npm package-lock

snyk/goof

https://github.com/snyk/goof (main)

Export SBOM

135 Runtime Findings Confirmed in root/runtime dependency evidence

0 Non-Runtime Findings 0 critical/high packages in workspace, vendored, eval, test, docs, or unclear sources

0 Unverified Versions Inventoried, not counted as vulnerable

845 Clear Versions No OSV advisories for these exact package versions

Scan Diagnostics 135 affected versions · 268 advisories · 980 total package versions Show detailsHide details

980 Total Package Versions 135 confirmed affected, 0 unverified

7 Deepest Vulnerability Path dependency levels from the repository root

135 Runtime Candidate Findings 0 confirmed in non-runtime or unclear sources

117 Transitive Affected Packages 18 direct confirmed affected packages

18 Direct Affected Packages Closest fixes to prioritize first if exposure is runtime

88 Critical / High Packages 27 critical · 61 high across all exposure classes

Vulnerability Monitor

135 confirmed affected package versions · 268 unique advisories · 18 confirmed affected direct dependencies · 112 duplicate occurrences collapsed

CRITICAL 27 HIGH 61 MEDIUM 37 LOW 10 UNKNOWN 0

Confirmed findings require package ecosystem, package name, and exact installed version. Exposure labels separate advisory severity from where the dependency evidence came from, such as runtime, workspace, test, docs, or vendored eval files.

Critical 27 packages · 115 advisories Packages whose highest matched advisory is critical.

ejs 1.0.0 · npm · direct Runtime Candidate direct dependency

5 graphs available for this package version Shown at confirmed critical advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

CRITICAL Runtime Candidate 5 advisories

CRITICAL

GHSA-3w5v-p54c-f74x ejs is vulnerable to remote code execution due to weak input validation Fixed: 2.5.5 · CVE-2017-1000228 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

CRITICAL

GHSA-phwq-j96m-2c2q ejs template injection vulnerability Fixed: 3.1.7 · CVE-2022-29078 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-6x77-rpqf-j6mw ejs vulnerable to DoS due to weak input validation Fixed: 2.5.5 · CVE-2017-1000189 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-ghr5-ch3p-vcr6 ejs lacks certain pollution protection Fixed: 3.1.10 · CVE-2024-33883 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-hwcf-pp87-7x6p mde ejs vulnerable to XSS Fixed: 2.5.5 · CVE-2017-1000188 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

express-fileupload 0.0.5 · npm · direct Runtime Candidate direct dependency

3 graphs available for this package version Shown at confirmed critical advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

CRITICAL Runtime Candidate 3 advisories

lodash 4.17.4 · npm · direct Runtime Candidate direct dependency

10 graphs available for this package version Shown at confirmed critical advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

CRITICAL Runtime Candidate 10 advisories

CRITICAL

GHSA-jf85-cpcp-j695 Prototype Pollution in lodash Fixed: 4.6.1 · CVE-2019-10744 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-35jh-r3h4-6jhm Command Injection in lodash Fixed: 4.17.21 · CVE-2021-23337 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-4xc9-xhrj-v574 Prototype Pollution in lodash Fixed: 4.17.11 · CVE-2018-16487 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-p6mc-m468-83gw Prototype Pollution in lodash Fixed: 4.17.19 · CVE-2020-8203 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-r5fr-rjxr-66jc lodash vulnerable to Code Injection via `_.template` imports key names Fixed: 4.18.0 · CVE-2026-4800 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-29mw-wpgm-hmr9 Regular Expression Denial of Service (ReDoS) in lodash Fixed: 4.17.21 · CVE-2020-28500 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-f23m-r3pf-42rh lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` Fixed: 4.18.0 · CVE-2026-2950 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-fvqr-27wr-82fm Prototype Pollution in lodash Fixed: 4.17.5 · CVE-2018-3721 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-x5rq-j2xg-h7qm Regular Expression Denial of Service (ReDoS) in lodash Fixed: 4.17.11 · CVE-2019-1010266 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-xxjr-mmjv-4gpg Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions Fixed: 4.17.23 · CVE-2025-13465 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

typeorm 0.2.24 · npm · direct Runtime Candidate direct dependency

3 graphs available for this package version Shown at confirmed critical advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

CRITICAL Runtime Candidate 3 advisories

High 61 packages · 98 advisories Packages whose highest matched advisory is high.

body-parser 1.9.0 · npm · direct Runtime Candidate direct dependency

1 graph available for this package version Shown at confirmed high advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Runtime Candidate 1 advisory

dustjs-linkedin 2.5.0 · npm · direct Runtime Candidate direct dependency

1 graph available for this package version Shown at confirmed high advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Runtime Candidate 1 advisory

marked 0.3.5 · npm · direct Runtime Candidate direct dependency

6 graphs available for this package version Shown at confirmed high advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Runtime Candidate 6 advisories

HIGH

GHSA-5v2h-r2cx-5xgj Inefficient Regular Expression Complexity in marked Fixed: 4.0.10 · CVE-2022-21681 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-rrrm-qjm4-v8hf Inefficient Regular Expression Complexity in marked Fixed: 4.0.10 · CVE-2022-21680 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-x5pg-88wf-qq4p Regular Expression Denial of Service in marked Fixed: 0.3.9 · CVE-2017-16114 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-7px7-7xjx-hxm8 Marked vulnerable to XSS from data URIs Fixed: 0.3.7 · CVE-2017-1000427 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-p9wx-2529-fp83 Marked allows Regular Expression Denial of Service (ReDoS) attacks Fixed: 0.3.17 · CVE-2018-25110 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

MEDIUM

GHSA-vfvf-mqq8-rwqc Sanitization bypass using HTML Entities in marked Fixed: 0.3.6 · CVE-2016-10531 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

lodash 4.17.21 · npm · transitive Runtime Candidate transitive dependency

3 graphs available for this package version Shown at confirmed high advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Runtime Candidate 3 advisories

minimatch 3.0.4 · npm · transitive Runtime Candidate transitive dependency

4 graphs available for this package version Shown at confirmed high advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Runtime Candidate 4 advisories

HIGH

GHSA-23c5-xmqv-rm74 minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions Fixed: 3.1.4 · CVE-2026-27904 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-3ppc-4f35-3m26 minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern Fixed: 3.1.3 · CVE-2026-26996 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-7r86-cg39-jmmj minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments Fixed: 3.1.3 · CVE-2026-27903 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

HIGH

GHSA-f8q6-p94x-37v3 minimatch ReDoS vulnerability Fixed: 3.0.5 · CVE-2022-3517 · GitHub reviewed · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

path-to-regexp 0.1.3 · npm · transitive Runtime Candidate transitive 1 level deep

3 graphs available for this package version Shown at confirmed high advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Runtime Candidate 3 advisories

qs 2.4.2 · npm · transitive Runtime Candidate transitive 1 level deep

3 graphs available for this package version Shown at confirmed high advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Runtime Candidate 3 advisories

qs 2.2.4 · npm · transitive Runtime Candidate transitive 1 level deep

3 graphs available for this package version Shown at confirmed high advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

HIGH Runtime Candidate 3 advisories

Medium 37 packages · 45 advisories Packages whose highest matched advisory is medium.

adm-zip 0.4.7 · npm · direct Runtime Candidate direct dependency

1 graph available for this package version Shown at confirmed medium advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

MEDIUM Runtime Candidate 1 advisory

express 4.12.4 · npm · direct Runtime Candidate direct dependency

2 graphs available for this package version Shown at confirmed medium advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

MEDIUM Runtime Candidate 2 advisories

hbs 4.0.4 · npm · direct Runtime Candidate direct dependency

1 graph available for this package version Shown at confirmed medium advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

MEDIUM Runtime Candidate 1 advisory

Low and Unknown 10 packages · 10 advisories Packages with low or unknown advisory severity.

cookie 0.1.2 · npm · transitive Runtime Candidate transitive 1 level deep

1 graph available for this package version Shown at confirmed low advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

LOW Runtime Candidate 1 advisory

cookie 0.4.1 · npm · transitive Runtime Candidate transitive 1 level deep

1 graph available for this package version Shown at confirmed low advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

LOW Runtime Candidate 1 advisory

debug 4.1.1 · npm · transitive Runtime Candidate transitive 1 level deep

1 graph available for this package version Shown at confirmed low advisory severity with runtime candidate exposure evidence. Choose a graph to inspect the specific advisory and path.

LOW Runtime Candidate 1 advisory

SBOM Manifest

135 confirmed affected package versions, 0 unverified package versions, 845 clear package versions.

