Leaderboard github.com
wordpress-clients/hybrid
[I don't have time to work on this anymore. Use at your own risk] Build WordPress based PWA, iOS, Android & Windows phones apps in minutes!
AI provenance
0%
none-detected
- Confidence
- 65%
- Coverage
- 100%
Estimated share of AI-generated code. Explicit attribution is a lower bound.
Code quality
67/100
adequate
- Confidence
- 90%
- Coverage
- 100%
Complexity, duplication, lint density, tests, CI, docs and review process.
Security
53/100
weak
- Confidence
- 85%
- Coverage
- 100%
Secrets, static analysis, vulnerable dependencies, CI and supply-chain posture.
AI provenance
0% none-detected
No AI attribution or AI-consistent velocity signals detected.
How the score is built
- Explicitly attributed share0%
- Unattributed share in AI-pace bursts0%
- Estimated AI-generated share0%
- AI tool configuration files0
- Work sessions at AI pace0
- Releases at AI pace0
- Coding-style index (1.0+ means possible)0.00
Lines added per month all AI-attributed share
- 2014-110 · 0% AI
- 2014-120 · 0% AI
- 2015-01389 · 0% AI
- 2015-02252 · 0% AI
- 2015-0326 · 0% AI
- 2015-040 · 0% AI
- 2015-0594 · 0% AI
- 2015-06119 · 0% AI
- 2015-07202 · 0% AI
- 2015-084 · 0% AI
- 2015-0987 · 0% AI
- 2015-101,206 · 0% AI
- 2015-111 · 0% AI
- 2015-12458 · 0% AI
- 2016-01885 · 0% AI
- 2016-02422 · 0% AI
- 2016-0372 · 0% AI
- 2016-041 · 0% AI
- 2016-052 · 0% AI
- 2016-0611 · 0% AI
- 2016-070 · 0% AI
- 2016-080 · 0% AI
- 2016-0939 · 0% AI
- 2016-10121 · 0% AI
- 2016-118 · 0% AI
- 2016-12741 · 0% AI
- 2017-011,521 · 0% AI
- 2017-021,895 · 0% AI
- 2017-03828 · 0% AI
- 2017-04362 · 0% AI
- 2017-05552 · 0% AI
- 2017-0691 · 0% AI
- 2017-070 · 0% AI
- 2017-0874 · 0% AI
- 2017-10700 · 0% AI
- 2017-11192 · 0% AI
- 2017-12584 · 0% AI
- 2018-010 · 0% AI
- 2018-020 · 0% AI
Evidence by analyzer
Explicit AI attributionok
- attributed_commit_share
- 0.0%
- attributed_commits
- 0
- attributed_loc
- 0
- attributed_loc_share
- 0.0%
- commits
- 663
- effective_loc
- 11,939
- tools_detected
- 0
AI tool configurationok
- artifacts
- 0
- tools_configured
- 0
- workflow_agents
- 0
Commit velocityok
- excluded_import_loc
- 0
- flagged_loc
- 0
- flagged_loc_share
- 0.0%
- flagged_units
- 0
- max_loc_per_hour
- 726
- measured_loc
- 11,939
- median_loc_per_hour
- 53.12
- pr_timed_units
- 1
- pre_ai_era_burst_loc
- 0
- pre_ai_era_bursts
- 0
- pre_ai_era_measured_loc
- 11,939
- work_units
- 147
Release velocityok
- flagged_releases
- 0
- max_loc_per_day
- 107.60
- releases
- 35
Coding styleok
- count:assistant_voice
- 0
- count:emoji_in_code
- 0
- count:narrated_steps
- 0
- count:placeholder
- 0
- files:assistant_voice
- 0
- files:emoji_in_code
- 0
- files:narrated_steps
- 0
- files:placeholder
- 0
- index
- 0
- lines_scanned
- 3,622
- per_kloc:assistant_voice
- 0
- per_kloc:emoji_in_code
- 0
- per_kloc:narrated_steps
- 0
- per_kloc:placeholder
- 0
Code quality
67 adequate
Code quality is adequate: test-to-source ratio 0.05, CI runs tests; 0% of function code in complex or long functions; 14% duplicated lines. Weakest area: type safety.
How the score is built
- Complexity100
- Duplication43
- Lint and smells70
- Tests and CI58
- Documentation85
- Type safety0
- Review processnot measured
Evidence by analyzer
Complexity (lizard)ok
- complex_functions
- 0
- function_nloc
- 1,707
- functions
- 325
- long_functions
- 0
- many_param_functions
- 1
- mean_ccn
- 1.61
- p90_ccn
- 3
- risky_nloc_share
- 0.0%
Duplication (jscpd)ok9 items
- 6+ duplicated lines: scripts/buildPWA.sh:1 and scripts/dependencyReport.sh:1
- 6+ duplicated lines: src/components/item/item.ts:2 and src/components/list/list.ts:2
- 6+ duplicated lines: src/components/menu-items/menu-items.ts:98 and src/components/menu-items/menu-items.ts:121
- 6+ duplicated lines: src/effects/list.ts:15 and src/effects/search.ts:15
- 6+ duplicated lines: src/pages/list/list.ts:70 and src/pages/search/search.ts:123
- 6+ duplicated lines: src/reducers/author.ts:4 and src/reducers/items.ts:6
- 6+ duplicated lines: src/reducers/items.ts:16 and src/reducers/itemsSlugMapping.ts:6
- 6+ duplicated lines: src/reducers/list.ts:8 and src/reducers/search.ts:8
- 6+ duplicated lines: test-config/karma-ci.conf.js:1 and test-config/karma.conf.js:1
- compared_lines
- 2,179
- duplicated_lines
- 310
- duplicated_share
- 14.2%
- files
- 92
Lintok
- category:best-practice
- 2
- category:correctness
- 16
- findings
- 18
- scanned_lines
- 3,622
- weighted_findings
- 5.25
Tests and CIok2 items
- CI config: .travis.yml
.travis.yml - CI runs tests (npm run test)
- check:ci_present
- yes
- check:ci_runs_lint
- no
- check:ci_runs_tests
- yes
- check:has_tests
- yes
- check:test_ratio
- no
- check:tests_cochange
- no
- ci_files
- 1
- cochange_commits
- 121
- cochange_share
- 2.5%
- source_lines
- 3,622
- test_lines
- 166
- test_ratio
- 0.05
Documentationok3 items
- README.md
README.md - LICENSE
LICENSE - CHANGELOG.md
CHANGELOG.md
- check:changelog
- yes
- check:contributing
- no
- check:license
- yes
- check:readme
- yes
- readme_lines
- 62
Type safetyok
- check:low_escape_density
- no
- check:strict_config
- no
- escapes
- 83
- escapes_per_kloc
- 25
Security
53 weak
Security posture is weak: 377 known vulnerabilities in 161 dependencies; 3 high-severity SAST findings. Weakest area: dependencies.
