chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates · stayko-chalakov/juice-shop-dependabot@8de76ff

Triggered via pull request March 22, 2024 17:05

opened #7

Status Failure

Total duration 34s

Artifacts –

dependency-review.yml

on: pull_request

1 error and 3 warnings

Dependency review detected vulnerable packages.

npm/base64url has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/express-unless has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/string_decoder has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.