{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:58:17.014611Z","repo":{"ref":{"host":"github.com","owner":"geoffmiller","name":"ratatat"},"default_branch":"main","clone_url":"https://github.com/geoffmiller/ratatat.git","html_url":"https://github.com/geoffmiller/ratatat","description":"React-based TUI library powered by a Rust diff engine — Ink-compatible API, 30× faster","stars":32,"forks":4,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":16389,"primary_language":"TypeScript","license_spdx":"MIT","created_at":"2026-03-05T01:43:14Z","pushed_at":"2026-04-25T18:21:49Z","security_policy_url":null,"distribution":{"owner_created_at":"2012-11-06T23:10:21Z","owner_type":"User","release_assets":[]}},"commit_sha":"7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b","profile":{"lines_by_language":{"TypeScript":42873,"JavaScript":3770,"Rust":845},"files_by_category":{"source":215,"test":117,"docs":46,"config":42,"binary":19,"other":3,"oversized":3,"generated":1},"source_lines":26489,"test_lines":20999},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"possible","breakdown":{"attributed_share":0.0,"suspected_share":0.1917,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":3.0,"flagged_releases":null},"summary":"Weak signals consistent with AI-assisted development."},"quality":{"score":49.7,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":57.1,"duplication":38.5,"lint":22.1,"testing":50.8,"docs":65.0,"type_safety":100.0,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.79, no CI test run detected; 19% of function code in complex or long functions; 16% duplicated lines. Weakest area: lint."},"security":{"score":61.0,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":98.0,"dependencies":5.9,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 114 known vulnerabilities in 25 dependencies. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":80.0,"checked":80.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":206.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":52230.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2026-03":{"loc":52230,"attributed_loc":0},"2026-04":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":20.0,"flagged_units":3.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":19695.0,"flagged_loc":10015.0,"flagged_loc_share":0.5085046966235085,"max_loc_per_hour":767.5336884989032,"median_loc_per_hour":178.127333366519,"pr_timed_units":2.0,"excluded_import_loc":32535.0},"findings":[],"evidence":[{"kind":"velocity-burst","description":"2,041 lines of first-party code in ~2.7h (768 lines/hour, 11 commit session)","ref":"2eee41140e8eb9d1f2f3901595c777c7b1bb5389","url":"https://github.com/geoffmiller/ratatat/commit/2eee41140e8eb9d1f2f3901595c777c7b1bb5389","weight":0.23026010654967097},{"kind":"velocity-burst","description":"6,847 lines of first-party code in ~11.4h (598 lines/hour, 50 commit session)","ref":"18aead124f30f91b83d20b398c60e415c0a86e8d","url":"https://github.com/geoffmiller/ratatat/commit/18aead124f30f91b83d20b398c60e415c0a86e8d","weight":0.17940608472026778},{"kind":"velocity-burst","description":"1,127 lines of first-party code in ~2.0h (571 lines/hour, 7 commit session)","ref":"4b1ff623a52a537ea318dfd8feec20ada751a7bb","url":"https://github.com/geoffmiller/ratatat/commit/4b1ff623a52a537ea318dfd8feec20ada751a7bb","weight":0.1711898734177215}],"data":{"flagged_loc_by_commit":{"dd3ddfe2886b118fb90cc6cdef84971f034deedf":674,"c3f76fbaf47ba849eb7493e5aac37e0e54ddfb69":8,"07afe696d4b99e26a4dde17cd656a66fc00d38ac":15,"817218cded6cbc5ff8507577e14fdd651648cfa2":23,"19c63015275f121067b935fc4c760f6a906f20e5":91,"fb29bc8f52dda1c4d5c7e4f71b7f34b9d0ebb4aa":86,"4d81cdc34fd88870106f402634c7bf4a1c2657c9":1,"c9f7c9dc955b0002a84dea6f990a0addbe1a92ea":188,"bf2b6c604dba72b8815a090b2a56e436fcfb97f5":311,"b52e6e22575b27b39393a95d3aa4ddf804b97fca":30,"82e31d1bebd236147ed87188386034d22bfb7a42":1,"3cbb6e60660999e0567504b06f834c0626103af4":236,"af85aef0f3d9ae01357abe47d4ec811404dbbcf1":55,"32c8d42731e08298e770adb5ab0dfb8a6376043d":284,"cc5c22ebd92318c8bd900dea0a5e4352d07e856f":419,"9435ba44fc7f70953550374bc96ed5c66dd316ee":589,"c18e876a2c7e91580bf621f7adc9a27b3af860d5":385,"32034e9e87bec29b99df9822d256289b067e8264":10,"2037e797a9f80d2aa6f01b8a93f9c6795bd4adfe":89,"f98cdbbfd34811c9430d71b60c5a8a23a93fe31e":79,"73e4b195fc930f6c5a571cfef7f007c0d37562fa":4,"fc25e450c3eeea28537605a2fac818228e354dfc":465,"b4a64823b72cea9bc99a765c8ffb3d71dfb8a759":32,"c8675425320c6fbaab6c39566115b761beeb78db":116,"ec6057583c6ffc60bf722d4264aed19078eb552b":37,"0b312a866a14165e90e366ccf9838836401ebf5c":12,"94e803a186f7878821a052bcd5f799a304c9beca":17,"34191c98524214bfb64bfb6beb0180cae464f928":60,"faca5bd3e21bf03261019ee0f0115118ad24d16e":10,"a6793fbc5b005554b642ceb37cb10c1e84356e31":5,"0160cbf6064fd240b109ff48db2fcfc0eb950634":348,"ed67f0d5fc055b38c482579965ccd6303430505e":111,"dac9f9fec15536da262bf2a6428a90babaaeee73":213,"420126f1b3376eeaddb0984bec53aabc6d439d11":5,"7fe10d28fa24e237b0077abe2607c29b36f0ec3f":10,"eceff4c170e029b3a564da21273856437bdddbbe":10,"84963efb28a3b5bddf6f3e6f52edf395ca0d9129":39,"07305710b5eb884d110f680312289981af8c7b77":438,"133d01e9ab7f8853e1a79483a97b6ad532e1a47a":68,"36c6d1db30841cafecd6b1ddfbc4196c8a7b3061":45,"907f666d2fa5c44e643f1c43036159613d1f505c":19,"bea603a68cc13537cf829783db108ed7488be1e4":60,"9a5196b70b583acac2ded9c4ec63a4f75f89ecda":31,"7c101479110567f22b8e16f22ca1480d17eac1af":2,"9957df0c880c167590309637973b8cb189b49bbc":5,"d6742b4ba23c9d28b14a5c7ab23552958a3977ea":13,"6542041092c7dd776c957c52c99c164afdd516d7":7,"3902e2df380e30024dedb9eab040927fd1d5e5d6":1072,"5931bd4e55b8ec283c30b468a732a887343c98b5":12,"18aead124f30f91b83d20b398c60e415c0a86e8d":7,"ddb7636eab2af0f05b4d8626e587853d4282782b":406,"1c90a67c95ba0889a4844c8631bc5647fe9a9353":289,"d4e1e7a69e1b5294105b5b59645247b6ec7516e0":350,"7d77875df5f4c9c1c73ae9ab83b7596bdb7d9ef2":87,"46d2ad84a478694253e80fa6d5cea250a166d259":39,"7e20c79fdc2eabc34f2b55e28b4c2a7669550c4f":32,"7e66d420da8360f347339b2be1152e8394457d1d":143,"8d04b18c32e967f13869fbdfa8d0fe602c4870c3":26,"8bbd1f137ec09090feb4b61c10acf1e3c5fcc1a5":21,"a691582be5d870bde3a9864644abfefbe856f66f":73,"2eee41140e8eb9d1f2f3901595c777c7b1bb5389":575,"8b8bd8ce155ef742106f0cb1136377d151613d08":909,"866212c799333c5496b07a8f4eaa7357701ada21":105,"4b60e9d3f37351e2d3c4fcb174907645c5411e87":1,"d975c0e5d997e86444a291ba038403049ca8937a":22,"3df63549823008a794fe1b52d67de187f63572f5":1,"1bbc197e7fbc943a139e5a23691ac2bb214542bb":1,"4b1ff623a52a537ea318dfd8feec20ada751a7bb":88},"excluded_import_commits":["1aee30bf2fb45fc107883953a75a30de4954e683","780e87aee17752b0fa59ba5cd0c5dfafcc1432ad"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":26489.0,"index":0.151,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":8.0,"per_kloc:emoji_in_code":0.302,"files:emoji_in_code":5.