How the score is built
- Secrets100
- Static analysis (SAST)72
- Vulnerable dependencies0
- CI workflowsnot measured
- Security posture0
- OpenSSF Scorecardnot measured
Evidence by analyzer
OpenSSF Scorecardskipped
no published OpenSSF Scorecard result for this repo
Package registriesok
- checked
- 76
- declared
- 76
- lookup_errors
- 0
- missing
- 0
- recent
- 0
Secrets (gitleaks)ok
- secrets_current
- 0
- secrets_history
- 0
- secrets_low_confidence
- 0
- secrets_nonprod
- 0
Static analysis (opengrep)ok
- findings
- 4
- findings_high
- 3
- findings_low
- 1
- findings_medium
- 0
- parse_errors
- 0
- scanned_lines
- 3,622
- weighted_findings
- 3.36
Dependencies (osv-scanner)ok
- penalty
- 1,289
- vulnerabilities
- 377
- vulnerable_packages
- 161
- vulns_critical
- 37
- vulns_high
- 197
- vulns_low
- 9
- vulns_medium
- 113
- vulns_unknown
- 21
CI workflows (zizmor)skipped
Security postureok
- check:dependency_updates
- no
- check:lockfiles
- yes
- check:security_policy
- no
- check:signed_commits
- no
- signed_commit_share
- 1.5%
- unpinned_manifests
- 0
Release downloadsok
- binary_assets
- 0
- signals
- 0
- suspicious
- 0
Findings
37 critical200 high67 medium18 low
| Severity | Rule | Location | Message | Tool |
|---|---|---|---|---|
| critical | osv/GHSA-23hp-3jrh-7fpw |
yarn.lock | [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw | Dependencies (osv-scanner) |
| critical | osv/GHSA-23hp-3jrh-7fpw |
yarn.lock | [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw | Dependencies (osv-scanner) |
| critical | osv/GHSA-23hp-3jrh-7fpw |
yarn.lock | [email protected] (npm) is affected by GHSA-23hp-3jrh-7fpw | Dependencies (osv-scanner) |
| critical | osv/GHSA-4c7m-wxvm-r7gc |
yarn.lock | [email protected] (npm) is affected by GHSA-4c7m-wxvm-r7gc, GHSA-pch5-whg9-qr2r | Dependencies (osv-scanner) |
| critical | osv/GHSA-4cpg-3vgw-4877 |
yarn.lock | [email protected] (npm) is affected by GHSA-4cpg-3vgw-4877 | Dependencies (osv-scanner) |
| critical | osv/GHSA-4cpg-3vgw-4877 |
yarn.lock | [email protected] (npm) is affected by GHSA-4cpg-3vgw-4877 | Dependencies (osv-scanner) |
| critical | osv/GHSA-72mh-269x-7mh5 |
yarn.lock | [email protected] (npm) is affected by GHSA-72mh-269x-7mh5 | Dependencies (osv-scanner) |
| critical | osv/GHSA-76p3-8jx3-jpfq |
yarn.lock | [email protected] (npm) is affected by GHSA-76p3-8jx3-jpfq | Dependencies (osv-scanner) |
| critical | osv/GHSA-76p3-8jx3-jpfq |
yarn.lock | [email protected] (npm) is affected by GHSA-76p3-8jx3-jpfq | Dependencies (osv-scanner) |
| critical | osv/GHSA-896r-f27r-55mw |
yarn.lock | [email protected] (npm) is affected by GHSA-896r-f27r-55mw | Dependencies (osv-scanner) |
| critical | osv/GHSA-8r6j-v8pm-fqw3 |
yarn.lock | [email protected] (npm) is affected by GHSA-8r6j-v8pm-fqw3 | Dependencies (osv-scanner) |
| critical | osv/GHSA-95m3-7q98-8xr5 |
yarn.lock | [email protected] (npm) is affected by GHSA-95m3-7q98-8xr5 | Dependencies (osv-scanner) |
| critical | osv/GHSA-cf4h-3jhx-xvhq |
yarn.lock | [email protected] (npm) is affected by GHSA-cf4h-3jhx-xvhq | Dependencies (osv-scanner) |
| critical | osv/GHSA-cf4h-3jhx-xvhq |
yarn.lock | [email protected] (npm) is affected by GHSA-cf4h-3jhx-xvhq | Dependencies (osv-scanner) |
| critical | osv/GHSA-cpq7-6gpm-g9rc |
yarn.lock | [email protected] (npm) is affected by GHSA-cpq7-6gpm-g9rc | Dependencies (osv-scanner) |
| critical | osv/GHSA-crh6-fp67-6883 |
yarn.lock | [email protected] (npm) is affected by GHSA-crh6-fp67-6883 | Dependencies (osv-scanner) |
| critical | osv/GHSA-fjxv-7rqg-78g4 |
yarn.lock | [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 | Dependencies (osv-scanner) |
| critical | osv/GHSA-fjxv-7rqg-78g4 |
yarn.lock | [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 | Dependencies (osv-scanner) |
| critical | osv/GHSA-fjxv-7rqg-78g4 |
yarn.lock | [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 | Dependencies (osv-scanner) |
| critical | osv/GHSA-fjxv-7rqg-78g4 |
yarn.lock | [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 | Dependencies (osv-scanner) |
| critical | osv/GHSA-gff7-g5r8-mg8m |
yarn.lock | [email protected] (npm) is affected by GHSA-gff7-g5r8-mg8m | Dependencies (osv-scanner) |
| critical | osv/GHSA-h4j5-c7cj-74xg |
yarn.lock | [email protected] (npm) is affected by GHSA-h4j5-c7cj-74xg | Dependencies (osv-scanner) |
| critical | osv/GHSA-h7cp-r72f-jxh6 |
yarn.lock | [email protected] (npm) is affected by GHSA-h7cp-r72f-jxh6 | Dependencies (osv-scanner) |
| critical | osv/GHSA-hr2v-3952-633q |
yarn.lock | [email protected] (npm) is affected by GHSA-hr2v-3952-633q | Dependencies (osv-scanner) |
| critical | osv/GHSA-jf85-cpcp-j695 |
yarn.lock | [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 | Dependencies (osv-scanner) |
| critical | osv/GHSA-jf85-cpcp-j695 |
yarn.lock | [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 | Dependencies (osv-scanner) |
| critical | osv/GHSA-jqcg-44mw-7w3h |
yarn.lock | [email protected] (npm) is affected by GHSA-jqcg-44mw-7w3h | Dependencies (osv-scanner) |
| critical | osv/GHSA-pp57-mqmh-44h7 |
yarn.lock | [email protected] (npm) is affected by GHSA-pp57-mqmh-44h7 | Dependencies (osv-scanner) |
| critical | osv/GHSA-qm95-pgcg-qqfq |
yarn.lock | [email protected] (npm) is affected by GHSA-qm95-pgcg-qqfq | Dependencies (osv-scanner) |
| critical | osv/GHSA-rq8g-5pc5-wrhr |
yarn.lock | [email protected] (npm) is affected by GHSA-rq8g-5pc5-wrhr | Dependencies (osv-scanner) |
| critical | osv/GHSA-v62p-rq8g-8h59 |
yarn.lock | [email protected] (npm) is affected by GHSA-v62p-rq8g-8h59 | Dependencies (osv-scanner) |
| critical | osv/GHSA-vjh7-7g9h-fjfh |
yarn.lock | [email protected] (npm) is affected by GHSA-vjh7-7g9h-fjfh | Dependencies (osv-scanner) |
| critical | osv/GHSA-w7jw-789q-3m8p |
yarn.lock | [email protected] (npm) is affected by GHSA-w7jw-789q-3m8p | Dependencies (osv-scanner) |
| critical | osv/GHSA-xv26-6w52-cph6 |
yarn.lock | [email protected] (npm) is affected by GHSA-xv26-6w52-cph6 | Dependencies (osv-scanner) |
| critical | osv/GHSA-xvch-5gv4-984h |
yarn.lock | [email protected] (npm) is affected by GHSA-xvch-5gv4-984h | Dependencies (osv-scanner) |
| critical | osv/GHSA-xvch-5gv4-984h |
yarn.lock | [email protected] (npm) is affected by GHSA-xvch-5gv4-984h | Dependencies (osv-scanner) |
| critical | osv/GHSA-xvch-5gv4-984h |
yarn.lock | [email protected] (npm) is affected by GHSA-xvch-5gv4-984h | Dependencies (osv-scanner) |
| high | opengrep/dockerfile.security.missing-user |
Dockerfile:14 | By not specifying a USER, a program in the container may run as 'root'. This is a security hazard. If an attacker can control a process running as root, they may have control over the container. Ensure that the last USER in a Dockerfile... | Static analysis (opengrep) |
| high | opengrep/javascript.browser.security.insecure-document-method |
src/pipes/highlight/highlight.ts:25 | User controlled data in methods like `innerHTML`, `outerHTML` or `document.write` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] | Static analysis (opengrep) |
| high | opengrep/javascript.browser.security.insecure-innerhtml |
src/pipes/highlight/highlight.ts:25 | User controlled data in a `el.innerHTML` is an anti-pattern that can lead to XSS vulnerabilities [confidence low] | Static analysis (opengrep) |
| high | osv/GHSA-23c5-xmqv-rm74 |
yarn.lock | [email protected] (npm) is affected by GHSA-23c5-xmqv-rm74 | Dependencies (osv-scanner) |
| high | osv/GHSA-25hc-qcg6-38wj |
yarn.lock | [email protected] (npm) is affected by GHSA-25hc-qcg6-38wj | Dependencies (osv-scanner) |
| high | osv/GHSA-27p8-2357-5qqv |
