{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:40:55.591822Z","repo":{"ref":{"host":"github.com","owner":"Raathigesh","name":"retoggle"},"default_branch":"master","clone_url":"https://github.com/Raathigesh/retoggle.git","html_url":"https://github.com/Raathigesh/retoggle","description":"🎨 UI controls as React Hooks to control your component state from outside","stars":1372,"forks":25,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":1070,"primary_language":"TypeScript","license_spdx":"MIT","created_at":"2018-11-04T12:45:35Z","pushed_at":"2020-07-05T10:08:00Z","security_policy_url":null,"distribution":{"owner_created_at":"2012-12-23T06:09:30Z","owner_type":"User","release_assets":[]}},"commit_sha":"cfa56f65e1d63a6ddd42ff76244c873b9d52a6a7","profile":{"lines_by_language":{"TypeScript":1604,"JavaScript":141},"files_by_category":{"source":40,"other":15,"config":7,"docs":2,"binary":2,"test":1,"generated":1},"source_lines":1704,"test_lines":41},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":61.6,"confidence":0.9,"coverage":1.0,"label":"weak","breakdown":{"complexity":100.0,"duplication":75.7,"lint":46.3,"testing":59.2,"docs":65.0,"type_safety":0.0,"process":20.0},"summary":"Code quality is weak: test-to-source ratio 0.02, CI runs tests; 0% of function code in complex or long functions; 5% duplicated lines. Weakest area: type safety."},"security":{"score":55.9,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":100.0,"dependencies":0.0,"ci_actions":null,"posture":0.0,"scorecard":25.0},"summary":"Security posture is weak: 312 known vulnerabilities in 133 dependencies. Weakest area: dependencies."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"ok","tool_version":"scorecard v5.6.0","metrics":{"aggregate":2.6,"check:Maintained":0.0,"check:Code-Review":4.0,"check:Binary-Artifacts":10.0,"check:CII-Best-Practices":0.0,"check:Security-Policy":0.0,"check:Fuzzing":0.0,"check:License":10.0,"check:Branch-Protection":0.0,"check:SAST":0.0},"findings":[],"evidence":[{"kind":"scorecard-check","description":"Scorecard Maintained: 0/10 (0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0)","ref":"Maintained","url":"https://scorecard.dev/viewer/?uri=github.com/Raathigesh/retoggle","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Code-Review: 4/10 (Found 9/20 approved changesets -- score normalized to 4)","ref":"Code-Review","url":"https://scorecard.dev/viewer/?uri=github.com/Raathigesh/retoggle","weight":0.6},{"kind":"scorecard-check","description":"Scorecard Binary-Artifacts: 10/10 (no binaries found in the repo)","ref":"Binary-Artifacts","url":"https://scorecard.dev/viewer/?uri=github.com/Raathigesh/retoggle","weight":0.0},{"kind":"scorecard-check","description":"Scorecard CII-Best-Practices: 0/10 (no effort to earn an OpenSSF best practices badge detected)","ref":"CII-Best-Practices","url":"https://scorecard.dev/viewer/?uri=github.com/Raathigesh/retoggle","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Security-Policy: 0/10 (security policy file not detected)","ref":"Security-Policy","url":"https://scorecard.dev/viewer/?uri=github.com/Raathigesh/retoggle","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Fuzzing: 0/10 (project is not fuzzed)","ref":"Fuzzing","url":"https://scorecard.dev/viewer/?uri=github.com/Raathigesh/retoggle","weight":1.0},{"kind":"scorecard-check","description":"Scorecard License: 10/10 (license file detected)","ref":"License","url":"https://scorecard.dev/viewer/?uri=github.com/Raathigesh/retoggle","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Branch-Protection: 0/10 (branch protection not enabled on development/release branches)","ref":"Branch-Protection","url":"https://scorecard.dev/viewer/?uri=github.com/Raathigesh/retoggle","weight":1.0},{"kind":"scorecard-check","description":"Scorecard SAST: 0/10 (SAST tool is not run on all commits -- score normalized to 0)","ref":"SAST","url":"https://scorecard.dev/viewer/?uri=github.com/Raathigesh/retoggle","weight":1.0}],"data":{"date":"2026-11-09","commit":"cfa56f65e1d63a6ddd42ff76244c873b9d52a6a7","matches_head":true},"error":null},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":48.0,"checked":48.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":104.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":3080.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2018-11":{"loc":2903,"attributed_loc":0},"2018-12":{"loc":1,"attributed_loc":0},"2019-01":{"loc":1,"attributed_loc":0},"2019-02":{"loc":34,"attributed_loc":0},"2019-05":{"loc":0,"attributed_loc":0},"2019-06":{"loc":7,"attributed_loc":0},"2020-02":{"loc":0,"attributed_loc":0},"2020-06":{"loc":127,"attributed_loc":0},"2020-07":{"loc":7,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":32.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":3080.0,"pre_ai_era_burst_loc":0.0,"measured_loc":3080.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":105.75,"median_loc_per_hour":50.33018026057469,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":4.0,"flagged_releases":0.0,"max_loc_per_day":3.4},"findings":[],"evidence":[],"data":{"releases":[{"from":"v0.2.0","to":"v0.2.1","loc":103,"days":98.88,"loc_per_day":1.0,"flagged":false},{"from":"v0.2.1","to":"v0.3.0","loc":31,"days":9.11,"loc_per_day":3.4,"flagged":false},{"from":"v0.3.0","to":"0.4.0","loc":10,"days":101.99,"loc_per_day":0.1,"flagged":false},{"from":"0.4.0","to":"1.0.0","loc":122,"days":378.11,"loc_per_day":0.3,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":1704.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":0.0,"findings_high":0.0,"findings_medium":0.0,"findings_low":0.0,"weighted_findings":0.0,"scanned_lines":1704.0,"parse_errors":0.0},"findings":[],"evidence":[],"data":{"rulesets":["typescript","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":133.0,"vulnerabilities":312.0,"vulns_critical":41.0,"vulns_high":135.0,"vulns_medium":102.0,"vulns_low":21.0,"vulns_unknown":13.0,"penalty":1118.0},"findings":[{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"@babel/traverse@7.1.4 (npm) is affected by GHSA-67hx-6x53-jw92","path":"yarn.lock","line":null,"fingerprint":"@babel/traverse@7.1.4 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"@babel/traverse@7.1.5 (npm) is affected by GHSA-67hx-6x53-jw92","path":"yarn.lock","line":null,"fingerprint":"@babel/traverse@7.1.5 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"@babel/traverse@7.4.5 (npm) is affected by GHSA-67hx-6x53-jw92","path":"yarn.lock","line":null,"fingerprint":"@babel/traverse@7.4.5 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"babel-traverse@6.26.0 (npm) is affected by GHSA-67hx-6x53-jw92","path":"yarn.lock","line":null,"fingerprint":"babel-traverse@6.26.0 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-cpq7-6gpm-g9rc","severity":"critical","message":"cipher-base@1.0.4 (npm) is affected by GHSA-cpq7-6gpm-g9rc","path":"yarn.lock","line":null,"fingerprint":"cipher-base@1.0.4 (npm):GHSA-cpq7-6gpm-g9rc"},{"rule_id":"osv/GHSA-phwq-j96m-2c2q","severity":"critical","message":"ejs@2.6.1 (npm) is affected by GHSA-phwq-j96m-2c2q","path":"yarn.lock","line":null,"fingerprint":"ejs@2.6.1 (npm):GHSA-phwq-j96m-2c2q"},{"rule_id":"osv/GHSA-vjh7-7g9h-fjfh","severity":"critical","message":"elliptic@6.4.1 (npm) is affected by GHSA-vjh7-7g9h-fjfh","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-vjh7-7g9h-fjfh"},{"rule_id":"osv/GHSA-6h5x-7c5m-7cr7","severity":"critical","message":"eventsource@0.1.6 (npm) is affected by GHSA-6h5x-7c5m-7cr7","path":"yarn.lock","line":null,"fingerprint":"eventsource@0.1.6 (npm):GHSA-6h5x-7c5m-7cr7"},{"rule_id":"osv/GHSA-6h5x-7c5m-7cr7","severity":"critical","message":"eventsource@1.0.7 (npm) is affected by GHSA-6h5x-7c5m-7cr7","path":"yarn.lock","line":null,"fingerprint":"eventsource@1.0.7 (npm):GHSA-6h5x-7c5m-7cr7"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.3.3 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"yarn.lock","line":null,"fingerprint":"form-data@2.3.3 