135 review rows · 845 clear hidden Show tableHide table

Component	Version	Ecosystem	Scope	Exposure	Source	Package URL	Status
ejs	1.0.0	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ejs@1.0.0	CRITICAL 5 exact-version OSV advisories
Choose a graph for ejs@1.0.0 5 advisories CRITICAL GHSA-3w5v-p54c-f74x ejs is vulnerable to remote code execution due to weak input validation Fixed: 2.5.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-phwq-j96m-2c2q ejs template injection vulnerability Fixed: 3.1.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-6x77-rpqf-j6mw ejs vulnerable to DoS due to weak input validation Fixed: 2.5.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-ghr5-ch3p-vcr6 ejs lacks certain pollution protection Fixed: 3.1.10 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-hwcf-pp87-7x6p mde ejs vulnerable to XSS Fixed: 2.5.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
express-fileupload	0.0.5	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/express-fileupload@0.0.5	CRITICAL 3 exact-version OSV advisories
Choose a graph for express-fileupload@0.0.5 3 advisories CRITICAL GHSA-9wcg-jrwf-8gg7 Prototype Pollution in express-fileupload Fixed: 1.1.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-w4m6-x6c2-j5c9 Express-FileUpload Arbitrary File Overwrite Fixed: Unknown · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-q3w9-g74q-vp5f Denial of Service in express-fileupload Fixed: 1.1.6-alpha.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
lodash	4.17.4	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash@4.17.4	CRITICAL 10 exact-version OSV advisories
Choose a graph for lodash@4.17.4 10 advisories CRITICAL GHSA-jf85-cpcp-j695 Prototype Pollution in lodash Fixed: 4.6.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-35jh-r3h4-6jhm Command Injection in lodash Fixed: 4.17.21 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-4xc9-xhrj-v574 Prototype Pollution in lodash Fixed: 4.17.11 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-p6mc-m468-83gw Prototype Pollution in lodash Fixed: 4.17.19 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-r5fr-rjxr-66jc lodash vulnerable to Code Injection via `_.template` imports key names Fixed: 4.18.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-29mw-wpgm-hmr9 Regular Expression Denial of Service (ReDoS) in lodash Fixed: 4.17.21 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-f23m-r3pf-42rh lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` Fixed: 4.18.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-fvqr-27wr-82fm Prototype Pollution in lodash Fixed: 4.17.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-x5rq-j2xg-h7qm Regular Expression Denial of Service (ReDoS) in lodash Fixed: 4.17.11 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-xxjr-mmjv-4gpg Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions Fixed: 4.17.23 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
mongoose	4.2.4	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mongoose@4.2.4	CRITICAL 7 exact-version OSV advisories
Choose a graph for mongoose@4.2.4 7 advisories CRITICAL GHSA-8687-vv9j-hgph Improper Input Validation in Automattic Mongoose Fixed: 4.13.21 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-9m93-w8w6-76hh Mongoose Prototype Pollution vulnerability Fixed: 5.13.20 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-h8hf-x3f4-xwgp Mongoose Vulnerable to Prototype Pollution in Schema Object Fixed: 5.13.15 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-vg7j-7cwx-8wgw Mongoose search injection vulnerability Fixed: 6.13.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-f825-f98c-gj3g automattic/mongoose vulnerable to Prototype pollution via Schema.path Fixed: 5.13.15 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-m7xq-9374-9rvx Mongoose search injection vulnerability Fixed: 5.13.23 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-r5xw-q988-826m Remote Memory Exposure in mongoose Fixed: 3.8.39 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
typeorm	0.2.24	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/typeorm@0.2.24	CRITICAL 3 exact-version OSV advisories
Choose a graph for typeorm@0.2.24 3 advisories CRITICAL GHSA-fx4w-v43j-vc45 SQL injection in typeORM Fixed: 0.3.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-pf2j-9qmp-jqr2 TypeORM vulnerable to MAID and Prototype Pollution Fixed: 0.2.25 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-q2pj-6v73-8rgj TypeORM vulnerable to SQL injection via crafted request to repository.save or repository.update Fixed: 0.3.26 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
babel-traverse	6.26.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/babel-traverse@6.26.0	CRITICAL 1 exact-version OSV advisory
Choose a graph for babel-traverse@6.26.0 1 advisory CRITICAL GHSA-67hx-6x53-jw92 Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code Fixed: 7.23.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
bson	0.4.23	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bson@0.4.23	CRITICAL 2 exact-version OSV advisories
Choose a graph for bson@0.4.23 2 advisories CRITICAL GHSA-v8w9-2789-6hhr Deserialization of Untrusted Data in bson Fixed: 1.1.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-4jwp-vfvf-657p Deserialization of Untrusted Data in bson Fixed: 1.1.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
cipher-base	1.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cipher-base@1.0.4	CRITICAL 1 exact-version OSV advisory
Choose a graph for cipher-base@1.0.4 1 advisory CRITICAL GHSA-cpq7-6gpm-g9rc cipher-base is missing type checks, leading to hash rewind and passing on crafted data Fixed: 1.0.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ejs	0.8.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ejs@0.8.8	CRITICAL 5 exact-version OSV advisories
Choose a graph for ejs@0.8.8 5 advisories CRITICAL GHSA-3w5v-p54c-f74x ejs is vulnerable to remote code execution due to weak input validation Fixed: 2.5.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-phwq-j96m-2c2q ejs template injection vulnerability Fixed: 3.1.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-6x77-rpqf-j6mw ejs vulnerable to DoS due to weak input validation Fixed: 2.5.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-ghr5-ch3p-vcr6 ejs lacks certain pollution protection Fixed: 3.1.10 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-hwcf-pp87-7x6p mde ejs vulnerable to XSS Fixed: 2.5.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
elliptic	6.4.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/elliptic@6.4.1	CRITICAL 9 exact-version OSV advisories
Choose a graph for elliptic@6.4.1 9 advisories CRITICAL GHSA-vjh7-7g9h-fjfh Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string) Fixed: 6.6.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-vh7m-p724-62c2 Signature Malleabillity in elliptic Fixed: 6.5.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-r9p9-mrjm-926w Elliptic Uses a Broken or Risky Cryptographic Algorithm Fixed: 6.5.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-434g-2637-qmqr Elliptic's verify function omits uniqueness validation Fixed: 6.5.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-49q7-c7j4-3p7m Elliptic allows BER-encoded signatures Fixed: 6.5.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-848j-6mx2-7j84 Elliptic Uses a Cryptographic Primitive with a Risky Implementation Fixed: Unknown · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-977x-g7h5-7qgw Elliptic's ECDSA missing check for whether leading bit of r and s is zero Fixed: 6.5.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-f7q4-pwc6-w24p Elliptic's EDDSA missing signature length check Fixed: 6.5.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-fc9h-whq2-v747 Valid ECDSA signatures erroneously rejected in Elliptic Fixed: 6.6.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
form-data	2.3.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/form-data@2.3.3	CRITICAL 1 exact-version OSV advisory
Choose a graph for form-data@2.3.3 1 advisory CRITICAL GHSA-fjxv-7rqg-78g4 form-data uses unsafe random function in form-data for choosing boundary Fixed: 2.5.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
handlebars	4.0.14	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/handlebars@4.0.14	CRITICAL 16 exact-version OSV advisories
Choose a graph for handlebars@4.0.14 16 advisories CRITICAL GHSA-2w6w-674q-4c4q Handlebars.js has JavaScript Injection via AST Type Confusion Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-765h-qjxv-5f44 Prototype Pollution in handlebars Fixed: 4.7.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-f2jv-r9rf-7988 Remote code execution in handlebars when compiling templates Fixed: 4.7.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-w457-6q6x-cgp9 Prototype Pollution in handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-2cf5-4w76-r9qv Arbitrary Code Execution in handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-3cqr-58rm-57f8 Arbitrary Code Execution in Handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-3mfm-83xf-c92r Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-62gr-4qp9-h98f Regular Expression Denial of Service in Handlebars Fixed: 4.4.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-9cx6-37pm-9jff Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-g9r4-xpmj-mj65 Prototype Pollution in handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-q2c6-c6pm-g3gh Arbitrary Code Execution in handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-xhpv-hc6g-r9c6 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-xjpj-3mr7-gcpf Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-2qvq-rjwj-gvw9 Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-f52g-6jhx-586p Denial of Service in handlebars Fixed: 4.4.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-442j-39wm-28r2 Handlebars.js has a Property Access Validation Bypass in container.lookup Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
handlebars	4.0.11	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/handlebars@4.0.11	CRITICAL 17 exact-version OSV advisories
Choose a graph for handlebars@4.0.11 17 advisories CRITICAL GHSA-2w6w-674q-4c4q Handlebars.js has JavaScript Injection via AST Type Confusion Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-765h-qjxv-5f44 Prototype Pollution in handlebars Fixed: 4.7.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-f2jv-r9rf-7988 Remote code execution in handlebars when compiling templates Fixed: 4.7.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-w457-6q6x-cgp9 Prototype Pollution in handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-2cf5-4w76-r9qv Arbitrary Code Execution in handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-3cqr-58rm-57f8 Arbitrary Code Execution in Handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-3mfm-83xf-c92r Handlebars.js has JavaScript Injection via AST Type Confusion by tampering @partial-block Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-62gr-4qp9-h98f Regular Expression Denial of Service in Handlebars Fixed: 4.4.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-9cx6-37pm-9jff Handlebars.js has Denial of Service via Malformed Decorator Syntax in Template Compilation Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-g9r4-xpmj-mj65 Prototype Pollution in handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-q2c6-c6pm-g3gh Arbitrary Code Execution in handlebars Fixed: 3.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-q42p-pg8m-cqh6 Prototype Pollution in handlebars Fixed: 3.0.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-xhpv-hc6g-r9c6 Handlebars.js has JavaScript Injection via AST Type Confusion when passing an object as dynamic partial Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-xjpj-3mr7-gcpf Handlebars.js has JavaScript Injection in CLI Precompiler via Unescaped Names and Options Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-2qvq-rjwj-gvw9 Handlebars.js has Prototype Pollution Leading to XSS through Partial Template Injection Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-f52g-6jhx-586p Denial of Service in handlebars Fixed: 4.4.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-442j-39wm-28r2 Handlebars.js has a Property Access Validation Bypass in container.lookup Fixed: 4.7.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
json-schema	0.2.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/json-schema@0.2.3	CRITICAL 1 exact-version OSV advisory
Choose a graph for json-schema@0.2.3 1 advisory CRITICAL GHSA-896r-f27r-55mw json-schema is vulnerable to Prototype Pollution Fixed: 0.4.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
lodash	4.17.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash@4.17.10	CRITICAL 9 exact-version OSV advisories
Choose a graph for lodash@4.17.10 9 advisories CRITICAL GHSA-jf85-cpcp-j695 Prototype Pollution in lodash Fixed: 4.6.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-35jh-r3h4-6jhm Command Injection in lodash Fixed: 4.17.21 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-4xc9-xhrj-v574 Prototype Pollution in lodash Fixed: 4.17.11 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-p6mc-m468-83gw Prototype Pollution in lodash Fixed: 4.17.19 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-r5fr-rjxr-66jc lodash vulnerable to Code Injection via `_.template` imports key names Fixed: 4.18.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-29mw-wpgm-hmr9 Regular Expression Denial of Service (ReDoS) in lodash Fixed: 4.17.21 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-f23m-r3pf-42rh lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` Fixed: 4.18.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-x5rq-j2xg-h7qm Regular Expression Denial of Service (ReDoS) in lodash Fixed: 4.17.11 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-xxjr-mmjv-4gpg Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions Fixed: 4.17.23 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
minimist	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/minimist@1.2.0	CRITICAL 2 exact-version OSV advisories
Choose a graph for minimist@1.2.0 2 advisories CRITICAL GHSA-xvch-5gv4-984h Prototype Pollution in minimist Fixed: 0.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-vh95-rmgr-6w4m Prototype Pollution in minimist Fixed: 0.2.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
minimist	0.0.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/minimist@0.0.8	CRITICAL 2 exact-version OSV advisories
Choose a graph for minimist@0.0.8 2 advisories CRITICAL GHSA-xvch-5gv4-984h Prototype Pollution in minimist Fixed: 0.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-vh95-rmgr-6w4m Prototype Pollution in minimist Fixed: 0.2.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
minimist	0.0.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/minimist@0.0.10	CRITICAL 2 exact-version OSV advisories
Choose a graph for minimist@0.0.10 2 advisories CRITICAL GHSA-xvch-5gv4-984h Prototype Pollution in minimist Fixed: 0.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-vh95-rmgr-6w4m Prototype Pollution in minimist Fixed: 0.2.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
minimist	1.2.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/minimist@1.2.5	CRITICAL 1 exact-version OSV advisory
Choose a graph for minimist@1.2.5 1 advisory CRITICAL GHSA-xvch-5gv4-984h Prototype Pollution in minimist Fixed: 0.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
mixin-deep	1.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mixin-deep@1.3.1	CRITICAL 1 exact-version OSV advisory
Choose a graph for mixin-deep@1.3.1 1 advisory CRITICAL GHSA-fhjf-83wg-r2j9 Prototype Pollution in mixin-deep Fixed: 1.3.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
netmask	1.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/netmask@1.0.6	CRITICAL 2 exact-version OSV advisories
Choose a graph for netmask@1.0.6 2 advisories CRITICAL GHSA-4c7m-wxvm-r7gc Improper parsing of octal bytes in netmask Fixed: 1.1.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-pch5-whg9-qr2r netmask npm package mishandles octal input data Fixed: 2.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
parse-url	5.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/parse-url@5.0.1	CRITICAL 6 exact-version OSV advisories
Choose a graph for parse-url@5.0.1 6 advisories CRITICAL GHSA-7f3x-x4pr-wqhj Server-Side Request Forgery in parse-url Fixed: 6.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-j9fq-vwqv-2fm2 Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url Fixed: 8.1.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-4p35-cfcx-8653 Hostname confusion in parse-url Fixed: 6.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-jpp7-7chh-cf67 Cross site scripting in parse-url Fixed: 6.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-pqw5-jmp5-px4v parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing Fixed: 8.1.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-q6wq-5p59-983w Cross site scripting in parse-url Fixed: 6.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
pbkdf2	3.0.17	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pbkdf2@3.0.17	CRITICAL 2 exact-version OSV advisories
Choose a graph for pbkdf2@3.0.17 2 advisories CRITICAL GHSA-h7cp-r72f-jxh6 pbkdf2 returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos Fixed: 3.1.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. CRITICAL GHSA-v62p-rq8g-8h59 pbkdf2 silently disregards Uint8Array input, returning static keys Fixed: 3.1.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
set-value	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/set-value@2.0.0	CRITICAL 2 exact-version OSV advisories
Choose a graph for set-value@2.0.0 2 advisories CRITICAL GHSA-4g88-fppr-53pp Prototype Pollution in set-value Fixed: 2.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-4jqc-8m5r-9rpr Prototype Pollution in set-value Fixed: 2.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
set-value	0.4.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/set-value@0.4.3	CRITICAL 2 exact-version OSV advisories
Choose a graph for set-value@0.4.3 2 advisories CRITICAL GHSA-4g88-fppr-53pp Prototype Pollution in set-value Fixed: 2.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-4jqc-8m5r-9rpr Prototype Pollution in set-value Fixed: 2.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
sha.js	2.4.11	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/sha.js@2.4.11	CRITICAL 1 exact-version OSV advisory
Choose a graph for sha.js@2.4.11 1 advisory CRITICAL GHSA-95m3-7q98-8xr5 sha.js is missing type checks leading to hash rewind and passing on crafted data Fixed: 2.4.12 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
underscore	1.9.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/underscore@1.9.1	CRITICAL 2 exact-version OSV advisories
Choose a graph for underscore@1.9.1 2 advisories CRITICAL GHSA-cf4h-3jhx-xvhq Arbitrary Code Execution in underscore Fixed: 1.12.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-qpx9-hpmf-5gmw Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attack Fixed: 1.13.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