yarn.lock | [email protected] (npm) is affected by GHSA-27p8-2357-5qqv | Dependencies (osv-scanner) |
| high | osv/GHSA-27r3-jxmh-p828 |
yarn.lock | [email protected] (npm) is affected by GHSA-27r3-jxmh-p828 | Dependencies (osv-scanner) |
| high | osv/GHSA-2883-xcg3-v3hh |
yarn.lock | [email protected] (npm) is affected by GHSA-2883-xcg3-v3hh | Dependencies (osv-scanner) |
| high | osv/GHSA-2m39-62fm-q8r3 |
yarn.lock | [email protected] (npm) is affected by GHSA-2m39-62fm-q8r3 | Dependencies (osv-scanner) |
| high | osv/GHSA-2m8v-j782-fhvr |
yarn.lock | [email protected] (npm) is affected by GHSA-2m8v-j782-fhvr | Dependencies (osv-scanner) |
| high | osv/GHSA-2v35-w6hq-6mfw |
yarn.lock | [email protected] (npm) is affected by GHSA-2v35-w6hq-6mfw | Dependencies (osv-scanner) |
| high | osv/GHSA-34x7-hfp2-rc4v |
yarn.lock | [email protected] (npm) is affected by GHSA-34x7-hfp2-rc4v | Dependencies (osv-scanner) |
| high | osv/GHSA-34x7-hfp2-rc4v |
yarn.lock | [email protected] (npm) is affected by GHSA-34x7-hfp2-rc4v | Dependencies (osv-scanner) |
| high | osv/GHSA-34x7-hfp2-rc4v |
yarn.lock | [email protected] (npm) is affected by GHSA-34x7-hfp2-rc4v | Dependencies (osv-scanner) |
| high | osv/GHSA-35jh-r3h4-6jhm |
yarn.lock | [email protected] (npm) is affected by GHSA-35jh-r3h4-6jhm | Dependencies (osv-scanner) |
| high | osv/GHSA-35jh-r3h4-6jhm |
yarn.lock | [email protected] (npm) is affected by GHSA-35jh-r3h4-6jhm | Dependencies (osv-scanner) |
| high | osv/GHSA-37ch-88jc-xwx2 |
yarn.lock | [email protected] (npm) is affected by GHSA-37ch-88jc-xwx2, GHSA-9wv6-86v2-598j | Dependencies (osv-scanner) |
| high | osv/GHSA-395f-4hp3-45gv |
yarn.lock | [email protected] (npm) is affected by GHSA-395f-4hp3-45gv | Dependencies (osv-scanner) |
| high | osv/GHSA-39pv-4j6c-2g6v |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-39pv-4j6c-2g6v | Dependencies (osv-scanner) |
| high | osv/GHSA-3h5v-q93c-6h6q |
yarn.lock | [email protected] (npm) is affected by GHSA-3h5v-q93c-6h6q | Dependencies (osv-scanner) |
| high | osv/GHSA-3jfq-g458-7qm9 |
yarn.lock | [email protected] (npm) is affected by GHSA-3jfq-g458-7qm9 | Dependencies (osv-scanner) |
| high | osv/GHSA-3jfq-g458-7qm9 |
yarn.lock | [email protected] (npm) is affected by GHSA-3jfq-g458-7qm9 | Dependencies (osv-scanner) |
| high | osv/GHSA-3jfq-g458-7qm9 |
yarn.lock | [email protected] (npm) is affected by GHSA-3jfq-g458-7qm9 | Dependencies (osv-scanner) |
| high | osv/GHSA-3jxr-9vmj-r5cp |
yarn.lock | [email protected] (npm) is affected by GHSA-3jxr-9vmj-r5cp | Dependencies (osv-scanner) |
| high | osv/GHSA-3ppc-4f35-3m26 |
yarn.lock | [email protected] (npm) is affected by GHSA-3ppc-4f35-3m26 | Dependencies (osv-scanner) |
| high | osv/GHSA-3rfm-jhwj-7488 |
yarn.lock | [email protected] (npm) is affected by GHSA-3rfm-jhwj-7488 | Dependencies (osv-scanner) |
| high | osv/GHSA-3xgq-45jj-v275 |
yarn.lock | [email protected] (npm) is affected by GHSA-3xgq-45jj-v275 | Dependencies (osv-scanner) |
| high | osv/GHSA-3xgq-45jj-v275 |
yarn.lock | [email protected] (npm) is affected by GHSA-3xgq-45jj-v275 | Dependencies (osv-scanner) |
| high | osv/GHSA-4328-8hgf-7wjr |
yarn.lock | [email protected] (npm) is affected by GHSA-4328-8hgf-7wjr | Dependencies (osv-scanner) |
| high | osv/GHSA-446m-mv8f-q348 |
yarn.lock | [email protected] (npm) is affected by GHSA-446m-mv8f-q348 | Dependencies (osv-scanner) |
| high | osv/GHSA-44pw-h2cw-w3vq |
yarn.lock | [email protected] (npm) is affected by GHSA-44pw-h2cw-w3vq | Dependencies (osv-scanner) |
| high | osv/GHSA-44pw-h2cw-w3vq |
yarn.lock | [email protected] (npm) is affected by GHSA-44pw-h2cw-w3vq | Dependencies (osv-scanner) |
| high | osv/GHSA-44pw-h2cw-w3vq |
yarn.lock | [email protected] (npm) is affected by GHSA-44pw-h2cw-w3vq | Dependencies (osv-scanner) |
| high | osv/GHSA-45q2-gjvg-7973 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-45q2-gjvg-7973 | Dependencies (osv-scanner) |
| high | osv/GHSA-48r7-hpm6-gfxm |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-48r7-hpm6-gfxm | Dependencies (osv-scanner) |
| high | osv/GHSA-4rq4-32rv-6wp6 |
yarn.lock | [email protected] (npm) is affected by GHSA-4rq4-32rv-6wp6 | Dependencies (osv-scanner) |
| high | osv/GHSA-4rq4-32rv-6wp6 |
yarn.lock | [email protected] (npm) is affected by GHSA-4rq4-32rv-6wp6 | Dependencies (osv-scanner) |
| high | osv/GHSA-4rq4-32rv-6wp6 |
yarn.lock | [email protected] (npm) is affected by GHSA-4rq4-32rv-6wp6 | Dependencies (osv-scanner) |
| high | osv/GHSA-4w3w-2rp5-g8jm |
yarn.lock | [email protected] (npm) is affected by GHSA-4w3w-2rp5-g8jm | Dependencies (osv-scanner) |
| high | osv/GHSA-52cp-r559-cp3m |
yarn.lock | [email protected] (npm) is affected by GHSA-52cp-r559-cp3m | Dependencies (osv-scanner) |
| high | osv/GHSA-58c5-g7wp-6w37 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-58c5-g7wp-6w37 | Dependencies (osv-scanner) |
| high | osv/GHSA-5955-9wpr-37jh |
yarn.lock | [email protected] (npm) is affected by GHSA-5955-9wpr-37jh | Dependencies (osv-scanner) |
| high | osv/GHSA-5955-9wpr-37jh |
yarn.lock | [email protected] (npm) is affected by GHSA-5955-9wpr-37jh | Dependencies (osv-scanner) |
| high | osv/GHSA-5955-9wpr-37jh |
yarn.lock | [email protected] (npm) is affected by GHSA-5955-9wpr-37jh | Dependencies (osv-scanner) |
| high | osv/GHSA-5p4m-2wfm-xmqj |
yarn.lock | [email protected] (npm) is affected by GHSA-5p4m-2wfm-xmqj | Dependencies (osv-scanner) |
| high | osv/GHSA-5v72-xg48-5rpm |
yarn.lock | [email protected] (npm) is affected by GHSA-5v72-xg48-5rpm | Dependencies (osv-scanner) |
| high | osv/GHSA-62vg-58rm-qff7 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-62vg-58rm-qff7 | Dependencies (osv-scanner) |
| high | osv/GHSA-677m-j7p3-52f9 |
yarn.lock | [email protected] (npm) is affected by GHSA-677m-j7p3-52f9 | Dependencies (osv-scanner) |
| high | osv/GHSA-6g55-p6wh-862q |
yarn.lock | [email protected] (npm) is affected by GHSA-6g55-p6wh-862q | Dependencies (osv-scanner) |
| high | osv/GHSA-6g55-p6wh-862q |
yarn.lock | [email protected] (npm) is affected by GHSA-6g55-p6wh-862q | Dependencies (osv-scanner) |
| high | osv/GHSA-6j4f-fj2g-mc7p |
yarn.lock | [email protected] (npm) is affected by GHSA-6j4f-fj2g-mc7p | Dependencies (osv-scanner) |
| high | osv/GHSA-6x33-pw7p-hmpq |
yarn.lock | [email protected] (npm) is affected by GHSA-6x33-pw7p-hmpq | Dependencies (osv-scanner) |
| high | osv/GHSA-73wf-gq98-2v4g |
yarn.lock | [email protected] (npm) is affected by GHSA-73wf-gq98-2v4g | Dependencies (osv-scanner) |
| high | osv/GHSA-73wf-gq98-2v4g |
yarn.lock | [email protected] (npm) is affected by GHSA-73wf-gq98-2v4g | Dependencies (osv-scanner) |
| high | osv/GHSA-7mwh-4pqv-wmr8 |
yarn.lock | [email protected] (npm) is affected by GHSA-7mwh-4pqv-wmr8 | Dependencies (osv-scanner) |
| high | osv/GHSA-7p7h-4mm5-852v |
yarn.lock | [email protected] (npm) is affected by GHSA-7p7h-4mm5-852v | Dependencies (osv-scanner) |
| high | osv/GHSA-7r28-3m3f-r2pr |
yarn.lock | [email protected] (npm) is affected by GHSA-7r28-3m3f-r2pr | Dependencies (osv-scanner) |
| high | osv/GHSA-7r86-cg39-jmmj |
yarn.lock | [email protected] (npm) is affected by GHSA-7r86-cg39-jmmj | Dependencies (osv-scanner) |
| high | osv/GHSA-8344-3jmq-59r6 |
yarn.lock | [email protected] (npm) is affected by GHSA-8344-3jmq-59r6 | Dependencies (osv-scanner) |
| high | osv/GHSA-83g3-92jg-28cx |
yarn.lock | [email protected] (npm) is affected by GHSA-83g3-92jg-28cx | Dependencies (osv-scanner) |
| high | osv/GHSA-83g3-92jg-28cx |
yarn.lock | [email protected] (npm) is affected by GHSA-83g3-92jg-28cx | Dependencies (osv-scanner) |
| high | osv/GHSA-83g3-92jg-28cx |
