{"schemaVersion":"ki-abhaengigkeitsatlas/v1","dataset":"german-public-sector-ai-dependency-atlas","parserVersion":"1","generatedAt":"2026-11-12T08:58:58.139Z","trackingSince":"2026-07-18T21:20:30.334Z","source":{"codeRadar":{"dataset":"german-public-sector-ai-code-radar","generatedAt":"2026-11-12T08:57:16.613Z","parserVersion":"3","url":"https://i6eal.de/tools/ki-code-radar/"},"openCode":{"label":"openCode GitLab","url":"https://gitlab.opencode.de/"},"depsDev":{"label":"deps.dev API v3","url":"https://docs.deps.dev/api/v3/"},"osv":{"label":"OSV API","url":"https://google.github.io/osv.dev/api/"},"spdx":{"label":"SPDX License List","url":"https://spdx.org/licenses/","version":"3.29.0","releaseDate":"2026-09-16T00:00:00Z"}},"coverage":{"repositoryCount":49,"completeTreeCount":48,"incompleteTreeCount":1,"lockfileRepositoryCount":29,"sbomRepositoryCount":6,"artifactRepositoryCount":33,"resolvedRepositoryCount":45,"resolvedArtifactRepositoryCount":33,"dependencyFileCount":47,"parsedFileCount":46,"parseErrorCount":1,"unsupportedFileCount":0,"evaluatedVersionCount":5071,"metadataResolvedCount":5059,"metadataNotFoundCount":12,"osvEvaluatedVersionCount":5071,"codeRadarRepositoryCount":49},"methodology":{"componentParserSchemaVersion":"ki-dependency-atlas-components/v1","candidateBoundary":"repositories_with_exact_ai_code_evidence","resolvedVersionBoundary":"exact_lockfile_or_sbom_component_or_exact_double_equals_manifest_pin","manifestRangesResolved":false,"latestVersionSubstitution":false,"containerTagsVulnerabilityChecked":false,"osvClaim":"osv_matched_observed_resolved_package_version_at_collection_time","depsDevLicenseSemantics":"spdx_expressions_as_reported_without_inferred_compatibility","providerSemantics":"package_interface_presence_not_api_configuration_procurement_or_use","generativeAiUsed":false,"scoreUsed":false,"treeEntryCeiling":2500,"fileByteCeiling":5242880,"uniqueVersionCeiling":8000,"observedFormats":["package-lock.json / npm-shrinkwrap.json","uv.lock","poetry.lock","Pipfile.lock","CycloneDX JSON","SPDX JSON or YAML","exact == manifest pins"]},"summary":{"repositoryCount":49,"packageCount":2865,"aiPackageCount":51,"resolvedComponentCount":9911,"resolvedVersionCount":5071,"providerExposureRepositoryCount":12,"licenseExpressionCount":63,"knownLicensePackageCount":2827,"unknownLicensePackageCount":38,"advisoryCount":1097,"matchedAdvisoryRepositoryCount":43,"topPackage":{"id":"package:pypi:typing-extensions","slug":"typing-extensions-87d153eb","label":"typing-extensions","repositoryCount":29,"repositoryShare":0.5918367346938775}},"kind":"repository","entity":{"id":"opencode:14107","slug":"opencode-14107","gitlabProjectId":14107,"name":"115 KI-Chatbot Agent Flow Backend","pathWithNamespace":"fitko/115/115-ki-chatbot-agent-flow-backend","description":null,"webUrl":"https://gitlab.opencode.de/fitko/115/115-ki-chatbot-agent-flow-backend","commitSha":"cb4526444e4321a8cb77cf94412c707aa47f1a11","commitUrl":"https://gitlab.opencode.de/fitko/115/115-ki-chatbot-agent-flow-backend/-/commit/cb4526444e4321a8cb77cf94412c707aa47f1a11","lastActivityAt":"2026-10-29T13:46:17.351Z","headCommittedAt":"2026-10-28T18:48:03.000Z","tree":{"complete":true,"entryCount":92,"truncated":false},"files":[{"path":"package-lock.json","kind":"npm-lock","blobSha":"518a7de95dcecbaecb8982c5a3346604c89246fb","sourceUrl":"https://gitlab.opencode.de/fitko/115/115-ki-chatbot-agent-flow-backend/-/blob/cb4526444e4321a8cb77cf94412c707aa47f1a11/package-lock.json","commitSha":"cb4526444e4321a8cb77cf94412c707aa47f1a11","contentSha256":"a00b8847eb62d3b5ef18273f04fa4cecf71595c1a75cb0b2c7fe7a40822d86b0","byteCount":117479,"state":"parsed","componentCount":240}],"resolvedComponentCount":240,"artifactResolvedComponentCount":240,"exactManifestPinCount":0,"packageCount":239,"ecosystems":["npm"],"aiPackageCount":1,"licenseExpressionCount":5,"unknownLicensePackageCount":0,"advisoryIds":["GHSA-27r3-jxmh-p828","GHSA-28wg-ghj8-5hjv","GHSA-2v37-7h3g-55p8","GHSA-37ch-88jc-xwx2","GHSA-3v7f-55p6-f55p","GHSA-4mjr-xmp4-gh2g","GHSA-4w7w-66w2-5vf9","GHSA-587h-7wmj-h5pm","GHSA-5gmw-xhrv-c9v3","GHSA-5xrq-8626-4rwp","GHSA-67mh-4wv8-2f99","GHSA-68fv-2mgg-jv7q","GHSA-698v-4r3x-3vcv","GHSA-6g55-p6wh-862q","GHSA-6pq8-jhm2-2vcw","GHSA-6rw7-vpxm-498p","GHSA-82fw-gwwq-j7x9","GHSA-85c8-ppgw-ccpr","GHSA-869p-cjfg-cm3x","GHSA-93m4-6634-74q7","GHSA-9jrq-w75r-8gcw","GHSA-c2c7-rcm5-vvqj","GHSA-fx2h-pf6j-xcff","GHSA-fxqj-rqcc-2cmp","GHSA-g4jq-h2w9-997c","GHSA-jqcg-44mw-7w3h","GHSA-jqfw-vq24-v9c3","GHSA-mrhx-c7xc-m3w5","GHSA-mw96-cpmx-2vgc","GHSA-p9ff-h696-f583","GHSA-q8mj-m7cp-5q26","GHSA-qx2v-qp2m-jg93","GHSA-qxg6-89mg-rqv8","GHSA-r28c-9q8g-f849","GHSA-r825-w8mm-5pxw","GHSA-rq7h-c2jc-7f22","GHSA-v422-hmwv-36x6","GHSA-v6wh-96g9-6wx3","GHSA-w7fw-mjwx-w883","GHSA-xcx6-jx8p-x3h5","GHSA-xwg4-73v4-xw9w"],"advisoryCount":41,"providers":[{"id":"openai","label":"OpenAI"}]},"evidence":{"files":[{"path":"package-lock.json","kind":"npm-lock","blobSha":"518a7de95dcecbaecb8982c5a3346604c89246fb","sourceUrl":"https://gitlab.opencode.de/fitko/115/115-ki-chatbot-agent-flow-backend/-/blob/cb4526444e4321a8cb77cf94412c707aa47f1a11/package-lock.json","commitSha":"cb4526444e4321a8cb77cf94412c707aa47f1a11","contentSha256":"a00b8847eb62d3b5ef18273f04fa4cecf71595c1a75cb0b2c7fe7a40822d86b0","byteCount":117479,"state":"parsed","componentCount":240}],"occurrenceCount":240},"related":{"packages":[{"id":"package:npm:openai","slug":"openai-c5ed1b85","identity":"npm:openai","label":"OpenAI SDK","aiRelevant":true,"provider":{"id":"openai","label":"OpenAI"},"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["6.49.0"],"dossier":true,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:vite","slug":"vite-d48e852f","identity":"npm:vite","label":"vite","aiRelevant":false,"provider":null,"advisoryCount":12,"licenseExpressions":["MIT"],"versions":["7.3.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:qs","slug":"qs-d2ee785a","identity":"npm:qs","label":"qs","aiRelevant":false,"provider":null,"advisoryCount":5,"licenseExpressions":["BSD-3-Clause"],"versions":["6.16.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:postcss","slug":"postcss-6e1650ce","identity":"npm:postcss","label":"postcss","aiRelevant":false,"provider":null,"advisoryCount":4,"licenseExpressions":["MIT"],"versions":["8.5.31"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:nanoid","slug":"nanoid-93076b34","identity":"npm:nanoid","label":"nanoid","aiRelevant":false,"provider":null,"advisoryCount":3,"licenseExpressions":["MIT"],"versions":["3.3.20"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@vitest/mocker","slug":"vitest-mocker-91307081","identity":"npm:@vitest/mocker","label":"@vitest/mocker","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["3.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:body-parser","slug":"body-parser-5bf85abf","identity":"npm:body-parser","label":"body-parser","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["2.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:picomatch","slug":"picomatch-a3008e9b","identity":"npm:picomatch","label":"picomatch","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["4.0.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:tinypool","slug":"tinypool-64faed7c","identity":"npm:tinypool","label":"tinypool","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["1.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:vitest","slug":"vitest-d9958282","identity":"npm:vitest","label":"vitest","aiRelevant":false,"provider":null,"advisoryCount":2,"licenseExpressions":["MIT"],"versions":["3.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/msal-node","slug":"azure-msal-node-793b44e5","identity":"npm:@azure/msal-node","label":"@azure/msal-node","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["5.6.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:esbuild","slug":"esbuild-65fe29d5","identity":"npm:esbuild","label":"esbuild","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:jws","slug":"jws-f57dd681","identity":"npm:jws","label":"jws","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["4.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:path-to-regexp","slug":"path-to-regexp-7c531171","identity":"npm:path-to-regexp","label":"path-to-regexp","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["8.4.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:proxy-addr","slug":"proxy-addr-70423975","identity":"npm:proxy-addr","label":"proxy-addr","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["2.0.8"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:rollup","slug":"rollup-1742bf3c","identity":"npm:rollup","label":"rollup","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:source-map-js","slug":"source-map-js-41a605c1","identity":"npm:source-map-js","label":"source-map-js","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["BSD-3-Clause"],"versions":["1.2.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:zod","slug":"zod-5dbeeafb","identity":"npm:zod","label":"zod","aiRelevant":false,"provider":null,"advisoryCount":1,"licenseExpressions":["MIT"],"versions":["4.6.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/abort-controller","slug":"azure-abort-controller-b81fb57e","identity":"npm:@azure/abort-controller","label":"@azure/abort-controller","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/core-auth","slug":"azure-core-auth-e54c0154","identity":"npm:@azure/core-auth","label":"@azure/core-auth","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.10.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/core-client","slug":"azure-core-client-2e735e72","identity":"npm:@azure/core-client","label":"@azure/core-client","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.10.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/core-rest-pipeline","slug":"azure-core-rest-pipeline-d9f51574","identity":"npm:@azure/core-rest-pipeline","label":"@azure/core-rest-pipeline","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.24.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/core-tracing","slug":"azure-core-tracing-ed49025e","identity":"npm:@azure/core-tracing","label":"@azure/core-tracing","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/core-util","slug":"azure-core-util-00f718e6","identity":"npm:@azure/core-util","label":"@azure/core-util","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.13.