{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:07.043431Z","repo":{"ref":{"host":"github.com","owner":"rbarkoch","name":"Dialedger"},"default_branch":"main","clone_url":"https://github.com/rbarkoch/Dialedger.git","html_url":"https://github.com/rbarkoch/Dialedger","description":"A conversation tracking tool that unifies emails, meetings, notes, and files into organized threads.","stars":1,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":235,"primary_language":"JavaScript","license_spdx":"GPL-3.0","created_at":"2026-01-11T21:56:44Z","pushed_at":"2026-01-26T13:00:11Z","security_policy_url":null,"distribution":{"owner_created_at":"2014-03-10T17:50:55Z","owner_type":"User","release_assets":[{"name":"Dialedger-1.3.0-arm64.dmg","size":199551892,"download_count":5,"release_tag":"1.3.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.3.0/Dialedger-1.3.0-arm64.dmg"},{"name":"Dialedger-1.3.0.AppImage","size":219121834,"download_count":5,"release_tag":"1.3.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.3.0/Dialedger-1.3.0.AppImage"},{"name":"Dialedger.1.3.0.exe","size":164761745,"download_count":4,"release_tag":"1.3.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.3.0/Dialedger.1.3.0.exe"},{"name":"Dialedger.Setup.1.3.0.exe","size":498520400,"download_count":3,"release_tag":"1.3.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.3.0/Dialedger.Setup.1.3.0.exe"},{"name":"Dialedger-1.2.0-arm64.dmg","size":199566810,"download_count":2,"release_tag":"1.2.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.2.0/Dialedger-1.2.0-arm64.dmg"},{"name":"Dialedger-1.2.0.AppImage","size":219130706,"download_count":1,"release_tag":"1.2.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.2.0/Dialedger-1.2.0.AppImage"},{"name":"Dialedger.1.2.0.exe","size":164763629,"download_count":1,"release_tag":"1.2.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.2.0/Dialedger.1.2.0.exe"},{"name":"Dialedger.Setup.1.2.0.exe","size":498532840,"download_count":1,"release_tag":"1.2.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.2.0/Dialedger.Setup.1.2.0.exe"},{"name":"Dialedger-1.1.0-arm64.dmg","size":199523627,"download_count":2,"release_tag":"1.1.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.1.0/Dialedger-1.1.0-arm64.dmg"},{"name":"Dialedger-1.1.0.AppImage","size":219130383,"download_count":1,"release_tag":"1.1.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.1.0/Dialedger-1.1.0.AppImage"},{"name":"Dialedger.1.1.0.exe","size":164764122,"download_count":1,"release_tag":"1.1.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.1.0/Dialedger.1.1.0.exe"},{"name":"Dialedger.Setup.1.1.0.exe","size":498540369,"download_count":1,"release_tag":"1.1.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.1.0/Dialedger.Setup.1.1.0.exe"},{"name":"Dialedger-1.0.1-arm64.dmg","size":199530987,"download_count":4,"release_tag":"1.0.1","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.0.1/Dialedger-1.0.1-arm64.dmg"},{"name":"Dialedger-1.0.1.AppImage","size":219138547,"download_count":4,"release_tag":"1.0.1","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.0.1/Dialedger-1.0.1.AppImage"},{"name":"Dialedger.1.0.1.exe","size":164750241,"download_count":3,"release_tag":"1.0.1","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.0.1/Dialedger.1.0.1.exe"},{"name":"Dialedger.Setup.1.0.1.exe","size":498504673,"download_count":3,"release_tag":"1.0.1","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.0.1/Dialedger.Setup.1.0.1.exe"},{"name":"Dialedger-1.0.0-arm64.dmg","size":199523187,"download_count":2,"release_tag":"1.0.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.0.0/Dialedger-1.0.0-arm64.dmg"},{"name":"Dialedger-1.0.0.AppImage","size":219138116,"download_count":1,"release_tag":"1.0.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.0.0/Dialedger-1.0.0.AppImage"},{"name":"Dialedger.1.0.0.exe","size":164750060,"download_count":1,"release_tag":"1.0.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.0.0/Dialedger.1.0.0.exe"},{"name":"Dialedger.Setup.1.0.0.exe","size":498503857,"download_count":1,"release_tag":"1.0.0","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.0.0/Dialedger.Setup.1.0.0.exe"}]}},"commit_sha":"3594418d50b697197e56e5f710ff3d489d403a4c","profile":{"lines_by_language":{"JavaScript":4152},"files_by_category":{"other":21,"source":16,"docs":6,"config":5,"generated":1},"source_lines":4152,"test_lines":0},"pillars":{"ai_provenance":{"score":31.5,"confidence":0.8,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.3146,"suspected_share":0.0,"estimated_share":0.3146,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0,"style_index":0.843},"summary":"Explicit AI attribution on 31% of first-party code added; an estimated 31% including velocity signals."},"quality":{"score":40.7,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":60.3,"duplication":33.2,"lint":48.6,"testing":15.0,"docs":65.0,"type_safety":null,"process":null},"summary":"Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 17% of function code in complex or long functions; 18% duplicated lines. Weakest area: testing."},"security":{"score":41.1,"confidence":0.85,"coverage":1.0,"label":"poor","breakdown":{"secrets":100.0,"sast":52.1,"dependencies":0.6,"ci_actions":9.8,"posture":0.0,"scorecard":null},"summary":"Security posture is poor: 229 known vulnerabilities in 42 dependencies; 1 high-severity SAST findings; 12 high-severity workflow issues. Weakest area: posture."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":20.0,"checked":20.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":42.0,"attributed_commits":7.0,"attributed_commit_share":0.16666666666666666,"effective_loc":4513.0,"attributed_loc":1420.0,"attributed_loc_share":0.3146465765566142,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 7 attributed commits, 1,420 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"12a60024748b19b4116f1ca6e9ff589f2fcae613","url":"https://github.com/rbarkoch/Dialedger/commit/12a60024748b19b4116f1ca6e9ff589f2fcae613","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"174d68862c594adf60f2992aca4d4ad12a8e207f","url":"https://github.com/rbarkoch/Dialedger/commit/174d68862c594adf60f2992aca4d4ad12a8e207f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-authored-by: Claude'","ref":"fb7070eac28fcc901e329bed4640188767fb9f5f","url":"https://github.com/rbarkoch/Dialedger/commit/fb7070eac28fcc901e329bed4640188767fb9f5f","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: on merged branch (424e754faf)","ref":"5d0acdb42e678f13e027bd2ed1b00266812526cc","url":"https://github.com/rbarkoch/Dialedger/commit/5d0acdb42e678f13e027bd2ed1b00266812526cc","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: author email noreply@anthropic.com","ref":"32f1a37a0808780ccf84c114fbed0343aa2527d5","url":"https://github.com/rbarkoch/Dialedger/commit/32f1a37a0808780ccf84c114fbed0343aa2527d5","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: author email noreply@anthropic.com","ref":"a55328f4555bda47b13922eded7fb07bab5f1869","url":"https://github.com/rbarkoch/Dialedger/commit/a55328f4555bda47b13922eded7fb07bab5f1869","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: author email noreply@anthropic.com","ref":"364972768fc0f867c0c4bd88456114fcc83e27e8","url":"https://github.com/rbarkoch/Dialedger/commit/364972768fc0f867c0c4bd88456114fcc83e27e8","weight":0.9}],"data":{"attributed_loc_by_commit":{"364972768fc0f867c0c4bd88456114fcc83e27e8":468,"a55328f4555bda47b13922eded7fb07bab5f1869":0,"32f1a37a0808780ccf84c114fbed0343aa2527d5":32,"5d0acdb42e678f13e027bd2ed1b00266812526cc":1,"fb7070eac28fcc901e329bed4640188767fb9f5f":93,"174d68862c594adf60f2992aca4d4ad12a8e207f":584,"12a60024748b19b4116f1ca6e9ff589f2fcae613":242},"tools":{"claude-code":{"name":"Claude Code","commits":7,"loc":1420,"first_seen":1768436991,"last_seen":1768954172}},"monthly":{"2025-11":{"loc":2182,"attributed_loc":0},"2026-01":{"loc":2331,"attributed_loc":1420}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":9.