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":6.0,"findings_high":0.0,"findings_medium":6.0,"findings_low":0.0,"weighted_findings":1.5,"scanned_lines":26489.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"packages/ink/benchmark/render/bench-render.mjs","line":140,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:packages/ink/benchmark/render/bench-render.mjs:140"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"packages/ink/research/prototypes/ink-stage-profiler.mjs","line":387,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:packages/ink/research/prototypes/ink-stage-profiler.mjs:387"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"packages/ink/research/prototypes/ink-stage-profiler.mjs","line":395,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:packages/ink/research/prototypes/ink-stage-profiler.mjs:395"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"packages/ink/src/colorize.ts","line":23,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:packages/ink/src/colorize.ts:23"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"packages/ink/src/colorize.ts","line":30,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:packages/ink/src/colorize.ts:30"},{"rule_id":"opengrep/javascript.lang.security.html-in-template-string","severity":"medium","message":"This template literal looks like HTML and has interpolated variables. These variables are not HTML-encoded by default. If the variables contain HTML tags, these may be interpreted by the browser, resulting in cross-site scripting (XSS). [confidence low]","path":"packages/ink/src/reconciler.ts","line":245,"fingerprint":"javascript.lang.security.html-in-template-string:packages/ink/src/reconciler.ts:245"}],"evidence":[],"data":{"rulesets":["typescript","javascript","rust"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":25.0,"vulnerabilities":114.0,"vulns_critical":2.0,"vulns_high":49.0,"vulns_medium":52.0,"vulns_low":11.0,"vulns_unknown":0.0,"penalty":170.0},"findings":[{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.8.3 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"package-lock.json","line":null,"fingerprint":"shell-quote@1.8.3 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@7.5.10 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"package-lock.json","line":null,"fingerprint":"tar@7.5.10 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-qxc2-j82w-r537","severity":"high","message":"@faker-js/faker@10.3.0 (npm) is affected by GHSA-qxc2-j82w-r537","path":"package-lock.json","line":null,"fingerprint":"@faker-js/faker@10.3.0 (npm):GHSA-qxc2-j82w-r537"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.28.1 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"package-lock.json","line":null,"fingerprint":"browserslist@4.28.1 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.28.1 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"package-lock.json","line":null,"fingerprint":"browserslist@4.28.1 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@5.1.0 (npm) is affected by GHSA-3xgq-45jj-v275","path":"package-lock.json","line":null,"fingerprint":"cross-spawn@5.1.0 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-532v-xpq5-8h95","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-532v-xpq5-8h95","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-532v-xpq5-8h95"},{"rule_id":"osv/GHSA-8337-3p73-46f4","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-8337-3p73-46f4","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-8337-3p73-46f4"},{"rule_id":"osv/GHSA-9f4c-93c8-jc8g","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-9f4c-93c8-jc8g","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-9f4c-93c8-jc8g"},{"rule_id":"osv/GHSA-9qh4-3jw8-366w","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-9qh4-3jw8-366w","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-9qh4-3jw8-366w"},{"rule_id":"osv/GHSA-9wfr-w7mm-pc7f","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-9wfr-w7mm-pc7f","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-9wfr-w7mm-pc7f"},{"rule_id":"osv/GHSA-gr2m-v5gq-v685","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-gr2m-v5gq-v685","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-gr2m-v5gq-v685"},{"rule_id":"osv/GHSA-h7rp-cf8h-j98x","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-h7rp-cf8h-j98x","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-h7rp-cf8h-j98x"},{"rule_id":"osv/GHSA-hq2x-r82h-9wj4","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-hq2x-r82h-9wj4","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-hq2x-r82h-9wj4"},{"rule_id":"osv/GHSA-j84w-jfhq-vhvj","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-j84w-jfhq-vhvj","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-j84w-jfhq-vhvj"},{"rule_id":"osv/GHSA-jjp3-mq3x-295m","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-jjp3-mq3x-295m","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-jjp3-mq3x-295m"},{"rule_id":"osv/GHSA-jr5w-w6x2-84p9","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-jr5w-w6x2-84p9","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-jr5w-w6x2-84p9"},{"rule_id":"osv/GHSA-v3j7-r9gq-3gjw","severity":"high","message":"electron@23.3.13 (npm) is affected by GHSA-v3j7-r9gq-3gjw","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-v3j7-r9gq-3gjw"},{"rule_id":"osv/GHSA-7pqw-9j4j-h8q3","severity":"high","message":"extract-zip@2.0.1 (npm) is affected by GHSA-7pqw-9j4j-h8q3","path":"package-lock.json","line":null,"fingerprint":"extract-zip@2.0.1 (npm):GHSA-7pqw-9j4j-h8q3"},{"rule_id":"osv/GHSA-jmr9-qjv8-65gv","severity":"high","message":"extract-zip@2.0.1 (npm) is affected by GHSA-jmr9-qjv8-65gv","path":"package-lock.json","line":null,"fingerprint":"extract-zip@2.0.1 (npm):GHSA-jmr9-qjv8-65gv"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.14.2 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.14.2 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.14.2 (npm) is affected by GHSA-52cp-r559-cp3m","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.14.2 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.14.2 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.14.2 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-52cp-r559-cp3m","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.23 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.23 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@2.3.1 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"package-lock.json","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@4.0.3 