{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:40:10.199903Z","repo":{"ref":{"host":"github.com","owner":"beizhedenglong","name":"rough-charts"},"default_branch":"master","clone_url":"https://github.com/beizhedenglong/rough-charts.git","html_url":"https://github.com/beizhedenglong/rough-charts","description":"📈 A responsive, composable react charting library with a hand-drawn style.","stars":1547,"forks":56,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":5923,"primary_language":"TypeScript","license_spdx":"MIT","created_at":"2019-10-04T05:19:54Z","pushed_at":"2020-11-03T17:52:46Z","security_policy_url":null,"distribution":{"owner_created_at":"2015-06-19T07:42:20Z","owner_type":"User","release_assets":[]}},"commit_sha":"74b0724d6b2befb58f3f36e133297f5c1a3f90f6","profile":{"lines_by_language":{"TypeScript":2787,"JavaScript":162},"files_by_category":{"source":55,"config":13,"other":4,"docs":3,"oversized":1,"binary":1,"generated":1},"source_lines":2949,"test_lines":0},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.54,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":37.3,"confidence":0.9,"coverage":1.0,"label":"poor","breakdown":{"complexity":100.0,"duplication":43.3,"lint":3.4,"testing":15.0,"docs":65.0,"type_safety":0.0,"process":0.0},"summary":"Code quality is poor: test-to-source ratio 0.00, no CI test run detected; 0% of function code in complex or long functions; 14% duplicated lines. Weakest area: type safety."},"security":{"score":53.4,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":88.8,"dependencies":0.0,"ci_actions":51.7,"posture":0.0,"scorecard":28.6},"summary":"Security posture is weak: 326 known vulnerabilities in 143 dependencies; 3 high-severity workflow issues. Weakest area: dependencies."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"ok","tool_version":"scorecard v5.6.0","metrics":{"aggregate":2.8,"check:Code-Review":0.0,"check:Maintained":0.0,"check:Dangerous-Workflow":10.0,"check:Binary-Artifacts":10.0,"check:Token-Permissions":0.0,"check:Pinned-Dependencies":0.0,"check:CII-Best-Practices":0.0,"check:Security-Policy":0.0,"check:Fuzzing":0.0,"check:License":10.0,"check:Branch-Protection":0.0,"check:SAST":0.0},"findings":[],"evidence":[{"kind":"scorecard-check","description":"Scorecard Code-Review: 0/10 (Found 1/24 approved changesets -- score normalized to 0)","ref":"Code-Review","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Maintained: 0/10 (0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0)","ref":"Maintained","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Dangerous-Workflow: 10/10 (no dangerous workflow patterns detected)","ref":"Dangerous-Workflow","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Binary-Artifacts: 10/10 (no binaries found in the repo)","ref":"Binary-Artifacts","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Token-Permissions: 0/10 (detected GitHub workflow tokens with excessive permissions)","ref":"Token-Permissions","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Pinned-Dependencies: 0/10 (dependency not pinned by hash detected -- score normalized to 0)","ref":"Pinned-Dependencies","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":1.0},{"kind":"scorecard-check","description":"Scorecard CII-Best-Practices: 0/10 (no effort to earn an OpenSSF best practices badge detected)","ref":"CII-Best-Practices","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Security-Policy: 0/10 (security policy file not detected)","ref":"Security-Policy","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Fuzzing: 0/10 (project is not fuzzed)","ref":"Fuzzing","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":1.0},{"kind":"scorecard-check","description":"Scorecard License: 10/10 (license file detected)","ref":"License","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Branch-Protection: 0/10 (branch protection not enabled on development/release branches)","ref":"Branch-Protection","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":1.0},{"kind":"scorecard-check","description":"Scorecard SAST: 0/10 (SAST tool is not run on all commits -- score normalized to 0)","ref":"SAST","url":"https://scorecard.dev/viewer/?uri=github.com/beizhedenglong/rough-charts","weight":1.0}],"data":{"date":"2026-11-09","commit":"74b0724d6b2befb58f3f36e133297f5c1a3f90f6","matches_head":true},"error":null},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":39.0,"checked":39.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":56.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":3923.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2019-10":{"loc":3792,"attributed_loc":0},"2019-11":{"loc":0,"attributed_loc":0},"2020-03":{"loc":4,"attributed_loc":0},"2020-05":{"loc":127,"attributed_loc":0},"2020-10":{"loc":0,"attributed_loc":0},"2020-11":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":23.0,"flagged_units":0.0,"pre_ai_era_bursts":0.0,"pre_ai_era_measured_loc":3923.0,"pre_ai_era_burst_loc":0.0,"measured_loc":3923.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":126.25,"median_loc_per_hour":73.75,"pr_timed_units":0.0,"excluded_import_loc":0.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":[]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":12.0,"flagged_releases":0.0,"max_loc_per_day":2241.1},"findings":[],"evidence":[],"data":{"releases":[{"from":"react-roughjs@0.0.3","to":"react-roughjs@0.1.0","loc":2783,"days":10.28,"loc_per_day":270.7,"flagged":false},{"from":"react-roughjs@0.1.0","to":"rough-charts@0.1.0","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"rough-charts@0.1.0","to":"react-roughjs@0.1.1","loc":317,"days":1.13,"loc_per_day":280.4,"flagged":false},{"from":"react-roughjs@0.1.1","to":"rough-charts@0.2.0","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"rough-charts@0.2.0","to":"rough-charts@0.3.0","loc":80,"days":0.89,"loc_per_day":90.3,"flagged":false},{"from":"rough-charts@0.3.0","to":"react-roughjs@0.1.2","loc":237,"days":1.01,"loc_per_day":235.6,"flagged":false},{"from":"react-roughjs@0.1.2","to":"rough-charts@0.4.0","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"rough-charts@0.4.0","to":"rough-charts@0.4.1","loc":134,"days":139.66,"loc_per_day":1.0,"flagged":false},{"from":"rough-charts@0.4.1","to":"react-roughjs@0.1.3-alpha.0","loc":0,"days":0.23,"loc_per_day":0.0,"flagged":false},{"from":"react-roughjs@0.1.3-alpha.0","to":"rough-charts@0.4.2-alpha.0","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"rough-charts@0.4.2-alpha.0","to":"rough-charts@0.4.2","loc":2,"days":79.22,"loc_per_day":0.0,"flagged":false},{"from":"rough-charts@0.4.2","to":"rough-charts@0.5.0","loc":125,"days":0.06,"loc_per_day":2241.1,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":2949.0,"index":0.0,"count:narrated_steps":0.0,"per_kloc:narrated_steps":0.0,"files:narrated_steps":0.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":4.0,"findings_high":0.0,"findings_medium":4.0,"findings_low":0.0,"weighted_findings":1.0,"scanned_lines":2949.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-fs-filename","severity":"medium","message":"Detected that function argument `fileName` has entered the fs module. An attacker could potentially control the location of this file, to include going backwards in the directory with '../'. To address this, ensure that user-controlled variables in file paths are validated. [confidence low]","path":"packages/react-rough-charts/stories/generateCodeString.js","line":4,"fingerprint":"javascript.lang.security.audit.detect-non-literal-fs-filename:packages/react-rough-charts/stories/generateCodeString.js:4"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"packages/react-rough-charts/stories/generateCodeString.js","line":4,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:packages/react-rough-charts/stories/generateCodeString.js:4"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"packages/react-roughjs/src/useDrawEffect.ts","line":82,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:packages/react-roughjs/src/useDrawEffect.ts:82"},{"rule_id":"opengrep/javascript.lang.security.audit.unsafe-dynamic-method","severity":"medium","message":"Using non-static data to retrieve and run functions from the object is dangerous. If the data is user-controlled, it may allow executing arbitrary code. [confidence low]","path":"packages/react-roughjs/src/useDrawEffect.ts","line":124,"fingerprint":"javascript.lang.security.audit.unsafe-dynamic-method:packages/react-roughjs/src/useDrawEffect.ts:124"}],"evidence":[],"data":{"rulesets":["typescript","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":143.0,"vulnerabilities":326.0,"vulns_critical":29.0,"vulns_high":148.0,"vulns_medium":120.0,"vulns_low":18.0,"vulns_unknown":11.0,"penalty":1058.0},"findings":[{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"@babel/traverse@7.12.1 (npm) is affected by GHSA-67hx-6x53-jw92","path":"yarn.lock","line":null,"fingerprint":"@babel/traverse@7.12.1 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-cpq7-6gpm-g9rc","severity":"critical","message":"cipher-base@1.0.4 (npm) is affected by GHSA-cpq7-6gpm-g9rc","path":"yarn.lock","line":null,"fingerprint":"cipher-base@1.0.4 (npm):GHSA-cpq7-6gpm-g9rc"},{"rule_id":"osv/GHSA-phwq-j96m-2c2q","severity":"critical","message":"ejs@2.7.4 (npm) is affected by GHSA-phwq-j96m-2c2q","path":"yarn.lock","line":null,"fingerprint":"ejs@2.7.4 (npm):GHSA-phwq-j96m-2c2q"},{"rule_id":"osv/GHSA-vjh7-7g9h-fjfh","severity":"critical","message":"elliptic@6.5.3 (npm) is affected by GHSA-vjh7-7g9h-fjfh","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.5.3 (npm):GHSA-vjh7-7g9h-fjfh"},{"rule_id":"osv/GHSA-6h5x-7c5m-7cr7","severity":"critical","message":"eventsource@1.0.7 (npm) is affected by GHSA-6h5x-7c5m-7cr7","path":"yarn.lock","line":null,"fingerprint":"eventsource@1.0.7 (npm):GHSA-6h5x-7c5m-7cr7"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.3.3 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"yarn.lock","line":null,"fingerprint":"form-data@2.3.3 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-2w6w-674q-4c4q","severity":"critical","message":"handlebars@4.7.6 (npm) is affected by GHSA-2w6w-674q-4c4q","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-2w6w-674q-4c4q"},{"rule_id":"osv/GHSA-765h-qjxv-5f44","severity":"critical","message":"handlebars@4.7.6 (npm) is affected by GHSA-765h-qjxv-5f44","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-765h-qjxv-5f44"},{"rule_id":"osv/GHSA-8r5x-fm3f-whwj","severity":"critical","message":"handlebars@4.7.6 (npm) is affected by GHSA-8r5x-fm3f-whwj","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-8r5x-fm3f-whwj"},{"rule_id":"osv/GHSA-f2jv-r9rf-7988","severity":"critical","message":"handlebars@4.7.6 (npm) is affected by GHSA-f2jv-r9rf-7988","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-f2jv-r9rf-7988"},{"rule_id":"osv/GHSA-p8wg-vrv2-v86f","severity":"critical","message":"handlebars@4.7.6 (npm) is affected by GHSA-p8wg-vrv2-v86f","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-p8wg-vrv2-v86f"},{"rule_id":"osv/GHSA-896r-f27r-55mw","severity":"critical","message":"json-schema@0.2.3 (npm) is affected by GHSA-896r-f27r-55mw","path":"yarn.lock","line":null,"fingerprint":"json-schema@0.2.3 (npm):GHSA-896r-f27r-55mw"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@1.2.3 (npm) is affected by GHSA-76p3-8jx3-jpfq","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.2.3 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@1.4.0 (npm) is affected by GHSA-76p3-8jx3-jpfq","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.4.0 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@2.0.0 (npm) is affected by GHSA-76p3-8jx3-jpfq","path":"yarn.lock","line":null,"fingerprint":"loader-utils@2.0.0 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-r6rj-9ch6-g264","severity":"critical","message":"merge-deep@3.0.2 (npm) is affected by GHSA-r6rj-9ch6-g264","path":"yarn.lock","line":null,"fingerprint":"merge-deep@3.0.2 (npm):GHSA-r6rj-9ch6-g264"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@1.2.5 (npm) is affected by GHSA-xvch-5gv4-984h","path":"yarn.lock","line":null,"fingerprint":"minimist@1.2.5 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-92xj-mqp7-vmcj","severity":"critical","message":"node-forge@0.7.6 (npm) is affected by GHSA-92xj-mqp7-vmcj","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-92xj-mqp7-vmcj"},{"rule_id":"osv/GHSA-7f3x-x4pr-wqhj","severity":"critical","message":"parse-url@5.0.2 (npm) is affected by GHSA-7f3x-x4pr-wqhj","path":"yarn.lock","line":null,"fingerprint":"parse-url@5.0.2 (npm):GHSA-7f3x-x4pr-wqhj"},{"rule_id":"osv/GHSA-j9fq-vwqv-2fm2","severity":"critical","message":"parse-url@5.0.2 (npm) is affected by GHSA-j9fq-vwqv-2fm2","path":"yarn.lock","line":null,"fingerprint":"parse-url@5.0.2 (npm):GHSA-j9fq-vwqv-2fm2"},{"rule_id":"osv/GHSA-h7cp-r72f-jxh6","severity":"critical","message":"pbkdf2@3.1.1 (npm) is affected by GHSA-h7cp-r72f-jxh6","path":"yarn.lock","line":null,"fingerprint":"pbkdf2@3.1.1 (npm):GHSA-h7cp-r72f-jxh6"},{"rule_id":"osv/GHSA-v62p-rq8g-8h59","severity":"critical","message":"pbkdf2@3.1.1 (npm) is affected by GHSA-v62p-rq8g-8h59","path":"yarn.lock","line":null,"fingerprint":"pbkdf2@3.1.1 (npm):GHSA-v62p-rq8g-8h59"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@2.0.6 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"yarn.lock","line":null,"fingerprint":"proxy-addr@2.0.6 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-95m3-7q98-8xr5","severity":"critical","message":"sha.js@2.4.11 (npm) is affected by GHSA-95m3-7q98-8xr5","path":"yarn.lock","line":null,"fingerprint":"sha.js@2.4.11 (npm):GHSA-95m3-7q98-8xr5"},{"rule_id":"osv/GHSA-g4rg-993r-mgx7","severity":"critical","message":"shell-quote@1.7.2 (npm) is affected by GHSA-g4rg-993r-mgx7","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.7.2 (npm):GHSA-g4rg-993r-mgx7"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.7.2 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.7.2 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@4.4.13 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-hgjh-723h-mx2j","severity":"critical","message":"url-parse@1.4.7 (npm) is affected by GHSA-hgjh-723h-mx2j","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.7 (npm):GHSA-hgjh-723h-mx2j"},{"rule_id":"osv/GHSA-xv26-6w52-cph6","severity":"critical","message":"websocket-driver@0.7.4 (npm) is affected by GHSA-xv26-6w52-cph6","path":"yarn.lock","line":null,"fingerprint":"websocket-driver@0.7.4 (npm):GHSA-xv26-6w52-cph6"},{"rule_id":"osv/GHSA-fv7c-fp4j-7gwp","severity":"high","message":"@babel/plugin-transform-modules-systemjs@7.12.1 (npm) is affected by GHSA-fv7c-fp4j-7gwp","path":"yarn.lock","line":null,"fingerprint":"@babel/plugin-transform-modules-systemjs@7.12.1 (npm):GHSA-fv7c-fp4j-7gwp"},{"rule_id":"osv/GHSA-whgm-jr23-g3j9","severity":"high","message":"ansi-html@0.0.7 (npm) is affected by GHSA-whgm-jr23-g3j9","path":"yarn.lock","line":null,"fingerprint":"ansi-html@0.0.7 (npm):GHSA-whgm-jr23-g3j9"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@3.0.0 (npm) is affected by GHSA-93q8-gq69-wqmw","path":"yarn.lock","line":null,"fingerprint":"ansi-regex@3.0.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@4.1.0 (npm) is affected by GHSA-93q8-gq69-wqmw","path":"yarn.lock","line":null,"fingerprint":"ansi-regex@4.1.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-93q8-gq69-wqmw","severity":"high","message":"ansi-regex@5.0.0 (npm) is affected by GHSA-93q8-gq69-wqmw","path":"yarn.lock","line":null,"fingerprint":"ansi-regex@5.0.0 (npm):GHSA-93q8-gq69-wqmw"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.19.0 (npm) is affected by GHSA-27r3-jxmh-p828","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.19.0 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-qwcr-r2fm-qrc7","severity":"high","message":"body-parser@1.19.0 (npm) is affected by GHSA-qwcr-r2fm-qrc7","path":"yarn.lock","line":null,"fingerprint":"body-parser@1.19.0 (npm):GHSA-qwcr-r2fm-qrc7"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@2.3.2 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"yarn.lock","line":null,"fingerprint":"braces@2.3.2 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@3.0.2 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"yarn.lock","line":null,"fingerprint":"braces@3.0.2 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-x9w5-v3q2-3rhw","severity":"high","message":"browserify-sign@4.2.1 (npm) is affected by GHSA-x9w5-v3q2-3rhw","path":"yarn.lock","line":null,"fingerprint":"browserify-sign@4.2.1 (npm):GHSA-x9w5-v3q2-3rhw"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.14.6 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.14.6 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.14.6 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.14.6 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@4.7.0 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.7.0 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@4.7.0 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.7.0 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@5.1.0 (npm) is affected by GHSA-3xgq-45jj-v275","path":"yarn.lock","line":null,"fingerprint":"cross-spawn@5.1.0 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@6.0.5 (npm) is affected by GHSA-3xgq-45jj-v275","path":"yarn.lock","line":null,"fingerprint":"cross-spawn@6.0.5 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@7.0.3 (npm) is affected by GHSA-3xgq-45jj-v275","path":"yarn.lock","line":null,"fingerprint":"cross-spawn@7.0.3 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-qr28-fpjm-wq7f","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-qr28-fpjm-wq7f","path":"yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-qr28-fpjm-wq7f"},{"rule_id":"osv/GHSA-w573-4hg7-7wgq","severity":"high","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-w573-4hg7-7wgq","path":"yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-w573-4hg7-7wgq"},{"rule_id":"osv/GHSA-25h7-pfq9-p65f","severity":"high","message":"flatted@2.0.2 (npm) is affected by GHSA-25h7-pfq9-p65f","path":"yarn.lock","line":null,"fingerprint":"flatted@2.0.2 (npm):GHSA-25h7-pfq9-p65f"},{"rule_id":"osv/GHSA-rf6f-7fwh-wjgh","severity":"high","message":"flatted@2.0.2 (npm) is affected by GHSA-rf6f-7fwh-wjgh","path":"yarn.lock","line":null,"fingerprint":"flatted@2.0.2 (npm):GHSA-rf6f-7fwh-wjgh"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.3.3 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"yarn.lock","line":null,"fingerprint":"form-data@2.3.3 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-ww39-953v-wcq6","severity":"high","message":"glob-parent@5.1.1 (npm) is affected by GHSA-ww39-953v-wcq6","path":"yarn.lock","line":null,"fingerprint":"glob-parent@5.1.1 (npm):GHSA-ww39-953v-wcq6"},{"rule_id":"osv/GHSA-3mfm-83xf-c92r","severity":"high","message":"handlebars@4.7.6 (npm) is affected by GHSA-3mfm-83xf-c92r","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-3mfm-83xf-c92r"},{"rule_id":"osv/GHSA-9cx6-37pm-9jff","severity":"high","message":"handlebars@4.7.6 (npm) is affected by GHSA-9cx6-37pm-9jff","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-9cx6-37pm-9jff"},{"rule_id":"osv/GHSA-xhpv-hc6g-r9c6","severity":"high","message":"handlebars@4.7.6 (npm) is affected by GHSA-xhpv-hc6g-r9c6","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-xhpv-hc6g-r9c6"},{"rule_id":"osv/GHSA-xjpj-3mr7-gcpf","severity":"high","message":"handlebars@4.7.6 (npm) is affected by GHSA-xjpj-3mr7-gcpf","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-xjpj-3mr7-gcpf"},{"rule_id":"osv/GHSA-rc47-6667-2j5j","severity":"high","message":"http-cache-semantics@3.8.1 (npm) is affected by GHSA-rc47-6667-2j5j","path":"yarn.lock","line":null,"fingerprint":"http-cache-semantics@3.8.1 (npm):GHSA-rc47-6667-2j5j"},{"rule_id":"osv/GHSA-rc47-6667-2j5j","severity":"high","message":"http-cache-semantics@4.1.0 (npm) is affected by GHSA-rc47-6667-2j5j","path":"yarn.lock","line":null,"fingerprint":"http-cache-semantics@4.1.0 (npm):GHSA-rc47-6667-2j5j"},{"rule_id":"osv/GHSA-qqgx-2p2h-9c37","severity":"high","message":"ini@1.3.5 (npm) is affected by GHSA-qqgx-2p2h-9c37","path":"yarn.lock","line":null,"fingerprint":"ini@1.3.5 (npm):GHSA-qqgx-2p2h-9c37"},{"rule_id":"osv/GHSA-2p57-rm9w-gvfp","severity":"high","message":"ip@1.1.5 (npm) is affected by GHSA-2p57-rm9w-gvfp","path":"yarn.lock","line":null,"fingerprint":"ip@1.1.5 (npm):GHSA-2p57-rm9w-gvfp"},{"rule_id":"osv/GHSA-7r28-3m3f-r2pr","severity":"high","message":"is-svg@3.0.0 (npm) is affected by GHSA-7r28-3m3f-r2pr","path":"yarn.lock","line":null,"fingerprint":"is-svg@3.0.0 (npm):GHSA-7r28-3m3f-r2pr"},{"rule_id":"osv/GHSA-r8j5-h5cx-65gg","severity":"high","message":"is-svg@3.0.0 (npm) is affected by GHSA-r8j5-h5cx-65gg","path":"yarn.lock","line":null,"fingerprint":"is-svg@3.0.0 (npm):GHSA-r8j5-h5cx-65gg"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.14.0 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.14.0 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.14.0 (npm) is affected by GHSA-52cp-r559-cp3m","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.14.0 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.14.0 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.14.0 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@1.0.1 (npm) is affected by GHSA-9c47-m6qq-7p4h","path":"yarn.lock","line":null,"fingerprint":"json5@1.0.1 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@2.1.3 (npm) is affected by GHSA-9c47-m6qq-7p4h","path":"yarn.lock","line":null,"fingerprint":"json5@2.1.3 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-3rfm-jhwj-7488","severity":"high","message":"loader-utils@1.2.3 (npm) is affected by GHSA-3rfm-jhwj-7488","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.2.3 (npm):GHSA-3rfm-jhwj-7488"},{"rule_id":"osv/GHSA-hhq3-ff78-jv3g","severity":"high","message":"loader-utils@1.2.3 (npm) is affected by GHSA-hhq3-ff78-jv3g","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.2.3 (npm):GHSA-hhq3-ff78-jv3g"},{"rule_id":"osv/GHSA-3rfm-jhwj-7488","severity":"high","message":"loader-utils@1.4.0 (npm) is affected by GHSA-3rfm-jhwj-7488","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.4.0 (npm):GHSA-3rfm-jhwj-7488"},{"rule_id":"osv/GHSA-hhq3-ff78-jv3g","severity":"high","message":"loader-utils@1.4.0 (npm) is affected by GHSA-hhq3-ff78-jv3g","path":"yarn.lock","line":null,"fingerprint":"loader-utils@1.4.0 (npm):GHSA-hhq3-ff78-jv3g"},{"rule_id":"osv/GHSA-3rfm-jhwj-7488","severity":"high","message":"loader-utils@2.0.0 (npm) is affected by GHSA-3rfm-jhwj-7488","path":"yarn.lock","line":null,"fingerprint":"loader-utils@2.0.0 (npm):GHSA-3rfm-jhwj-7488"},{"rule_id":"osv/GHSA-hhq3-ff78-jv3g","severity":"high","message":"loader-utils@2.0.0 (npm) is affected by GHSA-hhq3-ff78-jv3g","path":"yarn.lock","line":null,"fingerprint":"loader-utils@2.0.0 (npm):GHSA-hhq3-ff78-jv3g"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.20 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.20 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.20 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.20 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash.set@4.3.2 (npm) is affected by GHSA-p6mc-m468-83gw","path":"yarn.lock","line":null,"fingerprint":"lodash.set@4.3.2 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash.template@4.5.0 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"yarn.lock","line":null,"fingerprint":"lodash.template@4.5.0 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash.template@4.5.0 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"yarn.lock","line":null,"fingerprint":"lodash.template@4.5.0 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-5v2h-r2cx-5xgj","severity":"high","message":"marked@0.3.19 (npm) is affected by GHSA-5v2h-r2cx-5xgj","path":"yarn.lock","line":null,"fingerprint":"marked@0.3.19 (npm):GHSA-5v2h-r2cx-5xgj"},{"rule_id":"osv/GHSA-rrrm-qjm4-v8hf","severity":"high","message":"marked@0.3.19 (npm) is affected by GHSA-rrrm-qjm4-v8hf","path":"yarn.lock","line":null,"fingerprint":"marked@0.3.19 (npm):GHSA-rrrm-qjm4-v8hf"},{"rule_id":"osv/GHSA-7wpw-2hjm-89gp","severity":"high","message":"merge@1.2.1 (npm) is affected by GHSA-7wpw-2hjm-89gp","path":"yarn.lock","line":null,"fingerprint":"merge@1.2.1 (npm):GHSA-7wpw-2hjm-89gp"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-f8q6-p94x-37v3","severity":"high","message":"minimatch@3.0.4 (npm) is affected by GHSA-f8q6-p94x-37v3","path":"yarn.lock","line":null,"fingerprint":"minimatch@3.0.4 (npm):GHSA-f8q6-p94x-37v3"},{"rule_id":"osv/GHSA-c497-v8pv-ch6x","severity":"high","message":"nested-object-assign@1.0.3 (npm) is affected by GHSA-c497-v8pv-ch6x","path":"yarn.lock","line":null,"fingerprint":"nested-object-assign@1.0.3 (npm):GHSA-c497-v8pv-ch6x"},{"rule_id":"osv/GHSA-r683-j2x4-v87g","severity":"high","message":"node-fetch@1.7.3 (npm) is affected by GHSA-r683-j2x4-v87g","path":"yarn.lock","line":null,"fingerprint":"node-fetch@1.7.3 (npm):GHSA-r683-j2x4-v87g"},{"rule_id":"osv/GHSA-r683-j2x4-v87g","severity":"high","message":"node-fetch@2.6.1 (npm) is affected by GHSA-r683-j2x4-v87g","path":"yarn.lock","line":null,"fingerprint":"node-fetch@2.6.1 (npm):GHSA-r683-j2x4-v87g"},{"rule_id":"osv/GHSA-2328-f5f3-gj25","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-2328-f5f3-gj25","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-2328-f5f3-gj25"},{"rule_id":"osv/GHSA-554w-wpv2-vw27","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-554w-wpv2-vw27","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-554w-wpv2-vw27"},{"rule_id":"osv/GHSA-5gfm-wpxj-wjgq","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-5gfm-wpxj-wjgq","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-5gfm-wpxj-wjgq"},{"rule_id":"osv/GHSA-5m6q-g25r-mvwx","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-5m6q-g25r-mvwx","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-5m6q-g25r-mvwx"},{"rule_id":"osv/GHSA-5x38-2vff-x55p","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-5x38-2vff-x55p","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-5x38-2vff-x55p"},{"rule_id":"osv/GHSA-6qrw-m8cv-hcxf","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-6qrw-m8cv-hcxf","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-6qrw-m8cv-hcxf"},{"rule_id":"osv/GHSA-7wch-p9px-956x","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-7wch-p9px-956x","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-7wch-p9px-956x"},{"rule_id":"osv/GHSA-86w9-cpqp-85rv","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-86w9-cpqp-85rv, GHSA-ppp5-5v6c-4jwp","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-86w9-cpqp-85rv"},{"rule_id":"osv/GHSA-8hrf-8g6f-7xwp","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-8hrf-8g6f-7xwp","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-8hrf-8g6f-7xwp"},{"rule_id":"osv/GHSA-cfm4-qjh2-4765","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-cfm4-qjh2-4765","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-cfm4-qjh2-4765"},{"rule_id":"osv/GHSA-hqq3-7jhf-c5jx","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-hqq3-7jhf-c5jx","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-hqq3-7jhf-c5jx"},{"rule_id":"osv/GHSA-jc66-7q78-782g","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-jc66-7q78-782g","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-jc66-7q78-782g"},{"rule_id":"osv/GHSA-q67f-28xg-22rw","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-q67f-28xg-22rw","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-q67f-28xg-22rw"},{"rule_id":"osv/GHSA-rhr8-3pm8-cq29","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-rhr8-3pm8-cq29","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-rhr8-3pm8-cq29"},{"rule_id":"osv/GHSA-x4jg-mjrx-434g","severity":"high","message":"node-forge@0.7.6 (npm) is affected by GHSA-x4jg-mjrx-434g","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-x4jg-mjrx-434g"},{"rule_id":"osv/GHSA-px4h-xg32-q955","severity":"high","message":"normalize-url@4.5.0 (npm) is affected by GHSA-px4h-xg32-q955","path":"yarn.lock","line":null,"fingerprint":"normalize-url@4.5.0 (npm):GHSA-px4h-xg32-q955"},{"rule_id":"osv/GHSA-rp65-9cf3-cjxr","severity":"high","message":"nth-check@1.0.2 (npm) is affected by GHSA-rp65-9cf3-cjxr","path":"yarn.lock","line":null,"fingerprint":"nth-check@1.0.2 (npm):GHSA-rp65-9cf3-cjxr"},{"rule_id":"osv/GHSA-3j8f-xvm3-ffx4","severity":"high","message":"parse-path@4.0.2 (npm) is affected by GHSA-3j8f-xvm3-ffx4","path":"yarn.lock","line":null,"fingerprint":"parse-path@4.0.2 (npm):GHSA-3j8f-xvm3-ffx4"},{"rule_id":"osv/GHSA-4p35-cfcx-8653","severity":"high","message":"parse-url@5.0.2 (npm) is affected by GHSA-4p35-cfcx-8653","path":"yarn.lock","line":null,"fingerprint":"parse-url@5.0.2 (npm):GHSA-4p35-cfcx-8653"},{"rule_id":"osv/GHSA-37ch-88jc-xwx2","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-37ch-88jc-xwx2, GHSA-9wv6-86v2-598j","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-37ch-88jc-xwx2"},{"rule_id":"osv/GHSA-rhx6-c78j-4q9w","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-rhx6-c78j-4q9w","path":"yarn.lock","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-rhx6-c78j-4q9w"},{"rule_id":"osv/GHSA-c2c7-rcm5-vvqj","severity":"high","message":"picomatch@2.2.2 (npm) is affected by GHSA-c2c7-rcm5-vvqj","path":"yarn.lock","line":null,"fingerprint":"picomatch@2.2.2 (npm):GHSA-c2c7-rcm5-vvqj"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@6.0.1 (npm) is affected by GHSA-6g55-p6wh-862q","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.1 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@6.0.1 (npm) is affected by GHSA-r28c-9q8g-f849","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.1 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@6.0.23 (npm) is affected by GHSA-6g55-p6wh-862q","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@6.0.23 (npm) is affected by GHSA-r28c-9q8g-f849","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@7.0.32 (npm) is affected by GHSA-6g55-p6wh-862q","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.32 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@7.0.32 (npm) is affected by GHSA-r28c-9q8g-f849","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.32 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@7.0.35 (npm) is affected by GHSA-6g55-p6wh-862q","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.35 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@7.0.35 (npm) is affected by GHSA-r28c-9q8g-f849","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.35 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-3949-f494-cm99","severity":"high","message":"prismjs@1.17.1 (npm) is affected by GHSA-3949-f494-cm99","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.17.1 (npm):GHSA-3949-f494-cm99"},{"rule_id":"osv/GHSA-gj77-59wh-66hg","severity":"high","message":"prismjs@1.17.1 (npm) is affected by GHSA-gj77-59wh-66hg","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.17.1 (npm):GHSA-gj77-59wh-66hg"},{"rule_id":"osv/GHSA-wvhm-4hhf-97x9","severity":"high","message":"prismjs@1.17.1 (npm) is affected by GHSA-wvhm-4hhf-97x9","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.17.1 (npm):GHSA-wvhm-4hhf-97x9"},{"rule_id":"osv/GHSA-3949-f494-cm99","severity":"high","message":"prismjs@1.22.0 (npm) is affected by GHSA-3949-f494-cm99","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.22.0 (npm):GHSA-3949-f494-cm99"},{"rule_id":"osv/GHSA-gj77-59wh-66hg","severity":"high","message":"prismjs@1.22.0 (npm) is affected by GHSA-gj77-59wh-66hg","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.22.0 (npm):GHSA-gj77-59wh-66hg"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.5.2 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.7.0 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@6.7.0 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.9.4 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"yarn.lock","line":null,"fingerprint":"qs@6.9.4 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-gcx4-mw62-g8wm","severity":"high","message":"rollup@1.32.1 (npm) is affected by GHSA-gcx4-mw62-g8wm","path":"yarn.lock","line":null,"fingerprint":"rollup@1.32.1 (npm):GHSA-gcx4-mw62-g8wm"},{"rule_id":"osv/GHSA-mw96-cpmx-2vgc","severity":"high","message":"rollup@1.32.1 (npm) is affected by GHSA-mw96-cpmx-2vgc","path":"yarn.lock","line":null,"fingerprint":"rollup@1.32.1 (npm):GHSA-mw96-cpmx-2vgc"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.3.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@5.3.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.5.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@5.5.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.7.1 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@5.7.1 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@6.3.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@6.3.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@7.0.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"yarn.lock","line":null,"fingerprint":"semver@7.0.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-5c6j-r48x-rmvq","severity":"high","message":"serialize-javascript@4.0.0 (npm) is affected by GHSA-5c6j-r48x-rmvq","path":"yarn.lock","line":null,"fingerprint":"serialize-javascript@4.0.0 (npm):GHSA-5c6j-r48x-rmvq"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.7.2 (npm) is affected by GHSA-395f-4hp3-45gv","path":"yarn.lock","line":null,"fingerprint":"shell-quote@1.7.2 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-4rq4-32rv-6wp6","severity":"high","message":"shelljs@0.8.4 (npm) is affected by GHSA-4rq4-32rv-6wp6","path":"yarn.lock","line":null,"fingerprint":"shelljs@0.8.4 (npm):GHSA-4rq4-32rv-6wp6"},{"rule_id":"osv/GHSA-vx3p-948g-6vhq","severity":"high","message":"ssri@6.0.1 (npm) is affected by GHSA-vx3p-948g-6vhq","path":"yarn.lock","line":null,"fingerprint":"ssri@6.0.1 (npm):GHSA-vx3p-948g-6vhq"},{"rule_id":"osv/GHSA-vx3p-948g-6vhq","severity":"high","message":"ssri@7.1.0 (npm) is affected by GHSA-vx3p-948g-6vhq","path":"yarn.lock","line":null,"fingerprint":"ssri@7.1.0 (npm):GHSA-vx3p-948g-6vhq"},{"rule_id":"osv/GHSA-2p49-hgcm-8545","severity":"high","message":"svgo@1.3.2 (npm) is affected by GHSA-2p49-hgcm-8545","path":"yarn.lock","line":null,"fingerprint":"svgo@1.3.2 (npm):GHSA-2p49-hgcm-8545"},{"rule_id":"osv/GHSA-w27v-7q3p-w38r","severity":"high","message":"svgo@1.3.2 (npm) is affected by GHSA-w27v-7q3p-w38r","path":"yarn.lock","line":null,"fingerprint":"svgo@1.3.2 (npm):GHSA-w27v-7q3p-w38r"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-3jfq-g458-7qm9","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-5955-9wpr-37jh","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-83g3-92jg-28cx","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-9r2w-394v-53qc","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-9r2w-394v-53qc","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-9r2w-394v-53qc"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-qq89-hq3f-393p","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-qq89-hq3f-393p","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-qq89-hq3f-393p"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-r292-9mhp-454m","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r628-mhmh-qjhw","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-r628-mhmh-qjhw","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-r628-mhmh-qjhw"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@4.4.13 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-4wf5-vphf-c2xc","severity":"high","message":"terser@3.17.0 (npm) is affected by GHSA-4wf5-vphf-c2xc","path":"yarn.lock","line":null,"fingerprint":"terser@3.17.0 (npm):GHSA-4wf5-vphf-c2xc"},{"rule_id":"osv/GHSA-4wf5-vphf-c2xc","severity":"high","message":"terser@4.8.0 (npm) is affected by GHSA-4wf5-vphf-c2xc","path":"yarn.lock","line":null,"fingerprint":"terser@4.8.0 (npm):GHSA-4wf5-vphf-c2xc"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.33 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"yarn.lock","line":null,"fingerprint":"tmp@0.0.33 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-jgrx-mgxx-jf9v","severity":"high","message":"tmpl@1.0.4 (npm) is affected by GHSA-jgrx-mgxx-jf9v","path":"yarn.lock","line":null,"fingerprint":"tmpl@1.0.4 (npm):GHSA-jgrx-mgxx-jf9v"},{"rule_id":"osv/GHSA-w5p7-h5w8-2hfq","severity":"high","message":"trim@0.0.1 (npm) is affected by GHSA-w5p7-h5w8-2hfq","path":"yarn.lock","line":null,"fingerprint":"trim@0.0.1 (npm):GHSA-w5p7-h5w8-2hfq"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@1.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v","path":"yarn.lock","line":null,"fingerprint":"trim-newlines@1.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@2.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v","path":"yarn.lock","line":null,"fingerprint":"trim-newlines@2.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@3.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v","path":"yarn.lock","line":null,"fingerprint":"trim-newlines@3.