yarn.lock | [email protected] (npm) is affected by GHSA-83g3-92jg-28cx | Dependencies (osv-scanner) |
| high | osv/GHSA-8hfj-j24r-96c4 |
yarn.lock | [email protected] (npm) is affected by GHSA-8hfj-j24r-96c4 | Dependencies (osv-scanner) |
| high | osv/GHSA-8qq5-rm4j-mr97 |
yarn.lock | [email protected] (npm) is affected by GHSA-8qq5-rm4j-mr97 | Dependencies (osv-scanner) |
| high | osv/GHSA-8qq5-rm4j-mr97 |
yarn.lock | [email protected] (npm) is affected by GHSA-8qq5-rm4j-mr97 | Dependencies (osv-scanner) |
| high | osv/GHSA-8qq5-rm4j-mr97 |
yarn.lock | [email protected] (npm) is affected by GHSA-8qq5-rm4j-mr97 | Dependencies (osv-scanner) |
| high | osv/GHSA-8x88-c5mf-7j5w |
yarn.lock | [email protected] (npm) is affected by GHSA-8x88-c5mf-7j5w | Dependencies (osv-scanner) |
| high | osv/GHSA-8x88-c5mf-7j5w |
yarn.lock | [email protected] (npm) is affected by GHSA-8x88-c5mf-7j5w | Dependencies (osv-scanner) |
| high | osv/GHSA-8x88-c5mf-7j5w |
yarn.lock | [email protected] (npm) is affected by GHSA-8x88-c5mf-7j5w | Dependencies (osv-scanner) |
| high | osv/GHSA-93q8-gq69-wqmw |
yarn.lock | [email protected] (npm) is affected by GHSA-93q8-gq69-wqmw | Dependencies (osv-scanner) |
| high | osv/GHSA-965w-775f-mr7g |
yarn.lock | [email protected] (npm) is affected by GHSA-965w-775f-mr7g | Dependencies (osv-scanner) |
| high | osv/GHSA-96hv-2xvq-fx4p |
yarn.lock | [email protected] (npm) is affected by GHSA-96hv-2xvq-fx4p | Dependencies (osv-scanner) |
| high | osv/GHSA-96hv-2xvq-fx4p |
yarn.lock | [email protected] (npm) is affected by GHSA-96hv-2xvq-fx4p | Dependencies (osv-scanner) |
| high | osv/GHSA-9c47-m6qq-7p4h |
yarn.lock | [email protected] (npm) is affected by GHSA-9c47-m6qq-7p4h | Dependencies (osv-scanner) |
| high | osv/GHSA-9ppj-qmqm-q256 |
yarn.lock | [email protected] (npm) is affected by GHSA-9ppj-qmqm-q256 | Dependencies (osv-scanner) |
| high | osv/GHSA-9ppj-qmqm-q256 |
yarn.lock | [email protected] (npm) is affected by GHSA-9ppj-qmqm-q256 | Dependencies (osv-scanner) |
| high | osv/GHSA-9ppj-qmqm-q256 |
yarn.lock | [email protected] (npm) is affected by GHSA-9ppj-qmqm-q256 | Dependencies (osv-scanner) |
| high | osv/GHSA-9r2w-394v-53qc |
yarn.lock | [email protected] (npm) is affected by GHSA-9r2w-394v-53qc | Dependencies (osv-scanner) |
| high | osv/GHSA-9vvw-cc9w-f27h |
yarn.lock | [email protected] (npm) is affected by GHSA-9vvw-cc9w-f27h | Dependencies (osv-scanner) |
| high | osv/GHSA-9vvw-cc9w-f27h |
yarn.lock | [email protected] (npm) is affected by GHSA-9vvw-cc9w-f27h | Dependencies (osv-scanner) |
| high | osv/GHSA-9wv6-86v2-598j |
yarn.lock | [email protected] (npm) is affected by GHSA-9wv6-86v2-598j | Dependencies (osv-scanner) |
| high | osv/GHSA-c2qf-rxjj-qqgw |
yarn.lock | [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw | Dependencies (osv-scanner) |
| high | osv/GHSA-c2qf-rxjj-qqgw |
yarn.lock | [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw | Dependencies (osv-scanner) |
| high | osv/GHSA-c2qf-rxjj-qqgw |
yarn.lock | [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw | Dependencies (osv-scanner) |
| high | osv/GHSA-c2qf-rxjj-qqgw |
yarn.lock | [email protected] (npm) is affected by GHSA-c2qf-rxjj-qqgw | Dependencies (osv-scanner) |
| high | osv/GHSA-c429-5p7v-vgjp |
yarn.lock | [email protected] (npm) is affected by GHSA-c429-5p7v-vgjp | Dependencies (osv-scanner) |
| high | osv/GHSA-c429-5p7v-vgjp |
yarn.lock | [email protected] (npm) is affected by GHSA-c429-5p7v-vgjp | Dependencies (osv-scanner) |
| high | osv/GHSA-c429-5p7v-vgjp |
yarn.lock | [email protected] (npm) is affected by GHSA-c429-5p7v-vgjp | Dependencies (osv-scanner) |
| high | osv/GHSA-c4w7-xm78-47vh |
yarn.lock | [email protected] (npm) is affected by GHSA-c4w7-xm78-47vh | Dependencies (osv-scanner) |
| high | osv/GHSA-c7q8-3ch8-vqpv |
yarn.lock | [email protected] (npm) is affected by GHSA-c7q8-3ch8-vqpv | Dependencies (osv-scanner) |
| high | osv/GHSA-c7qv-q95q-8v27 |
yarn.lock | [email protected] (npm) is affected by GHSA-c7qv-q95q-8v27 | Dependencies (osv-scanner) |
| high | osv/GHSA-c83g-rgw3-j3cx |
yarn.lock | [email protected] (npm) is affected by GHSA-c83g-rgw3-j3cx | Dependencies (osv-scanner) |
| high | osv/GHSA-c83g-rgw3-j3cx |
yarn.lock | [email protected] (npm) is affected by GHSA-c83g-rgw3-j3cx | Dependencies (osv-scanner) |
| high | osv/GHSA-cqmj-92xf-r6r9 |
yarn.lock | [email protected] (npm) is affected by GHSA-cqmj-92xf-r6r9 | Dependencies (osv-scanner) |
| high | osv/GHSA-f67j-2jqw-jpq7 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-f67j-2jqw-jpq7 | Dependencies (osv-scanner) |
| high | osv/GHSA-f6mr-pjwc-34m4 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-f6mr-pjwc-34m4 | Dependencies (osv-scanner) |
| high | osv/GHSA-f6ww-3ggp-fr8h |
yarn.lock | [email protected] (npm) is affected by GHSA-f6ww-3ggp-fr8h | Dependencies (osv-scanner) |
| high | osv/GHSA-f8q6-p94x-37v3 |
yarn.lock | [email protected] (npm) is affected by GHSA-f8q6-p94x-37v3 | Dependencies (osv-scanner) |
| high | osv/GHSA-ff3f-86qr-9cv3 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-ff3f-86qr-9cv3 | Dependencies (osv-scanner) |
| high | osv/GHSA-fwr7-v2mv-hh25 |
yarn.lock | [email protected] (npm) is affected by GHSA-fwr7-v2mv-hh25 | Dependencies (osv-scanner) |
| high | osv/GHSA-g78m-2chm-r7qv |
yarn.lock | [email protected] (npm) is affected by GHSA-g78m-2chm-r7qv | Dependencies (osv-scanner) |
| high | osv/GHSA-g84c-rxfj-3j2c |
yarn.lock | [email protected] (npm) is affected by GHSA-g84c-rxfj-3j2c | Dependencies (osv-scanner) |
| high | osv/GHSA-gcx4-mw62-g8wm |
yarn.lock | [email protected] (npm) is affected by GHSA-gcx4-mw62-g8wm | Dependencies (osv-scanner) |
| high | osv/GHSA-gfjr-3jmm-4g9v |
yarn.lock | [email protected] (npm) is affected by GHSA-gfjr-3jmm-4g9v | Dependencies (osv-scanner) |
| high | osv/GHSA-gj77-59wh-66hg |
yarn.lock | [email protected] (npm) is affected by GHSA-gj77-59wh-66hg | Dependencies (osv-scanner) |
| high | osv/GHSA-gqgv-6jq5-jjj9 |
yarn.lock | [email protected] (npm) is affected by GHSA-gqgv-6jq5-jjj9 | Dependencies (osv-scanner) |
| high | osv/GHSA-grv7-fg5c-xmjg |
yarn.lock | [email protected] (npm) is affected by GHSA-grv7-fg5c-xmjg | Dependencies (osv-scanner) |
| high | osv/GHSA-grv7-fg5c-xmjg |
yarn.lock | [email protected] (npm) is affected by GHSA-grv7-fg5c-xmjg | Dependencies (osv-scanner) |
| high | osv/GHSA-gxx4-3xcv-f8qx |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-gxx4-3xcv-f8qx | Dependencies (osv-scanner) |
| high | osv/GHSA-hc9w-4p87-j549 |
yarn.lock | [email protected] (npm) is affected by GHSA-hc9w-4p87-j549 | Dependencies (osv-scanner) |
| high | osv/GHSA-hhq3-ff78-jv3g |
yarn.lock | [email protected] (npm) is affected by GHSA-hhq3-ff78-jv3g | Dependencies (osv-scanner) |
| high | osv/GHSA-hmw2-7cc7-3qxx |
yarn.lock | [email protected] (npm) is affected by GHSA-hmw2-7cc7-3qxx | Dependencies (osv-scanner) |
| high | osv/GHSA-hmw2-7cc7-3qxx |
yarn.lock | [email protected] (npm) is affected by GHSA-hmw2-7cc7-3qxx | Dependencies (osv-scanner) |
| high | osv/GHSA-hmw2-7cc7-3qxx |
yarn.lock | [email protected] (npm) is affected by GHSA-hmw2-7cc7-3qxx | Dependencies (osv-scanner) |
| high | osv/GHSA-hmw2-7cc7-3qxx |
yarn.lock | [email protected] (npm) is affected by GHSA-hmw2-7cc7-3qxx | Dependencies (osv-scanner) |
| high | osv/GHSA-hqr9-c56f-3x7f |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-hqr9-c56f-3x7f | Dependencies (osv-scanner) |
| high | osv/GHSA-hrpp-h998-j3pp |
yarn.lock | [email protected] (npm) is affected by GHSA-hrpp-h998-j3pp | Dependencies (osv-scanner) |
| high | osv/GHSA-hrpp-h998-j3pp |
yarn.lock | [email protected] (npm) is affected by GHSA-hrpp-h998-j3pp | Dependencies (osv-scanner) |