body-parser	1.9.0	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/body-parser@1.9.0	HIGH 1 exact-version OSV advisory
Choose a graph for body-parser@1.9.0 1 advisory HIGH GHSA-qwcr-r2fm-qrc7 body-parser vulnerable to denial of service when url encoding is enabled Fixed: 1.20.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
dustjs-linkedin	2.5.0	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dustjs-linkedin@2.5.0	HIGH 1 exact-version OSV advisory
Choose a graph for dustjs-linkedin@2.5.0 1 advisory HIGH GHSA-c6rp-wrp9-qr4q dustjs-linkedin vulnerable to Prototype Pollution Fixed: 3.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
marked	0.3.5	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/marked@0.3.5	HIGH 6 exact-version OSV advisories
Choose a graph for marked@0.3.5 6 advisories HIGH GHSA-5v2h-r2cx-5xgj Inefficient Regular Expression Complexity in marked Fixed: 4.0.10 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-rrrm-qjm4-v8hf Inefficient Regular Expression Complexity in marked Fixed: 4.0.10 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-x5pg-88wf-qq4p Regular Expression Denial of Service in marked Fixed: 0.3.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-7px7-7xjx-hxm8 Marked vulnerable to XSS from data URIs Fixed: 0.3.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-p9wx-2529-fp83 Marked allows Regular Expression Denial of Service (ReDoS) attacks Fixed: 0.3.17 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-vfvf-mqq8-rwqc Sanitization bypass using HTML Entities in marked Fixed: 0.3.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
moment	2.15.1	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/moment@2.15.1	HIGH 2 exact-version OSV advisories
Choose a graph for moment@2.15.1 2 advisories HIGH GHSA-446m-mv8f-q348 Regular Expression Denial of Service in moment Fixed: 2.19.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-8hfj-j24r-96c4 Path Traversal: 'dir/../../filename' in moment.locale Fixed: 2.29.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
snyk	1.278.1	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk@1.278.1	HIGH 4 exact-version OSV advisories
Choose a graph for snyk@1.278.1 4 advisories HIGH GHSA-4vrv-93c7-m92j snyk Code Injection vulnerability Fixed: 1.1064.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-hpqj-7cj6-hfj8 Snyk CLI affected by Command Injection vulnerability Fixed: 1.19.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-4x6g-3cmx-w76r Snyk plugins vulnerable to Command Injection Fixed: 1.1.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-6hwc-9h8r-3vmf Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode Fixed: 1.1297.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
st	0.2.4	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/st@0.2.4	HIGH 2 exact-version OSV advisories
Choose a graph for st@0.2.4 2 advisories HIGH GHSA-69rr-wvh9-6c4q Directory Traversal in st Fixed: 0.2.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-72fg-jqhx-c68p Open Redirect in st Fixed: 1.2.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
validator	13.5.2	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/validator@13.5.2	HIGH 4 exact-version OSV advisories
Choose a graph for validator@13.5.2 4 advisories HIGH GHSA-vghf-hv5q-vc2g Validator is Vulnerable to Incomplete Filtering of One or More Instances of Special Elements Fixed: 13.15.22 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-9965-vmph-33xx validator.js has a URL validation bypass vulnerability in its isURL function Fixed: 13.15.20 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-qgmg-gppg-76g5 Inefficient Regular Expression Complexity in validator.js Fixed: 13.7.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-xx4c-jj58-r7x6 Inefficient Regular Expression Complexity in Validator.js Fixed: 13.7.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ansi-regex	5.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-regex@5.0.0	HIGH 1 exact-version OSV advisory
Choose a graph for ansi-regex@5.0.0 1 advisory HIGH GHSA-93q8-gq69-wqmw Inefficient Regular Expression Complexity in chalk/ansi-regex Fixed: 3.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ansi-regex	4.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-regex@4.1.0	HIGH 1 exact-version OSV advisory
Choose a graph for ansi-regex@4.1.0 1 advisory HIGH GHSA-93q8-gq69-wqmw Inefficient Regular Expression Complexity in chalk/ansi-regex Fixed: 3.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ansi-regex	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-regex@3.0.0	HIGH 1 exact-version OSV advisory
Choose a graph for ansi-regex@3.0.0 1 advisory HIGH GHSA-93q8-gq69-wqmw Inefficient Regular Expression Complexity in chalk/ansi-regex Fixed: 3.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
async	2.6.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/async@2.6.3	HIGH 1 exact-version OSV advisory
Choose a graph for async@2.6.3 1 advisory HIGH GHSA-fwr7-v2mv-hh25 Prototype Pollution in async Fixed: 2.6.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
braces	3.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/braces@3.0.2	HIGH 1 exact-version OSV advisory
Choose a graph for braces@3.0.2 1 advisory HIGH GHSA-grv7-fg5c-xmjg Uncontrolled resource consumption in braces Fixed: 3.0.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
braces	2.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/braces@2.3.2	HIGH 1 exact-version OSV advisory
Choose a graph for braces@2.3.2 1 advisory HIGH GHSA-grv7-fg5c-xmjg Uncontrolled resource consumption in braces Fixed: 3.0.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
browserify-sign	4.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/browserify-sign@4.0.4	HIGH 1 exact-version OSV advisory
Choose a graph for browserify-sign@4.0.4 1 advisory HIGH GHSA-x9w5-v3q2-3rhw browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack Fixed: 4.2.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
cached-path-relative	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cached-path-relative@1.0.2	HIGH 1 exact-version OSV advisory
Choose a graph for cached-path-relative@1.0.2 1 advisory HIGH GHSA-wg6g-ppvx-927h Prototype Pollution in cached-path-relative Fixed: 1.1.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
cross-spawn	4.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cross-spawn@4.0.2	HIGH 1 exact-version OSV advisory
Choose a graph for cross-spawn@4.0.2 1 advisory HIGH GHSA-3xgq-45jj-v275 Regular Expression Denial of Service (ReDoS) in cross-spawn Fixed: 6.0.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
cross-spawn	6.0.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cross-spawn@6.0.5	HIGH 1 exact-version OSV advisory
Choose a graph for cross-spawn@6.0.5 1 advisory HIGH GHSA-3xgq-45jj-v275 Regular Expression Denial of Service (ReDoS) in cross-spawn Fixed: 6.0.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
cross-spawn	5.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cross-spawn@5.1.0	HIGH 1 exact-version OSV advisory
Choose a graph for cross-spawn@5.1.0 1 advisory HIGH GHSA-3xgq-45jj-v275 Regular Expression Denial of Service (ReDoS) in cross-spawn Fixed: 6.0.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
debug	2.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/debug@2.2.0	HIGH 2 exact-version OSV advisories
Choose a graph for debug@2.2.0 2 advisories HIGH GHSA-9vvw-cc9w-f27h debug Inefficient Regular Expression Complexity vulnerability Fixed: 2.6.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-gxpj-cx7g-858c Regular Expression Denial of Service in debug Fixed: 2.6.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
decode-uri-component	0.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/decode-uri-component@0.2.0	HIGH 1 exact-version OSV advisory
Choose a graph for decode-uri-component@0.2.0 1 advisory HIGH GHSA-w573-4hg7-7wgq decode-uri-component vulnerable to Denial of Service (DoS) Fixed: 0.2.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
degenerator	1.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/degenerator@1.0.4	HIGH 1 exact-version OSV advisory
Choose a graph for degenerator@1.0.4 1 advisory HIGH GHSA-9j49-mfvp-vmhm Code Injection in pac-resolver Fixed: 3.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
dicer	0.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dicer@0.3.0	HIGH 1 exact-version OSV advisory
Choose a graph for dicer@0.3.0 1 advisory HIGH GHSA-wm7h-9275-46v2 Crash in HeaderParser in dicer Fixed: Unknown · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
diff	1.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/diff@1.4.0	HIGH 2 exact-version OSV advisories
Choose a graph for diff@1.4.0 2 advisories HIGH GHSA-h6ch-v84p-w6p9 Regular Expression Denial of Service (ReDoS) Fixed: 3.5.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-73rr-hh4g-fpgx jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch Fixed: 3.5.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
dot-prop	4.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dot-prop@4.2.0	HIGH 1 exact-version OSV advisory
Choose a graph for dot-prop@4.2.0 1 advisory HIGH GHSA-ff7x-qrg7-qggm dot-prop Prototype Pollution vulnerability Fixed: 4.2.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
fresh	0.2.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fresh@0.2.4	HIGH 1 exact-version OSV advisory
Choose a graph for fresh@0.2.4 1 advisory HIGH GHSA-9qj9-36jm-prpv Regular Expression Denial of Service in fresh Fixed: 0.5.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
http-cache-semantics	4.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/http-cache-semantics@4.1.0	HIGH 1 exact-version OSV advisory
Choose a graph for http-cache-semantics@4.1.0 1 advisory HIGH GHSA-rc47-6667-2j5j http-cache-semantics vulnerable to Regular Expression Denial of Service Fixed: 4.1.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ini	1.3.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ini@1.3.5	HIGH 1 exact-version OSV advisory
Choose a graph for ini@1.3.5 1 advisory HIGH GHSA-qqgx-2p2h-9c37 ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse Fixed: 1.3.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ini	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ini@1.1.0	HIGH 1 exact-version OSV advisory
Choose a graph for ini@1.1.0 1 advisory HIGH GHSA-qqgx-2p2h-9c37 ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse Fixed: 1.3.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ip	1.1.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ip@1.1.5	HIGH 2 exact-version OSV advisories
Choose a graph for ip@1.1.5 2 advisories HIGH GHSA-2p57-rm9w-gvfp ip SSRF improper categorization in isPublic Fixed: Unknown · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-78xj-cgh5-2h22 NPM IP package incorrectly identifies some private IP addresses as public Fixed: 1.1.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
kerberos	0.0.24	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/kerberos@0.0.24	HIGH 1 exact-version OSV advisory
Choose a graph for kerberos@0.0.24 1 advisory HIGH GHSA-m2mx-rfpw-jghv DLL Injection in kerberos Fixed: 1.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
kind-of	6.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/kind-of@6.0.2	HIGH 1 exact-version OSV advisory
Choose a graph for kind-of@6.0.2 1 advisory HIGH GHSA-6c8f-qphg-qjgp Validation Bypass in kind-of Fixed: 6.0.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
lodash	4.17.15	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash@4.17.15	HIGH 6 exact-version OSV advisories
Choose a graph for lodash@4.17.15 6 advisories HIGH GHSA-35jh-r3h4-6jhm Command Injection in lodash Fixed: 4.17.21 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-p6mc-m468-83gw Prototype Pollution in lodash Fixed: 4.17.19 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-r5fr-rjxr-66jc lodash vulnerable to Code Injection via `_.template` imports key names Fixed: 4.18.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-29mw-wpgm-hmr9 Regular Expression Denial of Service (ReDoS) in lodash Fixed: 4.17.21 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-f23m-r3pf-42rh lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` Fixed: 4.18.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-xxjr-mmjv-4gpg Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions Fixed: 4.17.23 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
lodash	4.17.21	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash@4.17.21	HIGH 3 exact-version OSV advisories
Choose a graph for lodash@4.17.21 3 advisories HIGH GHSA-r5fr-rjxr-66jc lodash vulnerable to Code Injection via `_.template` imports key names Fixed: 4.18.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-f23m-r3pf-42rh lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit` Fixed: 4.18.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-xxjr-mmjv-4gpg Lodash has Prototype Pollution Vulnerability in `_.unset` and `_.omit` functions Fixed: 4.17.23 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
lodash.set	4.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash.set@4.3.2	HIGH 1 exact-version OSV advisory
Choose a graph for lodash.set@4.3.2 1 advisory HIGH GHSA-p6mc-m468-83gw Prototype Pollution in lodash Fixed: 4.17.19 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
mime	1.3.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mime@1.3.4	HIGH 1 exact-version OSV advisory
Choose a graph for mime@1.3.4 1 advisory HIGH GHSA-wrvr-8mpx-r7pp mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input Fixed: 1.4.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
mime	1.2.11	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mime@1.2.11	HIGH 1 exact-version OSV advisory
Choose a graph for mime@1.2.11 1 advisory HIGH GHSA-wrvr-8mpx-r7pp mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input Fixed: 1.4.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
minimatch	3.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/minimatch@3.0.4	HIGH 4 exact-version OSV advisories
Choose a graph for minimatch@3.0.4 4 advisories HIGH GHSA-23c5-xmqv-rm74 minimatch ReDoS: nested *() extglobs generate catastrophically backtracking regular expressions Fixed: 3.1.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-3ppc-4f35-3m26 minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern Fixed: 3.1.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-7r86-cg39-jmmj minimatch has ReDoS: matchOne() combinatorial backtracking via multiple non-adjacent GLOBSTAR segments Fixed: 3.1.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-f8q6-p94x-37v3 minimatch ReDoS vulnerability Fixed: 3.0.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
mongodb	2.0.46	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mongodb@2.0.46	HIGH 1 exact-version OSV advisory
Choose a graph for mongodb@2.0.46 1 advisory HIGH GHSA-mh5c-679w-hh4r Denial of Service in mongodb Fixed: 3.1.13 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
mpath	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mpath@0.1.1	HIGH 2 exact-version OSV advisories
Choose a graph for mpath@0.1.1 2 advisories HIGH GHSA-h466-j336-74wx Prototype Pollution in mpath Fixed: 0.5.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-p92x-r36w-9395 Type confusion in mpath Fixed: 0.8.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ms	0.6.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ms@0.6.2	HIGH 2 exact-version OSV advisories
Choose a graph for ms@0.6.2 2 advisories HIGH GHSA-3fx5-fwvr-xrjg Regular Expression Denial of Service in ms Fixed: 0.7.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-w9mr-4mfr-499f Vercel ms Inefficient Regular Expression Complexity vulnerability Fixed: 2.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
nconf	0.10.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/nconf@0.10.0	HIGH 1 exact-version OSV advisory
Choose a graph for nconf@0.10.0 1 advisory HIGH GHSA-6xwr-q98w-rvg7 Prototype Pollution in nconf Fixed: 0.11.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
negotiator	0.5.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/negotiator@0.5.3	HIGH 1 exact-version OSV advisory
Choose a graph for negotiator@0.5.3 1 advisory HIGH GHSA-7mc5-chhp-fmc3 Regular Expression Denial of Service in negotiator Fixed: 0.6.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
negotiator	0.4.9	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/negotiator@0.4.9	HIGH 1 exact-version OSV advisory
Choose a graph for negotiator@0.4.9 1 advisory HIGH GHSA-7mc5-chhp-fmc3 Regular Expression Denial of Service in negotiator Fixed: 0.6.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
negotiator	0.2.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/negotiator@0.2.8	HIGH 1 exact-version OSV advisory
Choose a graph for negotiator@0.2.8 1 advisory HIGH GHSA-7mc5-chhp-fmc3 Regular Expression Denial of Service in negotiator Fixed: 0.6.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
pac-resolver	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pac-resolver@3.0.0	HIGH 1 exact-version OSV advisory
Choose a graph for pac-resolver@3.0.0 1 advisory HIGH GHSA-9j49-mfvp-vmhm Code Injection in pac-resolver Fixed: 3.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
parse-path	4.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/parse-path@4.0.1	HIGH 1 exact-version OSV advisory
Choose a graph for parse-path@4.0.1 1 advisory HIGH GHSA-3j8f-xvm3-ffx4 Authorization Bypass in parse-path Fixed: 5.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
path-to-regexp	0.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-to-regexp@0.1.3	HIGH 3 exact-version OSV advisories
Choose a graph for path-to-regexp@0.1.3 3 advisories HIGH GHSA-37ch-88jc-xwx2 path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters Fixed: 0.1.13 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-9wv6-86v2-598j path-to-regexp outputs backtracking regular expressions Fixed: 0.1.10 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-rhx6-c78j-4q9w path-to-regexp contains a ReDoS Fixed: 0.1.12 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
picomatch	2.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/picomatch@2.3.0	HIGH 2 exact-version OSV advisories
Choose a graph for picomatch@2.3.0 2 advisories HIGH GHSA-c2c7-rcm5-vvqj Picomatch has a ReDoS vulnerability via extglob quantifiers Fixed: 2.3.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-3v7f-55p6-f55p Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching Fixed: 2.3.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
qs	2.4.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/qs@2.4.2	HIGH 3 exact-version OSV advisories
Choose a graph for qs@2.4.2 3 advisories HIGH GHSA-gqgv-6jq5-jjj9 Prototype Pollution Protection Bypass in qs Fixed: 6.0.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-hrpp-h998-j3pp qs vulnerable to Prototype Pollution Fixed: 6.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-6rw7-vpxm-498p qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion Fixed: 6.14.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
qs	2.2.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/qs@2.2.4	HIGH 3 exact-version OSV advisories