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"package-lock.json","line":null,"fingerprint":"picomatch@4.0.3 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-49rj-9fvp-4h2h","severity":"high","message":"react-router@7.13.1 (npm) is affected by GHSA-49rj-9fvp-4h2h","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-49rj-9fvp-4h2h"},{"rule_id":"osv/GHSA-8646-j5j9-6r62","severity":"high","message":"react-router@7.13.1 (npm) is affected by GHSA-8646-j5j9-6r62","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-8646-j5j9-6r62"},{"rule_id":"osv/GHSA-8x6r-g9mw-2r78","severity":"high","message":"react-router@7.13.1 (npm) is affected by GHSA-8x6r-g9mw-2r78","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-8x6r-g9mw-2r78"},{"rule_id":"osv/GHSA-chx6-hx7r-mcp5","severity":"high","message":"react-router@7.13.1 (npm) is affected by GHSA-chx6-hx7r-mcp5","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-chx6-hx7r-mcp5"},{"rule_id":"osv/GHSA-qwww-vcr4-c8h2","severity":"high","message":"react-router@7.13.1 (npm) is affected by GHSA-qwww-vcr4-c8h2","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-qwww-vcr4-c8h2"},{"rule_id":"osv/GHSA-rxv8-25v2-qmq8","severity":"high","message":"react-router@7.13.1 (npm) is affected by GHSA-rxv8-25v2-qmq8","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-rxv8-25v2-qmq8"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.8.3 (npm) is affected by GHSA-395f-4hp3-45gv","path":"package-lock.json","line":null,"fingerprint":"shell-quote@1.8.3 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@7.5.10 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"package-lock.json","line":null,"fingerprint":"tar@7.5.10 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@7.5.10 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"package-lock.json","line":null,"fingerprint":"tar@7.5.10 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@7.5.10 (npm) is affected by GHSA-r292-9mhp-454m","path":"package-lock.json","line":null,"fingerprint":"tar@7.5.10 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@7.5.10 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"package-lock.json","line":null,"fingerprint":"ws@7.5.10 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@8.19.0 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"package-lock.json","line":null,"fingerprint":"ws@8.19.0 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-p498-v437-472g","severity":"medium","message":"@humanfs/node@0.16.7 (npm) is affected by GHSA-p498-v437-472g","path":"package-lock.json","line":null,"fingerprint":"@humanfs/node@0.16.7 (npm):GHSA-p498-v437-472g"},{"rule_id":"osv/GHSA-w5vr-8v7q-w6rv","severity":"medium","message":"baseline-browser-mapping@2.10.8 (npm) is affected by GHSA-w5vr-8v7q-w6rv","path":"package-lock.json","line":null,"fingerprint":"baseline-browser-mapping@2.10.8 (npm):GHSA-w5vr-8v7q-w6rv"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-jxxr-4gwj-5jf2","severity":"medium","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-jxxr-4gwj-5jf2","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-jxxr-4gwj-5jf2"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@5.0.4 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.4 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-2p8c-gr87-2676","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-2p8c-gr87-2676","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-2p8c-gr87-2676"},{"rule_id":"osv/GHSA-3c8v-cfp5-9885","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-3c8v-cfp5-9885","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-3c8v-cfp5-9885"},{"rule_id":"osv/GHSA-4f78-qhmw-8j8m","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-4f78-qhmw-8j8m","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-4f78-qhmw-8j8m"},{"rule_id":"osv/GHSA-4p4r-m79c-wq3v","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-4p4r-m79c-wq3v","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-4p4r-m79c-wq3v"},{"rule_id":"osv/GHSA-5c9j-mhmv-5xgx","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-5c9j-mhmv-5xgx","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-5c9j-mhmv-5xgx"},{"rule_id":"osv/GHSA-5rqw-r77c-jp79","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-5rqw-r77c-jp79","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-5rqw-r77c-jp79"},{"rule_id":"osv/GHSA-6r2x-8pq8-9489","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-6r2x-8pq8-9489","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-6r2x-8pq8-9489"},{"rule_id":"osv/GHSA-7m48-wc93-9g85","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-7m48-wc93-9g85","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-7m48-wc93-9g85"},{"rule_id":"osv/GHSA-997q-gvvc-jwmx","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-997q-gvvc-jwmx","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-997q-gvvc-jwmx"},{"rule_id":"osv/GHSA-9pf5-hg6p-4pwp","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-9pf5-hg6p-4pwp","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-9pf5-hg6p-4pwp"},{"rule_id":"osv/GHSA-9w97-2464-8783","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-9w97-2464-8783","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-9w97-2464-8783"},{"rule_id":"osv/GHSA-f2r8-jv7c-xqmp","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-f2r8-jv7c-xqmp","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-f2r8-jv7c-xqmp"},{"rule_id":"osv/GHSA-f3pv-wv63-48x8","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-f3pv-wv63-48x8","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-f3pv-wv63-48x8"},{"rule_id":"osv/GHSA-ff2p-hmqr-hxm4","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-ff2p-hmqr-hxm4","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-ff2p-hmqr-hxm4"},{"rule_id":"osv/GHSA-fw47-9c62-h3vw","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-fw47-9c62-h3vw","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-fw47-9c62-h3vw"},{"rule_id":"osv/GHSA-jm7p-cc5g-qwxx","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-jm7p-cc5g-qwxx","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-jm7p-cc5g-qwxx"},{"rule_id":"osv/GHSA-m55f-7gqj-fr98","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-m55f-7gqj-fr98","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-m55f-7gqj-fr98"},{"rule_id":"osv/GHSA-mwmh-mq4g-g6gr","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-mwmh-mq4g-g6gr","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-mwmh-mq4g-g6gr"},{"rule_id":"osv/GHSA-p2rr-rvmm-c5fp","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-p2rr-rvmm-c5fp","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-p2rr-rvmm-c5fp"},{"rule_id":"osv/GHSA-r5p7-gp4j-qhrx","