| high | osv/GHSA-hrpp-h998-j3pp |
yarn.lock | [email protected] (npm) is affected by GHSA-hrpp-h998-j3pp | Dependencies (osv-scanner) |
| high | osv/GHSA-hrpp-h998-j3pp |
yarn.lock | [email protected] (npm) is affected by GHSA-hrpp-h998-j3pp | Dependencies (osv-scanner) |
| high | osv/GHSA-j3r3-mxqp-r2p4 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-j3r3-mxqp-r2p4 | Dependencies (osv-scanner) |
| high | osv/GHSA-j44m-qm6p-hp7m |
yarn.lock | [email protected] (npm) is affected by GHSA-j44m-qm6p-hp7m | Dependencies (osv-scanner) |
| high | osv/GHSA-j44m-qm6p-hp7m |
yarn.lock | [email protected] (npm) is affected by GHSA-j44m-qm6p-hp7m | Dependencies (osv-scanner) |
| high | osv/GHSA-j44m-qm6p-hp7m |
yarn.lock | [email protected] (npm) is affected by GHSA-j44m-qm6p-hp7m | Dependencies (osv-scanner) |
| high | osv/GHSA-j4f2-536g-r55m |
yarn.lock | [email protected] (npm) is affected by GHSA-j4f2-536g-r55m | Dependencies (osv-scanner) |
| high | osv/GHSA-j759-j44w-7fr8 |
yarn.lock | [email protected] (npm) is affected by GHSA-j759-j44w-7fr8 | Dependencies (osv-scanner) |
| high | osv/GHSA-jcpv-g9rr-qxrc |
yarn.lock | [email protected] (npm) is affected by GHSA-jcpv-g9rr-qxrc | Dependencies (osv-scanner) |
| high | osv/GHSA-jhpw-976m-542j |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-jhpw-976m-542j | Dependencies (osv-scanner) |
| high | osv/GHSA-jj27-h5hq-8x99 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-jj27-h5hq-8x99 | Dependencies (osv-scanner) |
| high | osv/GHSA-jj27-h5hq-8x99 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-jj27-h5hq-8x99 | Dependencies (osv-scanner) |
| high | osv/GHSA-jp4x-w63m-7wgm |
yarn.lock | [email protected] (npm) is affected by GHSA-jp4x-w63m-7wgm | Dependencies (osv-scanner) |
| high | osv/GHSA-jp4x-w63m-7wgm |
yarn.lock | [email protected] (npm) is affected by GHSA-jp4x-w63m-7wgm | Dependencies (osv-scanner) |
| high | osv/GHSA-jp4x-w63m-7wgm |
yarn.lock | [email protected] (npm) is affected by GHSA-jp4x-w63m-7wgm | Dependencies (osv-scanner) |
| high | osv/GHSA-jrmj-c5cx-3cw6 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-jrmj-c5cx-3cw6 | Dependencies (osv-scanner) |
| high | osv/GHSA-jrmj-c5cx-3cw6 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-jrmj-c5cx-3cw6 | Dependencies (osv-scanner) |
| high | osv/GHSA-m6cx-g6qm-p2cx |
yarn.lock | [email protected] (npm) is affected by GHSA-m6cx-g6qm-p2cx | Dependencies (osv-scanner) |
| high | osv/GHSA-mgfv-m47x-4wqp |
yarn.lock | [email protected] (npm) is affected by GHSA-mgfv-m47x-4wqp | Dependencies (osv-scanner) |
| high | osv/GHSA-mh99-v99m-4gvg |
yarn.lock | [email protected] (npm) is affected by GHSA-mh99-v99m-4gvg | Dependencies (osv-scanner) |
| high | osv/GHSA-mw96-cpmx-2vgc |
yarn.lock | [email protected] (npm) is affected by GHSA-mw96-cpmx-2vgc | Dependencies (osv-scanner) |
| high | osv/GHSA-p28h-cc7q-c4fg |
yarn.lock | [email protected] (npm) is affected by GHSA-p28h-cc7q-c4fg | Dependencies (osv-scanner) |
| high | osv/GHSA-p3vc-36g9-x9gr |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-p3vc-36g9-x9gr | Dependencies (osv-scanner) |
| high | osv/GHSA-p6mc-m468-83gw |
yarn.lock | [email protected] (npm) is affected by GHSA-p6mc-m468-83gw | Dependencies (osv-scanner) |
| high | osv/GHSA-p6mc-m468-83gw |
yarn.lock | [email protected] (npm) is affected by GHSA-p6mc-m468-83gw | Dependencies (osv-scanner) |
| high | osv/GHSA-p9w8-2mpq-49h9 |
yarn.lock | [email protected] (npm) is affected by GHSA-p9w8-2mpq-49h9 | Dependencies (osv-scanner) |
| high | osv/GHSA-pfq8-rq6v-vf5m |
yarn.lock | [email protected] (npm) is affected by GHSA-pfq8-rq6v-vf5m | Dependencies (osv-scanner) |
| high | osv/GHSA-pfq8-rq6v-vf5m |
yarn.lock | [email protected] (npm) is affected by GHSA-pfq8-rq6v-vf5m | Dependencies (osv-scanner) |
| high | osv/GHSA-ph34-pc88-72gc |
yarn.lock | [email protected] (npm) is affected by GHSA-ph34-pc88-72gc | Dependencies (osv-scanner) |
| high | osv/GHSA-ph9p-34f9-6g65 |
yarn.lock | [email protected] (npm) is affected by GHSA-ph9p-34f9-6g65 | Dependencies (osv-scanner) |
| high | osv/GHSA-ph9p-34f9-6g65 |
yarn.lock | [email protected] (npm) is affected by GHSA-ph9p-34f9-6g65 | Dependencies (osv-scanner) |
| high | osv/GHSA-prjf-86w9-mfqv |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-prjf-86w9-mfqv | Dependencies (osv-scanner) |
| high | osv/GHSA-pw54-mh39-w3hc |
yarn.lock | [email protected] (npm) is affected by GHSA-pw54-mh39-w3hc, GHSA-xgh6-85xh-479p | Dependencies (osv-scanner) |
| high | osv/GHSA-q6f4-qqrg-jv6x |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-q6f4-qqrg-jv6x | Dependencies (osv-scanner) |
| high | osv/GHSA-qffp-2rhf-9h96 |
yarn.lock | [email protected] (npm) is affected by GHSA-qffp-2rhf-9h96 | Dependencies (osv-scanner) |
| high | osv/GHSA-qffp-2rhf-9h96 |
yarn.lock | [email protected] (npm) is affected by GHSA-qffp-2rhf-9h96 | Dependencies (osv-scanner) |
| high | osv/GHSA-qffp-2rhf-9h96 |
yarn.lock | [email protected] (npm) is affected by GHSA-qffp-2rhf-9h96 | Dependencies (osv-scanner) |
| high | osv/GHSA-qhr7-859c-m2p7 |
yarn.lock | [email protected] (npm) is affected by GHSA-qhr7-859c-m2p7 | Dependencies (osv-scanner) |
| high | osv/GHSA-qpx9-hpmf-5gmw |
yarn.lock | [email protected] (npm) is affected by GHSA-qpx9-hpmf-5gmw | Dependencies (osv-scanner) |
| high | osv/GHSA-qpx9-hpmf-5gmw |
yarn.lock | [email protected] (npm) is affected by GHSA-qpx9-hpmf-5gmw | Dependencies (osv-scanner) |
| high | osv/GHSA-qpx9-hpmf-5gmw |
yarn.lock | [email protected] (npm) is affected by GHSA-qpx9-hpmf-5gmw | Dependencies (osv-scanner) |
| high | osv/GHSA-qq89-hq3f-393p |
yarn.lock | [email protected] (npm) is affected by GHSA-qq89-hq3f-393p | Dependencies (osv-scanner) |
| high | osv/GHSA-qqgx-2p2h-9c37 |
yarn.lock | [email protected] (npm) is affected by GHSA-qqgx-2p2h-9c37 | Dependencies (osv-scanner) |
| high | osv/GHSA-qwcr-r2fm-qrc7 |
yarn.lock | [email protected] (npm) is affected by GHSA-qwcr-r2fm-qrc7 | Dependencies (osv-scanner) |
| high | osv/GHSA-qxh6-94w6-9r5p |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-qxh6-94w6-9r5p | Dependencies (osv-scanner) |
| high | osv/GHSA-r28c-9q8g-f849 |
yarn.lock | [email protected] (npm) is affected by GHSA-r28c-9q8g-f849 | Dependencies (osv-scanner) |
| high | osv/GHSA-r28c-9q8g-f849 |
yarn.lock | [email protected] (npm) is affected by GHSA-r28c-9q8g-f849 | Dependencies (osv-scanner) |
| high | osv/GHSA-r292-9mhp-454m |
yarn.lock | [email protected] (npm) is affected by GHSA-r292-9mhp-454m | Dependencies (osv-scanner) |
| high | osv/GHSA-r292-9mhp-454m |
yarn.lock | [email protected] (npm) is affected by GHSA-r292-9mhp-454m | Dependencies (osv-scanner) |
| high | osv/GHSA-r292-9mhp-454m |
yarn.lock | [email protected] (npm) is affected by GHSA-r292-9mhp-454m | Dependencies (osv-scanner) |
| high | osv/GHSA-r5fr-rjxr-66jc |
yarn.lock | [email protected] (npm) is affected by GHSA-r5fr-rjxr-66jc | Dependencies (osv-scanner) |
| high | osv/GHSA-r628-mhmh-qjhw |
yarn.lock | [email protected] (npm) is affected by GHSA-r628-mhmh-qjhw | Dependencies (osv-scanner) |
| high | osv/GHSA-r6q2-hw4h-h46w |
yarn.lock | [email protected] (npm) is affected by GHSA-r6q2-hw4h-h46w | Dependencies (osv-scanner) |
| high | osv/GHSA-r6q2-hw4h-h46w |
yarn.lock | [email protected] (npm) is affected by GHSA-r6q2-hw4h-h46w | Dependencies (osv-scanner) |
| high | osv/GHSA-r6q2-hw4h-h46w |
yarn.lock | [email protected] (npm) is affected by GHSA-r6q2-hw4h-h46w | Dependencies (osv-scanner) |
| high | osv/GHSA-r8j5-h5cx-65gg |
yarn.lock | [email protected] (npm) is affected by GHSA-r8j5-h5cx-65gg | Dependencies (osv-scanner) |
