{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:08.035704Z","repo":{"ref":{"host":"github.com","owner":"thiagomuller","name":"financial_control"},"default_branch":"main","clone_url":"https://github.com/thiagomuller/financial_control.git","html_url":"https://github.com/thiagomuller/financial_control","description":"Vibe coded, personal usage, localhost only, financial control","stars":0,"forks":0,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":237,"primary_language":"Go","license_spdx":"MIT","created_at":"2026-04-24T16:21:11Z","pushed_at":"2026-04-30T02:41:48Z","security_policy_url":null,"distribution":{"owner_created_at":"2018-07-19T16:09:48Z","owner_type":"User","release_assets":[]}},"commit_sha":"086005e39ef696400f81c9467d6462b23832f1d6","profile":{"lines_by_language":{"Go":3724,"TypeScript":2749},"files_by_category":{"source":52,"other":36,"test":26,"config":17,"docs":4,"generated":2,"binary":1},"source_lines":4269,"test_lines":2204},"pillars":{"ai_provenance":{"score":38.3,"confidence":0.71,"coverage":1.0,"label":"explicit","breakdown":{"attributed_share":0.3833,"suspected_share":0.0,"estimated_share":0.3833,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":null,"style_index":0.0},"summary":"Explicit AI attribution on 38% of first-party code added; an estimated 38% including velocity signals."},"quality":{"score":63.5,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":78.1,"duplication":38.1,"lint":70.4,"testing":55.0,"docs":65.0,"type_safety":100.0,"process":null},"summary":"Code quality is weak: test-to-source ratio 0.52, no CI test run detected; 8% of function code in complex or long functions; 16% duplicated lines. Weakest area: duplication."},"security":{"score":55.1,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":70.9,"dependencies":0.9,"ci_actions":null,"posture":20.0,"scorecard":null},"summary":"Security posture is weak: 197 known vulnerabilities in 42 dependencies; 2 high-severity SAST findings. Weakest area: dependencies."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":17.0,"checked":17.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":6.0,"attributed_commits":2.0,"attributed_commit_share":0.3333333333333333,"effective_loc":7612.0,"attributed_loc":2918.0,"attributed_loc_share":0.383342091434577,"tools_detected":1.0},"findings":[],"evidence":[{"kind":"attribution-summary","description":"Claude Code: 2 attributed commits, 2,918 lines added","ref":null,"url":null,"weight":1.0},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"25c4ab33fc5cf0d8fe3abbc52c2fc93ed0398734","url":"https://github.com/thiagomuller/financial_control/commit/25c4ab33fc5cf0d8fe3abbc52c2fc93ed0398734","weight":0.9},{"kind":"attributed-commit","description":"Claude Code: trailer 'Co-Authored-By: Claude'","ref":"af8b7178d49b677f0222854fba7dd1b84b7a85c9","url":"https://github.com/thiagomuller/financial_control/commit/af8b7178d49b677f0222854fba7dd1b84b7a85c9","weight":0.9}],"data":{"attributed_loc_by_commit":{"af8b7178d49b677f0222854fba7dd1b84b7a85c9":1649,"25c4ab33fc5cf0d8fe3abbc52c2fc93ed0398734":1269},"tools":{"claude-code":{"name":"Claude Code","commits":2,"loc":2918,"first_seen":1777240646,"last_seen":1777378466}},"monthly":{"2026-04":{"loc":7612,"attributed_loc":2918}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":2.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":0.0,"pre_ai_era_burst_loc":0.0,"measured_loc":2918.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":394.7336923997606,"median_loc_per_hour":355.6181971767405,"pr_timed_units":2.0,"excluded_import_loc":4694.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["f3306c59a3497c38c90171aca41105e0f19cd8c1"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":4269.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":3.0,"findings_high":2.0,"findings_medium":1.0,"findings_low":0.0,"weighted_findings":4.2,"scanned_lines":4269.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/dockerfile.security.missing-user","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"my_finances_api/Dockerfile","line":15,"fingerprint":"dockerfile.security.missing-user:my_finances_api/Dockerfile:15"},{"rule_id":"opengrep/dockerfile.security.missing-user","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"my_finances_ui/Dockerfile","line":14,"fingerprint":"dockerfile.security.missing-user:my_finances_ui/Dockerfile:14"},{"rule_id":"opengrep/go.lang.security.audit.net.use-tls","severity":"medium","message":"Found an HTTP server without TLS. Use 'http.ListenAndServeTLS' instead. See https://golang.org/pkg/net/http/#ListenAndServeTLS for more information. [confidence medium]","path":"my_finances_api/main.go","line":41,"fingerprint":"go.lang.security.audit.net.use-tls:my_finances_api/main.go:41"}],"evidence":[],"data":{"rulesets":["go","typescript","javascript","dockerfile"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":42.0,"vulnerabilities":197.0,"vulns_critical":10.0,"vulns_high":67.0,"vulns_medium":96.0,"vulns_low":17.0,"vulns_unknown":7.0,"penalty":285.0},"findings":[{"rule_id":"osv/GHSA-jppx-rxg9-jmrx","severity":"critical","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5005, GHSA-jppx-rxg9-jmrx","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-jppx-rxg9-jmrx"},{"rule_id":"osv/GHSA-f5wc-c3c7-36mc","severity":"critical","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5006, GHSA-f5wc-c3c7-36mc","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-f5wc-c3c7-36mc"},{"rule_id":"osv/GHSA-vgwf-h737-ff37","severity":"critical","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5017, GHSA-vgwf-h737-ff37","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-vgwf-h737-ff37"},{"rule_id":"osv/GHSA-89gr-r52h-f8rx","severity":"critical","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5019, GHSA-89gr-r52h-f8rx","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-89gr-r52h-f8rx"},{"rule_id":"osv/GHSA-rm3j-f69w-wqmq","severity":"critical","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5020, GHSA-rm3j-f69w-wqmq","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-rm3j-f69w-wqmq"},{"rule_id":"osv/GHSA-5cgq-3rg8-m6cv","severity":"critical","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5021, GHSA-5cgq-3rg8-m6cv","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-5cgq-3rg8-m6cv"},{"rule_id":"osv/GHSA-x527-x647-q7gg","severity":"critical","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5023, GHSA-x527-x647-q7gg","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-x527-x647-q7gg"},{"rule_id":"osv/GHSA-67c8-pqhq-4rmx","severity":"critical","message":"piscina@5.1.4 (npm) is affected by GHSA-67c8-pqhq-4rmx","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"piscina@5.1.4 (npm):GHSA-67c8-pqhq-4rmx"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.7 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"proxy-addr@2.0.7 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@7.5.13 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"tar@7.5.13 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-259r-337f-4rfw","severity":"high","message":"github.com/klauspost/compress@1.18.5 (Go) is affected by GO-2026-5841, GHSA-259r-337f-4rfw","path":"my_finances_api/go.mod","line":null,"fingerprint":"github.com/klauspost/compress@1.18.5 (Go):GHSA-259r-337f-4rfw"},{"rule_id":"osv/GHSA-hfg8-hc9c-6c3h","severity":"high","message":"github.com/moby/go-archive@0.2.0 (Go) is affected by GO-2026-6253, GHSA-hfg8-hc9c-6c3h","path":"my_finances_api/go.mod","line":null,"fingerprint":"github.com/moby/go-archive@0.2.0 (Go):GHSA-hfg8-hc9c-6c3h"},{"rule_id":"osv/GHSA-q4h4-gmj2-qvw2","severity":"high","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5013, GHSA-q4h4-gmj2-qvw2","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-q4h4-gmj2-qvw2"},{"rule_id":"osv/GHSA-w879-237q-wc7r","severity":"high","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5018, GHSA-w879-237q-wc7r","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-w879-237q-wc7r"},{"rule_id":"osv/GHSA-39pv-4j6c-2g6v","severity":"high","message":"@angular/common@21.2.9 (npm) is affected by GHSA-39pv-4j6c-2g6v","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/common@21.2.9 (npm):GHSA-39pv-4j6c-2g6v"},{"rule_id":"osv/GHSA-48r7-hpm6-gfxm","severity":"high","message":"@angular/common@21.2.9 (npm) is affected by GHSA-48r7-hpm6-gfxm","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/common@21.2.9 (npm):GHSA-48r7-hpm6-gfxm"},{"rule_id":"osv/GHSA-jhpw-976m-542j","severity":"high","message":"@angular/common@21.2.9 (npm) is affected by GHSA-jhpw-976m-542j","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/common@21.2.9 (npm):GHSA-jhpw-976m-542j"},{"rule_id":"osv/GHSA-p3vc-36g9-x9gr","severity":"high","message":"@angular/common@21.2.9 (npm) is affected by GHSA-p3vc-36g9-x9gr","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/common@21.2.9 (npm):GHSA-p3vc-36g9-x9gr"},{"rule_id":"osv/GHSA-q6f4-qqrg-jv6x","severity":"high","message":"@angular/common@21.2.9 (npm) is affected by GHSA-q6f4-qqrg-jv6x","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/common@21.2.9 (npm):GHSA-q6f4-qqrg-jv6x"},{"rule_id":"osv/GHSA-jj27-h5hq-8x99","severity":"high","message":"@angular/compiler@21.2.9 (npm) is affected by GHSA-jj27-h5hq-8x99","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/compiler@21.2.9 (npm):GHSA-jj27-h5hq-8x99"},{"rule_id":"osv/GHSA-jj27-h5hq-8x99","severity":"high","message":"@angular/core@21.2.9 (npm) is affected by GHSA-jj27-h5hq-8x99","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/core@21.2.9 (npm):GHSA-jj27-h5hq-8x99"},{"rule_id":"osv/GHSA-rgjc-h3x7-9mwg","severity":"high","message":"@angular/core@21.2.9 (npm) is affected by GHSA-rgjc-h3x7-9mwg","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/core@21.2.9 (npm):GHSA-rgjc-h3x7-9mwg"},{"rule_id":"osv/GHSA-57xq-rjx2-v5xh","severity":"high","message":"@angular/router@21.2.9 (npm) is affected by GHSA-57xq-rjx2-v5xh","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/router@21.2.9 (npm):GHSA-57xq-rjx2-v5xh"},{"rule_id":"osv/GHSA-62vg-58rm-qff7","severity":"high","message":"@angular/router@21.2.9 (npm) is affected by GHSA-62vg-58rm-qff7","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/router@21.2.9 (npm):GHSA-62vg-58rm-qff7"},{"rule_id":"osv/GHSA-ff3f-86qr-9cv3","severity":"high","message":"@angular/router@21.2.9 (npm) is affected by GHSA-ff3f-86qr-9cv3","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/router@21.2.9 (npm):GHSA-ff3f-86qr-9cv3"},{"rule_id":"osv/GHSA-22jm-h49p-29qw","severity":"high","message":"@modelcontextprotocol/sdk@1.26.0 (npm) is affected by GHSA-22jm-h49p-29qw","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.26.0 (npm):GHSA-22jm-h49p-29qw"},{"rule_id":"osv/GHSA-46jr-4wx8-v453","severity":"high","message":"@modelcontextprotocol/sdk@1.26.0 (npm) is affected by GHSA-46jr-4wx8-v453","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.26.0 (npm):GHSA-46jr-4wx8-v453"},{"rule_id":"osv/GHSA-6qxp-vccf-f47h","severity":"high","message":"@modelcontextprotocol/sdk@1.26.0 (npm) is affected by GHSA-6qxp-vccf-f47h","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.26.0 (npm):GHSA-6qxp-vccf-f47h"},{"rule_id":"osv/GHSA-f897-62hf-6gxq","severity":"high","message":"@modelcontextprotocol/sdk@1.26.0 (npm) is affected by GHSA-f897-62hf-6gxq","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.26.0 (npm):GHSA-f897-62hf-6gxq"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@2.2.2 (npm) is affected by GHSA-27r3-jxmh-p828","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"body-parser@2.2.2 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.28.2 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"browserslist@4.28.2 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.28.2 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"browserslist@4.28.2 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-4c8g-83qw-93j6","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-4c8g-83qw-93j6","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-4c8g-83qw-93j6"},{"rule_id":"osv/GHSA-7p8r-x3mc-p8w7","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-7p8r-x3mc-p8w7","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-7p8r-x3mc-p8w7"},{"rule_id":"osv/GHSA-f65p-4m7j-42xc","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-f65p-4m7j-42xc","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-f65p-4m7j-42xc"},{"rule_id":"osv/GHSA-jqff-g426-hqxp","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-jqff-g426-hqxp","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-jqff-g426-hqxp"},{"rule_id":"osv/GHSA-q3j6-qgpj-74h6","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-q3j6-qgpj-74h6","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-q3j6-qgpj-74h6"},{"rule_id":"osv/GHSA-qw65-cvwx-89v3","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-qw65-cvwx-89v3","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-qw65-cvwx-89v3"},{"rule_id":"osv/GHSA-v2hh-gcrm-f6hx","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-v2hh-gcrm-f6hx","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-v2hh-gcrm-f6hx"},{"rule_id":"osv/GHSA-v39h-62p7-jpjc","severity":"high","message":"fast-uri@3.1.0 (npm) is affected by GHSA-v39h-62p7-jpjc","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-v39h-62p7-jpjc"},{"rule_id":"osv/GHSA-88fw-hqm2-52qc","severity":"high","message":"hono@4.12.14 (npm) is affected by GHSA-88fw-hqm2-52qc","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-88fw-hqm2-52qc"},{"rule_id":"osv/GHSA-v56q-mh7h-f735","severity":"high","message":"immutable@5.1.5 (npm) is affected by GHSA-v56q-mh7h-f735","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"immutable@5.1.5 (npm):GHSA-v56q-mh7h-f735"},{"rule_id":"osv/GHSA-xvcm-6775-5m9r","severity":"high","message":"immutable@5.1.5 (npm) is affected by GHSA-xvcm-6775-5m9r","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"immutable@5.1.5 (npm):GHSA-xvcm-6775-5m9r"},{"rule_id":"osv/GHSA-mwp4-54f8-5fhr","severity":"high","message":"ip-address@10.1.0 (npm) is affected by GHSA-mwp4-54f8-5fhr","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-mwp4-54f8-5fhr"},{"rule_id":"osv/GHSA-28wg-ghj8-5hjv","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-28wg-ghj8-5hjv","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-28wg-ghj8-5hjv"},{"rule_id":"osv/GHSA-2v37-7h3g-55p8","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-2v37-7h3g-55p8","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-2v37-7h3g-55p8"},{"rule_id":"osv/GHSA-xwg4-73v4-xw9w","severity":"high","message":"nanoid@3.3.11 (npm) is affected by GHSA-xwg4-73v4-xw9w","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"nanoid@3.3.11 (npm):GHSA-xwg4-73v4-xw9w"},{"rule_id":"osv/GHSA-w4pp-8pjf-rmxw","severity":"high","message":"pacote@21.3.1 (npm) is affected by GHSA-w4pp-8pjf-rmxw","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"pacote@21.3.1 (npm):GHSA-w4pp-8pjf-rmxw"},{"rule_id":"osv/GHSA-x9g3-xrwr-cwfg","severity":"high","message":"piscina@5.1.4 (npm) is affected by GHSA-x9g3-xrwr-cwfg","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"piscina@5.1.4 (npm):GHSA-x9g3-xrwr-cwfg"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@8.5.10 (npm) is affected by GHSA-6g55-p6wh-862q","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"postcss@8.5.10 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@8.5.10 (npm) is affected by GHSA-r28c-9q8g-f849","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"postcss@8.5.10 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-52v5-jr5w-gjxr","severity":"high","message":"sigstore@4.1.0 (npm) is affected by GHSA-52v5-jr5w-gjxr","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"sigstore@4.1.0 (npm):GHSA-52v5-jr5w-gjxr"},{"rule_id":"osv/GHSA-68fv-2mgg-jv7q","severity":"high","message":"source-map-js@1.2.1 (npm) is affected by GHSA-68fv-2mgg-jv7q","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"source-map-js@1.2.1 (npm):GHSA-68fv-2mgg-jv7q"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@7.5.13 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"tar@7.5.13 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@7.5.13 (npm) is affected by GHSA-r292-9mhp-454m","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"tar@7.5.13 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@6.25.0 (npm) is affected by GHSA-2m5v-pch6-74hx","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@6.25.0 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@6.25.0 (npm) is affected by GHSA-rfgv-xxqx-mfg5","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-vxpw-j846-p89q","severity":"high","message":"undici@6.25.0 (npm) is affected by GHSA-vxpw-j846-p89q","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-vxpw-j846-p89q"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@6.25.0 (npm) is affected by GHSA-xjj6-f33q-929c","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-2m5v-pch6-74hx","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-2m5v-pch6-74hx","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-2m5v-pch6-74hx"},{"rule_id":"osv/GHSA-4cwx-7wf7-3272","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-4cwx-7wf7-3272","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-4cwx-7wf7-3272"},{"rule_id":"osv/GHSA-4w7w-5xrc-9h26","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-4w7w-5xrc-9h26","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-4w7w-5xrc-9h26"},{"rule_id":"osv/GHSA-hm92-r4w5-c3mj","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-hm92-r4w5-c3mj","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-hm92-r4w5-c3mj"},{"rule_id":"osv/GHSA-qrxm-fqhp-jwvm","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-qrxm-fqhp-jwvm","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-qrxm-fqhp-jwvm"},{"rule_id":"osv/GHSA-rfgv-xxqx-mfg5","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-rfgv-xxqx-mfg5","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-rfgv-xxqx-mfg5"},{"rule_id":"osv/GHSA-vmh5-mc38-953g","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-vmh5-mc38-953g","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-vmh5-mc38-953g"},{"rule_id":"osv/GHSA-vxpw-j846-p89q","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-vxpw-j846-p89q","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-vxpw-j846-p89q"},{"rule_id":"osv/GHSA-w293-vg96-wgc3","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-w293-vg96-wgc3","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-w293-vg96-wgc3"},{"rule_id":"osv/GHSA-xjj6-f33q-929c","severity":"high","message":"undici@7.24.4 (npm) is affected by GHSA-xjj6-f33q-929c","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-xjj6-f33q-929c"},{"rule_id":"osv/GHSA-587h-7wmj-h5pm","severity":"high","message":"vite@7.3.2 (npm) is affected by