{"schema_version":"2","scorer_version":"0.1.0","scoring_version":"prov-4+qual-2+sec-2","generated_at":"2026-11-13T23:37:58.610552Z","repo":{"ref":{"host":"github.com","owner":"esvit","name":"ng-table"},"default_branch":"master","clone_url":"https://github.com/esvit/ng-table.git","html_url":"https://github.com/esvit/ng-table","description":"Simple table with sorting and filtering on AngularJS","stars":2735,"forks":830,"is_fork":false,"is_archived":false,"is_private":false,"size_kb":4826,"primary_language":"TypeScript","license_spdx":"BSD-3-Clause","created_at":"2013-04-19T09:46:25Z","pushed_at":"2020-02-24T20:12:58Z","security_policy_url":null,"distribution":{"owner_created_at":"2011-11-26T20:41:27Z","owner_type":"User","release_assets":[]}},"commit_sha":"b6d5d0bfeef923c617081ffe80a0266d7fb4aa33","profile":{"lines_by_language":{"TypeScript":9199,"JavaScript":3371},"files_by_category":{"source":88,"other":78,"config":22,"test":14,"docs":9,"binary":8,"vendored":7},"source_lines":6805,"test_lines":5765},"pillars":{"ai_provenance":{"score":0.0,"confidence":0.65,"coverage":1.0,"label":"none-detected","breakdown":{"attributed_share":0.0,"suspected_share":0.0,"estimated_share":0.0,"ai_artifacts":0.0,"flagged_work_units":0.0,"flagged_releases":0.0},"summary":"No AI attribution or AI-consistent velocity signals detected."},"quality":{"score":71.0,"confidence":0.9,"coverage":1.0,"label":"adequate","breakdown":{"complexity":85.2,"duplication":80.1,"lint":76.6,"testing":90.0,"docs":80.0,"type_safety":0.0,"process":0.0},"summary":"Code quality is adequate: test-to-source ratio 0.85, CI runs tests; 5% of function code in complex or long functions; 4% duplicated lines. Weakest area: type safety."},"security":{"score":51.9,"confidence":0.85,"coverage":1.0,"label":"weak","breakdown":{"secrets":100.0,"sast":83.3,"dependencies":0.0,"ci_actions":null,"posture":0.0,"scorecard":25.0},"summary":"Security posture is weak: 387 known vulnerabilities in 156 dependencies. Weakest area: dependencies."}},"analyzer_results":[{"analyzer":"sec-scorecard","pillar":"security","status":"ok","tool_version":"scorecard v5.6.0","metrics":{"aggregate":2.0,"check:Code-Review":0.0,"check:Maintained":0.0,"check:Binary-Artifacts":10.0,"check:CII-Best-Practices":0.0,"check:Security-Policy":0.0,"check:License":10.0,"check:Fuzzing":0.0,"check:Branch-Protection":0.0,"check:SAST":0.0},"findings":[],"evidence":[{"kind":"scorecard-check","description":"Scorecard Code-Review: 0/10 (Found 1/29 approved changesets -- score normalized to 0)","ref":"Code-Review","url":"https://scorecard.dev/viewer/?uri=github.com/esvit/ng-table","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Maintained: 0/10 (0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0)","ref":"Maintained","url":"https://scorecard.dev/viewer/?uri=github.com/esvit/ng-table","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Binary-Artifacts: 10/10 (no binaries found in the repo)","ref":"Binary-Artifacts","url":"https://scorecard.dev/viewer/?uri=github.com/esvit/ng-table","weight":0.0},{"kind":"scorecard-check","description":"Scorecard CII-Best-Practices: 0/10 (no effort to earn an OpenSSF best practices badge detected)","ref":"CII-Best-Practices","url":"https://scorecard.dev/viewer/?uri=github.com/esvit/ng-table","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Security-Policy: 0/10 (security policy file not detected)","ref":"Security-Policy","url":"https://scorecard.dev/viewer/?uri=github.com/esvit/ng-table","weight":1.0},{"kind":"scorecard-check","description":"Scorecard License: 10/10 (license file detected)","ref":"License","url":"https://scorecard.dev/viewer/?uri=github.com/esvit/ng-table","weight":0.0},{"kind":"scorecard-check","description":"Scorecard Fuzzing: 0/10 (project is not fuzzed)","ref":"Fuzzing","url":"https://scorecard.dev/viewer/?uri=github.com/esvit/ng-table","weight":1.0},{"kind":"scorecard-check","description":"Scorecard Branch-Protection: 0/10 (branch protection not enabled on development/release branches)","ref":"Branch-Protection","url":"https://scorecard.dev/viewer/?uri=github.com/esvit/ng-table","weight":1.0},{"kind":"scorecard-check","description":"Scorecard SAST: 0/10 (SAST tool is not run on all commits -- score normalized to 0)","ref":"SAST","url":"https://scorecard.dev/viewer/?uri=github.com/esvit/ng-table","weight":1.0}],"data":{"date":"2026-11-09","commit":"b6d5d0bfeef923c617081ffe80a0266d7fb4aa33","matches_head":true},"error":null},{"analyzer":"sec-registry","pillar":"security","status":"ok","tool_version":null,"metrics":{"declared":64.0,"checked":64.0,"missing":0.0,"recent":0.0,"lookup_errors":0.0},"findings":[],"evidence":[],"data":{"phantom":false},"error":null},{"analyzer":"ai-attribution","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"commits":535.0,"attributed_commits":0.0,"attributed_commit_share":0.0,"effective_loc":61404.0,"attributed_loc":0.0,"attributed_loc_share":0.0,"tools_detected":0.0},"findings":[],"evidence":[],"data":{"attributed_loc_by_commit":{},"tools":{},"monthly":{"2013-04":{"loc":157,"attributed_loc":0},"2013-05":{"loc":2140,"attributed_loc":0},"2013-06":{"loc":314,"attributed_loc":0},"2013-07":{"loc":140,"attributed_loc":0},"2013-08":{"loc":21,"attributed_loc":0},"2013-09":{"loc":1849,"attributed_loc":0},"2013-10":{"loc":2228,"attributed_loc":0},"2013-11":{"loc":129,"attributed_loc":0},"2013-12":{"loc":448,"attributed_loc":0},"2014-01":{"loc":43,"attributed_loc":0},"2014-02":{"loc":254,"attributed_loc":0},"2014-03":{"loc":18,"attributed_loc":0},"2014-04":{"loc":261,"attributed_loc":0},"2014-05":{"loc":0,"attributed_loc":0},"2014-06":{"loc":12,"attributed_loc":0},"2014-09":{"loc":18,"attributed_loc":0},"2014-10":{"loc":30,"attributed_loc":0},"2015-01":{"loc":1559,"attributed_loc":0},"2015-02":{"loc":377,"attributed_loc":0},"2015-03":{"loc":4,"attributed_loc":0},"2015-04":{"loc":20,"attributed_loc":0},"2015-05":{"loc":337,"attributed_loc":0},"2015-06":{"loc":100,"attributed_loc":0},"2015-07":{"loc":2148,"attributed_loc":0},"2015-08":{"loc":5141,"attributed_loc":0},"2015-09":{"loc":681,"attributed_loc":0},"2015-10":{"loc":383,"attributed_loc":0},"2015-11":{"loc":40,"attributed_loc":0},"2015-12":{"loc":20196,"attributed_loc":0},"2016-01":{"loc":2723,"attributed_loc":0},"2016-06":{"loc":4115,"attributed_loc":0},"2016-07":{"loc":2151,"attributed_loc":0},"2016-08":{"loc":8104,"attributed_loc":0},"2016-09":{"loc":9,"attributed_loc":0},"2016-10":{"loc":88,"attributed_loc":0},"2016-11":{"loc":3477,"attributed_loc":0},"2016-12":{"loc":1689,"attributed_loc":0},"2017-01":{"loc":0,"attributed_loc":0}}},"error":null},{"analyzer":"ai-artifacts","pillar":"ai_provenance","status":"ok","tool_version":"signatures-v1","metrics":{"artifacts":0.0,"workflow_agents":0.0,"tools_configured":0.0},"findings":[],"evidence":[],"data":{"artifacts":[],"workflows":[],"tools":[]},"error":null},{"analyzer":"ai-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"work_units":220.0,"flagged_units":0.0,"pre_ai_era_bursts":5.0,"pre_ai_era_measured_loc":54409.0,"pre_ai_era_burst_loc":30402.0,"measured_loc":54409.0,"flagged_loc":0.0,"flagged_loc_share":0.0,"max_loc_per_hour":5000.385144429161,"median_loc_per_hour":81.3172009864365,"pr_timed_units":0.0,"excluded_import_loc":6458.0},"findings":[],"evidence":[],"data":{"flagged_loc_by_commit":{},"excluded_import_commits":["8c83561e299e11c9a081f376e518c2a396e34c13"]},"error":null},{"analyzer":"ai-release-velocity","pillar":"ai_provenance","status":"ok","tool_version":"prov-4","metrics":{"releases":49.0,"flagged_releases":0.0,"max_loc_per_day":1314.0},"findings":[],"evidence":[],"data":{"releases":[{"from":"v0.2.0","to":"v0.2.1","loc":158,"days":50.04,"loc_per_day":3.2,"flagged":false},{"from":"v0.2.1","to":"v0.2.2","loc":391,"days":26.28,"loc_per_day":14.9,"flagged":false},{"from":"v0.2.2","to":"v0.3.0","loc":3652,"days":28.58,"loc_per_day":127.8,"flagged":false},{"from":"v0.3.0","to":"v0.3.1","loc":188,"days":40.08,"loc_per_day":4.7,"flagged":false},{"from":"v0.3.1","to":"v0.3.2","loc":991,"days":127.49,"loc_per_day":7.8,"flagged":false},{"from":"v0.3.2","to":"v0.3.3","loc":14,"days":56.63,"loc_per_day":0.2,"flagged":false},{"from":"v0.3.3","to":"v0.4.1","loc":50,"days":216.44,"loc_per_day":0.2,"flagged":false},{"from":"v0.4.1","to":"v0.4.2","loc":24,"days":4.6,"loc_per_day":5.2,"flagged":false},{"from":"v0.4.2","to":"v0.4.3","loc":82,"days":2.88,"loc_per_day":28.4,"flagged":false},{"from":"v0.4.3","to":"0.5.0","loc":1604,"days":28.5,"loc_per_day":56.3,"flagged":false},{"from":"0.5.0","to":"v0.5.1","loc":10,"days":4.67,"loc_per_day":2.1,"flagged":false},{"from":"v0.5.1","to":"v0.5.2","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false},{"from":"v0.5.2","to":"v0.5.4","loc":4,"days":6.02,"loc_per_day":0.7,"flagged":false},{"from":"v0.5.4","to":"v0.5.5","loc":733,"days":133.05,"loc_per_day":5.5,"flagged":false},{"from":"v0.5.5","to":"v0.6.0","loc":30,"days":2.94,"loc_per_day":10.2,"flagged":false},{"from":"v0.6.0","to":"v0.7.0","loc":86,"days":0.36,"loc_per_day":239.3,"flagged":false},{"from":"v0.7.0","to":"v0.7.1","loc":13,"days":7.42,"loc_per_day":1.8,"flagged":false},{"from":"v0.7.1","to":"v0.8.0","loc":214,"days":5.29,"loc_per_day":40.5,"flagged":false},{"from":"v0.8.0","to":"v0.8.1","loc":2654,"days":8.22,"loc_per_day":323.0,"flagged":false},{"from":"v0.8.1","to":"v0.8.2","loc":101,"days":3.47,"loc_per_day":29.1,"flagged":false},{"from":"v0.8.2","to":"v0.8.3","loc":366,"days":2.6,"loc_per_day":140.9,"flagged":false},{"from":"v0.8.3","to":"v1.0.0-alpha","loc":1364,"days":1.04,"loc_per_day":1314.0,"flagged":false},{"from":"v1.0.0-alpha","to":"v1.0.0-alpha.1","loc":93,"days":0.65,"loc_per_day":143.6,"flagged":false},{"from":"v1.0.0-alpha.1","to":"v1.0.0-alpha.2","loc":162,"days":2.18,"loc_per_day":74.3,"flagged":false},{"from":"v1.0.0-alpha.2","to":"v1.0.0-alpha.3","loc":177,"days":1.23,"loc_per_day":144.4,"flagged":false},{"from":"v1.0.0-alpha.3","to":"1.0.0-alpha.4","loc":293,"days":1.61,"loc_per_day":181.5,"flagged":false},{"from":"1.0.0-alpha.4","to":"1.0.0-alpha.5","loc":384,"days":1.01,"loc_per_day":381.6,"flagged":false},{"from":"1.0.0-alpha.5","to":"1.0.0-alpha.6","loc":59,"days":0.31,"loc_per_day":189.6,"flagged":false},{"from":"1.0.0-alpha.6","to":"1.0.0-alpha.7","loc":1031,"days":10.9,"loc_per_day":94.6,"flagged":false},{"from":"1.0.0-alpha.7","to":"1.0.0-alpha.8","loc":45,"days":0.49,"loc_per_day":91.8,"flagged":false},{"from":"1.0.0-alpha.8","to":"1.0.0-beta.1","loc":157,"days":1.24,"loc_per_day":126.2,"flagged":false},{"from":"1.0.0-beta.1","to":"1.0.0-beta.2","loc":130,"days":3.32,"loc_per_day":39.1,"flagged":false},{"from":"1.0.0-beta.2","to":"1.0.0-beta.3","loc":58,"days":3.99,"loc_per_day":14.5,"flagged":false},{"from":"1.0.0-beta.3","to":"1.0.0-beta.4","loc":272,"days":7.97,"loc_per_day":34.1,"flagged":false},{"from":"1.0.0-beta.4","to":"1.0.0-beta.5","loc":221,"days":4.05,"loc_per_day":54.5,"flagged":false},{"from":"1.0.0-beta.5","to":"1.0.0-beta.6","loc":364,"days":15.67,"loc_per_day":23.2,"flagged":false},{"from":"1.0.0-beta.6","to":"1.0.0-beta.7","loc":7,"days":15.17,"loc_per_day":0.5,"flagged":false},{"from":"1.0.0-beta.7","to":"1.0.0-beta.8","loc":12,"days":5.68,"loc_per_day":2.1,"flagged":false},{"from":"1.0.0-beta.8","to":"1.0.0-beta.9","loc":40,"days":16.97,"loc_per_day":2.4,"flagged":false},{"from":"1.0.0-beta.9","to":"1.0.0","loc":23034,"days":220.38,"loc_per_day":104.5,"flagged":false},{"from":"1.0.0","to":"v2.0.0","loc":7806,"days":109.44,"loc_per_day":71.3,"flagged":false},{"from":"v2.0.0","to":"v2.0.1","loc":0,"days":3.23,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.1","to":"v2.0.2","loc":0,"days":0.25,"loc_per_day":0.0,"flagged":false},{"from":"v2.0.2","to":"v2.1.0","loc":1,"days":4.14,"loc_per_day":0.2,"flagged":false},{"from":"v2.1.0","to":"v2.2.0","loc":275,"days":45.85,"loc_per_day":6.0,"flagged":false},{"from":"v2.2.0","to":"v3.0.0","loc":3399,"days":9.11,"loc_per_day":373.1,"flagged":false},{"from":"v3.0.0","to":"v3.0.1","loc":4,"days":0.05,"loc_per_day":80.1,"flagged":false},{"from":"v3.0.1","to":"v3.1.0","loc":1575,"days":24.83,"loc_per_day":63.4,"flagged":false},{"from":"v3.1.0","to":"v4.0.0","loc":0,"days":0.04,"loc_per_day":0.0,"flagged":false}]},"error":null},{"analyzer":"ai-stylometry","pillar":"ai_provenance","status":"ok","tool_version":null,"metrics":{"lines_scanned":6805.0,"index":0.147,"count:narrated_steps":1.0,"per_kloc:narrated_steps":0.147,"files:narrated_steps":1.0,"count:placeholder":0.0,"per_kloc:placeholder":0.0,"files:placeholder":0.0,"count:emoji_in_code":0.0,"per_kloc:emoji_in_code":0.0,"files:emoji_in_code":0.0,"count:assistant_voice":0.0,"per_kloc:assistant_voice":0.0,"files:assistant_voice":0.0},"findings":[],"evidence":[{"kind":"stylometry:narrated_steps","description":"step-by-step