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-8r6j-v8pm-fqw3","severity":"critical","message":"fsevents@1.2.4 (npm) is affected by GHSA-8r6j-v8pm-fqw3","path":"yarn.lock","line":null,"fingerprint":"fsevents@1.2.4 (npm):GHSA-8r6j-v8pm-fqw3"},{"rule_id":"osv/GHSA-vvj3-85vf-fgmw","severity":"critical","message":"global-modules-path@2.3.0 (npm) is affected by GHSA-vvj3-85vf-fgmw","path":"yarn.lock","line":null,"fingerprint":"global-modules-path@2.3.0 (npm):GHSA-vvj3-85vf-fgmw"},{"rule_id":"osv/GHSA-2w6w-674q-4c4q","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-2w6w-674q-4c4q","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-2w6w-674q-4c4q"},{"rule_id":"osv/GHSA-765h-qjxv-5f44","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-765h-qjxv-5f44","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-765h-qjxv-5f44"},{"rule_id":"osv/GHSA-8r5x-fm3f-whwj","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-8r5x-fm3f-whwj","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-8r5x-fm3f-whwj"},{"rule_id":"osv/GHSA-f2jv-r9rf-7988","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-f2jv-r9rf-7988","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-f2jv-r9rf-7988"},{"rule_id":"osv/GHSA-p8wg-vrv2-v86f","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-p8wg-vrv2-v86f","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-p8wg-vrv2-v86f"},{"rule_id":"osv/GHSA-w457-6q6x-cgp9","severity":"critical","message":"handlebars@4.0.12 (npm) is affected by GHSA-w457-6q6x-cgp9","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-w457-6q6x-cgp9"},{"rule_id":"osv/GHSA-896r-f27r-55mw","severity":"critical","message":"json-schema@0.2.3 (npm) is affected by GHSA-896r-f27r-55mw","path":"yarn.lock","line":null,"fingerprint":"json-schema@0.2.3 (npm):GHSA-896r-f27r-55mw"},{"rule_id":"osv/GHSA-593f-38f6-jp5m","severity":"critical","message":"koa@2.6.1 (npm) is affected by GHSA-593f-38f6-jp5m","path":"yarn.lock","line":null,"fingerprint":"koa@2.6.1 (npm):GHSA-593f-38f6-jp5m"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@0.2.17 (npm) is affected by GHSA-76p3-8jx3-jpfq","path":"yarn.lock","line":null,"fingerprint":"loader-utils@0.2.17 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@1.1.0 (npm) is affected by GHSA-76p3-8jx3-jpfq","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.1.0 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.17.11 (npm) is affected by GHSA-jf85-cpcp-j695","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-r6rj-9ch6-g264","severity":"critical","message":"merge-deep@3.0.2 (npm) is affected by GHSA-r6rj-9ch6-g264","path":"yarn.lock","line":null,"fingerprint":"merge-deep@3.0.2 (npm):GHSA-r6rj-9ch6-g264"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.10 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.10 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.8 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.8 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@1.2.0 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@1.2.0 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-fhjf-83wg-r2j9","severity":"critical","message":"mixin-deep@1.3.1 (npm) is affected by GHSA-fhjf-83wg-r2j9","path":"yarn.lock","line":null,"fingerprint":"mixin-deep@1.3.1 (npm):GHSA-fhjf-83wg-r2j9"},{"rule_id":"osv/GHSA-92xj-mqp7-vmcj","severity":"critical","message":"node-forge@0.7.5 (npm) is affected by GHSA-92xj-mqp7-vmcj","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-92xj-mqp7-vmcj"},{"rule_id":"osv/GHSA-h7cp-r72f-jxh6","severity":"critical","message":"pbkdf2@3.0.17 (npm) is affected by GHSA-h7cp-r72f-jxh6","path":"yarn.lock","line":null,"fingerprint":"pbkdf2@3.0.17 (npm):GHSA-h7cp-r72f-jxh6"},{"rule_id":"osv/GHSA-v62p-rq8g-8h59","severity":"critical","message":"pbkdf2@3.0.17 (npm) is affected by GHSA-v62p-rq8g-8h59","path":"yarn.lock","line":null,"fingerprint":"pbkdf2@3.0.17 (npm):GHSA-v62p-rq8g-8h59"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.4 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"yarn.lock","line":null,"fingerprint":"proxy-addr@2.0.4 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-4g88-fppr-53pp","severity":"critical","message":"set-value@0.4.3 (npm) is affected by GHSA-4g88-fppr-53pp","path":"yarn.lock","line":null,"fingerprint":"set-value@0.4.3 (npm):GHSA-4g88-fppr-53pp"},{"rule_id":"osv/GHSA-4g88-fppr-53pp","severity":"critical","message":"set-value@2.0.0 (npm) is affected by GHSA-4g88-fppr-53pp","path":"yarn.lock","line":null,"fingerprint":"set-value@2.0.0 (npm):GHSA-4g88-fppr-53pp"},{"rule_id":"osv/GHSA-95m3-7q98-8xr5","severity":"critical","message":"sha.js@2.4.11 (npm) is affected by GHSA-95m3-7q98-8xr5","path":"yarn.lock","line":null,"fingerprint":"sha.js@2.4.11 (npm):GHSA-95m3-7q98-8xr5"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.6.1 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@4.4.6 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-29xr-v42j-r956","severity":"critical","message":"thenify@3.3.0 (npm) is affected by GHSA-29xr-v42j-r956","path":"yarn.lock","line":null,"fingerprint":"thenify@3.3.0 (npm):GHSA-29xr-v42j-r956"},{"rule_id":"osv/GHSA-hgjh-723h-mx2j","severity":"critical","message":"url-parse@1.4.3 (npm) is affected by GHSA-hgjh-723h-mx2j","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.3 (npm):GHSA-hgjh-723h-mx2j"},{"rule_id":"osv/GHSA-hgjh-723h-mx2j","severity":"critical","message":"url-parse@1.4.4 (npm) is affected by GHSA-hgjh-723h-mx2j","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.4 (npm):GHSA-hgjh-723h-mx2j"},{"rule_id":"osv/GHSA-xv26-6w52-cph6","severity":"critical","message":"websocket-driver@0.7.0 (npm) is affected by GHSA-xv26-6w52-cph6","path":"yarn.lock","line":null,"fingerprint":"websocket-driver@0.7.0 (npm):GHSA-xv26-6w52-cph6"},{"rule_id":"osv/GHSA-6chw-6frg-f759","severity":"high","message":"acorn@5.7.3 (npm) is affected by GHSA-6chw-6frg-f759","path":"yarn.lock","line":null,"fingerprint":"acorn@5.7.3 (npm):GHSA-6chw-6frg-f759"},{"rule_id":"osv/GHSA-6chw-6frg-f759","severity":"high","message":"acorn@6.0.3 (npm) is affected by GHSA-6chw-6frg-f759","path":"yarn.lock","line":null,"fingerprint":"acorn@6.0.3 (npm):GHSA-6chw-6frg-f759"},{"rule_id":"osv/GHSA-6chw-6frg-f759","severity":"high","message":"acorn@6.0.4 (npm) is affected by GHSA-6chw-6frg-f759","path":"yarn.lock","line":null,"fingerprint":"acorn@6.0.4 (npm):GHSA-6chw-6frg-f759"},{"rule_id":"osv/GHSA-whgm-jr23-g3j9","severity":"high","message":"ansi-html@0.0.7 (npm) is affected by GHSA-whgm-jr23-g3j9","path":"yarn.lock","line":null,"fingerprint":"ansi-html@0.0.7 (npm):GHSA-whgm-jr23-g3j9"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@3.0.0 (npm) is affected by GHSA-93q8-gq69-wqmw","path":"yarn.lock","line":null,"fingerprint":"ansi-regex@3.0.