{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-5+qual-2+sec-2","generated_at":"2026-11-14T14:52:08.488424Z","repo":{"ref":{"host":"github.com","owner":"wordpress-clients","name":"hybrid"},"default_branch":"develop","clone_url":"https://github.com/wordpress-clients/hybrid.git","html_url":"https://github.com/wordpress-clients/hybrid","description":"[I don't have time to work on this anymore. Use at your own risk] Build WordPress based PWA, iOS, Android & Windows phones apps in minutes!","stars":1002,"forks":334,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":3725,"primary_language":"TypeScript","license_spdx":"MIT","created_at":"2014-11-12T21:37:53Z","pushed_at":"2018-11-24T12:47:50Z","security_policy_url":null,"distribution":{"owner_created_at":"2017-05-11T11:18:11Z","owner_type":"Organization","release_assets":[]}},"commit_sha":"9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3","profile":{"lines_by_language":{"TypeScript":3445,"JavaScript":272,"Shell":71},"files_by_category":{"source":92,"other":72,"vendored":49,"config":10,"docs":7,"test":2,"binary":1,"generated":1},"source_lines":3622,"test_lines":166},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0,"style_index":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":66.6,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":100.0,"duplication":42.6,"lint":69.6,"testing":58.3,"docs":85.0,"type_safety":0.0,"process":null},"summary":"Code quality is adequate: test-to-source ratio 0.05, CI runs tests; 0% of function code in complex or long functions; 14% duplicated lines. Weakest area: type safety."},"security":{"score":52.6,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":72.3,"dependencies":0.0,"ci_actions":null,"posture":0.0,"scorecard":null},"summary":"Security posture is weak: 377 known vulnerabilities in 161 dependencies; 3 high-severity SAST findings. Weakest area: dependencies."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":"no published OpenSSF Scorecard result for this repo"},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":76.0,"checked":76.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":663.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":11939.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2014-11":{"loc":0,"attributed_loc":0},"2014-12":{"loc":0,"attributed_loc":0},"2015-01":{"loc":389,"attributed_loc":0},"2015-02":{"loc":252,"attributed_loc":0},"2015-03":{"loc":26,"attributed_loc":0},"2015-04":{"loc":0,"attributed_loc":0},"2015-05":{"loc":94,"attributed_loc":0},"2015-06":{"loc":119,"attributed_loc":0},"2015-07":{"loc":202,"attributed_loc":0},"2015-08":{"loc":4,"attributed_loc":0},"2015-09":{"loc":87,"attributed_loc":0},"2015-10":{"loc":1206,"attributed_loc":0},"2015-11":{"loc":1,"attributed_loc":0},"2015-12":{"loc":458,"attributed_loc":0},"2016-01":{"loc":885,"attributed_loc":0},"2016-02":{"loc":422,"attributed_loc":0},"2016-03":{"loc":72,"attributed_loc":0},"2016-04":{"loc":1,"attributed_loc":0},"2016-05":{"loc":2,"attributed_loc":0},"2016-06":{"loc":11,"attributed_loc":0},"2016-07":{"loc":0,"attributed_loc":0},"2016-08":{"loc":0,"attributed_loc":0},"2016-09":{"loc":39,"attributed_loc":0},"2016-10":{"loc":121,"attributed_loc":0},"2016-11":{"loc":8,"attributed_loc":0},"2016-12":{"loc":741,"attributed_loc":0},"2017-01":{"loc":1521,"attributed_loc":0},"2017-02":{"loc":1895,"attributed_loc":0},"2017-03":{"loc":828,"attributed_loc":0},"2017-04":{"loc":362,"attributed_loc":0},"2017-05":{"loc":552,"attributed_loc":0},"2017-06":{"loc":91,"attributed_loc":0},"2017-07":{"loc":0,"attributed_loc":0},"2017-08":{"loc":74,"attributed_loc":0},"2017-10":{"loc":700,"attributed_loc":0},"2017-11":{"loc":192,"attributed_loc":0},"2017-12":{"loc":584,"attributed_loc":0},"2018-01":{"loc":0,"attributed_loc":0},"2018-02":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":147.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":11939.0,"pre_ai_era_burst_loc":0.0,"measured_loc":11939.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":726.0,"median_loc_per_hour":53.125,"pr_timed_units":1.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":35.0,"flagged_releases":0.0,"max_loc_per_day":107.6},"findings":[],"evidence":[],"data":{"releases":[{"from":"v1.0.0","to":"v1.1.0","loc":9,"days":13.29,"loc_per_day":0.7,"flagged":false},{"from":"v1.1.0","to":"v1.2.0","loc":25,"days":19.74,"loc_per_day":1.3,"flagged":false},{"from":"v1.2.0","to":"v1.3.0","loc":94,"days":3.02,"loc_per_day":31.2,"flagged":false},{"from":"v1.3.0","to":"v1.3.1","loc":0,"days":11.9,"loc_per_day":0.0,"flagged":false},{"from":"v1.3.1","to":"v1.4.0","loc":56,"days":15.83,"loc_per_day":3.5,"flagged":false},{"from":"v1.4.0","to":"v1.4.1","loc":0,"days":0.22,"loc_per_day":0.0,"flagged":false},{"from":"v1.4.1","to":"v1.4.2","loc":146,"days":1.86,"loc_per_day":78.5,"flagged":false},{"from":"v1.4.2","to":"v1.5.0","loc":4,"days":37.22,"loc_per_day":0.1,"flagged":false},{"from":"v1.5.0","to":"v1.5.1","loc":12,"days":4.13,"loc_per_day":2.9,"flagged":false},{"from":"v1.5.1","to":"v2.0.0-alpha1","loc":1275,"days":55.97,"loc_per_day":22.8,"flagged":false},{"from":"v2.0.0-alpha1","to":"v2.0.0-alpha2","loc":6,"days":5.5,"loc_per_day":1.1,"flagged":false},{"from":"v2.0.0-alpha2","to":"v2.0.0-alpha3","loc":260,"days":42.47,"loc_per_day":6.1,"flagged":false},{"from":"v2.0.0-alpha3","to":"v2.0.0-alpha4","loc":1,"days":0.04,"loc_per_day":24.0,"flagged":false},{"from":"v2.0.0-alpha4","to":"v2.0.0-alpha5","loc":0,"days":6.04,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.0-alpha5","to":"v2.0.0-alpha6","loc":1048,"days":15.69,"loc_per_day":66.8,"flagged":false},{"from":"v2.0.0-alpha6","to":"v2.0.0-beta01","loc":0,"days":0.46,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.0-beta01","to":"v2.0.0-beta02","loc":0,"days":4.67,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.0-beta02","to":"v2.0.0-beta03","loc":35,"days":20.92,"loc_per_day":1.7,"flagged":false},{"from":"v2.0.0-beta03","to":"v2.0.0-beta04","loc":33,"days":7.09,"loc_per_day":4.7,"flagged":false},{"from":"v2.0.0-beta04","to":"v2.0.0-beta05","loc":0,"days":6.69,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.0-beta05","to":"v2.0.0-beta06","loc":389,"days":3.62,"loc_per_day":107.6,"flagged":false},{"from":"v2.0.0-beta06","to":"v2.0.0-beta07","loc":17,"days":27.17,"loc_per_day":0.6,"flagged":false},{"from":"v2.0.0-beta07","to":"v2.0.0-beta08","loc":55,"days":13.29,"loc_per_day":4.1,"flagged":false},{"from":"v2.0.0-beta08","to":"v2.0.0-beta09","loc":1,"days":47.78,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.0-beta09","to":"v2.0.0-beta10","loc":12,"days":20.16,"loc_per_day":0.6,"flagged":false},{"from":"v2.0.0-beta10","to":"v2.0.0-beta11","loc":1,"days":88.79,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.0-beta11","to":"v2.0.0-beta12","loc":39,"days":14.24,"loc_per_day":2.7,"flagged":false},{"from":"v2.0.0-beta12","to":"v2.0.0-beta13","loc":90,"days":34.17,"loc_per_day":2.6,"flagged":false},{"from":"v2.0.0-beta13","to":"v2.0.0-beta14","loc":30,"days":7.6,"loc_per_day":3.9,"flagged":false},{"from":"v2.0.0-beta14","to":"v2.0.0-beta15","loc":1,"days":2.31,"loc_per_day":0.4,"flagged":false},{"from":"v2.0.0-beta15","to":"v2.0.0-beta16","loc":8,"days":10.75,"loc_per_day":0.7,"flagged":false},{"from":"v2.0.0-beta16","to":"v2.0.0","loc":34,"days":34.95,"loc_per_day":1.0,"flagged":false},{"from":"v2.0.0","to":"v2.0.1","loc":10,"days":11.13,"loc_per_day":0.9,"flagged":false},{"from":"v2.0.1","to":"v2.0.2","loc":0,"days":104.76,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.2","to":"v3.0.0.alpha01","loc":7463,"days":251.05,"loc_per_day":29.7,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":3622.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":4.0,"findings_high":3.0,"findings_medium":0.0,"findings_low":1.0,"weighted_findings":3.362,"scanned_lines":3622.