narration comment: * Now we setup the mock backend and create the test specs.","ref":"examples-old/js/angular-mocks.js:890","url":"https://github.com/esvit/ng-table/blob/b6d5d0bfeef923c617081ffe80a0266d7fb4aa33/examples-old/js/angular-mocks.js#L890","weight":0.0}],"data":{},"error":null},{"analyzer":"sec-secrets","pillar":"security","status":"ok","tool_version":"gitleaks 8.30.1","metrics":{"secrets_current":0.0,"secrets_history":0.0,"secrets_nonprod":0.0,"secrets_low_confidence":0.0},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-sast","pillar":"security","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":15.0,"findings_high":0.0,"findings_medium":14.0,"findings_low":1.0,"weighted_findings":3.562,"scanned_lines":6805.0,"parse_errors":0.0},"findings":[{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.var-in-script-src","severity":"medium","message":"Detected a template variable used as the 'src' in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent malicious URLs from being injected and could results in a cross-site scripting (XSS) vulnerability. Prefer not to dynamically generate the 'src' attribu [confidence low]","path":"demo-apps/es6-webpack/index.tpl.html","line":22,"fingerprint":"javascript.express.security.audit.xss.ejs.var-in-script-src:demo-apps/es6-webpack/index.tpl.html:22"},{"rule_id":"opengrep/javascript.express.security.audit.xss.ejs.var-in-script-src","severity":"medium","message":"Detected a template variable used as the 'src' in a script tag. Although template variables are HTML escaped, HTML escaping does not always prevent malicious URLs from being injected and could results in a cross-site scripting (XSS) vulnerability. Prefer not to dynamically generate the 'src' attribu [confidence low]","path":"demo-apps/ts-webpack/index.tpl.html","line":20,"fingerprint":"javascript.express.security.audit.xss.ejs.var-in-script-src:demo-apps/ts-webpack/index.tpl.html:20"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"demo-site/app/app.js","line":52,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:demo-site/app/app.js:52"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"demo-site/app/app.js","line":54,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:demo-site/app/app.js:54"},{"rule_id":"opengrep/javascript.jquery.security.audit.prohibit-jquery-html","severity":"medium","message":"JQuery's `html` function is susceptible to Cross Site Scripting (XSS) attacks. If you're just passing text, consider `text` instead. Otherwise, use a function that escapes HTML such as edX's `HtmlUtils.setHtml()`. [confidence low]","path":"examples-old/js/angular-mocks.js","line":723,"fingerprint":"javascript.jquery.security.audit.prohibit-jquery-html:examples-old/js/angular-mocks.js:723"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`a.style.width.replace` method will only replace the first occurrence when used with a string argument (\"%\"). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"examples-old/js/ng-table-resizable-columns.js","line":3,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:examples-old/js/ng-table-resizable-columns.js:3"},{"rule_id":"opengrep/javascript.lang.security.audit.incomplete-sanitization","severity":"medium","message":"`$(c)[0].style.width.replace` method will only replace the first occurrence when used with a string argument (\"%\"). If this method is used for escaping of dangerous data then there is a possibility for a bypass. Try to use sanitization library instead or use a Regex with a global flag. [confidence low]","path":"examples-old/js/ng-table-resizable-columns.js","line":3,"fingerprint":"javascript.lang.security.audit.incomplete-sanitization:examples-old/js/ng-table-resizable-columns.js:3"},{"rule_id":"opengrep/javascript.jquery.security.audit.jquery-insecure-selector","severity":"medium","message":"User controlled data in a `$(...)` is an anti-pattern that can lead to XSS vulnerabilities [confidence low]","path":"examples-old/js/ng-table-resizable-columns.js","line":3,"fingerprint":"javascript.jquery.security.audit.jquery-insecure-selector:examples-old/js/ng-table-resizable-columns.js:3"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-require","severity":"medium","message":"Detected the use of require(variable). Calling require with a non-literal argument might allow an attacker to load and run arbitrary code, or access arbitrary files. [confidence low]","path":"scripts/webpack/appParts.js","line":10,"fingerprint":"javascript.lang.security.audit.detect-non-literal-require:scripts/webpack/appParts.js:10"},{"rule_id":"opengrep/javascript.lang.security.audit.detect-non-literal-require","severity":"medium","message":"Detected the use of require(variable). Calling require with a non-literal argument might allow an attacker to load and run arbitrary code, or access arbitrary files. [confidence low]","path":"scripts/webpack/libParts.js","line":11,"fingerprint":"javascript.lang.security.audit.detect-non-literal-require:scripts/webpack/libParts.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/webpack/libParts.js","line":11,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/webpack/libParts.js:11"},{"rule_id":"opengrep/javascript.lang.security.audit.path-traversal.path-join-resolve-traversal","severity":"medium","message":"Detected possible user input going into a `path.join` or `path.resolve` function. This could possibly lead to a path traversal vulnerability,  where the attacker can access arbitrary files stored in the file system. Instead, be sure to sanitize or validate user input first. [confidence low]","path":"scripts/webpack/parts.js","line":108,"fingerprint":"javascript.lang.security.audit.path-traversal.path-join-resolve-traversal:scripts/webpack/parts.js:108"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop","severity":"medium","message":"Possibility of prototype polluting function detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-exis [confidence low]","path":"src/core/data/ngTableDefaultGetData.ts","line":143,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-loop:src/core/data/ngTableDefaultGetData.ts:143"},{"rule_id":"opengrep/javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment","severity":"medium","message":"Possibility of prototype polluting assignment detected. By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-ex [confidence low]","path":"src/core/ngTableParams.ts","line":406,"fingerprint":"javascript.lang.security.audit.prototype-pollution.prototype-pollution-assignment:src/core/ngTableParams.ts:406"},{"rule_id":"opengrep/javascript.browser.security.js-open-redirect-from-function","severity":"low","message":"The application accepts potentially user-controlled input `a` which can control the location of the current window context. This can lead two types of vulnerabilities open-redirection and Cross-Site-Scripting (XSS) with JavaScript URIs. It is recommended to validate user-controllable input before al [confidence low]","path":"demo-site/js/angular-social.js","line":1,"fingerprint":"javascript.browser.security.js-open-redirect-from-function:demo-site/js/angular-social.js:1"}],"evidence":[],"data":{"rulesets":["typescript","javascript"]},"error":null},{"analyzer":"sec-deps","pillar":"security","status":"ok","tool_version":"osv-scanner version: 2.7.1","metrics":{"vulnerable_packages":156.0,"vulnerabilities":387.0,"vulns_critical":44.0,"vulns_high":166.0,"vulns_medium":131.0,"vulns_low":10.0,"vulns_unknown":36.0,"penalty":1278.0},"findings":[{"rule_id":"osv/GHSA-8w4h-3cm3-2pm2","severity":"critical","message":"atob@1.1.3 (npm) is affected by GHSA-8w4h-3cm3-2pm2","path":"npm-shrinkwrap.json","line":null,"fingerprint":"atob@1.1.3 (npm):GHSA-8w4h-3cm3-2pm2"},{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"babel-traverse@6.16.0 (npm) is affected by GHSA-67hx-6x53-jw92","path":"npm-shrinkwrap.json","line":null,"fingerprint":"babel-traverse@6.16.0 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-67hx-6x53-jw92","severity":"critical","message":"babel-traverse@6.21.0 (npm) is affected by GHSA-67hx-6x53-jw92","path":"npm-shrinkwrap.json","line":null,"fingerprint":"babel-traverse@6.21.0 (npm):GHSA-67hx-6x53-jw92"},{"rule_id":"osv/GHSA-cpq7-6gpm-g9rc","severity":"critical","message":"cipher-base@1.0.3 (npm) is affected by GHSA-cpq7-6gpm-g9rc","path":"npm-shrinkwrap.json","line":null,"fingerprint":"cipher-base@1.0.3 (npm):GHSA-cpq7-6gpm-g9rc"},{"rule_id":"osv/GHSA-vjh7-7g9h-fjfh","severity":"critical","message":"elliptic@6.3.2 (npm) is affected by GHSA-vjh7-7g9h-fjfh","path":"npm-shrinkwrap.json","line":null,"fingerprint":"elliptic@6.3.2 (npm):GHSA-vjh7-7g9h-fjfh"},{"rule_id":"osv/GHSA-6h5x-7c5m-7cr7","severity":"critical","message":"eventsource@0.1.6 (npm) is affected by GHSA-6h5x-7c5m-7cr7","path":"npm-shrinkwrap.json","line":null,"fingerprint":"eventsource@0.1.6 (npm):GHSA-6h5x-7c5m-7cr7"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@1.0.0-rc4 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"npm-shrinkwrap.json","line":null,"fingerprint":"form-data@1.0.0-rc4 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@1.0.1 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"npm-shrinkwrap.json","line":null,"fingerprint":"form-data@1.0.1 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-fjxv-7rqg-78g4","severity":"critical","message":"form-data@2.0.0 (npm) is affected by GHSA-fjxv-7rqg-78g4","path":"npm-shrinkwrap.json","line":null,"fingerprint":"form-data@2.0.0 (npm):GHSA-fjxv-7rqg-78g4"},{"rule_id":"osv/GHSA-8mmm-9v2q-x3f9","severity":"critical","message":"gh-pages@0.11.0 (npm) is affected by