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-fwr7-v2mv-hh25","severity":"high","message":"async@2.6.1 (npm) is affected by GHSA-fwr7-v2mv-hh25","path":"yarn.lock","line":null,"fingerprint":"async@2.6.1 (npm):GHSA-fwr7-v2mv-hh25"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.18.3 (npm) is affected by GHSA-27r3-jxmh-p828","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.3 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-qwcr-r2fm-qrc7","severity":"high","message":"body-parser@1.18.3 (npm) is affected by GHSA-qwcr-r2fm-qrc7","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.3 (npm):GHSA-qwcr-r2fm-qrc7"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@1.8.5 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"yarn.lock","line":null,"fingerprint":"braces@1.8.5 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@2.3.2 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"yarn.lock","line":null,"fingerprint":"braces@2.3.2 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-x9w5-v3q2-3rhw","severity":"high","message":"browserify-sign@4.0.4 (npm) is affected by GHSA-x9w5-v3q2-3rhw","path":"yarn.lock","line":null,"fingerprint":"browserify-sign@4.0.4 (npm):GHSA-x9w5-v3q2-3rhw"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@3.2.8 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"yarn.lock","line":null,"fingerprint":"browserslist@3.2.8 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@3.2.8 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"yarn.lock","line":null,"fingerprint":"browserslist@3.2.8 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.1.1 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.1.1 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.1.1 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.1.1 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.3.4 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.3.4 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.3.4 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.3.4 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-vc2v-76pw-4v95","severity":"high","message":"compression@1.7.3 (npm) is affected by GHSA-vc2v-76pw-4v95","path":"yarn.lock","line":null,"fingerprint":"compression@1.7.3 (npm):GHSA-vc2v-76pw-4v95"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@5.1.0 (npm) is affected by GHSA-3xgq-45jj-v275","path":"yarn.lock","line":null,"fingerprint":"cross-spawn@5.1.0 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@6.0.5 (npm) is affected by GHSA-3xgq-45jj-v275","path":"yarn.lock","line":null,"fingerprint":"cross-spawn@6.0.5 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-p28h-cc7q-c4fg","severity":"high","message":"css-what@2.1.2 (npm) is affected by GHSA-p28h-cc7q-c4fg","path":"yarn.lock","line":null,"fingerprint":"css-what@2.1.2 (npm):GHSA-p28h-cc7q-c4fg"},{"rule_id":"osv/GHSA-qr28-fpjm-wq7f","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-qr28-fpjm-wq7f","path":"yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-qr28-fpjm-wq7f"},{"rule_id":"osv/GHSA-w573-4hg7-7wgq","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-w573-4hg7-7wgq","path":"yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-w573-4hg7-7wgq"},{"rule_id":"osv/GHSA-3wcq-x3mq-6r9p","severity":"high","message":"dns-packet@1.3.1 (npm) is affected by GHSA-3wcq-x3mq-6r9p","path":"yarn.lock","line":null,"fingerprint":"dns-packet@1.3.1 (npm):GHSA-3wcq-x3mq-6r9p"},{"rule_id":"osv/GHSA-jrvm-mcxc-mf6m","severity":"high","message":"dom-iterator@1.0.0 (npm) is affected by GHSA-jrvm-mcxc-mf6m","path":"yarn.lock","line":null,"fingerprint":"dom-iterator@1.0.0 (npm):GHSA-jrvm-mcxc-mf6m"},{"rule_id":"osv/GHSA-ff7x-qrg7-qggm","severity":"high","message":"dot-prop@4.2.0 (npm) is affected by GHSA-ff7x-qrg7-qggm","path":"yarn.lock","line":null,"fingerprint":"dot-prop@4.2.0 (npm):GHSA-ff7x-qrg7-qggm"},{"rule_id":"osv/GHSA-vh7m-p724-62c2","severity":"high","message":"elliptic@6.4.1 (npm) is affected by GHSA-vh7m-p724-62c2","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-vh7m-p724-62c2"},{"rule_id":"osv/GHSA-74fj-2j2h-c42q","severity":"high","message":"follow-redirects@1.5.9 (npm) is affected by GHSA-74fj-2j2h-c42q","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.9 (npm):GHSA-74fj-2j2h-c42q"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.3.3 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"yarn.lock","line":null,"fingerprint":"form-data@2.3.3 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-2cf5-4w76-r9qv","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-2cf5-4w76-r9qv","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-2cf5-4w76-r9qv"},{"rule_id":"osv/GHSA-3cqr-58rm-57f8","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-3cqr-58rm-57f8","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-3cqr-58rm-57f8"},{"rule_id":"osv/GHSA-3mfm-83xf-c92r","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-3mfm-83xf-c92r","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-3mfm-83xf-c92r"},{"rule_id":"osv/GHSA-62gr-4qp9-h98f","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-62gr-4qp9-h98f","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-62gr-4qp9-h98f"},{"rule_id":"osv/GHSA-9cx6-37pm-9jff","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-9cx6-37pm-9jff","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-9cx6-37pm-9jff"},{"rule_id":"osv/GHSA-q42p-pg8m-cqh6","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-q42p-pg8m-cqh6","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-q42p-pg8m-cqh6"},{"rule_id":"osv/GHSA-xhpv-hc6g-r9c6","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-xhpv-hc6g-r9c6","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-xhpv-hc6g-r9c6"},{"rule_id":"osv/GHSA-xjpj-3mr7-gcpf","severity":"high","message":"handlebars@4.0.12 (npm) is affected by GHSA-xjpj-3mr7-gcpf","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-xjpj-3mr7-gcpf"},{"rule_id":"osv/GHSA-pfq8-rq6v-vf5m","severity":"high","message":"html-minifier@3.5.21 (npm) is affected by GHSA-pfq8-rq6v-vf5m","path":"yarn.lock","line":null,"fingerprint":"html-minifier@3.5.21 (npm):GHSA-pfq8-rq6v-vf5m"},{"rule_id":"osv/GHSA-6x33-pw7p-hmpq","severity":"high","message":"http-proxy@1.17.0 (npm) is affected by GHSA-6x33-pw7p-hmpq","path":"yarn.lock","line":null,"fingerprint":"http-proxy@1.17.0 (npm):GHSA-6x33-pw7p-hmpq"},{"rule_id":"osv/GHSA-c7qv-q95q-8v27","severity":"high","message":"http-proxy-middleware@0.18.0 (npm) is affected by GHSA-c7qv-q95q-8v27","path":"yarn.lock","line":null,"fingerprint":"http-proxy-middleware@0.18.0 (npm):GHSA-c7qv-q95q-8v27"},{"rule_id":"osv/GHSA-qqgx-2p2h-9c37","severity":"high","message":"ini@1.3.5 (npm) is affected by GHSA-qqgx-2p2h-9c37","path":"yarn.lock","line":null,"fingerprint":"ini@1.3.5 (npm):GHSA-qqgx-2p2h-9c37"},{"rule_id":"osv/GHSA-2p57-rm9w-gvfp","severity":"high","message":"ip@1.1.5 (npm) is affected by GHSA-2p57-rm9w-gvfp","path":"yarn.lock","line":null,"fingerprint":"ip@1.1.5 (npm):GHSA-2p57-rm9w-gvfp"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.12.0 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.12.0 (npm) is affected by GHSA-52cp-r559-cp3m","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.12.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@0.5.1 (npm) is affected by GHSA-9c47-m6qq-7p4h","path":"yarn.lock","line":null,"fingerprint":"json5@0.5.1 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@2.1.0 (npm) is affected by GHSA-9c47-m6qq-7p4h","path":"yarn.lock","line":null,"fingerprint":"json5@2.1.0 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-6c8f-qphg-qjgp","severity":"high","message":"kind-of@6.0.2 (npm) is affected by GHSA-6c8f-qphg-qjgp","path":"yarn.lock","line":null,"fingerprint":"kind-of@6.0.2 (npm):GHSA-6c8f-qphg-qjgp"},{"rule_id":"osv/GHSA-7gcc-r8m5-44qm","severity":"high","message":"koa@2.6.1 (npm) is affected by GHSA-7gcc-r8m5-44qm","path":"yarn.lock","line":null,"fingerprint":"koa@2.6.1 (npm):GHSA-7gcc-r8m5-44qm"},{"rule_id":"osv/GHSA-3rfm-jhwj-7488","severity":"high","message":"loader-utils@1.1.0 (npm) is affected by GHSA-3rfm-jhwj-7488","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.1.0 (npm):GHSA-3rfm-jhwj-7488"},{"rule_id":"osv/GHSA-hhq3-ff78-jv3g","severity":"high","message":"loader-utils@1.1.0 (npm) is affected by GHSA-hhq3-ff78-jv3g","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.1.0 (npm):GHSA-hhq3-ff78-jv3g"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.11 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.17.11 (npm) is affected by GHSA-p6mc-m468-83gw","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.11 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-7wpw-2hjm-89gp","severity":"high","message":"merge@1.2.1 (npm) is affected by GHSA-7wpw-2hjm-89gp","path":"yarn.lock","line":null,"fingerprint":"merge@1.2.1 (npm):GHSA-7wpw-2hjm-89gp"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-f8q6-p94x-37v3","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-f8q6-p94x-37v3","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-f8q6-p94x-37v3"},{"rule_id":"osv/GHSA-r683-j2x4-v87g","severity":"high","message":"node-fetch@1.7.3 (npm) is affected by GHSA-r683-j2x4-v87g","path":"yarn.lock","line":null,"fingerprint":"node-fetch@1.7.3 (npm):GHSA-r683-j2x4-v87g"},{"rule_id":"osv/GHSA-r683-j2x4-v87g","severity":"high","message":"node-fetch@2.2.1 (npm) is affected by GHSA-r683-j2x4-v87g","path":"yarn.lock","line":null,"fingerprint":"node-fetch@2.2.1 (npm):GHSA-r683-j2x4-v87g"},{"rule_id":"osv/GHSA-2328-f5f3-gj25","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-2328-f5f3-gj25","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-2328-f5f3-gj25"},{"rule_id":"osv/GHSA-554w-wpv2-vw27","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-554w-wpv2-vw27","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-554w-wpv2-vw27"},{"rule_id":"osv/GHSA-5gfm-wpxj-wjgq","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-5gfm-wpxj-wjgq","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-5gfm-wpxj-wjgq"},{"rule_id":"osv/GHSA-5m6q-g25r-mvwx","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-5m6q-g25r-mvwx","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-5m6q-g25r-mvwx"},{"rule_id":"osv/GHSA-5x38-2vff-x55p","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-5x38-2vff-x55p","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-5x38-2vff-x55p"},{"rule_id":"osv/GHSA-6qrw-m8cv-hcxf","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-6qrw-m8cv-hcxf","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-6qrw-m8cv-hcxf"},{"rule_id":"osv/GHSA-7wch-p9px-956x","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-7wch-p9px-956x","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-7wch-p9px-956x"},{"rule_id":"osv/GHSA-86w9-cpqp-85rv","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-86w9-cpqp-85rv, GHSA-ppp5-5v6c-4jwp","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-86w9-cpqp-85rv"},{"rule_id":"osv/GHSA-8hrf-8g6f-7xwp","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-8hrf-8g6f-7xwp","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-8hrf-8g6f-7xwp"},{"rule_id":"osv/GHSA-cfm4-qjh2-4765","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-cfm4-qjh2-4765","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-cfm4-qjh2-4765"},{"rule_id":"osv/GHSA-hqq3-7jhf-c5jx","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-hqq3-7jhf-c5jx","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-hqq3-7jhf-c5jx"},{"rule_id":"osv/GHSA-jc66-7q78-782g","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-jc66-7q78-782g","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-jc66-7q78-782g"},{"rule_id":"osv/GHSA-q67f-28xg-22rw","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-q67f-28xg-22rw","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-q67f-28xg-22rw"},{"rule_id":"osv/GHSA-rhr8-3pm8-cq29","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-rhr8-3pm8-cq29","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-rhr8-3pm8-cq29"},{"rule_id":"osv/GHSA-x4jg-mjrx-434g","severity":"high","message":"node-forge@0.7.5 (npm) is affected by GHSA-x4jg-mjrx-434g","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-x4jg-mjrx-434g"},{"rule_id":"osv/GHSA-rp65-9cf3-cjxr","severity":"high","message":"nth-check@1.0.2 (npm) is affected by GHSA-rp65-9cf3-cjxr","path":"yarn.lock","line":null,"fingerprint":"nth-check@1.0.2 (npm):GHSA-rp65-9cf3-cjxr"},{"rule_id":"osv/GHSA-37ch-88jc-xwx2","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-37ch-88jc-xwx2, GHSA-9wv6-86v2-598j","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-37ch-88jc-xwx2"},{"rule_id":"osv/GHSA-rhx6-c78j-4q9w","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-rhx6-c78j-4q9w","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-rhx6-c78j-4q9w"},{"rule_id":"osv/GHSA-9wv6-86v2-598j","severity":"high","message":"path-to-regexp@1.7.0 (npm) is affected by GHSA-9wv6-86v2-598j","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@1.7.0 (npm):GHSA-9wv6-86v2-598j"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@6.0.23 (npm) is affected by GHSA-6g55-p6wh-862q","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@6.0.23 (npm) is affected by GHSA-r28c-9q8g-f849","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-gj77-59wh-66hg","severity":"high","message":"prismjs@1.6.0 (npm) is affected by GHSA-gj77-59wh-66hg","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.6.0 (npm):GHSA-gj77-59wh-66hg"},{"rule_id":"osv/GHSA-wvhm-4hhf-97x9","severity":"high","message":"prismjs@1.6.0 (npm) is affected by GHSA-wvhm-4hhf-97x9","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.6.0 (npm):GHSA-wvhm-4hhf-97x9"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.5.2 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.6.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@5.6.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-5c6j-r48x-rmvq","severity":"high","message":"serialize-javascript@1.5.0 (npm) is affected by GHSA-5c6j-r48x-rmvq","path":"yarn.lock","line":null,"fingerprint":"serialize-javascript@1.5.0 (npm):GHSA-5c6j-r48x-rmvq"},{"rule_id":"osv/GHSA-hxcc-f52p-wc94","severity":"high","message":"serialize-javascript@1.5.0 (npm) is affected by GHSA-hxcc-f52p-wc94","path":"yarn.lock","line":null,"fingerprint":"serialize-javascript@1.5.0 (npm):GHSA-hxcc-f52p-wc94"},{"rule_id":"osv/GHSA-4jqc-8m5r-9rpr","severity":"high","message":"set-value@0.4.3 (npm) is affected by GHSA-4jqc-8m5r-9rpr","path":"yarn.lock","line":null,"fingerprint":"set-value@0.4.3 (npm):GHSA-4jqc-8m5r-9rpr"},{"rule_id":"osv/GHSA-4jqc-8m5r-9rpr","severity":"high","message":"set-value@2.0.0 (npm) is affected by GHSA-4jqc-8m5r-9rpr","path":"yarn.lock","line":null,"fingerprint":"set-value@2.0.0 (npm):GHSA-4jqc-8m5r-9rpr"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.6.1 (npm) is affected by GHSA-395f-4hp3-45gv","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-vx3p-948g-6vhq","severity":"high","message":"ssri@5.3.0 (npm) is affected by GHSA-vx3p-948g-6vhq","path":"yarn.lock","line":null,"fingerprint":"ssri@5.3.0 (npm):GHSA-vx3p-948g-6vhq"},{"rule_id":"osv/GHSA-vx3p-948g-6vhq","severity":"high","message":"ssri@6.0.1 (npm) is affected by GHSA-vx3p-948g-6vhq","path":"yarn.lock","line":null,"fingerprint":"ssri@6.0.1 (npm):GHSA-vx3p-948g-6vhq"},{"rule_id":"osv/GHSA-2p49-hgcm-8545","severity":"high","message":"svgo@1.1.1 (npm) is affected by GHSA-2p49-hgcm-8545","path":"yarn.lock","line":null,"fingerprint":"svgo@1.1.1 (npm):GHSA-2p49-hgcm-8545"},{"rule_id":"osv/GHSA-w27v-7q3p-w38r","severity":"high","message":"svgo@1.1.1 (npm) is affected by GHSA-w27v-7q3p-w38r","path":"yarn.lock","line":null,"fingerprint":"svgo@1.1.1 (npm):GHSA-w27v-7q3p-w38r"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-3jfq-g458-7qm9","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-5955-9wpr-37jh","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-83g3-92jg-28cx","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-9r2w-394v-53qc","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-9r2w-394v-53qc","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-9r2w-394v-53qc"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-qq89-hq3f-393p","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-qq89-hq3f-393p","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-qq89-hq3f-393p"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-r292-9mhp-454m","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r628-mhmh-qjhw","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-r628-mhmh-qjhw","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-r628-mhmh-qjhw"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@4.4.6 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-4wf5-vphf-c2xc","severity":"high","message":"terser@3.10.11 (npm) is affected by GHSA-4wf5-vphf-c2xc","path":"yarn.lock","line":null,"fingerprint":"terser@3.10.11 (npm):GHSA-4wf5-vphf-c2xc"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.33 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"yarn.lock","line":null,"fingerprint":"tmp@0.0.33 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-jgrx-mgxx-jf9v","severity":"high","message":"tmpl@1.0.4 (npm) is affected by GHSA-jgrx-mgxx-jf9v","path":"yarn.lock","line":null,"fingerprint":"tmpl@1.0.4 (npm):GHSA-jgrx-mgxx-jf9v"},{"rule_id":"osv/GHSA-w5p7-h5w8-2hfq","severity":"high","message":"trim@0.0.1 (npm) is affected by GHSA-w5p7-h5w8-2hfq","path":"yarn.lock","line":null,"fingerprint":"trim@0.0.1 (npm):GHSA-w5p7-h5w8-2hfq"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@1.