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/identity","slug":"azure-identity-2161209f","identity":"npm:@azure/identity","label":"@azure/identity","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.13.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/logger","slug":"azure-logger-838934fa","identity":"npm:@azure/logger","label":"@azure/logger","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/msal-browser","slug":"azure-msal-browser-e11a8158","identity":"npm:@azure/msal-browser","label":"@azure/msal-browser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.26.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@azure/msal-common","slug":"azure-msal-common-f4bbefd2","identity":"npm:@azure/msal-common","label":"@azure/msal-common","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["16.13.0","16.14.3"],"dossier":false,"occurrenceCount":2,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/aix-ppc64","slug":"esbuild-aix-ppc64-ff62d0c3","identity":"npm:@esbuild/aix-ppc64","label":"@esbuild/aix-ppc64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/android-arm","slug":"esbuild-android-arm-6d6a793e","identity":"npm:@esbuild/android-arm","label":"@esbuild/android-arm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/android-arm64","slug":"esbuild-android-arm64-774120d0","identity":"npm:@esbuild/android-arm64","label":"@esbuild/android-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/android-x64","slug":"esbuild-android-x64-e3983566","identity":"npm:@esbuild/android-x64","label":"@esbuild/android-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/darwin-arm64","slug":"esbuild-darwin-arm64-7825afb9","identity":"npm:@esbuild/darwin-arm64","label":"@esbuild/darwin-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/darwin-x64","slug":"esbuild-darwin-x64-53715141","identity":"npm:@esbuild/darwin-x64","label":"@esbuild/darwin-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/freebsd-arm64","slug":"esbuild-freebsd-arm64-782f5ad9","identity":"npm:@esbuild/freebsd-arm64","label":"@esbuild/freebsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/freebsd-x64","slug":"esbuild-freebsd-x64-98044ed2","identity":"npm:@esbuild/freebsd-x64","label":"@esbuild/freebsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/linux-arm","slug":"esbuild-linux-arm-3041c0e3","identity":"npm:@esbuild/linux-arm","label":"@esbuild/linux-arm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/linux-arm64","slug":"esbuild-linux-arm64-383e4f4d","identity":"npm:@esbuild/linux-arm64","label":"@esbuild/linux-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/linux-ia32","slug":"esbuild-linux-ia32-e3f7f680","identity":"npm:@esbuild/linux-ia32","label":"@esbuild/linux-ia32","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/linux-loong64","slug":"esbuild-linux-loong64-99975fa3","identity":"npm:@esbuild/linux-loong64","label":"@esbuild/linux-loong64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/linux-mips64el","slug":"esbuild-linux-mips64el-198b328b","identity":"npm:@esbuild/linux-mips64el","label":"@esbuild/linux-mips64el","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/linux-ppc64","slug":"esbuild-linux-ppc64-2ce9b1d5","identity":"npm:@esbuild/linux-ppc64","label":"@esbuild/linux-ppc64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/linux-riscv64","slug":"esbuild-linux-riscv64-e52b37cd","identity":"npm:@esbuild/linux-riscv64","label":"@esbuild/linux-riscv64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/linux-s390x","slug":"esbuild-linux-s390x-a378f043","identity":"npm:@esbuild/linux-s390x","label":"@esbuild/linux-s390x","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/linux-x64","slug":"esbuild-linux-x64-6ab2d953","identity":"npm:@esbuild/linux-x64","label":"@esbuild/linux-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/netbsd-arm64","slug":"esbuild-netbsd-arm64-8089135a","identity":"npm:@esbuild/netbsd-arm64","label":"@esbuild/netbsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/netbsd-x64","slug":"esbuild-netbsd-x64-8422547c","identity":"npm:@esbuild/netbsd-x64","label":"@esbuild/netbsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/openbsd-arm64","slug":"esbuild-openbsd-arm64-7c050374","identity":"npm:@esbuild/openbsd-arm64","label":"@esbuild/openbsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/openbsd-x64","slug":"esbuild-openbsd-x64-c7ebdb2d","identity":"npm:@esbuild/openbsd-x64","label":"@esbuild/openbsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/openharmony-arm64","slug":"esbuild-openharmony-arm64-fd4b1b7a","identity":"npm:@esbuild/openharmony-arm64","label":"@esbuild/openharmony-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/sunos-x64","slug":"esbuild-sunos-x64-580d2b14","identity":"npm:@esbuild/sunos-x64","label":"@esbuild/sunos-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/win32-arm64","slug":"esbuild-win32-arm64-15462cb5","identity":"npm:@esbuild/win32-arm64","label":"@esbuild/win32-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/win32-ia32","slug":"esbuild-win32-ia32-8f5f9f68","identity":"npm:@esbuild/win32-ia32","label":"@esbuild/win32-ia32","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@esbuild/win32-x64","slug":"esbuild-win32-x64-204cfc99","identity":"npm:@esbuild/win32-x64","label":"@esbuild/win32-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.28.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@jridgewell/sourcemap-codec","slug":"jridgewell-sourcemap-codec-1b6bbd68","identity":"npm:@jridgewell/sourcemap-codec","label":"@jridgewell/sourcemap-codec","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.6.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@napi-rs/lzma-linux-x64-gnu","slug":"napi-rs-lzma-linux-x64-gnu-e161324f","identity":"npm:@napi-rs/lzma-linux-x64-gnu","label":"@napi-rs/lzma-linux-x64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.5.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-android-arm-eabi","slug":"rollup-rollup-android-arm-eabi-6fe9e830","identity":"npm:@rollup/rollup-android-arm-eabi","label":"@rollup/rollup-android-arm-eabi","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-android-arm64","slug":"rollup-rollup-android-arm64-110a0008","identity":"npm:@rollup/rollup-android-arm64","label":"@rollup/rollup-android-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-darwin-arm64","slug":"rollup-rollup-darwin-arm64-a7104e2d","identity":"npm:@rollup/rollup-darwin-arm64","label":"@rollup/rollup-darwin-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-darwin-x64","slug":"rollup-rollup-darwin-x64-9d553e48","identity":"npm:@rollup/rollup-darwin-x64","label":"@rollup/rollup-darwin-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-freebsd-arm64","slug":"rollup-rollup-freebsd-arm64-d05763b3","identity":"npm:@rollup/rollup-freebsd-arm64","label":"@rollup/rollup-freebsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-freebsd-x64","slug":"rollup-rollup-freebsd-x64-9389d83a","identity":"npm:@rollup/rollup-freebsd-x64","label":"@rollup/rollup-freebsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm-gnueabihf","slug":"rollup-rollup-linux-arm-gnueabihf-ea274b24","identity":"npm:@rollup/rollup-linux-arm-gnueabihf","label":"@rollup/rollup-linux-arm-gnueabihf","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm-musleabihf","slug":"rollup-rollup-linux-arm-musleabihf-d17800dc","identity":"npm:@rollup/rollup-linux-arm-musleabihf","label":"@rollup/rollup-linux-arm-musleabihf","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm64-gnu","slug":"rollup-rollup-linux-arm64-gnu-2692ccaa","identity":"npm:@rollup/rollup-linux-arm64-gnu","label":"@rollup/rollup-linux-arm64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-arm64-musl","slug":"rollup-rollup-linux-arm64-musl-69ba6707","identity":"npm:@rollup/rollup-linux-arm64-musl","label":"@rollup/rollup-linux-arm64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-loong64-gnu","slug":"rollup-rollup-linux-loong64-gnu-c4b182d7","identity":"npm:@rollup/rollup-linux-loong64-gnu","label":"@rollup/rollup-linux-loong64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-loong64-musl","slug":"rollup-rollup-linux-loong64-musl-6d709dbd","identity":"npm:@rollup/rollup-linux-loong64-musl","label":"@rollup/rollup-linux-loong64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-ppc64-gnu","slug":"rollup-rollup-linux-ppc64-gnu-99cbedb8","identity":"npm:@rollup/rollup-linux-ppc64-gnu","label":"@rollup/rollup-linux-ppc64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-ppc64-musl","slug":"rollup-rollup-linux-ppc64-musl-81a36c48","identity":"npm:@rollup/rollup-linux-ppc64-musl","label":"@rollup/rollup-linux-ppc64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-riscv64-gnu","slug":"rollup-rollup-linux-riscv64-gnu-c8854adc","identity":"npm:@rollup/rollup-linux-riscv64-gnu","label":"@rollup/rollup-linux-riscv64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-riscv64-musl","slug":"rollup-rollup-linux-riscv64-musl-2308f5c4","identity":"npm:@rollup/rollup-linux-riscv64-musl","label":"@rollup/rollup-linux-riscv64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-s390x-gnu","slug":"rollup-rollup-linux-s390x-gnu-2efcfaef","identity":"npm:@rollup/rollup-linux-s390x-gnu","label":"@rollup/rollup-linux-s390x-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-x64-gnu","slug":"rollup-rollup-linux-x64-gnu-800335dd","identity":"npm:@rollup/rollup-linux-x64-gnu","label":"@rollup/rollup-linux-x64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-linux-x64-musl","slug":"rollup-rollup-linux-x64-musl-6959d376","identity":"npm:@rollup/rollup-linux-x64-musl","label":"@rollup/rollup-linux-x64-musl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-openbsd-x64","slug":"rollup-rollup-openbsd-x64-7cf4377d","identity":"npm:@rollup/rollup-openbsd-x64","label":"@rollup/rollup-openbsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-openharmony-arm64","slug":"rollup-rollup-openharmony-arm64-d42fa7d0","identity":"npm:@rollup/rollup-openharmony-arm64","label":"@rollup/rollup-openharmony-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-arm64-msvc","slug":"rollup-rollup-win32-arm64-msvc-9b8297fc","identity":"npm:@rollup/rollup-win32-arm64-msvc","label":"@rollup/rollup-win32-arm64-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-ia32-msvc","slug":"rollup-rollup-win32-ia32-msvc-37230ee2","identity":"npm:@rollup/rollup-win32-ia32-msvc","label":"@rollup/rollup-win32-ia32-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-x64-gnu","slug":"rollup-rollup-win32-x64-gnu-3fa0c60e","identity":"npm:@rollup/rollup-win32-x64-gnu","label":"@rollup/rollup-win32-x64-gnu","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@rollup/rollup-win32-x64-msvc","slug":"rollup-rollup-win32-x64-msvc-6081dd46","identity":"npm:@rollup/rollup-win32-x64-msvc","label":"@rollup/rollup-win32-x64-msvc","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.65.