GHSA-587h-7wmj-h5pm","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"vite@7.3.2 (npm):GHSA-587h-7wmj-h5pm"},{"rule_id":"osv/GHSA-mrhx-c7xc-m3w5","severity":"high","message":"zod@4.3.6 (npm) is affected by GHSA-mrhx-c7xc-m3w5","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"zod@4.3.6 (npm):GHSA-mrhx-c7xc-m3w5"},{"rule_id":"osv/GO-2026-6865","severity":"medium","message":"github.com/klauspost/compress@1.18.5 (Go) is affected by GO-2026-6865","path":"my_finances_api/go.mod","line":null,"fingerprint":"github.com/klauspost/compress@1.18.5 (Go):GO-2026-6865"},{"rule_id":"osv/GHSA-mjcv-p78q-w5fw","severity":"medium","message":"github.com/moby/sys/user@0.4.0 (Go) is affected by GO-2026-6686, GHSA-mjcv-p78q-w5fw","path":"my_finances_api/go.mod","line":null,"fingerprint":"github.com/moby/sys/user@0.4.0 (Go):GHSA-mjcv-p78q-w5fw"},{"rule_id":"osv/GO-2026-5158","severity":"medium","message":"go.opentelemetry.io/otel@1.41.0 (Go) is affected by GO-2026-5158","path":"my_finances_api/go.mod","line":null,"fingerprint":"go.opentelemetry.io/otel@1.41.0 (Go):GO-2026-5158"},{"rule_id":"osv/GHSA-q7gw-24fr-5p69","severity":"medium","message":"go.opentelemetry.io/otel/trace@1.41.0 (Go) is affected by GHSA-q7gw-24fr-5p69","path":"my_finances_api/go.mod","line":null,"fingerprint":"go.opentelemetry.io/otel/trace@1.41.0 (Go):GHSA-q7gw-24fr-5p69"},{"rule_id":"osv/GHSA-45gg-vh54-h5m9","severity":"medium","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5014, GHSA-45gg-vh54-h5m9","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-45gg-vh54-h5m9"},{"rule_id":"osv/GHSA-78mq-xcr3-xm33","severity":"medium","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5015, GHSA-78mq-xcr3-xm33","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-78mq-xcr3-xm33"},{"rule_id":"osv/GHSA-qpw4-5x99-6vjp","severity":"medium","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5016, GHSA-qpw4-5x99-6vjp","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-qpw4-5x99-6vjp"},{"rule_id":"osv/GHSA-9m57-25v3-79x9","severity":"medium","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5033, GHSA-9m57-25v3-79x9","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GHSA-9m57-25v3-79x9"},{"rule_id":"osv/GO-2026-5932","severity":"medium","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-5932","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GO-2026-5932"},{"rule_id":"osv/GO-2026-6303","severity":"medium","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-6303","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GO-2026-6303"},{"rule_id":"osv/GO-2026-6354","severity":"medium","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-6354","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GO-2026-6354"},{"rule_id":"osv/GO-2026-6355","severity":"medium","message":"golang.org/x/crypto@0.48.0 (Go) is affected by GO-2026-6355","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/crypto@0.48.0 (Go):GO-2026-6355"},{"rule_id":"osv/GO-2026-5024","severity":"medium","message":"golang.org/x/sys@0.42.0 (Go) is affected by GO-2026-5024","path":"my_finances_api/go.mod","line":null,"fingerprint":"golang.org/x/sys@0.42.0 (Go):GO-2026-5024"},{"rule_id":"osv/GHSA-p297-fm68-3q8c","severity":"medium","message":"@angular/common@21.2.9 (npm) is affected by GHSA-p297-fm68-3q8c","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/common@21.2.9 (npm):GHSA-p297-fm68-3q8c"},{"rule_id":"osv/GHSA-58w9-8g37-x9v5","severity":"medium","message":"@angular/compiler@21.2.9 (npm) is affected by GHSA-58w9-8g37-x9v5","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/compiler@21.2.9 (npm):GHSA-58w9-8g37-x9v5"},{"rule_id":"osv/GHSA-f3m7-gqxr-g87x","severity":"medium","message":"@angular/compiler@21.2.9 (npm) is affected by GHSA-f3m7-gqxr-g87x","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/compiler@21.2.9 (npm):GHSA-f3m7-gqxr-g87x"},{"rule_id":"osv/GHSA-hh8m-fm6v-7cvg","severity":"medium","message":"@angular/compiler@21.2.9 (npm) is affected by GHSA-hh8m-fm6v-7cvg","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/compiler@21.2.9 (npm):GHSA-hh8m-fm6v-7cvg"},{"rule_id":"osv/GHSA-692r-grfm-v8x7","severity":"medium","message":"@angular/core@21.2.9 (npm) is affected by GHSA-692r-grfm-v8x7","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/core@21.2.9 (npm):GHSA-692r-grfm-v8x7"},{"rule_id":"osv/GHSA-f3m7-gqxr-g87x","severity":"medium","message":"@angular/core@21.2.9 (npm) is affected by GHSA-f3m7-gqxr-g87x","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/core@21.2.9 (npm):GHSA-f3m7-gqxr-g87x"},{"rule_id":"osv/GHSA-hh8m-fm6v-7cvg","severity":"medium","message":"@angular/core@21.2.9 (npm) is affected by GHSA-hh8m-fm6v-7cvg","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@angular/core@21.2.9 (npm):GHSA-hh8m-fm6v-7cvg"},{"rule_id":"osv/GHSA-frvp-7c67-39w9","severity":"medium","message":"@hono/node-server@1.19.14 (npm) is affected by GHSA-frvp-7c67-39w9","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@hono/node-server@1.19.14 (npm):GHSA-frvp-7c67-39w9"},{"rule_id":"osv/GHSA-jpvv-r467-5p4w","severity":"medium","message":"@hono/node-server@1.19.14 (npm) is affected by GHSA-jpvv-r467-5p4w","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@hono/node-server@1.19.14 (npm):GHSA-jpvv-r467-5p4w"},{"rule_id":"osv/GHSA-rmxm-3fg6-px4f","severity":"medium","message":"@hono/node-server@1.19.14 (npm) is affected by GHSA-rmxm-3fg6-px4f","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@hono/node-server@1.19.14 (npm):GHSA-rmxm-3fg6-px4f"},{"rule_id":"osv/GHSA-6prh-2h8m-c8cw","severity":"medium","message":"@modelcontextprotocol/sdk@1.26.0 (npm) is affected by GHSA-6prh-2h8m-c8cw","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.26.0 (npm):GHSA-6prh-2h8m-c8cw"},{"rule_id":"osv/GHSA-rvq5-wwqv-78pq","severity":"medium","message":"@modelcontextprotocol/sdk@1.26.0 (npm) is affected by GHSA-rvq5-wwqv-78pq","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@modelcontextprotocol/sdk@1.26.0 (npm):GHSA-rvq5-wwqv-78pq"},{"rule_id":"osv/GHSA-jfc7-64v2-mr8c","severity":"medium","message":"@sigstore/core@3.2.0 (npm) is affected by GHSA-jfc7-64v2-mr8c","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@sigstore/core@3.2.0 (npm):GHSA-jfc7-64v2-mr8c"},{"rule_id":"osv/GHSA-xgjw-pm74-86q4","severity":"medium","message":"@sigstore/verify@3.1.0 (npm) is