| high | osv/GHSA-rfh7-fxqc-q52v |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-rfh7-fxqc-q52v | Dependencies (osv-scanner) |
| high | osv/GHSA-rgjc-h3x7-9mwg |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-rgjc-h3x7-9mwg | Dependencies (osv-scanner) |
| high | osv/GHSA-rgw5-rvv9-x895 |
yarn.lock | [email protected] (npm) is affected by GHSA-rgw5-rvv9-x895 | Dependencies (osv-scanner) |
| high | osv/GHSA-rhx6-c78j-4q9w |
yarn.lock | [email protected] (npm) is affected by GHSA-rhx6-c78j-4q9w | Dependencies (osv-scanner) |
| high | osv/GHSA-rp65-9cf3-cjxr |
yarn.lock | [email protected] (npm) is affected by GHSA-rp65-9cf3-cjxr | Dependencies (osv-scanner) |
| high | osv/GHSA-v3p8-whq6-r5jg |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-v3p8-whq6-r5jg | Dependencies (osv-scanner) |
| high | osv/GHSA-v4hv-rgfq-gp49 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-v4hv-rgfq-gp49 | Dependencies (osv-scanner) |
| high | osv/GHSA-vc2v-76pw-4v95 |
yarn.lock | [email protected] (npm) is affected by GHSA-vc2v-76pw-4v95 | Dependencies (osv-scanner) |
| high | osv/GHSA-vh7m-p724-62c2 |
yarn.lock | [email protected] (npm) is affected by GHSA-vh7m-p724-62c2 | Dependencies (osv-scanner) |
| high | osv/GHSA-vpx6-8pjr-4g3v |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-vpx6-8pjr-4g3v | Dependencies (osv-scanner) |
| high | osv/GHSA-w2rr-34g9-rvrj |
yarn.lock | [email protected] (npm) is affected by GHSA-w2rr-34g9-rvrj | Dependencies (osv-scanner) |
| high | osv/GHSA-w5hq-g745-h8pq |
yarn.lock | [email protected] (npm) is affected by GHSA-w5hq-g745-h8pq | Dependencies (osv-scanner) |
| high | osv/GHSA-w5hq-g745-h8pq |
yarn.lock | [email protected] (npm) is affected by GHSA-w5hq-g745-h8pq | Dependencies (osv-scanner) |
| high | osv/GHSA-w5hq-g745-h8pq |
yarn.lock | [email protected] (npm) is affected by GHSA-w5hq-g745-h8pq | Dependencies (osv-scanner) |
| high | osv/GHSA-wc69-rhjr-hc9g |
yarn.lock | [email protected] (npm) is affected by GHSA-wc69-rhjr-hc9g | Dependencies (osv-scanner) |
| high | osv/GHSA-wg6g-ppvx-927h |
yarn.lock | [email protected] (npm) is affected by GHSA-wg6g-ppvx-927h | Dependencies (osv-scanner) |
| high | osv/GHSA-wh4c-j3r5-mjhp |
yarn.lock | [email protected] (npm) is affected by GHSA-wh4c-j3r5-mjhp | Dependencies (osv-scanner) |
| high | osv/GHSA-wr3j-pwj9-hqq6 |
yarn.lock | [email protected] (npm) is affected by GHSA-wr3j-pwj9-hqq6 | Dependencies (osv-scanner) |
| high | osv/GHSA-wrvr-8mpx-r7pp |
yarn.lock | [email protected] (npm) is affected by GHSA-wrvr-8mpx-r7pp | Dependencies (osv-scanner) |
| high | osv/GHSA-wvhm-4hhf-97x9 |
yarn.lock | [email protected] (npm) is affected by GHSA-wvhm-4hhf-97x9 | Dependencies (osv-scanner) |
| high | osv/GHSA-x6wf-f3px-wcqx |
yarn.lock | [email protected] (npm) is affected by GHSA-x6wf-f3px-wcqx | Dependencies (osv-scanner) |
| high | osv/GHSA-x8qc-rrcw-4r46 |
yarn.lock | [email protected] (npm) is affected by GHSA-x8qc-rrcw-4r46 | Dependencies (osv-scanner) |
| high | osv/GHSA-x9w5-v3q2-3rhw |
yarn.lock | [email protected] (npm) is affected by GHSA-x9w5-v3q2-3rhw | Dependencies (osv-scanner) |
| high | osv/GHSA-xf7w-r453-m56c |
yarn.lock | [email protected] (npm) is affected by GHSA-xf7w-r453-m56c | Dependencies (osv-scanner) |
| high | osv/GHSA-xfhh-g9f5-x4m4 |
yarn.lock | [email protected] (npm) is affected by GHSA-xfhh-g9f5-x4m4 | Dependencies (osv-scanner) |
| high | osv/GHSA-xrxm-cp7j-8xf6 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-xrxm-cp7j-8xf6 | Dependencies (osv-scanner) |
| medium | opengrep/javascript.lang.best-practice.lazy-load-module |
test-config/protractor.conf.js:25 | Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The... | Lint |
| medium | osv/GHSA-257v-vj4p-3w2h |
yarn.lock | [email protected] (npm) is affected by GHSA-257v-vj4p-3w2h | Dependencies (osv-scanner) |
| medium | osv/GHSA-282f-qqgm-c34q |
yarn.lock | [email protected] (npm) is affected by GHSA-282f-qqgm-c34q | Dependencies (osv-scanner) |
| medium | osv/GHSA-29mw-wpgm-hmr9 |
yarn.lock | [email protected] (npm) is affected by GHSA-29mw-wpgm-hmr9 | Dependencies (osv-scanner) |
| medium | osv/GHSA-2g4f-4pwh-qvx6 |
yarn.lock | [email protected] (npm) is affected by GHSA-2g4f-4pwh-qvx6 | Dependencies (osv-scanner) |
| medium | osv/GHSA-2g4f-4pwh-qvx6 |
yarn.lock | [email protected] (npm) is affected by GHSA-2g4f-4pwh-qvx6 | Dependencies (osv-scanner) |
| medium | osv/GHSA-2pr6-76vf-7546 |
yarn.lock | [email protected] (npm) is affected by GHSA-2pr6-76vf-7546 | Dependencies (osv-scanner) |
| medium | osv/GHSA-378v-28hj-76wf |
yarn.lock | [email protected] (npm) is affected by GHSA-378v-28hj-76wf | Dependencies (osv-scanner) |
| medium | osv/GHSA-434g-2637-qmqr |
yarn.lock | [email protected] (npm) is affected by GHSA-434g-2637-qmqr | Dependencies (osv-scanner) |
| medium | osv/GHSA-43f8-2h32-f4cj |
yarn.lock | [email protected] (npm) is affected by GHSA-43f8-2h32-f4cj | Dependencies (osv-scanner) |
| medium | osv/GHSA-43f8-2h32-f4cj |
yarn.lock | [email protected] (npm) is affected by GHSA-43f8-2h32-f4cj | Dependencies (osv-scanner) |
| medium | osv/GHSA-49q7-c7j4-3p7m |
yarn.lock | [email protected] (npm) is affected by GHSA-49q7-c7j4-3p7m | Dependencies (osv-scanner) |
| medium | osv/GHSA-4gmj-3p3h-gm8h |
yarn.lock | [email protected] (npm) is affected by GHSA-4gmj-3p3h-gm8h | Dependencies (osv-scanner) |
| medium | osv/GHSA-4hpf-3wq7-5rpr |
yarn.lock | [email protected] (npm) is affected by GHSA-4hpf-3wq7-5rpr | Dependencies (osv-scanner) |
| medium | osv/GHSA-4xc9-xhrj-v574 |
yarn.lock | [email protected] (npm) is affected by GHSA-4xc9-xhrj-v574 | Dependencies (osv-scanner) |
| medium | osv/GHSA-4xc9-xhrj-v574 |
yarn.lock | [email protected] (npm) is affected by GHSA-4xc9-xhrj-v574 | Dependencies (osv-scanner) |
| medium | osv/GHSA-4xcv-9jjx-gfj3 |
yarn.lock | [email protected] (npm) is affected by GHSA-4xcv-9jjx-gfj3 | Dependencies (osv-scanner) |
| medium | osv/GHSA-58w9-8g37-x9v5 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-58w9-8g37-x9v5 | Dependencies (osv-scanner) |
| medium | osv/GHSA-5947-m4fg-xhqg |
yarn.lock | [email protected] (npm) is affected by GHSA-5947-m4fg-xhqg | Dependencies (osv-scanner) |
| medium | osv/GHSA-64mm-vxmg-q3vj |
yarn.lock | [email protected] (npm) is affected by GHSA-64mm-vxmg-q3vj | Dependencies (osv-scanner) |
| medium | osv/GHSA-692r-grfm-v8x7 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-692r-grfm-v8x7 | Dependencies (osv-scanner) |
| medium | osv/GHSA-779f-wgxg-qr8f |
yarn.lock | [email protected] (npm) is affected by GHSA-779f-wgxg-qr8f | Dependencies (osv-scanner) |
| medium | osv/GHSA-7x7c-qm48-pq9c |
yarn.lock | [email protected] (npm) is affected by GHSA-7x7c-qm48-pq9c | Dependencies (osv-scanner) |
| medium | osv/GHSA-82v2-mx6x-wq7q |
yarn.lock | [email protected] (npm) is affected by GHSA-82v2-mx6x-wq7q | Dependencies (osv-scanner) |
| medium | osv/GHSA-848j-6mx2-7j84 |
yarn.lock | [email protected] (npm) is affected by GHSA-848j-6mx2-7j84 | Dependencies (osv-scanner) |
| medium | osv/GHSA-8j8c-7jfh-h6hx |
yarn.lock | [email protected] (npm) is affected by GHSA-8j8c-7jfh-h6hx | Dependencies (osv-scanner) |
| medium | osv/GHSA-952p-6rrq-rcjv |
yarn.lock | [email protected] (npm) is affected by GHSA-952p-6rrq-rcjv | Dependencies (osv-scanner) |
| medium | osv/GHSA-95qp-cmmw-mgqv |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-95qp-cmmw-mgqv | Dependencies (osv-scanner) |
| medium | osv/GHSA-977x-g7h5-7qgw |
yarn.lock | [email protected] (npm) is affected by GHSA-977x-g7h5-7qgw | Dependencies (osv-scanner) |
| medium | osv/GHSA-9q64-mpxx-87fg |