Choose a graph for qs@2.2.4 3 advisories HIGH GHSA-gqgv-6jq5-jjj9 Prototype Pollution Protection Bypass in qs Fixed: 6.0.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. HIGH GHSA-hrpp-h998-j3pp qs vulnerable to Prototype Pollution Fixed: 6.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-6rw7-vpxm-498p qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion Fixed: 6.14.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
qs	6.5.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/qs@6.5.2	HIGH 2 exact-version OSV advisories
Choose a graph for qs@6.5.2 2 advisories HIGH GHSA-hrpp-h998-j3pp qs vulnerable to Prototype Pollution Fixed: 6.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-6rw7-vpxm-498p qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion Fixed: 6.14.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
semver	6.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/semver@6.3.0	HIGH 1 exact-version OSV advisory
Choose a graph for semver@6.3.0 1 advisory HIGH GHSA-c2qf-rxjj-qqgw semver vulnerable to Regular Expression Denial of Service Fixed: 5.7.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
semver	5.7.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/semver@5.7.1	HIGH 1 exact-version OSV advisory
Choose a graph for semver@5.7.1 1 advisory HIGH GHSA-c2qf-rxjj-qqgw semver vulnerable to Regular Expression Denial of Service Fixed: 5.7.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
semver	1.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/semver@1.1.4	HIGH 1 exact-version OSV advisory
Choose a graph for semver@1.1.4 1 advisory HIGH GHSA-x6fg-f45m-jf5q Regular Expression Denial of Service in semver Fixed: 4.3.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
semver	5.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/semver@5.5.0	HIGH 1 exact-version OSV advisory
Choose a graph for semver@5.5.0 1 advisory HIGH GHSA-c2qf-rxjj-qqgw semver vulnerable to Regular Expression Denial of Service Fixed: 5.7.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
semver	5.7.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/semver@5.7.0	HIGH 1 exact-version OSV advisory
Choose a graph for semver@5.7.0 1 advisory HIGH GHSA-c2qf-rxjj-qqgw semver vulnerable to Regular Expression Denial of Service Fixed: 5.7.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
snyk-go-plugin	1.11.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-go-plugin@1.11.1	HIGH 1 exact-version OSV advisory
Choose a graph for snyk-go-plugin@1.11.1 1 advisory HIGH GHSA-hpqj-7cj6-hfj8 Snyk CLI affected by Command Injection vulnerability Fixed: 1.19.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
snyk-gradle-plugin	3.2.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-gradle-plugin@3.2.2	HIGH 2 exact-version OSV advisories
Choose a graph for snyk-gradle-plugin@3.2.2 2 advisories HIGH GHSA-qqqw-gm93-qf6m OS Command Injection in Snyk gradle plugin Fixed: 4.5.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-4x6g-3cmx-w76r Snyk plugins vulnerable to Command Injection Fixed: 1.1.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
snyk-php-plugin	1.7.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-php-plugin@1.7.0	HIGH 1 exact-version OSV advisory
Choose a graph for snyk-php-plugin@1.7.0 1 advisory HIGH GHSA-69f9-h8f9-7vjf OS Command Injection in Snyk php plugin Fixed: 1.10.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
y18n	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/y18n@4.0.0	HIGH 1 exact-version OSV advisory
Choose a graph for y18n@4.0.0 1 advisory HIGH GHSA-c4w7-xm78-47vh Prototype Pollution in y18n Fixed: 3.2.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
y18n	3.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/y18n@3.2.1	HIGH 1 exact-version OSV advisory
Choose a graph for y18n@3.2.1 1 advisory HIGH GHSA-c4w7-xm78-47vh Prototype Pollution in y18n Fixed: 3.2.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
adm-zip	0.4.7	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/adm-zip@0.4.7	MEDIUM 1 exact-version OSV advisory
Choose a graph for adm-zip@0.4.7 1 advisory MEDIUM GHSA-3v6h-hqm4-2rg6 Arbitrary File Write in adm-zip Fixed: 0.4.11 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
express	4.12.4	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/express@4.12.4	MEDIUM 2 exact-version OSV advisories
Choose a graph for express@4.12.4 2 advisories MEDIUM GHSA-rv95-896h-c2vc Express.js Open Redirect in malformed URLs Fixed: 4.19.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-qw6h-vgh9-j6wx express vulnerable to XSS via response.redirect() Fixed: 4.20.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
hbs	4.0.4	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/hbs@4.0.4	MEDIUM 1 exact-version OSV advisory
Choose a graph for hbs@4.0.4 1 advisory MEDIUM GHSA-7f5c-rpf4-86p8 Insertion of Sensitive Information into Externally-Accessible File or Directory and Exposure of Sensitive Information to an Unauthorized Actor in hbs Fixed: Unknown · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
jquery	2.2.4	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/jquery@2.2.4	MEDIUM 4 exact-version OSV advisories
Choose a graph for jquery@2.2.4 4 advisories MEDIUM GHSA-6c3j-c64m-qhgq XSS in jQuery as used in Drupal, Backdrop CMS, and other products Fixed: 1.19.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-gxr4-xjj5-5px2 Potential XSS vulnerability in jQuery Fixed: 1.19.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-jpcq-cgw6-v4j6 Potential XSS vulnerability in jQuery Fixed: 3.5.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-rmxg-73gg-4p98 Cross-Site Scripting (XSS) in jquery Fixed: 1.12.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ms	0.7.3	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ms@0.7.3	MEDIUM 1 exact-version OSV advisory
Choose a graph for ms@0.7.3 1 advisory MEDIUM GHSA-w9mr-4mfr-499f Vercel ms Inefficient Regular Expression Complexity vulnerability Fixed: 2.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
npmconf	0.0.24	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/npmconf@0.0.24	MEDIUM 1 exact-version OSV advisory
Choose a graph for npmconf@0.0.24 1 advisory MEDIUM GHSA-57cf-349j-352g Out-of-bounds Read in npmconf Fixed: 2.1.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
@snyk/snyk-cocoapods-plugin	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@snyk/snyk-cocoapods-plugin@2.0.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for @snyk/snyk-cocoapods-plugin@2.0.1 1 advisory MEDIUM GHSA-4x6g-3cmx-w76r Snyk plugins vulnerable to Command Injection Fixed: 1.1.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ajv	6.10.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ajv@6.10.2	MEDIUM 2 exact-version OSV advisories
Choose a graph for ajv@6.10.2 2 advisories MEDIUM GHSA-2g4f-4pwh-qvx6 ajv has ReDoS when using `$data` option Fixed: 6.14.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-v88g-cgmw-v5xw Prototype Pollution in Ajv Fixed: 6.12.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
bl	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bl@3.0.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for bl@3.0.0 1 advisory MEDIUM GHSA-pp7h-53gx-mx7r Remote Memory Exposure in bl Fixed: 1.2.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
bl	2.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bl@2.2.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for bl@2.2.0 1 advisory MEDIUM GHSA-pp7h-53gx-mx7r Remote Memory Exposure in bl Fixed: 1.2.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
bn.js	4.11.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bn.js@4.11.8	MEDIUM 1 exact-version OSV advisory
Choose a graph for bn.js@4.11.8 1 advisory MEDIUM GHSA-378v-28hj-76wf bn.js affected by an infinite loop Fixed: 4.12.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
brace-expansion	1.1.11	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/brace-expansion@1.1.11	MEDIUM 2 exact-version OSV advisories
Choose a graph for brace-expansion@1.1.11 2 advisories MEDIUM GHSA-f886-m6hf-6m8v brace-expansion: Zero-step sequence causes process hang and memory exhaustion Fixed: 1.1.13 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. LOW GHSA-v6h2-p8h4-qcjw brace-expansion Regular Expression Denial of Service vulnerability Fixed: 1.1.12 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
got	6.7.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/got@6.7.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for got@6.7.1 1 advisory MEDIUM GHSA-pfrx-2q88-qq97 Got allows a redirect to a UNIX socket Fixed: 11.8.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
got	9.6.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/got@9.6.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for got@9.6.0 1 advisory MEDIUM GHSA-pfrx-2q88-qq97 Got allows a redirect to a UNIX socket Fixed: 11.8.5 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
highlight.js	9.18.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/highlight.js@9.18.1	MEDIUM 2 exact-version OSV advisories
Choose a graph for highlight.js@9.18.1 2 advisories MEDIUM GHSA-7wwv-vh3v-89cq ReDOS vulnerabities: multiple grammars Fixed: 10.4.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-vfrc-7r7c-w9mx Prototype Pollution in highlight.js Fixed: 9.18.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
hosted-git-info	2.8.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/hosted-git-info@2.8.5	MEDIUM 1 exact-version OSV advisory
Choose a graph for hosted-git-info@2.8.5 1 advisory MEDIUM GHSA-43f8-2h32-f4cj Regular Expression Denial of Service in hosted-git-info Fixed: 2.8.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
hosted-git-info	2.6.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/hosted-git-info@2.6.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for hosted-git-info@2.6.0 1 advisory MEDIUM GHSA-43f8-2h32-f4cj Regular Expression Denial of Service in hosted-git-info Fixed: 2.8.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
js-yaml	3.13.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/js-yaml@3.13.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for js-yaml@3.13.1 1 advisory MEDIUM GHSA-mh29-5h37-fv8m js-yaml has prototype pollution in merge (<<) Fixed: 3.14.2 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
jszip	3.2.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/jszip@3.2.2	MEDIUM 2 exact-version OSV advisories
Choose a graph for jszip@3.2.2 2 advisories MEDIUM GHSA-36fh-84j7-cv5h JSZip contains Path Traversal via loadAsync Fixed: 3.8.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise. MEDIUM GHSA-jg8v-48h5-wgxg jszip Vulnerable to Prototype Pollution Fixed: 2.7.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
mem	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mem@1.1.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for mem@1.1.0 1 advisory MEDIUM GHSA-4xcv-9jjx-gfj3 Denial of Service in mem Fixed: 4.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
micromatch	3.1.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/micromatch@3.1.10	MEDIUM 1 exact-version OSV advisory
Choose a graph for micromatch@3.1.10 1 advisory MEDIUM GHSA-952p-6rrq-rcjv Regular Expression Denial of Service (ReDoS) in micromatch Fixed: 4.0.8 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
mquery	1.6.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mquery@1.6.3	MEDIUM 1 exact-version OSV advisory
Choose a graph for mquery@1.6.3 1 advisory MEDIUM GHSA-45q2-34rf-mr94 Code Injection in mquery Fixed: 3.2.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
ms	0.7.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ms@0.7.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for ms@0.7.1 1 advisory MEDIUM GHSA-w9mr-4mfr-499f Vercel ms Inefficient Regular Expression Complexity vulnerability Fixed: 2.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
path-parse	1.0.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-parse@1.0.5	MEDIUM 1 exact-version OSV advisory
Choose a graph for path-parse@1.0.5 1 advisory MEDIUM GHSA-hj48-42vr-x3v9 Regular Expression Denial of Service in path-parse Fixed: 1.0.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
path-parse	1.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-parse@1.0.6	MEDIUM 1 exact-version OSV advisory
Choose a graph for path-parse@1.0.6 1 advisory MEDIUM GHSA-hj48-42vr-x3v9 Regular Expression Denial of Service in path-parse Fixed: 1.0.7 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
request	2.88.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/request@2.88.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for request@2.88.0 1 advisory MEDIUM GHSA-p8p7-x288-28g6 Server-Side Request Forgery in Request Fixed: 3.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
snyk-docker-plugin	1.33.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-docker-plugin@1.33.1	MEDIUM 1 exact-version OSV advisory
Choose a graph for snyk-docker-plugin@1.33.1 1 advisory MEDIUM GHSA-4x6g-3cmx-w76r Snyk plugins vulnerable to Command Injection Fixed: 1.1.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
snyk-mvn-plugin	2.7.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-mvn-plugin@2.7.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for snyk-mvn-plugin@2.7.0 1 advisory MEDIUM GHSA-4x6g-3cmx-w76r Snyk plugins vulnerable to Command Injection Fixed: 1.1.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
snyk-python-plugin	1.16.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-python-plugin@1.16.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for snyk-python-plugin@1.16.0 1 advisory MEDIUM GHSA-4x6g-3cmx-w76r Snyk plugins vulnerable to Command Injection Fixed: 1.1.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
snyk-sbt-plugin	2.11.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-sbt-plugin@2.11.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for snyk-sbt-plugin@2.11.0 1 advisory MEDIUM GHSA-4x6g-3cmx-w76r Snyk plugins vulnerable to Command Injection Fixed: 1.1.6 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
tough-cookie	2.4.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tough-cookie@2.4.3	MEDIUM 1 exact-version OSV advisory
Choose a graph for tough-cookie@2.4.3 1 advisory MEDIUM GHSA-72xf-g2v4-qvf3 tough-cookie Prototype Pollution vulnerability Fixed: 4.1.3 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
uuid	3.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/uuid@3.3.2	MEDIUM 1 exact-version OSV advisory
Choose a graph for uuid@3.3.2 1 advisory MEDIUM GHSA-w5hq-g745-h8pq uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided Fixed: 14.0.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
word-wrap	1.2.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/word-wrap@1.2.3	MEDIUM 1 exact-version OSV advisory
Choose a graph for word-wrap@1.2.3 1 advisory MEDIUM GHSA-j8xg-fqg3-53r7 word-wrap vulnerable to Regular Expression Denial of Service Fixed: 1.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
xml2js	0.4.19	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/xml2js@0.4.19	MEDIUM 1 exact-version OSV advisory
Choose a graph for xml2js@0.4.19 1 advisory MEDIUM GHSA-776f-qx25-q3cc xml2js is vulnerable to prototype pollution Fixed: 0.5.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
xml2js	0.4.23	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/xml2js@0.4.23	MEDIUM 1 exact-version OSV advisory
Choose a graph for xml2js@0.4.23 1 advisory MEDIUM GHSA-776f-qx25-q3cc xml2js is vulnerable to prototype pollution Fixed: 0.5.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
yargs-parser	8.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargs-parser@8.1.0	MEDIUM 1 exact-version OSV advisory
Choose a graph for yargs-parser@8.1.0 1 advisory MEDIUM GHSA-p9pc-299p-vxgp yargs-parser Vulnerable to Prototype Pollution Fixed: 5.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
yargs-parser	9.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargs-parser@9.0.2	MEDIUM 1 exact-version OSV advisory
Choose a graph for yargs-parser@9.0.2 1 advisory MEDIUM GHSA-p9pc-299p-vxgp yargs-parser Vulnerable to Prototype Pollution Fixed: 5.0.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
cookie	0.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cookie@0.1.2	LOW 1 exact-version OSV advisory
Choose a graph for cookie@0.1.2 1 advisory LOW GHSA-pxg6-pf52-xh8x cookie accepts cookie name, path, and domain with out of bounds characters Fixed: 0.7.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
cookie	0.4.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cookie@0.4.1	LOW 1 exact-version OSV advisory
Choose a graph for cookie@0.4.1 1 advisory LOW GHSA-pxg6-pf52-xh8x cookie accepts cookie name, path, and domain with out of bounds characters Fixed: 0.7.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
debug	4.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/debug@4.1.1	LOW 1 exact-version OSV advisory
Choose a graph for debug@4.1.1 1 advisory LOW GHSA-gxpj-cx7g-858c Regular Expression Denial of Service in debug Fixed: 2.6.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
debug	3.2.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/debug@3.2.6	LOW 1 exact-version OSV advisory
Choose a graph for debug@3.2.6 1 advisory LOW GHSA-gxpj-cx7g-858c Regular Expression Denial of Service in debug Fixed: 2.6.9 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
diff	4.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/diff@4.0.2	LOW 1 exact-version OSV advisory
Choose a graph for diff@4.0.2 1 advisory LOW GHSA-73rr-hh4g-fpgx jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch Fixed: 3.5.1 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
on-headers	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/on-headers@1.0.2	LOW 1 exact-version OSV advisory
Choose a graph for on-headers@1.0.2 1 advisory LOW GHSA-76c9-3jph-rj3q on-headers is vulnerable to http response header manipulation Fixed: 1.1.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
send	0.12.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/send@0.12.3	LOW 1 exact-version OSV advisory
Choose a graph for send@0.12.3 1 advisory LOW GHSA-m6fv-jmcg-4jfg send vulnerable to template injection that can lead to XSS Fixed: 0.19.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
serve-static	1.9.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/serve-static@1.9.3	LOW 1 exact-version OSV advisory
Choose a graph for serve-static@1.9.3 1 advisory LOW GHSA-cm22-4g7w-348p serve-static vulnerable to template injection that can lead to XSS Fixed: 1.16.0 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
tmp	0.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tmp@0.1.0	LOW 1 exact-version OSV advisory
Choose a graph for tmp@0.1.0 1 advisory LOW GHSA-52f5-9888-hmc6 tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter Fixed: 0.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.
tmp	0.0.33	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tmp@0.0.33	LOW 1 exact-version OSV advisory
Choose a graph for tmp@0.0.33 1 advisory LOW GHSA-52f5-9888-hmc6 tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter Fixed: 0.2.4 · Root dependency evidence; likely installed for normal use unless package metadata says otherwise.