affected by GHSA-xgjw-pm74-86q4","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@sigstore/verify@3.1.0 (npm):GHSA-xgjw-pm74-86q4"},{"rule_id":"osv/GHSA-82fw-gwwq-j7x9","severity":"medium","message":"@vitest/mocker@4.1.5 (npm) is affected by GHSA-82fw-gwwq-j7x9","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@vitest/mocker@4.1.5 (npm):GHSA-82fw-gwwq-j7x9"},{"rule_id":"osv/GHSA-qxg6-89mg-rqv8","severity":"medium","message":"@vitest/mocker@4.1.5 (npm) is affected by GHSA-qxg6-89mg-rqv8","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@vitest/mocker@4.1.5 (npm):GHSA-qxg6-89mg-rqv8"},{"rule_id":"osv/GHSA-w5vr-8v7q-w6rv","severity":"medium","message":"baseline-browser-mapping@2.10.20 (npm) is affected by GHSA-w5vr-8v7q-w6rv","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"baseline-browser-mapping@2.10.20 (npm):GHSA-w5vr-8v7q-w6rv"},{"rule_id":"osv/GHSA-jxxr-4gwj-5jf2","severity":"medium","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-jxxr-4gwj-5jf2","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-jxxr-4gwj-5jf2"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@5.0.5 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"brace-expansion@5.0.5 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-hrr3-gc8f-f4qj","severity":"medium","message":"fast-uri@3.1.0 (npm) is affected by GHSA-hrr3-gc8f-f4qj","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-hrr3-gc8f-f4qj"},{"rule_id":"osv/GHSA-w74x-v6f9-j3xg","severity":"medium","message":"fast-uri@3.1.0 (npm) is affected by GHSA-w74x-v6f9-j3xg","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-w74x-v6f9-j3xg"},{"rule_id":"osv/GHSA-3g3m-2fjr-6pw4","severity":"medium","message":"glob@13.0.6 (npm) is affected by GHSA-3g3m-2fjr-6pw4","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"glob@13.0.6 (npm):GHSA-3g3m-2fjr-6pw4"},{"rule_id":"osv/GHSA-2gcr-mfcq-wcc3","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-2gcr-mfcq-wcc3","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-2gcr-mfcq-wcc3"},{"rule_id":"osv/GHSA-3hrh-pfw6-9m5x","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-3hrh-pfw6-9m5x","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-3hrh-pfw6-9m5x"},{"rule_id":"osv/GHSA-46wx-v44x-9hh2","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-46wx-v44x-9hh2","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-46wx-v44x-9hh2"},{"rule_id":"osv/GHSA-4h7h-rv7c-7m2v","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-4h7h-rv7c-7m2v","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-4h7h-rv7c-7m2v"},{"rule_id":"osv/GHSA-4m76-xfj5-7975","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-4m76-xfj5-7975","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-4m76-xfj5-7975"},{"rule_id":"osv/GHSA-54fx-42gc-7vw4","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-54fx-42gc-7vw4","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-54fx-42gc-7vw4"},{"rule_id":"osv/GHSA-5r4p-p66f-jhc7","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-5r4p-p66f-jhc7","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-5r4p-p66f-jhc7"},{"rule_id":"osv/GHSA-69xw-7hcm-h432","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-69xw-7hcm-h432","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-69xw-7hcm-h432"},{"rule_id":"osv/GHSA-8j4g-w8fx-2239","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-8j4g-w8fx-2239","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-8j4g-w8fx-2239"},{"rule_id":"osv/GHSA-9vqf-7f2p-gf9v","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-9vqf-7f2p-gf9v","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-9vqf-7f2p-gf9v"},{"rule_id":"osv/GHSA-crvj-82cr-hjcx","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-crvj-82cr-hjcx","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-crvj-82cr-hjcx"},{"rule_id":"osv/GHSA-f23p-vx2j-j53r","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-f23p-vx2j-j53r","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-f23p-vx2j-j53r"},{"rule_id":"osv/GHSA-f577-qrjj-4474","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-f577-qrjj-4474","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-f577-qrjj-4474"},{"rule_id":"osv/GHSA-g6gw-c38x-mqfc","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-g6gw-c38x-mqfc","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-g6gw-c38x-mqfc"},{"rule_id":"osv/GHSA-gqvv-2mrq-wpjv","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-gqvv-2mrq-wpjv","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-gqvv-2mrq-wpjv"},{"rule_id":"osv/GHSA-h7mg-cq63-vhpq","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-h7mg-cq63-vhpq","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-h7mg-cq63-vhpq"},{"rule_id":"osv/GHSA-hvrm-45r6-mjfj","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-hvrm-45r6-mjfj","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-hvrm-45r6-mjfj"},{"rule_id":"osv/GHSA-hxh3-vqpv-xpqv","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-hxh3-vqpv-xpqv","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-hxh3-vqpv-xpqv"},{"rule_id":"osv/GHSA-j6c9-x7qj-28xf","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-j6c9-x7qj-28xf","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-j6c9-x7qj-28xf"},{"rule_id":"osv/GHSA-p77w-8qqv-26rm","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-p77w-8qqv-26rm","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-p77w-8qqv-26rm"},{"rule_id":"osv/GHSA-qp7p-654g-cw7p","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-qp7p-654g-cw7p","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-qp7p-654g-cw7p"},{"rule_id":"osv/GHSA-rv63-4mwf-qqc2","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-rv63-4mwf-qqc2","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-rv63-4mwf-qqc2"},{"rule_id":"osv/GHSA-w62v-xxxg-mg59","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-w62v-xxxg-mg59","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-w62v-xxxg-mg59"},{"rule_id":"osv/GHSA-wgpf-jwqj-8h8p","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-wgpf-jwqj-8h8p","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-wgpf-jwqj-8h8p"},{"rule_id":"osv/GHSA-wwfh-h76j-fc44","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-wwfh-h76j-fc44","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-wwfh-h76j-fc44"},{"rule_id":"osv/GHSA-xgm2-5f3f-mvvc","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-xgm2-5f3f-mvvc","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-xgm2-5f3f-mvvc"},{"rule_id":"osv/GHSA-xrhx-7g5j-rcj5","severity":"medium","message":"hono@4.12.14 (npm) is affected by GHSA-xrhx-7g5j-rcj5","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-xrhx-7g5j-rcj5"},{"rule_id":"osv/GHSA-h3mg-xc3c-68pw","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-h3mg-xc3c-68pw","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-h3mg-xc3c-68pw"},{"rule_id":"osv/GHSA-j6r3-76f7-8jcv","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-j6r3-76f7-8jcv","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-j6r3-76f7-8jcv"},{"rule_id":"osv/GHSA-rpw4-54j3-4h4q","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-rpw4-54j3-4h4q","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-rpw4-54j3-4h4q"},{"rule_id":"osv/GHSA-rxp7-6hxx-x8q5","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-rxp7-6hxx-x8q5","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-rxp7-6hxx-x8q5"},{"rule_id":"osv/GHSA-v2v4-37r5-5v8g","severity":"medium","message":"ip-address@10.1.0 (npm) is affected by GHSA-v2v4-37r5-5v8g","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"ip-address@10.1.0 (npm):GHSA-v2v4-37r5-5v8g"},{"rule_id":"osv/GHSA-g3hv-75wg-m249","severity":"medium","message":"minimatch@10.2.5 (npm) is affected by GHSA-g3hv-75wg-m249","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"minimatch@10.2.5 (npm):GHSA-g3hv-75wg-m249"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@8.5.10 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"postcss@8.5.10 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.15.1 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"qs@6.15.1 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.15.1 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"qs@6.15.1 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-q8mj-m7cp-5q26","severity":"medium","message":"qs@6.15.1 (npm) is affected by GHSA-q8mj-m7cp-5q26","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"qs@6.15.1 (npm):GHSA-q8mj-m7cp-5q26"},{"rule_id":"osv/GHSA-x5fp-wj9c-mxmx","severity":"medium","message":"qs@6.15.1 (npm) is affected by GHSA-x5fp-wj9c-mxmx","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"qs@6.15.1 (npm):GHSA-x5fp-wj9c-mxmx"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@7.5.13 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"tar@7.5.13 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@7.5.13 (npm) is affected by GHSA-vmf3-w455-68vh","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"tar@7.5.13 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@7.5.13 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"tar@7.5.13 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-3wwx-pv8p-q78v","severity":"medium","message":"undici@6.25.0 (npm) is affected by GHSA-3wwx-pv8p-q78v","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-3wwx-pv8p-q78v"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@6.25.0 (npm) is affected by GHSA-4qv8-2p9j-2685","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-8xcm-r25x-g524","severity":"medium","message":"undici@6.25.0 (npm) is affected by GHSA-8xcm-r25x-g524","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-8xcm-r25x-g524"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@6.25.0 (npm) is affected by GHSA-9fm3-97px-rjf6","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-m8rv-5g2x-5cg5","severity":"medium","message":"undici@6.25.0 (npm) is affected by GHSA-m8rv-5g2x-5cg5","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-m8rv-5g2x-5cg5"},{"rule_id":"osv/GHSA-p88m-4jfj-68fv","severity":"medium","message":"undici@6.25.0 (npm) is affected by GHSA-p88m-4jfj-68fv","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-p88m-4jfj-68fv"},{"rule_id":"osv/GHSA-v3r7-h72x-cjcm","severity":"medium","message":"undici@6.25.0 (npm) is affected by GHSA-v3r7-h72x-cjcm","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-v3r7-h72x-cjcm"},{"rule_id":"osv/GHSA-2jfj-6hjv-fm6j","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-2jfj-6hjv-fm6j","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-2jfj-6hjv-fm6j"},{"rule_id":"osv/GHSA-3xpg-4rpp-hhhm","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-3xpg-4rpp-hhhm","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-3xpg-4rpp-hhhm"},{"rule_id":"osv/GHSA-4qv8-2p9j-2685","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-4qv8-2p9j-2685","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-4qv8-2p9j-2685"},{"rule_id":"osv/GHSA-55wc-3pg8-jfw6","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-55wc-3pg8-jfw6","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-55wc-3pg8-jfw6"},{"rule_id":"osv/GHSA-8xcm-r25x-g524","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-8xcm-r25x-g524","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-8xcm-r25x-g524"},{"rule_id":"osv/GHSA-9fm3-97px-rjf6","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-9fm3-97px-rjf6","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-9fm3-97px-rjf6"},{"rule_id":"osv/GHSA-f72v-6w45-q472","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-f72v-6w45-q472","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-f72v-6w45-q472"},{"rule_id":"osv/GHSA-jr45-8vmc-qm54","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-jr45-8vmc-qm54","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-jr45-8vmc-qm54"},{"rule_id":"osv/GHSA-m8rv-5g2x-5cg5","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-m8rv-5g2x-5cg5","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-m8rv-5g2x-5cg5"},{"rule_id":"osv/GHSA-p88m-4jfj-68fv","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-p88m-4jfj-68fv","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-p88m-4jfj-68fv"},{"rule_id":"osv/GHSA-pmjh-fq2x-6v4x","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-pmjh-fq2x-6v4x","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-pmjh-fq2x-6v4x"},{"rule_id":"osv/GHSA-pr7r-676h-xcf6","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-pr7r-676h-xcf6","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-pr7r-676h-xcf6"},{"rule_id":"osv/GHSA-rx4f-c7p8-82vq","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-rx4f-c7p8-82vq","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-rx4f-c7p8-82vq"},{"rule_id":"osv/GHSA-v3r7-h72x-cjcm","severity":"medium","message":"undici@7.24.4 (npm) is affected by GHSA-v3r7-h72x-cjcm","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-v3r7-h72x-cjcm"},{"rule_id":"osv/GHSA-698v-4r3x-3vcv","severity":"medium","message":"vite@7.3.2 (npm) is affected by GHSA-698v-4r3x-3vcv","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"vite@7.3.2 (npm):GHSA-698v-4r3x-3vcv"},{"rule_id":"osv/GHSA-fx2h-pf6j-xcff","severity":"medium","message":"vite@7.3.2 (npm) is affected by GHSA-fx2h-pf6j-xcff","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"vite@7.3.2 (npm):GHSA-fx2h-pf6j-xcff"},{"rule_id":"osv/GHSA-r825-w8mm-5pxw","severity":"medium","message":"vite@7.3.2 (npm) is affected by GHSA-r825-w8mm-5pxw","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"vite@7.3.2 (npm):GHSA-r825-w8mm-5pxw"},{"rule_id":"osv/GHSA-rq7h-c2jc-7f22","severity":"medium","message":"vite@7.3.2 (npm) is affected by GHSA-rq7h-c2jc-7f22","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"vite@7.3.2 (npm):GHSA-rq7h-c2jc-7f22"},{"rule_id":"osv/GHSA-v6wh-96g9-6wx3","severity":"medium","message":"vite@7.3.2 (npm) is affected by GHSA-v6wh-96g9-6wx3","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"vite@7.3.2 (npm):GHSA-v6wh-96g9-6wx3"},{"rule_id":"osv/GHSA-82fw-gwwq-j7x9","severity":"medium","message":"vitest@4.1.5 (npm) is affected by GHSA-82fw-gwwq-j7x9","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"vitest@4.1.5 (npm):GHSA-82fw-gwwq-j7x9"},{"rule_id":"osv/GHSA-4x5r-pxfx-6jf8","severity":"low","message":"@babel/core@7.29.0 (npm) is affected by GHSA-4x5r-pxfx-6jf8","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"@babel/core@7.29.0 (npm):GHSA-4x5r-pxfx-6jf8"},{"rule_id":"osv/GHSA-v422-hmwv-36x6","severity":"low","message":"body-parser@2.2.2 (npm) is affected by GHSA-v422-hmwv-36x6","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"body-parser@2.2.2 (npm):GHSA-v422-hmwv-36x6"},{"rule_id":"osv/GHSA-g7r4-m6w7-qqqr","severity":"low","message":"esbuild@0.27.3 (npm) is affected by GHSA-g7r4-m6w7-qqqr","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"esbuild@0.27.3 (npm):GHSA-g7r4-m6w7-qqqr"},{"rule_id":"osv/GHSA-333x-w4r6-6crp","severity":"low","message":"fast-uri@3.1.0 (npm) is affected by GHSA-333x-w4r6-6crp","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-333x-w4r6-6crp"},{"rule_id":"osv/GHSA-xhq7-xmqj-769h","severity":"low","message":"fast-uri@3.1.0 (npm) is affected by GHSA-xhq7-xmqj-769h","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"fast-uri@3.1.0 (npm):GHSA-xhq7-xmqj-769h"},{"rule_id":"osv/GHSA-3gg2-335m-rxc6","severity":"low","message":"hono@4.12.14 (npm) is affected by GHSA-3gg2-335m-rxc6","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-3gg2-335m-rxc6"},{"rule_id":"osv/GHSA-79qm-7rj5-m7r9","severity":"low","message":"hono@4.12.14 (npm) is affected by GHSA-79qm-7rj5-m7r9","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-79qm-7rj5-m7r9"},{"rule_id":"osv/GHSA-hm8q-7f3q-5f36","severity":"low","message":"hono@4.12.14 (npm) is affected by GHSA-hm8q-7f3q-5f36","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"hono@4.12.14 (npm):GHSA-hm8q-7f3q-5f36"},{"rule_id":"osv/GHSA-35p6-xmwp-9g52","severity":"low","message":"undici@6.25.0 (npm) is affected by GHSA-35p6-xmwp-9g52","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-35p6-xmwp-9g52"},{"rule_id":"osv/GHSA-g8m3-5g58-fq7m","severity":"low","message":"undici@6.25.0 (npm) is affected by GHSA-g8m3-5g58-fq7m","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-g8m3-5g58-fq7m"},{"rule_id":"osv/GHSA-r53p-7pc4-xj5r","severity":"low","message":"undici@6.25.0 (npm) is affected by GHSA-r53p-7pc4-xj5r","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@6.25.0 (npm):GHSA-r53p-7pc4-xj5r"},{"rule_id":"osv/GHSA-2gqq-gqf2-x968","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-2gqq-gqf2-x968","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-2gqq-gqf2-x968"},{"rule_id":"osv/GHSA-35p6-xmwp-9g52","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-35p6-xmwp-9g52","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-35p6-xmwp-9g52"},{"rule_id":"osv/GHSA-8436-99hf-9mmv","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-8436-99hf-9mmv","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-8436-99hf-9mmv"},{"rule_id":"osv/GHSA-g8m3-5g58-fq7m","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-g8m3-5g58-fq7m","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-g8m3-5g58-fq7m"},{"rule_id":"osv/GHSA-r53p-7pc4-xj5r","severity":"low","message":"undici@7.24.4 (npm) is affected by GHSA-r53p-7pc4-xj5r","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"undici@7.24.4 (npm):GHSA-r53p-7pc4-xj5r"},{"rule_id":"osv/GHSA-9jrq-w75r-8gcw","severity":"low","message":"vite@7.3.2 (npm) is affected by GHSA-9jrq-w75r-8gcw","path":"my_finances_ui/package-lock.json","line":null,"fingerprint":"vite@7.3.2 (npm):GHSA-9jrq-w75r-8gcw"}],"evidence":[],"data":{"ecosystems":["Go","npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":1.0,"check:lockfiles":0.0,"signed_commit_share":0.6667,"unpinned_manifests":1.0},"findings":[],"evidence":[{"kind":"posture","description":"e2e/package.json has no lockfile alongside it (unpinned dependencies)","ref":"e2e/package.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":250.0,"function_nloc":2622.0,"mean_ccn":2.48,"p90_ccn":5.0,"complex_functions":2.0,"long_functions":2.0,"many_param_functions":0.0,"risky_nloc_share":0.0824},"findings":[],"evidence":[{"kind":"complex-function","description":"createTransaction in my_finances_api/internal/handlers/transaction_handler.go: complexity 25, 112 lines","ref":"my_finances_api/internal/handlers/transaction_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/transaction_handler.go#L74","weight":0.4166666666666667},{"kind":"complex-function","description":"createTransfer in my_finances_api/internal/handlers/transfer_handler.go: complexity 23, 104 lines","ref":"my_finances_api/internal/handlers/transfer_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/transfer_handler.go#L53","weight":0.38333333333333336}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":2881.0,"duplicated_lines":463.0,"duplicated_share":0.1607,"files":52.