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/dockerfile.security.missing-user","severity":"high","message":"By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile is a USER other than 'root'. [confidence medium]","path":"Dockerfile","line":14,"fingerprint":"dockerfile.security.missing-user:Dockerfile:14"},{"rule_id":"opengrep/javascript.browser.security.insecure-document-method","severity":"high","message":"User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"src/pipes/highlight/highlight.ts","line":25,"fingerprint":"javascript.browser.security.insecure-document-method:src/pipes/highlight/highlight.ts:25"},{"rule_id":"opengrep/javascript.browser.security.insecure-innerhtml","severity":"high","message":"User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"src/pipes/highlight/highlight.ts","line":25,"fingerprint":"javascript.browser.security.insecure-innerhtml:src/pipes/highlight/highlight.ts:25"},{"rule_id":"opengrep/javascript.express.security.audit.express-check-csurf-middleware-usage","severity":"low","message":"A CSRF middleware was not detected in your express application. Ensure you are either using one such as `csurf` or `csrf` (see rule references) and/or you are properly doing CSRF validation in your routes with a token or cookies. [confidence low]","path":"scripts/server.js","line":13,"fingerprint":"javascript.express.security.audit.express-check-csurf-middleware-usage:scripts/server.js:13"}],"evidence":[],"data":{"rulesets":["typescript","javascript","bash","dockerfile"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":161.0,"vulnerabilities":377.0,"vulns_critical":37.0,"vulns_high":197.0,"vulns_medium":113.0,"vulns_low":9.0,"vulns_unknown":21.0,"penalty":1289.0},"findings":[{"rule_id":"osv/GHSA-cpq7-6gpm-g9rc","severity":"critical","message":"cipher-base@1.0.4 (npm) is affected by GHSA-cpq7-6gpm-g9rc","path":"yarn.lock","line":null,"fingerprint":"cipher-base@1.0.4 (npm):GHSA-cpq7-6gpm-g9rc"},{"rule_id":"osv/GHSA-rq8g-5pc5-wrhr","severity":"critical","message":"cryptiles@3.1.2 (npm) is affected by GHSA-rq8g-5pc5-wrhr","path":"yarn.lock","line":null,"fingerprint":"cryptiles@3.1.2 (npm):GHSA-rq8g-5pc5-wrhr"},{"rule_id":"osv/GHSA-hr2v-3952-633q","severity":"critical","message":"deep-extend@0.4.2 (npm) is affected by GHSA-hr2v-3952-633q","path":"yarn.lock","line":null,"fingerprint":"deep-extend@0.4.2 (npm):GHSA-hr2v-3952-633q"},{"rule_id":"osv/GHSA-vjh7-7g9h-fjfh","severity":"critical","message":"elliptic@6.4.0 (npm) is affected by GHSA-vjh7-7g9h-fjfh","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.0 (npm):GHSA-vjh7-7g9h-fjfh"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@0.1.4 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"yarn.lock","line":null,"fingerprint":"form-data@0.1.4 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@1.0.1 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"yarn.lock","line":null,"fingerprint":"form-data@1.0.1 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.1.4 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"yarn.lock","line":null,"fingerprint":"form-data@2.1.4 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.3.1 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"yarn.lock","line":null,"fingerprint":"form-data@2.3.1 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-8r6j-v8pm-fqw3","severity":"critical","message":"fsevents@1.1.3 (npm) is affected by GHSA-8r6j-v8pm-fqw3","path":"yarn.lock","line":null,"fingerprint":"fsevents@1.1.3 (npm):GHSA-8r6j-v8pm-fqw3"},{"rule_id":"osv/GHSA-896r-f27r-55mw","severity":"critical","message":"json-schema@0.2.3 (npm) is affected by GHSA-896r-f27r-55mw","path":"yarn.lock","line":null,"fingerprint":"json-schema@0.2.3 (npm):GHSA-896r-f27r-55mw"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@0.2.17 (npm) is affected by GHSA-76p3-8jx3-jpfq","path":"yarn.lock","line":null,"fingerprint":"loader-utils@0.2.17 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@1.1.0 (npm) is affected by GHSA-76p3-8jx3-jpfq","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.1.0 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@3.10.1 (npm) is affected by GHSA-jf85-cpcp-j695","path":"yarn.lock","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.17.4 (npm) is affected by GHSA-jf85-cpcp-j695","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-pp57-mqmh-44h7","severity":"critical","message":"macaddress@0.2.8 (npm) is affected by GHSA-pp57-mqmh-44h7","path":"yarn.lock","line":null,"fingerprint":"macaddress@0.2.8 (npm):GHSA-pp57-mqmh-44h7"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.10 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.10 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.8 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.8 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@1.2.0 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@1.2.0 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-4c7m-wxvm-r7gc","severity":"critical","message":"netmask@1.0.6 (npm) is affected by GHSA-4c7m-wxvm-r7gc, GHSA-pch5-whg9-qr2r","path":"yarn.lock","line":null,"fingerprint":"netmask@1.0.6 (npm):GHSA-4c7m-wxvm-r7gc"},{"rule_id":"osv/GHSA-h7cp-r72f-jxh6","severity":"critical","message":"pbkdf2@3.0.14 (npm) is affected by GHSA-h7cp-r72f-jxh6","path":"yarn.lock","line":null,"fingerprint":"pbkdf2@3.0.14 (npm):GHSA-h7cp-r72f-jxh6"},{"rule_id":"osv/GHSA-v62p-rq8g-8h59","severity":"critical","message":"pbkdf2@3.0.14 (npm) is affected by GHSA-v62p-rq8g-8h59","path":"yarn.lock","line":null,"fingerprint":"pbkdf2@3.0.14 (npm):GHSA-v62p-rq8g-8h59"},{"rule_id":"osv/GHSA-4cpg-3vgw-4877","severity":"critical","message":"plist@1.2.0 (npm) is affected by GHSA-4cpg-3vgw-4877","path":"yarn.lock","line":null,"fingerprint":"plist@1.2.0 (npm):GHSA-4cpg-3vgw-4877"},{"rule_id":"osv/GHSA-4cpg-3vgw-4877","severity":"critical","message":"plist@2.0.1 (npm) is affected by GHSA-4cpg-3vgw-4877","path":"yarn.lock","line":null,"fingerprint":"plist@2.0.1 (npm):GHSA-4cpg-3vgw-4877"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.2 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"yarn.lock","line":null,"fingerprint":"proxy-addr@2.0.2 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-95m3-7q98-8xr5","severity":"critical","message":"sha.js@2.4.9 (npm) is affected by GHSA-95m3-7q98-8xr5","path":"yarn.lock","line":null,"fingerprint":"sha.js@2.4.9 (npm):GHSA-95m3-7q98-8xr5"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.6.1 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-gff7-g5r8-mg8m","severity":"critical","message":"simple-plist@0.2.1 (npm) is affected by GHSA-gff7-g5r8-mg8m","path":"yarn.lock","line":null,"fingerprint":"simple-plist@0.2.1 (npm):GHSA-gff7-g5r8-mg8m"},{"rule_id":"osv/GHSA-qm95-pgcg-qqfq","severity":"critical","message":"socket.io-parser@2.3.1 (npm) is affected by GHSA-qm95-pgcg-qqfq","path":"yarn.lock","line":null,"fingerprint":"socket.io-parser@2.3.1 (npm):GHSA-qm95-pgcg-qqfq"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@1.0.2 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@2.2.1 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@4.1.1 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-cf4h-3jhx-xvhq","severity":"critical","message":"underscore@1.7.0 (npm) is affected by GHSA-cf4h-3jhx-xvhq","path":"yarn.lock","line":null,"fingerprint":"underscore@1.7.0 (npm):GHSA-cf4h-3jhx-xvhq"},{"rule_id":"osv/GHSA-cf4h-3jhx-xvhq","severity":"critical","message":"underscore@1.8.3 (npm) is affected by GHSA-cf4h-3jhx-xvhq","path":"yarn.lock","line":null,"fingerprint":"underscore@1.8.3 (npm):GHSA-cf4h-3jhx-xvhq"},{"rule_id":"osv/GHSA-xv26-6w52-cph6","severity":"critical","message":"websocket-driver@0.7.0 (npm) is affected by GHSA-xv26-6w52-cph6","path":"yarn.lock","line":null,"fingerprint":"websocket-driver@0.7.0 (npm):GHSA-xv26-6w52-cph6"},{"rule_id":"osv/GHSA-crh6-fp67-6883","severity":"critical","message":"xmldom@0.1.27 (npm) is affected by GHSA-crh6-fp67-6883","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-crh6-fp67-6883"},{"rule_id":"osv/GHSA-72mh-269x-7mh5","severity":"critical","message":"xmlhttprequest-ssl@1.5.3 (npm) is affected by GHSA-72mh-269x-7mh5","path":"yarn.lock","line":null,"fingerprint":"xmlhttprequest-ssl@1.5.3 (npm):GHSA-72mh-269x-7mh5"},{"rule_id":"osv/GHSA-h4j5-c7cj-74xg","severity":"critical","message":"xmlhttprequest-ssl@1.5.3 (npm) is affected by GHSA-h4j5-c7cj-74xg","path":"yarn.lock","line":null,"fingerprint":"xmlhttprequest-ssl@1.5.3 (npm):GHSA-h4j5-c7cj-74xg"},{"rule_id":"osv/GHSA-39pv-4j6c-2g6v","severity":"high","message":"@angular/common@4.4.4 (npm) is affected by GHSA-39pv-4j6c-2g6v","path":"yarn.lock","line":null,"fingerprint":"@angular/common@4.4.4 (npm):GHSA-39pv-4j6c-2g6v"},{"rule_id":"osv/GHSA-48r7-hpm6-gfxm","severity":"high","message":"@angular/common@4.4.4 (npm) is affected by GHSA-48r7-hpm6-gfxm","path":"yarn.lock","line":null,"fingerprint":"@angular/common@4.4.4 (npm):GHSA-48r7-hpm6-gfxm"},{"rule_id":"osv/GHSA-58c5-g7wp-6w37","severity":"high","message":"@angular/common@4.4.4 (npm) is affected by GHSA-58c5-g7wp-6w37","path":"yarn.lock","line":null,"fingerprint":"@angular/common@4.4.4 (npm):GHSA-58c5-g7wp-6w37"},{"rule_id":"osv/GHSA-jhpw-976m-542j","severity":"high","message":"@angular/common@4.4.4 (npm) is affected by GHSA-jhpw-976m-542j","path":"yarn.lock","line":null,"fingerprint":"@angular/common@4.4.4 (npm):GHSA-jhpw-976m-542j"},{"rule_id":"osv/GHSA-p3vc-36g9-x9gr","severity":"high","message":"@angular/common@4.4.4 (npm) is affected by GHSA-p3vc-36g9-x9gr","path":"yarn.lock","line":null,"fingerprint":"@angular/common@4.4.4 (npm):GHSA-p3vc-36g9-x9gr"},{"rule_id":"osv/GHSA-q6f4-qqrg-jv6x","severity":"high","message":"@angular/common@4.4.4 (npm) is affected by GHSA-q6f4-qqrg-jv6x","path":"yarn.lock","line":null,"fingerprint":"@angular/common@4.4.4 (npm):GHSA-q6f4-qqrg-jv6x"},{"rule_id":"osv/GHSA-jj27-h5hq-8x99","severity":"high","message":"@angular/compiler@4.4.4 (npm) is affected by GHSA-jj27-h5hq-8x99","path":"yarn.lock","line":null,"fingerprint":"@angular/compiler@4.4.4 (npm):GHSA-jj27-h5hq-8x99"},{"rule_id":"osv/GHSA-jrmj-c5cx-3cw6","severity":"high","message":"@angular/compiler@4.4.4 (npm) is affected by GHSA-jrmj-c5cx-3cw6","path":"yarn.lock","line":null,"fingerprint":"@angular/compiler@4.4.4 (npm):GHSA-jrmj-c5cx-3cw6"},{"rule_id":"osv/GHSA-v4hv-rgfq-gp49","severity":"high","message":"@angular/compiler@4.4.4 (npm) is affected by GHSA-v4hv-rgfq-gp49","path":"yarn.lock","line":null,"fingerprint":"@angular/compiler@4.4.4 (npm):GHSA-v4hv-rgfq-gp49"},{"rule_id":"osv/GHSA-jj27-h5hq-8x99","severity":"high","message":"@angular/core@4.4.4 (npm) is affected by GHSA-jj27-h5hq-8x99","path":"yarn.lock","line":null,"fingerprint":"@angular/core@4.4.4 (npm):GHSA-jj27-h5hq-8x99"},{"rule_id":"osv/GHSA-jrmj-c5cx-3cw6","severity":"high","message":"@angular/core@4.4.4 (npm) is affected by GHSA-jrmj-c5cx-3cw6","path":"yarn.lock","line":null,"fingerprint":"@angular/core@4.4.4 (npm):GHSA-jrmj-c5cx-3cw6"},{"rule_id":"osv/GHSA-prjf-86w9-mfqv","severity":"high","message":"@angular/core@4.4.4 (npm) is affected by GHSA-prjf-86w9-mfqv","path":"yarn.lock","line":null,"fingerprint":"@angular/core@4.4.4 (npm):GHSA-prjf-86w9-mfqv"},{"rule_id":"osv/GHSA-rgjc-h3x7-9mwg","severity":"high","message":"@angular/core@4.4.4 (npm) is affected by GHSA-rgjc-h3x7-9mwg","path":"yarn.lock","line":null,"fingerprint":"@angular/core@4.4.4 (npm):GHSA-rgjc-h3x7-9mwg"},{"rule_id":"osv/GHSA-45q2-gjvg-7973","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-45q2-gjvg-7973","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-45q2-gjvg-7973"},{"rule_id":"osv/GHSA-f67j-2jqw-jpq7","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-f67j-2jqw-jpq7","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-f67j-2jqw-jpq7"},{"rule_id":"osv/GHSA-f6mr-pjwc-34m4","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-f6mr-pjwc-34m4","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-f6mr-pjwc-34m4"},{"rule_id":"osv/GHSA-gxx4-3xcv-f8qx","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-gxx4-3xcv-f8qx","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-gxx4-3xcv-f8qx"},{"rule_id":"osv/GHSA-hqr9-c56f-3x7f","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-hqr9-c56f-3x7f","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-hqr9-c56f-3x7f"},{"rule_id":"osv/GHSA-j3r3-mxqp-r2p4","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-j3r3-mxqp-r2p4","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-j3r3-mxqp-r2p4"},{"rule_id":"osv/GHSA-rfh7-fxqc-q52v","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-rfh7-fxqc-q52v","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-rfh7-fxqc-q52v"},{"rule_id":"osv/GHSA-v3p8-whq6-r5jg","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-v3p8-whq6-r5jg","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-v3p8-whq6-r5jg"},{"rule_id":"osv/GHSA-vpx6-8pjr-4g3v","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-vpx6-8pjr-4g3v","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-vpx6-8pjr-4g3v"},{"rule_id":"osv/GHSA-xrxm-cp7j-8xf6","severity":"high","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-xrxm-cp7j-8xf6","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-xrxm-cp7j-8xf6"},{"rule_id":"osv/GHSA-62vg-58rm-qff7","severity":"high","message":"@angular/router@4.4.6 (npm) is affected by GHSA-62vg-58rm-qff7","path":"yarn.lock","line":null,"fingerprint":"@angular/router@4.4.6 (npm):GHSA-62vg-58rm-qff7"},{"rule_id":"osv/GHSA-ff3f-86qr-9cv3","severity":"high","message":"@angular/router@4.4.6 (npm) is affected by GHSA-ff3f-86qr-9cv3","path":"yarn.lock","line":null,"fingerprint":"@angular/router@4.4.6 (npm):GHSA-ff3f-86qr-9cv3"},{"rule_id":"osv/GHSA-qxh6-94w6-9r5p","severity":"high","message":"@angular/service-worker@1.0.0-beta.16 (npm) is affected by GHSA-qxh6-94w6-9r5p","path":"yarn.lock","line":null,"fingerprint":"@angular/service-worker@1.0.0-beta.16 (npm):GHSA-qxh6-94w6-9r5p"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@3.0.0 (npm) is affected by GHSA-93q8-gq69-wqmw","path":"yarn.lock","line":null,"fingerprint":"ansi-regex@3.0.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-fwr7-v2mv-hh25","severity":"high","message":"async@2.6.0 (npm) is affected by GHSA-fwr7-v2mv-hh25","path":"yarn.lock","line":null,"fingerprint":"async@2.6.0 (npm):GHSA-fwr7-v2mv-hh25"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.18.2 (npm) is affected by GHSA-27r3-jxmh-p828","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.2 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-qwcr-r2fm-qrc7","severity":"high","message":"body-parser@1.18.2 (npm) is affected by GHSA-qwcr-r2fm-qrc7","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.2 (npm):GHSA-qwcr-r2fm-qrc7"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.8 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.8 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.8 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.8 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.8 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.8 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.8 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.8 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.8 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.8 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@0.1.5 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"yarn.lock","line":null,"fingerprint":"braces@0.1.5 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@1.8.5 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"yarn.lock","line":null,"fingerprint":"braces@1.8.5 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-x9w5-v3q2-3rhw","severity":"high","message":"browserify-sign@4.0.4 (npm) is affected by GHSA-x9w5-v3q2-3rhw","path":"yarn.lock","line":null,"fingerprint":"browserify-sign@4.0.4 (npm):GHSA-x9w5-v3q2-3rhw"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@1.7.7 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"yarn.lock","line":null,"fingerprint":"browserslist@1.7.7 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@1.7.7 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"yarn.lock","line":null,"fingerprint":"browserslist@1.7.7 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@2.9.0 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"yarn.lock","line":null,"fingerprint":"browserslist@2.9.0 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@2.9.0 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"yarn.lock","line":null,"fingerprint":"browserslist@2.9.0 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-hc9w-4p87-j549","severity":"high","message":"cached-path-relative@1.0.1 (npm) is affected by GHSA-hc9w-4p87-j549","path":"yarn.lock","line":null,"fingerprint":"cached-path-relative@1.0.1 (npm):GHSA-hc9w-4p87-j549"},{"rule_id":"osv/GHSA-wg6g-ppvx-927h","severity":"high","message":"cached-path-relative@1.0.1 (npm) is affected by GHSA-wg6g-ppvx-927h","path":"yarn.lock","line":null,"fingerprint":"cached-path-relative@1.0.1 (npm):GHSA-wg6g-ppvx-927h"},{"rule_id":"osv/GHSA-vc2v-76pw-4v95","severity":"high","message":"compression@1.7.1 (npm) is affected by GHSA-vc2v-76pw-4v95","path":"yarn.lock","line":null,"fingerprint":"compression@1.7.1 (npm):GHSA-vc2v-76pw-4v95"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@3.0.1 (npm) is affected by GHSA-3xgq-45jj-v275","path":"yarn.lock","line":null,"fingerprint":"cross-spawn@3.0.1 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@5.1.0 (npm) is affected by GHSA-3xgq-45jj-v275","path":"yarn.lock","line":null,"fingerprint":"cross-spawn@5.1.0 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-p28h-cc7q-c4fg","severity":"high","message":"css-what@2.1.0 (npm) is affected by GHSA-p28h-cc7q-c4fg","path":"yarn.lock","line":null,"fingerprint":"css-what@2.1.0 (npm):GHSA-p28h-cc7q-c4fg"},{"rule_id":"osv/GHSA-9vvw-cc9w-f27h","severity":"high","message":"debug@2.2.0 (npm) is affected by GHSA-9vvw-cc9w-f27h","path":"yarn.lock","line":null,"fingerprint":"debug@2.2.0 (npm):GHSA-9vvw-cc9w-f27h"},{"rule_id":"osv/GHSA-9vvw-cc9w-f27h","severity":"high","message":"debug@2.3.3 (npm) is affected by GHSA-9vvw-cc9w-f27h","path":"yarn.lock","line":null,"fingerprint":"debug@2.3.3 (npm):GHSA-9vvw-cc9w-f27h"},{"rule_id":"osv/GHSA-vh7m-p724-62c2","severity":"high","message":"elliptic@6.4.0 (npm) is affected by GHSA-vh7m-p724-62c2","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.0 (npm):GHSA-vh7m-p724-62c2"},{"rule_id":"osv/GHSA-j4f2-536g-r55m","severity":"high","message":"engine.io@1.8.3 (npm) is affected by GHSA-j4f2-536g-r55m","path":"yarn.lock","line":null,"fingerprint":"engine.io@1.8.3 (npm):GHSA-j4f2-536g-r55m"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@0.1.4 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"yarn.lock","line":null,"fingerprint":"form-data@0.1.4 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@1.0.1 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"yarn.lock","line":null,"fingerprint":"form-data@1.0.1 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.1.4 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"yarn.lock","line":null,"fingerprint":"form-data@2.1.4 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.3.1 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"yarn.lock","line":null,"fingerprint":"form-data@2.3.1 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-xf7w-r453-m56c","severity":"high","message":"fstream@1.0.11 (npm) is affected by GHSA-xf7w-r453-m56c","path":"yarn.lock","line":null,"fingerprint":"fstream@1.0.11 (npm):GHSA-xf7w-r453-m56c"},{"rule_id":"osv/GHSA-44pw-h2cw-w3vq","severity":"high","message":"hawk@1.1.1 (npm) is affected by GHSA-44pw-h2cw-w3vq","path":"yarn.lock","line":null,"fingerprint":"hawk@1.1.1 (npm):GHSA-44pw-h2cw-w3vq"},{"rule_id":"osv/GHSA-jcpv-g9rr-qxrc","severity":"high","message":"hawk@1.1.1 (npm) is affected by GHSA-jcpv-g9rr-qxrc","path":"yarn.lock","line":null,"fingerprint":"hawk@1.1.1 (npm):GHSA-jcpv-g9rr-qxrc"},{"rule_id":"osv/GHSA-44pw-h2cw-w3vq","severity":"high","message":"hawk@3.1.3 (npm) is affected by GHSA-44pw-h2cw-w3vq","path":"yarn.lock","line":null,"fingerprint":"hawk@3.1.3 (npm):GHSA-44pw-h2cw-w3vq"},{"rule_id":"osv/GHSA-44pw-h2cw-w3vq","severity":"high","message":"hawk@6.0.2 (npm) is affected by GHSA-44pw-h2cw-w3vq","path":"yarn.lock","line":null,"fingerprint":"hawk@6.0.2 (npm):GHSA-44pw-h2cw-w3vq"},{"rule_id":"osv/GHSA-c429-5p7v-vgjp","severity":"high","message":"hoek@0.9.1 (npm) is affected by GHSA-c429-5p7v-vgjp","path":"yarn.lock","line":null,"fingerprint":"hoek@0.9.1 (npm):GHSA-c429-5p7v-vgjp"},{"rule_id":"osv/GHSA-jp4x-w63m-7wgm","severity":"high","message":"hoek@0.9.1 (npm) is affected by GHSA-jp4x-w63m-7wgm","path":"yarn.lock","line":null,"fingerprint":"hoek@0.9.1 (npm):GHSA-jp4x-w63m-7wgm"},{"rule_id":"osv/GHSA-c429-5p7v-vgjp","severity":"high","message":"hoek@2.16.3 (npm) is affected by GHSA-c429-5p7v-vgjp","path":"yarn.lock","line":null,"fingerprint":"hoek@2.16.3 (npm):GHSA-c429-5p7v-vgjp"},{"rule_id":"osv/GHSA-jp4x-w63m-7wgm","severity":"high","message":"hoek@2.16.3 (npm) is affected by GHSA-jp4x-w63m-7wgm","path":"yarn.lock","line":null,"fingerprint":"hoek@2.16.3 (npm):GHSA-jp4x-w63m-7wgm"},{"rule_id":"osv/GHSA-c429-5p7v-vgjp","severity":"high","message":"hoek@4.2.0 (npm) is affected by GHSA-c429-5p7v-vgjp","path":"yarn.lock","line":null,"fingerprint":"hoek@4.2.0 (npm):GHSA-c429-5p7v-vgjp"},{"rule_id":"osv/GHSA-jp4x-w63m-7wgm","severity":"high","message":"hoek@4.2.0 (npm) is affected by GHSA-jp4x-w63m-7wgm","path":"yarn.lock","line":null,"fingerprint":"hoek@4.2.0 (npm):GHSA-jp4x-w63m-7wgm"},{"rule_id":"osv/GHSA-pfq8-rq6v-vf5m","severity":"high","message":"html-minifier@3.5.6 (npm) is affected by GHSA-pfq8-rq6v-vf5m","path":"yarn.lock","line":null,"fingerprint":"html-minifier@3.5.6 (npm):GHSA-pfq8-rq6v-vf5m"},{"rule_id":"osv/GHSA-pfq8-rq6v-vf5m","severity":"high","message":"html-minifier@3.5.7 (npm) is affected by GHSA-pfq8-rq6v-vf5m","path":"yarn.lock","line":null,"fingerprint":"html-minifier@3.5.7 (npm):GHSA-pfq8-rq6v-vf5m"},{"rule_id":"osv/GHSA-6x33-pw7p-hmpq","severity":"high","message":"http-proxy@1.16.2 (npm) is affected by GHSA-6x33-pw7p-hmpq","path":"yarn.lock","line":null,"fingerprint":"http-proxy@1.16.2 (npm):GHSA-6x33-pw7p-hmpq"},{"rule_id":"osv/GHSA-c7qv-q95q-8v27","severity":"high","message":"http-proxy-middleware@0.17.4 (npm) is affected by GHSA-c7qv-q95q-8v27","path":"yarn.lock","line":null,"fingerprint":"http-proxy-middleware@0.17.4 (npm):GHSA-c7qv-q95q-8v27"},{"rule_id":"osv/GHSA-qqgx-2p2h-9c37","severity":"high","message":"ini@1.3.4 (npm) is affected by GHSA-qqgx-2p2h-9c37","path":"yarn.lock","line":null,"fingerprint":"ini@1.3.4 (npm):GHSA-qqgx-2p2h-9c37"},{"rule_id":"osv/GHSA-7r28-3m3f-r2pr","severity":"high","message":"is-svg@2.1.0 (npm) is affected by GHSA-7r28-3m3f-r2pr","path":"yarn.lock","line":null,"fingerprint":"is-svg@2.1.0 (npm):GHSA-7r28-3m3f-r2pr"},{"rule_id":"osv/GHSA-r8j5-h5cx-65gg","severity":"high","message":"is-svg@2.1.0 (npm) is affected by GHSA-r8j5-h5cx-65gg","path":"yarn.lock","line":null,"fingerprint":"is-svg@2.1.0 (npm):GHSA-r8j5-h5cx-65gg"},{"rule_id":"osv/GHSA-p9w8-2mpq-49h9","severity":"high","message":"is-url@1.2.2 (npm) is affected by GHSA-p9w8-2mpq-49h9","path":"yarn.lock","line":null,"fingerprint":"is-url@1.2.2 (npm):GHSA-p9w8-2mpq-49h9"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.7.0 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.7.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.7.0 (npm) is affected by GHSA-52cp-r559-cp3m","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.7.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.7.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.7.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@0.5.1 (npm) is affected by GHSA-9c47-m6qq-7p4h","path":"yarn.lock","line":null,"fingerprint":"json5@0.5.1 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-3rfm-jhwj-7488","severity":"high","message":"loader-utils@1.1.0 (npm) is affected by GHSA-3rfm-jhwj-7488","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.1.0 (npm):GHSA-3rfm-jhwj-7488"},{"rule_id":"osv/GHSA-hhq3-ff78-jv3g","severity":"high","message":"loader-utils@1.1.0 (npm) is affected by GHSA-hhq3-ff78-jv3g","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.1.0 (npm):GHSA-hhq3-ff78-jv3g"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@3.10.1 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"yarn.lock","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@3.10.1 (npm) is affected by GHSA-p6mc-m468-83gw","path":"yarn.lock","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.4 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.17.4 (npm) is affected by GHSA-p6mc-m468-83gw","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.4 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-wrvr-8mpx-r7pp","severity":"high","message":"mime@1.2.11 (npm) is affected by GHSA-wrvr-8mpx-r7pp","path":"yarn.lock","line":null,"fingerprint":"mime@1.2.11 (npm):GHSA-wrvr-8mpx-r7pp"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-f8q6-p94x-37v3","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-f8q6-p94x-37v3","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-f8q6-p94x-37v3"},{"rule_id":"osv/GHSA-446m-mv8f-q348","severity":"high","message":"moment@2.19.2 (npm) is affected by GHSA-446m-mv8f-q348","path":"yarn.lock","line":null,"fingerprint":"moment@2.19.2 (npm):GHSA-446m-mv8f-q348"},{"rule_id":"osv/GHSA-8hfj-j24r-96c4","severity":"high","message":"moment@2.19.2 (npm) is affected by GHSA-8hfj-j24r-96c4","path":"yarn.lock","line":null,"fingerprint":"moment@2.19.2 (npm):GHSA-8hfj-j24r-96c4"},{"rule_id":"osv/GHSA-wc69-rhjr-hc9g","severity":"high","message":"moment@2.19.2 (npm) is affected by GHSA-wc69-rhjr-hc9g","path":"yarn.lock","line":null,"fingerprint":"moment@2.19.2 (npm):GHSA-wc69-rhjr-hc9g"},{"rule_id":"osv/GHSA-4328-8hgf-7wjr","severity":"high","message":"npm@2.15.12 (npm) is affected by GHSA-4328-8hgf-7wjr","path":"yarn.lock","line":null,"fingerprint":"npm@2.15.12 (npm):GHSA-4328-8hgf-7wjr"},{"rule_id":"osv/GHSA-m6cx-g6qm-p2cx","severity":"high","message":"npm@2.15.12 (npm) is affected by GHSA-m6cx-g6qm-p2cx","path":"yarn.lock","line":null,"fingerprint":"npm@2.15.12 (npm):GHSA-m6cx-g6qm-p2cx"},{"rule_id":"osv/GHSA-ph34-pc88-72gc","severity":"high","message":"npm@2.15.12 (npm) is affected by GHSA-ph34-pc88-72gc","path":"yarn.lock","line":null,"fingerprint":"npm@2.15.12 (npm):GHSA-ph34-pc88-72gc"},{"rule_id":"osv/GHSA-x8qc-rrcw-4r46","severity":"high","message":"npm@2.15.12 (npm) is affected by GHSA-x8qc-rrcw-4r46","path":"yarn.lock","line":null,"fingerprint":"npm@2.15.12 (npm):GHSA-x8qc-rrcw-4r46"},{"rule_id":"osv/GHSA-pw54-mh39-w3hc","severity":"high","message":"npm-user-validate@0.1.5 (npm) is affected by GHSA-pw54-mh39-w3hc, GHSA-xgh6-85xh-479p","path":"yarn.lock","line":null,"fingerprint":"npm-user-validate@0.1.5 (npm):GHSA-pw54-mh39-w3hc"},{"rule_id":"osv/GHSA-rp65-9cf3-cjxr","severity":"high","message":"nth-check@1.0.1 (npm) is