GHSA-8mmm-9v2q-x3f9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"gh-pages@0.11.0 (npm):GHSA-8mmm-9v2q-x3f9"},{"rule_id":"osv/GHSA-2w6w-674q-4c4q","severity":"critical","message":"handlebars@4.0.5 (npm) is affected by GHSA-2w6w-674q-4c4q","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-2w6w-674q-4c4q"},{"rule_id":"osv/GHSA-765h-qjxv-5f44","severity":"critical","message":"handlebars@4.0.5 (npm) is affected by GHSA-765h-qjxv-5f44","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-765h-qjxv-5f44"},{"rule_id":"osv/GHSA-8r5x-fm3f-whwj","severity":"critical","message":"handlebars@4.0.5 (npm) is affected by GHSA-8r5x-fm3f-whwj","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-8r5x-fm3f-whwj"},{"rule_id":"osv/GHSA-f2jv-r9rf-7988","severity":"critical","message":"handlebars@4.0.5 (npm) is affected by GHSA-f2jv-r9rf-7988","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-f2jv-r9rf-7988"},{"rule_id":"osv/GHSA-p8wg-vrv2-v86f","severity":"critical","message":"handlebars@4.0.5 (npm) is affected by GHSA-p8wg-vrv2-v86f","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-p8wg-vrv2-v86f"},{"rule_id":"osv/GHSA-w457-6q6x-cgp9","severity":"critical","message":"handlebars@4.0.5 (npm) is affected by GHSA-w457-6q6x-cgp9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-w457-6q6x-cgp9"},{"rule_id":"osv/GHSA-8g7p-74h8-hg48","severity":"critical","message":"https-proxy-agent@1.0.0 (npm) is affected by GHSA-8g7p-74h8-hg48","path":"npm-shrinkwrap.json","line":null,"fingerprint":"https-proxy-agent@1.0.0 (npm):GHSA-8g7p-74h8-hg48"},{"rule_id":"osv/GHSA-896r-f27r-55mw","severity":"critical","message":"json-schema@0.2.2 (npm) is affected by GHSA-896r-f27r-55mw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"json-schema@0.2.2 (npm):GHSA-896r-f27r-55mw"},{"rule_id":"osv/GHSA-896r-f27r-55mw","severity":"critical","message":"json-schema@0.2.3 (npm) is affected by GHSA-896r-f27r-55mw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"json-schema@0.2.3 (npm):GHSA-896r-f27r-55mw"},{"rule_id":"osv/GHSA-76p3-8jx3-jpfq","severity":"critical","message":"loader-utils@0.2.16 (npm) is affected by GHSA-76p3-8jx3-jpfq","path":"npm-shrinkwrap.json","line":null,"fingerprint":"loader-utils@0.2.16 (npm):GHSA-76p3-8jx3-jpfq"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@3.10.1 (npm) is affected by GHSA-jf85-cpcp-j695","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.11.1 (npm) is affected by GHSA-jf85-cpcp-j695","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.11.1 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.15.0 (npm) is affected by GHSA-jf85-cpcp-j695","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.15.0 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.16.4 (npm) is affected by GHSA-jf85-cpcp-j695","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.16.4 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.17.2 (npm) is affected by GHSA-jf85-cpcp-j695","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.17.2 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-jf85-cpcp-j695","severity":"critical","message":"lodash@4.9.0 (npm) is affected by GHSA-jf85-cpcp-j695","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.9.0 (npm):GHSA-jf85-cpcp-j695"},{"rule_id":"osv/GHSA-pp57-mqmh-44h7","severity":"critical","message":"macaddress@0.2.8 (npm) is affected by GHSA-pp57-mqmh-44h7","path":"npm-shrinkwrap.json","line":null,"fingerprint":"macaddress@0.2.8 (npm):GHSA-pp57-mqmh-44h7"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.10 (npm) is affected by GHSA-xvch-5gv4-984h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimist@0.0.10 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@0.0.8 (npm) is affected by GHSA-xvch-5gv4-984h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimist@0.0.8 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-xvch-5gv4-984h","severity":"critical","message":"minimist@1.2.0 (npm) is affected by GHSA-xvch-5gv4-984h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimist@1.2.0 (npm):GHSA-xvch-5gv4-984h"},{"rule_id":"osv/GHSA-v62p-rq8g-8h59","severity":"critical","message":"pbkdf2@3.0.9 (npm) is affected by GHSA-v62p-rq8g-8h59","path":"npm-shrinkwrap.json","line":null,"fingerprint":"pbkdf2@3.0.9 (npm):GHSA-v62p-rq8g-8h59"},{"rule_id":"osv/GHSA-jqcg-44mw-7w3h","severity":"critical","message":"proxy-addr@1.1.2 (npm) is affected by GHSA-jqcg-44mw-7w3h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"proxy-addr@1.1.2 (npm):GHSA-jqcg-44mw-7w3h"},{"rule_id":"osv/GHSA-95m3-7q98-8xr5","severity":"critical","message":"sha.js@2.4.8 (npm) is affected by GHSA-95m3-7q98-8xr5","path":"npm-shrinkwrap.json","line":null,"fingerprint":"sha.js@2.4.8 (npm):GHSA-95m3-7q98-8xr5"},{"rule_id":"osv/GHSA-w7jw-789q-3m8p","severity":"critical","message":"shell-quote@1.6.1 (npm) is affected by GHSA-w7jw-789q-3m8p","path":"npm-shrinkwrap.json","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-w7jw-789q-3m8p"},{"rule_id":"osv/GHSA-qm95-pgcg-qqfq","severity":"critical","message":"socket.io-parser@2.2.2 (npm) is affected by GHSA-qm95-pgcg-qqfq","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.2 (npm):GHSA-qm95-pgcg-qqfq"},{"rule_id":"osv/GHSA-qm95-pgcg-qqfq","severity":"critical","message":"socket.io-parser@2.2.6 (npm) is affected by GHSA-qm95-pgcg-qqfq","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.6 (npm):GHSA-qm95-pgcg-qqfq"},{"rule_id":"osv/GHSA-23hp-3jrh-7fpw","severity":"critical","message":"tar@2.2.1 (npm) is affected by GHSA-23hp-3jrh-7fpw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-23hp-3jrh-7fpw"},{"rule_id":"osv/GHSA-hgjh-723h-mx2j","severity":"critical","message":"url-parse@1.0.5 (npm) is affected by GHSA-hgjh-723h-mx2j","path":"npm-shrinkwrap.json","line":null,"fingerprint":"url-parse@1.0.5 (npm):GHSA-hgjh-723h-mx2j"},{"rule_id":"osv/GHSA-pv4c-p2j5-38j4","severity":"critical","message":"url-parse@1.0.5 (npm) is affected by GHSA-pv4c-p2j5-38j4","path":"npm-shrinkwrap.json","line":null,"fingerprint":"url-parse@1.0.5 (npm):GHSA-pv4c-p2j5-38j4"},{"rule_id":"osv/GHSA-hgjh-723h-mx2j","severity":"critical","message":"url-parse@1.1.7 (npm) is affected by GHSA-hgjh-723h-mx2j","path":"npm-shrinkwrap.json","line":null,"fingerprint":"url-parse@1.1.7 (npm):GHSA-hgjh-723h-mx2j"},{"rule_id":"osv/GHSA-pv4c-p2j5-38j4","severity":"critical","message":"url-parse@1.1.7 (npm) is affected by GHSA-pv4c-p2j5-38j4","path":"npm-shrinkwrap.json","line":null,"fingerprint":"url-parse@1.1.7 (npm):GHSA-pv4c-p2j5-38j4"},{"rule_id":"osv/GHSA-xv26-6w52-cph6","severity":"critical","message":"websocket-driver@0.6.5 (npm) is affected by GHSA-xv26-6w52-cph6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"websocket-driver@0.6.5 (npm):GHSA-xv26-6w52-cph6"},{"rule_id":"osv/GHSA-72mh-269x-7mh5","severity":"critical","message":"xmlhttprequest-ssl@1.5.1 (npm) is affected by GHSA-72mh-269x-7mh5","path":"npm-shrinkwrap.json","line":null,"fingerprint":"xmlhttprequest-ssl@1.5.1 (npm):GHSA-72mh-269x-7mh5"},{"rule_id":"osv/GHSA-h4j5-c7cj-74xg","severity":"critical","message":"xmlhttprequest-ssl@1.5.1 (npm) is affected by GHSA-h4j5-c7cj-74xg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"xmlhttprequest-ssl@1.5.1 (npm):GHSA-h4j5-c7cj-74xg"},{"rule_id":"osv/GHSA-7q85-xj36-vmfc","severity":"high","message":"adm-zip@0.4.4 (npm) is affected by GHSA-7q85-xj36-vmfc","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.4 (npm):GHSA-7q85-xj36-vmfc"},{"rule_id":"osv/GHSA-8238-w5pm-2374","severity":"high","message":"adm-zip@0.4.4 (npm) is affected by GHSA-8238-w5pm-2374","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.4 (npm):GHSA-8238-w5pm-2374"},{"rule_id":"osv/GHSA-j5f4-cc29-5x44","severity":"high","message":"adm-zip@0.4.4 (npm) is affected by GHSA-j5f4-cc29-5x44","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.4 (npm):GHSA-j5f4-cc29-5x44"},{"rule_id":"osv/GHSA-rcw4-f5rp-g42v","severity":"high","message":"adm-zip@0.4.4 (npm) is affected by GHSA-rcw4-f5rp-g42v","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.4 (npm):GHSA-rcw4-f5rp-g42v"},{"rule_id":"osv/GHSA-xcpc-8h2w-3j85","severity":"high","message":"adm-zip@0.4.4 (npm) is affected by GHSA-xcpc-8h2w-3j85","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.4 (npm):GHSA-xcpc-8h2w-3j85"},{"rule_id":"osv/GHSA-7q85-xj36-vmfc","severity":"high","message":"adm-zip@0.4.7 (npm) is affected by GHSA-7q85-xj36-vmfc","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.7 (npm):GHSA-7q85-xj36-vmfc"},{"rule_id":"osv/GHSA-8238-w5pm-2374","severity":"high","message":"adm-zip@0.4.7 (npm) is affected by GHSA-8238-w5pm-2374","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.7 (npm):GHSA-8238-w5pm-2374"},{"rule_id":"osv/GHSA-j5f4-cc29-5x44","severity":"high","message":"adm-zip@0.4.7 (npm) is affected by GHSA-j5f4-cc29-5x44","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.7 (npm):GHSA-j5f4-cc29-5x44"},{"rule_id":"osv/GHSA-rcw4-f5rp-g42v","severity":"high","message":"adm-zip@0.4.7 (npm) is affected by GHSA-rcw4-f5rp-g42v","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.7 (npm):GHSA-rcw4-f5rp-g42v"},{"rule_id":"osv/GHSA-xcpc-8h2w-3j85","severity":"high","message":"adm-zip@0.4.7 (npm) is affected by GHSA-xcpc-8h2w-3j85","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.7 (npm):GHSA-xcpc-8h2w-3j85"},{"rule_id":"osv/GHSA-4w4v-5hc9-xrr2","severity":"high","message":"angular@1.5.8 (npm) is affected by GHSA-4w4v-5hc9-xrr2","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-4w4v-5hc9-xrr2"},{"rule_id":"osv/GHSA-7x27-g8rg-x87w","severity":"high","message":"angular@1.5.8 (npm) is affected by GHSA-7x27-g8rg-x87w","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-7x27-g8rg-x87w"},{"rule_id":"osv/GHSA-89mq-4x47-5v83","severity":"high","message":"angular@1.5.8 (npm) is affected by GHSA-89mq-4x47-5v83","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-89mq-4x47-5v83"},{"rule_id":"osv/GHSA-fwr7-v2mv-hh25","severity":"high","message":"async@2.0.1 (npm) is affected by GHSA-fwr7-v2mv-hh25","path":"npm-shrinkwrap.json","line":null,"fingerprint":"async@2.0.1 (npm):GHSA-fwr7-v2mv-hh25"},{"rule_id":"osv/GHSA-fwr7-v2mv-hh25","severity":"high","message":"async@2.1.4 (npm) is affected by GHSA-fwr7-v2mv-hh25","path":"npm-shrinkwrap.json","line":null,"fingerprint":"async@2.1.4 (npm):GHSA-fwr7-v2mv-hh25"},{"rule_id":"osv/GHSA-27r3-jxmh-p828","severity":"high","message":"body-parser@1.15.2 (npm) is affected by GHSA-27r3-jxmh-p828","path":"npm-shrinkwrap.json","line":null,"fingerprint":"body-parser@1.15.2 (npm):GHSA-27r3-jxmh-p828"},{"rule_id":"osv/GHSA-qwcr-r2fm-qrc7","severity":"high","message":"body-parser@1.15.2 (npm) is affected by GHSA-qwcr-r2fm-qrc7","path":"npm-shrinkwrap.json","line":null,"fingerprint":"body-parser@1.15.2 (npm):GHSA-qwcr-r2fm-qrc7"},{"rule_id":"osv/GHSA-3jxr-9vmj-r5cp","severity":"high","message":"brace-expansion@1.1.6 (npm) is affected by GHSA-3jxr-9vmj-r5cp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"brace-expansion@1.1.6 (npm):GHSA-3jxr-9vmj-r5cp"},{"rule_id":"osv/GHSA-6j4f-fj2g-mc7p","severity":"high","message":"brace-expansion@1.1.6 (npm) is affected by GHSA-6j4f-fj2g-mc7p","path":"npm-shrinkwrap.json","line":null,"fingerprint":"brace-expansion@1.1.6 (npm):GHSA-6j4f-fj2g-mc7p"},{"rule_id":"osv/GHSA-832h-xg76-4gv6","severity":"high","message":"brace-expansion@1.1.6 (npm) is affected by GHSA-832h-xg76-4gv6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"brace-expansion@1.1.6 (npm):GHSA-832h-xg76-4gv6"},{"rule_id":"osv/GHSA-mh99-v99m-4gvg","severity":"high","message":"brace-expansion@1.1.6 (npm) is affected by GHSA-mh99-v99m-4gvg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"brace-expansion@1.1.6 (npm):GHSA-mh99-v99m-4gvg"},{"rule_id":"osv/GHSA-qhr7-859c-m2p7","severity":"high","message":"brace-expansion@1.1.6 (npm) is affected by GHSA-qhr7-859c-m2p7","path":"npm-shrinkwrap.json","line":null,"fingerprint":"brace-expansion@1.1.6 (npm):GHSA-qhr7-859c-m2p7"},{"rule_id":"osv/GHSA-rgw5-rvv9-x895","severity":"high","message":"brace-expansion@1.1.6 (npm) is affected by GHSA-rgw5-rvv9-x895","path":"npm-shrinkwrap.json","line":null,"fingerprint":"brace-expansion@1.1.6 (npm):GHSA-rgw5-rvv9-x895"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@0.1.5 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"braces@0.1.5 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-grv7-fg5c-xmjg","severity":"high","message":"braces@1.8.5 (npm) is affected by GHSA-grv7-fg5c-xmjg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"braces@1.8.5 (npm):GHSA-grv7-fg5c-xmjg"},{"rule_id":"osv/GHSA-x9w5-v3q2-3rhw","severity":"high","message":"browserify-sign@4.0.0 (npm) is affected by GHSA-x9w5-v3q2-3rhw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"browserify-sign@4.0.0 (npm):GHSA-x9w5-v3q2-3rhw"},{"rule_id":"osv/GHSA-73wf-gq98-2v4g","severity":"high","message":"browserslist@1.3.6 (npm) is affected by GHSA-73wf-gq98-2v4g","path":"npm-shrinkwrap.json","line":null,"fingerprint":"browserslist@1.3.6 (npm):GHSA-73wf-gq98-2v4g"},{"rule_id":"osv/GHSA-c83g-rgw3-j3cx","severity":"high","message":"browserslist@1.3.6 (npm) is affected by GHSA-c83g-rgw3-j3cx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"browserslist@1.3.6 (npm):GHSA-c83g-rgw3-j3cx"},{"rule_id":"osv/GHSA-vc2v-76pw-4v95","severity":"high","message":"compression@1.6.2 (npm) is affected by GHSA-vc2v-76pw-4v95","path":"npm-shrinkwrap.json","line":null,"fingerprint":"compression@1.6.2 (npm):GHSA-vc2v-76pw-4v95"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@3.0.1 (npm) is affected by GHSA-3xgq-45jj-v275","path":"npm-shrinkwrap.json","line":null,"fingerprint":"cross-spawn@3.0.1 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@4.0.0 (npm) is affected by GHSA-3xgq-45jj-v275","path":"npm-shrinkwrap.json","line":null,"fingerprint":"cross-spawn@4.0.0 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-3xgq-45jj-v275","severity":"high","message":"cross-spawn@4.0.2 (npm) is affected by GHSA-3xgq-45jj-v275","path":"npm-shrinkwrap.json","line":null,"fingerprint":"cross-spawn@4.0.2 (npm):GHSA-3xgq-45jj-v275"},{"rule_id":"osv/GHSA-p28h-cc7q-c4fg","severity":"high","message":"css-what@2.1.0 (npm) is affected by GHSA-p28h-cc7q-c4fg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"css-what@2.1.0 (npm):GHSA-p28h-cc7q-c4fg"},{"rule_id":"osv/GHSA-9vvw-cc9w-f27h","severity":"high","message":"debug@0.7.4 (npm) is affected by GHSA-9vvw-cc9w-f27h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"debug@0.7.4 (npm):GHSA-9vvw-cc9w-f27h"},{"rule_id":"osv/GHSA-9vvw-cc9w-f27h","severity":"high","message":"debug@2.2.0 (npm) is affected by GHSA-9vvw-cc9w-f27h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"debug@2.2.0 (npm):GHSA-9vvw-cc9w-f27h"},{"rule_id":"osv/GHSA-pm9p-9926-w68m","severity":"high","message":"ecstatic@1.4.1 (npm) is affected by GHSA-pm9p-9926-w68m","path":"npm-shrinkwrap.json","line":null,"fingerprint":"ecstatic@1.4.1 (npm):GHSA-pm9p-9926-w68m"},{"rule_id":"osv/GHSA-vh7m-p724-62c2","severity":"high","message":"elliptic@6.3.2 (npm) is affected by GHSA-vh7m-p724-62c2","path":"npm-shrinkwrap.json","line":null,"fingerprint":"elliptic@6.3.2 (npm):GHSA-vh7m-p724-62c2"},{"rule_id":"osv/GHSA-j4f2-536g-r55m","severity":"high","message":"engine.io@1.6.10 (npm) is affected by GHSA-j4f2-536g-r55m","path":"npm-shrinkwrap.json","line":null,"fingerprint":"engine.io@1.6.10 (npm):GHSA-j4f2-536g-r55m"},{"rule_id":"osv/GHSA-7pqw-9j4j-h8q3","severity":"high","message":"extract-zip@1.5.0 (npm) is affected by GHSA-7pqw-9j4j-h8q3","path":"npm-shrinkwrap.json","line":null,"fingerprint":"extract-zip@1.5.0 (npm):GHSA-7pqw-9j4j-h8q3"},{"rule_id":"osv/GHSA-jmr9-qjv8-65gv","severity":"high","message":"extract-zip@1.5.0 (npm) is affected by GHSA-jmr9-qjv8-65gv","path":"npm-shrinkwrap.json","line":null,"fingerprint":"extract-zip@1.5.0 (npm):GHSA-jmr9-qjv8-65gv"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@1.0.0-rc4 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"form-data@1.0.0-rc4 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@1.0.1 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"form-data@1.0.1 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-hmw2-7cc7-3qxx","severity":"high","message":"form-data@2.0.0 (npm) is affected by GHSA-hmw2-7cc7-3qxx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"form-data@2.0.0 (npm):GHSA-hmw2-7cc7-3qxx"},{"rule_id":"osv/GHSA-mpcf-4gmh-23w8","severity":"high","message":"forwarded@0.1.0 (npm) is affected by GHSA-mpcf-4gmh-23w8","path":"npm-shrinkwrap.json","line":null,"fingerprint":"forwarded@0.1.0 (npm):GHSA-mpcf-4gmh-23w8"},{"rule_id":"osv/GHSA-9qj9-36jm-prpv","severity":"high","message":"fresh@0.3.0 (npm) is affected by GHSA-9qj9-36jm-prpv","path":"npm-shrinkwrap.json","line":null,"fingerprint":"fresh@0.3.0 (npm):GHSA-9qj9-36jm-prpv"},{"rule_id":"osv/GHSA-xf7w-r453-m56c","severity":"high","message":"fstream@1.0.10 (npm) is affected by GHSA-xf7w-r453-m56c","path":"npm-shrinkwrap.json","line":null,"fingerprint":"fstream@1.0.10 (npm):GHSA-xf7w-r453-m56c"},{"rule_id":"osv/GHSA-2cf5-4w76-r9qv","severity":"high","message":"handlebars@4.0.5 (npm) is affected by GHSA-2cf5-4w76-r9qv","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-2cf5-4w76-r9qv"},{"rule_id":"osv/GHSA-3cqr-58rm-57f8","severity":"high","message":"handlebars@4.0.5 (npm) is affected by GHSA-3cqr-58rm-57f8","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-3cqr-58rm-57f8"},{"rule_id":"osv/GHSA-3mfm-83xf-c92r","severity":"high","message":"handlebars@4.0.5 (npm) is affected by GHSA-3mfm-83xf-c92r","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-3mfm-83xf-c92r"},{"rule_id":"osv/GHSA-62gr-4qp9-h98f","severity":"high","message":"handlebars@4.0.5 (npm) is affected by GHSA-62gr-4qp9-h98f","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-62gr-4qp9-h98f"},{"rule_id":"osv/GHSA-9cx6-37pm-9jff","severity":"high","message":"handlebars@4.0.5 (npm) is affected by GHSA-9cx6-37pm-9jff","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-9cx6-37pm-9jff"},{"rule_id":"osv/GHSA-q42p-pg8m-cqh6","severity":"high","message":"handlebars@4.0.5 (npm) is affected by GHSA-q42p-pg8m-cqh6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-q42p-pg8m-cqh6"},{"rule_id":"osv/GHSA-xhpv-hc6g-r9c6","severity":"high","message":"handlebars@4.0.5 (npm) is affected by GHSA-xhpv-hc6g-r9c6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-xhpv-hc6g-r9c6"},{"rule_id":"osv/GHSA-xjpj-3mr7-gcpf","severity":"high","message":"handlebars@4.0.5 (npm) is affected by GHSA-xjpj-3mr7-gcpf","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-xjpj-3mr7-gcpf"},{"rule_id":"osv/GHSA-44pw-h2cw-w3vq","severity":"high","message":"hawk@3.1.3 (npm) is affected by GHSA-44pw-h2cw-w3vq","path":"npm-shrinkwrap.json","line":null,"fingerprint":"hawk@3.1.3 (npm):GHSA-44pw-h2cw-w3vq"},{"rule_id":"osv/GHSA-c429-5p7v-vgjp","severity":"high","message":"hoek@2.16.3 (npm) is affected by GHSA-c429-5p7v-vgjp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"hoek@2.16.3 (npm):GHSA-c429-5p7v-vgjp"},{"rule_id":"osv/GHSA-jp4x-w63m-7wgm","severity":"high","message":"hoek@2.16.3 (npm) is affected by GHSA-jp4x-w63m-7wgm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"hoek@2.16.3 (npm):GHSA-jp4x-w63m-7wgm"},{"rule_id":"osv/GHSA-c429-5p7v-vgjp","severity":"high","message":"hoek@4.1.0 (npm) is affected by GHSA-c429-5p7v-vgjp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"hoek@4.1.0 (npm):GHSA-c429-5p7v-vgjp"},{"rule_id":"osv/GHSA-jp4x-w63m-7wgm","severity":"high","message":"hoek@4.1.0 (npm) is affected by GHSA-jp4x-w63m-7wgm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"hoek@4.1.0 (npm):GHSA-jp4x-w63m-7wgm"},{"rule_id":"osv/GHSA-pfq8-rq6v-vf5m","severity":"high","message":"html-minifier@2.1.7 (npm) is affected by GHSA-pfq8-rq6v-vf5m","path":"npm-shrinkwrap.json","line":null,"fingerprint":"html-minifier@2.1.7 (npm):GHSA-pfq8-rq6v-vf5m"},{"rule_id":"osv/GHSA-pfq8-rq6v-vf5m","severity":"high","message":"html-minifier@3.0.3 (npm) is affected by GHSA-pfq8-rq6v-vf5m","path":"npm-shrinkwrap.json","line":null,"fingerprint":"html-minifier@3.0.3 (npm):GHSA-pfq8-rq6v-vf5m"},{"rule_id":"osv/GHSA-6x33-pw7p-hmpq","severity":"high","message":"http-proxy@1.15.1 (npm) is affected by GHSA-6x33-pw7p-hmpq","path":"npm-shrinkwrap.json","line":null,"fingerprint":"http-proxy@1.15.1 (npm):GHSA-6x33-pw7p-hmpq"},{"rule_id":"osv/GHSA-6x33-pw7p-hmpq","severity":"high","message":"http-proxy@1.16.2 (npm) is affected by GHSA-6x33-pw7p-hmpq","path":"npm-shrinkwrap.json","line":null,"fingerprint":"http-proxy@1.16.2 (npm):GHSA-6x33-pw7p-hmpq"},{"rule_id":"osv/GHSA-c7qv-q95q-8v27","severity":"high","message":"http-proxy-middleware@0.17.3 (npm) is affected by GHSA-c7qv-q95q-8v27","path":"npm-shrinkwrap.json","line":null,"fingerprint":"http-proxy-middleware@0.17.3 (npm):GHSA-c7qv-q95q-8v27"},{"rule_id":"osv/GHSA-qqgx-2p2h-9c37","severity":"high","message":"ini@1.3.4 (npm) is affected by GHSA-qqgx-2p2h-9c37","path":"npm-shrinkwrap.json","line":null,"fingerprint":"ini@1.3.4 (npm):GHSA-qqgx-2p2h-9c37"},{"rule_id":"osv/GHSA-2883-xcg3-v3hh","severity":"high","message":"js-yaml@3.6.1 (npm) is affected by GHSA-2883-xcg3-v3hh","path":"npm-shrinkwrap.json","line":null,"fingerprint":"js-yaml@3.6.1 (npm):GHSA-2883-xcg3-v3hh"},{"rule_id":"osv/GHSA-52cp-r559-cp3m","severity":"high","message":"js-yaml@3.6.1 (npm) is affected by GHSA-52cp-r559-cp3m","path":"npm-shrinkwrap.json","line":null,"fingerprint":"js-yaml@3.6.1 (npm):GHSA-52cp-r559-cp3m"},{"rule_id":"osv/GHSA-5p4m-2wfm-xmqj","severity":"high","message":"js-yaml@3.6.1 (npm) is affected by GHSA-5p4m-2wfm-xmqj","path":"npm-shrinkwrap.json","line":null,"fingerprint":"js-yaml@3.6.1 (npm):GHSA-5p4m-2wfm-xmqj"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@0.4.0 (npm) is affected by GHSA-9c47-m6qq-7p4h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"json5@0.4.0 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-9c47-m6qq-7p4h","severity":"high","message":"json5@0.5.0 (npm) is affected by GHSA-9c47-m6qq-7p4h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"json5@0.5.0 (npm):GHSA-9c47-m6qq-7p4h"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@3.10.1 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@3.10.1 (npm) is affected by GHSA-p6mc-m468-83gw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.11.1 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.11.1 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.11.1 (npm) is affected by