"minimist@0.0.8 (npm):GHSA-vh95-rmgr-6w4m"},{"rule_id":"osv/GHSA-vh95-rmgr-6w4m","severity":"medium","message":"minimist@0.1.0 (npm) is affected by GHSA-vh95-rmgr-6w4m","path":"package-lock.json","line":null,"fingerprint":"minimist@0.1.0 (npm):GHSA-vh95-rmgr-6w4m"},{"rule_id":"osv/GHSA-vh95-rmgr-6w4m","severity":"medium","message":"minimist@1.2.0 (npm) is affected by GHSA-vh95-rmgr-6w4m","path":"package-lock.json","line":null,"fingerprint":"minimist@1.2.0 (npm):GHSA-vh95-rmgr-6w4m"},{"rule_id":"osv/GHSA-4vj7-5mj6-jm8m","severity":"medium","message":"morgan@1.9.1 (npm) is affected by GHSA-4vj7-5mj6-jm8m","path":"package-lock.json","line":null,"fingerprint":"morgan@1.9.1 (npm):GHSA-4vj7-5mj6-jm8m"},{"rule_id":"osv/GHSA-9f6g-j8ch-79g4","severity":"medium","message":"morgan@1.9.1 (npm) is affected by GHSA-9f6g-j8ch-79g4","path":"package-lock.json","line":null,"fingerprint":"morgan@1.9.1 (npm):GHSA-9f6g-j8ch-79g4"},{"rule_id":"osv/GHSA-jxfw-x594-9x9m","severity":"medium","message":"morgan@1.9.1 (npm) is affected by GHSA-jxfw-x594-9x9m","path":"package-lock.json","line":null,"fingerprint":"morgan@1.9.1 (npm):GHSA-jxfw-x594-9x9m"},{"rule_id":"osv/GHSA-w9mr-4mfr-499f","severity":"medium","message":"ms@0.7.1 (npm) is affected by GHSA-w9mr-4mfr-499f","path":"package-lock.json","line":null,"fingerprint":"ms@0.7.1 (npm):GHSA-w9mr-4mfr-499f"},{"rule_id":"osv/GHSA-5fw9-fq32-wv5p","severity":"medium","message":"node-notifier@5.2.1 (npm) is affected by GHSA-5fw9-fq32-wv5p","path":"package-lock.json","line":null,"fingerprint":"node-notifier@5.2.1 (npm):GHSA-5fw9-fq32-wv5p"},{"rule_id":"osv/GHSA-9v62-24cr-58cx","severity":"medium","message":"node-sass@4.9.3 (npm) is affected by GHSA-9v62-24cr-58cx","path":"package-lock.json","line":null,"fingerprint":"node-sass@4.9.3 (npm):GHSA-9v62-24cr-58cx"},{"rule_id":"osv/GHSA-r8f7-9pfq-mjmv","severity":"medium","message":"node-sass@4.9.3 (npm) is affected by GHSA-r8f7-9pfq-mjmv","path":"package-lock.json","line":null,"fingerprint":"node-sass@4.9.3 (npm):GHSA-r8f7-9pfq-mjmv"},{"rule_id":"osv/GHSA-hj48-42vr-x3v9","severity":"medium","message":"path-parse@1.0.6 (npm) is affected by GHSA-hj48-42vr-x3v9","path":"package-lock.json","line":null,"fingerprint":"path-parse@1.0.6 (npm):GHSA-hj48-42vr-x3v9"},{"rule_id":"osv/GHSA-477h-4r7f-fvrx","severity":"medium","message":"pbkdf2@3.0.17 (npm) is affected by GHSA-477h-4r7f-fvrx","path":"package-lock.json","line":null,"fingerprint":"pbkdf2@3.0.17 (npm):GHSA-477h-4r7f-fvrx"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.5.2 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"package-lock.json","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.5.2 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"package-lock.json","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-p8p7-x288-28g6","severity":"medium","message":"request@2.87.0 (npm) is affected by GHSA-p8p7-x288-28g6","path":"package-lock.json","line":null,"fingerprint":"request@2.87.0 (npm):GHSA-p8p7-x288-28g6"},{"rule_id":"osv/GHSA-p8p7-x288-28g6","severity":"medium","message":"request@2.88.0 (npm) is affected by GHSA-p8p7-x288-28g6","path":"package-lock.json","line":null,"fingerprint":"request@2.88.0 (npm):GHSA-p8p7-x288-28g6"},{"rule_id":"osv/GHSA-m6fv-jmcg-4jfg","severity":"medium","message":"send@0.16.2 (npm) is affected by GHSA-m6fv-jmcg-4jfg","path":"package-lock.json","line":null,"fingerprint":"send@0.16.2 (npm):GHSA-m6fv-jmcg-4jfg"},{"rule_id":"osv/GHSA-h9rv-jmmf-4pgx","severity":"medium","message":"serialize-javascript@1.5.0 (npm) is affected by GHSA-h9rv-jmmf-4pgx","path":"package-lock.json","line":null,"fingerprint":"serialize-javascript@1.5.0 (npm):GHSA-h9rv-jmmf-4pgx"},{"rule_id":"osv/GHSA-f5x3-32g6-xq36","severity":"medium","message":"tar@2.2.1 (npm) is affected by GHSA-f5x3-32g6-xq36","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-f5x3-32g6-xq36"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@2.2.1 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@2.2.1 (npm) is affected by GHSA-vmf3-w455-68vh","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@2.2.1 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"package-lock.