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":4513.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":484.0,"median_loc_per_hour":254.38020920886572,"pr_timed_units":3.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":4.0,"flagged_releases":0.0,"max_loc_per_day":760.1},"findings":[],"evidence":[],"data":{"releases":[{"from":"1.0.0","to":"1.0.1","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"1.0.1","to":"1.1.0","loc":468,"days":5.87,"loc_per_day":79.8,"flagged":false},{"from":"1.1.0","to":"1.2.0","loc":33,"days":1.73,"loc_per_day":19.1,"flagged":false},{"from":"1.2.0","to":"1.3.0","loc":1110,"days":1.46,"loc_per_day":760.1,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":4152.0,"index":0.843,"count:narrated_steps":1.0,"per_kloc:narrated_steps":0.241,"files:narrated_steps":1.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":5.0,"per_kloc:emoji_in_code":1.204,"files:emoji_in_code":2.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: // First, find the full thread object if we only have partial info","ref":"src/App.jsx:66","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/src/App.jsx#L66","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":27.0,"findings_high":1.0,"findings_medium":23.0,"findings_low":3.0,"weighted_findings":7.737,"scanned_lines":4152.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/dockerfile.security.missing-user","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"Dockerfile","line":62,"fingerprint":"dockerfile.security.missing-user:Dockerfile:62"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":92,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:92"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":93,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:93"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `filePath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":139,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:139"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"main.js","line":193,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:main.js:193"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":196,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:196"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":196,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:196"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":200,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:200"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":236,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:236"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":253,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:253"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":253,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:253"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":265,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:265"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `data` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"main.js","line":266,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:main.js:266"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"server/database.js","line":10,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:server/database.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dataPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"server/database.js","line":13,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:server/database.js:13"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `dataPath` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"server/database.js","line":14,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:server/database.js:14"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"server/index.js","line":140,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:server/index.js:140"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"server/index.js","line":141,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:server/index.js:141"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"server/index.js","line":204,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:server/index.js:204"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"server/index.js","line":218,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:server/index.js:218"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"server/index.js","line":219,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:server/index.js:219"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"server/index.js","line":233,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:server/index.js:233"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `req` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"server/index.js","line":237,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:server/index.js:237"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-regexp","severity":"medium","message":"RegExp() called with a `searchQuery` function argument, this might allow an attacker to cause a Regular Expression Denial-of-Service (ReDoS) within your application as RegExP blocks the main thread. For this reason, it is recommended to use hardcoded regexes instead. If your regex is run on user-con [confidence low]","path":"src/components/SearchBar.jsx","line":117,"fingerprint":"javascript.lang.security.audit.detect-non-literal-regexp:src/components/SearchBar.jsx:117"},{"rule_id":"opengrep/javascript.express.security.audit.express-check-csurf-middleware-usage","severity":"low","message":"A CSRF middleware was not detected in your express application. Ensure you are either using one such as `csurf` or `csrf` (see rule references) and/or you are properly doing CSRF validation in your routes with a token or cookies. [confidence low]","path":"server/index.js","line":9,"fingerprint":"javascript.express.security.audit.express-check-csurf-middleware-usage:server/index.js:9"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"src/components/ThreadView.jsx","line":275,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:src/components/ThreadView.jsx:275"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-formatstring","severity":"low","message":"Detected string concatenation with a non-literal variable in a util.format / console.log function. If an attacker injects a format specifier in the string, it will forge the log message. Try to use constant values for the format string. [confidence low]","path":"src/components/icons/Icon.jsx","line":35,"fingerprint":"javascript.lang.security.audit.unsafe-formatstring:src/components/icons/Icon.jsx:35"}],"evidence":[],"data":{"rulesets":["javascript","dockerfile"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":42.0,"vulnerabilities":229.0,"vulns_critical":3.0,"vulns_high":110.0,"vulns_medium":98.0,"vulns_low":18.0,"vulns_unknown":0.0,"penalty":303.0},"findings":[{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.7 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"package-lock.json","line":null,"fingerprint":"proxy-addr@2.0.7 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.8.3 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"package-lock.json","line":null,"fingerprint":"shell-quote@1.8.3 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@6.2.1 