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-394c-5j6w-4xmx","severity":"high","message":"ua-parser-js@0.7.22 (npm) is affected by GHSA-394c-5j6w-4xmx","path":"yarn.lock","line":null,"fingerprint":"ua-parser-js@0.7.22 (npm):GHSA-394c-5j6w-4xmx"},{"rule_id":"osv/GHSA-78cj-fxph-m83p","severity":"high","message":"ua-parser-js@0.7.22 (npm) is affected by GHSA-78cj-fxph-m83p","path":"yarn.lock","line":null,"fingerprint":"ua-parser-js@0.7.22 (npm):GHSA-78cj-fxph-m83p"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@3.4.0 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"yarn.lock","line":null,"fingerprint":"uuid@3.4.0 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-g84c-rxfj-3j2c","severity":"high","message":"webpack-dev-middleware@3.7.2 (npm) is affected by GHSA-g84c-rxfj-3j2c","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-middleware@3.7.2 (npm):GHSA-g84c-rxfj-3j2c"},{"rule_id":"osv/GHSA-wr3j-pwj9-hqq6","severity":"high","message":"webpack-dev-middleware@3.7.2 (npm) is affected by GHSA-wr3j-pwj9-hqq6","path":"yarn.lock","line":null,"fingerprint":"webpack-dev-middleware@3.7.2 (npm):GHSA-wr3j-pwj9-hqq6"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@5.2.2 (npm) is affected by GHSA-3h5v-q93c-6h6q","path":"yarn.lock","line":null,"fingerprint":"ws@5.2.2 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@5.2.2 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"yarn.lock","line":null,"fingerprint":"ws@5.2.2 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-3h5v-q93c-6h6q","severity":"high","message":"ws@6.2.1 (npm) is affected by GHSA-3h5v-q93c-6h6q","path":"yarn.lock","line":null,"fingerprint":"ws@6.2.1 (npm):GHSA-3h5v-q93c-6h6q"},{"rule_id":"osv/GHSA-96hv-2xvq-fx4p","severity":"high","message":"ws@6.2.1 (npm) is affected by GHSA-96hv-2xvq-fx4p","path":"yarn.lock","line":null,"fingerprint":"ws@6.2.1 (npm):GHSA-96hv-2xvq-fx4p"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@3.2.1 (npm) is affected by GHSA-c4w7-xm78-47vh","path":"yarn.lock","line":null,"fingerprint":"y18n@3.2.1 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@4.0.0 (npm) is affected by GHSA-c4w7-xm78-47vh","path":"yarn.lock","line":null,"fingerprint":"y18n@4.0.0 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-968p-4wvh-cqc8","severity":"medium","message":"@babel/helpers@7.12.1 (npm) is affected by GHSA-968p-4wvh-cqc8","path":"yarn.lock","line":null,"fingerprint":"@babel/helpers@7.12.1 (npm):GHSA-968p-4wvh-cqc8"},{"rule_id":"osv/GHSA-968p-4wvh-cqc8","severity":"medium","message":"@babel/runtime@7.12.1 (npm) is affected by GHSA-968p-4wvh-cqc8","path":"yarn.lock","line":null,"fingerprint":"@babel/runtime@7.12.1 (npm):GHSA-968p-4wvh-cqc8"},{"rule_id":"osv/GHSA-968p-4wvh-cqc8","severity":"medium","message":"@babel/runtime-corejs3@7.12.1 (npm) is affected by GHSA-968p-4wvh-cqc8","path":"yarn.lock","line":null,"fingerprint":"@babel/runtime-corejs3@7.12.1 (npm):GHSA-968p-4wvh-cqc8"},{"rule_id":"osv/GHSA-h5c3-5r3r-rr8q","severity":"medium","message":"@octokit/plugin-paginate-rest@1.1.2 (npm) is affected by GHSA-h5c3-5r3r-rr8q","path":"yarn.lock","line":null,"fingerprint":"@octokit/plugin-paginate-rest@1.1.2 (npm):GHSA-h5c3-5r3r-rr8q"},{"rule_id":"osv/GHSA-rmvr-2pp2-xj38","severity":"medium","message":"@octokit/request@5.4.10 (npm) is affected by GHSA-rmvr-2pp2-xj38","path":"yarn.lock","line":null,"fingerprint":"@octokit/request@5.4.10 (npm):GHSA-rmvr-2pp2-xj38"},{"rule_id":"osv/GHSA-xx4v-prfh-6cgc","severity":"medium","message":"@octokit/request-error@1.2.1 (npm) is affected by GHSA-xx4v-prfh-6cgc","path":"yarn.lock","line":null,"fingerprint":"@octokit/request-error@1.2.1 (npm):GHSA-xx4v-prfh-6cgc"},{"rule_id":"osv/GHSA-xx4v-prfh-6cgc","severity":"medium","message":"@octokit/request-error@2.0.3 (npm) is affected by GHSA-xx4v-prfh-6cgc","path":"yarn.lock","line":null,"fingerprint":"@octokit/request-error@2.0.3 (npm):GHSA-xx4v-prfh-6cgc"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@6.12.6 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"yarn.lock","line":null,"fingerprint":"ajv@6.12.6 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-378v-28hj-76wf","severity":"medium","message":"bn.js@4.11.9 (npm) is affected by GHSA-378v-28hj-76wf","path":"yarn.lock","line":null,"fingerprint":"bn.js@4.11.9 (npm):GHSA-378v-28hj-76wf"},{"rule_id":"osv/GHSA-378v-28hj-76wf","severity":"medium","message":"bn.js@5.1.3 (npm) is affected by GHSA-378v-28hj-76wf","path":"yarn.lock","line":null,"fingerprint":"bn.js@5.1.3 (npm):GHSA-378v-28hj-76wf"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.11 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"yarn.lock","line":null,"fingerprint":"brace-expansion@1.1.11 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-w8qv-6jwh-64r5","severity":"medium","message":"browserslist@4.14.6 (npm) is affected by GHSA-w8qv-6jwh-64r5","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.14.6 (npm):GHSA-w8qv-6jwh-64r5"},{"rule_id":"osv/GHSA-w8qv-6jwh-64r5","severity":"medium","message":"browserslist@4.7.0 (npm) is affected by GHSA-w8qv-6jwh-64r5","path":"yarn.lock","line":null,"fingerprint":"browserslist@4.7.0 (npm):GHSA-w8qv-6jwh-64r5"},{"rule_id":"osv/GHSA-257v-vj4p-3w2h","severity":"medium","message":"color-string@1.5.4 (npm) is affected by GHSA-257v-vj4p-3w2h","path":"yarn.lock","line":null,"fingerprint":"color-string@1.5.4 (npm):GHSA-257v-vj4p-3w2h"},{"rule_id":"osv/GHSA-pxg6-pf52-xh8x","severity":"medium","message":"cookie@0.4.0 (npm) is affected by GHSA-pxg6-pf52-xh8x","path":"yarn.lock","line":null,"fingerprint":"cookie@0.4.0 (npm):GHSA-pxg6-pf52-xh8x"},{"rule_id":"osv/GHSA-36jr-mh4h-2g58","severity":"medium","message":"d3-color@2.0.0 (npm) is affected by GHSA-36jr-mh4h-2g58","path":"yarn.lock","line":null,"fingerprint":"d3-color@2.0.0 (npm):GHSA-36jr-mh4h-2g58"},{"rule_id":"osv/GHSA-vcc3-ghjq-m6fr","severity":"medium","message":"decode-uri-component@0.2.0 (npm) is affected by GHSA-vcc3-ghjq-m6fr","path":"yarn.lock","line":null,"fingerprint":"decode-uri-component@0.2.0 (npm):GHSA-vcc3-ghjq-m6fr"},{"rule_id":"osv/GHSA-ghr5-ch3p-vcr6","severity":"medium","message":"ejs@2.7.4 (npm) is affected by GHSA-ghr5-ch3p-vcr6","path":"yarn.lock","line":null,"fingerprint":"ejs@2.7.4 (npm):GHSA-ghr5-ch3p-vcr6"},{"rule_id":"osv/GHSA-434g-2637-qmqr","severity":"medium","message":"elliptic@6.5.3 (npm) is affected by GHSA-434g-2637-qmqr","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.5.3 (npm):GHSA-434g-2637-qmqr"},{"rule_id":"osv/GHSA-49q7-c7j4-3p7m","severity":"medium","message":"elliptic@6.5.3 (npm) is affected by GHSA-49q7-c7j4-3p7m","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.5.3 (npm):GHSA-49q7-c7j4-3p7m"},{"rule_id":"osv/GHSA-848j-6mx2-7j84","severity":"medium","message":"elliptic@6.5.3 (npm) is affected by GHSA-848j-6mx2-7j84","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.5.3 (npm):GHSA-848j-6mx2-7j84"},{"rule_id":"osv/GHSA-977x-g7h5-7qgw","severity":"medium","message":"elliptic@6.5.3 (npm) is affected by GHSA-977x-g7h5-7qgw","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.5.3 (npm):GHSA-977x-g7h5-7qgw"},{"rule_id":"osv/GHSA-f7q4-pwc6-w24p","severity":"medium","message":"elliptic@6.5.3 (npm) is affected by GHSA-f7q4-pwc6-w24p","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.5.3 (npm):GHSA-f7q4-pwc6-w24p"},{"rule_id":"osv/GHSA-fc9h-whq2-v747","severity":"medium","message":"elliptic@6.5.3 (npm) is affected by GHSA-fc9h-whq2-v747","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.5.3 (npm):GHSA-fc9h-whq2-v747"},{"rule_id":"osv/GHSA-r9p9-mrjm-926w","severity":"medium","message":"elliptic@6.5.3 (npm) is affected by GHSA-r9p9-mrjm-926w","path":"yarn.lock","line":null,"fingerprint":"elliptic@6.5.3 (npm):GHSA-r9p9-mrjm-926w"},{"rule_id":"osv/GHSA-4gmj-3p3h-gm8h","severity":"medium","message":"es5-ext@0.10.53 (npm) is affected by GHSA-4gmj-3p3h-gm8h","path":"yarn.lock","line":null,"fingerprint":"es5-ext@0.10.53 (npm):GHSA-4gmj-3p3h-gm8h"},{"rule_id":"osv/GHSA-qw6h-vgh9-j6wx","severity":"medium","message":"express@4.17.1 (npm) is affected by GHSA-qw6h-vgh9-j6wx","path":"yarn.lock","line":null,"fingerprint":"express@4.17.1 (npm):GHSA-qw6h-vgh9-j6wx"},{"rule_id":"osv/GHSA-rv95-896h-c2vc","severity":"medium","message":"express@4.17.1 (npm) is affected by GHSA-rv95-896h-c2vc","path":"yarn.lock","line":null,"fingerprint":"express@4.17.1 (npm):GHSA-rv95-896h-c2vc"},{"rule_id":"osv/GHSA-pfrx-2q88-qq97","severity":"medium","message":"got@6.7.1 (npm) is affected by GHSA-pfrx-2q88-qq97","path":"yarn.lock","line":null,"fingerprint":"got@6.7.1 (npm):GHSA-pfrx-2q88-qq97"},{"rule_id":"osv/GHSA-pfrx-2q88-qq97","severity":"medium","message":"got@9.6.0 (npm) is affected by GHSA-pfrx-2q88-qq97","path":"yarn.lock","line":null,"fingerprint":"got@9.6.0 (npm):GHSA-pfrx-2q88-qq97"},{"rule_id":"osv/GHSA-2qvq-rjwj-gvw9","severity":"medium","message":"handlebars@4.7.6 (npm) is affected by GHSA-2qvq-rjwj-gvw9","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-2qvq-rjwj-gvw9"},{"rule_id":"osv/GHSA-7rx3-28cr-v5wh","severity":"medium","message":"handlebars@4.7.6 (npm) is affected by GHSA-7rx3-28cr-v5wh","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-7rx3-28cr-v5wh"},{"rule_id":"osv/GHSA-xw65-4hp5-5hc7","severity":"medium","message":"handlebars@4.7.6 (npm) is affected by GHSA-xw65-4hp5-5hc7","path":"yarn.lock","line":null,"fingerprint":"handlebars@4.7.6 (npm):GHSA-xw65-4hp5-5hc7"},{"rule_id":"osv/GHSA-7wwv-vh3v-89cq","severity":"medium","message":"highlight.js@9.13.1 (npm) is affected by GHSA-7wwv-vh3v-89cq","path":"yarn.lock","line":null,"fingerprint":"highlight.js@9.13.1 (npm):GHSA-7wwv-vh3v-89cq"},{"rule_id":"osv/GHSA-vfrc-7r7c-w9mx","severity":"medium","message":"highlight.js@9.13.1 (npm) is affected by GHSA-vfrc-7r7c-w9mx","path":"yarn.lock","line":null,"fingerprint":"highlight.js@9.13.1 (npm):GHSA-vfrc-7r7c-w9mx"},{"rule_id":"osv/GHSA-43f8-2h32-f4cj","severity":"medium","message":"hosted-git-info@2.8.8 (npm) is affected by GHSA-43f8-2h32-f4cj","path":"yarn.lock","line":null,"fingerprint":"hosted-git-info@2.8.8 (npm):GHSA-43f8-2h32-f4cj"},{"rule_id":"osv/GHSA-78xj-cgh5-2h22","severity":"medium","message":"ip@1.1.5 (npm) is affected by GHSA-78xj-cgh5-2h22","path":"yarn.lock","line":null,"fingerprint":"ip@1.1.5 (npm):GHSA-78xj-cgh5-2h22"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.14.0 (npm) is affected by GHSA-h67p-54hq-rp68","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.14.0 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@3.14.0 (npm) is affected by GHSA-mh29-5h37-fv8m","path":"yarn.lock","line":null,"fingerprint":"js-yaml@3.14.0 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.17.20 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.20 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.17.20 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"yarn.lock","line":null,"fingerprint":"lodash@4.17.20 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-4wx3-54gh-9fr9","severity":"medium","message":"markdown-to-jsx@6.11.4 (npm) is affected by