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-r5p7-gp4j-qhrx","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-r5p7-gp4j-qhrx"},{"rule_id":"osv/GHSA-v64r-4m7r-3mvq","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-v64r-4m7r-3mvq","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-v64r-4m7r-3mvq"},{"rule_id":"osv/GHSA-v93f-fgjr-hjrj","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-v93f-fgjr-hjrj","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-v93f-fgjr-hjrj"},{"rule_id":"osv/GHSA-vmqv-hx8q-j7mg","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-vmqv-hx8q-j7mg","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-vmqv-hx8q-j7mg"},{"rule_id":"osv/GHSA-vv43-5jgx-7qv8","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-vv43-5jgx-7qv8","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-vv43-5jgx-7qv8"},{"rule_id":"osv/GHSA-x562-297c-g43g","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-x562-297c-g43g","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-x562-297c-g43g"},{"rule_id":"osv/GHSA-xj5x-m3f3-5x3h","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-xj5x-m3f3-5x3h","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-xj5x-m3f3-5x3h"},{"rule_id":"osv/GHSA-xwr5-m59h-vwqr","severity":"medium","message":"electron@23.3.13 (npm) is affected by GHSA-xwr5-m59h-vwqr","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-xwr5-m59h-vwqr"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@13.0.6 (npm) is affected by GHSA-3g3m-2fjr-6pw4","path":"package-lock.json","line":null,"fingerprint":"glob@13.0.6 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-pfrx-2q88-qq97","severity":"medium","message":"got@6.7.1 (npm) is affected by GHSA-pfrx-2q88-qq97","path":"package-lock.json","line":null,"fingerprint":"got@6.7.1 (npm):GHSA-pfrx-2q88-qq97"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.14.2 (npm) is affected by GHSA-h67p-54hq-rp68","path":"package-lock.json","line":null,"fingerprint":"js-yaml@3.14.2 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@4.1.1 (npm) is affected by GHSA-h67p-54hq-rp68","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-f23m-r3pf-42rh","severity":"medium","message":"lodash@4.17.23 (npm) is affected by GHSA-f23m-r3pf-42rh","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.23 (npm):GHSA-f23m-r3pf-42rh"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@10.2.4 (npm) is affected by GHSA-g3hv-75wg-m249","path":"package-lock.json","line":null,"fingerprint":"minimatch@10.2.4 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@2.3.1 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"package-lock.json","line":null,"fingerprint":"picomatch@2.3.1 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@4.0.3 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"package-lock.json","line":null,"fingerprint":"picomatch@4.0.3 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-2j2x-hqr9-3h42","severity":"medium","message":"react-router@7.13.1 (npm) is affected by GHSA-2j2x-hqr9-3h42","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-2j2x-hqr9-3h42"},{"rule_id":"osv/GHSA-337j-9hxr-rhxg","severity":"medium","message":"react-router@7.13.1 (npm) is affected by GHSA-337j-9hxr-rhxg","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-337j-9hxr-rhxg"},{"rule_id":"osv/GHSA-f22v-gfqf-p8f3","severity":"medium","message":"react-router@7.13.1 (npm) is affected by GHSA-f22v-gfqf-p8f3","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-f22v-gfqf-p8f3"},{"rule_id":"osv/GHSA-h8fp-f39c-q6mh","severity":"medium","message":"react-router@7.13.1 (npm) is affected by GHSA-h8fp-f39c-q6mh","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-h8fp-f39c-q6mh"},{"rule_id":"osv/GHSA-wrjc-x8rr-h8h6","severity":"medium","message":"react-router@7.13.1 (npm) is affected by GHSA-wrjc-x8rr-h8h6","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-wrjc-x8rr-h8h6"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@7.5.10 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"package-lock.json","line":null,"fingerprint":"tar@7.5.10 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@7.5.10 (npm) is affected by GHSA-vmf3-w455-68vh","path":"package-lock.json","line":null,"fingerprint":"tar@7.5.10 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@7.5.10 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"package-lock.json","line":null,"fingerprint":"tar@7.5.10 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-58qx-3vcg-4xpx","severity":"medium","message":"ws@8.19.0 (npm) is affected by GHSA-58qx-3vcg-4xpx","path":"package-lock.json","line":null,"fingerprint":"ws@8.19.0 (npm):GHSA-58qx-3vcg-4xpx"},{"rule_id":"osv/GHSA-48c2-rrv3-qjmp","severity":"medium","message":"yaml@2.8.2 (npm) is affected by GHSA-48c2-rrv3-qjmp","path":"package-lock.json","line":null,"fingerprint":"yaml@2.8.2 (npm):GHSA-48c2-rrv3-qjmp"},{"rule_id":"osv/GHSA-xffm-g5w8-qvg7","severity":"low","message":"@eslint/plugin-kit@0.2.8 (npm) is affected by GHSA-xffm-g5w8-qvg7","path":"package-lock.json","line":null,"fingerprint":"@eslint/plugin-kit@0.2.8 (npm):GHSA-xffm-g5w8-qvg7"},{"rule_id":"osv/GHSA-3qxv-5xgr-q7w9","severity":"low","message":"electron@23.3.13 (npm) is affected by GHSA-3qxv-5xgr-q7w9","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-3qxv-5xgr-q7w9"},{"rule_id":"osv/GHSA-9899-m83m-qhpj","severity":"low","message":"electron@23.3.13 (npm) is affected by GHSA-9899-m83m-qhpj","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-9899-m83m-qhpj"},{"rule_id":"osv/GHSA-98mx-cjp9-gchm","severity":"low","message":"electron@23.3.13 (npm) is affected by GHSA-98mx-cjp9-gchm","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-98mx-cjp9-gchm"},{"rule_id":"osv/GHSA-f37v-82c4-4x64","severity":"low","message":"electron@23.3.13 (npm) is affected by GHSA-f37v-82c4-4x64","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-f37v-82c4-4x64"},{"rule_id":"osv/GHSA-h3v5-h239-pg29","severity":"low","message":"electron@23.3.13 (npm) is affected by GHSA-h3v5-h239-pg29","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-h3v5-h239-pg29"},{"rule_id":"osv/GHSA-jfqx-fxh3-c62j","severity":"low","message":"electron@23.3.13 (npm) is affected by GHSA-jfqx-fxh3-c62j","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-jfqx-fxh3-c62j"},{"rule_id":"osv/GHSA-pfmc-3mgc-p6fp","severity":"low","message":"electron@23.3.13 (npm) is affected by GHSA-pfmc-3mgc-p6fp","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-pfmc-3mgc-p6fp"},{"rule_id":"osv/GHSA-x8rc-wpg4-grpf","severity":"low","message":"electron@23.3.13 (npm) is affected by GHSA-x8rc-wpg4-grpf","path":"package-lock.json","line":null,"fingerprint":"electron@23.3.13 (npm):GHSA-x8rc-wpg4-grpf"},{"rule_id":"osv/GHSA-g7r4-m6w7-qqqr","severity":"low","message":"esbuild@0.27.3 (npm) is affected by GHSA-g7r4-m6w7-qqqr","path":"package-lock.json","line":null,"fingerprint":"esbuild@0.27.3 (npm):GHSA-g7r4-m6w7-qqqr"},{"rule_id":"osv/GHSA-84g9-w2xq-vcv6","severity":"low","message":"react-router@7.13.1 (npm) is affected by GHSA-84g9-w2xq-vcv6","path":"package-lock.json","line":null,"fingerprint":"react-router@7.13.1 (npm):GHSA-84g9-w2xq-vcv6"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":0.0,"signed_commit_share":0.02,"unpinned_manifests":9.0},"findings":[],"evidence":[{"kind":"posture","description":"Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"benchmark/package.json has no lockfile alongside it (unpinned dependencies)","ref":"benchmark/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/core/Cargo.toml has no lockfile alongside it (unpinned dependencies)","ref":"packages/core/Cargo.toml","url":null,"weight":0.3},{"kind":"posture","description":"packages/core/__test__/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/core/__test__/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/core/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/core/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/docs/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/docs/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/ink/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/ink/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/react/__test__/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/react/__test__/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/react/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/react/package.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":1665.0,"function_nloc":16051.0,"mean_ccn":2.64,"p90_ccn":5.0,"complex_functions":25.0,"long_functions":9.0,"many_param_functions":6.0,"risky_nloc_share":0.1865},"findings":[],"evidence":[{"kind":"complex-function","description":"requireNative in packages/core/index.cjs: complexity 165, 462 lines","ref":"packages/core/index.cjs","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/packages/core/index.cjs#L63","weight":1.0},{"kind":"complex-function","description":"requireNative in packages/core/native.cjs: complexity 165, 462 lines","ref":"packages/core/native.cjs","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/packages/core/native.cjs#L63","weight":1.0},{"kind":"complex-function","description":"applyFlexStyles in packages/ink/src/styles.ts: complexity 49, 124 lines","ref":"packages/ink/src/styles.ts","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/packages/ink/src/styles.ts#L469","weight":0.8166666666666667},{"kind":"complex-function","description":"handleData in packages/core/src/input.ts: complexity 45, 118 lines","ref":"packages/core/src/input.ts","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/packages/core/src/input.ts#L46","weight":0.75},{"kind":"complex-function","description":"parseKeypress in packages/ink/src/parse-keypress.ts: complexity 44, 93 lines","ref":"packages/ink/src/parse-keypress.ts","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/packages/ink/src/parse-keypress.ts#L425","weight":0.7333333333333333},{"kind":"complex-function","description":"renderBorder in packages/ink/src/render-border.ts: complexity 32, 94 lines","ref":"packages/ink/src/render-border.ts","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/packages/ink/src/render-border.ts#L12","weight":0.5333333333333333},{"kind":"complex-function","description":"outputGetWithReusePatch in packages/ink/research/prototypes/ink-stage-profiler.mjs: complexity 29, 97 lines","ref":"packages/ink/research/prototypes/ink-stage-profiler.mjs","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/packages/ink/research/prototypes/ink-stage-profiler.mjs#L291","weight":0.48333333333333334},{"kind":"complex-function","description":"(anonymous) in examples/rattata.tsx: complexity 27, 64 lines","ref":"examples/rattata.tsx","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/examples/rattata.tsx#L415","weight":0.45},{"kind":"complex-function","description":"tokenizeAnsi in packages/ink/src/ansi-tokenizer.ts: complexity 27, 147 lines","ref":"packages/ink/src/ansi-tokenizer.ts","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/packages/ink/src/ansi-tokenizer.ts#L324","weight":0.45},{"kind":"complex-function","description":"renderNodeToOutput in packages/ink/src/render-node-to-output.ts: complexity 27, 90 lines","ref":"packages/ink/src/render-node-to-output.ts","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/packages/ink/src/render-node-to-output.ts#L179","weight":0.45}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":18258.0,"duplicated_lines":2901.0,"duplicated_share":0.1589,"files":215.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: benchmark/startup/bench-startup.mjs:82 and packages/ink/research/prototypes/ink-stage-profiler.mjs:60","ref":"benchmark/startup/bench-startup.mjs","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/benchmark/startup/bench-startup.mjs#L82","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: benchmark/startup/ink-startup.mjs:6 and benchmark/startup/ratatat-startup.mjs:6","ref":"benchmark/startup/ink-startup.mjs","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/benchmark/startup/ink-startup.mjs#L6","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: compat-test/aria.tsx:18 and packages/ink/examples/aria/aria.tsx:21","ref":"compat-test/aria.tsx","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/compat-test/aria.tsx#L18","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: compat-test/borders.tsx:3 and compat-test/box-backgrounds.tsx:3","ref":"compat-test/borders.tsx","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/compat-test/borders.tsx#L3","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: compat-test/borders.tsx:19 and examples/borders.tsx:16","ref":"compat-test/borders.tsx","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/compat-test/borders.tsx#L19","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: compat-test/box-backgrounds.tsx:19 and examples/box-backgrounds.tsx:16","ref":"compat-test/box-backgrounds.tsx","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/compat-test/box-backgrounds.tsx#L19","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: compat-test/box-backgrounds.tsx:71 and packages/ink/examples/box-backgrounds/box-backgrounds.tsx:90","ref":"compat-test/box-backgrounds.tsx","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/compat-test/box-backgrounds.tsx#L71","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: compat-test/chat.tsx:54 and packages/ink/examples/chat/chat.tsx:39","ref":"compat-test/chat.tsx","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/compat-test/chat.tsx#L54","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: compat-test/concurrent-suspense.tsx:62 and packages/ink/examples/concurrent-suspense/concurrent-suspense.tsx:56","ref":"compat-test/concurrent-suspense.tsx","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/compat-test/concurrent-suspense.tsx#L62","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: compat-test/cursor-ime.tsx:24 and packages/ink/examples/cursor-ime/cursor-ime.tsx:24","ref":"compat-test/cursor-ime.tsx","url":"https://github.com/geoffmiller/ratatat/blob/7215cd4bc7bea1e1bcbd0c813d7326f49b26e14b/compat-test/cursor-ime.tsx#L24","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":160.0,"weighted_findings":160.0,"scanned_lines":26489.0,"category:best-practice":160.