chore(deps): bump the npm_and_yarn group across 1 directory with 13 updates · stayko-chalakov/juice-shop-dependabot@0de2fb1

Triggered via pull request March 29, 2024 20:22

opened #8

Status Failure

Total duration 24s

Artifacts –

dependency-review.yml

on: pull_request

1 error and 3 warnings

Dependency review detected vulnerable packages.

npm/base64url has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/express-unless has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/jpeg-exif has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.