GHSA-p6mc-m468-83gw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.11.1 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.11.1 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.11.1 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.15.0 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.15.0 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.15.0 (npm) is affected by GHSA-p6mc-m468-83gw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.15.0 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.15.0 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.15.0 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.16.4 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.16.4 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.16.4 (npm) is affected by GHSA-p6mc-m468-83gw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.16.4 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.16.4 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.16.4 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.17.2 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.17.2 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.17.2 (npm) is affected by GHSA-p6mc-m468-83gw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.17.2 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.17.2 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.17.2 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-35jh-r3h4-6jhm","severity":"high","message":"lodash@4.9.0 (npm) is affected by GHSA-35jh-r3h4-6jhm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.9.0 (npm):GHSA-35jh-r3h4-6jhm"},{"rule_id":"osv/GHSA-p6mc-m468-83gw","severity":"high","message":"lodash@4.9.0 (npm) is affected by GHSA-p6mc-m468-83gw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.9.0 (npm):GHSA-p6mc-m468-83gw"},{"rule_id":"osv/GHSA-r5fr-rjxr-66jc","severity":"high","message":"lodash@4.9.0 (npm) is affected by GHSA-r5fr-rjxr-66jc","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.9.0 (npm):GHSA-r5fr-rjxr-66jc"},{"rule_id":"osv/GHSA-5v2h-r2cx-5xgj","severity":"high","message":"marked@0.3.6 (npm) is affected by GHSA-5v2h-r2cx-5xgj","path":"npm-shrinkwrap.json","line":null,"fingerprint":"marked@0.3.6 (npm):GHSA-5v2h-r2cx-5xgj"},{"rule_id":"osv/GHSA-rrrm-qjm4-v8hf","severity":"high","message":"marked@0.3.6 (npm) is affected by GHSA-rrrm-qjm4-v8hf","path":"npm-shrinkwrap.json","line":null,"fingerprint":"marked@0.3.6 (npm):GHSA-rrrm-qjm4-v8hf"},{"rule_id":"osv/GHSA-x5pg-88wf-qq4p","severity":"high","message":"marked@0.3.6 (npm) is affected by GHSA-x5pg-88wf-qq4p","path":"npm-shrinkwrap.json","line":null,"fingerprint":"marked@0.3.6 (npm):GHSA-x5pg-88wf-qq4p"},{"rule_id":"osv/GHSA-7wpw-2hjm-89gp","severity":"high","message":"merge@1.2.0 (npm) is affected by GHSA-7wpw-2hjm-89gp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"merge@1.2.0 (npm):GHSA-7wpw-2hjm-89gp"},{"rule_id":"osv/GHSA-f9cm-qmx5-m98h","severity":"high","message":"merge@1.2.0 (npm) is affected by GHSA-f9cm-qmx5-m98h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"merge@1.2.0 (npm):GHSA-f9cm-qmx5-m98h"},{"rule_id":"osv/GHSA-wrvr-8mpx-r7pp","severity":"high","message":"mime@1.2.11 (npm) is affected by GHSA-wrvr-8mpx-r7pp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"mime@1.2.11 (npm):GHSA-wrvr-8mpx-r7pp"},{"rule_id":"osv/GHSA-wrvr-8mpx-r7pp","severity":"high","message":"mime@1.3.4 (npm) is affected by GHSA-wrvr-8mpx-r7pp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"mime@1.3.4 (npm):GHSA-wrvr-8mpx-r7pp"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@2.0.10 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimatch@2.0.10 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@2.0.10 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimatch@2.0.10 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@2.0.10 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimatch@2.0.10 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-f8q6-p94x-37v3","severity":"high","message":"minimatch@2.0.10 (npm) is affected by GHSA-f8q6-p94x-37v3","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimatch@2.0.10 (npm):GHSA-f8q6-p94x-37v3"},{"rule_id":"osv/GHSA-hxm2-r34f-qmc5","severity":"high","message":"minimatch@2.0.10 (npm) is affected by GHSA-hxm2-r34f-qmc5","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimatch@2.0.10 (npm):GHSA-hxm2-r34f-qmc5"},{"rule_id":"osv/GHSA-23c5-xmqv-rm74","severity":"high","message":"minimatch@3.0.3 (npm) is affected by GHSA-23c5-xmqv-rm74","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimatch@3.0.3 (npm):GHSA-23c5-xmqv-rm74"},{"rule_id":"osv/GHSA-3ppc-4f35-3m26","severity":"high","message":"minimatch@3.0.3 (npm) is affected by GHSA-3ppc-4f35-3m26","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimatch@3.0.3 (npm):GHSA-3ppc-4f35-3m26"},{"rule_id":"osv/GHSA-7r86-cg39-jmmj","severity":"high","message":"minimatch@3.0.3 (npm) is affected by GHSA-7r86-cg39-jmmj","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimatch@3.0.3 (npm):GHSA-7r86-cg39-jmmj"},{"rule_id":"osv/GHSA-f8q6-p94x-37v3","severity":"high","message":"minimatch@3.0.3 (npm) is affected by GHSA-f8q6-p94x-37v3","path":"npm-shrinkwrap.json","line":null,"fingerprint":"minimatch@3.0.3 (npm):GHSA-f8q6-p94x-37v3"},{"rule_id":"osv/GHSA-446m-mv8f-q348","severity":"high","message":"moment@2.17.1 (npm) is affected by GHSA-446m-mv8f-q348","path":"npm-shrinkwrap.json","line":null,"fingerprint":"moment@2.17.1 (npm):GHSA-446m-mv8f-q348"},{"rule_id":"osv/GHSA-8hfj-j24r-96c4","severity":"high","message":"moment@2.17.1 (npm) is affected by GHSA-8hfj-j24r-96c4","path":"npm-shrinkwrap.json","line":null,"fingerprint":"moment@2.17.1 (npm):GHSA-8hfj-j24r-96c4"},{"rule_id":"osv/GHSA-ff6r-5jwm-8292","severity":"high","message":"no-case@2.3.0 (npm) is affected by GHSA-ff6r-5jwm-8292","path":"npm-shrinkwrap.json","line":null,"fingerprint":"no-case@2.3.0 (npm):GHSA-ff6r-5jwm-8292"},{"rule_id":"osv/GHSA-rp65-9cf3-cjxr","severity":"high","message":"nth-check@1.0.1 (npm) is affected by GHSA-rp65-9cf3-cjxr","path":"npm-shrinkwrap.json","line":null,"fingerprint":"nth-check@1.0.1 (npm):GHSA-rp65-9cf3-cjxr"},{"rule_id":"osv/GHSA-37ch-88jc-xwx2","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-37ch-88jc-xwx2, GHSA-9wv6-86v2-598j","path":"npm-shrinkwrap.json","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-37ch-88jc-xwx2"},{"rule_id":"osv/GHSA-rhx6-c78j-4q9w","severity":"high","message":"path-to-regexp@0.1.7 (npm) is affected by GHSA-rhx6-c78j-4q9w","path":"npm-shrinkwrap.json","line":null,"fingerprint":"path-to-regexp@0.1.7 (npm):GHSA-rhx6-c78j-4q9w"},{"rule_id":"osv/GHSA-6g55-p6wh-862q","severity":"high","message":"postcss@5.2.0 (npm) is affected by GHSA-6g55-p6wh-862q","path":"npm-shrinkwrap.json","line":null,"fingerprint":"postcss@5.2.0 (npm):GHSA-6g55-p6wh-862q"},{"rule_id":"osv/GHSA-r28c-9q8g-f849","severity":"high","message":"postcss@5.2.0 (npm) is affected by GHSA-r28c-9q8g-f849","path":"npm-shrinkwrap.json","line":null,"fingerprint":"postcss@5.2.0 (npm):GHSA-r28c-9q8g-f849"},{"rule_id":"osv/GHSA-gqgv-6jq5-jjj9","severity":"high","message":"qs@1.2.2 (npm) is affected by GHSA-gqgv-6jq5-jjj9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"qs@1.2.2 (npm):GHSA-gqgv-6jq5-jjj9"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@1.2.2 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"qs@1.2.2 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-gqgv-6jq5-jjj9","severity":"high","message":"qs@2.3.3 (npm) is affected by GHSA-gqgv-6jq5-jjj9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"qs@2.3.3 (npm):GHSA-gqgv-6jq5-jjj9"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@2.3.3 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"qs@2.3.3 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-gqgv-6jq5-jjj9","severity":"high","message":"qs@6.2.0 (npm) is affected by GHSA-gqgv-6jq5-jjj9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"qs@6.2.0 (npm):GHSA-gqgv-6jq5-jjj9"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.2.0 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"qs@6.2.0 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-gqgv-6jq5-jjj9","severity":"high","message":"qs@6.2.1 (npm) is affected by GHSA-gqgv-6jq5-jjj9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"qs@6.2.1 (npm):GHSA-gqgv-6jq5-jjj9"},{"rule_id":"osv/GHSA-hrpp-h998-j3pp","severity":"high","message":"qs@6.2.1 (npm) is affected by GHSA-hrpp-h998-j3pp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"qs@6.2.1 (npm):GHSA-hrpp-h998-j3pp"},{"rule_id":"osv/GHSA-r2j6-p67h-q639","severity":"high","message":"semantic-release@4.3.5 (npm) is affected by GHSA-r2j6-p67h-q639","path":"npm-shrinkwrap.json","line":null,"fingerprint":"semantic-release@4.3.5 (npm):GHSA-r2j6-p67h-q639"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@4.3.6 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"semver@4.3.6 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.0.3 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"semver@5.0.3 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-c2qf-rxjj-qqgw","severity":"high","message":"semver@5.3.0 (npm) is affected by GHSA-c2qf-rxjj-qqgw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"semver@5.3.0 (npm):GHSA-c2qf-rxjj-qqgw"},{"rule_id":"osv/GHSA-44c6-4v22-4mhx","severity":"high","message":"semver-regex@1.0.0 (npm) is affected by GHSA-44c6-4v22-4mhx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"semver-regex@1.0.0 (npm):GHSA-44c6-4v22-4mhx"},{"rule_id":"osv/GHSA-395f-4hp3-45gv","severity":"high","message":"shell-quote@1.6.1 (npm) is affected by GHSA-395f-4hp3-45gv","path":"npm-shrinkwrap.json","line":null,"fingerprint":"shell-quote@1.6.1 (npm):GHSA-395f-4hp3-45gv"},{"rule_id":"osv/GHSA-4rq4-32rv-6wp6","severity":"high","message":"shelljs@0.5.3 (npm) is affected by GHSA-4rq4-32rv-6wp6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"shelljs@0.5.3 (npm):GHSA-4rq4-32rv-6wp6"},{"rule_id":"osv/GHSA-4rq4-32rv-6wp6","severity":"high","message":"shelljs@0.7.0 (npm) is affected by GHSA-4rq4-32rv-6wp6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"shelljs@0.7.0 (npm):GHSA-4rq4-32rv-6wp6"},{"rule_id":"osv/GHSA-4rq4-32rv-6wp6","severity":"high","message":"shelljs@0.7.4 (npm) is affected by GHSA-4rq4-32rv-6wp6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"shelljs@0.7.4 (npm):GHSA-4rq4-32rv-6wp6"},{"rule_id":"osv/GHSA-25hc-qcg6-38wj","severity":"high","message":"socket.io@1.4.7 (npm) is affected by GHSA-25hc-qcg6-38wj","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io@1.4.7 (npm):GHSA-25hc-qcg6-38wj"},{"rule_id":"osv/GHSA-2m8v-j782-fhvr","severity":"high","message":"socket.io-parser@2.2.2 (npm) is affected by GHSA-2m8v-j782-fhvr","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.2 (npm):GHSA-2m8v-j782-fhvr"},{"rule_id":"osv/GHSA-677m-j7p3-52f9","severity":"high","message":"socket.io-parser@2.2.2 (npm) is affected by GHSA-677m-j7p3-52f9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.2 (npm):GHSA-677m-j7p3-52f9"},{"rule_id":"osv/GHSA-cqmj-92xf-r6r9","severity":"high","message":"socket.io-parser@2.2.2 (npm) is affected by GHSA-cqmj-92xf-r6r9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.2 (npm):GHSA-cqmj-92xf-r6r9"},{"rule_id":"osv/GHSA-xfhh-g9f5-x4m4","severity":"high","message":"socket.io-parser@2.2.2 (npm) is affected by GHSA-xfhh-g9f5-x4m4","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.2 (npm):GHSA-xfhh-g9f5-x4m4"},{"rule_id":"osv/GHSA-2m8v-j782-fhvr","severity":"high","message":"socket.io-parser@2.2.6 (npm) is affected by GHSA-2m8v-j782-fhvr","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.6 (npm):GHSA-2m8v-j782-fhvr"},{"rule_id":"osv/GHSA-677m-j7p3-52f9","severity":"high","message":"socket.io-parser@2.2.6 (npm) is affected by GHSA-677m-j7p3-52f9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.6 (npm):GHSA-677m-j7p3-52f9"},{"rule_id":"osv/GHSA-cqmj-92xf-r6r9","severity":"high","message":"socket.io-parser@2.2.6 (npm) is affected by GHSA-cqmj-92xf-r6r9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.6 (npm):GHSA-cqmj-92xf-r6r9"},{"rule_id":"osv/GHSA-xfhh-g9f5-x4m4","severity":"high","message":"socket.io-parser@2.2.6 (npm) is affected by GHSA-xfhh-g9f5-x4m4","path":"npm-shrinkwrap.json","line":null,"fingerprint":"socket.io-parser@2.2.6 (npm):GHSA-xfhh-g9f5-x4m4"},{"rule_id":"osv/GHSA-2m39-62fm-q8r3","severity":"high","message":"sshpk@1.10.0 (npm) is affected by GHSA-2m39-62fm-q8r3","path":"npm-shrinkwrap.json","line":null,"fingerprint":"sshpk@1.10.0 (npm):GHSA-2m39-62fm-q8r3"},{"rule_id":"osv/GHSA-2m39-62fm-q8r3","severity":"high","message":"sshpk@1.8.3 (npm) is affected by GHSA-2m39-62fm-q8r3","path":"npm-shrinkwrap.json","line":null,"fingerprint":"sshpk@1.8.3 (npm):GHSA-2m39-62fm-q8r3"},{"rule_id":"osv/GHSA-34x7-hfp2-rc4v","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-34x7-hfp2-rc4v","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-34x7-hfp2-rc4v"},{"rule_id":"osv/GHSA-3jfq-g458-7qm9","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-3jfq-g458-7qm9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-3jfq-g458-7qm9"},{"rule_id":"osv/GHSA-5955-9wpr-37jh","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-5955-9wpr-37jh","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-5955-9wpr-37jh"},{"rule_id":"osv/GHSA-83g3-92jg-28cx","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-83g3-92jg-28cx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-83g3-92jg-28cx"},{"rule_id":"osv/GHSA-8qq5-rm4j-mr97","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-8qq5-rm4j-mr97","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-8qq5-rm4j-mr97"},{"rule_id":"osv/GHSA-8x88-c5mf-7j5w","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-8x88-c5mf-7j5w","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-8x88-c5mf-7j5w"},{"rule_id":"osv/GHSA-9ppj-qmqm-q256","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-9ppj-qmqm-q256","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-9ppj-qmqm-q256"},{"rule_id":"osv/GHSA-j44m-qm6p-hp7m","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-j44m-qm6p-hp7m","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-j44m-qm6p-hp7m"},{"rule_id":"osv/GHSA-qffp-2rhf-9h96","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-qffp-2rhf-9h96","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-qffp-2rhf-9h96"},{"rule_id":"osv/GHSA-r292-9mhp-454m","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-r292-9mhp-454m","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-r292-9mhp-454m"},{"rule_id":"osv/GHSA-r6q2-hw4h-h46w","severity":"high","message":"tar@2.2.1 (npm) is affected by GHSA-r6q2-hw4h-h46w","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tar@2.2.1 (npm):GHSA-r6q2-hw4h-h46w"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.24 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tmp@0.0.24 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-ph9p-34f9-6g65","severity":"high","message":"tmp@0.0.28 (npm) is affected by GHSA-ph9p-34f9-6g65","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tmp@0.0.28 (npm):GHSA-ph9p-34f9-6g65"},{"rule_id":"osv/GHSA-g7q5-pjjr-gqvp","severity":"high","message":"tough-cookie@2.2.2 (npm) is affected by GHSA-g7q5-pjjr-gqvp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tough-cookie@2.2.2 (npm):GHSA-g7q5-pjjr-gqvp"},{"rule_id":"osv/GHSA-g7q5-pjjr-gqvp","severity":"high","message":"tough-cookie@2.3.0 (npm) is affected by GHSA-g7q5-pjjr-gqvp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tough-cookie@2.3.0 (npm):GHSA-g7q5-pjjr-gqvp"},{"rule_id":"osv/GHSA-g7q5-pjjr-gqvp","severity":"high","message":"tough-cookie@2.3.1 (npm) is affected by GHSA-g7q5-pjjr-gqvp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"tough-cookie@2.3.1 (npm):GHSA-g7q5-pjjr-gqvp"},{"rule_id":"osv/GHSA-7p7h-4mm5-852v","severity":"high","message":"trim-newlines@1.0.0 (npm) is affected by GHSA-7p7h-4mm5-852v","path":"npm-shrinkwrap.json","line":null,"fingerprint":"trim-newlines@1.0.0 (npm):GHSA-7p7h-4mm5-852v"},{"rule_id":"osv/GHSA-mgfv-m47x-4wqp","severity":"high","message":"useragent@2.1.9 (npm) is affected by GHSA-mgfv-m47x-4wqp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"useragent@2.1.9 (npm):GHSA-mgfv-m47x-4wqp"},{"rule_id":"osv/GHSA-w5hq-g745-h8pq","severity":"high","message":"uuid@2.0.2 (npm) is affected by GHSA-w5hq-g745-h8pq","path":"npm-shrinkwrap.json","line":null,"fingerprint":"uuid@2.0.2 (npm):GHSA-w5hq-g745-h8pq"},{"rule_id":"osv/GHSA-g84c-rxfj-3j2c","severity":"high","message":"webpack-dev-middleware@1.7.0 (npm) is affected by GHSA-g84c-rxfj-3j2c","path":"npm-shrinkwrap.json","line":null,"fingerprint":"webpack-dev-middleware@1.7.0 (npm):GHSA-g84c-rxfj-3j2c"},{"rule_id":"osv/GHSA-wr3j-pwj9-hqq6","severity":"high","message":"webpack-dev-middleware@1.7.0 (npm) is affected by GHSA-wr3j-pwj9-hqq6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"webpack-dev-middleware@1.7.0 (npm):GHSA-wr3j-pwj9-hqq6"},{"rule_id":"osv/GHSA-g84c-rxfj-3j2c","severity":"high","message":"webpack-dev-middleware@1.9.0 (npm) is affected by GHSA-g84c-rxfj-3j2c","path":"npm-shrinkwrap.json","line":null,"fingerprint":"webpack-dev-middleware@1.9.0 (npm):GHSA-g84c-rxfj-3j2c"},{"rule_id":"osv/GHSA-wr3j-pwj9-hqq6","severity":"high","message":"webpack-dev-middleware@1.9.0 (npm) is affected by GHSA-wr3j-pwj9-hqq6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"webpack-dev-middleware@1.9.0 (npm):GHSA-wr3j-pwj9-hqq6"},{"rule_id":"osv/GHSA-cf66-xwfp-gvc4","severity":"high","message":"webpack-dev-server@2.2.0-rc.0 (npm) is affected by GHSA-cf66-xwfp-gvc4","path":"npm-shrinkwrap.json","line":null,"fingerprint":"webpack-dev-server@2.2.0-rc.0 (npm):GHSA-cf66-xwfp-gvc4"},{"rule_id":"osv/GHSA-g78m-2chm-r7qv","severity":"high","message":"websocket-extensions@0.1.1 (npm) is affected by GHSA-g78m-2chm-r7qv","path":"npm-shrinkwrap.json","line":null,"fingerprint":"websocket-extensions@0.1.1 (npm):GHSA-g78m-2chm-r7qv"},{"rule_id":"osv/GHSA-5v72-xg48-5rpm","severity":"high","message":"ws@1.0.1 (npm) is affected by GHSA-5v72-xg48-5rpm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"ws@1.0.1 (npm):GHSA-5v72-xg48-5rpm"},{"rule_id":"osv/GHSA-c4w7-xm78-47vh","severity":"high","message":"y18n@3.2.1 (npm) is affected by GHSA-c4w7-xm78-47vh","path":"npm-shrinkwrap.json","line":null,"fingerprint":"y18n@3.2.1 (npm):GHSA-c4w7-xm78-47vh"},{"rule_id":"osv/GHSA-3v6h-hqm4-2rg6","severity":"medium","message":"adm-zip@0.4.4 (npm) is affected by GHSA-3v6h-hqm4-2rg6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.4 (npm):GHSA-3v6h-hqm4-2rg6"},{"rule_id":"osv/GHSA-c6fg-446q-cg94","severity":"medium","message":"adm-zip@0.4.4 (npm) is affected by GHSA-c6fg-446q-cg94","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.4 (npm):GHSA-c6fg-446q-cg94"},{"rule_id":"osv/GHSA-p634-w6r4-rjp2","severity":"medium","message":"adm-zip@0.4.4 (npm) is affected by GHSA-p634-w6r4-rjp2","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.4 (npm):GHSA-p634-w6r4-rjp2"},{"rule_id":"osv/GHSA-3v6h-hqm4-2rg6","severity":"medium","message":"adm-zip@0.4.7 (npm) is affected by GHSA-3v6h-hqm4-2rg6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.7 (npm):GHSA-3v6h-hqm4-2rg6"},{"rule_id":"osv/GHSA-c6fg-446q-cg94","severity":"medium","message":"adm-zip@0.4.7 (npm) is affected by GHSA-c6fg-446q-cg94","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.7 (npm):GHSA-c6fg-446q-cg94"},{"rule_id":"osv/GHSA-p634-w6r4-rjp2","severity":"medium","message":"adm-zip@0.4.7 (npm) is affected by GHSA-p634-w6r4-rjp2","path":"npm-shrinkwrap.json","line":null,"fingerprint":"adm-zip@0.4.7 (npm):GHSA-p634-w6r4-rjp2"},{"rule_id":"osv/GHSA-2g4f-4pwh-qvx6","severity":"medium","message":"ajv@4.10.0 (npm) is affected by GHSA-2g4f-4pwh-qvx6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"ajv@4.10.0 (npm):GHSA-2g4f-4pwh-qvx6"},{"rule_id":"osv/GHSA-v88g-cgmw-v5xw","severity":"medium","message":"ajv@4.10.0 (npm) is affected by GHSA-v88g-cgmw-v5xw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"ajv@4.10.0 (npm):GHSA-v88g-cgmw-v5xw"},{"rule_id":"osv/GHSA-28hp-fgcr-2r4h","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-28hp-fgcr-2r4h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-28hp-fgcr-2r4h"},{"rule_id":"osv/GHSA-2qqx-w9hr-q5gx","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-2qqx-w9hr-q5gx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-2qqx-w9hr-q5gx"},{"rule_id":"osv/GHSA-2vrf-hf26-jrp5","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-2vrf-hf26-jrp5","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-2vrf-hf26-jrp5"},{"rule_id":"osv/GHSA-5cp4-xmrw-59wf","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-5cp4-xmrw-59wf","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-5cp4-xmrw-59wf"},{"rule_id":"osv/GHSA-j58c-ww9w-pwp5","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-j58c-ww9w-pwp5","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-j58c-ww9w-pwp5"},{"rule_id":"osv/GHSA-m9gf-397r-hwpg","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-m9gf-397r-hwpg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-m9gf-397r-hwpg"},{"rule_id":"osv/GHSA-mhp6-pxh8-r675","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-mhp6-pxh8-r675","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-mhp6-pxh8-r675"},{"rule_id":"osv/GHSA-mqm9-c95h-x2p6","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-mqm9-c95h-x2p6","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-mqm9-c95h-x2p6"},{"rule_id":"osv/GHSA-prc3-vjfx-vhm9","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-prc3-vjfx-vhm9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-prc3-vjfx-vhm9"},{"rule_id":"osv/GHSA-qwqh-hm9m-p5hr","severity":"medium","message":"angular@1.5.8 (npm) is affected by GHSA-qwqh-hm9m-p5hr","path":"npm-shrinkwrap.json","line":null,"fingerprint":"angular@1.5.8 (npm):GHSA-qwqh-hm9m-p5hr"},{"rule_id":"osv/GHSA-pp7h-53gx-mx7r","severity":"medium","message":"bl@1.1.2 (npm) is affected by GHSA-pp7h-53gx-mx7r","path":"npm-shrinkwrap.json","line":null,"fingerprint":"bl@1.1.2 (npm):GHSA-pp7h-53gx-mx7r"},{"rule_id":"osv/GHSA-378v-28hj-76wf","severity":"medium","message":"bn.js@4.11.6 (npm) is affected by GHSA-378v-28hj-76wf","path":"npm-shrinkwrap.json","line":null,"fingerprint":"bn.js@4.11.6 (npm):GHSA-378v-28hj-76wf"},{"rule_id":"osv/GHSA-f886-m6hf-6m8v","severity":"medium","message":"brace-expansion@1.1.6 (npm) is affected by