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v","path":"yarn.lock","line":null,"fingerprint":"trim-newlines@1.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@2.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v","path":"yarn.lock","line":null,"fingerprint":"trim-newlines@2.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-394c-5j6w-4xmx","severity":"high","message":"ua-parser-js@0.7.19 (npm) is affected by GHSA-394c-5j6w-4xmx","path":"yarn.lock","line":null,"fingerprint":"ua-parser-js@0.7.19 (npm):GHSA-394c-5j6w-4xmx"},{"rule_id":"osv/GHSA-662x-fhqg-9p8v","severity":"high","message":"ua-parser-js@0.7.19 (npm) is affected by GHSA-662x-fhqg-9p8v","path":"yarn.lock","line":null,"fingerprint":"ua-parser-js@0.7.19 (npm):GHSA-662x-fhqg-9p8v"},{"rule_id":"osv/GHSA-78cj-fxph-m83p","severity":"high","message":"ua-parser-js@0.7.19 (npm) is affected by GHSA-78cj-fxph-m83p","path":"yarn.lock","line":null,"fingerprint":"ua-parser-js@0.7.19 (npm):GHSA-78cj-fxph-m83p"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.3.2 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"yarn.lock","line":null,"fingerprint":"uuid@3.3.2 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-g84c-rxfj-3j2c","severity":"high","message":"webpack-dev-middleware@3.4.0 (npm) is affected by GHSA-g84c-rxfj-3j2c","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-middleware@3.4.0 (npm):GHSA-g84c-rxfj-3j2c"},{"rule_id":"osv/GHSA-wr3j-pwj9-hqq6","severity":"high","message":"webpack-dev-middleware@3.4.0 (npm) is affected by GHSA-wr3j-pwj9-hqq6","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-middleware@3.4.0 (npm):GHSA-wr3j-pwj9-hqq6"},{"rule_id":"osv/GHSA-cf66-xwfp-gvc4","severity":"high","message":"webpack-dev-server@3.1.10 (npm) is affected by GHSA-cf66-xwfp-gvc4","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-server@3.1.10 (npm):GHSA-cf66-xwfp-gvc4"},{"rule_id":"osv/GHSA-g78m-2chm-r7qv","severity":"high","message":"websocket-extensions@0.1.3 (npm) is affected by GHSA-g78m-2chm-r7qv","path":"yarn.lock","line":null,"fingerprint":"websocket-extensions@0.1.3 (npm):GHSA-g78m-2chm-r7qv"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@4.1.0 (npm) is affected by GHSA-3h5v-q93c-6h6q","path":"yarn.lock","line":null,"fingerprint":"ws@4.1.0 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@4.1.0 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"yarn.lock","line":null,"fingerprint":"ws@4.1.0 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@5.2.2 (npm) is affected by GHSA-3h5v-q93c-6h6q","path":"yarn.lock","line":null,"fingerprint":"ws@5.2.2 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@5.2.2 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"yarn.lock","line":null,"fingerprint":"ws@5.2.2 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@6.1.0 (npm) is affected by GHSA-3h5v-q93c-6h6q","path":"yarn.lock","line":null,"fingerprint":"ws@6.1.0 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@6.1.0 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"yarn.lock","line":null,"fingerprint":"ws@6.1.0 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@3.2.1 (npm) is affected by GHSA-c4w7-xm78-47vh","path":"yarn.lock","line":null,"fingerprint":"y18n@3.2.1 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@4.0.0 (npm) is affected by GHSA-c4w7-xm78-47vh","path":"yarn.lock","line":null,"fingerprint":"y18n@4.0.0 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-968p-4wvh-cqc8","severity":"medium","message":"@babel/helpers@7.1.2 (npm) is affected by GHSA-968p-4wvh-cqc8","path":"yarn.lock","line":null,"fingerprint":"@babel/helpers@7.1.2 (npm):GHSA-968p-4wvh-cqc8"},{"rule_id":"osv/GHSA-968p-4wvh-cqc8","severity":"medium","message":"@babel/helpers@7.4.4 (npm) is affected by GHSA-968p-4wvh-cqc8","path":"yarn.lock","line":null,"fingerprint":"@babel/helpers@7.4.4 (npm):GHSA-968p-4wvh-cqc8"},{"rule_id":"osv/GHSA-968p-4wvh-cqc8","severity":"medium","message":"@babel/runtime@7.1.5 (npm) is affected by GHSA-968p-4wvh-cqc8","path":"yarn.lock","line":null,"fingerprint":"@babel/runtime@7.1.5 (npm):GHSA-968p-4wvh-cqc8"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@5.5.2 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"yarn.lock","line":null,"fingerprint":"ajv@5.5.2 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-v88g-cgmw-v5xw","severity":"medium","message":"ajv@5.5.2 (npm) is affected by GHSA-v88g-cgmw-v5xw","path":"yarn.lock","line":null,"fingerprint":"ajv@5.5.2 (npm):GHSA-v88g-cgmw-v5xw"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@6.5.5 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"yarn.lock","line":null,"fingerprint":"ajv@6.5.5 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-v88g-cgmw-v5xw","severity":"medium","message":"ajv@6.5.5 (npm) is affected by GHSA-v88g-cgmw-v5xw","path":"yarn.lock","line":null,"fingerprint":"ajv@6.5.5 (npm):GHSA-v88g-cgmw-v5xw"},{"rule_id":"osv/GHSA-378v-28hj-76wf","severity":"medium","message":"bn.js@4.11.8 (npm) is affected by GHSA-378v-28hj-76wf","path":"yarn.lock","line":null,"fingerprint":"bn.js@4.11.8 (npm):GHSA-378v-28hj-76wf"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-w8qv-6jwh-64r5","severity":"medium","message":"browserslist@4.1.1 (npm) is affected by GHSA-w8qv-6jwh-64r5","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.1.1 (npm):GHSA-w8qv-6jwh-64r5"},{"rule_id":"osv/GHSA-w8qv-6jwh-64r5","severity":"medium","message":"browserslist@4.3.4 (npm) is affected by GHSA-w8qv-6jwh-64r5","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.3.4 (npm):GHSA-w8qv-6jwh-64r5"},{"rule_id":"osv/GHSA-4gw3-8f77-f72c","severity":"medium","message":"codemirror@5.41.0 (npm) is affected by GHSA-4gw3-8f77-f72c","path":"yarn.lock","line":null,"fingerprint":"codemirror@5.41.0 (npm):GHSA-4gw3-8f77-f72c"},{"rule_id":"osv/GHSA-pxg6-pf52-xh8x","severity":"medium","message":"cookie@0.3.1 (npm) is affected by GHSA-pxg6-pf52-xh8x","path":"yarn.lock","line":null,"fingerprint":"cookie@0.3.1 (npm):GHSA-pxg6-pf52-xh8x"},{"rule_id":"osv/GHSA-vcc3-ghjq-m6fr","severity":"medium","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-vcc3-ghjq-m6fr","path":"yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-vcc3-ghjq-m6fr"},{"rule_id":"osv/GHSA-ghr5-ch3p-vcr6","severity":"medium","message":"ejs@2.6.1 (npm) is affected by GHSA-ghr5-ch3p-vcr6","path":"yarn.lock","line":null,"fingerprint":"ejs@2.6.1 (npm):GHSA-ghr5-ch3p-vcr6"},{"rule_id":"osv/GHSA-434g-2637-qmqr","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-434g-2637-qmqr","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-434g-2637-qmqr"},{"rule_id":"osv/GHSA-49q7-c7j4-3p7m","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-49q7-c7j4-3p7m","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-49q7-c7j4-3p7m"},{"rule_id":"osv/GHSA-848j-6mx2-7j84","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-848j-6mx2-7j84","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-848j-6mx2-7j84"},{"rule_id":"osv/GHSA-977x-g7h5-7qgw","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-977x-g7h5-7qgw","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-977x-g7h5-7qgw"},{"rule_id":"osv/GHSA-f7q4-pwc6-w24p","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-f7q4-pwc6-w24p","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-f7q4-pwc6-w24p"},{"rule_id":"osv/GHSA-fc9h-whq2-v747","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-fc9h-whq2-v747","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-fc9h-whq2-v747"},{"rule_id":"osv/GHSA-r9p9-mrjm-926w","severity":"medium","message":"elliptic@6.4.1 (npm) is affected by GHSA-r9p9-mrjm-926w","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.4.1 (npm):GHSA-r9p9-mrjm-926w"},{"rule_id":"osv/GHSA-4gmj-3p3h-gm8h","severity":"medium","message":"es5-ext@0.10.46 (npm) is affected by GHSA-4gmj-3p3h-gm8h","path":"yarn.lock","line":null,"fingerprint":"es5-ext@0.10.46 (npm):GHSA-4gmj-3p3h-gm8h"},{"rule_id":"osv/GHSA-qx4v-6gc5-f2vv","severity":"medium","message":"esm@3.0.84 (npm) is affected by GHSA-qx4v-6gc5-f2vv","path":"yarn.lock","line":null,"fingerprint":"esm@3.0.84 (npm):GHSA-qx4v-6gc5-f2vv"},{"rule_id":"osv/GHSA-qw6h-vgh9-j6wx","severity":"medium","message":"express@4.16.4 (npm) is affected by GHSA-qw6h-vgh9-j6wx","path":"yarn.lock","line":null,"fingerprint":"express@4.16.4 (npm):GHSA-qw6h-vgh9-j6wx"},{"rule_id":"osv/GHSA-rv95-896h-c2vc","severity":"medium","message":"express@4.16.4 (npm) is affected by GHSA-rv95-896h-c2vc","path":"yarn.lock","line":null,"fingerprint":"express@4.16.4 (npm):GHSA-rv95-896h-c2vc"},{"rule_id":"osv/GHSA-cxjh-pqwp-8mfp","severity":"medium","message":"follow-redirects@1.5.9 (npm) is affected by GHSA-cxjh-pqwp-8mfp","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.9 (npm):GHSA-cxjh-pqwp-8mfp"},{"rule_id":"osv/GHSA-jchw-25xp-jwwc","severity":"medium","message":"follow-redirects@1.5.9 (npm) is affected by GHSA-jchw-25xp-jwwc","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.9 (npm):GHSA-jchw-25xp-jwwc"},{"rule_id":"osv/GHSA-pw2r-vq6v-hr8c","severity":"medium","message":"follow-redirects@1.5.9 (npm) is affected by GHSA-pw2r-vq6v-hr8c","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.9 (npm):GHSA-pw2r-vq6v-hr8c"},{"rule_id":"osv/GHSA-r4q5-vmmm-2653","severity":"medium","message":"follow-redirects@1.5.9 (npm) is affected by GHSA-r4q5-vmmm-2653","path":"yarn.lock","line":null,"fingerprint":"follow-redirects@1.5.9 (npm):GHSA-r4q5-vmmm-2653"},{"rule_id":"osv/MAL-2023-462","severity":"medium","message":"fsevents@1.2.4 (npm) is affected by MAL-2023-462","path":"yarn.lock","line":null,"fingerprint":"fsevents@1.2.4 (npm):MAL-2023-462"},{"rule_id":"osv/GHSA-pfrx-2q88-qq97","severity":"medium","message":"got@6.7.1 (npm) is affected by GHSA-pfrx-2q88-qq97","path":"yarn.lock","line":null,"fingerprint":"got@6.7.1 (npm):GHSA-pfrx-2q88-qq97"},{"rule_id":"osv/GHSA-2qvq-rjwj-gvw9","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-2qvq-rjwj-gvw9","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-2qvq-rjwj-gvw9"},{"rule_id":"osv/GHSA-f52g-6jhx-586p","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-f52g-6jhx-586p","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-f52g-6jhx-586p"},{"rule_id":"osv/GHSA-g9r4-xpmj-mj65","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-g9r4-xpmj-mj65","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-g9r4-xpmj-mj65"},{"rule_id":"osv/GHSA-q2c6-c6pm-g3gh","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-q2c6-c6pm-g3gh","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-q2c6-c6pm-g3gh"},{"rule_id":"osv/GHSA-xw65-4hp5-5hc7","severity":"medium","message":"handlebars@4.0.12 (npm) is affected by GHSA-xw65-4hp5-5hc7","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-xw65-4hp5-5hc7"},{"rule_id":"osv/GHSA-43f8-2h32-f4cj","severity":"medium","message":"hosted-git-info@2.7.1 (npm) is affected by GHSA-43f8-2h32-f4cj","path":"yarn.lock","line":null,"fingerprint":"hosted-git-info@2.7.1 (npm):GHSA-43f8-2h32-f4cj"},{"rule_id":"osv/GHSA-64mm-vxmg-q3vj","severity":"medium","message":"http-proxy-middleware@0.18.0 (npm) is affected by GHSA-64mm-vxmg-q3vj","path":"yarn.lock","line":null,"fingerprint":"http-proxy-middleware@0.18.0 (npm):GHSA-64mm-vxmg-q3vj"},{"rule_id":"osv/GHSA-78xj-cgh5-2h22","severity":"medium","message":"ip@1.1.5 (npm) is affected by GHSA-78xj-cgh5-2h22","path":"yarn.lock","line":null,"fingerprint":"ip@1.1.5 (npm):GHSA-78xj-cgh5-2h22"},{"rule_id":"osv/GHSA-2pr6-76vf-7546","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-2pr6-76vf-7546","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-2pr6-76vf-7546"},{"rule_id":"osv/GHSA-8j8c-7jfh-h6hx","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-8j8c-7jfh-h6hx","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-8j8c-7jfh-h6hx"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-h67p-54hq-rp68","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@3.12.0 (npm) is affected by GHSA-mh29-5h37-fv8m","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.12.0 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-x2rg-q646-7m2v","severity":"medium","message":"koa@2.6.1 (npm) is affected by GHSA-x2rg-q646-7m2v","path":"yarn.lock","line":null,"fingerprint":"koa@2.6.1 (npm):GHSA-x2rg-q646-7m2v"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.17.11 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.17.11 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.11 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-4xcv-9jjx-gfj3","severity":"medium","message":"mem@1.1.0 (npm) is affected by GHSA-4xcv-9jjx-gfj3","path":"yarn.lock","line":null,"fingerprint":"mem@1.1.0 (npm):GHSA-4xcv-9jjx-gfj3"},{"rule_id":"osv/GHSA-4xcv-9jjx-gfj3","severity":"medium","message":"mem@3.0.1 (npm) is affected by GHSA-4xcv-9jjx-gfj3","path":"yarn.lock","line":null,"fingerprint":"mem@3.0.1 (npm):GHSA-4xcv-9jjx-gfj3"},{"rule_id":"osv/GHSA-952p-6rrq-rcjv","severity":"medium","message":"micromatch@2.3.11 (npm) is affected by GHSA-952p-6rrq-rcjv","path":"yarn.lock","line":null,"fingerprint":"micromatch@2.3.11 (npm):GHSA-952p-6rrq-rcjv"},{"rule_id":"osv/GHSA-952p-6rrq-rcjv","severity":"medium","message":"micromatch@3.1.10 (npm) is affected by GHSA-952p-6rrq-rcjv","path":"yarn.lock","line":null,"fingerprint":"micromatch@3.1.10 (npm):GHSA-952p-6rrq-rcjv"},{"rule_id":"osv/GHSA-vh95-rmgr-6w4m","severity":"medium","message":"minimist@0.0.10 (npm) is affected by GHSA-vh95-rmgr-6w4m","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.10 (npm):GHSA-vh95-rmgr-6w4m"},{"rule_id":"osv/GHSA-vh95-rmgr-6w4m","severity":"medium","message":"minimist@0.0.8 (npm) is affected by GHSA-vh95-rmgr-6w4m","path":"yarn.lock","line":null,"fingerprint":"minimist@0.0.8 (npm):GHSA-vh95-rmgr-6w4m"},{"rule_id":"osv/GHSA-vh95-rmgr-6w4m","severity":"medium","message":"minimist@1.2.0 (npm) is affected by GHSA-vh95-rmgr-6w4m","path":"yarn.lock","line":null,"fingerprint":"minimist@1.2.0 (npm):GHSA-vh95-rmgr-6w4m"},{"rule_id":"osv/GHSA-2r2c-g63r-vccr","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-2r2c-g63r-vccr","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-2r2c-g63r-vccr"},{"rule_id":"osv/GHSA-525v-9gp9-w22h","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-525v-9gp9-w22h","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-525v-9gp9-w22h"},{"rule_id":"osv/GHSA-5cwg-6vw7-rj6p","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-5cwg-6vw7-rj6p","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-5cwg-6vw7-rj6p"},{"rule_id":"osv/GHSA-5rrq-pxf6-6jx5","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-5rrq-pxf6-6jx5","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-5rrq-pxf6-6jx5"},{"rule_id":"osv/GHSA-65ch-62r8-g69g","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-65ch-62r8-g69g","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-65ch-62r8-g69g"},{"rule_id":"osv/GHSA-6cv4-p8m7-4r25","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-6cv4-p8m7-4r25","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-6cv4-p8m7-4r25"},{"rule_id":"osv/GHSA-6wvx-3r32-xmcg","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-6wvx-3r32-xmcg","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-6wvx-3r32-xmcg"},{"rule_id":"osv/GHSA-8fr3-hfg3-gpgp","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-8fr3-hfg3-gpgp","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-8fr3-hfg3-gpgp"},{"rule_id":"osv/GHSA-gf8q-jrpm-jvxq","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-gf8q-jrpm-jvxq","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-gf8q-jrpm-jvxq"},{"rule_id":"osv/GHSA-h46v-rmh6-fq4f","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-h46v-rmh6-fq4f","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-h46v-rmh6-fq4f"},{"rule_id":"osv/GHSA-j8rw-jp99-435v","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-j8rw-jp99-435v","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-j8rw-jp99-435v"},{"rule_id":"osv/GHSA-w4xr-hqv8-ch44","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-w4xr-hqv8-ch44","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-w4xr-hqv8-ch44"},{"rule_id":"osv/GHSA-wxgw-qj99-44c2","severity":"medium","message":"node-forge@0.7.5 (npm) is affected by GHSA-wxgw-qj99-44c2","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.5 (npm):GHSA-wxgw-qj99-44c2"},{"rule_id":"osv/GHSA-5fw9-fq32-wv5p","severity":"medium","message":"node-notifier@5.3.0 (npm) is affected by GHSA-5fw9-fq32-wv5p","path":"yarn.lock","line":null,"fingerprint":"node-notifier@5.3.0 (npm):GHSA-5fw9-fq32-wv5p"},{"rule_id":"osv/GHSA-hj48-42vr-x3v9","severity":"medium","message":"path-parse@1.0.6 (npm) is affected by GHSA-hj48-42vr-x3v9","path":"yarn.lock","line":null,"fingerprint":"path-parse@1.0.6 (npm):GHSA-hj48-42vr-x3v9"},{"rule_id":"osv/GHSA-477h-4r7f-fvrx","severity":"medium","message":"pbkdf2@3.0.17 (npm) is affected by GHSA-477h-4r7f-fvrx","path":"yarn.lock","line":null,"fingerprint":"pbkdf2@3.0.17 (npm):GHSA-477h-4r7f-fvrx"},{"rule_id":"osv/GHSA-566m-qj78-rww5","severity":"medium","message":"postcss@6.0.23 (npm) is affected by GHSA-566m-qj78-rww5","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-566m-qj78-rww5"},{"rule_id":"osv/GHSA-7fh5-64p2-3v2j","severity":"medium","message":"postcss@6.0.23 (npm) is affected by GHSA-7fh5-64p2-3v2j","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-7fh5-64p2-3v2j"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@6.0.23 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@6.0.23 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-h4hr-7fg3-h35w","severity":"medium","message":"prismjs@1.6.0 (npm) is affected by GHSA-h4hr-7fg3-h35w","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.6.0 (npm):GHSA-h4hr-7fg3-h35w"},{"rule_id":"osv/GHSA-hqhp-5p83-hx96","severity":"medium","message":"prismjs@1.6.0 (npm) is affected by GHSA-hqhp-5p83-hx96","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.6.0 (npm):GHSA-hqhp-5p83-hx96"},{"rule_id":"osv/GHSA-x7hr-w5r2-h6wg","severity":"medium","message":"prismjs@1.6.0 (npm) is affected by GHSA-x7hr-w5r2-h6wg","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.6.0 (npm):GHSA-x7hr-w5r2-h6wg"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.5.2 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.5.2 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-5q6m-3h65-w53x","severity":"medium","message":"react-dev-utils@6.1.1 (npm) is affected by GHSA-5q6m-3h65-w53x","path":"yarn.lock","line":null,"fingerprint":"react-dev-utils@6.1.1 (npm):GHSA-5q6m-3h65-w53x"},{"rule_id":"osv/GHSA-p8p7-x288-28g6","severity":"medium","message":"request@2.88.0 (npm) is affected by GHSA-p8p7-x288-28g6","path":"yarn.lock","line":null,"fingerprint":"request@2.88.0 (npm):GHSA-p8p7-x288-28g6"},{"rule_id":"osv/GHSA-m6fv-jmcg-4jfg","severity":"medium","message":"send@0.16.2 (npm) is affected by GHSA-m6fv-jmcg-4jfg","path":"yarn.lock","line":null,"fingerprint":"send@0.16.2 (npm):GHSA-m6fv-jmcg-4jfg"},{"rule_id":"osv/GHSA-h9rv-jmmf-4pgx","severity":"medium","message":"serialize-javascript@1.5.0 (npm) is affected by GHSA-h9rv-jmmf-4pgx","path":"yarn.lock","line":null,"fingerprint":"serialize-javascript@1.5.0 (npm):GHSA-h9rv-jmmf-4pgx"},{"rule_id":"osv/GHSA-cm22-4g7w-348p","severity":"medium","message":"serve-static@1.13.2 (npm) is affected by GHSA-cm22-4g7w-348p","path":"yarn.lock","line":null,"fingerprint":"serve-static@1.13.2 (npm):GHSA-cm22-4g7w-348p"},{"rule_id":"osv/GHSA-c9g6-9335-x697","severity":"medium","message":"sockjs@0.3.19 (npm) is affected by GHSA-c9g6-9335-x697","path":"yarn.lock","line":null,"fingerprint":"sockjs@0.3.19 (npm):GHSA-c9g6-9335-x697"},{"rule_id":"osv/GHSA-4vpr-x523-8j87","severity":"medium","message":"svgo@1.1.1 (npm) is affected by GHSA-4vpr-x523-8j87","path":"yarn.lock","line":null,"fingerprint":"svgo@1.1.1 (npm):GHSA-4vpr-x523-8j87"},{"rule_id":"osv/GHSA-f5x3-32g6-xq36","severity":"medium","message":"tar@4.4.6 (npm) is affected by GHSA-f5x3-32g6-xq36","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-f5x3-32g6-xq36"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@4.4.6 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@4.4.6 (npm) is affected by GHSA-vmf3-w455-68vh","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@4.4.6 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.6 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-72xf-g2v4-qvf3","severity":"medium","message":"tough-cookie@2.4.3 (npm) is affected by GHSA-72xf-g2v4-qvf3","path":"yarn.lock","line":null,"fingerprint":"tough-cookie@2.4.3 (npm):GHSA-72xf-g2v4-qvf3"},{"rule_id":"osv/GHSA-46c4-8wrp-j99v","severity":"medium","message":"url-parse@1.4.3 (npm) is affected by GHSA-46c4-8wrp-j99v","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.3 (npm):GHSA-46c4-8wrp-j99v"},{"rule_id":"osv/GHSA-8v38-pw62-9cw2","severity":"medium","message":"url-parse@1.4.3 (npm) is affected by GHSA-8v38-pw62-9cw2","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.3 (npm):GHSA-8v38-pw62-9cw2"},{"rule_id":"osv/GHSA-9m6j-fcg5-2442","severity":"medium","message":"url-parse@1.4.3 (npm) is affected by GHSA-9m6j-fcg5-2442","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.3 (npm):GHSA-9m6j-fcg5-2442"},{"rule_id":"osv/GHSA-hh27-ffr2-f2jc","severity":"medium","message":"url-parse@1.4.3 (npm) is affected by GHSA-hh27-ffr2-f2jc","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.3 (npm):GHSA-hh27-ffr2-f2jc"},{"rule_id":"osv/GHSA-jf5r-8hm2-f872","severity":"medium","message":"url-parse@1.4.3 (npm) is affected by GHSA-jf5r-8hm2-f872","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.3 (npm):GHSA-jf5r-8hm2-f872"},{"rule_id":"osv/GHSA-rqff-837h-mm52","severity":"medium","message":"url-parse@1.4.3 (npm) is affected by GHSA-rqff-837h-mm52","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.3 (npm):GHSA-rqff-837h-mm52"},{"rule_id":"osv/GHSA-46c4-8wrp-j99v","severity":"medium","message":"url-parse@1.4.4 (npm) is affected by GHSA-46c4-8wrp-j99v","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.4 (npm):GHSA-46c4-8wrp-j99v"},{"rule_id":"osv/GHSA-8v38-pw62-9cw2","severity":"medium","message":"url-parse@1.4.4 (npm) is affected by GHSA-8v38-pw62-9cw2","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.4 (npm):GHSA-8v38-pw62-9cw2"},{"rule_id":"osv/GHSA-9m6j-fcg5-2442","severity":"medium","message":"url-parse@1.4.4 (npm) is affected by GHSA-9m6j-fcg5-2442","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.4 (npm):GHSA-9m6j-fcg5-2442"},{"rule_id":"osv/GHSA-hh27-ffr2-f2jc","severity":"medium","message":"url-parse@1.4.4 (npm) is affected by GHSA-hh27-ffr2-f2jc","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.4 (npm):GHSA-hh27-ffr2-f2jc"},{"rule_id":"osv/GHSA-jf5r-8hm2-f872","severity":"medium","message":"url-parse@1.4.4 (npm) is affected by GHSA-jf5r-8hm2-f872","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.4 (npm):GHSA-jf5r-8hm2-f872"},{"rule_id":"osv/GHSA-rqff-837h-mm52","severity":"medium","message":"url-parse@1.4.4 (npm) is affected by GHSA-rqff-837h-mm52","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.4 (npm):GHSA-rqff-837h-mm52"},{"rule_id":"osv/GHSA-4v9v-hfq4-rm2v","severity":"medium","message":"webpack-dev-server@3.1.10 (npm) is affected by