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-f5x3-32g6-xq36","severity":"medium","message":"tar@4.4.1 (npm) is affected by GHSA-f5x3-32g6-xq36","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-f5x3-32g6-xq36"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@4.4.1 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@4.4.1 (npm) is affected by GHSA-vmf3-w455-68vh","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@4.4.1 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"package-lock.json","line":null,"fingerprint":"tar@4.4.1 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-72xf-g2v4-qvf3","severity":"medium","message":"tough-cookie@2.3.4 (npm) is affected by GHSA-72xf-g2v4-qvf3","path":"package-lock.json","line":null,"fingerprint":"tough-cookie@2.3.4 (npm):GHSA-72xf-g2v4-qvf3"},{"rule_id":"osv/GHSA-72xf-g2v4-qvf3","severity":"medium","message":"tough-cookie@2.4.3 (npm) is affected by GHSA-72xf-g2v4-qvf3","path":"package-lock.json","line":null,"fingerprint":"tough-cookie@2.4.3 (npm):GHSA-72xf-g2v4-qvf3"},{"rule_id":"osv/GHSA-38fc-wpqx-33j7","severity":"medium","message":"trim-off-newlines@1.0.1 (npm) is affected by GHSA-38fc-wpqx-33j7","path":"package-lock.json","line":null,"fingerprint":"trim-off-newlines@1.0.1 (npm):GHSA-38fc-wpqx-33j7"},{"rule_id":"osv/GHSA-mp7j-qc5w-4988","severity":"medium","message":"websocket-driver@0.7.0 (npm) is affected by GHSA-mp7j-qc5w-4988","path":"package-lock.json","line":null,"fingerprint":"websocket-driver@0.7.0 (npm):GHSA-mp7j-qc5w-4988"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@11.1.1 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"package-lock.json","line":null,"fingerprint":"yargs-parser@11.1.1 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@4.2.1 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"package-lock.json","line":null,"fingerprint":"yargs-parser@4.2.1 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@5.0.0 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"package-lock.json","line":null,"fingerprint":"yargs-parser@5.0.0 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@7.0.0 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"package-lock.json","line":null,"fingerprint":"yargs-parser@7.0.0 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@8.1.0 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"package-lock.json","line":null,"fingerprint":"yargs-parser@8.1.0 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@9.0.2 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"package-lock.json","line":null,"fingerprint":"yargs-parser@9.0.2 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-v6h2-p8h4-qcjw","severity":"low","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-v6h2-p8h4-qcjw","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-v6h2-p8h4-qcjw"},{"rule_id":"osv/GHSA-c6rq-rjc2-86v2","severity":"low","message":"chownr@1.0.1 (npm) is affected by GHSA-c6rq-rjc2-86v2","path":"package-lock.json","line":null,"fingerprint":"chownr@1.0.1 (npm):GHSA-c6rq-rjc2-86v2"},{"rule_id":"osv/GHSA-gxpj-cx7g-858c","severity":"low","message":"debug@2.2.0 (npm) is affected by GHSA-gxpj-cx7g-858c","path":"package-lock.json","line":null,"fingerprint":"debug@2.2.0 (npm):GHSA-gxpj-cx7g-858c"},{"rule_id":"osv/GHSA-gxpj-cx7g-858c","severity":"low","message":"debug@3.2.6 (npm) is affected by GHSA-gxpj-cx7g-858c","path":"package-lock.json","line":null,"fingerprint":"debug@3.2.6 (npm):GHSA-gxpj-cx7g-858c"},{"rule_id":"osv/GHSA-73rr-hh4g-fpgx","severity":"low","message":"diff@3.5.0 (npm) is affected by GHSA-73rr-hh4g-fpgx","path":"package-lock.json","line":null,"fingerprint":"diff@3.5.0 (npm):GHSA-73rr-hh4g-fpgx"},{"rule_id":"osv/GHSA-442j-39wm-28r2","severity":"low","message":"handlebars@4.0.12 (npm) is affected by GHSA-442j-39wm-28r2","path":"package-lock.json","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-442j-39wm-28r2"},{"rule_id":"osv/GHSA-76c9-3jph-rj3q","severity":"low","message":"on-headers@1.0.1 (npm) is affected by GHSA-76c9-3jph-rj3q","path":"package-lock.json","line":null,"fingerprint":"on-headers@1.0.1 (npm):GHSA-76c9-3jph-rj3q"},{"rule_id":"osv/GHSA-m5mm-p8h7-m29v","severity":"low","message":"serialize-javascript@1.5.0 (npm) is affected by GHSA-m5mm-p8h7-m29v","path":"package-lock.json","line":null,"fingerprint":"serialize-javascript@1.5.0 (npm):GHSA-m5mm-p8h7-m29v"},{"rule_id":"osv/GHSA-52f5-9888-hmc6","severity":"low","message":"tmp@0.0.33 (npm) is affected by GHSA-52f5-9888-hmc6","path":"package-lock.json","line":null,"fingerprint":"tmp@0.0.33 (npm):GHSA-52f5-9888-hmc6"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":0.0,"signed_commit_share":0.0706,"unpinned_manifests":7.0},"findings":[],"evidence":[{"kind":"posture","description":"packages/proppy-frint-react/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/proppy-frint-react/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/proppy-preact/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/proppy-preact/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/proppy-react/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/proppy-react/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/proppy-redux/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/proppy-redux/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/proppy-rx/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/proppy-rx/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/proppy-vue/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/proppy-vue/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/proppy/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/proppy/package.