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":56,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:56"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":66,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:66"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":73,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:73"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":78,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:78"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":79,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:79"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":89,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:89"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":94,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:94"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":95,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:95"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":110,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:110"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":115,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:115"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":116,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:116"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":126,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:126"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":131,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:131"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":132,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:132"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":143,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:143"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":148,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:148"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":149,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:149"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":159,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:159"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":164,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:164"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":165,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:165"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":178,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:178"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":183,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:183"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":184,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:184"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":194,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:194"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":199,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:199"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":200,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:200"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":210,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:210"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":215,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:215"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":216,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:216"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":230,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:230"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":235,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:235"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":236,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:236"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":246,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:246"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":251,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:251"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":252,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:252"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":267,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:267"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":272,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:272"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":273,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:273"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":283,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:283"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":288,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:288"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":289,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:289"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":301,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:301"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":306,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:306"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":307,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:307"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":317,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:317"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":322,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:322"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":323,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:323"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":335,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:335"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":340,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:340"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":341,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:341"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":351,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:351"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":356,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:356"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":357,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:357"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":369,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:369"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":374,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:374"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":375,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:375"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":385,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:385"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":390,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:390"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":391,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:391"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":403,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:403"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":408,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:408"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":409,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:409"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":419,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:419"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":424,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:424"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":425,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:425"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":436,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:436"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":441,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:441"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":442,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:442"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":452,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:452"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":457,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:457"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":458,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:458"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":472,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:472"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":477,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:477"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":478,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:478"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":488,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:488"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":493,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:493"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":494,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:494"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":504,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:504"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":509,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:509"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/index.cjs","line":510,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/index.cjs:510"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":56,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:56"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":66,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:66"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":73,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:73"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":78,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:78"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":79,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:79"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":89,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:89"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":94,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:94"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":95,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:95"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":110,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:110"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":115,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:115"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":116,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:116"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":126,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:126"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":131,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:131"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":132,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:132"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":143,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:143"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":148,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:148"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":149,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:149"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":159,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:159"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":164,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:164"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":165,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:165"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":178,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:178"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":183,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:183"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":184,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:184"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":194,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:194"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":199,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:199"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":200,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:200"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":210,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:210"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":215,