affected by GHSA-rp65-9cf3-cjxr","path":"yarn.lock","line":null,"fingerprint":"nth-check@1.0.1 (npm):GHSA-rp65-9cf3-cjxr"},{"rule_id":"osv/GHSA-37ch-88jc-xwx2","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-37ch-88jc-xwx2, GHSA-9wv6-86v2-598j","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-37ch-88jc-xwx2"},{"rule_id":"osv/GHSA-rhx6-c78j-4q9w","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-rhx6-c78j-4q9w","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-rhx6-c78j-4q9w"},{"rule_id":"osv/GHSA-9wv6-86v2-598j","severity":"high","message":"path-to-regexp@1.7.0 (npm) is affected by GHSA-9wv6-86v2-598j","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@1.7.0 (npm):GHSA-9wv6-86v2-598j"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@5.2.18 (npm) is affected by GHSA-6g55-p6wh-862q","path":"yarn.lock","line":null,"fingerprint":"postcss@5.2.18 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@5.2.18 (npm) is affected by GHSA-r28c-9q8g-f849","path":"yarn.lock","line":null,"fingerprint":"postcss@5.2.18 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@6.0.14 (npm) is affected by GHSA-6g55-p6wh-862q","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.14 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@6.0.14 (npm) is affected by GHSA-r28c-9q8g-f849","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.14 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-gj77-59wh-66hg","severity":"high","message":"prismjs@1.8.4 (npm) is affected by GHSA-gj77-59wh-66hg","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.8.4 (npm):GHSA-gj77-59wh-66hg"},{"rule_id":"osv/GHSA-wvhm-4hhf-97x9","severity":"high","message":"prismjs@1.8.4 (npm) is affected by GHSA-wvhm-4hhf-97x9","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.8.4 (npm):GHSA-wvhm-4hhf-97x9"},{"rule_id":"osv/GHSA-gqgv-6jq5-jjj9","severity":"high","message":"qs@2.3.3 (npm) is affected by GHSA-gqgv-6jq5-jjj9","path":"yarn.lock","line":null,"fingerprint":"qs@2.3.3 (npm):GHSA-gqgv-6jq5-jjj9"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@2.3.3 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@2.3.3 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.2.3 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@6.2.3 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.4.0 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@6.4.0 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.5.1 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.1 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-gcx4-mw62-g8wm","severity":"high","message":"rollup@0.50.0 (npm) is affected by GHSA-gcx4-mw62-g8wm","path":"yarn.lock","line":null,"fingerprint":"rollup@0.50.0 (npm):GHSA-gcx4-mw62-g8wm"},{"rule_id":"osv/GHSA-mw96-cpmx-2vgc","severity":"high","message":"rollup@0.50.0 (npm) is affected by GHSA-mw96-cpmx-2vgc","path":"yarn.lock","line":null,"fingerprint":"rollup@0.50.0 (npm):GHSA-mw96-cpmx-2vgc"},{"rule_id":"osv/GHSA-7mwh-4pqv-wmr8","severity":"high","message":"scss-tokenizer@0.2.3 (npm) is affected by GHSA-7mwh-4pqv-wmr8","path":"yarn.lock","line":null,"fingerprint":"scss-tokenizer@0.2.3 (npm):GHSA-7mwh-4pqv-wmr8"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@4.3.6 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@4.3.6 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.1.1 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@5.1.1 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.3.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@5.3.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.4.1 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@5.4.1 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.6.1 (npm) is affected by GHSA-395f-4hp3-45gv","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-4rq4-32rv-6wp6","severity":"high","message":"shelljs@0.3.0 (npm) is affected by GHSA-4rq4-32rv-6wp6","path":"yarn.lock","line":null,"fingerprint":"shelljs@0.3.0 (npm):GHSA-4rq4-32rv-6wp6"},{"rule_id":"osv/GHSA-4rq4-32rv-6wp6","severity":"high","message":"shelljs@0.5.3 (npm) is affected by GHSA-4rq4-32rv-6wp6","path":"yarn.lock","line":null,"fingerprint":"shelljs@0.5.3 (npm):GHSA-4rq4-32rv-6wp6"},{"rule_id":"osv/GHSA-4rq4-32rv-6wp6","severity":"high","message":"shelljs@0.7.8 (npm) is affected by GHSA-4rq4-32rv-6wp6","path":"yarn.lock","line":null,"fingerprint":"shelljs@0.7.8 (npm):GHSA-4rq4-32rv-6wp6"},{"rule_id":"osv/GHSA-25hc-qcg6-38wj","severity":"high","message":"socket.io@1.7.3 (npm) is affected by GHSA-25hc-qcg6-38wj","path":"yarn.lock","line":null,"fingerprint":"socket.io@1.7.3 (npm):GHSA-25hc-qcg6-38wj"},{"rule_id":"osv/GHSA-2m8v-j782-fhvr","severity":"high","message":"socket.io-parser@2.3.1 (npm) is affected by GHSA-2m8v-j782-fhvr","path":"yarn.lock","line":null,"fingerprint":"socket.io-parser@2.3.1 (npm):GHSA-2m8v-j782-fhvr"},{"rule_id":"osv/GHSA-677m-j7p3-52f9","severity":"high","message":"socket.io-parser@2.3.1 (npm) is affected by GHSA-677m-j7p3-52f9","path":"yarn.lock","line":null,"fingerprint":"socket.io-parser@2.3.1 (npm):GHSA-677m-j7p3-52f9"},{"rule_id":"osv/GHSA-cqmj-92xf-r6r9","severity":"high","message":"socket.io-parser@2.3.1 (npm) is affected by GHSA-cqmj-92xf-r6r9","path":"yarn.lock","line":null,"fingerprint":"socket.io-parser@2.3.1 (npm):GHSA-cqmj-92xf-r6r9"},{"rule_id":"osv/GHSA-xfhh-g9f5-x4m4","severity":"high","message":"socket.io-parser@2.3.1 (npm) is affected by GHSA-xfhh-g9f5-x4m4","path":"yarn.lock","line":null,"fingerprint":"socket.io-parser@2.3.1 (npm):GHSA-xfhh-g9f5-x4m4"},{"rule_id":"osv/GHSA-2m39-62fm-q8r3","severity":"high","message":"sshpk@1.13.1 (npm) is affected by GHSA-2m39-62fm-q8r3","path":"yarn.lock","line":null,"fingerprint":"sshpk@1.13.1 (npm):GHSA-2m39-62fm-q8r3"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-3jfq-g458-7qm9","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-5955-9wpr-37jh","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-83g3-92jg-28cx","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-gfjr-3jmm-4g9v","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-gfjr-3jmm-4g9v","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-gfjr-3jmm-4g9v"},{"rule_id":"osv/GHSA-j44m-qm6p-hp7m","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-j44m-qm6p-hp7m","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-j44m-qm6p-hp7m"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-r292-9mhp-454m","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@1.0.2 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"yarn.lock","line":null,"fingerprint":"tar@1.0.2 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-3jfq-g458-7qm9","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-5955-9wpr-37jh","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-83g3-92jg-28cx","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-j44m-qm6p-hp7m","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-j44m-qm6p-hp7m","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-j44m-qm6p-hp7m"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-r292-9mhp-454m","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"yarn.lock","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-3jfq-g458-7qm9","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-5955-9wpr-37jh","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-83g3-92jg-28cx","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-9r2w-394v-53qc","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-9r2w-394v-53qc","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-9r2w-394v-53qc"},{"rule_id":"osv/GHSA-j44m-qm6p-hp7m","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-j44m-qm6p-hp7m","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-j44m-qm6p-hp7m"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-qq89-hq3f-393p","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-qq89-hq3f-393p","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-qq89-hq3f-393p"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-r292-9mhp-454m","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r628-mhmh-qjhw","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-r628-mhmh-qjhw","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-r628-mhmh-qjhw"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@4.1.1 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"yarn.lock","line":null,"fingerprint":"tar@4.1.1 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.31 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"yarn.lock","line":null,"fingerprint":"tmp@0.0.31 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.33 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"yarn.lock","line":null,"fingerprint":"tmp@0.0.33 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@1.