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":290.0,"function_nloc":1559.0,"mean_ccn":1.31,"p90_ccn":2.0,"complex_functions":0.0,"long_functions":0.0,"many_param_functions":0.0,"risky_nloc_share":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":1734.0,"duplicated_lines":891.0,"duplicated_share":0.5138,"files":121.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/config.js:3 and examples/react-playground/src/config.js:3","ref":"examples/preact-playground/src/config.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/config.js#L3","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/index.js:21 and examples/react-playground/src/index.js:26","ref":"examples/preact-playground/src/index.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/index.js#L21","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/proppy-redux/actions/counter.js:3 and examples/react-playground/src/proppy-redux/actions/counter.js:3","ref":"examples/preact-playground/src/proppy-redux/actions/counter.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/proppy-redux/actions/counter.js#L3","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/proppy-redux/components/PlayWithStore.js:7 and examples/react-playground/src/proppy-redux/components/PlayWithStore.js:7","ref":"examples/preact-playground/src/proppy-redux/components/PlayWithStore.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/proppy-redux/components/PlayWithStore.js#L7","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/proppy-redux/reducers/counter.js:3 and examples/react-playground/src/proppy-redux/reducers/counter.js:3","ref":"examples/preact-playground/src/proppy-redux/reducers/counter.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/proppy-redux/reducers/counter.js#L3","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/proppy-rx/PlayWithStream.js:6 and examples/react-playground/src/proppy-rx/PlayWithStream.js:6","ref":"examples/preact-playground/src/proppy-rx/PlayWithStream.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/proppy-rx/PlayWithStream.js#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/proppy/PlayCompose.js:5 and examples/react-playground/src/proppy/PlayCompose.js:5","ref":"examples/preact-playground/src/proppy/PlayCompose.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/proppy/PlayCompose.js#L5","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/proppy/PlayDidSubscribe.js:5 and examples/react-playground/src/proppy/PlayDidSubscribe.js:5","ref":"examples/preact-playground/src/proppy/PlayDidSubscribe.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/proppy/PlayDidSubscribe.js#L5","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/proppy/PlayEmit.js:5 and examples/react-playground/src/proppy/PlayEmit.js:5","ref":"examples/preact-playground/src/proppy/PlayEmit.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/proppy/PlayEmit.js#L5","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples/preact-playground/src/proppy/PlayMap.js:5 and examples/preact-playground/src/proppy/PlayShouldUpdate.js:5","ref":"examples/preact-playground/src/proppy/PlayMap.js","url":"https://github.com/fahad19/proppy/blob/4623c751cce1a2bd926ba2b25a0b41c54797e403/examples/preact-playground/src/proppy/PlayMap.js#L5","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":3.0,"weighted_findings":3.0,"scanned_lines":3005.0,"category:best-practice":3.0},"findings":[{"rule_id":"opengrep/typescript.react.best-practice.react-legacy-component","severity":"medium","message":"Legacy component lifecycle was detected - componentWillReceiveProps.","path":"packages/proppy-preact/src/ProppySubscription.tsx","line":36,"fingerprint":"typescript.react.best-practice.react-legacy-component:packages/proppy-preact/src/ProppySubscription.tsx:36"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/proppy-preact/src/attach.tsx","line":14,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/proppy-preact/src/attach.tsx:14"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/proppy-react/src/attach.tsx","line":18,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/proppy-react/src/attach.tsx:18"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":1648.0,"source_lines":3005.0,"test_ratio":0.5484,"ci_files":1.0,"cochange_share":0.5385,"cochange_commits":26.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .travis.yml","ref":".travis.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (npm run test)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["npm run test"],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":1.0,"readme_lines":268.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0},{"kind":"docs","description":"CHANGELOG.md","ref":"CHANGELOG.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":0.0,"escapes":10.0,"escapes_per_kloc":10.0},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}