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/body-parser","slug":"types-body-parser-4974771d","identity":"npm:@types/body-parser","label":"@types/body-parser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.19.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/chai","slug":"types-chai-82c4392b","identity":"npm:@types/chai","label":"@types/chai","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.2.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/connect","slug":"types-connect-6d860a0a","identity":"npm:@types/connect","label":"@types/connect","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.4.38"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/deep-eql","slug":"types-deep-eql-fc729964","identity":"npm:@types/deep-eql","label":"@types/deep-eql","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/estree","slug":"types-estree-8dde2b7e","identity":"npm:@types/estree","label":"@types/estree","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.9"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/express","slug":"types-express-a6a1cee7","identity":"npm:@types/express","label":"@types/express","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/express-serve-static-core","slug":"types-express-serve-static-core-336bddfa","identity":"npm:@types/express-serve-static-core","label":"@types/express-serve-static-core","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/http-errors","slug":"types-http-errors-f168b184","identity":"npm:@types/http-errors","label":"@types/http-errors","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/node","slug":"types-node-893179a0","identity":"npm:@types/node","label":"@types/node","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["20.19.43"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/qs","slug":"types-qs-402c45a6","identity":"npm:@types/qs","label":"@types/qs","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.15.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/range-parser","slug":"types-range-parser-317cbf4a","identity":"npm:@types/range-parser","label":"@types/range-parser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/send","slug":"types-send-c3bd7dba","identity":"npm:@types/send","label":"@types/send","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@types/serve-static","slug":"types-serve-static-ff8bbbb0","identity":"npm:@types/serve-static","label":"@types/serve-static","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-aix-ppc64","slug":"typescript-typescript-aix-ppc64-d502623e","identity":"npm:@typescript/typescript-aix-ppc64","label":"@typescript/typescript-aix-ppc64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-darwin-arm64","slug":"typescript-typescript-darwin-arm64-2a213a27","identity":"npm:@typescript/typescript-darwin-arm64","label":"@typescript/typescript-darwin-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-darwin-x64","slug":"typescript-typescript-darwin-x64-ce6f9bc0","identity":"npm:@typescript/typescript-darwin-x64","label":"@typescript/typescript-darwin-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-freebsd-arm64","slug":"typescript-typescript-freebsd-arm64-241757c5","identity":"npm:@typescript/typescript-freebsd-arm64","label":"@typescript/typescript-freebsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-freebsd-x64","slug":"typescript-typescript-freebsd-x64-140b40a4","identity":"npm:@typescript/typescript-freebsd-x64","label":"@typescript/typescript-freebsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-linux-arm","slug":"typescript-typescript-linux-arm-8b6c8389","identity":"npm:@typescript/typescript-linux-arm","label":"@typescript/typescript-linux-arm","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-linux-arm64","slug":"typescript-typescript-linux-arm64-60ee5053","identity":"npm:@typescript/typescript-linux-arm64","label":"@typescript/typescript-linux-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-linux-loong64","slug":"typescript-typescript-linux-loong64-4b606f86","identity":"npm:@typescript/typescript-linux-loong64","label":"@typescript/typescript-linux-loong64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-linux-mips64el","slug":"typescript-typescript-linux-mips64el-8bf53995","identity":"npm:@typescript/typescript-linux-mips64el","label":"@typescript/typescript-linux-mips64el","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-linux-ppc64","slug":"typescript-typescript-linux-ppc64-f0565ad2","identity":"npm:@typescript/typescript-linux-ppc64","label":"@typescript/typescript-linux-ppc64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-linux-riscv64","slug":"typescript-typescript-linux-riscv64-bfdbed78","identity":"npm:@typescript/typescript-linux-riscv64","label":"@typescript/typescript-linux-riscv64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-linux-s390x","slug":"typescript-typescript-linux-s390x-a9757b59","identity":"npm:@typescript/typescript-linux-s390x","label":"@typescript/typescript-linux-s390x","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-linux-x64","slug":"typescript-typescript-linux-x64-64bf8725","identity":"npm:@typescript/typescript-linux-x64","label":"@typescript/typescript-linux-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-netbsd-arm64","slug":"typescript-typescript-netbsd-arm64-ade5982c","identity":"npm:@typescript/typescript-netbsd-arm64","label":"@typescript/typescript-netbsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-netbsd-x64","slug":"typescript-typescript-netbsd-x64-9a35288c","identity":"npm:@typescript/typescript-netbsd-x64","label":"@typescript/typescript-netbsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-openbsd-arm64","slug":"typescript-typescript-openbsd-arm64-1bc2e94f","identity":"npm:@typescript/typescript-openbsd-arm64","label":"@typescript/typescript-openbsd-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-openbsd-x64","slug":"typescript-typescript-openbsd-x64-f2848e85","identity":"npm:@typescript/typescript-openbsd-x64","label":"@typescript/typescript-openbsd-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-sunos-x64","slug":"typescript-typescript-sunos-x64-b12911cb","identity":"npm:@typescript/typescript-sunos-x64","label":"@typescript/typescript-sunos-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-win32-arm64","slug":"typescript-typescript-win32-arm64-4f8585c2","identity":"npm:@typescript/typescript-win32-arm64","label":"@typescript/typescript-win32-arm64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typescript/typescript-win32-x64","slug":"typescript-typescript-win32-x64-264c5daa","identity":"npm:@typescript/typescript-win32-x64","label":"@typescript/typescript-win32-x64","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@typespec/ts-http-runtime","slug":"typespec-ts-http-runtime-9a1064d6","identity":"npm:@typespec/ts-http-runtime","label":"@typespec/ts-http-runtime","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.3.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@vitest/expect","slug":"vitest-expect-5841f558","identity":"npm:@vitest/expect","label":"@vitest/expect","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@vitest/pretty-format","slug":"vitest-pretty-format-8af7f552","identity":"npm:@vitest/pretty-format","label":"@vitest/pretty-format","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@vitest/runner","slug":"vitest-runner-2bd2ca52","identity":"npm:@vitest/runner","label":"@vitest/runner","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@vitest/snapshot","slug":"vitest-snapshot-a6663d51","identity":"npm:@vitest/snapshot","label":"@vitest/snapshot","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@vitest/spy","slug":"vitest-spy-8441cbb2","identity":"npm:@vitest/spy","label":"@vitest/spy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:@vitest/utils","slug":"vitest-utils-e577842c","identity":"npm:@vitest/utils","label":"@vitest/utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.7"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:accepts","slug":"accepts-be3cbd71","identity":"npm:accepts","label":"accepts","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:agent-base","slug":"agent-base-a3970bdd","identity":"npm:agent-base","label":"agent-base","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.1.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:assertion-error","slug":"assertion-error-a1797ee9","identity":"npm:assertion-error","label":"assertion-error","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:buffer-equal-constant-time","slug":"buffer-equal-constant-time-97a0b931","identity":"npm:buffer-equal-constant-time","label":"buffer-equal-constant-time","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["BSD-3-Clause"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:bundle-name","slug":"bundle-name-d8e83f6d","identity":"npm:bundle-name","label":"bundle-name","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:bytes","slug":"bytes-8a22cc41","identity":"npm:bytes","label":"bytes","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:cac","slug":"cac-5884f2b7","identity":"npm:cac","label":"cac","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.7.14"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:call-bind-apply-helpers","slug":"call-bind-apply-helpers-78957419","identity":"npm:call-bind-apply-helpers","label":"call-bind-apply-helpers","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:call-bound","slug":"call-bound-9572ae3f","identity":"npm:call-bound","label":"call-bound","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:chai","slug":"chai-255600b6","identity":"npm:chai","label":"chai","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:check-error","slug":"check-error-f30a1b21","identity":"npm:check-error","label":"check-error","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:content-disposition","slug":"content-disposition-87619660","identity":"npm:content-disposition","label":"content-disposition","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:content-type","slug":"content-type-7fa6e83d","identity":"npm:content-type","label":"content-type","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:cookie","slug":"cookie-a2a53f4d","identity":"npm:cookie","label":"cookie","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.7.