GHSA-f886-m6hf-6m8v","path":"npm-shrinkwrap.json","line":null,"fingerprint":"brace-expansion@1.1.6 (npm):GHSA-f886-m6hf-6m8v"},{"rule_id":"osv/GHSA-q2hr-2g5m-vwhr","severity":"medium","message":"brace-expansion@1.1.6 (npm) is affected by GHSA-q2hr-2g5m-vwhr","path":"npm-shrinkwrap.json","line":null,"fingerprint":"brace-expansion@1.1.6 (npm):GHSA-q2hr-2g5m-vwhr"},{"rule_id":"osv/GHSA-wxhq-pm8v-cw75","severity":"medium","message":"clean-css@3.4.19 (npm) is affected by GHSA-wxhq-pm8v-cw75","path":"npm-shrinkwrap.json","line":null,"fingerprint":"clean-css@3.4.19 (npm):GHSA-wxhq-pm8v-cw75"},{"rule_id":"osv/GHSA-257v-vj4p-3w2h","severity":"medium","message":"color-string@0.3.0 (npm) is affected by GHSA-257v-vj4p-3w2h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"color-string@0.3.0 (npm):GHSA-257v-vj4p-3w2h"},{"rule_id":"osv/GHSA-g74r-ffvr-5q9f","severity":"medium","message":"concat-stream@1.5.0 (npm) is affected by GHSA-g74r-ffvr-5q9f","path":"npm-shrinkwrap.json","line":null,"fingerprint":"concat-stream@1.5.0 (npm):GHSA-g74r-ffvr-5q9f"},{"rule_id":"osv/GHSA-pxg6-pf52-xh8x","severity":"medium","message":"cookie@0.3.1 (npm) is affected by GHSA-pxg6-pf52-xh8x","path":"npm-shrinkwrap.json","line":null,"fingerprint":"cookie@0.3.1 (npm):GHSA-pxg6-pf52-xh8x"},{"rule_id":"osv/GHSA-h6ch-v84p-w6p9","severity":"medium","message":"diff@1.4.0 (npm) is affected by GHSA-h6ch-v84p-w6p9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"diff@1.4.0 (npm):GHSA-h6ch-v84p-w6p9"},{"rule_id":"osv/GHSA-h6ch-v84p-w6p9","severity":"medium","message":"diff@2.2.3 (npm) is affected by GHSA-h6ch-v84p-w6p9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"diff@2.2.3 (npm):GHSA-h6ch-v84p-w6p9"},{"rule_id":"osv/GHSA-9q64-mpxx-87fg","severity":"medium","message":"ecstatic@1.4.1 (npm) is affected by GHSA-9q64-mpxx-87fg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"ecstatic@1.4.1 (npm):GHSA-9q64-mpxx-87fg"},{"rule_id":"osv/GHSA-jc84-3g44-wf2q","severity":"medium","message":"ecstatic@1.4.1 (npm) is affected by GHSA-jc84-3g44-wf2q","path":"npm-shrinkwrap.json","line":null,"fingerprint":"ecstatic@1.4.1 (npm):GHSA-jc84-3g44-wf2q"},{"rule_id":"osv/GHSA-434g-2637-qmqr","severity":"medium","message":"elliptic@6.3.2 (npm) is affected by GHSA-434g-2637-qmqr","path":"npm-shrinkwrap.json","line":null,"fingerprint":"elliptic@6.3.2 (npm):GHSA-434g-2637-qmqr"},{"rule_id":"osv/GHSA-49q7-c7j4-3p7m","severity":"medium","message":"elliptic@6.3.2 (npm) is affected by GHSA-49q7-c7j4-3p7m","path":"npm-shrinkwrap.json","line":null,"fingerprint":"elliptic@6.3.2 (npm):GHSA-49q7-c7j4-3p7m"},{"rule_id":"osv/GHSA-848j-6mx2-7j84","severity":"medium","message":"elliptic@6.3.2 (npm) is affected by GHSA-848j-6mx2-7j84","path":"npm-shrinkwrap.json","line":null,"fingerprint":"elliptic@6.3.2 (npm):GHSA-848j-6mx2-7j84"},{"rule_id":"osv/GHSA-977x-g7h5-7qgw","severity":"medium","message":"elliptic@6.3.2 (npm) is affected by GHSA-977x-g7h5-7qgw","path":"npm-shrinkwrap.json","line":null,"fingerprint":"elliptic@6.3.2 (npm):GHSA-977x-g7h5-7qgw"},{"rule_id":"osv/GHSA-f7q4-pwc6-w24p","severity":"medium","message":"elliptic@6.3.2 (npm) is affected by GHSA-f7q4-pwc6-w24p","path":"npm-shrinkwrap.json","line":null,"fingerprint":"elliptic@6.3.2 (npm):GHSA-f7q4-pwc6-w24p"},{"rule_id":"osv/GHSA-fc9h-whq2-v747","severity":"medium","message":"elliptic@6.3.2 (npm) is affected by GHSA-fc9h-whq2-v747","path":"npm-shrinkwrap.json","line":null,"fingerprint":"elliptic@6.3.2 (npm):GHSA-fc9h-whq2-v747"},{"rule_id":"osv/GHSA-r9p9-mrjm-926w","severity":"medium","message":"elliptic@6.3.2 (npm) is affected by GHSA-r9p9-mrjm-926w","path":"npm-shrinkwrap.json","line":null,"fingerprint":"elliptic@6.3.2 (npm):GHSA-r9p9-mrjm-926w"},{"rule_id":"osv/GHSA-r7qp-cfhv-p84w","severity":"medium","message":"engine.io@1.6.10 (npm) is affected by GHSA-r7qp-cfhv-p84w","path":"npm-shrinkwrap.json","line":null,"fingerprint":"engine.io@1.6.10 (npm):GHSA-r7qp-cfhv-p84w"},{"rule_id":"osv/GHSA-4gmj-3p3h-gm8h","severity":"medium","message":"es5-ext@0.10.12 (npm) is affected by GHSA-4gmj-3p3h-gm8h","path":"npm-shrinkwrap.json","line":null,"fingerprint":"es5-ext@0.10.12 (npm):GHSA-4gmj-3p3h-gm8h"},{"rule_id":"osv/GHSA-qw6h-vgh9-j6wx","severity":"medium","message":"express@4.14.0 (npm) is affected by GHSA-qw6h-vgh9-j6wx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"express@4.14.0 (npm):GHSA-qw6h-vgh9-j6wx"},{"rule_id":"osv/GHSA-rv95-896h-c2vc","severity":"medium","message":"express@4.14.0 (npm) is affected by GHSA-rv95-896h-c2vc","path":"npm-shrinkwrap.json","line":null,"fingerprint":"express@4.14.0 (npm):GHSA-rv95-896h-c2vc"},{"rule_id":"osv/GHSA-qrmc-fj45-qfc2","severity":"medium","message":"extend@3.0.0 (npm) is affected by GHSA-qrmc-fj45-qfc2","path":"npm-shrinkwrap.json","line":null,"fingerprint":"extend@3.0.0 (npm):GHSA-qrmc-fj45-qfc2"},{"rule_id":"osv/GHSA-2qvq-rjwj-gvw9","severity":"medium","message":"handlebars@4.0.5 (npm) is affected by GHSA-2qvq-rjwj-gvw9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-2qvq-rjwj-gvw9"},{"rule_id":"osv/GHSA-f52g-6jhx-586p","severity":"medium","message":"handlebars@4.0.5 (npm) is affected by GHSA-f52g-6jhx-586p","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-f52g-6jhx-586p"},{"rule_id":"osv/GHSA-g9r4-xpmj-mj65","severity":"medium","message":"handlebars@4.0.5 (npm) is affected by GHSA-g9r4-xpmj-mj65","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-g9r4-xpmj-mj65"},{"rule_id":"osv/GHSA-q2c6-c6pm-g3gh","severity":"medium","message":"handlebars@4.0.5 (npm) is affected by GHSA-q2c6-c6pm-g3gh","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-q2c6-c6pm-g3gh"},{"rule_id":"osv/GHSA-xw65-4hp5-5hc7","severity":"medium","message":"handlebars@4.0.5 (npm) is affected by GHSA-xw65-4hp5-5hc7","path":"npm-shrinkwrap.json","line":null,"fingerprint":"handlebars@4.0.5 (npm):GHSA-xw65-4hp5-5hc7"},{"rule_id":"osv/GHSA-7wwv-vh3v-89cq","severity":"medium","message":"highlight.js@9.9.0 (npm) is affected by GHSA-7wwv-vh3v-89cq","path":"npm-shrinkwrap.json","line":null,"fingerprint":"highlight.js@9.9.0 (npm):GHSA-7wwv-vh3v-89cq"},{"rule_id":"osv/GHSA-vfrc-7r7c-w9mx","severity":"medium","message":"highlight.js@9.9.0 (npm) is affected by GHSA-vfrc-7r7c-w9mx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"highlight.js@9.9.0 (npm):GHSA-vfrc-7r7c-w9mx"},{"rule_id":"osv/GHSA-43f8-2h32-f4cj","severity":"medium","message":"hosted-git-info@2.1.5 (npm) is affected by GHSA-43f8-2h32-f4cj","path":"npm-shrinkwrap.json","line":null,"fingerprint":"hosted-git-info@2.1.5 (npm):GHSA-43f8-2h32-f4cj"},{"rule_id":"osv/GHSA-64mm-vxmg-q3vj","severity":"medium","message":"http-proxy-middleware@0.17.3 (npm) is affected by GHSA-64mm-vxmg-q3vj","path":"npm-shrinkwrap.json","line":null,"fingerprint":"http-proxy-middleware@0.17.3 (npm):GHSA-64mm-vxmg-q3vj"},{"rule_id":"osv/GHSA-pc5p-h8pf-mvwp","severity":"medium","message":"https-proxy-agent@1.0.0 (npm) is affected by GHSA-pc5p-h8pf-mvwp","path":"npm-shrinkwrap.json","line":null,"fingerprint":"https-proxy-agent@1.0.0 (npm):GHSA-pc5p-h8pf-mvwp"},{"rule_id":"osv/GHSA-4hpf-3wq7-5rpr","severity":"medium","message":"is-my-json-valid@2.13.1 (npm) is affected by GHSA-4hpf-3wq7-5rpr","path":"npm-shrinkwrap.json","line":null,"fingerprint":"is-my-json-valid@2.13.1 (npm):GHSA-4hpf-3wq7-5rpr"},{"rule_id":"osv/GHSA-q7cg-457f-vx79","severity":"medium","message":"joi@9.0.0-0 (npm) is affected by GHSA-q7cg-457f-vx79","path":"npm-shrinkwrap.json","line":null,"fingerprint":"joi@9.0.0-0 (npm):GHSA-q7cg-457f-vx79"},{"rule_id":"osv/GHSA-wr44-6hxh-3jwq","severity":"medium","message":"joi@9.0.0-0 (npm) is affected by GHSA-wr44-6hxh-3jwq","path":"npm-shrinkwrap.json","line":null,"fingerprint":"joi@9.0.0-0 (npm):GHSA-wr44-6hxh-3jwq"},{"rule_id":"osv/GHSA-2pr6-76vf-7546","severity":"medium","message":"js-yaml@3.6.1 (npm) is affected by GHSA-2pr6-76vf-7546","path":"npm-shrinkwrap.json","line":null,"fingerprint":"js-yaml@3.6.1 (npm):GHSA-2pr6-76vf-7546"},{"rule_id":"osv/GHSA-8j8c-7jfh-h6hx","severity":"medium","message":"js-yaml@3.6.1 (npm) is affected by GHSA-8j8c-7jfh-h6hx","path":"npm-shrinkwrap.json","line":null,"fingerprint":"js-yaml@3.6.1 (npm):GHSA-8j8c-7jfh-h6hx"},{"rule_id":"osv/GHSA-h67p-54hq-rp68","severity":"medium","message":"js-yaml@3.6.1 (npm) is affected by GHSA-h67p-54hq-rp68","path":"npm-shrinkwrap.json","line":null,"fingerprint":"js-yaml@3.6.1 (npm):GHSA-h67p-54hq-rp68"},{"rule_id":"osv/GHSA-mh29-5h37-fv8m","severity":"medium","message":"js-yaml@3.6.1 (npm) is affected by GHSA-mh29-5h37-fv8m","path":"npm-shrinkwrap.json","line":null,"fingerprint":"js-yaml@3.6.1 (npm):GHSA-mh29-5h37-fv8m"},{"rule_id":"osv/GHSA-282f-qqgm-c34q","severity":"medium","message":"jsonpointer@2.0.0 (npm) is affected by GHSA-282f-qqgm-c34q","path":"npm-shrinkwrap.json","line":null,"fingerprint":"jsonpointer@2.0.0 (npm):GHSA-282f-qqgm-c34q"},{"rule_id":"osv/GHSA-7x7c-qm48-pq9c","severity":"medium","message":"karma@1.1.2 (npm) is affected by GHSA-7x7c-qm48-pq9c","path":"npm-shrinkwrap.json","line":null,"fingerprint":"karma@1.1.2 (npm):GHSA-7x7c-qm48-pq9c"},{"rule_id":"osv/GHSA-rc3x-jf5g-xvc5","severity":"medium","message":"karma@1.1.2 (npm) is affected by GHSA-rc3x-jf5g-xvc5","path":"npm-shrinkwrap.json","line":null,"fingerprint":"karma@1.1.2 (npm):GHSA-rc3x-jf5g-xvc5"},{"rule_id":"osv/GHSA-4xc9-xhrj-v574","severity":"medium","message":"lodash@3.10.1 (npm) is affected by GHSA-4xc9-xhrj-v574","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-4xc9-xhrj-v574"},{"rule_id":"osv/GHSA-fvqr-27wr-82fm","severity":"medium","message":"lodash@3.10.1 (npm) is affected by GHSA-fvqr-27wr-82fm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@3.10.1 (npm):GHSA-fvqr-27wr-82fm"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.11.1 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.11.1 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-4xc9-xhrj-v574","severity":"medium","message":"lodash@4.11.1 (npm) is affected by GHSA-4xc9-xhrj-v574","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.11.1 (npm):GHSA-4xc9-xhrj-v574"},{"rule_id":"osv/GHSA-fvqr-27wr-82fm","severity":"medium","message":"lodash@4.11.1 (npm) is affected by GHSA-fvqr-27wr-82fm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.11.1 (npm):GHSA-fvqr-27wr-82fm"},{"rule_id":"osv/GHSA-x5rq-j2xg-h7qm","severity":"medium","message":"lodash@4.11.1 (npm) is affected by GHSA-x5rq-j2xg-h7qm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.11.1 (npm):GHSA-x5rq-j2xg-h7qm"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.11.1 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.11.1 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.15.0 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.15.0 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-4xc9-xhrj-v574","severity":"medium","message":"lodash@4.15.0 (npm) is affected by GHSA-4xc9-xhrj-v574","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.15.0 (npm):GHSA-4xc9-xhrj-v574"},{"rule_id":"osv/GHSA-fvqr-27wr-82fm","severity":"medium","message":"lodash@4.15.0 (npm) is affected by GHSA-fvqr-27wr-82fm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.15.0 (npm):GHSA-fvqr-27wr-82fm"},{"rule_id":"osv/GHSA-x5rq-j2xg-h7qm","severity":"medium","message":"lodash@4.15.0 (npm) is affected