chore(deps): bump the production group with 13 updates · stayko-chalakov/juice-shop-dependabot@be4e237

Triggered via pull request April 3, 2024 14:48

opened #9

Status Failure

Total duration 27s

Artifacts –

dependency-review.yml

on: pull_request

1 error and 7 warnings

Dependency review detected vulnerable packages.

npm/express-robots-txt has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/express-unless has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/jpeg-exif has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/moo has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/express-robots-txt has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/express-robots-txt has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/express-robots-txt has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.