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:cookie-signature","slug":"cookie-signature-429a9ed6","identity":"npm:cookie-signature","label":"cookie-signature","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:debug","slug":"debug-e3b3b23f","identity":"npm:debug","label":"debug","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.4.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:deep-eql","slug":"deep-eql-1b551172","identity":"npm:deep-eql","label":"deep-eql","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:default-browser","slug":"default-browser-7bc285c6","identity":"npm:default-browser","label":"default-browser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.5.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:default-browser-id","slug":"default-browser-id-1306286c","identity":"npm:default-browser-id","label":"default-browser-id","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:define-lazy-prop","slug":"define-lazy-prop-370561b8","identity":"npm:define-lazy-prop","label":"define-lazy-prop","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:depd","slug":"depd-8c68abf1","identity":"npm:depd","label":"depd","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:dunder-proto","slug":"dunder-proto-06a3ed8c","identity":"npm:dunder-proto","label":"dunder-proto","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:ecdsa-sig-formatter","slug":"ecdsa-sig-formatter-618ac76a","identity":"npm:ecdsa-sig-formatter","label":"ecdsa-sig-formatter","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["1.0.11"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:ee-first","slug":"ee-first-53b9047e","identity":"npm:ee-first","label":"ee-first","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:encodeurl","slug":"encodeurl-7def4e10","identity":"npm:encodeurl","label":"encodeurl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:es-define-property","slug":"es-define-property-47323fb6","identity":"npm:es-define-property","label":"es-define-property","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:es-errors","slug":"es-errors-ef18b576","identity":"npm:es-errors","label":"es-errors","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:es-module-lexer","slug":"es-module-lexer-0cdde1bf","identity":"npm:es-module-lexer","label":"es-module-lexer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.7.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:es-object-atoms","slug":"es-object-atoms-c0d03b04","identity":"npm:es-object-atoms","label":"es-object-atoms","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:escape-html","slug":"escape-html-fb926c89","identity":"npm:escape-html","label":"escape-html","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:estree-walker","slug":"estree-walker-b431ca1e","identity":"npm:estree-walker","label":"estree-walker","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:etag","slug":"etag-5bf82a9a","identity":"npm:etag","label":"etag","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.8.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:expect-type","slug":"expect-type-db94001a","identity":"npm:expect-type","label":"expect-type","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["1.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:express","slug":"express-1db97c49","identity":"npm:express","label":"express","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:fdir","slug":"fdir-d78fecd4","identity":"npm:fdir","label":"fdir","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.5.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:finalhandler","slug":"finalhandler-7a4e31f4","identity":"npm:finalhandler","label":"finalhandler","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:forwarded","slug":"forwarded-752269ca","identity":"npm:forwarded","label":"forwarded","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:fresh","slug":"fresh-eb605422","identity":"npm:fresh","label":"fresh","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:fsevents","slug":"fsevents-f43d69ec","identity":"npm:fsevents","label":"fsevents","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:function-bind","slug":"function-bind-45751970","identity":"npm:function-bind","label":"function-bind","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:get-intrinsic","slug":"get-intrinsic-2b696d7d","identity":"npm:get-intrinsic","label":"get-intrinsic","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:get-proto","slug":"get-proto-1cc62888","identity":"npm:get-proto","label":"get-proto","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:gopd","slug":"gopd-3abcb949","identity":"npm:gopd","label":"gopd","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:has-symbols","slug":"has-symbols-4abfccb0","identity":"npm:has-symbols","label":"has-symbols","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:hasown","slug":"hasown-c4159556","identity":"npm:hasown","label":"hasown","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:http-errors","slug":"http-errors-a224027f","identity":"npm:http-errors","label":"http-errors","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:http-proxy-agent","slug":"http-proxy-agent-ddc0e33d","identity":"npm:http-proxy-agent","label":"http-proxy-agent","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:https-proxy-agent","slug":"https-proxy-agent-0ae16386","identity":"npm:https-proxy-agent","label":"https-proxy-agent","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.0.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:iconv-lite","slug":"iconv-lite-cfec4972","identity":"npm:iconv-lite","label":"iconv-lite","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.7.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:inherits","slug":"inherits-bef218e5","identity":"npm:inherits","label":"inherits","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["2.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:ipaddr.js","slug":"ipaddr-js-20a3bae6","identity":"npm:ipaddr.js","label":"ipaddr.js","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.9.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:is-docker","slug":"is-docker-8be7f538","identity":"npm:is-docker","label":"is-docker","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:is-inside-container","slug":"is-inside-container-686bd0fe","identity":"npm:is-inside-container","label":"is-inside-container","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:is-promise","slug":"is-promise-04c84dd0","identity":"npm:is-promise","label":"is-promise","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:is-wsl","slug":"is-wsl-02f7fa6a","identity":"npm:is-wsl","label":"is-wsl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:js-tokens","slug":"js-tokens-8b3f06fa","identity":"npm:js-tokens","label":"js-tokens","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["9.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:jsonwebtoken","slug":"jsonwebtoken-f90fd301","identity":"npm:jsonwebtoken","label":"jsonwebtoken","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["9.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:jwa","slug":"jwa-72d0c66c","identity":"npm:jwa","label":"jwa","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:lodash.includes","slug":"lodash-includes-8aea2746","identity":"npm:lodash.includes","label":"lodash.includes","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:lodash.isboolean","slug":"lodash-isboolean-3a1fee5c","identity":"npm:lodash.isboolean","label":"lodash.isboolean","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:lodash.isinteger","slug":"lodash-isinteger-b1090d1c","identity":"npm:lodash.isinteger","label":"lodash.isinteger","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:lodash.isnumber","slug":"lodash-isnumber-aaffca8a","identity":"npm:lodash.isnumber","label":"lodash.isnumber","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:lodash.isplainobject","slug":"lodash-isplainobject-9f49ed4a","identity":"npm:lodash.isplainobject","label":"lodash.isplainobject","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:lodash.isstring","slug":"lodash-isstring-73a6893d","identity":"npm:lodash.isstring","label":"lodash.isstring","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:lodash.once","slug":"lodash-once-88f091ca","identity":"npm:lodash.once","label":"lodash.once","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:loupe","slug":"loupe-01efcf93","identity":"npm:loupe","label":"loupe","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:magic-string","slug":"magic-string-57707138","identity":"npm:magic-string","label":"magic-string","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.30.21"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:math-intrinsics","slug":"math-intrinsics-8ccaf44c","identity":"npm:math-intrinsics","label":"math-intrinsics","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:media-typer","slug":"media-typer-fd5f066e","identity":"npm:media-typer","label":"media-typer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:merge-descriptors","slug":"merge-descriptors-16241c3a","identity":"npm:merge-descriptors","label":"merge-descriptors","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:mime-db","slug":"mime-db-2aca89e7","identity":"npm:mime-db","label":"mime-db","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.54.