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-27p8-2357-5qqv","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-27p8-2357-5qqv","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-27p8-2357-5qqv"},{"rule_id":"osv/GHSA-2v35-w6hq-6mfw","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-2v35-w6hq-6mfw","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-2v35-w6hq-6mfw"},{"rule_id":"osv/GHSA-4w3w-2rp5-g8jm","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-4w3w-2rp5-g8jm","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-4w3w-2rp5-g8jm"},{"rule_id":"osv/GHSA-8344-3jmq-59r6","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-8344-3jmq-59r6","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-8344-3jmq-59r6"},{"rule_id":"osv/GHSA-93r5-fhx6-vmg9","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-93r5-fhx6-vmg9","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-93r5-fhx6-vmg9"},{"rule_id":"osv/GHSA-965w-775f-mr7g","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-965w-775f-mr7g","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-965w-775f-mr7g"},{"rule_id":"osv/GHSA-c7q8-3ch8-vqpv","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-c7q8-3ch8-vqpv","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-c7q8-3ch8-vqpv"},{"rule_id":"osv/GHSA-f6ww-3ggp-fr8h","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-f6ww-3ggp-fr8h","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-f6ww-3ggp-fr8h"},{"rule_id":"osv/GHSA-j759-j44w-7fr8","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-j759-j44w-7fr8","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-j759-j44w-7fr8"},{"rule_id":"osv/GHSA-w2rr-34g9-rvrj","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-w2rr-34g9-rvrj","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-w2rr-34g9-rvrj"},{"rule_id":"osv/GHSA-wh4c-j3r5-mjhp","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-wh4c-j3r5-mjhp","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-wh4c-j3r5-mjhp"},{"rule_id":"osv/GHSA-x4fp-j954-r2f4","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-x4fp-j954-r2f4","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-x4fp-j954-r2f4"},{"rule_id":"osv/GHSA-x6wf-f3px-wcqx","severity":"high","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-x6wf-f3px-wcqx","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-x6wf-f3px-wcqx"},{"rule_id":"osv/GHSA-7g7r-gx96-252g","severity":"high","message":"app-builder-lib@24.13.3 (npm) is affected by GHSA-7g7r-gx96-252g","path":"package-lock.json","line":null,"fingerprint":"app-builder-lib@24.13.3 (npm):GHSA-7g7r-gx96-252g"},{"rule_id":"osv/GHSA-35jp-ww65-95wh","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-35jp-ww65-95wh","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-35jp-ww65-95wh"},{"rule_id":"osv/GHSA-3g43-6gmg-66jw","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-3g43-6gmg-66jw","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-3g43-6gmg-66jw"},{"rule_id":"osv/GHSA-3pq3-5fj3-cg6v","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-3pq3-5fj3-cg6v","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-3pq3-5fj3-cg6v"},{"rule_id":"osv/GHSA-43fc-jf86-j433","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-43fc-jf86-j433","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-43fc-jf86-j433"},{"rule_id":"osv/GHSA-542g-h47m-68v8","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-542g-h47m-68v8","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-542g-h47m-68v8"},{"rule_id":"osv/GHSA-62hf-57xw-28j9","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-62hf-57xw-28j9","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-62hf-57xw-28j9"},{"rule_id":"osv/GHSA-6chq-wfr3-2hj9","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-6chq-wfr3-2hj9","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-6chq-wfr3-2hj9"},{"rule_id":"osv/GHSA-777c-7fjr-54vf","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-777c-7fjr-54vf","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-777c-7fjr-54vf"},{"rule_id":"osv/GHSA-hfxv-24rg-xrqf","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-hfxv-24rg-xrqf","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-hfxv-24rg-xrqf"},{"rule_id":"osv/GHSA-j5f8-grm9-p9fc","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-j5f8-grm9-p9fc","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-j5f8-grm9-p9fc"},{"rule_id":"osv/GHSA-p92q-9vqr-4j8v","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-p92q-9vqr-4j8v","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-p92q-9vqr-4j8v"},{"rule_id":"osv/GHSA-pf86-5x62-jrwf","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-pf86-5x62-jrwf","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-pf86-5x62-jrwf"},{"rule_id":"osv/GHSA-pmwg-cvhr-8vh7","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-pmwg-cvhr-8vh7","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-pmwg-cvhr-8vh7"},{"rule_id":"osv/GHSA-q8qp-cvcw-x6jj","severity":"high","message":"axios@1.13.2 (npm) is affected by GHSA-q8qp-cvcw-x6jj","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-q8qp-cvcw-x6jj"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.20.4 (npm) is affected by GHSA-27r3-jxmh-p828","path":"package-lock.json","line":null,"fingerprint":"body-parser@1.20.4 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.28.0 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"package-lock.json","line":null,"fingerprint":"browserslist@4.28.0 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.28.0 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"package-lock.json","line":null,"fingerprint":"browserslist@4.28.0 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-p2f4-r6v6-j797","severity":"high","message":"builder-util-runtime@9.2.4 (npm) is affected by GHSA-p2f4-r6v6-j797","path":"package-lock.json","line":null,"fingerprint":"builder-util-runtime@9.2.4 (npm):GHSA-p2f4-r6v6-j797"},{"rule_id":"osv/GHSA-532v-xpq5-8h95","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-532v-xpq5-8h95","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-532v-xpq5-8h95"},{"rule_id":"osv/GHSA-8337-3p73-46f4","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-8337-3p73-46f4","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-8337-3p73-46f4"},{"rule_id":"osv/GHSA-9f4c-93c8-jc8g","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-9f4c-93c8-jc8g","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-9f4c-93c8-jc8g"},{"rule_id":"osv/GHSA-9qh4-3jw8-366w","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-9qh4-3jw8-366w","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-9qh4-3jw8-366w"},{"rule_id":"osv/GHSA-9wfr-w7mm-pc7f","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-9wfr-w7mm-pc7f","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-9wfr-w7mm-pc7f"},{"rule_id":"osv/GHSA-gr2m-v5gq-v685","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-gr2m-v5gq-v685","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-gr2m-v5gq-v685"},{"rule_id":"osv/GHSA-h7rp-cf8h-j98x","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-h7rp-cf8h-j98x","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-h7rp-cf8h-j98x"},{"rule_id":"osv/GHSA-hq2x-r82h-9wj4","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-hq2x-r82h-9wj4","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-hq2x-r82h-9wj4"},{"rule_id":"osv/GHSA-j84w-jfhq-vhvj","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-j84w-jfhq-vhvj","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-j84w-jfhq-vhvj"},{"rule_id":"osv/GHSA-jjp3-mq3x-295m","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-jjp3-mq3x-295m","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-jjp3-mq3x-295m"},{"rule_id":"osv/GHSA-jr5w-w6x2-84p9","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-jr5w-w6x2-84p9","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-jr5w-w6x2-84p9"},{"rule_id":"osv/GHSA-v3j7-r9gq-3gjw","severity":"high","message":"electron@28.3.3 (npm) is affected by GHSA-v3j7-r9gq-3gjw","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-v3j7-r9gq-3gjw"},{"rule_id":"osv/GHSA-7pqw-9j4j-h8q3","severity":"high","message":"extract-zip@2.0.1 (npm) is affected by GHSA-7pqw-9j4j-h8q3","path":"package-lock.json","line":null,"fingerprint":"extract-zip@2.0.1 (npm):GHSA-7pqw-9j4j-h8q3"},{"rule_id":"osv/GHSA-jmr9-qjv8-65gv","severity":"high","message":"extract-zip@2.0.1 (npm) is affected by GHSA-jmr9-qjv8-65gv","path":"package-lock.json","line":null,"fingerprint":"extract-zip@2.0.1 (npm):GHSA-jmr9-qjv8-65gv"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@4.0.5 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"package-lock.json","line":null,"fingerprint":"form-data@4.0.5 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-mwp4-54f8-5fhr","severity":"high","message":"ip-address@10.1.0 (npm) is affected by GHSA-mwp4-54f8-5fhr","path":"package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-mwp4-54f8-5fhr"},{"rule_id":"osv/GHSA-4528-x5fx-h6hg","severity":"high","message":"joi@17.13.3 (npm) is affected by GHSA-4528-x5fx-h6hg","path":"package-lock.json","line":null,"fingerprint":"joi@17.13.3 (npm):GHSA-4528-x5fx-h6hg"},{"rule_id":"osv/GHSA-6h2x-m376-mqjq","severity":"high","message":"joi@17.13.3 (npm) is affected by GHSA-6h2x-m376-mqjq","path":"package-lock.json","line":null,"fingerprint":"joi@17.13.3 (npm):GHSA-6h2x-m376-mqjq"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-52cp-r559-cp3m","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@4.1.1 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-22p9-wv53-3rq4","severity":"high","message":"linkify-it@5.0.0 (npm) is affected by GHSA-22p9-wv53-3rq4","path":"package-lock.json","line":null,"fingerprint":"linkify-it@5.0.0 (npm):GHSA-22p9-wv53-3rq4"},{"rule_id":"osv/GHSA-v245-v573-v5vm","severity":"high","message":"linkify-it@5.0.0 (npm) is affected by GHSA-v245-v573-v5vm","path":"package-lock.json","line":null,"fingerprint":"linkify-it@5.0.0 (npm):GHSA-v245-v573-v5vm"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.21 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.21 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.1.2 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"package-lock.json","line":null,"fingerprint":"minimatch@3.1.2 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@5.1.6 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"package-lock.json","line":null,"fingerprint":"minimatch@5.1.6 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@5.1.6 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"package-lock.json","line":null,"fingerprint":"minimatch@5.1.6 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@5.1.6 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"package-lock.json","line":null,"fingerprint":"minimatch@5.1.6 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@9.0.5 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-44fp-w29j-9vj5","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-44fp-w29j-9vj5","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-44fp-w29j-9vj5"},{"rule_id":"osv/GHSA-4pg4-qvpc-4q3h","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-4pg4-qvpc-4q3h","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-4pg4-qvpc-4q3h"},{"rule_id":"osv/GHSA-535w-7cp7-47q4","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-535w-7cp7-47q4","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-535w-7cp7-47q4"},{"rule_id":"osv/GHSA-5528-5vmv-3xc2","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-5528-5vmv-3xc2","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-5528-5vmv-3xc2"},{"rule_id":"osv/GHSA-72gw-mp4g-v24j","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-72gw-mp4g-v24j","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-72gw-mp4g-v24j"},{"rule_id":"osv/GHSA-fjgf-rc76-4x9p","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-fjgf-rc76-4x9p","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-fjgf-rc76-4x9p"},{"rule_id":"osv/GHSA-g5hg-p3ph-g8qg","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-g5hg-p3ph-g8qg","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-g5hg-p3ph-g8qg"},{"rule_id":"osv/GHSA-v52c-386h-88mc","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-v52c-386h-88mc","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-v52c-386h-88mc"},{"rule_id":"osv/GHSA-wc9g-mqfw-jrwm","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-wc9g-mqfw-jrwm","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-wc9g-mqfw-jrwm"},{"rule_id":"osv/GHSA-xf7r-hgr6-v32p","severity":"high","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-xf7r-hgr6-v32p","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-xf7r-hgr6-v32p"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-28wg-ghj8-5hjv","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-2v37-7h3g-55p8","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-xwg4-73v4-xw9w","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-xwg4-73v4-xw9w","path":"package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-xwg4-73v4-xw9w"},{"rule_id":"osv/GHSA-2x7j-588g-ccc2","severity":"high","message":"nodemailer@7.0.10 (npm) is affected by GHSA-2x7j-588g-ccc2","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-2x7j-588g-ccc2"},{"rule_id":"osv/GHSA-p6gq-j5cr-w38f","severity":"high","message":"nodemailer@7.0.10 (npm) is affected by GHSA-p6gq-j5cr-w38f","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-p6gq-j5cr-w38f"},{"rule_id":"osv/GHSA-r7g4-qg5f-qqm2","severity":"high","message":"nodemailer@7.0.10 (npm) is affected by GHSA-r7g4-qg5f-qqm2","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-r7g4-qg5f-qqm2"},{"rule_id":"osv/GHSA-rcmh-qjqh-p98v","severity":"high","message":"nodemailer@7.0.10 (npm) is affected by GHSA-rcmh-qjqh-p98v","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-rcmh-qjqh-p98v"},{"rule_id":"osv/GHSA-v53p-9fqp-m79j","severity":"high","message":"nodemailer@7.0.10 (npm) is affected by GHSA-v53p-9fqp-m79j","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-v53p-9fqp-m79j"},{"rule_id":"osv/GHSA-37ch-88jc-xwx2","severity":"high","message":"path-to-regexp@0.1.12 (npm) is affected by GHSA-37ch-88jc-xwx2","path":"package-lock.json","line":null,"fingerprint":"path-to-regexp@0.1.12 (npm):GHSA-37ch-88jc-xwx2"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@4.0.3 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"package-lock.json","line":null,"fingerprint":"picomatch@4.0.3 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.5.6 (npm) is affected by GHSA-6g55-p6wh-862q","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.6 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.5.6 (npm) is affected by GHSA-r28c-9q8g-f849","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.6 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-mw96-cpmx-2vgc","severity":"high","message":"rollup@4.53.3 (npm) is affected by GHSA-mw96-cpmx-2vgc","path":"package-lock.json","line":null,"fingerprint":"rollup@4.53.3 (npm):GHSA-mw96-cpmx-2vgc"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.8.3 (npm) is affected by GHSA-395f-4hp3-45gv","path":"package-lock.json","line":null,"fingerprint":"shell-quote@1.8.3 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q","path":"package-lock.json","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-83g3-92jg-28cx","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-r292-9mhp-454m","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@6.2.1 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.2.5 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"package-lock.json","line":null,"fingerprint":"tmp@0.2.5 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@5.4.21 (npm) is affected by GHSA-587h-7wmj-h5pm","path":"package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-6gmq-8vp8-gcm6","severity":"medium","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-6gmq-8vp8-gcm6","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-6gmq-8vp8-gcm6"},{"rule_id":"osv/GHSA-6h8r-xr42-gp59","severity":"medium","message":"@xmldom/xmldom@0.8.11 (npm) is affected by GHSA-6h8r-xr42-gp59","path":"package-lock.json","line":null,"fingerprint":"@xmldom/xmldom@0.8.11 (npm):GHSA-6h8r-xr42-gp59"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@6.12.6 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"package-lock.json","line":null,"fingerprint":"ajv@6.12.6 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-3p68-rc4w-qgx5","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-3p68-rc4w-qgx5","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-3p68-rc4w-qgx5"},{"rule_id":"osv/GHSA-3w6x-2g7m-8v23","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-3w6x-2g7m-8v23","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-3w6x-2g7m-8v23"},{"rule_id":"osv/GHSA-42h9-826w-cgv3","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-42h9-826w-cgv3","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-42h9-826w-cgv3"},{"rule_id":"osv/GHSA-445q-vr5w-6q77","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-445q-vr5w-6q77","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-445q-vr5w-6q77"},{"rule_id":"osv/GHSA-4hqw-qxg8-jxx2","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-4hqw-qxg8-jxx2","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-4hqw-qxg8-jxx2"},{"rule_id":"osv/GHSA-5c9x-8gcm-mpgx","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-5c9x-8gcm-mpgx","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-5c9x-8gcm-mpgx"},{"rule_id":"osv/GHSA-7q8q-rj6j-mhjq","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-7q8q-rj6j-mhjq","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-7q8q-rj6j-mhjq"},{"rule_id":"osv/GHSA-898c-q2cr-xwhg","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-898c-q2cr-xwhg","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-898c-q2cr-xwhg"},{"rule_id":"osv/GHSA-9fr6-4gfg-395g","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-9fr6-4gfg-395g","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-9fr6-4gfg-395g"},{"rule_id":"osv/GHSA-fvcv-3m26-pcqx","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-fvcv-3m26-pcqx","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-fvcv-3m26-pcqx"},{"rule_id":"osv/GHSA-j8rh-479h-cp32","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-j8rh-479h-cp32","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-j8rh-479h-cp32"},{"rule_id":"osv/GHSA-jqh4-m9w3-8hp9","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-jqh4-m9w3-8hp9","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-jqh4-m9w3-8hp9"},{"rule_id":"osv/GHSA-m7pr-hjqh-92cm","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-m7pr-hjqh-92cm","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-m7pr-hjqh-92cm"},{"rule_id":"osv/GHSA-mmx7-hfxf-jppx","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-mmx7-hfxf-jppx","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-mmx7-hfxf-jppx"},{"rule_id":"osv/GHSA-mwf2-3pr3-8698","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-mwf2-3pr3-8698","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-mwf2-3pr3-8698"},{"rule_id":"osv/GHSA-pmv8-rq9r-6j72","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-pmv8-rq9r-6j72","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-pmv8-rq9r-6j72"},{"rule_id":"osv/GHSA-vf2m-468p-8v99","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-vf2m-468p-8v99","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-vf2m-468p-8v99"},{"rule_id":"osv/GHSA-vh66-26gq-q6x8","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-vh66-26gq-q6x8","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-vh66-26gq-q6x8"},{"rule_id":"osv/GHSA-w9j2-pvgh-6h63","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-w9j2-pvgh-6h63","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-w9j2-pvgh-6h63"},{"rule_id":"osv/GHSA-xx6v-rp6x-q39c","severity":"medium","message":"axios@1.13.2 (npm) is affected by GHSA-xx6v-rp6x-q39c","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-xx6v-rp6x-q39c"},{"rule_id":"osv/GHSA-w5vr-8v7q-w6rv","severity":"medium","message":"baseline-browser-mapping@2.8.31 (npm) is affected by GHSA-w5vr-8v7q-w6rv","path":"package-lock.json","line":null,"fingerprint":"baseline-browser-mapping@2.8.31 (npm):GHSA-w5vr-8v7q-w6rv"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.12 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@1.1.12 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@2.0.2 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"package-lock.json","line":null,"fingerprint":"brace-expansion@2.0.2 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-gcqx-w48m-w2h4","severity":"medium","message":"deepmerge@4.3.1 (npm) is affected by GHSA-gcqx-w48m-w2h4","path":"package-lock.json","line":null,"fingerprint":"deepmerge@4.3.1 (npm):GHSA-gcqx-w48m-w2h4"},{"rule_id":"osv/GHSA-2p8c-gr87-2676","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-2p8c-gr87-2676","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-2p8c-gr87-2676"},{"rule_id":"osv/GHSA-3c8v-cfp5-9885","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-3c8v-cfp5-9885","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-3c8v-cfp5-9885"},{"rule_id":"osv/GHSA-4f78-qhmw-8j8m","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-4f78-qhmw-8j8m","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-4f78-qhmw-8j8m"},{"rule_id":"osv/GHSA-4p4r-m79c-wq3v","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-4p4r-m79c-wq3v","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-4p4r-m79c-wq3v"},{"rule_id":"osv/GHSA-5c9j-mhmv-5xgx","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-5c9j-mhmv-5xgx","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-5c9j-mhmv-5xgx"},{"rule_id":"osv/GHSA-5rqw-r77c-jp79","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-5rqw-r77c-jp79","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-5rqw-r77c-jp79"},{"rule_id":"osv/GHSA-997q-gvvc-jwmx","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-997q-gvvc-jwmx","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-997q-gvvc-jwmx"},{"rule_id":"osv/GHSA-9pf5-hg6p-4pwp","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-9pf5-hg6p-4pwp","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-9pf5-hg6p-4pwp"},{"rule_id":"osv/GHSA-9w97-2464-8783","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-9w97-2464-8783","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-9w97-2464-8783"},{"rule_id":"osv/GHSA-f2r8-jv7c-xqmp","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-f2r8-jv7c-xqmp","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-f2r8-jv7c-xqmp"},{"rule_id":"osv/GHSA-f3pv-wv63-48x8","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-f3pv-wv63-48x8","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-f3pv-wv63-48x8"},{"rule_id":"osv/GHSA-ff2p-hmqr-hxm4","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-ff2p-hmqr-hxm4","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-ff2p-hmqr-hxm4"},{"rule_id":"osv/GHSA-fw47-9c62-h3vw","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-fw47-9c62-h3vw","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-fw47-9c62-h3vw"},{"rule_id":"osv/GHSA-jm7p-cc5g-qwxx","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-jm7p-cc5g-qwxx","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-jm7p-cc5g-qwxx"},{"rule_id":"osv/GHSA-m55f-7gqj-fr98","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-m55f-7gqj-fr98","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-m55f-7gqj-fr98"},{"rule_id":"osv/GHSA-mwmh-mq4g-g6gr","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-mwmh-mq4g-g6gr","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-mwmh-mq4g-g6gr"},{"rule_id":"osv/GHSA-p2rr-rvmm-c5fp","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-p2rr-rvmm-c5fp","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-p2rr-rvmm-c5fp"},{"rule_id":"osv/GHSA-r5p7-gp4j-qhrx","