GHSA-4wx3-54gh-9fr9","path":"yarn.lock","line":null,"fingerprint":"markdown-to-jsx@6.11.4 (npm):GHSA-4wx3-54gh-9fr9"},{"rule_id":"osv/GHSA-xf5p-87ch-gxw2","severity":"medium","message":"marked@0.3.19 (npm) is affected by GHSA-xf5p-87ch-gxw2","path":"yarn.lock","line":null,"fingerprint":"marked@0.3.19 (npm):GHSA-xf5p-87ch-gxw2"},{"rule_id":"osv/GHSA-4xcv-9jjx-gfj3","severity":"medium","message":"mem@1.1.0 (npm) is affected by GHSA-4xcv-9jjx-gfj3","path":"yarn.lock","line":null,"fingerprint":"mem@1.1.0 (npm):GHSA-4xcv-9jjx-gfj3"},{"rule_id":"osv/GHSA-952p-6rrq-rcjv","severity":"medium","message":"micromatch@3.1.10 (npm) is affected by GHSA-952p-6rrq-rcjv","path":"yarn.lock","line":null,"fingerprint":"micromatch@3.1.10 (npm):GHSA-952p-6rrq-rcjv"},{"rule_id":"osv/GHSA-952p-6rrq-rcjv","severity":"medium","message":"micromatch@4.0.2 (npm) is affected by GHSA-952p-6rrq-rcjv","path":"yarn.lock","line":null,"fingerprint":"micromatch@4.0.2 (npm):GHSA-952p-6rrq-rcjv"},{"rule_id":"osv/GHSA-2r2c-g63r-vccr","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-2r2c-g63r-vccr","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-2r2c-g63r-vccr"},{"rule_id":"osv/GHSA-525v-9gp9-w22h","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-525v-9gp9-w22h","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-525v-9gp9-w22h"},{"rule_id":"osv/GHSA-5cwg-6vw7-rj6p","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-5cwg-6vw7-rj6p","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-5cwg-6vw7-rj6p"},{"rule_id":"osv/GHSA-5rrq-pxf6-6jx5","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-5rrq-pxf6-6jx5","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-5rrq-pxf6-6jx5"},{"rule_id":"osv/GHSA-65ch-62r8-g69g","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-65ch-62r8-g69g","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-65ch-62r8-g69g"},{"rule_id":"osv/GHSA-6cv4-p8m7-4r25","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-6cv4-p8m7-4r25","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-6cv4-p8m7-4r25"},{"rule_id":"osv/GHSA-6wvx-3r32-xmcg","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-6wvx-3r32-xmcg","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-6wvx-3r32-xmcg"},{"rule_id":"osv/GHSA-8fr3-hfg3-gpgp","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-8fr3-hfg3-gpgp","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-8fr3-hfg3-gpgp"},{"rule_id":"osv/GHSA-gf8q-jrpm-jvxq","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-gf8q-jrpm-jvxq","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-gf8q-jrpm-jvxq"},{"rule_id":"osv/GHSA-h46v-rmh6-fq4f","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-h46v-rmh6-fq4f","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-h46v-rmh6-fq4f"},{"rule_id":"osv/GHSA-j8rw-jp99-435v","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-j8rw-jp99-435v","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-j8rw-jp99-435v"},{"rule_id":"osv/GHSA-w4xr-hqv8-ch44","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-w4xr-hqv8-ch44","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-w4xr-hqv8-ch44"},{"rule_id":"osv/GHSA-wxgw-qj99-44c2","severity":"medium","message":"node-forge@0.7.6 (npm) is affected by GHSA-wxgw-qj99-44c2","path":"yarn.lock","line":null,"fingerprint":"node-forge@0.7.6 (npm):GHSA-wxgw-qj99-44c2"},{"rule_id":"osv/GHSA-jmqm-f2gx-4fjv","severity":"medium","message":"npm-registry-fetch@3.9.1 (npm) is affected by GHSA-jmqm-f2gx-4fjv","path":"yarn.lock","line":null,"fingerprint":"npm-registry-fetch@3.9.1 (npm):GHSA-jmqm-f2gx-4fjv"},{"rule_id":"osv/GHSA-jpp7-7chh-cf67","severity":"medium","message":"parse-url@5.0.2 (npm) is affected by GHSA-jpp7-7chh-cf67","path":"yarn.lock","line":null,"fingerprint":"parse-url@5.0.2 (npm):GHSA-jpp7-7chh-cf67"},{"rule_id":"osv/GHSA-pqw5-jmp5-px4v","severity":"medium","message":"parse-url@5.0.2 (npm) is affected by GHSA-pqw5-jmp5-px4v","path":"yarn.lock","line":null,"fingerprint":"parse-url@5.0.2 (npm):GHSA-pqw5-jmp5-px4v"},{"rule_id":"osv/GHSA-q6wq-5p59-983w","severity":"medium","message":"parse-url@5.0.2 (npm) is affected by GHSA-q6wq-5p59-983w","path":"yarn.lock","line":null,"fingerprint":"parse-url@5.0.2 (npm):GHSA-q6wq-5p59-983w"},{"rule_id":"osv/GHSA-hj48-42vr-x3v9","severity":"medium","message":"path-parse@1.0.6 (npm) is affected by GHSA-hj48-42vr-x3v9","path":"yarn.lock","line":null,"fingerprint":"path-parse@1.0.6 (npm):GHSA-hj48-42vr-x3v9"},{"rule_id":"osv/GHSA-477h-4r7f-fvrx","severity":"medium","message":"pbkdf2@3.1.1 (npm) is affected by GHSA-477h-4r7f-fvrx","path":"yarn.lock","line":null,"fingerprint":"pbkdf2@3.1.1 (npm):GHSA-477h-4r7f-fvrx"},{"rule_id":"osv/GHSA-3v7f-55p6-f55p","severity":"medium","message":"picomatch@2.2.2 (npm) is affected by GHSA-3v7f-55p6-f55p","path":"yarn.lock","line":null,"fingerprint":"picomatch@2.2.2 (npm):GHSA-3v7f-55p6-f55p"},{"rule_id":"osv/GHSA-566m-qj78-rww5","severity":"medium","message":"postcss@6.0.1 (npm) is affected by GHSA-566m-qj78-rww5","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.1 (npm):GHSA-566m-qj78-rww5"},{"rule_id":"osv/GHSA-7fh5-64p2-3v2j","severity":"medium","message":"postcss@6.0.1 (npm) is affected by GHSA-7fh5-64p2-3v2j","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.1 (npm):GHSA-7fh5-64p2-3v2j"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@6.0.1 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.1 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@6.0.1 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.1 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-566m-qj78-rww5","severity":"medium","message":"postcss@6.0.23 (npm) is affected by GHSA-566m-qj78-rww5","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-566m-qj78-rww5"},{"rule_id":"osv/GHSA-7fh5-64p2-3v2j","severity":"medium","message":"postcss@6.0.23 (npm) is affected by GHSA-7fh5-64p2-3v2j","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-7fh5-64p2-3v2j"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@6.0.23 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@6.0.23 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"yarn.lock","line":null,"fingerprint":"postcss@6.0.23 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-566m-qj78-rww5","severity":"medium","message":"postcss@7.0.32 (npm) is affected by GHSA-566m-qj78-rww5","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.32 (npm):GHSA-566m-qj78-rww5"},{"rule_id":"osv/GHSA-7fh5-64p2-3v2j","severity":"medium","message":"postcss@7.0.32 (npm) is affected by GHSA-7fh5-64p2-3v2j","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.32 (npm):GHSA-7fh5-64p2-3v2j"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@7.0.32 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.32 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-hwj9-h5mp-3pm3","severity":"medium","message":"postcss@7.0.32 (npm) is affected by GHSA-hwj9-h5mp-3pm3","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.32 (npm):GHSA-hwj9-h5mp-3pm3"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@7.0.32 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.32 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-566m-qj78-rww5","severity":"medium","message":"postcss@7.0.35 (npm) is affected by GHSA-566m-qj78-rww5","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.35 (npm):GHSA-566m-qj78-rww5"},{"rule_id":"osv/GHSA-7fh5-64p2-3v2j","severity":"medium","message":"postcss@7.0.35 (npm) is affected by GHSA-7fh5-64p2-3v2j","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.35 (npm):GHSA-7fh5-64p2-3v2j"},{"rule_id":"osv/GHSA-fxqj-rqcc-2cmp","severity":"medium","message":"postcss@7.0.35 (npm) is affected by GHSA-fxqj-rqcc-2cmp","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.35 (npm):GHSA-fxqj-rqcc-2cmp"},{"rule_id":"osv/GHSA-hwj9-h5mp-3pm3","severity":"medium","message":"postcss@7.0.35 (npm) is affected by GHSA-hwj9-h5mp-3pm3","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.35 (npm):GHSA-hwj9-h5mp-3pm3"},{"rule_id":"osv/GHSA-qx2v-qp2m-jg93","severity":"medium","message":"postcss@7.0.35 (npm) is affected by GHSA-qx2v-qp2m-jg93","path":"yarn.lock","line":null,"fingerprint":"postcss@7.0.35 (npm):GHSA-qx2v-qp2m-jg93"},{"rule_id":"osv/GHSA-rj75-hqrm-r3gf","severity":"medium","message":"postcss-selector-parser@3.1.2 (npm) is affected by GHSA-rj75-hqrm-r3gf","path":"yarn.lock","line":null,"fingerprint":"postcss-selector-parser@3.1.2 (npm):GHSA-rj75-hqrm-r3gf"},{"rule_id":"osv/GHSA-rj75-hqrm-r3gf","severity":"medium","message":"postcss-selector-parser@6.0.2 (npm) is affected by GHSA-rj75-hqrm-r3gf","path":"yarn.lock","line":null,"fingerprint":"postcss-selector-parser@6.0.2 (npm):GHSA-rj75-hqrm-r3gf"},{"rule_id":"osv/GHSA-rj75-hqrm-r3gf","severity":"medium","message":"postcss-selector-parser@6.0.4 (npm) is affected by GHSA-rj75-hqrm-r3gf","path":"yarn.lock","line":null,"fingerprint":"postcss-selector-parser@6.0.4 (npm):GHSA-rj75-hqrm-r3gf"},{"rule_id":"osv/GHSA-h4hr-7fg3-h35w","severity":"medium","message":"prismjs@1.17.1 (npm) is affected by GHSA-h4hr-7fg3-h35w","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.17.1 (npm):GHSA-h4hr-7fg3-h35w"},{"rule_id":"osv/GHSA-hqhp-5p83-hx96","severity":"medium","message":"prismjs@1.17.1 (npm) is affected by GHSA-hqhp-5p83-hx96","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.17.1 (npm):GHSA-hqhp-5p83-hx96"},{"rule_id":"osv/GHSA-x7hr-w5r2-h6wg","severity":"medium","message":"prismjs@1.17.1 (npm) is affected by GHSA-x7hr-w5r2-h6wg","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.17.1 (npm):GHSA-x7hr-w5r2-h6wg"},{"rule_id":"osv/GHSA-h4hr-7fg3-h35w","severity":"medium","message":"prismjs@1.22.0 (npm) is affected by