by GHSA-x5rq-j2xg-h7qm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.15.0 (npm):GHSA-x5rq-j2xg-h7qm"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.15.0 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.15.0 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.16.4 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.16.4 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-4xc9-xhrj-v574","severity":"medium","message":"lodash@4.16.4 (npm) is affected by GHSA-4xc9-xhrj-v574","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.16.4 (npm):GHSA-4xc9-xhrj-v574"},{"rule_id":"osv/GHSA-fvqr-27wr-82fm","severity":"medium","message":"lodash@4.16.4 (npm) is affected by GHSA-fvqr-27wr-82fm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.16.4 (npm):GHSA-fvqr-27wr-82fm"},{"rule_id":"osv/GHSA-x5rq-j2xg-h7qm","severity":"medium","message":"lodash@4.16.4 (npm) is affected by GHSA-x5rq-j2xg-h7qm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.16.4 (npm):GHSA-x5rq-j2xg-h7qm"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.16.4 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.16.4 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.17.2 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.17.2 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-4xc9-xhrj-v574","severity":"medium","message":"lodash@4.17.2 (npm) is affected by GHSA-4xc9-xhrj-v574","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.17.2 (npm):GHSA-4xc9-xhrj-v574"},{"rule_id":"osv/GHSA-fvqr-27wr-82fm","severity":"medium","message":"lodash@4.17.2 (npm) is affected by GHSA-fvqr-27wr-82fm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.17.2 (npm):GHSA-fvqr-27wr-82fm"},{"rule_id":"osv/GHSA-x5rq-j2xg-h7qm","severity":"medium","message":"lodash@4.17.2 (npm) is affected by GHSA-x5rq-j2xg-h7qm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.17.2 (npm):GHSA-x5rq-j2xg-h7qm"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.17.2 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.17.2 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-29mw-wpgm-hmr9","severity":"medium","message":"lodash@4.9.0 (npm) is affected by GHSA-29mw-wpgm-hmr9","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.9.0 (npm):GHSA-29mw-wpgm-hmr9"},{"rule_id":"osv/GHSA-4xc9-xhrj-v574","severity":"medium","message":"lodash@4.9.0 (npm) is affected by GHSA-4xc9-xhrj-v574","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.9.0 (npm):GHSA-4xc9-xhrj-v574"},{"rule_id":"osv/GHSA-fvqr-27wr-82fm","severity":"medium","message":"lodash@4.9.0 (npm) is affected by GHSA-fvqr-27wr-82fm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.9.0 (npm):GHSA-fvqr-27wr-82fm"},{"rule_id":"osv/GHSA-x5rq-j2xg-h7qm","severity":"medium","message":"lodash@4.9.0 (npm) is affected by GHSA-x5rq-j2xg-h7qm","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.9.0 (npm):GHSA-x5rq-j2xg-h7qm"},{"rule_id":"osv/GHSA-xxjr-mmjv-4gpg","severity":"medium","message":"lodash@4.9.0 (npm) is affected by GHSA-xxjr-mmjv-4gpg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash@4.9.0 (npm):GHSA-xxjr-mmjv-4gpg"},{"rule_id":"osv/GHSA-5947-m4fg-xhqg","severity":"medium","message":"lodash.mergewith@4.6.0 (npm) is affected by GHSA-5947-m4fg-xhqg","path":"npm-shrinkwrap.json","line":null,"fingerprint":"lodash.mergewith@4.6.0 (npm):GHSA-5947-m4fg-xhqg"}],"evidence":[],"data":{"ecosystems":["npm"]},"error":null},{"analyzer":"sec-actions","pillar":"security","status":"skipped","tool_version":null,"metrics":{},"findings":[],"evidence":[],"data":{},"error":null},{"analyzer":"sec-posture","pillar":"security","status":"ok","tool_version":null,"metrics":{"check:security_policy":0.0,"check:dependency_updates":0.0,"check:signed_commits":0.0,"check:lockfiles":0.0,"signed_commit_share":0.0,"unpinned_manifests":4.0},"findings":[],"evidence":[{"kind":"posture","description":"demo-apps/es5/package.json has no lockfile alongside it (unpinned dependencies)","ref":"demo-apps/es5/package.json","url":null,"weight":0.3},{"kind":"posture","description":"demo-apps/es6-systemjs/package.json has no lockfile alongside it (unpinned dependencies)","ref":"demo-apps/es6-systemjs/package.json","url":null,"weight":0.3},{"kind":"posture","description":"demo-apps/es6-webpack/package.json has no lockfile alongside it (unpinned dependencies)","ref":"demo-apps/es6-webpack/package.json","url":null,"weight":0.3},{"kind":"posture","description":"demo-apps/ts-webpack/package.json has no lockfile alongside it (unpinned dependencies)","ref":"demo-apps/ts-webpack/package.json","url":null,"weight":0.3}],"data":{},"error":null},{"analyzer":"sec-distribution","pillar":"security","status":"ok","tool_version":null,"metrics":{"signals":0.0,"binary_assets":0.0,"suspicious":0.0},"findings":[],"evidence":[],"data":{"signals":[],"suspicious":false,"unusual_traction":false,"metadata":true},"error":null},{"analyzer":"qual-complexity","pillar":"quality","status":"ok","tool_version":"lizard 1.25.1","metrics":{"functions":513.0,"function_nloc":3483.0,"mean_ccn":1.88,"p90_ccn":4.0,"complex_functions":0.0,"long_functions":1.0,"many_param_functions":1.0,"risky_nloc_share":0.0534},"findings":[],"evidence":[{"kind":"complex-function","description":"(anonymous) in demo-site/app/app.js: complexity 1, 186 lines","ref":"demo-site/app/app.js","url":"https://github.com/esvit/ng-table/blob/b6d5d0bfeef923c617081ffe80a0266d7fb4aa33/demo-site/app/app.js#L58","weight":0.016666666666666666}],"data":{},"error":null},{"analyzer":"qual-duplication","pillar":"quality","status":"ok","tool_version":"repotrust-dup-w6","metrics":{"compared_lines":4381.0,"duplicated_lines":162.0,"duplicated_share":0.037,"files":88.0},"findings":[],"evidence":[{"kind":"duplicate-code","description":"6+ duplicated lines: demo-apps/es5/src/my-table.component.js:12 and demo-apps/es6-systemjs/src/my-table.component.js:9","ref":"demo-apps/es5/src/my-table.component.js","url":"https://github.com/esvit/ng-table/blob/b6d5d0bfeef923c617081ffe80a0266d7fb4aa33/demo-apps/es5/src/my-table.component.js#L12","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: demo-apps/es5/src/my-table.component.js:14 and demo-apps/es5/src/my-table.component.js:18","ref":"demo-apps/es5/src/my-table.component.js","url":"https://github.com/esvit/ng-table/blob/b6d5d0bfeef923c617081ffe80a0266d7fb4aa33/demo-apps/es5/src/my-table.component.js#L14","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: demo-apps/es6-systemjs/src/my-table.component.js:24 and demo-apps/es6-webpack/src/my-table/my-table.component.js:25","ref":"demo-apps/es6-systemjs/src/my-table.component.js","url":"https://github.com/esvit/ng-table/blob/b6d5d0bfeef923c617081ffe80a0266d7fb4aa33/demo-apps/es6-systemjs/src/my-table.component.js#L24","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: e2e/protractor-travis.config.js:70 and e2e/protractor.config.js:26","ref":"e2e/protractor-travis.config.js","url":"https://github.com/esvit/ng-table/blob/b6d5d0bfeef923c617081ffe80a0266d7fb4aa33/e2e/protractor-travis.config.js#L70","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: examples-old/js/angular-mocks.js:1077 and examples-old/js/angular-mocks.js:1200","ref":"examples-old/js/angular-mocks.js","url":"https://github.com/esvit/ng-table/blob/b6d5d0bfeef923c617081ffe80a0266d7fb4aa33/examples-old/js/angular-mocks.js#L1077","weight":0.3},{"kind":"duplicate-code","description":"6+ duplicated lines: src/core/ngTableEventsChannel.ts:106 and src/core/ngTableEventsChannel.ts:127","ref":"src/core/ngTableEventsChannel.ts","url":"https://github.com/esvit/ng-table/blob/b6d5d0bfeef923c617081ffe80a0266d7fb4aa33/src/core/ngTableEventsChannel.ts#L106","weight":0.3}],"data":{},"error":null},{"analyzer":"qual-lint","pillar":"quality","status":"ok","tool_version":"opengrep 1.33.1; rules f1d2b562b414","metrics":{"findings":8.0,"weighted_findings":7.25,"scanned_lines":6805.0,"category:best-practice":7.0,"category:correctness":1.0},"findings":[{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"e2e/protractor-travis.config.js","line":82,"fingerprint":"javascript.lang.best-practice.lazy-load-module:e2e/protractor-travis.config.js:82"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"e2e/protractor.config.js","line":37,"fingerprint":"javascript.lang.best-practice.lazy-load-module:e2e/protractor.config.js:37"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/webpack/appParts.js","line":9,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/webpack/appParts.js:9"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/webpack/appParts.js","line":10,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/webpack/appParts.js:10"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/webpack/appParts.js","line":120,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/webpack/appParts.js:120"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/webpack/libParts.js","line":10,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/webpack/libParts.js:10"},{"rule_id":"opengrep/javascript.lang.best-practice.lazy-load-module","severity":"medium","message":"Lazy loading can complicate code bundling if care is not taken, also `require`s are run synchronously by Node.js. If they are called from within a function, it may block other requests from being handled at a more critical time. The best practice is to `require` modules at the beginning of each file","path":"scripts/webpack/libParts.js","line":11,"fingerprint":"javascript.lang.best-practice.lazy-load-module:scripts/webpack/libParts.js:11"},{"rule_id":"opengrep/javascript.lang.correctness.useless-assignment","severity":"low","message":"`d` is assigned twice; the first assignment is useless","path":"demo-site/js/angular-social.js","line":1,"fingerprint":"javascript.lang.correctness.useless-assignment:demo-site/js/angular-social.js:1"}],"evidence":[],"data":{},"error":null},{"analyzer":"qual-testing","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:has_tests":1.0,"check:test_ratio":1.0,"check:ci_present":1.0,"check:ci_runs_tests":1.0,"check:ci_runs_lint":0.0,"check:tests_cochange":1.0,"test_lines":5765.0,"source_lines":6805.0,"test_ratio":0.8472,"ci_files":1.0,"cochange_share":0.449,"cochange_commits":147.0},"findings":[],"evidence":[{"kind":"ci","description":"CI config: .travis.yml","ref":".travis.yml","url":null,"weight":0.0},{"kind":"ci","description":"CI runs tests (npm test)","ref":null,"url":null,"weight":0.0}],"data":{"test_commands":["npm test"],"lint_commands":[]},"error":null},{"analyzer":"qual-docs","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:readme":1.0,"check:license":1.0,"check:contributing":1.0,"check:changelog":0.0,"readme_lines":72.0},"findings":[],"evidence":[{"kind":"docs","description":"README.md","ref":"README.md","url":null,"weight":0.0},{"kind":"docs","description":"LICENSE","ref":"LICENSE","url":null,"weight":0.0},{"kind":"docs","description":"CONTRIBUTING.md","ref":"CONTRIBUTING.md","url":null,"weight":0.0}],"data":{},"error":null},{"analyzer":"qual-type-safety","pillar":"quality","status":"ok","tool_version":null,"metrics":{"check:strict_config":0.0,"check:low_escape_density":0.0,"escapes":81.0,"escapes_per_kloc":23.41},"findings":[],"evidence":[],"data":{},"error":null}],"flags":[]}