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:215"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":216,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:216"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":230,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:230"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":235,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:235"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":236,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:236"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":246,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:246"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":251,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:251"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":252,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:252"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":267,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:267"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":272,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:272"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":273,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:273"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":283,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:283"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":288,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:288"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":289,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:289"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":301,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:301"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":306,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:306"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":307,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:307"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":317,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:317"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":322,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:322"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":323,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:323"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":335,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:335"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":340,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:340"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":341,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:341"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":351,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:351"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":356,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:356"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":357,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:357"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":369,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:369"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":374,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:374"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":375,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:375"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":385,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:385"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":390,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:390"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":391,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:391"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":403,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:403"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":408,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:408"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":409,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:409"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":419,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:419"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":424,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:424"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":425,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:425"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":436,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:436"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":441,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:441"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":442,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:442"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":452,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:452"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":457,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:457"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":458,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:458"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":472,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:472"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":477,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:477"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":478,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:478"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":488,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:488"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":493,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:493"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":494,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:494"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":504,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:504"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":509,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:509"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"packages/core/native.cjs","line":510,"fingerprint":"javascript.lang.best-practice.lazy-load-module:packages/core/native.cjs:510"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.5752,"test_lines":20999.0,"source_lines":26489.0,"test_ratio":0.7927,"ci_files":0.0,"cochange_share":0.1438,"cochange_commits":153.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":78.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":1.0,"escapes":65.0,"escapes_per_kloc":2.972},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: compat-test/tsconfig.json","ref":"compat-test/tsconfig.json","url":null,"weight":0.0}],"data":{},"error":null}],"flags":[]}