Clear Dependencies 845 packages hidden Show clear packagesHide clear packages

Component	Version	Ecosystem	Scope	Exposure	Source	Package URL	Status
browserify	13.3.0	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/browserify@13.3.0	Clear No OSV advisories for this exact version
cfenv	1.2.2	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cfenv@1.2.2	Clear No OSV advisories for this exact version
consolidate	0.14.5	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/consolidate@0.14.5	Clear No OSV advisories for this exact version
dustjs-helpers	1.5.0	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dustjs-helpers@1.5.0	Clear No OSV advisories for this exact version
ejs-locals	1.0.2	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ejs-locals@1.0.2	Clear No OSV advisories for this exact version
errorhandler	1.2.0	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/errorhandler@1.2.0	Clear No OSV advisories for this exact version
express-session	1.17.2	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/express-session@1.17.2	Clear No OSV advisories for this exact version
file-type	8.1.0	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/file-type@8.1.0	Clear No OSV advisories for this exact version
humanize-ms	1.0.1	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/humanize-ms@1.0.1	Clear No OSV advisories for this exact version
method-override	3.0.0	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/method-override@3.0.0	Clear No OSV advisories for this exact version
mongodb	3.5.9	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mongodb@3.5.9	Clear No OSV advisories for this exact version
morgan	1.10.0	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/morgan@1.10.0	Clear No OSV advisories for this exact version
mysql	2.18.1	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mysql@2.18.1	Clear No OSV advisories for this exact version
nodemon	2.0.7	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/nodemon@2.0.7	Clear No OSV advisories for this exact version
optional	0.1.4	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/optional@0.1.4	Clear No OSV advisories for this exact version
stream-buffers	3.0.2	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/stream-buffers@3.0.2	Clear No OSV advisories for this exact version
tap	11.1.5	npm	Direct	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tap@11.1.5	Clear No OSV advisories for this exact version
@sindresorhus/is	0.14.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@sindresorhus/is@0.14.0	Clear No OSV advisories for this exact version
@snyk/cli-interface	2.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@snyk/cli-interface@2.3.0	Clear No OSV advisories for this exact version
@snyk/cli-interface	1.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@snyk/cli-interface@1.5.0	Clear No OSV advisories for this exact version
@snyk/cli-interface	2.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@snyk/cli-interface@2.2.0	Clear No OSV advisories for this exact version
@snyk/cocoapods-lockfile-parser	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@snyk/cocoapods-lockfile-parser@3.0.0	Clear No OSV advisories for this exact version
@snyk/composer-lockfile-parser	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@snyk/composer-lockfile-parser@1.2.0	Clear No OSV advisories for this exact version
@snyk/dep-graph	1.13.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@snyk/dep-graph@1.13.1	Clear No OSV advisories for this exact version
@snyk/gemfile	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@snyk/gemfile@1.2.0	Clear No OSV advisories for this exact version
@snyk/ruby-semver	2.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@snyk/ruby-semver@2.0.4	Clear No OSV advisories for this exact version
@szmarczak/http-timer	1.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@szmarczak/http-timer@1.1.2	Clear No OSV advisories for this exact version
@types/agent-base	4.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/agent-base@4.2.0	Clear No OSV advisories for this exact version
@types/bunyan	1.8.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/bunyan@1.8.6	Clear No OSV advisories for this exact version
@types/color-name	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/color-name@1.1.1	Clear No OSV advisories for this exact version
@types/debug	4.1.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/debug@4.1.5	Clear No OSV advisories for this exact version
@types/events	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/events@3.0.0	Clear No OSV advisories for this exact version
@types/js-yaml	3.12.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/js-yaml@3.12.1	Clear No OSV advisories for this exact version
@types/node	13.1.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/node@13.1.7	Clear No OSV advisories for this exact version
@types/node	6.14.9	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/node@6.14.9	Clear No OSV advisories for this exact version
@types/restify	4.3.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/restify@4.3.6	Clear No OSV advisories for this exact version
@types/semver	5.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/semver@5.5.0	Clear No OSV advisories for this exact version
@types/xml2js	0.4.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@types/xml2js@0.4.3	Clear No OSV advisories for this exact version
@yarnpkg/lockfile	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/@yarnpkg/lockfile@1.1.0	Clear No OSV advisories for this exact version
abbrev	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/abbrev@1.1.1	Clear No OSV advisories for this exact version
accepts	1.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/accepts@1.1.4	Clear No OSV advisories for this exact version
accepts	1.2.13	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/accepts@1.2.13	Clear No OSV advisories for this exact version
acorn	6.4.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/acorn@6.4.2	Clear No OSV advisories for this exact version
acorn	5.7.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/acorn@5.7.4	Clear No OSV advisories for this exact version
acorn-dynamic-import	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/acorn-dynamic-import@4.0.0	Clear No OSV advisories for this exact version
acorn-node	1.6.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/acorn-node@1.6.2	Clear No OSV advisories for this exact version
acorn-walk	6.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/acorn-walk@6.1.1	Clear No OSV advisories for this exact version
agent-base	4.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/agent-base@4.3.0	Clear No OSV advisories for this exact version
agent-base	4.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/agent-base@4.2.1	Clear No OSV advisories for this exact version
align-text	0.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/align-text@0.1.4	Clear No OSV advisories for this exact version
amdefine	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/amdefine@1.0.1	Clear No OSV advisories for this exact version
ansi-align	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-align@2.0.0	Clear No OSV advisories for this exact version
ansi-align	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-align@3.0.0	Clear No OSV advisories for this exact version
ansi-escapes	3.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-escapes@3.2.0	Clear No OSV advisories for this exact version
ansi-regex	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-regex@2.1.1	Clear No OSV advisories for this exact version
ansi-styles	3.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-styles@3.2.1	Clear No OSV advisories for this exact version
ansi-styles	4.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-styles@4.2.1	Clear No OSV advisories for this exact version
ansi-styles	4.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-styles@4.3.0	Clear No OSV advisories for this exact version
ansi-styles	2.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansi-styles@2.2.1	Clear No OSV advisories for this exact version
ansicolors	0.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ansicolors@0.3.2	Clear No OSV advisories for this exact version
any-promise	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/any-promise@1.3.0	Clear No OSV advisories for this exact version
anymatch	3.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/anymatch@3.1.2	Clear No OSV advisories for this exact version
app-root-path	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/app-root-path@3.0.0	Clear No OSV advisories for this exact version
append-transform	0.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/append-transform@0.4.0	Clear No OSV advisories for this exact version
archy	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/archy@1.0.0	Clear No OSV advisories for this exact version
argparse	1.0.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/argparse@1.0.10	Clear No OSV advisories for this exact version
arr-diff	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/arr-diff@4.0.0	Clear No OSV advisories for this exact version
arr-flatten	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/arr-flatten@1.1.0	Clear No OSV advisories for this exact version
arr-union	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/arr-union@3.1.0	Clear No OSV advisories for this exact version
array-filter	0.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/array-filter@0.0.1	Clear No OSV advisories for this exact version
array-map	0.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/array-map@0.0.0	Clear No OSV advisories for this exact version
array-reduce	0.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/array-reduce@0.0.0	Clear No OSV advisories for this exact version
array-unique	0.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/array-unique@0.3.2	Clear No OSV advisories for this exact version
arrify	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/arrify@1.0.1	Clear No OSV advisories for this exact version
asap	2.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/asap@2.0.6	Clear No OSV advisories for this exact version
asn1	0.2.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/asn1@0.2.4	Clear No OSV advisories for this exact version
asn1.js	4.10.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/asn1.js@4.10.1	Clear No OSV advisories for this exact version
assert	1.4.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/assert@1.4.1	Clear No OSV advisories for this exact version
assert-plus	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/assert-plus@1.0.0	Clear No OSV advisories for this exact version
assign-symbols	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/assign-symbols@1.0.0	Clear No OSV advisories for this exact version
ast-types	0.13.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ast-types@0.13.2	Clear No OSV advisories for this exact version
async	0.9.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/async@0.9.0	Clear No OSV advisories for this exact version
async	1.5.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/async@1.5.2	Clear No OSV advisories for this exact version
async-cache	0.1.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/async-cache@0.1.5	Clear No OSV advisories for this exact version
asynckit	0.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/asynckit@0.4.0	Clear No OSV advisories for this exact version
atob	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/atob@2.1.1	Clear No OSV advisories for this exact version
aws-sign2	0.7.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/aws-sign2@0.7.0	Clear No OSV advisories for this exact version
aws4	1.9.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/aws4@1.9.1	Clear No OSV advisories for this exact version
babel-code-frame	6.26.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/babel-code-frame@6.26.0	Clear No OSV advisories for this exact version
babel-generator	6.26.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/babel-generator@6.26.1	Clear No OSV advisories for this exact version
babel-messages	6.23.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/babel-messages@6.23.0	Clear No OSV advisories for this exact version
babel-runtime	6.26.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/babel-runtime@6.26.0	Clear No OSV advisories for this exact version
babel-template	6.26.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/babel-template@6.26.0	Clear No OSV advisories for this exact version
babel-types	6.26.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/babel-types@6.26.0	Clear No OSV advisories for this exact version
babylon	6.18.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/babylon@6.18.0	Clear No OSV advisories for this exact version
balanced-match	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/balanced-match@1.0.0	Clear No OSV advisories for this exact version
base	0.11.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/base@0.11.2	Clear No OSV advisories for this exact version
base64-js	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/base64-js@1.3.0	Clear No OSV advisories for this exact version
basic-auth	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/basic-auth@2.0.1	Clear No OSV advisories for this exact version
bcrypt-pbkdf	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bcrypt-pbkdf@1.0.2	Clear No OSV advisories for this exact version
bignumber.js	9.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bignumber.js@9.0.0	Clear No OSV advisories for this exact version
binary-extensions	2.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/binary-extensions@2.2.0	Clear No OSV advisories for this exact version
bind-obj-methods	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bind-obj-methods@2.0.0	Clear No OSV advisories for this exact version
bluebird	3.5.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bluebird@3.5.4	Clear No OSV advisories for this exact version
bluebird	2.9.26	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bluebird@2.9.26	Clear No OSV advisories for this exact version
boxen	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/boxen@1.3.0	Clear No OSV advisories for this exact version
boxen	4.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/boxen@4.2.0	Clear No OSV advisories for this exact version
brorand	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/brorand@1.1.0	Clear No OSV advisories for this exact version
browser-pack	6.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/browser-pack@6.1.0	Clear No OSV advisories for this exact version
browser-resolve	1.11.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/browser-resolve@1.11.3	Clear No OSV advisories for this exact version
browserify-aes	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/browserify-aes@1.2.0	Clear No OSV advisories for this exact version
browserify-cipher	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/browserify-cipher@1.0.1	Clear No OSV advisories for this exact version
browserify-des	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/browserify-des@1.0.2	Clear No OSV advisories for this exact version
browserify-rsa	4.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/browserify-rsa@4.0.1	Clear No OSV advisories for this exact version
browserify-zlib	0.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/browserify-zlib@0.1.4	Clear No OSV advisories for this exact version
bson	1.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bson@1.1.4	Clear No OSV advisories for this exact version
buffer	4.9.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/buffer@4.9.1	Clear No OSV advisories for this exact version
buffer	5.6.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/buffer@5.6.0	Clear No OSV advisories for this exact version
buffer-from	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/buffer-from@1.1.1	Clear No OSV advisories for this exact version
buffer-xor	1.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/buffer-xor@1.0.3	Clear No OSV advisories for this exact version
builtin-modules	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/builtin-modules@1.1.1	Clear No OSV advisories for this exact version
builtin-status-codes	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/builtin-status-codes@3.0.0	Clear No OSV advisories for this exact version
busboy	0.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/busboy@0.3.1	Clear No OSV advisories for this exact version
bytes	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bytes@1.0.0	Clear No OSV advisories for this exact version
bytes	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/bytes@3.1.0	Clear No OSV advisories for this exact version
cache-base	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cache-base@1.0.1	Clear No OSV advisories for this exact version
cacheable-request	6.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cacheable-request@6.1.0	Clear No OSV advisories for this exact version
caching-transform	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/caching-transform@1.0.1	Clear No OSV advisories for this exact version
camelcase	4.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/camelcase@4.1.0	Clear No OSV advisories for this exact version
camelcase	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/camelcase@2.1.1	Clear No OSV advisories for this exact version
camelcase	5.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/camelcase@5.3.1	Clear No OSV advisories for this exact version
camelcase	1.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/camelcase@1.2.1	Clear No OSV advisories for this exact version
capture-stack-trace	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/capture-stack-trace@1.0.1	Clear No OSV advisories for this exact version
caseless	0.12.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/caseless@0.12.0	Clear No OSV advisories for this exact version
center-align	0.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/center-align@0.1.3	Clear No OSV advisories for this exact version
chalk	2.4.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/chalk@2.4.2	Clear No OSV advisories for this exact version
chalk	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/chalk@3.0.0	Clear No OSV advisories for this exact version
chalk	1.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/chalk@1.1.3	Clear No OSV advisories for this exact version
chardet	0.7.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/chardet@0.7.0	Clear No OSV advisories for this exact version
chokidar	3.5.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/chokidar@3.5.1	Clear No OSV advisories for this exact version
ci-info	1.6.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ci-info@1.6.0	Clear No OSV advisories for this exact version
ci-info	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ci-info@2.0.0	Clear No OSV advisories for this exact version
class-utils	0.3.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/class-utils@0.3.6	Clear No OSV advisories for this exact version
clean-yaml-object	0.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/clean-yaml-object@0.1.0	Clear No OSV advisories for this exact version
cli-boxes	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cli-boxes@1.0.0	Clear No OSV advisories for this exact version
cli-boxes	2.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cli-boxes@2.2.1	Clear No OSV advisories for this exact version
cli-cursor	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cli-cursor@2.1.0	Clear No OSV advisories for this exact version
cli-highlight	2.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cli-highlight@2.1.4	Clear No OSV advisories for this exact version
cli-spinner	0.2.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cli-spinner@0.2.10	Clear No OSV advisories for this exact version
cli-width	2.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cli-width@2.2.0	Clear No OSV advisories for this exact version
cliui	6.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cliui@6.0.0	Clear No OSV advisories for this exact version
cliui	3.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cliui@3.2.0	Clear No OSV advisories for this exact version
cliui	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cliui@2.1.0	Clear No OSV advisories for this exact version
cliui	4.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cliui@4.1.0	Clear No OSV advisories for this exact version
cliui	5.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cliui@5.0.0	Clear No OSV advisories for this exact version
clone-deep	0.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/clone-deep@0.3.0	Clear No OSV advisories for this exact version
clone-response	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/clone-response@1.0.2	Clear No OSV advisories for this exact version
co	4.6.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/co@4.6.0	Clear No OSV advisories for this exact version
code-point-at	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/code-point-at@1.1.0	Clear No OSV advisories for this exact version
collection-visit	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/collection-visit@1.0.0	Clear No OSV advisories for this exact version
color-convert	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/color-convert@2.0.1	Clear No OSV advisories for this exact version
color-convert	1.9.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/color-convert@1.9.3	Clear No OSV advisories for this exact version
color-name	1.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/color-name@1.1.4	Clear No OSV advisories for this exact version
color-name	1.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/color-name@1.1.3	Clear No OSV advisories for this exact version
color-support	1.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/color-support@1.1.3	Clear No OSV advisories for this exact version
combine-source-map	0.8.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/combine-source-map@0.8.0	Clear No OSV advisories for this exact version
combined-stream	1.0.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/combined-stream@1.0.8	Clear No OSV advisories for this exact version
commondir	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/commondir@1.0.1	Clear No OSV advisories for this exact version
component-emitter	1.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/component-emitter@1.2.1	Clear No OSV advisories for this exact version
concat-map	0.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/concat-map@0.0.1	Clear No OSV advisories for this exact version
concat-stream	1.5.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/concat-stream@1.5.2	Clear No OSV advisories for this exact version
concat-stream	1.6.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/concat-stream@1.6.2	Clear No OSV advisories for this exact version
config-chain	1.1.12	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/config-chain@1.1.12	Clear No OSV advisories for this exact version
configstore	3.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/configstore@3.1.2	Clear No OSV advisories for this exact version
configstore	5.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/configstore@5.0.1	Clear No OSV advisories for this exact version
connect-busboy	0.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/connect-busboy@0.0.2	Clear No OSV advisories for this exact version
console-browserify	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/console-browserify@1.1.0	Clear No OSV advisories for this exact version
constants-browserify	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/constants-browserify@1.0.0	Clear No OSV advisories for this exact version
content-disposition	0.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/content-disposition@0.5.0	Clear No OSV advisories for this exact version
content-type	1.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/content-type@1.0.4	Clear No OSV advisories for this exact version
convert-source-map	1.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/convert-source-map@1.1.3	Clear No OSV advisories for this exact version
convert-source-map	1.5.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/convert-source-map@1.5.1	Clear No OSV advisories for this exact version
cookie-signature	1.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/cookie-signature@1.0.6	Clear No OSV advisories for this exact version
copy-descriptor	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/copy-descriptor@0.1.1	Clear No OSV advisories for this exact version
core-js	3.6.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/core-js@3.6.4	Clear No OSV advisories for this exact version
core-js	2.5.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/core-js@2.5.6	Clear No OSV advisories for this exact version
core-util-is	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/core-util-is@1.0.2	Clear No OSV advisories for this exact version
coveralls	3.0.9	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/coveralls@3.0.9	Clear No OSV advisories for this exact version
crc	3.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/crc@3.2.1	Clear No OSV advisories for this exact version
create-ecdh	4.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/create-ecdh@4.0.3	Clear No OSV advisories for this exact version
create-error-class	3.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/create-error-class@3.0.2	Clear No OSV advisories for this exact version
create-hash	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/create-hash@1.2.0	Clear No OSV advisories for this exact version
create-hmac	1.1.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/create-hmac@1.1.7	Clear No OSV advisories for this exact version
crypto-browserify	3.12.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/crypto-browserify@3.12.0	Clear No OSV advisories for this exact version
crypto-random-string	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/crypto-random-string@1.0.0	Clear No OSV advisories for this exact version
crypto-random-string	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/crypto-random-string@2.0.0	Clear No OSV advisories for this exact version
dash-ast	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dash-ast@1.0.0	Clear No OSV advisories for this exact version
dashdash	1.14.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dashdash@1.14.1	Clear No OSV advisories for this exact version
data-uri-to-buffer	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/data-uri-to-buffer@1.2.0	Clear No OSV advisories for this exact version
date-now	0.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/date-now@0.1.4	Clear No OSV advisories for this exact version
debug	2.6.9	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/debug@2.6.9	Clear No OSV advisories for this exact version
debug	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/debug@3.1.0	Clear No OSV advisories for this exact version
debug	3.2.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/debug@3.2.7	Clear No OSV advisories for this exact version
debug-log	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/debug-log@1.0.1	Clear No OSV advisories for this exact version
decamelize	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/decamelize@1.2.0	Clear No OSV advisories for this exact version
decompress-response	3.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/decompress-response@3.3.0	Clear No OSV advisories for this exact version
deep-extend	0.6.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/deep-extend@0.6.0	Clear No OSV advisories for this exact version
deep-is	0.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/deep-is@0.1.3	Clear No OSV advisories for this exact version
default-require-extensions	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/default-require-extensions@1.0.0	Clear No OSV advisories for this exact version