GHSA-h4hr-7fg3-h35w","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.22.0 (npm):GHSA-h4hr-7fg3-h35w"},{"rule_id":"osv/GHSA-hqhp-5p83-hx96","severity":"medium","message":"prismjs@1.22.0 (npm) is affected by GHSA-hqhp-5p83-hx96","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.22.0 (npm):GHSA-hqhp-5p83-hx96"},{"rule_id":"osv/GHSA-x7hr-w5r2-h6wg","severity":"medium","message":"prismjs@1.22.0 (npm) is affected by GHSA-x7hr-w5r2-h6wg","path":"yarn.lock","line":null,"fingerprint":"prismjs@1.22.0 (npm):GHSA-x7hr-w5r2-h6wg"},{"rule_id":"osv/GHSA-3965-hpx2-q597","severity":"medium","message":"pug@3.0.0 (npm) is affected by GHSA-3965-hpx2-q597","path":"yarn.lock","line":null,"fingerprint":"pug@3.0.0 (npm):GHSA-3965-hpx2-q597"},{"rule_id":"osv/GHSA-p493-635q-r6gr","severity":"medium","message":"pug@3.0.0 (npm) is affected by GHSA-p493-635q-r6gr","path":"yarn.lock","line":null,"fingerprint":"pug@3.0.0 (npm):GHSA-p493-635q-r6gr"},{"rule_id":"osv/GHSA-3965-hpx2-q597","severity":"medium","message":"pug-code-gen@3.0.1 (npm) is affected by GHSA-3965-hpx2-q597","path":"yarn.lock","line":null,"fingerprint":"pug-code-gen@3.0.1 (npm):GHSA-3965-hpx2-q597"},{"rule_id":"osv/GHSA-p493-635q-r6gr","severity":"medium","message":"pug-code-gen@3.0.1 (npm) is affected by GHSA-p493-635q-r6gr","path":"yarn.lock","line":null,"fingerprint":"pug-code-gen@3.0.1 (npm):GHSA-p493-635q-r6gr"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.5.2 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.5.2 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"yarn.lock","line":null,"fingerprint":"qs@6.5.2 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.7.0 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"yarn.lock","line":null,"fingerprint":"qs@6.7.0 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.7.0 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"yarn.lock","line":null,"fingerprint":"qs@6.7.0 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.7.0 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"yarn.lock","line":null,"fingerprint":"qs@6.7.0 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-4mjr-xmp4-gh2g","severity":"medium","message":"qs@6.9.4 (npm) is affected by GHSA-4mjr-xmp4-gh2g","path":"yarn.lock","line":null,"fingerprint":"qs@6.9.4 (npm):GHSA-4mjr-xmp4-gh2g"},{"rule_id":"osv/GHSA-6pq8-jhm2-2vcw","severity":"medium","message":"qs@6.9.4 (npm) is affected by GHSA-6pq8-jhm2-2vcw","path":"yarn.lock","line":null,"fingerprint":"qs@6.9.4 (npm):GHSA-6pq8-jhm2-2vcw"},{"rule_id":"osv/GHSA-6rw7-vpxm-498p","severity":"medium","message":"qs@6.9.4 (npm) is affected by GHSA-6rw7-vpxm-498p","path":"yarn.lock","line":null,"fingerprint":"qs@6.9.4 (npm):GHSA-6rw7-vpxm-498p"},{"rule_id":"osv/GHSA-5q6m-3h65-w53x","severity":"medium","message":"react-dev-utils@9.1.0 (npm) is affected by GHSA-5q6m-3h65-w53x","path":"yarn.lock","line":null,"fingerprint":"react-dev-utils@9.1.0 (npm):GHSA-5q6m-3h65-w53x"},{"rule_id":"osv/GHSA-p8p7-x288-28g6","severity":"medium","message":"request@2.88.2 (npm) is affected by GHSA-p8p7-x288-28g6","path":"yarn.lock","line":null,"fingerprint":"request@2.88.2 (npm):GHSA-p8p7-x288-28g6"},{"rule_id":"osv/GHSA-m6fv-jmcg-4jfg","severity":"medium","message":"send@0.17.1 (npm) is affected by GHSA-m6fv-jmcg-4jfg","path":"yarn.lock","line":null,"fingerprint":"send@0.17.1 (npm):GHSA-m6fv-jmcg-4jfg"},{"rule_id":"osv/GHSA-cm22-4g7w-348p","severity":"medium","message":"serve-static@1.14.1 (npm) is affected by GHSA-cm22-4g7w-348p","path":"yarn.lock","line":null,"fingerprint":"serve-static@1.14.1 (npm):GHSA-cm22-4g7w-348p"},{"rule_id":"osv/GHSA-64g7-mvw6-v9qj","severity":"medium","message":"shelljs@0.8.4 (npm) is affected by GHSA-64g7-mvw6-v9qj","path":"yarn.lock","line":null,"fingerprint":"shelljs@0.8.4 (npm):GHSA-64g7-mvw6-v9qj"},{"rule_id":"osv/GHSA-w5hq-hm5m-4548","severity":"medium","message":"store2@2.12.0 (npm) is affected by GHSA-w5hq-hm5m-4548","path":"yarn.lock","line":null,"fingerprint":"store2@2.12.0 (npm):GHSA-w5hq-hm5m-4548"},{"rule_id":"osv/GHSA-4vpr-x523-8j87","severity":"medium","message":"svgo@1.3.2 (npm) is affected by GHSA-4vpr-x523-8j87","path":"yarn.lock","line":null,"fingerprint":"svgo@1.3.2 (npm):GHSA-4vpr-x523-8j87"},{"rule_id":"osv/GHSA-f5x3-32g6-xq36","severity":"medium","message":"tar@4.4.13 (npm) is affected by GHSA-f5x3-32g6-xq36","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-f5x3-32g6-xq36"},{"rule_id":"osv/GHSA-gvwx-54wh-qm9j","severity":"medium","message":"tar@4.4.13 (npm) is affected by GHSA-gvwx-54wh-qm9j","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-gvwx-54wh-qm9j"},{"rule_id":"osv/GHSA-vmf3-w455-68vh","severity":"medium","message":"tar@4.4.13 (npm) is affected by GHSA-vmf3-w455-68vh","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-vmf3-w455-68vh"},{"rule_id":"osv/GHSA-w8wr-v893-vjvp","severity":"medium","message":"tar@4.4.13 (npm) is affected by GHSA-w8wr-v893-vjvp","path":"yarn.lock","line":null,"fingerprint":"tar@4.4.13 (npm):GHSA-w8wr-v893-vjvp"},{"rule_id":"osv/GHSA-ccgf-5rwj-j3hv","severity":"medium","message":"telejson@3.3.0 (npm) is affected by GHSA-ccgf-5rwj-j3hv","path":"yarn.lock","line":null,"fingerprint":"telejson@3.3.0 (npm):GHSA-ccgf-5rwj-j3hv"},{"rule_id":"osv/GHSA-72xf-g2v4-qvf3","severity":"medium","message":"tough-cookie@2.5.0 (npm) is affected by GHSA-72xf-g2v4-qvf3","path":"yarn.lock","line":null,"fingerprint":"tough-cookie@2.5.0 (npm):GHSA-72xf-g2v4-qvf3"},{"rule_id":"osv/GHSA-38fc-wpqx-33j7","severity":"medium","message":"trim-off-newlines@1.0.1 (npm) is affected by GHSA-38fc-wpqx-33j7","path":"yarn.lock","line":null,"fingerprint":"trim-off-newlines@1.0.1 (npm):GHSA-38fc-wpqx-33j7"},{"rule_id":"osv/GHSA-8v38-pw62-9cw2","severity":"medium","message":"url-parse@1.4.7 (npm) is affected by GHSA-8v38-pw62-9cw2","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.7 (npm):GHSA-8v38-pw62-9cw2"},{"rule_id":"osv/GHSA-9m6j-fcg5-2442","severity":"medium","message":"url-parse@1.4.7 (npm) is affected by GHSA-9m6j-fcg5-2442","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.7 (npm):GHSA-9m6j-fcg5-2442"},{"rule_id":"osv/GHSA-hh27-ffr2-f2jc","severity":"medium","message":"url-parse@1.4.7 (npm) is affected by GHSA-hh27-ffr2-f2jc","path":"yarn.lock","line":null,"fingerprint":"url-parse@1.4.7 (npm):GHSA-hh27-ffr2-f2jc"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"ok","tool_version":"zizmor 1.32.0","metrics":{"workflows":1.0,"findings":5.0,"findings_high":3.0,"findings_medium":2.0,"findings_low":0.0,"penalty":39.6},"findings":[{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nodejs.yml","line":17,"fingerprint":"unpinned-uses:.github/workflows/nodejs.yml:17"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nodejs.yml","line":18,"fingerprint":"unpinned-uses:.github/workflows/nodejs.yml:18"},{"rule_id":"zizmor/unpinned-uses","severity":"high","message":"unpinned action reference [confidence high]","path":".github/workflows/nodejs.yml","line":28,"fingerprint":"unpinned-uses:.github/workflows/nodejs.yml:28"},{"rule_id":"zizmor/artipacked","severity":"medium","message":"credential persistence through GitHub Actions artifacts [confidence low]","path":".github/workflows/nodejs.yml","line":17,"fingerprint":"artipacked:.github/workflows/nodejs.yml:17"},{"rule_id":"zizmor/excessive-permissions","severity":"medium","message":"overly broad permissions [confidence medium]","path":".github/workflows/nodejs.yml","line":12,"fingerprint":"excessive-permissions:.github/workflows/nodejs.yml:12"}],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":0.0,"signed_commit_share":0.0536,"unpinned_manifests":2.0},"findings":[],"evidence":[{"kind":"posture","description":"packages/react-rough-charts/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/react-rough-charts/package.json","url":null,"weight":0.3},{"kind":"posture","description":"packages/react-roughjs/package.json has no lockfile alongside it (unpinned dependencies)","ref":"packages/react-roughjs/package.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":159.0,"function_nloc":1775.0,"mean_ccn":1.76,"p90_ccn":4.0,"complex_functions":0.0,"long_functions":0.0,"many_param_functions":0.0,"risky_nloc_share":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":1979.0,"duplicated_lines":276.0,"duplicated_share":0.1395,"files":55.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/src/components/AreaSeries.tsx:91 and packages/react-rough-charts/src/components/CircleSeries.tsx:44","ref":"packages/react-rough-charts/src/components/AreaSeries.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/src/components/AreaSeries.tsx#L91","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/src/components/CircleSeries.tsx:23 and packages/react-rough-charts/src/components/LineSeries.tsx:22","ref":"packages/react-rough-charts/src/components/CircleSeries.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/src/components/CircleSeries.tsx#L23","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/src/components/XAxis.tsx:44 and packages/react-rough-charts/src/components/YAxis.tsx:41","ref":"packages/react-rough-charts/src/components/XAxis.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/src/components/XAxis.tsx#L44","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/stories/ArcSeries.stories.tsx:22 and packages/react-rough-charts/stories/LineSeries.stories.tsx:23","ref":"packages/react-rough-charts/stories/ArcSeries.stories.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/stories/ArcSeries.stories.tsx#L22","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/stories/ArcSeries.stories.tsx:27 and packages/react-rough-charts/stories/ArcSeries.stories.tsx:43","ref":"packages/react-rough-charts/stories/ArcSeries.stories.