chore(deps): bump the npm_and_yarn group across 1 directory with 15 updates · stayko-chalakov/juice-shop-dependabot@449e2fa

Triggered via pull request March 22, 2024 17:24

synchronize #6

Status Failure

Total duration 35s

Artifacts –

dependency-review.yml

on: pull_request

1 error and 3 warnings

Dependency review detected vulnerable packages.

npm/base64url has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/express-unless has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/string_decoder has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.