defer-to-connect	1.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/defer-to-connect@1.1.3	Clear No OSV advisories for this exact version
define-property	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/define-property@1.0.0	Clear No OSV advisories for this exact version
define-property	0.2.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/define-property@0.2.5	Clear No OSV advisories for this exact version
define-property	2.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/define-property@2.0.2	Clear No OSV advisories for this exact version
defined	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/defined@1.0.0	Clear No OSV advisories for this exact version
delayed-stream	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/delayed-stream@1.0.0	Clear No OSV advisories for this exact version
denque	1.4.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/denque@1.4.1	Clear No OSV advisories for this exact version
depd	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/depd@1.0.1	Clear No OSV advisories for this exact version
depd	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/depd@2.0.0	Clear No OSV advisories for this exact version
depd	1.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/depd@1.1.2	Clear No OSV advisories for this exact version
deps-sort	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/deps-sort@2.0.0	Clear No OSV advisories for this exact version
des.js	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/des.js@1.0.0	Clear No OSV advisories for this exact version
destroy	1.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/destroy@1.0.3	Clear No OSV advisories for this exact version
detect-indent	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/detect-indent@4.0.0	Clear No OSV advisories for this exact version
detective	4.7.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/detective@4.7.1	Clear No OSV advisories for this exact version
diffie-hellman	5.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/diffie-hellman@5.0.3	Clear No OSV advisories for this exact version
dockerfile-ast	0.0.16	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dockerfile-ast@0.0.16	Clear No OSV advisories for this exact version
domain-browser	1.1.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/domain-browser@1.1.7	Clear No OSV advisories for this exact version
dot-prop	5.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dot-prop@5.3.0	Clear No OSV advisories for this exact version
dotenv	6.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dotenv@6.2.0	Clear No OSV advisories for this exact version
dotnet-deps-parser	4.9.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/dotnet-deps-parser@4.9.0	Clear No OSV advisories for this exact version
duplexer2	0.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/duplexer2@0.1.4	Clear No OSV advisories for this exact version
duplexer3	0.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/duplexer3@0.1.4	Clear No OSV advisories for this exact version
ecc-jsbn	0.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ecc-jsbn@0.1.2	Clear No OSV advisories for this exact version
ee-first	1.0.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ee-first@1.0.5	Clear No OSV advisories for this exact version
ee-first	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ee-first@1.1.0	Clear No OSV advisories for this exact version
ee-first	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ee-first@1.1.1	Clear No OSV advisories for this exact version
email-validator	2.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/email-validator@2.0.4	Clear No OSV advisories for this exact version
emoji-regex	8.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/emoji-regex@8.0.0	Clear No OSV advisories for this exact version
emoji-regex	7.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/emoji-regex@7.0.3	Clear No OSV advisories for this exact version
end-of-stream	1.4.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/end-of-stream@1.4.4	Clear No OSV advisories for this exact version
error-ex	1.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/error-ex@1.3.1	Clear No OSV advisories for this exact version
es6-promise	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/es6-promise@2.1.1	Clear No OSV advisories for this exact version
es6-promise	4.2.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/es6-promise@4.2.8	Clear No OSV advisories for this exact version
es6-promisify	5.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/es6-promisify@5.0.0	Clear No OSV advisories for this exact version
escape-goat	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/escape-goat@2.1.1	Clear No OSV advisories for this exact version
escape-html	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/escape-html@1.0.1	Clear No OSV advisories for this exact version
escape-string-regexp	1.0.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/escape-string-regexp@1.0.5	Clear No OSV advisories for this exact version
escodegen	1.12.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/escodegen@1.12.1	Clear No OSV advisories for this exact version
esprima	3.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/esprima@3.1.3	Clear No OSV advisories for this exact version
esprima	4.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/esprima@4.0.1	Clear No OSV advisories for this exact version
estraverse	4.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/estraverse@4.3.0	Clear No OSV advisories for this exact version
esutils	2.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/esutils@2.0.3	Clear No OSV advisories for this exact version
esutils	2.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/esutils@2.0.2	Clear No OSV advisories for this exact version
etag	1.6.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/etag@1.6.0	Clear No OSV advisories for this exact version
events	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/events@1.1.1	Clear No OSV advisories for this exact version
events-to-array	1.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/events-to-array@1.1.2	Clear No OSV advisories for this exact version
evp_bytestokey	1.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/evp_bytestokey@1.0.3	Clear No OSV advisories for this exact version
execa	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/execa@1.0.0	Clear No OSV advisories for this exact version
execa	0.7.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/execa@0.7.0	Clear No OSV advisories for this exact version
expand-brackets	2.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/expand-brackets@2.1.4	Clear No OSV advisories for this exact version
extend	3.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/extend@3.0.2	Clear No OSV advisories for this exact version
extend-shallow	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/extend-shallow@2.0.1	Clear No OSV advisories for this exact version
extend-shallow	3.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/extend-shallow@3.0.2	Clear No OSV advisories for this exact version
external-editor	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/external-editor@3.1.0	Clear No OSV advisories for this exact version
extglob	2.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/extglob@2.0.4	Clear No OSV advisories for this exact version
extsprintf	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/extsprintf@1.3.0	Clear No OSV advisories for this exact version
fast-deep-equal	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fast-deep-equal@2.0.1	Clear No OSV advisories for this exact version
fast-json-stable-stringify	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fast-json-stable-stringify@2.1.0	Clear No OSV advisories for this exact version
fast-levenshtein	2.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fast-levenshtein@2.0.6	Clear No OSV advisories for this exact version
fd	0.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fd@0.0.3	Clear No OSV advisories for this exact version
figlet	1.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/figlet@1.5.0	Clear No OSV advisories for this exact version
figures	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/figures@2.0.0	Clear No OSV advisories for this exact version
file-uri-to-path	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/file-uri-to-path@1.0.0	Clear No OSV advisories for this exact version
fill-range	7.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fill-range@7.0.1	Clear No OSV advisories for this exact version
fill-range	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fill-range@4.0.0	Clear No OSV advisories for this exact version
finalhandler	0.3.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/finalhandler@0.3.6	Clear No OSV advisories for this exact version
find-cache-dir	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/find-cache-dir@0.1.1	Clear No OSV advisories for this exact version
find-up	4.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/find-up@4.1.0	Clear No OSV advisories for this exact version
find-up	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/find-up@2.1.0	Clear No OSV advisories for this exact version
find-up	1.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/find-up@1.1.2	Clear No OSV advisories for this exact version
find-up	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/find-up@3.0.0	Clear No OSV advisories for this exact version
for-in	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/for-in@1.0.2	Clear No OSV advisories for this exact version
for-in	0.1.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/for-in@0.1.8	Clear No OSV advisories for this exact version
for-own	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/for-own@1.0.0	Clear No OSV advisories for this exact version
foreachasync	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/foreachasync@3.0.0	Clear No OSV advisories for this exact version
foreground-child	1.5.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/foreground-child@1.5.6	Clear No OSV advisories for this exact version
forever-agent	0.6.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/forever-agent@0.6.1	Clear No OSV advisories for this exact version
forwarded	0.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/forwarded@0.1.2	Clear No OSV advisories for this exact version
fragment-cache	0.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fragment-cache@0.2.1	Clear No OSV advisories for this exact version
fs-constants	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fs-constants@1.0.0	Clear No OSV advisories for this exact version
fs-exists-cached	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fs-exists-cached@1.0.0	Clear No OSV advisories for this exact version
fs-extra	0.22.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fs-extra@0.22.1	Clear No OSV advisories for this exact version
fs.realpath	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fs.realpath@1.0.0	Clear No OSV advisories for this exact version
fsevents	2.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/fsevents@2.3.2	Clear No OSV advisories for this exact version
ftp	0.3.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ftp@0.3.10	Clear No OSV advisories for this exact version
function-bind	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/function-bind@1.1.1	Clear No OSV advisories for this exact version
function-loop	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/function-loop@1.0.2	Clear No OSV advisories for this exact version
get-assigned-identifiers	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/get-assigned-identifiers@1.2.0	Clear No OSV advisories for this exact version
get-caller-file	2.0.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/get-caller-file@2.0.5	Clear No OSV advisories for this exact version
get-caller-file	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/get-caller-file@1.0.2	Clear No OSV advisories for this exact version
get-stream	5.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/get-stream@5.2.0	Clear No OSV advisories for this exact version
get-stream	4.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/get-stream@4.1.0	Clear No OSV advisories for this exact version
get-stream	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/get-stream@3.0.0	Clear No OSV advisories for this exact version
get-uri	2.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/get-uri@2.0.4	Clear No OSV advisories for this exact version
get-value	2.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/get-value@2.0.6	Clear No OSV advisories for this exact version
getpass	0.1.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/getpass@0.1.7	Clear No OSV advisories for this exact version
git-up	4.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/git-up@4.0.1	Clear No OSV advisories for this exact version
git-url-parse	11.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/git-url-parse@11.1.2	Clear No OSV advisories for this exact version
glob	7.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/glob@7.1.3	Clear No OSV advisories for this exact version
glob	7.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/glob@7.1.2	Clear No OSV advisories for this exact version
glob-parent	5.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/glob-parent@5.1.2	Clear No OSV advisories for this exact version
global-dirs	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/global-dirs@0.1.1	Clear No OSV advisories for this exact version
global-dirs	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/global-dirs@2.1.0	Clear No OSV advisories for this exact version
globals	9.18.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/globals@9.18.0	Clear No OSV advisories for this exact version
graceful-fs	4.1.15	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/graceful-fs@4.1.15	Clear No OSV advisories for this exact version
graceful-fs	4.1.11	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/graceful-fs@4.1.11	Clear No OSV advisories for this exact version
graceful-fs	1.2.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/graceful-fs@1.2.3	Clear No OSV advisories for this exact version
graphlib	2.1.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/graphlib@2.1.8	Clear No OSV advisories for this exact version
har-schema	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/har-schema@2.0.0	Clear No OSV advisories for this exact version
har-validator	5.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/har-validator@5.1.3	Clear No OSV advisories for this exact version
has	1.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has@1.0.3	Clear No OSV advisories for this exact version
has-ansi	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has-ansi@2.0.0	Clear No OSV advisories for this exact version
has-flag	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has-flag@4.0.0	Clear No OSV advisories for this exact version
has-flag	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has-flag@3.0.0	Clear No OSV advisories for this exact version
has-flag	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has-flag@1.0.0	Clear No OSV advisories for this exact version
has-value	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has-value@1.0.0	Clear No OSV advisories for this exact version
has-value	0.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has-value@0.3.1	Clear No OSV advisories for this exact version
has-values	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has-values@1.0.0	Clear No OSV advisories for this exact version
has-values	0.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has-values@0.1.4	Clear No OSV advisories for this exact version
has-yarn	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/has-yarn@2.1.0	Clear No OSV advisories for this exact version
hash-base	3.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/hash-base@3.0.4	Clear No OSV advisories for this exact version
hash.js	1.1.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/hash.js@1.1.7	Clear No OSV advisories for this exact version
hmac-drbg	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/hmac-drbg@1.0.1	Clear No OSV advisories for this exact version
hooks-fixed	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/hooks-fixed@1.1.0	Clear No OSV advisories for this exact version
htmlescape	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/htmlescape@1.1.1	Clear No OSV advisories for this exact version
http-errors	1.7.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/http-errors@1.7.3	Clear No OSV advisories for this exact version
http-proxy-agent	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/http-proxy-agent@2.1.0	Clear No OSV advisories for this exact version
http-signature	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/http-signature@1.2.0	Clear No OSV advisories for this exact version
https-browserify	0.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/https-browserify@0.0.1	Clear No OSV advisories for this exact version
https-proxy-agent	3.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/https-proxy-agent@3.0.1	Clear No OSV advisories for this exact version
iconv-lite	0.4.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/iconv-lite@0.4.4	Clear No OSV advisories for this exact version
iconv-lite	0.4.24	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/iconv-lite@0.4.24	Clear No OSV advisories for this exact version
ieee754	1.1.13	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ieee754@1.1.13	Clear No OSV advisories for this exact version
ignore-by-default	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ignore-by-default@1.0.1	Clear No OSV advisories for this exact version
immediate	3.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/immediate@3.0.6	Clear No OSV advisories for this exact version
import-lazy	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/import-lazy@2.1.0	Clear No OSV advisories for this exact version
imurmurhash	0.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/imurmurhash@0.1.4	Clear No OSV advisories for this exact version
indexof	0.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/indexof@0.0.1	Clear No OSV advisories for this exact version
inflight	1.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/inflight@1.0.6	Clear No OSV advisories for this exact version
inherits	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/inherits@2.0.1	Clear No OSV advisories for this exact version
inherits	2.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/inherits@2.0.4	Clear No OSV advisories for this exact version
inherits	2.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/inherits@2.0.3	Clear No OSV advisories for this exact version
inherits	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/inherits@1.0.2	Clear No OSV advisories for this exact version
ini	1.3.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ini@1.3.7	Clear No OSV advisories for this exact version
inline-source-map	0.6.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/inline-source-map@0.6.2	Clear No OSV advisories for this exact version
inquirer	6.5.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/inquirer@6.5.2	Clear No OSV advisories for this exact version
insert-module-globals	7.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/insert-module-globals@7.2.0	Clear No OSV advisories for this exact version
invariant	2.2.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/invariant@2.2.4	Clear No OSV advisories for this exact version
invert-kv	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/invert-kv@1.0.0	Clear No OSV advisories for this exact version
ipaddr.js	1.0.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ipaddr.js@1.0.5	Clear No OSV advisories for this exact version
is-accessor-descriptor	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-accessor-descriptor@1.0.0	Clear No OSV advisories for this exact version
is-accessor-descriptor	0.1.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-accessor-descriptor@0.1.6	Clear No OSV advisories for this exact version
is-arrayish	0.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-arrayish@0.2.1	Clear No OSV advisories for this exact version
is-binary-path	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-binary-path@2.1.0	Clear No OSV advisories for this exact version
is-buffer	1.1.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-buffer@1.1.6	Clear No OSV advisories for this exact version
is-builtin-module	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-builtin-module@1.0.0	Clear No OSV advisories for this exact version
is-ci	1.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-ci@1.2.1	Clear No OSV advisories for this exact version
is-ci	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-ci@2.0.0	Clear No OSV advisories for this exact version
is-data-descriptor	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-data-descriptor@1.0.0	Clear No OSV advisories for this exact version
is-data-descriptor	0.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-data-descriptor@0.1.4	Clear No OSV advisories for this exact version
is-descriptor	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-descriptor@1.0.2	Clear No OSV advisories for this exact version
is-descriptor	0.1.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-descriptor@0.1.6	Clear No OSV advisories for this exact version
is-extendable	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-extendable@0.1.1	Clear No OSV advisories for this exact version
is-extendable	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-extendable@1.0.1	Clear No OSV advisories for this exact version
is-extglob	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-extglob@2.1.1	Clear No OSV advisories for this exact version
is-finite	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-finite@1.0.2	Clear No OSV advisories for this exact version
is-fullwidth-code-point	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-fullwidth-code-point@3.0.0	Clear No OSV advisories for this exact version
is-fullwidth-code-point	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-fullwidth-code-point@1.0.0	Clear No OSV advisories for this exact version
is-fullwidth-code-point	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-fullwidth-code-point@2.0.0	Clear No OSV advisories for this exact version
is-glob	4.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-glob@4.0.1	Clear No OSV advisories for this exact version
is-installed-globally	0.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-installed-globally@0.1.0	Clear No OSV advisories for this exact version
is-installed-globally	0.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-installed-globally@0.3.2	Clear No OSV advisories for this exact version
is-npm	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-npm@1.0.0	Clear No OSV advisories for this exact version
is-npm	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-npm@4.0.0	Clear No OSV advisories for this exact version
is-number	7.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-number@7.0.0	Clear No OSV advisories for this exact version
is-number	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-number@3.0.0	Clear No OSV advisories for this exact version
is-number	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-number@4.0.0	Clear No OSV advisories for this exact version
is-obj	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-obj@1.0.1	Clear No OSV advisories for this exact version
is-obj	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-obj@2.0.0	Clear No OSV advisories for this exact version
is-odd	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-odd@2.0.0	Clear No OSV advisories for this exact version
is-path-inside	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-path-inside@1.0.1	Clear No OSV advisories for this exact version
is-path-inside	3.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-path-inside@3.0.3	Clear No OSV advisories for this exact version
is-plain-object	2.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-plain-object@2.0.4	Clear No OSV advisories for this exact version
is-promise	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-promise@2.1.0	Clear No OSV advisories for this exact version
is-redirect	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-redirect@1.0.0	Clear No OSV advisories for this exact version
is-retry-allowed	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-retry-allowed@1.2.0	Clear No OSV advisories for this exact version
is-ssh	1.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-ssh@1.3.1	Clear No OSV advisories for this exact version
is-stream	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-stream@1.1.0	Clear No OSV advisories for this exact version
is-typedarray	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-typedarray@1.0.0	Clear No OSV advisories for this exact version
is-utf8	0.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-utf8@0.2.1	Clear No OSV advisories for this exact version
is-windows	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-windows@1.0.2	Clear No OSV advisories for this exact version
is-wsl	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-wsl@1.1.0	Clear No OSV advisories for this exact version
is-yarn-global	0.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/is-yarn-global@0.3.0	Clear No OSV advisories for this exact version
isarray	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/isarray@1.0.0	Clear No OSV advisories for this exact version
isarray	0.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/isarray@0.0.1	Clear No OSV advisories for this exact version
isarray	2.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/isarray@2.0.4	Clear No OSV advisories for this exact version
isexe	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/isexe@2.0.0	Clear No OSV advisories for this exact version
isobject	3.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/isobject@3.0.1	Clear No OSV advisories for this exact version
isobject	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/isobject@2.1.0	Clear No OSV advisories for this exact version
isstream	0.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/isstream@0.1.2	Clear No OSV advisories for this exact version
istanbul-lib-coverage	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/istanbul-lib-coverage@1.2.0	Clear No OSV advisories for this exact version
istanbul-lib-hook	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/istanbul-lib-hook@1.1.0	Clear No OSV advisories for this exact version
istanbul-lib-instrument	1.10.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/istanbul-lib-instrument@1.10.1	Clear No OSV advisories for this exact version
istanbul-lib-report	1.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/istanbul-lib-report@1.1.3	Clear No OSV advisories for this exact version
istanbul-lib-source-maps	1.2.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/istanbul-lib-source-maps@1.2.3	Clear No OSV advisories for this exact version
istanbul-reports	1.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/istanbul-reports@1.4.0	Clear No OSV advisories for this exact version
js-tokens	3.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/js-tokens@3.0.2	Clear No OSV advisories for this exact version
jsbn	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/jsbn@0.1.1	Clear No OSV advisories for this exact version
jsesc	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/jsesc@1.3.0	Clear No OSV advisories for this exact version
json-buffer	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/json-buffer@3.0.0	Clear No OSV advisories for this exact version
json-schema-traverse	0.4.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/json-schema-traverse@0.4.1	Clear No OSV advisories for this exact version
json-stable-stringify	0.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/json-stable-stringify@0.0.1	Clear No OSV advisories for this exact version