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-r5p7-gp4j-qhrx","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-r5p7-gp4j-qhrx"},{"rule_id":"osv/GHSA-v64r-4m7r-3mvq","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-v64r-4m7r-3mvq","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-v64r-4m7r-3mvq"},{"rule_id":"osv/GHSA-v93f-fgjr-hjrj","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-v93f-fgjr-hjrj","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-v93f-fgjr-hjrj"},{"rule_id":"osv/GHSA-vmqv-hx8q-j7mg","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-vmqv-hx8q-j7mg","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-vmqv-hx8q-j7mg"},{"rule_id":"osv/GHSA-vv43-5jgx-7qv8","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-vv43-5jgx-7qv8","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-vv43-5jgx-7qv8"},{"rule_id":"osv/GHSA-x562-297c-g43g","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-x562-297c-g43g","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-x562-297c-g43g"},{"rule_id":"osv/GHSA-xj5x-m3f3-5x3h","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-xj5x-m3f3-5x3h","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-xj5x-m3f3-5x3h"},{"rule_id":"osv/GHSA-xwr5-m59h-vwqr","severity":"medium","message":"electron@28.3.3 (npm) is affected by GHSA-xwr5-m59h-vwqr","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-xwr5-m59h-vwqr"},{"rule_id":"osv/GHSA-67mh-4wv8-2f99","severity":"medium","message":"esbuild@0.21.5 (npm) is affected by GHSA-67mh-4wv8-2f99","path":"package-lock.json","line":null,"fingerprint":"esbuild@0.21.5 (npm):GHSA-67mh-4wv8-2f99"},{"rule_id":"osv/GHSA-r4q5-vmmm-2653","severity":"medium","message":"follow-redirects@1.15.11 (npm) is affected by GHSA-r4q5-vmmm-2653","path":"package-lock.json","line":null,"fingerprint":"follow-redirects@1.15.11 (npm):GHSA-r4q5-vmmm-2653"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@10.5.0 (npm) is affected by GHSA-3g3m-2fjr-6pw4","path":"package-lock.json","line":null,"fingerprint":"glob@10.5.0 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-h3mg-xc3c-68pw","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-h3mg-xc3c-68pw","path":"package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-h3mg-xc3c-68pw"},{"rule_id":"osv/GHSA-j6r3-76f7-8jcv","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-j6r3-76f7-8jcv","path":"package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-j6r3-76f7-8jcv"},{"rule_id":"osv/GHSA-rpw4-54j3-4h4q","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-rpw4-54j3-4h4q","path":"package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-rpw4-54j3-4h4q"},{"rule_id":"osv/GHSA-rxp7-6hxx-x8q5","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-rxp7-6hxx-x8q5","path":"package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-rxp7-6hxx-x8q5"},{"rule_id":"osv/GHSA-v2v4-37r5-5v8g","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-v2v4-37r5-5v8g","path":"package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-v2v4-37r5-5v8g"},{"rule_id":"osv/GHSA-q7cg-457f-vx79","severity":"medium","message":"joi@17.13.3 (npm) is affected by GHSA-q7cg-457f-vx79","path":"package-lock.json","line":null,"fingerprint":"joi@17.13.3 (npm):GHSA-q7cg-457f-vx79"},{"rule_id":"osv/GHSA-wr44-6hxh-3jwq","severity":"medium","message":"joi@17.13.3 (npm) is affected by GHSA-wr44-6hxh-3jwq","path":"package-lock.json","line":null,"fingerprint":"joi@17.13.3 (npm):GHSA-wr44-6hxh-3jwq"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@4.1.1 (npm) is affected by GHSA-h67p-54hq-rp68","path":"package-lock.json","line":null,"fingerprint":"js-yaml@4.1.1 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.17.21 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"package-lock.json","line":null,"fingerprint":"lodash@4.17.21 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-7gmj-h9xc-mcxc","severity":"medium","message":"mailparser@3.9.0 (npm) is affected by GHSA-7gmj-h9xc-mcxc","path":"package-lock.json","line":null,"fingerprint":"mailparser@3.9.0 (npm):GHSA-7gmj-h9xc-mcxc"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@9.0.5 (npm) is affected by GHSA-g3hv-75wg-m249","path":"package-lock.json","line":null,"fingerprint":"minimatch@9.0.5 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-268h-hp4c-crq3","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-268h-hp4c-crq3","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-268h-hp4c-crq3"},{"rule_id":"osv/GHSA-39m8-27wv-hr27","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-39m8-27wv-hr27","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-39m8-27wv-hr27"},{"rule_id":"osv/GHSA-4ffr-jq9g-5ffx","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-4ffr-jq9g-5ffx","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-4ffr-jq9g-5ffx"},{"rule_id":"osv/GHSA-4g23-2xm8-66gc","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-4g23-2xm8-66gc","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-4g23-2xm8-66gc"},{"rule_id":"osv/GHSA-6vj9-mwq6-2f5v","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-6vj9-mwq6-2f5v","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-6vj9-mwq6-2f5v"},{"rule_id":"osv/GHSA-85x2-q946-cp5h","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-85x2-q946-cp5h","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-85x2-q946-cp5h"},{"rule_id":"osv/GHSA-8c8m-p3m8-cjg8","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-8c8m-p3m8-cjg8","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-8c8m-p3m8-cjg8"},{"rule_id":"osv/GHSA-8m3c-c648-2xjj","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-8m3c-c648-2xjj","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-8m3c-c648-2xjj"},{"rule_id":"osv/GHSA-8vvx-rff5-p5rq","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-8vvx-rff5-p5rq","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-8vvx-rff5-p5rq"},{"rule_id":"osv/GHSA-cc9r-2j5m-2m83","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-cc9r-2j5m-2m83","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-cc9r-2j5m-2m83"},{"rule_id":"osv/GHSA-g73g-hqqh-jr95","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-g73g-hqqh-jr95","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-g73g-hqqh-jr95"},{"rule_id":"osv/GHSA-m943-m63m-w62w","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-m943-m63m-w62w","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-m943-m63m-w62w"},{"rule_id":"osv/GHSA-vvjj-xcjg-gr5g","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-vvjj-xcjg-gr5g","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-vvjj-xcjg-gr5g"},{"rule_id":"osv/GHSA-wmmp-3585-3rmp","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-wmmp-3585-3rmp","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-wmmp-3585-3rmp"},{"rule_id":"osv/GHSA-wqvq-jvpq-h66f","severity":"medium","message":"nodemailer@7.0.10 (npm) is affected by GHSA-wqvq-jvpq-h66f","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-wqvq-jvpq-h66f"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@4.0.3 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"package-lock.json","line":null,"fingerprint":"picomatch@4.0.3 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.6 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.6 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@8.5.6 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"package-lock.json","line":null,"fingerprint":"postcss@8.5.6 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.14.1 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"package-lock.json","line":null,"fingerprint":"qs@6.14.1 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.14.1 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"package-lock.json","line":null,"fingerprint":"qs@6.14.1 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-q8mj-m7cp-5q26","severity":"medium","message":"qs@6.14.1 (npm) is affected by GHSA-q8mj-m7cp-5q26","path":"package-lock.json","line":null,"fingerprint":"qs@6.14.1 (npm):GHSA-q8mj-m7cp-5q26"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@6.2.1 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@6.2.1 (npm) is affected by GHSA-vmf3-w455-68vh","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@6.2.1 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"package-lock.json","line":null,"fingerprint":"tar@6.2.1 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-4w7w-66w2-5vf9","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-4w7w-66w2-5vf9","path":"package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-4w7w-66w2-5vf9"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-698v-4r3x-3vcv","path":"package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-fx2h-pf6j-xcff","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-fx2h-pf6j-xcff","path":"package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-fx2h-pf6j-xcff"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-r825-w8mm-5pxw","path":"package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-rq7h-c2jc-7f22","path":"package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/GHSA-v6wh-96g9-6wx3","severity":"medium","message":"vite@5.4.21 (npm) is affected by GHSA-v6wh-96g9-6wx3","path":"package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-v6wh-96g9-6wx3"},{"rule_id":"osv/GHSA-4x5r-pxfx-6jf8","severity":"low","message":"@babel/core@7.28.5 (npm) is affected by GHSA-4x5r-pxfx-6jf8","path":"package-lock.json","line":null,"fingerprint":"@babel/core@7.28.5 (npm):GHSA-4x5r-pxfx-6jf8"},{"rule_id":"osv/GHSA-vpq2-c234-7xj6","severity":"low","message":"@tootallnate/once@2.0.0 (npm) is affected by GHSA-vpq2-c234-7xj6","path":"package-lock.json","line":null,"fingerprint":"@tootallnate/once@2.0.0 (npm):GHSA-vpq2-c234-7xj6"},{"rule_id":"osv/GHSA-xhjh-pmcv-23jw","severity":"low","message":"axios@1.13.2 (npm) is affected by GHSA-xhjh-pmcv-23jw","path":"package-lock.json","line":null,"fingerprint":"axios@1.13.2 (npm):GHSA-xhjh-pmcv-23jw"},{"rule_id":"osv/GHSA-v422-hmwv-36x6","severity":"low","message":"body-parser@1.20.4 (npm) is affected by GHSA-v422-hmwv-36x6","path":"package-lock.json","line":null,"fingerprint":"body-parser@1.20.4 (npm):GHSA-v422-hmwv-36x6"},{"rule_id":"osv/GHSA-3qxv-5xgr-q7w9","severity":"low","message":"electron@28.3.3 (npm) is affected by GHSA-3qxv-5xgr-q7w9","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-3qxv-5xgr-q7w9"},{"rule_id":"osv/GHSA-9899-m83m-qhpj","severity":"low","message":"electron@28.3.3 (npm) is affected by GHSA-9899-m83m-qhpj","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-9899-m83m-qhpj"},{"rule_id":"osv/GHSA-98mx-cjp9-gchm","severity":"low","message":"electron@28.3.3 (npm) is affected by GHSA-98mx-cjp9-gchm","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-98mx-cjp9-gchm"},{"rule_id":"osv/GHSA-f37v-82c4-4x64","severity":"low","message":"electron@28.3.3 (npm) is affected by GHSA-f37v-82c4-4x64","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-f37v-82c4-4x64"},{"rule_id":"osv/GHSA-h3v5-h239-pg29","severity":"low","message":"electron@28.3.3 (npm) is affected by GHSA-h3v5-h239-pg29","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-h3v5-h239-pg29"},{"rule_id":"osv/GHSA-jfqx-fxh3-c62j","severity":"low","message":"electron@28.3.3 (npm) is affected by GHSA-jfqx-fxh3-c62j","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-jfqx-fxh3-c62j"},{"rule_id":"osv/GHSA-pfmc-3mgc-p6fp","severity":"low","message":"electron@28.3.3 (npm) is affected by GHSA-pfmc-3mgc-p6fp","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-pfmc-3mgc-p6fp"},{"rule_id":"osv/GHSA-x8rc-wpg4-grpf","severity":"low","message":"electron@28.3.3 (npm) is affected by GHSA-x8rc-wpg4-grpf","path":"package-lock.json","line":null,"fingerprint":"electron@28.3.3 (npm):GHSA-x8rc-wpg4-grpf"},{"rule_id":"osv/GHSA-6w3j-5fw6-r9vr","severity":"low","message":"joi@17.13.3 (npm) is affected by GHSA-6w3j-5fw6-r9vr","path":"package-lock.json","line":null,"fingerprint":"joi@17.13.3 (npm):GHSA-6w3j-5fw6-r9vr"},{"rule_id":"osv/GHSA-gg4h-3hg2-grpc","severity":"low","message":"joi@17.13.3 (npm) is affected by GHSA-gg4h-3hg2-grpc","path":"package-lock.json","line":null,"fingerprint":"joi@17.13.3 (npm):GHSA-gg4h-3hg2-grpc"},{"rule_id":"osv/GHSA-qvfw-j98x-7q72","severity":"low","message":"multer@1.4.5-lts.2 (npm) is affected by GHSA-qvfw-j98x-7q72","path":"package-lock.json","line":null,"fingerprint":"multer@1.4.5-lts.2 (npm):GHSA-qvfw-j98x-7q72"},{"rule_id":"osv/GHSA-c7w3-x93f-qmm8","severity":"low","message":"nodemailer@7.0.10 (npm) is affected by GHSA-c7w3-x93f-qmm8","path":"package-lock.json","line":null,"fingerprint":"nodemailer@7.0.10 (npm):GHSA-c7w3-x93f-qmm8"},{"rule_id":"osv/GHSA-w7fw-mjwx-w883","severity":"low","message":"qs@6.14.1 (npm) is affected by GHSA-w7fw-mjwx-w883","path":"package-lock.json","line":null,"fingerprint":"qs@6.14.1 (npm):GHSA-w7fw-mjwx-w883"},{"rule_id":"osv/GHSA-9jrq-w75r-8gcw","severity":"low","message":"vite@5.4.21 (npm) is affected by GHSA-9jrq-w75r-8gcw","path":"package-lock.json","line":null,"fingerprint":"vite@5.4.21 (npm):GHSA-9jrq-w75r-8gcw"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":1.0,"findings":17.0,"findings_high":12.0,"findings_medium":3.0,"findings_low":2.0,"penalty":139.2},"findings":[{"rule_id":"zizmor/excessive-permissions","severity":"high","message":"overly broad permissions [confidence high]","path":".github/workflows/release.yml","line":4,"fingerprint":"excessive-permissions:.github/workflows/release.yml:4"},{"rule_id":"zizmor/excessive-permissions","severity":"high","message":"overly broad permissions [confidence high]","path":".github/workflows/release.yml","line":5,"fingerprint":"excessive-permissions:.github/workflows/release.yml:5"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":21,"fingerprint":"unpinned-uses:.github/workflows/release.yml:21"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":38,"fingerprint":"unpinned-uses:.github/workflows/release.yml:38"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":45,"fingerprint":"unpinned-uses:.github/workflows/release.yml:45"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":69,"fingerprint":"unpinned-uses:.github/workflows/release.yml:69"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":80,"fingerprint":"unpinned-uses:.github/workflows/release.yml:80"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":105,"fingerprint":"unpinned-uses:.github/workflows/release.yml:105"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":121,"fingerprint":"unpinned-uses:.github/workflows/release.yml:121"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":132,"fingerprint":"unpinned-uses:.github/workflows/release.yml:132"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/release.yml","line":147,"fingerprint":"unpinned-uses:.github/workflows/release.yml:147"},{"rule_id":"zizmor/cache-poisoning","severity":"high","message":"runtime artifacts potentially vulnerable to a cache poisoning attack [confidence low]","path":".github/workflows/release.yml","line":80,"fingerprint":"cache-poisoning:.github/workflows/release.yml:80"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/release.yml","line":21,"fingerprint":"artipacked:.github/workflows/release.yml:21"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/release.yml","line":69,"fingerprint":"artipacked:.github/workflows/release.yml:69"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/release.yml","line":121,"fingerprint":"artipacked:.github/workflows/release.yml:121"},{"rule_id":"zizmor/template-injection","severity":"info","message":"code injection via template expansion [confidence