yarn.lock | [email protected] (npm) is affected by GHSA-9q64-mpxx-87fg | Dependencies (osv-scanner) |
| medium | osv/GHSA-c75v-2vq8-878f |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-c75v-2vq8-878f | Dependencies (osv-scanner) |
| medium | osv/GHSA-f3m7-gqxr-g87x |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-f3m7-gqxr-g87x | Dependencies (osv-scanner) |
| medium | osv/GHSA-f3m7-gqxr-g87x |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-f3m7-gqxr-g87x | Dependencies (osv-scanner) |
| medium | osv/GHSA-f7q4-pwc6-w24p |
yarn.lock | [email protected] (npm) is affected by GHSA-f7q4-pwc6-w24p | Dependencies (osv-scanner) |
| medium | osv/GHSA-f886-m6hf-6m8v |
yarn.lock | [email protected] (npm) is affected by GHSA-f886-m6hf-6m8v | Dependencies (osv-scanner) |
| medium | osv/GHSA-fc9h-whq2-v747 |
yarn.lock | [email protected] (npm) is affected by GHSA-fc9h-whq2-v747 | Dependencies (osv-scanner) |
| medium | osv/GHSA-fvqr-27wr-82fm |
yarn.lock | [email protected] (npm) is affected by GHSA-fvqr-27wr-82fm | Dependencies (osv-scanner) |
| medium | osv/GHSA-fvqr-27wr-82fm |
yarn.lock | [email protected] (npm) is affected by GHSA-fvqr-27wr-82fm | Dependencies (osv-scanner) |
| medium | osv/GHSA-gv2q-mqqv-365m |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-gv2q-mqqv-365m | Dependencies (osv-scanner) |
| medium | osv/GHSA-h452-7996-h45h |
yarn.lock | [email protected] (npm) is affected by GHSA-h452-7996-h45h | Dependencies (osv-scanner) |
| medium | osv/GHSA-h67p-54hq-rp68 |
yarn.lock | [email protected] (npm) is affected by GHSA-h67p-54hq-rp68 | Dependencies (osv-scanner) |
| medium | osv/GHSA-h6ch-v84p-w6p9 |
yarn.lock | [email protected] (npm) is affected by GHSA-h6ch-v84p-w6p9 | Dependencies (osv-scanner) |
| medium | osv/GHSA-hh8m-fm6v-7cvg |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-hh8m-fm6v-7cvg | Dependencies (osv-scanner) |
| medium | osv/GHSA-hh8m-fm6v-7cvg |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-hh8m-fm6v-7cvg | Dependencies (osv-scanner) |
| medium | osv/GHSA-jc84-3g44-wf2q |
yarn.lock | [email protected] (npm) is affected by GHSA-jc84-3g44-wf2q | Dependencies (osv-scanner) |
| medium | osv/GHSA-jfgx-762w-99vr |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-jfgx-762w-99vr | Dependencies (osv-scanner) |
| medium | osv/GHSA-mh29-5h37-fv8m |
yarn.lock | [email protected] (npm) is affected by GHSA-mh29-5h37-fv8m | Dependencies (osv-scanner) |
| medium | osv/GHSA-p297-fm68-3q8c |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-p297-fm68-3q8c | Dependencies (osv-scanner) |
| medium | osv/GHSA-pfrx-2q88-qq97 |
yarn.lock | [email protected] (npm) is affected by GHSA-pfrx-2q88-qq97 | Dependencies (osv-scanner) |
| medium | osv/GHSA-pp7h-53gx-mx7r |
yarn.lock | [email protected] (npm) is affected by GHSA-pp7h-53gx-mx7r | Dependencies (osv-scanner) |
| medium | osv/GHSA-pp7h-53gx-mx7r |
yarn.lock | [email protected] (npm) is affected by GHSA-pp7h-53gx-mx7r | Dependencies (osv-scanner) |
| medium | osv/GHSA-pp7h-53gx-mx7r |
yarn.lock | [email protected] (npm) is affected by GHSA-pp7h-53gx-mx7r | Dependencies (osv-scanner) |
| medium | osv/GHSA-pxg6-pf52-xh8x |
yarn.lock | [email protected] (npm) is affected by GHSA-pxg6-pf52-xh8x | Dependencies (osv-scanner) |
| medium | osv/GHSA-q2hr-2g5m-vwhr |
yarn.lock | [email protected] (npm) is affected by GHSA-q2hr-2g5m-vwhr | Dependencies (osv-scanner) |
| medium | osv/GHSA-qrmc-fj45-qfc2 |
yarn.lock | [email protected] (npm) is affected by GHSA-qrmc-fj45-qfc2 | Dependencies (osv-scanner) |
| medium | osv/GHSA-qw6h-vgh9-j6wx |
yarn.lock | [email protected] (npm) is affected by GHSA-qw6h-vgh9-j6wx | Dependencies (osv-scanner) |
| medium | osv/GHSA-r7qp-cfhv-p84w |
yarn.lock | [email protected] (npm) is affected by GHSA-r7qp-cfhv-p84w | Dependencies (osv-scanner) |
| medium | osv/GHSA-r9p9-mrjm-926w |
yarn.lock | [email protected] (npm) is affected by GHSA-r9p9-mrjm-926w | Dependencies (osv-scanner) |
| medium | osv/GHSA-rc3x-jf5g-xvc5 |
yarn.lock | [email protected] (npm) is affected by GHSA-rc3x-jf5g-xvc5 | Dependencies (osv-scanner) |
| medium | osv/GHSA-rv95-896h-c2vc |
yarn.lock | [email protected] (npm) is affected by GHSA-rv95-896h-c2vc | Dependencies (osv-scanner) |
| medium | osv/GHSA-v88g-cgmw-v5xw |
yarn.lock | [email protected] (npm) is affected by GHSA-v88g-cgmw-v5xw | Dependencies (osv-scanner) |
| medium | osv/GHSA-v88g-cgmw-v5xw |
yarn.lock | [email protected] (npm) is affected by GHSA-v88g-cgmw-v5xw | Dependencies (osv-scanner) |
| medium | osv/GHSA-w739-gvwx-grc3 |
yarn.lock | @angular/[email protected] (npm) is affected by GHSA-w739-gvwx-grc3 | Dependencies (osv-scanner) |
| medium | osv/GHSA-wxhq-pm8v-cw75 |
yarn.lock | [email protected] (npm) is affected by GHSA-wxhq-pm8v-cw75 | Dependencies (osv-scanner) |
| medium | osv/GHSA-x5rq-j2xg-h7qm |
yarn.lock | [email protected] (npm) is affected by GHSA-x5rq-j2xg-h7qm | Dependencies (osv-scanner) |
| medium | osv/GHSA-xxjr-mmjv-4gpg |
yarn.lock | [email protected] (npm) is affected by GHSA-xxjr-mmjv-4gpg | Dependencies (osv-scanner) |
| medium | osv/MAL-2023-462 |
yarn.lock | [email protected] (npm) is affected by MAL-2023-462 | Dependencies (osv-scanner) |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/buildPWA.sh:10 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/buildPWA.sh:16 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/buildPWA.sh:22 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/buildPWA.sh:28 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/buildPWA.sh:31 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/buildPWA.sh:32 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/buildPWA.sh:33 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/buildPWA.sh:34 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/buildPWAAndRun.sh:9 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/dependencyReport.sh:15 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/dependencyReport.sh:24 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/dependencyReport.sh:25 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/dependencyReport.sh:26 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/bash.lang.correctness.unquoted-variable-expansion-in-command |
scripts/dependencyReport.sh:27 | Variable expansions must be double-quoted so as to prevent being split into multiple pieces according to whitespace or whichever separator is specified by the IFS variable. If you really wish to split the variable's contents, you may... | Lint |
| low | opengrep/javascript.lang.correctness.missing-template-string-indicator |
src/app/app.component.ts:14 | This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? | Lint |
| low | opengrep/javascript.lang.correctness.missing-template-string-indicator |
src/app/app.component.ts:14 | This looks like a JavaScript template string. Are you missing a '$' in front of '{...}'? | Lint |
| low | opengrep/typescript.lang.best-practice.moment-deprecated |
src/utils/item.ts:1 | Moment is a legacy project in maintenance mode. Consider using libraries that are actively supported, e.g. `dayjs`. | Lint |
| low | opengrep/javascript.express.security.audit.express-check-csurf-middleware-usage |
scripts/server.js:13 | A CSRF middleware was not detected in your express application. Ensure you are either using one such as `csurf` or `csrf` (see rule references) and/or you are properly doing CSRF validation in your routes with a token or cookies.... | Static analysis (opengrep) |
Tools and coverage
Every analyzer that ran on this commit. A failed or skipped tool is a coverage gap: its share of the score is left out and the coverage figure drops.