GHSA-4v9v-hfq4-rm2v","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-server@3.1.10 (npm):GHSA-4v9v-hfq4-rm2v"},{"rule_id":"osv/GHSA-79cf-xcqc-c78w","severity":"medium","message":"webpack-dev-server@3.1.10 (npm) is affected by GHSA-79cf-xcqc-c78w","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-server@3.1.10 (npm):GHSA-79cf-xcqc-c78w"},{"rule_id":"osv/GHSA-9jgg-88mc-972h","severity":"medium","message":"webpack-dev-server@3.1.10 (npm) is affected by GHSA-9jgg-88mc-972h","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-server@3.1.10 (npm):GHSA-9jgg-88mc-972h"},{"rule_id":"osv/GHSA-f5vj-f2hx-8m93","severity":"medium","message":"webpack-dev-server@3.1.10 (npm) is affected by GHSA-f5vj-f2hx-8m93","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-server@3.1.10 (npm):GHSA-f5vj-f2hx-8m93"},{"rule_id":"osv/GHSA-m28w-2pqf-7qgj","severity":"medium","message":"webpack-dev-server@3.1.10 (npm) is affected by GHSA-m28w-2pqf-7qgj","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-server@3.1.10 (npm):GHSA-m28w-2pqf-7qgj"},{"rule_id":"osv/GHSA-mx8g-39q3-5c79","severity":"medium","message":"webpack-dev-server@3.1.10 (npm) is affected by GHSA-mx8g-39q3-5c79","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-server@3.1.10 (npm):GHSA-mx8g-39q3-5c79"},{"rule_id":"osv/GHSA-mp7j-qc5w-4988","severity":"medium","message":"websocket-driver@0.7.0 (npm) is affected by GHSA-mp7j-qc5w-4988","path":"yarn.lock","line":null,"fingerprint":"websocket-driver@0.7.0 (npm):GHSA-mp7j-qc5w-4988"},{"rule_id":"osv/GHSA-6fc8-4gx4-v693","severity":"medium","message":"ws@5.2.2 (npm) is affected by GHSA-6fc8-4gx4-v693","path":"yarn.lock","line":null,"fingerprint":"ws@5.2.2 (npm):GHSA-6fc8-4gx4-v693"},{"rule_id":"osv/GHSA-6fc8-4gx4-v693","severity":"medium","message":"ws@6.1.0 (npm) is affected by GHSA-6fc8-4gx4-v693","path":"yarn.lock","line":null,"fingerprint":"ws@6.1.0 (npm):GHSA-6fc8-4gx4-v693"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@10.1.0 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"yarn.lock","line":null,"fingerprint":"yargs-parser@10.1.0 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-p9pc-299p-vxgp","severity":"medium","message":"yargs-parser@9.0.2 (npm) is affected by GHSA-p9pc-299p-vxgp","path":"yarn.lock","line":null,"fingerprint":"yargs-parser@9.0.2 (npm):GHSA-p9pc-299p-vxgp"},{"rule_id":"osv/GHSA-4x5r-pxfx-6jf8","severity":"low","message":"@babel/core@7.1.2 (npm) is affected by GHSA-4x5r-pxfx-6jf8","path":"yarn.lock","line":null,"fingerprint":"@babel/core@7.1.2 (npm):GHSA-4x5r-pxfx-6jf8"},{"rule_id":"osv/GHSA-4x5r-pxfx-6jf8","severity":"low","message":"@babel/core@7.4.5 (npm) is affected by GHSA-4x5r-pxfx-6jf8","path":"yarn.lock","line":null,"fingerprint":"@babel/core@7.4.5 (npm):GHSA-4x5r-pxfx-6jf8"},{"rule_id":"osv/GHSA-v422-hmwv-36x6","severity":"low","message":"body-parser@1.18.3 (npm) is affected by GHSA-v422-hmwv-36x6","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.18.3 (npm):GHSA-v422-hmwv-36x6"},{"rule_id":"osv/GHSA-v6h2-p8h4-qcjw","severity":"low","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-v6h2-p8h4-qcjw","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-v6h2-p8h4-qcjw"},{"rule_id":"osv/GHSA-gxpj-cx7g-858c","severity":"low","message":"debug@3.2.6 (npm) is affected by GHSA-gxpj-cx7g-858c","path":"yarn.lock","line":null,"fingerprint":"debug@3.2.6 (npm):GHSA-gxpj-cx7g-858c"},{"rule_id":"osv/GHSA-gxpj-cx7g-858c","severity":"low","message":"debug@4.1.0 (npm) is affected by GHSA-gxpj-cx7g-858c","path":"yarn.lock","line":null,"fingerprint":"debug@4.1.0 (npm):GHSA-gxpj-cx7g-858c"},{"rule_id":"osv/GHSA-gxpj-cx7g-858c","severity":"low","message":"debug@4.1.1 (npm) is affected by GHSA-gxpj-cx7g-858c","path":"yarn.lock","line":null,"fingerprint":"debug@4.1.1 (npm):GHSA-gxpj-cx7g-858c"},{"rule_id":"osv/GHSA-73rr-hh4g-fpgx","severity":"low","message":"diff@3.5.0 (npm) is affected by GHSA-73rr-hh4g-fpgx","path":"yarn.lock","line":null,"fingerprint":"diff@3.5.0 (npm):GHSA-73rr-hh4g-fpgx"},{"rule_id":"osv/GHSA-442j-39wm-28r2","severity":"low","message":"handlebars@4.0.12 (npm) is affected by GHSA-442j-39wm-28r2","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.0.12 (npm):GHSA-442j-39wm-28r2"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":1.0,"signed_commit_share":0.1635,"unpinned_manifests":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":114.0,"function_nloc":978.0,"mean_ccn":1.32,"p90_ccn":2.0,"complex_functions":0.0,"long_functions":0.0,"many_param_functions":0.0,"risky_nloc_share":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":1124.0,"duplicated_lines":52.0,"duplicated_share":0.0463,"files":40.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: src/lib/knobs/useBooleanKnob/index.ts:16 and src/lib/knobs/useNumberKnob/index.ts:16","ref":"src/lib/knobs/useBooleanKnob/index.ts","url":"https://github.com/Raathigesh/retoggle/blob/cfa56f65e1d63a6ddd42ff76244c873b9d52a6a7/src/lib/knobs/useBooleanKnob/index.ts#L16","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/lib/knobs/useNumberKnob/index.ts:14 and src/lib/knobs/useObject/index.ts:14","ref":"src/lib/knobs/useNumberKnob/index.ts","url":"https://github.com/Raathigesh/retoggle/blob/cfa56f65e1d63a6ddd42ff76244c873b9d52a6a7/src/lib/knobs/useNumberKnob/index.ts#L14","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/lib/knobs/useRangeKnob/range.tsx:15 and src/lib/knobs/useTimeMachine/timeMachine.tsx:15","ref":"src/lib/knobs/useRangeKnob/range.tsx","url":"https://github.com/Raathigesh/retoggle/blob/cfa56f65e1d63a6ddd42ff76244c873b9d52a6a7/src/lib/knobs/useRangeKnob/range.tsx#L15","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/lib/knobs/useSelectKnob/index.ts:19 and src/lib/knobs/useTextKnob/index.ts:14","ref":"src/lib/knobs/useSelectKnob/index.ts","url":"https://github.com/Raathigesh/retoggle/blob/cfa56f65e1d63a6ddd42ff76244c873b9d52a6a7/src/lib/knobs/useSelectKnob/index.ts#L19","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":6.0,"weighted_findings":5.25,"scanned_lines":1704.0,"category:best-practice":5.0,"category:correctness":1.0},"findings":[{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/lib/components/slider/index.tsx","line":47,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/lib/components/slider/index.tsx:47"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/lib/components/slider/parts.tsx","line":40,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/lib/components/slider/parts.tsx:40"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/lib/components/slider/parts.tsx","line":71,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/lib/components/slider/parts.tsx:71"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/lib/inspector/knobs/index.tsx","line":32,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/lib/inspector/knobs/index.tsx:32"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"src/lib/inspector/logs/index.tsx","line":31,"fingerprint":"typescript.react.best-practice.react-props-spreading:src/lib/inspector/logs/index.tsx:31"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`const` is assigned twice; the first assignment is useless","path":"src/lib/knobs/useColor/color.tsx","line":3,"fingerprint":"javascript.lang.correctness.useless-assignment:src/lib/knobs/useColor/color.tsx:3"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":0.0481,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.3019,"test_lines":41.0,"source_lines":1704.0,"test_ratio":0.0241,"ci_files":1.0,"cochange_share":0.0755,"cochange_commits":53.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .travis.yml","ref":".travis.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (yarn test)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["yarn test"],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":54.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":0.0,"escapes":38.0,"escapes_per_kloc":24.312},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}