json-stringify-safe	5.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/json-stringify-safe@5.0.1	Clear No OSV advisories for this exact version
jsonfile	2.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/jsonfile@2.4.0	Clear No OSV advisories for this exact version
jsonify	0.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/jsonify@0.0.0	Clear No OSV advisories for this exact version
jsonparse	1.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/jsonparse@1.3.1	Clear No OSV advisories for this exact version
JSONStream	1.3.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/JSONStream@1.3.5	Clear No OSV advisories for this exact version
jsprim	1.4.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/jsprim@1.4.1	Clear No OSV advisories for this exact version
kareem	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/kareem@1.0.1	Clear No OSV advisories for this exact version
keyv	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/keyv@3.1.0	Clear No OSV advisories for this exact version
kind-of	3.2.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/kind-of@3.2.2	Clear No OSV advisories for this exact version
kind-of	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/kind-of@4.0.0	Clear No OSV advisories for this exact version
kind-of	5.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/kind-of@5.1.0	Clear No OSV advisories for this exact version
kind-of	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/kind-of@2.0.1	Clear No OSV advisories for this exact version
labeled-stream-splicer	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/labeled-stream-splicer@2.0.1	Clear No OSV advisories for this exact version
latest-version	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/latest-version@3.1.0	Clear No OSV advisories for this exact version
latest-version	5.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/latest-version@5.1.0	Clear No OSV advisories for this exact version
lazy-cache	0.2.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lazy-cache@0.2.7	Clear No OSV advisories for this exact version
lazy-cache	1.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lazy-cache@1.0.4	Clear No OSV advisories for this exact version
lcid	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lcid@1.0.0	Clear No OSV advisories for this exact version
lcov-parse	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lcov-parse@1.0.0	Clear No OSV advisories for this exact version
levn	0.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/levn@0.3.0	Clear No OSV advisories for this exact version
lie	3.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lie@3.3.0	Clear No OSV advisories for this exact version
load-json-file	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/load-json-file@1.1.0	Clear No OSV advisories for this exact version
locate-path	5.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/locate-path@5.0.0	Clear No OSV advisories for this exact version
locate-path	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/locate-path@2.0.0	Clear No OSV advisories for this exact version
locate-path	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/locate-path@3.0.0	Clear No OSV advisories for this exact version
lodash.assign	4.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash.assign@4.2.0	Clear No OSV advisories for this exact version
lodash.assignin	4.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash.assignin@4.2.0	Clear No OSV advisories for this exact version
lodash.clone	4.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash.clone@4.5.0	Clear No OSV advisories for this exact version
lodash.clonedeep	4.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash.clonedeep@4.5.0	Clear No OSV advisories for this exact version
lodash.flatten	4.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash.flatten@4.4.0	Clear No OSV advisories for this exact version
lodash.get	4.4.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash.get@4.4.2	Clear No OSV advisories for this exact version
lodash.memoize	3.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lodash.memoize@3.0.4	Clear No OSV advisories for this exact version
log-driver	1.2.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/log-driver@1.2.7	Clear No OSV advisories for this exact version
longest	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/longest@1.0.1	Clear No OSV advisories for this exact version
loose-envify	1.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/loose-envify@1.3.1	Clear No OSV advisories for this exact version
lowercase-keys	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lowercase-keys@2.0.0	Clear No OSV advisories for this exact version
lowercase-keys	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lowercase-keys@1.0.1	Clear No OSV advisories for this exact version
lru-cache	4.1.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lru-cache@4.1.5	Clear No OSV advisories for this exact version
lru-cache	2.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lru-cache@2.3.1	Clear No OSV advisories for this exact version
lru-cache	4.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lru-cache@4.1.3	Clear No OSV advisories for this exact version
lru-cache	5.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/lru-cache@5.1.1	Clear No OSV advisories for this exact version
macos-release	2.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/macos-release@2.3.0	Clear No OSV advisories for this exact version
make-dir	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/make-dir@1.3.0	Clear No OSV advisories for this exact version
make-dir	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/make-dir@3.1.0	Clear No OSV advisories for this exact version
map-cache	0.2.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/map-cache@0.2.2	Clear No OSV advisories for this exact version
map-visit	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/map-visit@1.0.0	Clear No OSV advisories for this exact version
md5-hex	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/md5-hex@1.3.0	Clear No OSV advisories for this exact version
md5-o-matic	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/md5-o-matic@0.1.1	Clear No OSV advisories for this exact version
md5.js	1.3.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/md5.js@1.3.5	Clear No OSV advisories for this exact version
media-typer	0.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/media-typer@0.3.0	Clear No OSV advisories for this exact version
memory-pager	1.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/memory-pager@1.5.0	Clear No OSV advisories for this exact version
merge-descriptors	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/merge-descriptors@1.0.0	Clear No OSV advisories for this exact version
merge-source-map	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/merge-source-map@1.1.0	Clear No OSV advisories for this exact version
methods	1.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/methods@1.1.2	Clear No OSV advisories for this exact version
miller-rabin	4.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/miller-rabin@4.0.1	Clear No OSV advisories for this exact version
mime-db	1.39.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mime-db@1.39.0	Clear No OSV advisories for this exact version
mime-db	1.43.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mime-db@1.43.0	Clear No OSV advisories for this exact version
mime-db	1.12.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mime-db@1.12.0	Clear No OSV advisories for this exact version
mime-types	2.1.23	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mime-types@2.1.23	Clear No OSV advisories for this exact version
mime-types	2.1.26	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mime-types@2.1.26	Clear No OSV advisories for this exact version
mime-types	2.0.14	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mime-types@2.0.14	Clear No OSV advisories for this exact version
mimic-fn	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mimic-fn@1.2.0	Clear No OSV advisories for this exact version
mimic-response	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mimic-response@1.0.1	Clear No OSV advisories for this exact version
minimalistic-assert	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/minimalistic-assert@1.0.1	Clear No OSV advisories for this exact version
minimalistic-crypto-utils	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/minimalistic-crypto-utils@1.0.1	Clear No OSV advisories for this exact version
minipass	2.9.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/minipass@2.9.0	Clear No OSV advisories for this exact version
mixin-object	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mixin-object@2.0.1	Clear No OSV advisories for this exact version
mkdirp	0.3.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mkdirp@0.3.5	Clear No OSV advisories for this exact version
mkdirp	0.5.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mkdirp@0.5.1	Clear No OSV advisories for this exact version
mkdirp	0.5.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mkdirp@0.5.5	Clear No OSV advisories for this exact version
module-deps	4.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/module-deps@4.1.1	Clear No OSV advisories for this exact version
mongodb-core	1.2.19	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mongodb-core@1.2.19	Clear No OSV advisories for this exact version
mpromise	0.5.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mpromise@0.5.4	Clear No OSV advisories for this exact version
ms	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ms@2.1.1	Clear No OSV advisories for this exact version
ms	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ms@2.0.0	Clear No OSV advisories for this exact version
ms	2.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ms@2.1.2	Clear No OSV advisories for this exact version
ms	2.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ms@2.1.3	Clear No OSV advisories for this exact version
muri	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/muri@1.0.0	Clear No OSV advisories for this exact version
mute-stream	0.0.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mute-stream@0.0.7	Clear No OSV advisories for this exact version
mz	2.7.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/mz@2.7.0	Clear No OSV advisories for this exact version
nan	2.10.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/nan@2.10.0	Clear No OSV advisories for this exact version
nanomatch	1.2.9	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/nanomatch@1.2.9	Clear No OSV advisories for this exact version
needle	2.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/needle@2.3.0	Clear No OSV advisories for this exact version
needle	2.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/needle@2.4.0	Clear No OSV advisories for this exact version
nice-try	1.0.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/nice-try@1.0.5	Clear No OSV advisories for this exact version
nopt	2.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/nopt@2.2.1	Clear No OSV advisories for this exact version
nopt	1.0.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/nopt@1.0.10	Clear No OSV advisories for this exact version
normalize-package-data	2.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/normalize-package-data@2.4.0	Clear No OSV advisories for this exact version
normalize-path	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/normalize-path@3.0.0	Clear No OSV advisories for this exact version
normalize-url	4.5.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/normalize-url@4.5.1	Clear No OSV advisories for this exact version
normalize-url	3.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/normalize-url@3.3.0	Clear No OSV advisories for this exact version
npm-run-path	2.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/npm-run-path@2.0.2	Clear No OSV advisories for this exact version
number-is-nan	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/number-is-nan@1.0.1	Clear No OSV advisories for this exact version
nyc	11.9.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/nyc@11.9.0	Clear No OSV advisories for this exact version
oauth-sign	0.9.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/oauth-sign@0.9.0	Clear No OSV advisories for this exact version
object-assign	4.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/object-assign@4.1.1	Clear No OSV advisories for this exact version
object-copy	0.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/object-copy@0.1.0	Clear No OSV advisories for this exact version
object-hash	1.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/object-hash@1.3.1	Clear No OSV advisories for this exact version
object-visit	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/object-visit@1.0.1	Clear No OSV advisories for this exact version
object.pick	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/object.pick@1.3.0	Clear No OSV advisories for this exact version
on-finished	2.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/on-finished@2.2.1	Clear No OSV advisories for this exact version
on-finished	2.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/on-finished@2.3.0	Clear No OSV advisories for this exact version
on-finished	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/on-finished@2.1.0	Clear No OSV advisories for this exact version
once	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/once@1.1.1	Clear No OSV advisories for this exact version
once	1.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/once@1.4.0	Clear No OSV advisories for this exact version
onetime	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/onetime@2.0.1	Clear No OSV advisories for this exact version
opener	1.5.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/opener@1.5.1	Clear No OSV advisories for this exact version
opn	5.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/opn@5.5.0	Clear No OSV advisories for this exact version
optimist	0.6.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/optimist@0.6.1	Clear No OSV advisories for this exact version
optionator	0.8.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/optionator@0.8.3	Clear No OSV advisories for this exact version
os-browserify	0.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/os-browserify@0.1.2	Clear No OSV advisories for this exact version
os-homedir	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/os-homedir@1.0.2	Clear No OSV advisories for this exact version
os-locale	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/os-locale@2.1.0	Clear No OSV advisories for this exact version
os-locale	1.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/os-locale@1.4.0	Clear No OSV advisories for this exact version
os-name	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/os-name@3.1.0	Clear No OSV advisories for this exact version
os-tmpdir	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/os-tmpdir@1.0.2	Clear No OSV advisories for this exact version
osenv	0.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/osenv@0.0.3	Clear No OSV advisories for this exact version
own-or	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/own-or@1.0.0	Clear No OSV advisories for this exact version
own-or-env	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/own-or-env@1.0.1	Clear No OSV advisories for this exact version
p-cancelable	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-cancelable@1.1.0	Clear No OSV advisories for this exact version
p-finally	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-finally@1.0.0	Clear No OSV advisories for this exact version
p-limit	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-limit@1.2.0	Clear No OSV advisories for this exact version
p-limit	2.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-limit@2.3.0	Clear No OSV advisories for this exact version
p-locate	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-locate@2.0.0	Clear No OSV advisories for this exact version
p-locate	4.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-locate@4.1.0	Clear No OSV advisories for this exact version
p-locate	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-locate@3.0.0	Clear No OSV advisories for this exact version
p-map	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-map@2.1.0	Clear No OSV advisories for this exact version
p-try	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-try@1.0.0	Clear No OSV advisories for this exact version
p-try	2.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/p-try@2.2.0	Clear No OSV advisories for this exact version
pac-proxy-agent	3.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pac-proxy-agent@3.0.1	Clear No OSV advisories for this exact version
package-json	6.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/package-json@6.5.0	Clear No OSV advisories for this exact version
package-json	4.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/package-json@4.0.1	Clear No OSV advisories for this exact version
pako	1.0.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pako@1.0.10	Clear No OSV advisories for this exact version
pako	0.2.9	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pako@0.2.9	Clear No OSV advisories for this exact version
parent-require	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/parent-require@1.0.0	Clear No OSV advisories for this exact version
parents	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/parents@1.0.1	Clear No OSV advisories for this exact version
parse-asn1	5.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/parse-asn1@5.1.4	Clear No OSV advisories for this exact version
parse-json	2.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/parse-json@2.2.0	Clear No OSV advisories for this exact version
parse5	5.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/parse5@5.1.1	Clear No OSV advisories for this exact version
parse5-htmlparser2-tree-adapter	5.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/parse5-htmlparser2-tree-adapter@5.1.1	Clear No OSV advisories for this exact version
parseurl	1.3.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/parseurl@1.3.3	Clear No OSV advisories for this exact version
pascalcase	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pascalcase@0.1.1	Clear No OSV advisories for this exact version
path-browserify	0.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-browserify@0.0.1	Clear No OSV advisories for this exact version
path-exists	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-exists@3.0.0	Clear No OSV advisories for this exact version
path-exists	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-exists@2.1.0	Clear No OSV advisories for this exact version
path-exists	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-exists@4.0.0	Clear No OSV advisories for this exact version
path-is-absolute	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-is-absolute@1.0.1	Clear No OSV advisories for this exact version
path-is-inside	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-is-inside@1.0.2	Clear No OSV advisories for this exact version
path-key	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-key@2.0.1	Clear No OSV advisories for this exact version
path-platform	0.11.15	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-platform@0.11.15	Clear No OSV advisories for this exact version
path-type	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/path-type@1.1.0	Clear No OSV advisories for this exact version
performance-now	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/performance-now@2.1.0	Clear No OSV advisories for this exact version
pify	2.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pify@2.3.0	Clear No OSV advisories for this exact version
pify	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pify@3.0.0	Clear No OSV advisories for this exact version
pinkie	2.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pinkie@2.0.4	Clear No OSV advisories for this exact version
pinkie-promise	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pinkie-promise@2.0.1	Clear No OSV advisories for this exact version
pkg-dir	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pkg-dir@1.0.0	Clear No OSV advisories for this exact version
ports	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ports@1.1.0	Clear No OSV advisories for this exact version
posix-character-classes	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/posix-character-classes@0.1.1	Clear No OSV advisories for this exact version
prelude-ls	1.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/prelude-ls@1.1.2	Clear No OSV advisories for this exact version
prepend-http	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/prepend-http@2.0.0	Clear No OSV advisories for this exact version
prepend-http	1.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/prepend-http@1.0.4	Clear No OSV advisories for this exact version
process	0.11.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/process@0.11.10	Clear No OSV advisories for this exact version
process-nextick-args	1.0.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/process-nextick-args@1.0.7	Clear No OSV advisories for this exact version
process-nextick-args	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/process-nextick-args@2.0.0	Clear No OSV advisories for this exact version
promise	7.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/promise@7.3.1	Clear No OSV advisories for this exact version
proto-list	1.2.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/proto-list@1.2.4	Clear No OSV advisories for this exact version
protocols	1.4.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/protocols@1.4.7	Clear No OSV advisories for this exact version
proxy-addr	1.0.10	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/proxy-addr@1.0.10	Clear No OSV advisories for this exact version
proxy-agent	3.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/proxy-agent@3.1.1	Clear No OSV advisories for this exact version
proxy-from-env	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/proxy-from-env@1.0.0	Clear No OSV advisories for this exact version
pseudomap	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pseudomap@1.0.2	Clear No OSV advisories for this exact version
psl	1.7.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/psl@1.7.0	Clear No OSV advisories for this exact version
pstree.remy	1.1.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pstree.remy@1.1.8	Clear No OSV advisories for this exact version
public-encrypt	4.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/public-encrypt@4.0.3	Clear No OSV advisories for this exact version
pump	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pump@3.0.0	Clear No OSV advisories for this exact version
punycode	1.4.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/punycode@1.4.1	Clear No OSV advisories for this exact version
punycode	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/punycode@2.1.1	Clear No OSV advisories for this exact version
punycode	1.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/punycode@1.3.2	Clear No OSV advisories for this exact version
pupa	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/pupa@2.1.1	Clear No OSV advisories for this exact version
querystring	0.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/querystring@0.2.0	Clear No OSV advisories for this exact version
querystring-es3	0.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/querystring-es3@0.2.1	Clear No OSV advisories for this exact version
random-bytes	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/random-bytes@1.0.0	Clear No OSV advisories for this exact version
randombytes	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/randombytes@2.1.0	Clear No OSV advisories for this exact version
randomfill	1.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/randomfill@1.0.4	Clear No OSV advisories for this exact version
range-parser	1.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/range-parser@1.0.3	Clear No OSV advisories for this exact version
raw-body	2.4.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/raw-body@2.4.1	Clear No OSV advisories for this exact version
raw-body	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/raw-body@1.3.0	Clear No OSV advisories for this exact version
rc	1.2.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/rc@1.2.8	Clear No OSV advisories for this exact version
read-only-stream	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/read-only-stream@2.0.0	Clear No OSV advisories for this exact version
read-pkg	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/read-pkg@1.1.0	Clear No OSV advisories for this exact version
read-pkg-up	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/read-pkg-up@1.0.1	Clear No OSV advisories for this exact version
readable-stream	3.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/readable-stream@3.4.0	Clear No OSV advisories for this exact version
readable-stream	2.3.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/readable-stream@2.3.6	Clear No OSV advisories for this exact version
readable-stream	2.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/readable-stream@2.0.6	Clear No OSV advisories for this exact version
readable-stream	1.1.14	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/readable-stream@1.1.14	Clear No OSV advisories for this exact version
readable-stream	2.3.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/readable-stream@2.3.7	Clear No OSV advisories for this exact version
readable-stream	1.0.31	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/readable-stream@1.0.31	Clear No OSV advisories for this exact version
readdirp	3.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/readdirp@3.5.0	Clear No OSV advisories for this exact version
reflect-metadata	0.1.13	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/reflect-metadata@0.1.13	Clear No OSV advisories for this exact version
regenerator-runtime	0.11.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/regenerator-runtime@0.11.1	Clear No OSV advisories for this exact version
regex-not	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/regex-not@1.0.2	Clear No OSV advisories for this exact version
regexp-clone	0.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/regexp-clone@0.0.1	Clear No OSV advisories for this exact version
registry-auth-token	4.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/registry-auth-token@4.2.1	Clear No OSV advisories for this exact version
registry-auth-token	3.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/registry-auth-token@3.4.0	Clear No OSV advisories for this exact version
registry-url	5.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/registry-url@5.1.0	Clear No OSV advisories for this exact version
registry-url	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/registry-url@3.1.0	Clear No OSV advisories for this exact version
repeat-element	1.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/repeat-element@1.1.2	Clear No OSV advisories for this exact version
repeat-string	1.6.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/repeat-string@1.6.1	Clear No OSV advisories for this exact version
repeating	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/repeating@2.0.1	Clear No OSV advisories for this exact version
require-directory	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/require-directory@2.1.1	Clear No OSV advisories for this exact version
require-main-filename	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/require-main-filename@1.0.1	Clear No OSV advisories for this exact version
require-main-filename	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/require-main-filename@2.0.0	Clear No OSV advisories for this exact version