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:mime-types","slug":"mime-types-a32c45ef","identity":"npm:mime-types","label":"mime-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:ms","slug":"ms-1f5985e4","identity":"npm:ms","label":"ms","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:negotiator","slug":"negotiator-44ced9f0","identity":"npm:negotiator","label":"negotiator","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:object-inspect","slug":"object-inspect-e860635c","identity":"npm:object-inspect","label":"object-inspect","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.13.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:on-finished","slug":"on-finished-7268054d","identity":"npm:on-finished","label":"on-finished","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.4.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:once","slug":"once-15d11e4d","identity":"npm:once","label":"once","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["1.4.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:open","slug":"open-ea526a80","identity":"npm:open","label":"open","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["10.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:parseurl","slug":"parseurl-2b58ab3c","identity":"npm:parseurl","label":"parseurl","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:pathe","slug":"pathe-d655e854","identity":"npm:pathe","label":"pathe","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.3"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:pathval","slug":"pathval-6f4384d1","identity":"npm:pathval","label":"pathval","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:picocolors","slug":"picocolors-63d33c23","identity":"npm:picocolors","label":"picocolors","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["1.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:range-parser","slug":"range-parser-64541a01","identity":"npm:range-parser","label":"range-parser","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:raw-body","slug":"raw-body-ab6f4962","identity":"npm:raw-body","label":"raw-body","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:router","slug":"router-05a7fc6e","identity":"npm:router","label":"router","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:run-applescript","slug":"run-applescript-39774afe","identity":"npm:run-applescript","label":"run-applescript","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["7.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:safe-buffer","slug":"safe-buffer-d3eb51b7","identity":"npm:safe-buffer","label":"safe-buffer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["5.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:safer-buffer","slug":"safer-buffer-ecb57a88","identity":"npm:safer-buffer","label":"safer-buffer","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:semver","slug":"semver-8e84695e","identity":"npm:semver","label":"semver","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["7.8.5"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:send","slug":"send-d870dc25","identity":"npm:send","label":"send","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:serve-static","slug":"serve-static-9b722b2d","identity":"npm:serve-static","label":"serve-static","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.2.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:setprototypeof","slug":"setprototypeof-e3faf556","identity":"npm:setprototypeof","label":"setprototypeof","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["1.2.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:side-channel","slug":"side-channel-d59c04c6","identity":"npm:side-channel","label":"side-channel","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:side-channel-list","slug":"side-channel-list-46f991b9","identity":"npm:side-channel-list","label":"side-channel-list","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:side-channel-map","slug":"side-channel-map-2deeb875","identity":"npm:side-channel-map","label":"side-channel-map","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:side-channel-weakmap","slug":"side-channel-weakmap-d3de1245","identity":"npm:side-channel-weakmap","label":"side-channel-weakmap","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:siginfo","slug":"siginfo-c2318574","identity":"npm:siginfo","label":"siginfo","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:stackback","slug":"stackback-f73a8db9","identity":"npm:stackback","label":"stackback","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:statuses","slug":"statuses-c4dfedb5","identity":"npm:statuses","label":"statuses","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:std-env","slug":"std-env-6dc60c6f","identity":"npm:std-env","label":"std-env","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.10.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:strip-literal","slug":"strip-literal-f18bc9de","identity":"npm:strip-literal","label":"strip-literal","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:tinybench","slug":"tinybench-c8dc93a5","identity":"npm:tinybench","label":"tinybench","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.9.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:tinyexec","slug":"tinyexec-6c48bb35","identity":"npm:tinyexec","label":"tinyexec","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.3.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:tinyglobby","slug":"tinyglobby-dc19540c","identity":"npm:tinyglobby","label":"tinyglobby","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.2.17"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:tinyrainbow","slug":"tinyrainbow-2ddb6339","identity":"npm:tinyrainbow","label":"tinyrainbow","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:tinyspy","slug":"tinyspy-3ce9dfc1","identity":"npm:tinyspy","label":"tinyspy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.0.6"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:toidentifier","slug":"toidentifier-d7c0e2d2","identity":"npm:toidentifier","label":"toidentifier","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:tslib","slug":"tslib-d05e0935","identity":"npm:tslib","label":"tslib","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["0BSD"],"versions":["2.8.1"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:tsx","slug":"tsx-15f18db8","identity":"npm:tsx","label":"tsx","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["4.23.15"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:type-is","slug":"type-is-95471b5f","identity":"npm:type-is","label":"type-is","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:typescript","slug":"typescript-9b49e36c","identity":"npm:typescript","label":"typescript","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["Apache-2.0"],"versions":["7.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":1,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:undici-types","slug":"undici-types-385a20bc","identity":"npm:undici-types","label":"undici-types","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["6.21.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:unpipe","slug":"unpipe-0327ee3f","identity":"npm:unpipe","label":"unpipe","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.0.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:vary","slug":"vary-f8fd7044","identity":"npm:vary","label":"vary","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["1.1.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:vite-node","slug":"vite-node-9ccca4da","identity":"npm:vite-node","label":"vite-node","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["3.2.4"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:why-is-node-running","slug":"why-is-node-running-65a1e508","identity":"npm:why-is-node-running","label":"why-is-node-running","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["2.3.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:wrappy","slug":"wrappy-f4e94e3b","identity":"npm:wrappy","label":"wrappy","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["ISC"],"versions":["1.0.2"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]},{"id":"package:npm:wsl-utils","slug":"wsl-utils-2721a0d6","identity":"npm:wsl-utils","label":"wsl-utils","aiRelevant":false,"provider":null,"advisoryCount":0,"licenseExpressions":["MIT"],"versions":["0.1.0"],"dossier":false,"occurrenceCount":1,"directOccurrenceCount":0,"evidenceFiles":["package-lock.json"]}],"vulnerabilities":[{"id":"GHSA-27r3-jxmh-p828","slug":"ghsa-27r3-jxmh-p828-539d4c66","dossier":false,"summary":"body-parser vulnerable to Denial of Service via trailing bytes after a compressed request body","aliases":["CVE-2026-111181"],"sourceIds":["GHSA-27r3-jxmh-p828"],"published":"2026-10-23T20:53:11Z","modified":"2026-10-23T21:00:06.131613693Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-27r3-jxmh-p828"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111181"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/commit/1260c3845f54502a05a87594f09a334786bb34d7"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/commit/f7075eae3a84c3473ab4bf0a777da28db208e916"},{"type":"WEB","url":"https://cna.openjsf.org/security-advisories.html"},{"type":"PACKAGE","url":"https://github.com/expressjs/body-parser"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/releases/tag/1.20.9"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/releases/tag/v2.4.0"}],"versionKeys":["npm:body-parser@1.20.3","npm:body-parser@1.20.4","npm:body-parser@2.3.0"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-28wg-ghj8-5hjv","slug":"ghsa-28wg-ghj8-5hjv-10215c04","dossier":false,"summary":"nanoid: non-secure generators can loop indefinitely with negative size","aliases":["CVE-2026-67214"],"sourceIds":["GHSA-28wg-ghj8-5hjv"],"published":"2026-07-29T15:31:12Z","modified":"2026-09-10T03:50:51.191256883Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67214"},{"type":"WEB","url":"https://github.com/ai/nanoid/pull/600"},{"type":"WEB","url":"https://github.com/ai/nanoid/pull/601"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/e835c9b71eab832bc6106944bdd26ea96cf2c66d"},{"type":"PACKAGE","url":"https://github.com/ai/nanoid"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/5.1.16"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-size-in-non-secure-module"}],"versionKeys":["npm:nanoid@3.3.11"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-2v37-7h3g-55p8","slug":"ghsa-2v37-7h3g-55p8-563431fd","dossier":false,"summary":"nanoid: custom generators can loop indefinitely when size is zero","aliases":["CVE-2026-67213"],"sourceIds":["GHSA-2v37-7h3g-55p8"],"published":"2026-07-29T15:31:12Z","modified":"2026-09-10T03:50:51.243328986Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-67213"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/cb3626d0f3342fdf179cd425fd9c4fbb92c7d0e7"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/e10f8d40ce9d1ab47f66d65a16b48086432730d0"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/f9d13f150847d117877adee3460a46eceb0cf49b"},{"type":"PACKAGE","url":"https://github.com/ai/nanoid"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/3.3.17"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/3.3.18"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/5.1.6"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-zero-size-in-customalphabet-and-customrandom"}],"versionKeys":["npm:nanoid@3.3.11","npm:nanoid@3.3.16"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-37ch-88jc-xwx2","slug":"ghsa-37ch-88jc-xwx2-2809a0d1","dossier":false,"summary":"path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters","aliases":["CVE-2024-45296","CVE-2026-4867","GHSA-9wv6-86v2-598j"],"sourceIds":["GHSA-37ch-88jc-xwx2"],"published":"2026-03-27T20:04:53Z","modified":"2026-09-10T03:50:36.768786245Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/pillarjs/path-to-regexp/security/advisories/GHSA-37ch-88jc-xwx2"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-4867"},{"type":"WEB","url":"https://blakeembrey.com/posts/2024-09-web-redos"},{"type":"WEB","url":"https://cna.openjsf.org/security-advisories.html"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-9wv6-86v2-598j"},{"type":"PACKAGE","url":"https://github.com/pillarjs/path-to-regexp"},{"type":"WEB","url":"https://github.com/pillarjs/path-to-regexp/releases/tag/v.0.1.13"}],"versionKeys":["npm:path-to-regexp@0.1.12"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-3v7f-55p6-f55p","slug":"ghsa-3v7f-55p6-f55p-cfa06046","dossier":false,"summary":"Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching","aliases":["CVE-2026-33672"],"sourceIds":["GHSA-3v7f-55p6-f55p"],"published":"2026-03-25T21:13:39Z","modified":"2026-09-10T03:50:36.949634538Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/micromatch/picomatch/security/advisories/GHSA-3v7f-55p6-f55p"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33672"},{"type":"WEB","url":"https://github.com/micromatch/picomatch/commit/4516eb521f13a46b2fe1a1d2c9ef6b20ddc0e903"},{"type":"PACKAGE","url":"https://github.com/micromatch/picomatch"}],"versionKeys":["npm:picomatch@2.3.1","npm:picomatch@4.0.3"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-4mjr-xmp4-gh2g","slug":"ghsa-4mjr-xmp4-gh2g-3eea625c","dossier":false,"summary":"qs: Denial of Service via Attacker Controlled isBuffer","aliases":["CVE-2026-82417"],"sourceIds":["GHSA-4mjr-xmp4-gh2g"],"published":"2026-09-02T14:45:13Z","modified":"2026-09-10T03:51:14.991984096Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82417"},{"type":"WEB","url":"https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6"},{"type":"PACKAGE","url":"https://github.com/ljharb/qs"}],"versionKeys":["npm:qs@6.13.0","npm:qs@6.14.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-4w7w-66w2-5vf9","slug":"ghsa-4w7w-66w2-5vf9-1ec64746","dossier":false,"summary":"Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling","aliases":["CVE-2026-39365"],"sourceIds":["GHSA-4w7w-66w2-5vf9"],"published":"2026-04-06T18:03:46Z","modified":"2026-09-10T03:50:42.779400319Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-4w7w-66w2-5vf9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39365"},{"type":"WEB","url":"https://github.com/vitejs/vite/pull/22161"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/79f002f2286c03c88c7b74c511c7f9fc6dc46694"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v6.4.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v7.3.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v8.0.5"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-587h-7wmj-h5pm","slug":"ghsa-587h-7wmj-h5pm-d91659cb","dossier":false,"summary":"launch-editor: `fs.existsSync()` existence check can be bypassed on Windows","aliases":["CVE-2026-112942"],"sourceIds":["GHSA-587h-7wmj-h5pm"],"published":"2026-10-20T19:48:25Z","modified":"2026-10-20T20:00:04.608979840Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/launch-editor/security/advisories/GHSA-587h-7wmj-h5pm"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112942"},{"type":"WEB","url":"https://github.com/vitejs/launch-editor/commit/f13cd835d4b8e860b1d4d080ad8a490cc2463679"},{"type":"PACKAGE","url":"https://github.com/vitejs/launch-editor"},{"type":"WEB","url":"https://github.com/vitejs/launch-editor/releases/tag/v2.14.2"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-5gmw-xhrv-c9v3","slug":"ghsa-5gmw-xhrv-c9v3-c8c45696","dossier":false,"summary":"Tinypool: Prototype Pollution gadget in worker options leads to Remote Code Execution","aliases":["CVE-2026-104848"],"sourceIds":["GHSA-5gmw-xhrv-c9v3"],"published":"2026-10-05T22:50:01Z","modified":"2026-10-05T23:00:04.259458991Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/tinylibs/tinypool/security/advisories/GHSA-5gmw-xhrv-c9v3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104848"},{"type":"WEB","url":"https://github.com/tinylibs/tinypool/pull/134"},{"type":"WEB","url":"https://github.com/tinylibs/tinypool/commit/24df4e730e7d0857a6d226c9b58f8924227404fd"},{"type":"PACKAGE","url":"https://github.com/tinylibs/tinypool"},{"type":"WEB","url":"https://github.com/tinylibs/tinypool/releases/tag/v2.1.1"}],"versionKeys":["npm:tinypool@1.1.1"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-5xrq-8626-4rwp","slug":"ghsa-5xrq-8626-4rwp-71f38e35","dossier":false,"summary":"When Vitest UI server is listening, arbitrary file can be read and executed","aliases":["CVE-2026-47429"],"sourceIds":["GHSA-5xrq-8626-4rwp"],"published":"2026-06-01T14:09:53Z","modified":"2026-09-10T03:50:48.501520322Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}],"references":[{"type":"WEB","url":"https://github.com/vitest-dev/vitest/security/advisories/GHSA-5xrq-8626-4rwp"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-47429"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/pull/10445"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/pull/9350"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/commit/20e00ef7808de6d330c5e2fda530f686e08f1c8d"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/commit/af88b1f5d82844a4761ea9a977156c98e2b14ca8"},{"type":"PACKAGE","url":"https://github.com/vitest-dev/vitest"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/blob/eb1abf08573032a532015b999ad3501c5e89e3bb/packages/browser/src/node/commands/fs.ts#L10-L11"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/blob/eb1abf08573032a532015b999ad3501c5e89e3bb/packages/browser/src/node/plugin.ts#L194-L196"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/blob/eb1abf08573032a532015b999ad3501c5e89e3bb/packages/browser/src/node/rpc.ts#L115-L121"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/blob/eb1abf08573032a532015b999ad3501c5e89e3bb/packages/ui/node/index.ts#L77"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/blob/eb1abf08573032a532015b999ad3501c5e89e3bb/packages/vitest/src/api/setup.ts#L103-L105"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/blob/eb1abf08573032a532015b999ad3501c5e89e3bb/packages/vitest/src/api/setup.ts#L119-L121"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/releases/tag/v3.2.5"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/releases/tag/v4.1.0"}],"versionKeys":["npm:vitest@2.1.9"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-67mh-4wv8-2f99","slug":"ghsa-67mh-4wv8-2f99-854f0a14","dossier":false,"summary":"esbuild enables any website to send any requests to the development server and read the response","aliases":[],"sourceIds":["GHSA-67mh-4wv8-2f99"],"published":"2025-02-10T17:48:07Z","modified":"2026-09-10T03:50:22.418128505Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/evanw/esbuild/security/advisories/GHSA-67mh-4wv8-2f99"},{"type":"WEB","url":"https://github.com/evanw/esbuild/commit/de85afd65edec9ebc44a11e245fd9e9a2e99760d"},{"type":"PACKAGE","url":"https://github.com/evanw/esbuild"}],"versionKeys":["npm:esbuild@0.21.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-68fv-2mgg-jv7q","slug":"ghsa-68fv-2mgg-jv7q-a588da43","dossier":false,"summary":"source-map-js allows event-loop denial of service through indexed source-map section offsets","aliases":["CVE-2026-93749"],"sourceIds":["GHSA-68fv-2mgg-jv7q"],"published":"2026-09-18T18:31:44Z","modified":"2026-10-05T23:45:07.974936711Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93749"},{"type":"WEB","url":"https://github.com/7rulnik/source-map-js/issues/76"},{"type":"WEB","url":"https://github.com/7rulnik/source-map-js/pull/79"},{"type":"WEB","url":"https://github.com/7rulnik/source-map-js/commit/cf7658058ceeaa8619d5ae0ec90be6905209d016"},{"type":"PACKAGE","url":"https://github.com/7rulnik/source-map-js"},{"type":"WEB","url":"https://github.com/7rulnik/source-map-js/blob/c1cd8904bb7bd0c7fb5879fcda48134d82a27934/lib/source-node.js#L115-L118"},{"type":"WEB","url":"https://github.com/7rulnik/source-map-js/releases/tag/v1.2.2"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/source-map-js-through-1.2.1-event-loop-denial-of-service"}],"versionKeys":["npm:source-map-js@1.2.1"],"packageCount":1,"repositoryCount":4},{"id":"GHSA-698v-4r3x-3vcv","slug":"ghsa-698v-4r3x-3vcv-1bca3b44","dossier":false,"summary":"launch-editor: escapeCmdArgs() omits % escaping on