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/cmd/reset_password/main.go:28 and my_finances_api/internal/auth/jwt.go:99","ref":"my_finances_api/cmd/reset_password/main.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/cmd/reset_password/main.go#L28","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/internal/database/migrations.go:45 and my_finances_api/internal/database/migrations.go:66","ref":"my_finances_api/internal/database/migrations.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/database/migrations.go#L45","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/internal/handlers/bank_account_handler.go:46 and my_finances_api/internal/handlers/bank_account_handler.go:112","ref":"my_finances_api/internal/handlers/bank_account_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/bank_account_handler.go#L46","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/internal/handlers/bank_account_handler.go:191 and my_finances_api/internal/handlers/dashboard_handler.go:37","ref":"my_finances_api/internal/handlers/bank_account_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/bank_account_handler.go#L191","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/internal/handlers/goal_handler.go:4 and my_finances_api/internal/handlers/transaction_handler.go:4","ref":"my_finances_api/internal/handlers/goal_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/goal_handler.go#L4","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/internal/handlers/goal_handler.go:46 and my_finances_api/internal/handlers/transfer_handler.go:57","ref":"my_finances_api/internal/handlers/goal_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/goal_handler.go#L46","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/internal/handlers/tag_handler.go:51 and my_finances_api/internal/handlers/tag_handler.go:85","ref":"my_finances_api/internal/handlers/tag_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/tag_handler.go#L51","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/internal/handlers/transaction_handler.go:86 and my_finances_api/internal/handlers/transaction_handler.go:254","ref":"my_finances_api/internal/handlers/transaction_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/transaction_handler.go#L86","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/internal/handlers/transaction_handler.go:99 and my_finances_api/internal/handlers/transfer_handler.go:78","ref":"my_finances_api/internal/handlers/transaction_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/transaction_handler.go#L99","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: my_finances_api/internal/handlers/transfer_handler.go:146 and my_finances_api/internal/handlers/transfer_handler.go:241","ref":"my_finances_api/internal/handlers/transfer_handler.go","url":"https://github.com/thiagomuller/financial_control/blob/086005e39ef696400f81c9467d6462b23832f1d6/my_finances_api/internal/handlers/transfer_handler.go#L146","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":6.0,"weighted_findings":6.0,"scanned_lines":4269.0,"category:best-practice":6.0},"findings":[{"rule_id":"opengrep/go.lang.best-practice.hidden-goroutine","severity":"medium","message":"Detected a hidden goroutine. Function invocations are expected to synchronous, and this function will execute asynchronously because all it does is call a goroutine. Instead, remove the internal goroutine and call the function using 'go'.","path":"my_finances_api/internal/scheduler/scheduler.go","line":10,"fingerprint":"go.lang.best-practice.hidden-goroutine:my_finances_api/internal/scheduler/scheduler.go:10"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"my_finances_ui/src/app/features/bank-accounts/bank-accounts.component.ts","line":85,"fingerprint":"javascript.lang.best-practice.javascript-confirm:my_finances_ui/src/app/features/bank-accounts/bank-accounts.component.ts:85"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"my_finances_ui/src/app/features/goals/goals.component.ts","line":78,"fingerprint":"javascript.lang.best-practice.javascript-confirm:my_finances_ui/src/app/features/goals/goals.component.ts:78"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"my_finances_ui/src/app/features/tags/tags.component.ts","line":93,"fingerprint":"javascript.lang.best-practice.javascript-confirm:my_finances_ui/src/app/features/tags/tags.component.ts:93"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"my_finances_ui/src/app/features/transactions/transactions.component.ts","line":110,"fingerprint":"javascript.lang.best-practice.javascript-confirm:my_finances_ui/src/app/features/transactions/transactions.component.ts:110"},{"rule_id":"opengrep/javascript.lang.best-practice.javascript-confirm","severity":"medium","message":"found confirm() call; should this be in production code?","path":"my_finances_ui/src/app/features/transfers/transfers.component.ts","line":100,"fingerprint":"javascript.lang.best-practice.javascript-confirm:my_finances_ui/src/app/features/transfers/transfers.component.ts:100"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":0.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":2204.0,"source_lines":4269.0,"test_ratio":0.5163,"ci_files":0.0,"cochange_share":1.0,"cochange_commits":3.0},"findings":[],"evidence":[],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":109.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":1.0,"check:low_escape_density":1.0,"escapes":1.0,"escapes_per_kloc":0.654},"findings":[],"evidence":[{"kind":"typing","description":"TypeScript strict type checking: my_finances_ui/tsconfig.json","ref":"my_finances_ui/tsconfig.json","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"x-blame","pillar":"ai_provenance","status":"ok","tool_version":"git-blame","metrics":{"ai_lines":1090.0,"other_lines":3179.0,"files_blamed":52.0,"blame_failures":0.0,"quality:ai_findings":0.0,"quality:ai_per_kloc":0.0,"quality:other_findings":6.0,"quality:other_per_kloc":1.887,"quality:ratio":0.0,"security:ai_findings":0.0,"security:ai_per_kloc":0.0,"security:other_findings":1.0,"security:other_per_kloc":0.315,"security:ratio":0.0},"findings":[],"evidence":[],"data":{"sampled":false,"comparable":true},"error":null}],"flags":[]}