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v","path":"yarn.lock","line":null,"fingerprint":"trim-newlines@1.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-qpx9-hpmf-5gmw","severity":"high","message":"underscore@1.2.1 (npm) is affected by GHSA-qpx9-hpmf-5gmw","path":"yarn.lock","line":null,"fingerprint":"underscore@1.2.1 (npm):GHSA-qpx9-hpmf-5gmw"},{"rule_id":"osv/GHSA-qpx9-hpmf-5gmw","severity":"high","message":"underscore@1.7.0 (npm) is affected by GHSA-qpx9-hpmf-5gmw","path":"yarn.lock","line":null,"fingerprint":"underscore@1.7.0 (npm):GHSA-qpx9-hpmf-5gmw"},{"rule_id":"osv/GHSA-qpx9-hpmf-5gmw","severity":"high","message":"underscore@1.8.3 (npm) is affected by GHSA-qpx9-hpmf-5gmw","path":"yarn.lock","line":null,"fingerprint":"underscore@1.8.3 (npm):GHSA-qpx9-hpmf-5gmw"},{"rule_id":"osv/GHSA-mgfv-m47x-4wqp","severity":"high","message":"useragent@2.2.1 (npm) is affected by GHSA-mgfv-m47x-4wqp","path":"yarn.lock","line":null,"fingerprint":"useragent@2.2.1 (npm):GHSA-mgfv-m47x-4wqp"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@2.0.3 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"yarn.lock","line":null,"fingerprint":"uuid@2.0.3 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.0.1 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"yarn.lock","line":null,"fingerprint":"uuid@3.0.1 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.1.0 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"yarn.lock","line":null,"fingerprint":"uuid@3.1.0 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-g84c-rxfj-3j2c","severity":"high","message":"webpack-dev-middleware@1.12.0 (npm) is affected by GHSA-g84c-rxfj-3j2c","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-middleware@1.12.0 (npm):GHSA-g84c-rxfj-3j2c"},{"rule_id":"osv/GHSA-wr3j-pwj9-hqq6","severity":"high","message":"webpack-dev-middleware@1.12.0 (npm) is affected by GHSA-wr3j-pwj9-hqq6","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-middleware@1.12.0 (npm):GHSA-wr3j-pwj9-hqq6"},{"rule_id":"osv/GHSA-g78m-2chm-r7qv","severity":"high","message":"websocket-extensions@0.1.3 (npm) is affected by GHSA-g78m-2chm-r7qv","path":"yarn.lock","line":null,"fingerprint":"websocket-extensions@0.1.3 (npm):GHSA-g78m-2chm-r7qv"},{"rule_id":"osv/GHSA-5v72-xg48-5rpm","severity":"high","message":"ws@1.1.2 (npm) is affected by GHSA-5v72-xg48-5rpm","path":"yarn.lock","line":null,"fingerprint":"ws@1.1.2 (npm):GHSA-5v72-xg48-5rpm"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@1.1.2 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"yarn.lock","line":null,"fingerprint":"ws@1.1.2 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@3.3.1 (npm) is affected by GHSA-3h5v-q93c-6h6q","path":"yarn.lock","line":null,"fingerprint":"ws@3.3.1 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@3.3.1 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"yarn.lock","line":null,"fingerprint":"ws@3.3.1 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-27p8-2357-5qqv","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-27p8-2357-5qqv","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-27p8-2357-5qqv"},{"rule_id":"osv/GHSA-2v35-w6hq-6mfw","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-2v35-w6hq-6mfw","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-2v35-w6hq-6mfw"},{"rule_id":"osv/GHSA-4w3w-2rp5-g8jm","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-4w3w-2rp5-g8jm","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-4w3w-2rp5-g8jm"},{"rule_id":"osv/GHSA-8344-3jmq-59r6","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-8344-3jmq-59r6","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-8344-3jmq-59r6"},{"rule_id":"osv/GHSA-965w-775f-mr7g","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-965w-775f-mr7g","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-965w-775f-mr7g"},{"rule_id":"osv/GHSA-c7q8-3ch8-vqpv","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-c7q8-3ch8-vqpv","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-c7q8-3ch8-vqpv"},{"rule_id":"osv/GHSA-f6ww-3ggp-fr8h","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-f6ww-3ggp-fr8h","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-f6ww-3ggp-fr8h"},{"rule_id":"osv/GHSA-j759-j44w-7fr8","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-j759-j44w-7fr8","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-j759-j44w-7fr8"},{"rule_id":"osv/GHSA-w2rr-34g9-rvrj","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-w2rr-34g9-rvrj","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-w2rr-34g9-rvrj"},{"rule_id":"osv/GHSA-wh4c-j3r5-mjhp","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-wh4c-j3r5-mjhp","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-wh4c-j3r5-mjhp"},{"rule_id":"osv/GHSA-x6wf-f3px-wcqx","severity":"high","message":"xmldom@0.1.27 (npm) is affected by GHSA-x6wf-f3px-wcqx","path":"yarn.lock","line":null,"fingerprint":"xmldom@0.1.27 (npm):GHSA-x6wf-f3px-wcqx"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@3.2.1 (npm) is affected by GHSA-c4w7-xm78-47vh","path":"yarn.lock","line":null,"fingerprint":"y18n@3.2.1 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-jfgx-762w-99vr","severity":"medium","message":"@angular/common@4.4.4 (npm) is affected by GHSA-jfgx-762w-99vr","path":"yarn.lock","line":null,"fingerprint":"@angular/common@4.4.4 (npm):GHSA-jfgx-762w-99vr"},{"rule_id":"osv/GHSA-p297-fm68-3q8c","severity":"medium","message":"@angular/common@4.4.4 (npm) is affected by GHSA-p297-fm68-3q8c","path":"yarn.lock","line":null,"fingerprint":"@angular/common@4.4.4 (npm):GHSA-p297-fm68-3q8c"},{"rule_id":"osv/GHSA-58w9-8g37-x9v5","severity":"medium","message":"@angular/compiler@4.4.4 (npm) is affected by GHSA-58w9-8g37-x9v5","path":"yarn.lock","line":null,"fingerprint":"@angular/compiler@4.4.4 (npm):GHSA-58w9-8g37-x9v5"},{"rule_id":"osv/GHSA-f3m7-gqxr-g87x","severity":"medium","message":"@angular/compiler@4.4.4 (npm) is affected by GHSA-f3m7-gqxr-g87x","path":"yarn.lock","line":null,"fingerprint":"@angular/compiler@4.4.4 (npm):GHSA-f3m7-gqxr-g87x"},{"rule_id":"osv/GHSA-hh8m-fm6v-7cvg","severity":"medium","message":"@angular/compiler@4.4.4 (npm) is affected by GHSA-hh8m-fm6v-7cvg","path":"yarn.lock","line":null,"fingerprint":"@angular/compiler@4.4.4 (npm):GHSA-hh8m-fm6v-7cvg"},{"rule_id":"osv/GHSA-692r-grfm-v8x7","severity":"medium","message":"@angular/core@4.4.4 (npm) is affected by GHSA-692r-grfm-v8x7","path":"yarn.lock","line":null,"fingerprint":"@angular/core@4.4.4 (npm):GHSA-692r-grfm-v8x7"},{"rule_id":"osv/GHSA-c75v-2vq8-878f","severity":"medium","message":"@angular/core@4.4.4 (npm) is affected by GHSA-c75v-2vq8-878f","path":"yarn.lock","line":null,"fingerprint":"@angular/core@4.4.4 (npm):GHSA-c75v-2vq8-878f"},{"rule_id":"osv/GHSA-f3m7-gqxr-g87x","severity":"medium","message":"@angular/core@4.4.4 (npm) is affected by GHSA-f3m7-gqxr-g87x","path":"yarn.lock","line":null,"fingerprint":"@angular/core@4.4.4 (npm):GHSA-f3m7-gqxr-g87x"},{"rule_id":"osv/GHSA-hh8m-fm6v-7cvg","severity":"medium","message":"@angular/core@4.4.4 (npm) is affected by GHSA-hh8m-fm6v-7cvg","path":"yarn.lock","line":null,"fingerprint":"@angular/core@4.4.4 (npm):GHSA-hh8m-fm6v-7cvg"},{"rule_id":"osv/GHSA-w739-gvwx-grc3","severity":"medium","message":"@angular/platform-server@4.4.4 (npm) is affected by GHSA-w739-gvwx-grc3","path":"yarn.lock","line":null,"fingerprint":"@angular/platform-server@4.4.4 (npm):GHSA-w739-gvwx-grc3"},{"rule_id":"osv/GHSA-95qp-cmmw-mgqv","severity":"medium","message":"@angular/service-worker@1.0.0-beta.16 (npm) is affected by GHSA-95qp-cmmw-mgqv","path":"yarn.lock","line":null,"fingerprint":"@angular/service-worker@1.0.0-beta.16 (npm):GHSA-95qp-cmmw-mgqv"},{"rule_id":"osv/GHSA-gv2q-mqqv-365m","severity":"medium","message":"@angular/service-worker@1.0.0-beta.16 (npm) is affected by GHSA-gv2q-mqqv-365m","path":"yarn.lock","line":null,"fingerprint":"@angular/service-worker@1.0.0-beta.16 (npm):GHSA-gv2q-mqqv-365m"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@4.11.8 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"yarn.lock","line":null,"fingerprint":"ajv@4.11.8 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-v88g-cgmw-v5xw","severity":"medium","message":"ajv@4.11.8 (npm) is affected by GHSA-v88g-cgmw-v5xw","path":"yarn.lock","line":null,"fingerprint":"ajv@4.11.8 (npm):GHSA-v88g-cgmw-v5xw"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@5.3.0 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"yarn.lock","line":null,"fingerprint":"ajv@5.3.0 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-v88g-cgmw-v5xw","severity":"medium","message":"ajv@5.3.0 (npm) is affected by GHSA-v88g-cgmw-v5xw","path":"yarn.lock","line":null,"fingerprint":"ajv@5.3.0 (npm):GHSA-v88g-cgmw-v5xw"},{"rule_id":"osv/GHSA-pp7h-53gx-mx7r","severity":"medium","message":"bl@0.9.5 (npm) is affected by GHSA-pp7h-53gx-mx7r","path":"yarn.lock","line":null,"fingerprint":"bl@0.9.5 (npm):GHSA-pp7h-53gx-mx7r"},{"rule_id":"osv/GHSA-pp7h-53gx-mx7r","severity":"medium","message":"bl@1.1.2 (npm) is affected by GHSA-pp7h-53gx-mx7r","path":"yarn.lock","line":null,"fingerprint":"bl@1.1.2 (npm):GHSA-pp7h-53gx-mx7r"},{"rule_id":"osv/GHSA-pp7h-53gx-mx7r","severity":"medium","message":"bl@1.2.1 (npm) is affected by GHSA-pp7h-53gx-mx7r","path":"yarn.lock","line":null,"fingerprint":"bl@1.2.1 (npm):GHSA-pp7h-53gx-mx7r"},{"rule_id":"osv/GHSA-378v-28hj-76wf","severity":"medium","message":"bn.js@4.11.8 (npm) is affected by GHSA-378v-28hj-76wf","path":"yarn.lock","line":null,"fingerprint":"bn.js@4.11.8 (npm):GHSA-378v-28hj-76wf"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.8 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.8 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.8 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.8 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-wxhq-pm8v-cw75","severity":"medium","message":"clean-css@4.1.9 (npm) is affected by GHSA-wxhq-pm8v-cw75","path":"yarn.lock","line":null,"fingerprint":"clean-css@4.1.9 (npm):GHSA-wxhq-pm8v-cw75"},{"rule_id":"osv/GHSA-257v-vj4p-3w2h","severity":"medium","message":"color-string@0.3.0 (npm) is affected by GHSA-257v-vj4p-3w2h","path":"yarn.lock","line":null,"fingerprint":"color-string@0.3.0 (npm):GHSA-257v-vj4p-3w2h"},{"rule_id":"osv/GHSA-pxg6-pf52-xh8x","severity":"medium","message":"cookie@0.3.1 (npm) is affected by GHSA-pxg6-pf52-xh8x","path":"yarn.lock","line":null,"fingerprint":"cookie@0.3.1 (npm):GHSA-pxg6-pf52-xh8x"},{"rule_id":"osv/GHSA-h452-7996-h45h","severity":"medium","message":"cookiejar@2.1.1 (npm) is affected by GHSA-h452-7996-h45h","path":"yarn.lock","line":null,"fingerprint":"cookiejar@2.1.1 (npm):GHSA-h452-7996-h45h"},{"rule_id":"osv/GHSA-h6ch-v84p-w6p9","severity":"medium","message":"diff@3.4.0 (npm) is affected by GHSA-h6ch-v84p-w6p9","path":"yarn.lock","line":null,"fingerprint":"diff@3.4.0 (npm):GHSA-h6ch-v84p-w6p9"},{"rule_id":"osv/GHSA-9q64-mpxx-87fg","severity":"medium","message":"ecstatic@2.2.1 (npm) is affected by GHSA-9q64-mpxx-87fg","path":"yarn.lock","line":null,"fingerprint":"ecstatic@2.2.1 (npm):GHSA-9q64-mpxx-87fg"},{"rule_id":"osv/GHSA-jc84-3g44-wf2q","severity":"medium","message":"ecstatic@2.2.1 (npm) is affected by GHSA-jc84-3g44-wf2q","path":"yarn.lock","line":null,"fingerprint":"ecstatic@2.2.1 (npm):GHSA-jc84-3g44-wf2q"},{"rule_id":"osv/GHSA-434g-2637-qmqr","severity":"medium","message":"elliptic@6.4.0 (npm) is affected by GHSA-434g-2637-qmqr","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.0 (npm):GHSA-434g-2637-qmqr"},{"rule_id":"osv/GHSA-49q7-c7j4-3p7m","severity":"medium","message":"elliptic@6.4.0 (npm) is affected by GHSA-49q7-c7j4-3p7m","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.0 (npm):GHSA-49q7-c7j4-3p7m"},{"rule_id":"osv/GHSA-848j-6mx2-7j84","severity":"medium","message":"elliptic@6.4.0 (npm) is affected by GHSA-848j-6mx2-7j84","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.0 (npm):GHSA-848j-6mx2-7j84"},{"rule_id":"osv/GHSA-977x-g7h5-7qgw","severity":"medium","message":"elliptic@6.4.0 (npm) is affected by GHSA-977x-g7h5-7qgw","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.0 (npm):GHSA-977x-g7h5-7qgw"},{"rule_id":"osv/GHSA-f7q4-pwc6-w24p","severity":"medium","message":"elliptic@6.4.0 (npm) is affected by GHSA-f7q4-pwc6-w24p","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.0 (npm):GHSA-f7q4-pwc6-w24p"},{"rule_id":"osv/GHSA-fc9h-whq2-v747","severity":"medium","message":"elliptic@6.4.0 (npm) is affected by GHSA-fc9h-whq2-v747","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.0 (npm):GHSA-fc9h-whq2-v747"},{"rule_id":"osv/GHSA-r9p9-mrjm-926w","severity":"medium","message":"elliptic@6.4.0 (npm) is affected by GHSA-r9p9-mrjm-926w","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.0 (npm):GHSA-r9p9-mrjm-926w"},{"rule_id":"osv/GHSA-r7qp-cfhv-p84w","severity":"medium","message":"engine.io@1.8.3 (npm) is affected by GHSA-r7qp-cfhv-p84w","path":"yarn.lock","line":null,"fingerprint":"engine.io@1.8.3 (npm):GHSA-r7qp-cfhv-p84w"},{"rule_id":"osv/GHSA-4gmj-3p3h-gm8h","severity":"medium","message":"es5-ext@0.10.35 (npm) is affected by GHSA-4gmj-3p3h-gm8h","path":"yarn.lock","line":null,"fingerprint":"es5-ext@0.10.35 (npm):GHSA-4gmj-3p3h-gm8h"},{"rule_id":"osv/GHSA-qw6h-vgh9-j6wx","severity":"medium","message":"express@4.16.2 (npm) is affected by GHSA-qw6h-vgh9-j6wx","path":"yarn.lock","line":null,"fingerprint":"express@4.16.2 (npm):GHSA-qw6h-vgh9-j6wx"},{"rule_id":"osv/GHSA-rv95-896h-c2vc","severity":"medium","message":"express@4.16.2 (npm) is affected by GHSA-rv95-896h-c2vc","path":"yarn.lock","line":null,"fingerprint":"express@4.16.2 (npm):GHSA-rv95-896h-c2vc"},{"rule_id":"osv/GHSA-qrmc-fj45-qfc2","severity":"medium","message":"extend@3.0.1 (npm) is affected by GHSA-qrmc-fj45-qfc2","path":"yarn.lock","line":null,"fingerprint":"extend@3.0.1 (npm):GHSA-qrmc-fj45-qfc2"},{"rule_id":"osv/MAL-2023-462","severity":"medium","message":"fsevents@1.1.3 (npm) is affected by MAL-2023-462","path":"yarn.lock","line":null,"fingerprint":"fsevents@1.1.3 (npm):MAL-2023-462"},{"rule_id":"osv/GHSA-pfrx-2q88-qq97","severity":"medium","message":"got@3.3.1 (npm) is affected by GHSA-pfrx-2q88-qq97","path":"yarn.lock","line":null,"fingerprint":"got@3.3.1 (npm):GHSA-pfrx-2q88-qq97"},{"rule_id":"osv/GHSA-43f8-2h32-f4cj","severity":"medium","message":"hosted-git-info@2.1.5 (npm) is affected by GHSA-43f8-2h32-f4cj","path":"yarn.lock","line":null,"fingerprint":"hosted-git-info@2.1.5 (npm):GHSA-43f8-2h32-f4cj"},{"rule_id":"osv/GHSA-43f8-2h32-f4cj","severity":"medium","message":"hosted-git-info@2.5.0 (npm) is affected by GHSA-43f8-2h32-f4cj","path":"yarn.lock","line":null,"fingerprint":"hosted-git-info@2.5.0 (npm):GHSA-43f8-2h32-f4cj"},{"rule_id":"osv/GHSA-64mm-vxmg-q3vj","severity":"medium","message":"http-proxy-middleware@0.17.4 (npm) is affected by GHSA-64mm-vxmg-q3vj","path":"yarn.lock","line":null,"fingerprint":"http-proxy-middleware@0.17.4 (npm):GHSA-64mm-vxmg-q3vj"},{"rule_id":"osv/GHSA-4hpf-3wq7-5rpr","severity":"medium","message":"is-my-json-valid@2.16.1 (npm) is affected by GHSA-4hpf-3wq7-5rpr","path":"yarn.lock","line":null,"fingerprint":"is-my-json-valid@2.16.1 (npm):GHSA-4hpf-3wq7-5rpr"},{"rule_id":"osv/GHSA-2pr6-76vf-7546","severity":"medium","message":"js-yaml@3.7.0 (npm) is affected by GHSA-2pr6-76vf-7546","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.7.0 (npm):GHSA-2pr6-76vf-7546"},{"rule_id":"osv/GHSA-8j8c-7jfh-h6hx","severity":"medium","message":"js-yaml@3.7.0 (npm) is affected by GHSA-8j8c-7jfh-h6hx","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.7.0 (npm):GHSA-8j8c-7jfh-h6hx"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.7.0 (npm) is affected by GHSA-h67p-54hq-rp68","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.7.0 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@3.7.0 (npm) is affected by GHSA-mh29-5h37-fv8m","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.7.0 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-282f-qqgm-c34q","severity":"medium","message":"jsonpointer@4.0.1 (npm) is affected by GHSA-282f-qqgm-c34q","path":"yarn.lock","line":null,"fingerprint":"jsonpointer@4.0.1 (npm):GHSA-282f-qqgm-c34q"},{"rule_id":"osv/GHSA-7x7c-qm48-pq9c","severity":"medium","message":"karma@1.7.1 (npm) is affected by GHSA-7x7c-qm48-pq9c","path":"yarn.lock","line":null,"fingerprint":"karma@1.7.1 (npm):GHSA-7x7c-qm48-pq9c"},{"rule_id":"osv/GHSA-rc3x-jf5g-xvc5","severity":"medium","message":"karma@1.7.1 (npm) is affected by GHSA-rc3x-jf5g-xvc5","path":"yarn.lock","line":null,"fingerprint":"karma@1.7.1 (npm):GHSA-rc3x-jf5g-xvc5"},{"rule_id":"osv/GHSA-4xc9-xhrj-v574","severity":"medium","message":"lodash@3.10.1 (npm) is affected by GHSA-4xc9-xhrj-v574","path":"yarn.lock","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-4xc9-xhrj-v574"},{"rule_id":"osv/GHSA-fvqr-27wr-82fm","severity":"medium","message":"lodash@3.10.1 (npm) is affected by GHSA-fvqr-27wr-82fm","path":"yarn.lock","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-fvqr-27wr-82fm"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.17.4 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-4xc9-xhrj-v574","severity":"medium","message":"lodash@4.17.4 (npm) is affected by GHSA-4xc9-xhrj-v574","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-4xc9-xhrj-v574"},{"rule_id":"osv/GHSA-fvqr-27wr-82fm","severity":"medium","message":"lodash@4.17.4 (npm) is affected by