| Analyzer | Pillar | Status | Version | Findings | Note |
|---|---|---|---|---|---|
| AI tool configuration | AI provenance | ok | signatures-v1 | 0 | |
| Explicit AI attribution | AI provenance | ok | signatures-v1 | 0 | |
| Release velocity | AI provenance | ok | prov-4 | 0 | |
| Coding style | AI provenance | ok | — | 0 | |
| Commit velocity | AI provenance | ok | prov-4 | 0 | |
| Complexity (lizard) | Code quality | ok | lizard 1.25.1 | 0 | |
| Documentation | Code quality | ok | — | 0 | |
| Duplication (jscpd) | Code quality | ok | repotrust-dup-w6 | 0 | |
| Lint | Code quality | ok | opengrep 1.33.1; rules f1d2b562b414 | 18 | |
| Tests and CI | Code quality | ok | — | 0 | |
| Type safety | Code quality | ok | — | 0 | |
| CI workflows (zizmor) | Security | skipped | — | 0 | |
| Dependencies (osv-scanner) | Security | ok | osv-scanner version: 2.7.1 | 300 | |
| Release downloads | Security | ok | — | 0 | |
| Security posture | Security | ok | — | 0 | |
| Package registries | Security | ok | — | 0 | |
| Static analysis (opengrep) | Security | ok | opengrep 1.33.1; rules f1d2b562b414 | 4 | |
| OpenSSF Scorecard | Security | skipped | — | 0 | no published OpenSSF Scorecard result for this repo |
| Secrets (gitleaks) | Security | ok | gitleaks 8.30.1 | 0 |
Score history
Scores from different scoring versions aren't directly comparable.
| Scored | Commit | Scoring | AI provenance | Quality | Security |
|---|---|---|---|---|---|
| 2026-11-14 | 9ae02cf0b4dc | prov-5+qual-2+sec-2 | 0% | 67 | 53 |
| 2026-11-14 | 9ae02cf0b4dc | prov-4+qual-2+sec-2 | 0% | 67 | 53 |
Full text report
- Repository: https://github.com/wordpress-clients/hybrid
- Commit:
9ae02cf0b4dcecb92867fd75f1dd60e042b2f7f3 - Generated: 2026-11-14T14:52:08+00:00
- Scorer 0.1.0, scoring prov-5+qual-2+sec-2, report schema v2
Scores
| Pillar | Score | Signal | Confidence | Coverage |
|---|---|---|---|---|
| AI provenance (estimated AI-generated share) | 0 | none-detected | 65% | 100% |
| Code quality | 67 | adequate | 90% | 100% |
| Security | 53 | weak | 85% | 100% |
AI provenance
No AI attribution or AI-consistent velocity signals detected.
- Explicitly attributed share (lower bound): 0.0%
- Unattributed share in AI-consistent velocity bursts: 0.0%
- Estimated AI-generated share: 0.0%
| Month | Lines added | Attributed to AI |
|---|---|---|
| 2016-11 | 8 | 0% |
| 2016-12 | 741 | 0% |
| 2017-01 | 1,521 | 0% |
| 2017-02 | 1,895 | 0% |
| 2017-03 | 828 | 0% |
| 2017-04 | 362 | 0% |
| 2017-05 | 552 | 0% |
| 2017-06 | 91 | 0% |
| 2017-08 | 74 | 0% |
| 2017-10 | 700 | 0% |
| 2017-11 | 192 | 0% |
| 2017-12 | 584 | 0% |
AI provenance describes how code was produced; it is not a quality judgment. Unless attribution is explicit, these are signals consistent with AI generation, not proof. Squash/rebase workflows, imported code, and rewritten history reduce accuracy.
Code quality
Code quality is adequate: test-to-source ratio 0.05, CI runs tests; 0% of function code in complex or long functions; 14% duplicated lines. Weakest area: type safety.
| Area | Score |
|---|---|
| Complexity (lizard) | 100 |
| Duplication | 43 |
| Code smells (Opengrep) | 70 |
| Tests and CI | 58 |
| Documentation | 85 |
| Type safety | 0 |
| Process (Scorecard review/maintenance) | n/a |
- Functions: 325; mean complexity 1.6, 90th percentile 3; 0 complex and 0 long functions
- Duplicated lines: 14.2% of 2,179 compared
- Tests: 166 test lines for 3,622 source lines (ratio 0.05); CI test commands: npm run test; 2% of recent source commits also change tests
- Docs missing or thin: contributing
Security
Security posture is weak: 377 known vulnerabilities in 161 dependencies; 3 high-severity SAST findings. Weakest area: dependencies.
| Area | Score |
|---|---|
| Secrets (gitleaks, tree + history) | 100 |
| Static analysis (Opengrep) | 72 |
| Vulnerable dependencies (OSV) | 0 |
| CI workflows (zizmor) | n/a |
| Posture (policy, updates, signing, lockfiles) | 0 |
| OpenSSF Scorecard | n/a |
-
Known vulnerabilities: 377 in 161 packages (critical 37, high 197, medium 113, low 9)
-
Posture checks passed: lockfiles; missing: security policy, dependency updates, signed commits
Top findings
| Severity | Finding | Location |
|---|---|---|
| critical | osv/GHSA-cpq7-6gpm-g9rc: [email protected] (npm) is affected by GHSA-cpq7-6gpm-g9rc |
yarn.lock |
| critical | osv/GHSA-rq8g-5pc5-wrhr: [email protected] (npm) is affected by GHSA-rq8g-5pc5-wrhr |
yarn.lock |
| critical | osv/GHSA-hr2v-3952-633q: [email protected] (npm) is affected by GHSA-hr2v-3952-633q |
yarn.lock |
| critical | osv/GHSA-vjh7-7g9h-fjfh: [email protected] (npm) is affected by GHSA-vjh7-7g9h-fjfh |
yarn.lock |
| critical | osv/GHSA-fjxv-7rqg-78g4: [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 |
yarn.lock |
| critical | osv/GHSA-fjxv-7rqg-78g4: [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 |
yarn.lock |
| critical | osv/GHSA-fjxv-7rqg-78g4: [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 |
yarn.lock |
| critical | osv/GHSA-fjxv-7rqg-78g4: [email protected] (npm) is affected by GHSA-fjxv-7rqg-78g4 |
yarn.lock |
| critical | osv/GHSA-8r6j-v8pm-fqw3: [email protected] (npm) is affected by GHSA-8r6j-v8pm-fqw3 |
yarn.lock |
| critical | osv/GHSA-896r-f27r-55mw: [email protected] (npm) is affected by GHSA-896r-f27r-55mw |
yarn.lock |
| critical | osv/GHSA-76p3-8jx3-jpfq: [email protected] (npm) is affected by GHSA-76p3-8jx3-jpfq |
yarn.lock |
| critical | osv/GHSA-76p3-8jx3-jpfq: [email protected] (npm) is affected by GHSA-76p3-8jx3-jpfq |
yarn.lock |
| critical | osv/GHSA-jf85-cpcp-j695: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 |
yarn.lock |
| critical | osv/GHSA-jf85-cpcp-j695: [email protected] (npm) is affected by GHSA-jf85-cpcp-j695 |
yarn.lock |
| critical | osv/GHSA-pp57-mqmh-44h7: [email protected] (npm) is affected by GHSA-pp57-mqmh-44h7 |
yarn.lock |
| critical | osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h |
yarn.lock |
| critical | osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h |
yarn.lock |
| critical | osv/GHSA-xvch-5gv4-984h: [email protected] (npm) is affected by GHSA-xvch-5gv4-984h |
yarn.lock |
| critical | osv/GHSA-4c7m-wxvm-r7gc: [email protected] (npm) is affected by GHSA-4c7m-wxvm-r7gc, GHSA-pch5-whg9-qr2r |
yarn.lock |
| critical | osv/GHSA-h7cp-r72f-jxh6: [email protected] (npm) is affected by GHSA-h7cp-r72f-jxh6 |
yarn.lock |
| critical | osv/GHSA-v62p-rq8g-8h59: [email protected] (npm) is affected by GHSA-v62p-rq8g-8h59 |
yarn.lock |
| critical | osv/GHSA-4cpg-3vgw-4877: [email protected] (npm) is affected by GHSA-4cpg-3vgw-4877 |
yarn.lock |
| critical | osv/GHSA-4cpg-3vgw-4877: [email protected] (npm) is affected by GHSA-4cpg-3vgw-4877 |
yarn.lock |
| critical | osv/GHSA-jqcg-44mw-7w3h: [email protected] (npm) is affected by GHSA-jqcg-44mw-7w3h |
yarn.lock |
| critical | osv/GHSA-95m3-7q98-8xr5: [email protected] (npm) is affected by GHSA-95m3-7q98-8xr5 |
yarn.lock |
Static signals only: the scorer never runs the project's code. Secret findings are pattern matches that were not verified, and secret values are never stored.
Repository profile
- Source lines: 3,622; test lines: 166
| Language | Lines |
|---|---|
| TypeScript | 3,445 |
| JavaScript | 272 |
| Shell | 71 |