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/stories/ArcSeries.stories.tsx#L27","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/stories/AreaSeries.stories.tsx:36 and packages/react-rough-charts/stories/AreaSeries.stories.tsx:54","ref":"packages/react-rough-charts/stories/AreaSeries.stories.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/stories/AreaSeries.stories.tsx#L36","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/stories/BarSeries.stories.tsx:37 and packages/react-rough-charts/stories/BarSeries.stories.tsx:57","ref":"packages/react-rough-charts/stories/BarSeries.stories.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/stories/BarSeries.stories.tsx#L37","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/stories/BarSeries.stories.tsx:56 and packages/react-rough-charts/stories/Tooltip.stories.tsx:92","ref":"packages/react-rough-charts/stories/BarSeries.stories.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/stories/BarSeries.stories.tsx#L56","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/stories/ComposeSeries.stories.tsx:13 and packages/react-rough-charts/stories/LineSeries.stories.tsx:16","ref":"packages/react-rough-charts/stories/ComposeSeries.stories.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/stories/ComposeSeries.stories.tsx#L13","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: packages/react-rough-charts/stories/ComposeSeries.stories.tsx:25 and packages/react-rough-charts/stories/example/FillStyle.tsx:22","ref":"packages/react-rough-charts/stories/ComposeSeries.stories.tsx","url":"https://github.com/beizhedenglong/rough-charts/blob/74b0724d6b2befb58f3f36e133297f5c1a3f90f6/packages/react-rough-charts/stories/ComposeSeries.stories.tsx#L25","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":40.0,"weighted_findings":40.0,"scanned_lines":2949.0,"category:best-practice":40.0},"findings":[{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/Arc.tsx","line":34,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/Arc.tsx:34"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/ArcSeries.tsx","line":81,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/ArcSeries.tsx:81"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/ArcSeries.tsx","line":82,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/ArcSeries.tsx:82"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/AreaSeries.tsx","line":102,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/AreaSeries.tsx:102"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/AreaSeries.tsx","line":103,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/AreaSeries.tsx:103"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/BarSeries.tsx","line":70,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/BarSeries.tsx:70"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/BarSeries.tsx","line":71,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/BarSeries.tsx:71"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/CircleSeries.tsx","line":55,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/CircleSeries.tsx:55"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/CircleSeries.tsx","line":56,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/CircleSeries.tsx:56"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/LineSeries.tsx","line":45,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/LineSeries.tsx:45"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/withChartProvider.tsx","line":8,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/withChartProvider.tsx:8"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/src/components/withChartProvider.tsx","line":9,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/src/components/withChartProvider.tsx:9"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/ArcSeries.stories.tsx","line":31,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/ArcSeries.stories.tsx:31"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/ArcSeries.stories.tsx","line":47,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/ArcSeries.stories.tsx:47"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/ArcSeries.stories.tsx","line":56,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/ArcSeries.stories.tsx:56"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/ArcSeries.stories.tsx","line":68,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/ArcSeries.stories.tsx:68"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/ArcSeries.stories.tsx","line":82,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/ArcSeries.stories.tsx:82"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/ArcSeries.stories.tsx","line":90,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/ArcSeries.stories.tsx:90"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/AreaSeries.stories.tsx","line":39,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/AreaSeries.stories.tsx:39"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/AreaSeries.stories.tsx","line":57,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/AreaSeries.stories.tsx:57"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/BarSeries.stories.tsx","line":40,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/BarSeries.stories.tsx:40"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/BarSeries.stories.tsx","line":60,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/BarSeries.stories.tsx:60"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/BarSeries.stories.tsx","line":72,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/BarSeries.stories.tsx:72"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/ChartProvider.stories.jsx","line":56,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/ChartProvider.stories.jsx:56"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/CircleSeries.stories.tsx","line":35,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/CircleSeries.stories.tsx:35"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/CircleSeries.stories.tsx","line":45,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/CircleSeries.stories.tsx:45"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/ComposeSeries.stories.tsx","line":29,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/ComposeSeries.stories.tsx:29"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/LineSeries.stories.tsx","line":31,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/LineSeries.stories.tsx:31"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/LineSeries.stories.tsx","line":57,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/LineSeries.stories.tsx:57"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/LineSeries.stories.tsx","line":99,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/LineSeries.stories.tsx:99"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/Preview.tsx","line":11,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/Preview.tsx:11"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/Tooltip.stories.tsx","line":37,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/Tooltip.stories.tsx:37"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/Tooltip.stories.tsx","line":96,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/Tooltip.stories.tsx:96"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/XAxis.stories.tsx","line":33,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/XAxis.stories.tsx:33"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/YAxis.stories.tsx","line":35,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/YAxis.stories.tsx:35"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/example/FillStyle.tsx","line":26,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/example/FillStyle.tsx:26"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/example/FillStyle.tsx","line":35,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/example/FillStyle.tsx:35"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/example/Roughness.tsx","line":25,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/example/Roughness.tsx:25"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-rough-charts/stories/example/Roughness.tsx","line":34,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-rough-charts/stories/example/Roughness.tsx:34"},{"rule_id":"opengrep/typescript.react.best-practice.react-props-spreading","severity":"medium","message":"It's best practice to explicitly pass props to an HTML component rather than use the spread operator. The spread operator risks passing invalid HTML props to an HTML element, which can cause console warnings or worse, give malicious actors a way to inject unexpected attributes.","path":"packages/react-roughjs/src/components/RoughProvider.tsx","line":33,"fingerprint":"typescript.react.best-practice.react-props-spreading:packages/react-roughjs/src/components/RoughProvider.tsx:33"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":0.0,"check:test_ratio":0.0,"check:ci_present":1.0,"check:ci_runs_tests":0.0,"check:ci_runs_lint":0.0,"check:tests_cochange":0.0,"test_lines":0.0,"source_lines":2949.0,"test_ratio":0.0,"ci_files":1.0,"cochange_share":0.0,"cochange_commits":26.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .github/workflows/nodejs.yml","ref":".github/workflows/nodejs.yml","url":null,"weight":0.0}],"data":{"test_commands":[],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":0.0,"check:changelog":0.0,"readme_lines":77.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":0.0,"escapes":51.0,"escapes_per_kloc":18.299},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}