low]","path":".github/workflows/release.yml","line":87,"fingerprint":"template-injection:.github/workflows/release.yml:87"},{"rule_id":"zizmor/superfluous-actions","severity":"info","message":"action functionality is already included by the runner [confidence high]","path":".github/workflows/release.yml","line":147,"fingerprint":"superfluous-actions:.github/workflows/release.yml:147"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.1429,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":1.0,"binary_assets":20.0,"suspicious":0.0},"findings":[],"evidence":[{"kind":"binary-release-asset","description":"release 1.3.0 ships Dialedger-1.3.0-arm64.dmg (5 downloads)","ref":"Dialedger-1.3.0-arm64.dmg","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.3.0/Dialedger-1.3.0-arm64.dmg","weight":0.0},{"kind":"binary-release-asset","description":"release 1.3.0 ships Dialedger-1.3.0.AppImage (5 downloads)","ref":"Dialedger-1.3.0.AppImage","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.3.0/Dialedger-1.3.0.AppImage","weight":0.0},{"kind":"binary-release-asset","description":"release 1.3.0 ships Dialedger.1.3.0.exe (4 downloads)","ref":"Dialedger.1.3.0.exe","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.3.0/Dialedger.1.3.0.exe","weight":0.0},{"kind":"binary-release-asset","description":"release 1.3.0 ships Dialedger.Setup.1.3.0.exe (3 downloads)","ref":"Dialedger.Setup.1.3.0.exe","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.3.0/Dialedger.Setup.1.3.0.exe","weight":0.0},{"kind":"binary-release-asset","description":"release 1.2.0 ships Dialedger-1.2.0-arm64.dmg (2 downloads)","ref":"Dialedger-1.2.0-arm64.dmg","url":"https://github.com/rbarkoch/Dialedger/releases/download/1.2.0/Dialedger-1.2.0-arm64.dmg","weight":0.0}],"data":{"signals":["binary-release-assets"],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":301.0,"function_nloc":3288.0,"mean_ccn":2.74,"p90_ccn":5.0,"complex_functions":4.0,"long_functions":3.0,"many_param_functions":0.0,"risky_nloc_share":0.1685},"findings":[],"evidence":[{"kind":"complex-function","description":"getEntryPreview in src/components/SearchBar.jsx: complexity 67, 105 lines","ref":"src/components/SearchBar.jsx","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/src/components/SearchBar.jsx#L130","weight":1.0},{"kind":"complex-function","description":"renderEntryContent in src/components/EntryList.jsx: complexity 38, 100 lines","ref":"src/components/EntryList.jsx","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/src/components/EntryList.jsx#L122","weight":0.6333333333333333},{"kind":"complex-function","description":"EntryForm in src/components/EntryForm.jsx: complexity 25, 80 lines","ref":"src/components/EntryForm.jsx","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/src/components/EntryForm.jsx#L14","weight":0.4166666666666667},{"kind":"complex-function","description":"handleSubmit in src/components/EntryForm.jsx: complexity 24, 115 lines","ref":"src/components/EntryForm.jsx","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/src/components/EntryForm.jsx#L170","weight":0.4},{"kind":"complex-function","description":"renderTypeSpecificFields in src/components/EntryForm.jsx: complexity 10, 154 lines","ref":"src/components/EntryForm.jsx","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/src/components/EntryForm.jsx#L338","weight":0.16666666666666666}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":2987.0,"duplicated_lines":549.0,"duplicated_share":0.1838,"files":16.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: database.js:18 and server/database.js:17","ref":"database.js","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/database.js#L18","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: database.js:32 and database.js:86","ref":"database.js","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/database.js#L32","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: main.js:89 and server/index.js:137","ref":"main.js","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/main.js#L89","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/EntryForm.jsx:635 and src/components/EntryList.jsx:320","ref":"src/components/EntryForm.jsx","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/src/components/EntryForm.jsx#L635","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/EntryList.jsx:9 and src/components/EntrySidebar.jsx:8","ref":"src/components/EntryList.jsx","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/src/components/EntryList.jsx#L9","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/ThreadView.jsx:135 and src/components/ThreadView.jsx:162","ref":"src/components/ThreadView.jsx","url":"https://github.com/rbarkoch/Dialedger/blob/3594418d50b697197e56e5f710ff3d489d403a4c/src/components/ThreadView.jsx#L135","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":12.0,"weighted_findings":12.0,"scanned_lines":4152.0,"category:best-practice":12.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/EntryForm.jsx","line":180,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/EntryForm.jsx:180"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/EntryForm.jsx","line":189,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/EntryForm.jsx:189"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/EntryForm.jsx","line":206,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/EntryForm.jsx:206"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/EntryForm.jsx","line":220,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/EntryForm.jsx:220"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/EntryForm.jsx","line":233,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/EntryForm.jsx:233"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/EntryForm.jsx","line":253,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/EntryForm.jsx:253"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/EntryList.jsx","line":34,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/EntryList.jsx:34"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"src/components/EntryList.jsx","line":441,"fingerprint":"javascript.lang.best-practice.javascript-confirm:src/components/EntryList.jsx:441"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/EntrySidebar.jsx","line":32,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/EntrySidebar.jsx:32"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"src/components/ThreadList.jsx","line":51,"fingerprint":"javascript.lang.best-practice.javascript-confirm:src/components/ThreadList.jsx:51"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/ThreadView.jsx","line":100,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/ThreadView.jsx:100"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-alert","severity":"medium","message":"found alert() call; should this be in production code?","path":"src/components/ThreadView.jsx","line":276,"fingerprint":"javascript.lang.best-practice.javascript-alert:src/components/ThreadView.jsx:276"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":1.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":4152.0,"test_ratio":0.0,"ci_files":1.0,"cochange_share":0.0,"cochange_commits":25.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/release.yml","ref":".github/workflows/release.yml","url":null,"weight":0.0}],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":124.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE.txt","ref":"LICENSE.txt","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":1346.0,"other_lines":2806.0,"files_blamed":16.0,"blame_failures":0.0,"quality:ai_findings":3.0,"quality:ai_per_kloc":2.229,"quality:other_findings":9.0,"quality:other_per_kloc":3.207,"quality:ratio":0.7,"security:ai_findings":1.0,"security:ai_per_kloc":0.743,"security:other_findings":25.0,"security:other_per_kloc":8.909,"security:ratio":0.08},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":true},"error":null}],"flags":["unreviewed-ai-risk"]}