GHSA-fvqr-27wr-82fm","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-fvqr-27wr-82fm"},{"rule_id":"osv/GHSA-x5rq-j2xg-h7qm","severity":"medium","message":"lodash@4.17.4 (npm) is affected by GHSA-x5rq-j2xg-h7qm","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-x5rq-j2xg-h7qm"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.17.4 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.4 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-5947-m4fg-xhqg","severity":"medium","message":"lodash.mergewith@4.6.0 (npm) is affected by GHSA-5947-m4fg-xhqg","path":"yarn.lock","line":null,"fingerprint":"lodash.mergewith@4.6.0 (npm):GHSA-5947-m4fg-xhqg"},{"rule_id":"osv/GHSA-779f-wgxg-qr8f","severity":"medium","message":"lodash.mergewith@4.6.0 (npm) is affected by GHSA-779f-wgxg-qr8f","path":"yarn.lock","line":null,"fingerprint":"lodash.mergewith@4.6.0 (npm):GHSA-779f-wgxg-qr8f"},{"rule_id":"osv/GHSA-82v2-mx6x-wq7q","severity":"medium","message":"log4js@0.6.38 (npm) is affected by GHSA-82v2-mx6x-wq7q","path":"yarn.lock","line":null,"fingerprint":"log4js@0.6.38 (npm):GHSA-82v2-mx6x-wq7q"},{"rule_id":"osv/GHSA-4xcv-9jjx-gfj3","severity":"medium","message":"mem@1.1.0 (npm) is affected by GHSA-4xcv-9jjx-gfj3","path":"yarn.lock","line":null,"fingerprint":"mem@1.1.0 (npm):GHSA-4xcv-9jjx-gfj3"},{"rule_id":"osv/GHSA-952p-6rrq-rcjv","severity":"medium","message":"micromatch@2.3.11 (npm) is affected by GHSA-952p-6rrq-rcjv","path":"yarn.lock","line":null,"fingerprint":"micromatch@2.3.11 (npm):GHSA-952p-6rrq-rcjv"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.015,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":325.0,"function_nloc":1707.0,"mean_ccn":1.61,"p90_ccn":3.0,"complex_functions":0.0,"long_functions":0.0,"many_param_functions":1.0,"risky_nloc_share":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":2179.0,"duplicated_lines":310.0,"duplicated_share":0.1423,"files":92.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: scripts/buildPWA.sh:1 and scripts/dependencyReport.sh:1","ref":"scripts/buildPWA.sh","url":"https://github.com/wordpress-clients/hybrid/blob/9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3/scripts/buildPWA.sh#L1","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/item/item.ts:2 and src/components/list/list.ts:2","ref":"src/components/item/item.ts","url":"https://github.com/wordpress-clients/hybrid/blob/9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3/src/components/item/item.ts#L2","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/components/menu-items/menu-items.ts:98 and src/components/menu-items/menu-items.ts:121","ref":"src/components/menu-items/menu-items.ts","url":"https://github.com/wordpress-clients/hybrid/blob/9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3/src/components/menu-items/menu-items.ts#L98","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/effects/list.ts:15 and src/effects/search.ts:15","ref":"src/effects/list.ts","url":"https://github.com/wordpress-clients/hybrid/blob/9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3/src/effects/list.ts#L15","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/pages/list/list.ts:70 and src/pages/search/search.ts:123","ref":"src/pages/list/list.ts","url":"https://github.com/wordpress-clients/hybrid/blob/9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3/src/pages/list/list.ts#L70","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/reducers/author.ts:4 and src/reducers/items.ts:6","ref":"src/reducers/author.ts","url":"https://github.com/wordpress-clients/hybrid/blob/9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3/src/reducers/author.ts#L4","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/reducers/items.ts:16 and src/reducers/itemsSlugMapping.ts:6","ref":"src/reducers/items.ts","url":"https://github.com/wordpress-clients/hybrid/blob/9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3/src/reducers/items.ts#L16","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/reducers/list.ts:8 and src/reducers/search.ts:8","ref":"src/reducers/list.ts","url":"https://github.com/wordpress-clients/hybrid/blob/9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3/src/reducers/list.ts#L8","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: test-config/karma-ci.conf.js:1 and test-config/karma.conf.js:1","ref":"test-config/karma-ci.conf.js","url":"https://github.com/wordpress-clients/hybrid/blob/9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3/test-config/karma-ci.conf.js#L1","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":18.0,"weighted_findings":5.25,"scanned_lines":3622.0,"category:best-practice":2.0,"category:correctness":16.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"test-config/protractor.conf.js","line":25,"fingerprint":"javascript.lang.best-practice.lazy-load-module:test-config/protractor.conf.js:25"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/buildPWA.sh","line":10,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/buildPWA.sh:10"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/buildPWA.sh","line":16,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/buildPWA.sh:16"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/buildPWA.sh","line":22,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/buildPWA.sh:22"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/buildPWA.sh","line":28,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/buildPWA.sh:28"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/buildPWA.sh","line":31,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/buildPWA.sh:31"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/buildPWA.sh","line":32,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/buildPWA.sh:32"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/buildPWA.sh","line":33,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/buildPWA.sh:33"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/buildPWA.sh","line":34,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/buildPWA.sh:34"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/buildPWAAndRun.sh","line":9,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/buildPWAAndRun.sh:9"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/dependencyReport.sh","line":15,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/dependencyReport.sh:15"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/dependencyReport.sh","line":24,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/dependencyReport.sh:24"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/dependencyReport.sh","line":25,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/dependencyReport.sh:25"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/dependencyReport.sh","line":26,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/dependencyReport.sh:26"},{"rule_id":"opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command","severity":"low","message":"Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may use a variable that starts with an underscore e.g. $_X instead of ","path":"scripts/dependencyReport.sh","line":27,"fingerprint":"bash.lang.correctness.unquoted-variable-expansion-in-command:scripts/dependencyReport.sh:27"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/app/app.component.ts","line":14,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/app/app.component.ts:14"},{"rule_id":"opengrep/javascript.lang.correctness.missing-template-string-indicator","severity":"low","message":"This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'?","path":"src/app/app.component.ts","line":14,"fingerprint":"javascript.lang.correctness.missing-template-string-indicator:src/app/app.component.ts:14"},{"rule_id":"opengrep/typescript.lang.best-practice.moment-deprecated","severity":"low","message":"Moment is a legacy project in maintenance mode. Consider using libraries that are actively supported, e.g. `dayjs`.","path":"src/utils/item.ts","line":1,"fingerprint":"typescript.lang.best-practice.moment-deprecated:src/utils/item.ts:1"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.0917,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0992,"test_lines":166.0,"source_lines":3622.0,"test_ratio":0.0458,"ci_files":1.0,"cochange_share":0.0248,"cochange_commits":121.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .travis.yml","ref":".travis.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (npm run test)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["npm run test"],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":1.0,"readme_lines":62.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CHANGELOG.md","ref":"CHANGELOG.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":0.0,"escapes":83.0,"escapes_per_kloc":25.0},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}