require_optional	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/require_optional@1.0.1	Clear No OSV advisories for this exact version
resolve	1.1.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/resolve@1.1.7	Clear No OSV advisories for this exact version
resolve	1.10.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/resolve@1.10.0	Clear No OSV advisories for this exact version
resolve-from	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/resolve-from@2.0.0	Clear No OSV advisories for this exact version
resolve-url	0.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/resolve-url@0.2.1	Clear No OSV advisories for this exact version
responselike	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/responselike@1.0.2	Clear No OSV advisories for this exact version
restore-cursor	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/restore-cursor@2.0.0	Clear No OSV advisories for this exact version
ret	0.1.15	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ret@0.1.15	Clear No OSV advisories for this exact version
right-align	0.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/right-align@0.1.3	Clear No OSV advisories for this exact version
rimraf	2.6.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/rimraf@2.6.2	Clear No OSV advisories for this exact version
rimraf	2.6.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/rimraf@2.6.3	Clear No OSV advisories for this exact version
ripemd160	2.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/ripemd160@2.0.2	Clear No OSV advisories for this exact version
run-async	2.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/run-async@2.3.0	Clear No OSV advisories for this exact version
rxjs	6.5.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/rxjs@6.5.4	Clear No OSV advisories for this exact version
safe-buffer	5.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/safe-buffer@5.2.0	Clear No OSV advisories for this exact version
safe-buffer	5.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/safe-buffer@5.2.1	Clear No OSV advisories for this exact version
safe-buffer	5.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/safe-buffer@5.1.2	Clear No OSV advisories for this exact version
safe-regex	1.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/safe-regex@1.1.0	Clear No OSV advisories for this exact version
safer-buffer	2.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/safer-buffer@2.1.2	Clear No OSV advisories for this exact version
saslprep	1.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/saslprep@1.0.3	Clear No OSV advisories for this exact version
sax	1.2.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/sax@1.2.4	Clear No OSV advisories for this exact version
secure-keys	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/secure-keys@1.0.0	Clear No OSV advisories for this exact version
semver-diff	3.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/semver-diff@3.1.1	Clear No OSV advisories for this exact version
semver-diff	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/semver-diff@2.1.0	Clear No OSV advisories for this exact version
set-blocking	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/set-blocking@2.0.0	Clear No OSV advisories for this exact version
set-immediate-shim	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/set-immediate-shim@1.0.1	Clear No OSV advisories for this exact version
setprototypeof	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/setprototypeof@1.1.1	Clear No OSV advisories for this exact version
shallow-clone	0.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/shallow-clone@0.1.2	Clear No OSV advisories for this exact version
shasum	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/shasum@1.0.2	Clear No OSV advisories for this exact version
shebang-command	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/shebang-command@1.2.0	Clear No OSV advisories for this exact version
shebang-regex	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/shebang-regex@1.0.0	Clear No OSV advisories for this exact version
shell-quote	1.6.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/shell-quote@1.6.1	Clear No OSV advisories for this exact version
signal-exit	3.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/signal-exit@3.0.2	Clear No OSV advisories for this exact version
simple-concat	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/simple-concat@1.0.0	Clear No OSV advisories for this exact version
sliced	0.0.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/sliced@0.0.5	Clear No OSV advisories for this exact version
slide	1.1.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/slide@1.1.6	Clear No OSV advisories for this exact version
smart-buffer	4.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/smart-buffer@4.1.0	Clear No OSV advisories for this exact version
snapdragon	0.8.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snapdragon@0.8.2	Clear No OSV advisories for this exact version
snapdragon-node	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snapdragon-node@2.1.1	Clear No OSV advisories for this exact version
snapdragon-util	3.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snapdragon-util@3.0.1	Clear No OSV advisories for this exact version
snyk-config	2.2.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-config@2.2.3	Clear No OSV advisories for this exact version
snyk-go-parser	1.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-go-parser@1.3.1	Clear No OSV advisories for this exact version
snyk-module	1.9.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-module@1.9.1	Clear No OSV advisories for this exact version
snyk-nodejs-lockfile-parser	1.17.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-nodejs-lockfile-parser@1.17.0	Clear No OSV advisories for this exact version
snyk-nuget-plugin	1.16.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-nuget-plugin@1.16.0	Clear No OSV advisories for this exact version
snyk-paket-parser	1.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-paket-parser@1.5.0	Clear No OSV advisories for this exact version
snyk-policy	1.13.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-policy@1.13.5	Clear No OSV advisories for this exact version
snyk-resolve	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-resolve@1.0.1	Clear No OSV advisories for this exact version
snyk-resolve-deps	4.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-resolve-deps@4.4.0	Clear No OSV advisories for this exact version
snyk-tree	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-tree@1.0.0	Clear No OSV advisories for this exact version
snyk-try-require	1.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/snyk-try-require@1.3.1	Clear No OSV advisories for this exact version
socks	2.3.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/socks@2.3.3	Clear No OSV advisories for this exact version
socks-proxy-agent	4.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/socks-proxy-agent@4.0.2	Clear No OSV advisories for this exact version
source-map	0.6.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/source-map@0.6.1	Clear No OSV advisories for this exact version
source-map	0.4.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/source-map@0.4.4	Clear No OSV advisories for this exact version
source-map	0.5.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/source-map@0.5.7	Clear No OSV advisories for this exact version
source-map-resolve	0.5.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/source-map-resolve@0.5.1	Clear No OSV advisories for this exact version
source-map-support	0.5.16	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/source-map-support@0.5.16	Clear No OSV advisories for this exact version
source-map-url	0.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/source-map-url@0.4.0	Clear No OSV advisories for this exact version
sparse-bitfield	3.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/sparse-bitfield@3.0.3	Clear No OSV advisories for this exact version
spawn-wrap	1.4.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/spawn-wrap@1.4.2	Clear No OSV advisories for this exact version
spdx-correct	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/spdx-correct@3.0.0	Clear No OSV advisories for this exact version
spdx-exceptions	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/spdx-exceptions@2.1.0	Clear No OSV advisories for this exact version
spdx-expression-parse	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/spdx-expression-parse@3.0.0	Clear No OSV advisories for this exact version
spdx-license-ids	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/spdx-license-ids@3.0.0	Clear No OSV advisories for this exact version
split-string	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/split-string@3.1.0	Clear No OSV advisories for this exact version
sprintf-js	1.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/sprintf-js@1.0.3	Clear No OSV advisories for this exact version
sqlstring	2.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/sqlstring@2.3.1	Clear No OSV advisories for this exact version
sshpk	1.16.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/sshpk@1.16.1	Clear No OSV advisories for this exact version
stack-utils	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/stack-utils@1.0.2	Clear No OSV advisories for this exact version
static-extend	0.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/static-extend@0.1.2	Clear No OSV advisories for this exact version
statuses	1.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/statuses@1.5.0	Clear No OSV advisories for this exact version
stream-browserify	2.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/stream-browserify@2.0.2	Clear No OSV advisories for this exact version
stream-combiner2	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/stream-combiner2@1.1.1	Clear No OSV advisories for this exact version
stream-http	2.8.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/stream-http@2.8.3	Clear No OSV advisories for this exact version
stream-splicer	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/stream-splicer@2.0.0	Clear No OSV advisories for this exact version
streamifier	0.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/streamifier@0.1.1	Clear No OSV advisories for this exact version
streamsearch	0.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/streamsearch@0.1.2	Clear No OSV advisories for this exact version
string-width	4.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/string-width@4.2.0	Clear No OSV advisories for this exact version
string-width	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/string-width@1.0.2	Clear No OSV advisories for this exact version
string-width	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/string-width@3.1.0	Clear No OSV advisories for this exact version
string-width	4.2.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/string-width@4.2.2	Clear No OSV advisories for this exact version
string-width	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/string-width@2.1.1	Clear No OSV advisories for this exact version
string_decoder	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/string_decoder@1.3.0	Clear No OSV advisories for this exact version
string_decoder	1.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/string_decoder@1.1.1	Clear No OSV advisories for this exact version
string_decoder	0.10.31	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/string_decoder@0.10.31	Clear No OSV advisories for this exact version
strip-ansi	6.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/strip-ansi@6.0.0	Clear No OSV advisories for this exact version
strip-ansi	5.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/strip-ansi@5.2.0	Clear No OSV advisories for this exact version
strip-ansi	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/strip-ansi@4.0.0	Clear No OSV advisories for this exact version
strip-ansi	3.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/strip-ansi@3.0.1	Clear No OSV advisories for this exact version
strip-bom	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/strip-bom@2.0.0	Clear No OSV advisories for this exact version
strip-eof	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/strip-eof@1.0.0	Clear No OSV advisories for this exact version
strip-json-comments	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/strip-json-comments@2.0.1	Clear No OSV advisories for this exact version
subarg	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/subarg@1.0.0	Clear No OSV advisories for this exact version
supports-color	7.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/supports-color@7.1.0	Clear No OSV advisories for this exact version
supports-color	7.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/supports-color@7.2.0	Clear No OSV advisories for this exact version
supports-color	3.2.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/supports-color@3.2.3	Clear No OSV advisories for this exact version
supports-color	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/supports-color@2.0.0	Clear No OSV advisories for this exact version
supports-color	5.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/supports-color@5.5.0	Clear No OSV advisories for this exact version
syntax-error	1.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/syntax-error@1.4.0	Clear No OSV advisories for this exact version
tap-mocha-reporter	3.0.9	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tap-mocha-reporter@3.0.9	Clear No OSV advisories for this exact version
tap-parser	5.4.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tap-parser@5.4.0	Clear No OSV advisories for this exact version
tap-parser	7.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tap-parser@7.0.0	Clear No OSV advisories for this exact version
tar-stream	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tar-stream@2.1.0	Clear No OSV advisories for this exact version
temp-dir	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/temp-dir@1.0.0	Clear No OSV advisories for this exact version
tempfile	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tempfile@2.0.0	Clear No OSV advisories for this exact version
term-size	2.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/term-size@2.2.1	Clear No OSV advisories for this exact version
term-size	1.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/term-size@1.2.0	Clear No OSV advisories for this exact version
test-exclude	4.2.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/test-exclude@4.2.1	Clear No OSV advisories for this exact version
then-fs	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/then-fs@2.0.0	Clear No OSV advisories for this exact version
thenify	3.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/thenify@3.3.1	Clear No OSV advisories for this exact version
thenify-all	1.6.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/thenify-all@1.6.0	Clear No OSV advisories for this exact version
through	2.3.8	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/through@2.3.8	Clear No OSV advisories for this exact version
through2	2.0.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/through2@2.0.5	Clear No OSV advisories for this exact version
thunkify	2.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/thunkify@2.1.2	Clear No OSV advisories for this exact version
timed-out	4.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/timed-out@4.0.1	Clear No OSV advisories for this exact version
timers-browserify	1.4.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/timers-browserify@1.4.2	Clear No OSV advisories for this exact version
tmatch	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tmatch@3.1.0	Clear No OSV advisories for this exact version
to-arraybuffer	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/to-arraybuffer@1.0.1	Clear No OSV advisories for this exact version
to-fast-properties	1.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/to-fast-properties@1.0.3	Clear No OSV advisories for this exact version
to-object-path	0.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/to-object-path@0.3.0	Clear No OSV advisories for this exact version
to-readable-stream	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/to-readable-stream@1.0.0	Clear No OSV advisories for this exact version
to-regex	3.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/to-regex@3.0.2	Clear No OSV advisories for this exact version
to-regex-range	2.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/to-regex-range@2.1.1	Clear No OSV advisories for this exact version
to-regex-range	5.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/to-regex-range@5.0.1	Clear No OSV advisories for this exact version
toidentifier	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/toidentifier@1.0.0	Clear No OSV advisories for this exact version
toml	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/toml@3.0.0	Clear No OSV advisories for this exact version
touch	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/touch@3.1.0	Clear No OSV advisories for this exact version
tree-kill	1.2.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tree-kill@1.2.2	Clear No OSV advisories for this exact version
trim-right	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/trim-right@1.0.1	Clear No OSV advisories for this exact version
trivial-deferred	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/trivial-deferred@1.0.1	Clear No OSV advisories for this exact version
tsame	1.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tsame@1.1.2	Clear No OSV advisories for this exact version
tslib	1.9.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tslib@1.9.3	Clear No OSV advisories for this exact version
tslib	1.10.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tslib@1.10.0	Clear No OSV advisories for this exact version
tty-browserify	0.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tty-browserify@0.0.1	Clear No OSV advisories for this exact version
tunnel-agent	0.6.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tunnel-agent@0.6.0	Clear No OSV advisories for this exact version
tweetnacl	0.14.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/tweetnacl@0.14.5	Clear No OSV advisories for this exact version
type-check	0.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/type-check@0.3.2	Clear No OSV advisories for this exact version
type-fest	0.8.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/type-fest@0.8.1	Clear No OSV advisories for this exact version
type-is	1.6.16	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/type-is@1.6.16	Clear No OSV advisories for this exact version
type-is	1.5.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/type-is@1.5.7	Clear No OSV advisories for this exact version
typedarray	0.0.6	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/typedarray@0.0.6	Clear No OSV advisories for this exact version
typedarray-to-buffer	3.1.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/typedarray-to-buffer@3.1.5	Clear No OSV advisories for this exact version
uglify-js	2.8.29	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/uglify-js@2.8.29	Clear No OSV advisories for this exact version
uglify-js	3.13.9	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/uglify-js@3.13.9	Clear No OSV advisories for this exact version
uglify-to-browserify	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/uglify-to-browserify@1.0.2	Clear No OSV advisories for this exact version
uid-safe	2.1.5	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/uid-safe@2.1.5	Clear No OSV advisories for this exact version
umd	3.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/umd@3.0.3	Clear No OSV advisories for this exact version
undeclared-identifiers	1.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/undeclared-identifiers@1.1.3	Clear No OSV advisories for this exact version
undefsafe	2.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/undefsafe@2.0.3	Clear No OSV advisories for this exact version
unicode-length	1.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/unicode-length@1.0.3	Clear No OSV advisories for this exact version
union-value	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/union-value@1.0.0	Clear No OSV advisories for this exact version
unique-string	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/unique-string@2.0.0	Clear No OSV advisories for this exact version
unique-string	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/unique-string@1.0.0	Clear No OSV advisories for this exact version
unpipe	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/unpipe@1.0.0	Clear No OSV advisories for this exact version
unset-value	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/unset-value@1.0.0	Clear No OSV advisories for this exact version
unzip-response	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/unzip-response@2.0.1	Clear No OSV advisories for this exact version
update-notifier	4.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/update-notifier@4.1.3	Clear No OSV advisories for this exact version
update-notifier	2.5.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/update-notifier@2.5.0	Clear No OSV advisories for this exact version
uri-js	4.2.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/uri-js@4.2.2	Clear No OSV advisories for this exact version
urix	0.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/urix@0.1.0	Clear No OSV advisories for this exact version
url	0.11.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/url@0.11.0	Clear No OSV advisories for this exact version
url-parse-lax	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/url-parse-lax@3.0.0	Clear No OSV advisories for this exact version
url-parse-lax	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/url-parse-lax@1.0.0	Clear No OSV advisories for this exact version
use	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/use@3.1.0	Clear No OSV advisories for this exact version
util	0.10.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/util@0.10.3	Clear No OSV advisories for this exact version
util	0.10.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/util@0.10.4	Clear No OSV advisories for this exact version
util-deprecate	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/util-deprecate@1.0.2	Clear No OSV advisories for this exact version
utils-merge	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/utils-merge@1.0.0	Clear No OSV advisories for this exact version
validate-npm-package-license	3.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/validate-npm-package-license@3.0.3	Clear No OSV advisories for this exact version
vary	1.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/vary@1.1.2	Clear No OSV advisories for this exact version
vary	1.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/vary@1.0.1	Clear No OSV advisories for this exact version
verror	1.10.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/verror@1.10.0	Clear No OSV advisories for this exact version
vm-browserify	0.0.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/vm-browserify@0.0.4	Clear No OSV advisories for this exact version
vscode-languageserver-types	3.15.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/vscode-languageserver-types@3.15.0	Clear No OSV advisories for this exact version
walk	2.3.9	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/walk@2.3.9	Clear No OSV advisories for this exact version
which	1.3.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/which@1.3.0	Clear No OSV advisories for this exact version
which	1.3.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/which@1.3.1	Clear No OSV advisories for this exact version
which-module	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/which-module@2.0.0	Clear No OSV advisories for this exact version
widest-line	3.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/widest-line@3.1.0	Clear No OSV advisories for this exact version
widest-line	2.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/widest-line@2.0.1	Clear No OSV advisories for this exact version
window-size	0.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/window-size@0.1.0	Clear No OSV advisories for this exact version
window-size	0.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/window-size@0.1.4	Clear No OSV advisories for this exact version
windows-release	3.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/windows-release@3.2.0	Clear No OSV advisories for this exact version
wordwrap	0.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/wordwrap@0.0.2	Clear No OSV advisories for this exact version
wordwrap	0.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/wordwrap@0.0.3	Clear No OSV advisories for this exact version
wrap-ansi	6.2.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/wrap-ansi@6.2.0	Clear No OSV advisories for this exact version
wrap-ansi	2.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/wrap-ansi@2.1.0	Clear No OSV advisories for this exact version
wrap-ansi	5.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/wrap-ansi@5.1.0	Clear No OSV advisories for this exact version
wrappy	1.0.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/wrappy@1.0.2	Clear No OSV advisories for this exact version
write-file-atomic	3.0.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/write-file-atomic@3.0.3	Clear No OSV advisories for this exact version
write-file-atomic	1.3.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/write-file-atomic@1.3.4	Clear No OSV advisories for this exact version
write-file-atomic	2.4.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/write-file-atomic@2.4.3	Clear No OSV advisories for this exact version
xdg-basedir	4.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/xdg-basedir@4.0.0	Clear No OSV advisories for this exact version
xdg-basedir	3.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/xdg-basedir@3.0.0	Clear No OSV advisories for this exact version
xmlbuilder	11.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/xmlbuilder@11.0.1	Clear No OSV advisories for this exact version
xmlbuilder	9.0.7	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/xmlbuilder@9.0.7	Clear No OSV advisories for this exact version
xregexp	2.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/xregexp@2.0.0	Clear No OSV advisories for this exact version
xtend	4.0.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/xtend@4.0.1	Clear No OSV advisories for this exact version
yallist	3.1.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yallist@3.1.1	Clear No OSV advisories for this exact version
yallist	2.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yallist@2.1.2	Clear No OSV advisories for this exact version
yapool	1.0.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yapool@1.0.0	Clear No OSV advisories for this exact version
yargonaut	1.1.4	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargonaut@1.1.4	Clear No OSV advisories for this exact version
yargs	15.4.1	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargs@15.4.1	Clear No OSV advisories for this exact version
yargs	3.10.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargs@3.10.0	Clear No OSV advisories for this exact version
yargs	11.1.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargs@11.1.0	Clear No OSV advisories for this exact version
yargs	13.3.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargs@13.3.2	Clear No OSV advisories for this exact version
yargs	3.32.0	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargs@3.32.0	Clear No OSV advisories for this exact version
yargs-parser	13.1.2	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargs-parser@13.1.2	Clear No OSV advisories for this exact version
yargs-parser	18.1.3	npm	Transitive	Runtime Candidate Root dependency evidence; likely installed for normal use unless package metadata says otherwise.	Imported file	pkg:npm/yargs-parser@18.1.3	Clear No OSV advisories for this exact version