Windows","aliases":["CVE-2026-112943"],"sourceIds":["GHSA-698v-4r3x-3vcv"],"published":"2026-10-20T18:30:24Z","modified":"2026-10-20T18:45:09.467993691Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/launch-editor/security/advisories/GHSA-698v-4r3x-3vcv"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112943"},{"type":"WEB","url":"https://github.com/vitejs/launch-editor/pull/155"},{"type":"WEB","url":"https://github.com/vitejs/launch-editor/commit/3c2f9bf2ff8fe63d056a8f9cc52d825b66ca79fc"},{"type":"PACKAGE","url":"https://github.com/vitejs/launch-editor"},{"type":"WEB","url":"https://github.com/vitejs/launch-editor/releases/tag/v2.14.2"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-6g55-p6wh-862q","slug":"ghsa-6g55-p6wh-862q-12f1aeab","dossier":false,"summary":"PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments","aliases":["CVE-2026-45623"],"sourceIds":["GHSA-6g55-p6wh-862q"],"published":"2026-07-23T15:06:16Z","modified":"2026-09-10T03:51:10.752909750Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-6g55-p6wh-862q"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/aaec7b78b3ce2792585b4b300ef1bd5dd5b3e8ad"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/c64b7488d2731dfa16213739b42c34faf5a9eba3"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.12"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.3","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-6pq8-jhm2-2vcw","slug":"ghsa-6pq8-jhm2-2vcw-7a7bd087","dossier":false,"summary":"qs : qs.stringify with arrayFormat 'comma' throws an uncaught TypeError on array elements carrying a non-callable own toString (DoS)","aliases":["CVE-2026-110816"],"sourceIds":["GHSA-6pq8-jhm2-2vcw"],"published":"2026-10-27T16:10:55Z","modified":"2026-10-27T16:15:05.324423680Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/ljharb/qs/security/advisories/GHSA-6pq8-jhm2-2vcw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110816"},{"type":"WEB","url":"https://github.com/ljharb/qs/commit/a952e7519338ef0cfb25694a2988848f93333727"},{"type":"PACKAGE","url":"https://github.com/ljharb/qs"},{"type":"WEB","url":"https://github.com/ljharb/qs/releases/tag/v6.16.1"}],"versionKeys":["npm:qs@6.13.0","npm:qs@6.14.1","npm:qs@6.16.0"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-6rw7-vpxm-498p","slug":"ghsa-6rw7-vpxm-498p-92461380","dossier":false,"summary":"qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion","aliases":["CVE-2025-15284"],"sourceIds":["GHSA-6rw7-vpxm-498p"],"published":"2025-12-30T21:02:54Z","modified":"2026-09-10T03:50:31.670581449Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L"}],"references":[{"type":"WEB","url":"https://github.com/ljharb/qs/security/advisories/GHSA-6rw7-vpxm-498p"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15284"},{"type":"WEB","url":"https://github.com/ljharb/qs/commit/3086902ecf7f088d0d1803887643ac6c03d415b9"},{"type":"PACKAGE","url":"https://github.com/ljharb/qs"}],"versionKeys":["npm:qs@6.13.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-82fw-gwwq-j7x9","slug":"ghsa-82fw-gwwq-j7x9-24407266","dossier":false,"summary":"Vitest: Path Traversal / Arbitrary File Read via @vitest/mocker Redirect Mock","aliases":["CVE-2026-84373"],"sourceIds":["GHSA-82fw-gwwq-j7x9"],"published":"2026-09-08T20:46:45Z","modified":"2026-09-08T21:00:07.248611070Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/vitest-dev/vitest/security/advisories/GHSA-82fw-gwwq-j7x9"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84373"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/pull/10972"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/pull/10974"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/commit/51edf2b072902aec6d30c90ebaafd8f121c6f9d8"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/commit/8ff9b9a9efca7c6cfd5243569440de8d7a33aec4"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/commit/fe5a11d3ceac5ec10d6d7d21a46d4caca132c48f"},{"type":"PACKAGE","url":"https://github.com/vitest-dev/vitest"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/releases/tag/v4.1.11"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/releases/tag/v5.0.0-rc.2"}],"versionKeys":["npm:@vitest/mocker@2.1.9","npm:@vitest/mocker@3.2.7","npm:vitest@2.1.9","npm:vitest@3.2.7"],"packageCount":2,"repositoryCount":2},{"id":"GHSA-85c8-ppgw-ccpr","slug":"ghsa-85c8-ppgw-ccpr-3ca4df35","dossier":false,"summary":"Tinypool: Prototype Pollution Gadget to RCE in run() options","aliases":["CVE-2026-104849"],"sourceIds":["GHSA-85c8-ppgw-ccpr"],"published":"2026-10-05T22:49:52Z","modified":"2026-10-05T23:00:05.324545780Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/tinylibs/tinypool/security/advisories/GHSA-85c8-ppgw-ccpr"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104849"},{"type":"WEB","url":"https://github.com/tinylibs/tinypool/pull/135"},{"type":"WEB","url":"https://github.com/tinylibs/tinypool/commit/f41411a3e23324c674f35a19a3240f7a7c40ffbf"},{"type":"PACKAGE","url":"https://github.com/tinylibs/tinypool"},{"type":"WEB","url":"https://github.com/tinylibs/tinypool/releases/tag/v2.1.2"}],"versionKeys":["npm:tinypool@1.1.1"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-869p-cjfg-cm3x","slug":"ghsa-869p-cjfg-cm3x-7eade103","dossier":false,"summary":"auth0/node-jws Improperly Verifies HMAC Signature","aliases":["CVE-2025-65945"],"sourceIds":["GHSA-869p-cjfg-cm3x"],"published":"2025-12-04T16:54:15Z","modified":"2026-09-10T03:50:31.797792758Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/auth0/node-jws/security/advisories/GHSA-869p-cjfg-cm3x"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-65945"},{"type":"WEB","url":"https://github.com/auth0/node-jws/commit/34c45b2c04434f925b638de6a061de9339c0ea2e"},{"type":"WEB","url":"https://github.com/auth0/node-jws/commit/4f6e73f24df42f07d632dec6431ade8eda8d11a6"},{"type":"PACKAGE","url":"https://github.com/auth0/node-jws"},{"type":"WEB","url":"https://github.com/auth0/node-jws/releases/tag/v3.2.3"},{"type":"WEB","url":"https://github.com/auth0/node-jws/releases/tag/v4.0.1"}],"versionKeys":["npm:jws@3.2.2"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-93m4-6634-74q7","slug":"ghsa-93m4-6634-74q7-557bfeeb","dossier":false,"summary":"vite allows server.fs.deny bypass via backslash on Windows","aliases":["CVE-2025-62522"],"sourceIds":["GHSA-93m4-6634-74q7"],"published":"2025-10-20T19:54:28Z","modified":"2026-09-10T03:50:29.574857832Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-93m4-6634-74q7"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-62522"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/f479cc57c425ed41ceb434fecebd63931b1ed4ed"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-9jrq-w75r-8gcw","slug":"ghsa-9jrq-w75r-8gcw-21865588","dossier":false,"summary":"Vite: Cross origin script execution through Vite custom middleware","aliases":["CVE-2026-112945"],"sourceIds":["GHSA-9jrq-w75r-8gcw"],"published":"2026-10-21T16:48:14Z","modified":"2026-10-21T17:00:26.569382874Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-9jrq-w75r-8gcw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112945"},{"type":"WEB","url":"https://github.com/vitejs/vite/pull/23653"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/7dafd8e56f152403a3230608fa4005273c2e9e17"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-c2c7-rcm5-vvqj","slug":"ghsa-c2c7-rcm5-vvqj-6ccdec4e","dossier":false,"summary":"Picomatch has a ReDoS vulnerability via extglob quantifiers","aliases":["CVE-2026-33671"],"sourceIds":["GHSA-c2c7-rcm5-vvqj"],"published":"2026-03-25T21:12:07Z","modified":"2026-09-10T03:51:00.292614896Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}],"references":[{"type":"WEB","url":"https://github.com/micromatch/picomatch/security/advisories/GHSA-c2c7-rcm5-vvqj"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33671"},{"type":"WEB","url":"https://github.com/micromatch/picomatch/commit/5eceecd27543b8e056b9307d69e105ea03618a7d"},{"type":"PACKAGE","url":"https://github.com/micromatch/picomatch"}],"versionKeys":["npm:picomatch@2.3.1","npm:picomatch@4.0.3"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-fx2h-pf6j-xcff","slug":"ghsa-fx2h-pf6j-xcff-156ab351","dossier":false,"summary":"vite: `server.fs.deny` bypass on Windows alternate paths","aliases":["CVE-2026-53571"],"sourceIds":["GHSA-fx2h-pf6j-xcff"],"published":"2026-06-15T17:17:45Z","modified":"2026-10-27T15:15:07.885624041Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-fx2h-pf6j-xcff"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53571"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-fxqj-rqcc-2cmp","slug":"ghsa-fxqj-rqcc-2cmp-34c312ef","dossier":false,"summary":"PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset","aliases":["CVE-2026-69153"],"sourceIds":["GHSA-fxqj-rqcc-2cmp"],"published":"2026-08-03T17:11:39Z","modified":"2026-09-10T03:50:53.572374167Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.19"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.3","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-g4jq-h2w9-997c","slug":"ghsa-g4jq-h2w9-997c-b5be310c","dossier":false,"summary":"Vite middleware may serve files starting with the same name with the public directory","aliases":["CVE-2025-58751"],"sourceIds":["GHSA-g4jq-h2w9-997c"],"published":"2025-09-09T20:55:56Z","modified":"2026-09-10T03:50:28.405024248Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-g4jq-h2w9-997c"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58751"},{"type":"WEB","url":"https://github.com/lukeed/sirv/commit/f0113f3f8266328d804ee808f763a3c11f8997eb"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/09f2b52e8d5907f26602653caf41b3a56692600d"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/4f1c35bcbb5830290c694aa14b6789e07450f069"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/63e2a5d232218f3f8d852056751e609a5367aaec"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/e11d24008b97d4ca731ecc1a3b95260a6d12e7e0"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-jqcg-44mw-7w3h","slug":"ghsa-jqcg-44mw-7w3h-470fbe53","dossier":false,"summary":"proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet","aliases":["CVE-2026-90711"],"sourceIds":["GHSA-jqcg-44mw-7w3h"],"published":"2026-10-05T23:30:26Z","modified":"2026-10-05T23:45:07.322157228Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90711"},{"type":"WEB","url":"https://github.com/jshttp/proxy-addr/commit/780911d84d18e2c5fa008ed0c0d387631ec11965"},{"type":"WEB","url":"https://cna.openjsf.org/security-advisories.html"},{"type":"PACKAGE","url":"https://github.com/jshttp/proxy-addr"},{"type":"WEB","url":"https://github.com/jshttp/proxy-addr/releases/tag/v2.0.8"}],"versionKeys":["npm:proxy-addr@2.0.7"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-jqfw-vq24-v9c3","slug":"ghsa-jqfw-vq24-v9c3-2de51aa4","dossier":false,"summary":"Vite's `server.fs` settings were not applied to HTML files","aliases":["CVE-2025-58752"],"sourceIds":["GHSA-jqfw-vq24-v9c3"],"published":"2025-09-09T20:54:42Z","modified":"2026-09-10T03:50:28.597734404Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-jqfw-vq24-v9c3"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58752"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/0ab19ea9fcb66f544328f442cf6e70f7c0528d5f"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/14015d794f69accba68798bd0e15135bc51c9c1e"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/482000f57f56fe6ff2e905305100cfe03043ddea"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/6f01ff4fe072bcfcd4e2a84811772b818cd51fe6"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"},{"type":"WEB","url":"https://github.com/vitejs/vite/blob/v7.1.5/packages/vite/CHANGELOG.md"}],"versionKeys":["npm:vite@6.3.5"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-mrhx-c7xc-m3w5","slug":"ghsa-mrhx-c7xc-m3w5-08924c2f","dossier":false,"summary":"Zod can exhaust memory while validating oversized constrained collections","aliases":["CVE-2023-54404"],"sourceIds":["GHSA-mrhx-c7xc-m3w5"],"published":"2026-10-01T18:32:46Z","modified":"2026-10-23T18:30:09.376405885Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54404"},{"type":"WEB","url":"https://github.com/colinhacks/zod/issues/1872"},{"type":"WEB","url":"https://github.com/colinhacks/zod/pull/6475"},{"type":"WEB","url":"https://github.com/colinhacks/zod/pull/6652"},{"type":"WEB","url":"https://github.com/colinhacks/zod/commit/a0ebf970f2d752e5f58527cd2942ff48be4f46bd"},{"type":"PACKAGE","url":"https://github.com/colinhacks/zod"},{"type":"WEB","url":"https://www.vulncheck.com/advisories/zod-uncontrolled-resource-consumption-via-array-validation"}],"versionKeys":["npm:zod@3.25.76","npm:zod@4.6.5"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-mw96-cpmx-2vgc","slug":"ghsa-mw96-cpmx-2vgc-209d101c","dossier":false,"summary":"Rollup 4 has Arbitrary File Write via Path Traversal","aliases":["CVE-2026-27606"],"sourceIds":["GHSA-mw96-cpmx-2vgc"],"published":"2026-02-25T22:37:26Z","modified":"2026-09-10T03:50:35.380273715Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:P"}],"references":[{"type":"WEB","url":"https://github.com/rollup/rollup/security/advisories/GHSA-mw96-cpmx-2vgc"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27606"},{"type":"WEB","url":"https://github.com/rollup/rollup/commit/c60770d7aaf750e512c1b2774989ea4596e660b2"},{"type":"WEB","url":"https://github.com/rollup/rollup/commit/c8cf1f9c48c516285758c1e11f08a54f304fd44e"},{"type":"WEB","url":"https://github.com/rollup/rollup/commit/d6dee5e99bb82aac0bee1df4ab9efbde455452c3"},{"type":"PACKAGE","url":"https://github.com/rollup/rollup"},{"type":"WEB","url":"https://github.com/rollup/rollup/releases/tag/v2.80.0"},{"type":"WEB","url":"https://github.com/rollup/rollup/releases/tag/v3.30.0"},{"type":"WEB","url":"https://github.com/rollup/rollup/releases/tag/v4.59.0"}],"versionKeys":["npm:rollup@4.40.0","npm:rollup@4.46.1"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-p9ff-h696-f583","slug":"ghsa-p9ff-h696-f583-155b7820","dossier":false,"summary":"Vite Vulnerable to Arbitrary File Read via Vite Dev Server WebSocket","aliases":["CVE-2026-39363"],"sourceIds":["GHSA-p9ff-h696-f583"],"published":"2026-04-06T18:03:24Z","modified":"2026-09-10T03:51:02.521776335Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-p9ff-h696-f583"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39363"},{"type":"WEB","url":"https://github.com/vitejs/vite/pull/22159"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/f02d9fde0b195afe3ea2944414186962fbbe41e0"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v6.4.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v7.3.2"},{"type":"WEB","url":"https://github.com/vitejs/vite/releases/tag/v8.0.5"}],"versionKeys":["npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-q8mj-m7cp-5q26","slug":"ghsa-q8mj-m7cp-5q26-f97ac731","dossier":false,"summary":"qs has a remotely triggerable DoS: qs.stringify crashes with TypeError on null/undefined entries in comma-format arrays when encodeValuesOnly is set","aliases":["CVE-2026-8723"],"sourceIds":["GHSA-q8mj-m7cp-5q26"],"published":"2026-05-22T17:27:19Z","modified":"2026-09-10T03:50:55.285123128Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"},{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/ljharb/qs/security/advisories/GHSA-q8mj-m7cp-5q26"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8723"},{"type":"WEB","url":"https://github.com/ljharb/qs/commit/21f80b33e5c8b3f7eba1034fff0da4a4a37a1d41"},{"type":"PACKAGE","url":"https://github.com/ljharb/qs"}],"versionKeys":["npm:qs@6.13.0","npm:qs@6.14.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-qx2v-qp2m-jg93","slug":"ghsa-qx2v-qp2m-jg93-0a55e142","dossier":false,"summary":"PostCSS has XSS via Unescaped </style> in its CSS Stringify Output","aliases":["CVE-2026-41305"],"sourceIds":["GHSA-qx2v-qp2m-jg93"],"published":"2026-04-24T15:31:42Z","modified":"2026-09-10T03:51:02.916463871Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-qx2v-qp2m-jg93"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-41305"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.10"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.3","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-qxg6-89mg-rqv8","slug":"ghsa-qxg6-89mg-rqv8-632e37af","dossier":false,"summary":"Vitest: Code injection via unauthenticated manual mock registration","aliases":["CVE-2026-112949"],"sourceIds":["GHSA-qxg6-89mg-rqv8"],"published":"2026-10-21T19:54:26Z","modified":"2026-10-21T20:01:39.911013327Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"references":[{"type":"WEB","url":"https://github.com/vitest-dev/vitest/security/advisories/GHSA-qxg6-89mg-rqv8"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112949"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/commit/15cc006aa9f8683dc5f7e895d011fa7dc751ce35"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/commit/b825313243dc55757e8d7c0f9e7a792135e13473"},{"type":"PACKAGE","url":"https://github.com/vitest-dev/vitest"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/releases/tag/v4.1.12"},{"type":"WEB","url":"https://github.com/vitest-dev/vitest/releases/tag/v5.0.3"}],"versionKeys":["npm:@vitest/mocker@2.1.9","npm:@vitest/mocker@3.2.7"],"packageCount":1,"repositoryCount":2},{"id":"GHSA-r28c-9q8g-f849","slug":"ghsa-r28c-9q8g-f849-c8b68fa5","dossier":false,"summary":"PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure","aliases":["CVE-2026-73646"],"sourceIds":["GHSA-r28c-9q8g-f849"],"published":"2026-07-24T16:24:55Z","modified":"2026-09-10T03:50:52.854537677Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/postcss/postcss/security/advisories/GHSA-r28c-9q8g-f849"},{"type":"WEB","url":"https://github.com/postcss/postcss/commit/95663d3eb7ba26f4854dd19d3b4f4425760cf56c"},{"type":"PACKAGE","url":"https://github.com/postcss/postcss"},{"type":"WEB","url":"https://github.com/postcss/postcss/releases/tag/8.5.18"}],"versionKeys":["npm:postcss@8.4.49","npm:postcss@8.5.3","npm:postcss@8.5.6"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-r825-w8mm-5pxw","slug":"ghsa-r825-w8mm-5pxw-2a8236ea","dossier":false,"summary":"launch-editor: Editor CLI flag misinterpretation causing arbitrary command execution for some editors","aliases":["CVE-2026-112944"],"sourceIds":["GHSA-r825-w8mm-5pxw"],"published":"2026-10-20T19:51:52Z","modified":"2026-10-20T20:00:04.608907013Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/launch-editor/security/advisories/GHSA-r825-w8mm-5pxw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112944"},{"type":"WEB","url":"https://github.com/vitejs/launch-editor/pull/156"},{"type":"WEB","url":"https://github.com/vitejs/launch-editor/commit/f6e6701bb1f16f2dd242b321374f1b6cca6eb6d4"},{"type":"PACKAGE","url":"https://github.com/vitejs/launch-editor"},{"type":"WEB","url":"https://github.com/vitejs/launch-editor/releases/tag/v2.14.2"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-rq7h-c2jc-7f22","slug":"ghsa-rq7h-c2jc-7f22-e139dfcc","dossier":false,"summary":"Vite: Files outside `server.fs.allow` could be served when project paths match system paths on non-Windows machine","aliases":["CVE-2026-112946"],"sourceIds":["GHSA-rq7h-c2jc-7f22"],"published":"2026-10-21T16:47:42Z","modified":"2026-10-21T17:00:06.336868869Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/vite/security/advisories/GHSA-rq7h-c2jc-7f22"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-112946"},{"type":"WEB","url":"https://github.com/vitejs/vite/pull/23656"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/170b92791421bcd484f7325936d989a82d6bd4aa"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/45c0e3392a298626955a0ab93a8e51232daac721"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/c3e06f92e969952466b4e2f5801e85e1e00cd905"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/e570d8d016096b5f8f6f09808376ca6cf73f27d0"},{"type":"WEB","url":"https://github.com/vitejs/vite/commit/f0d76c7da13d5e794807b82f0b86c1931a8438e3"},{"type":"PACKAGE","url":"https://github.com/vitejs/vite"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-v422-hmwv-36x6","slug":"ghsa-v422-hmwv-36x6-3d8c5fa3","dossier":false,"summary":"body-parser vulnerable to denial of service when invalid limit value silently disables size enforcement","aliases":["CVE-2026-12590"],"sourceIds":["GHSA-v422-hmwv-36x6"],"published":"2026-07-20T23:23:26Z","modified":"2026-09-10T03:50:53.014509971Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"WEB","url":"https://github.com/expressjs/body-parser/security/advisories/GHSA-v422-hmwv-36x6"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-12590"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/pull/698"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/pull/741"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/commit/2322e111cc321413ec2b7b76d01be533d3de9d7d"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/commit/3492672eee593d5c158f239b6e9115498a5dbeac"},{"type":"WEB","url":"https://cna.openjsf.org/security-advisories.html"},{"type":"PACKAGE","url":"https://github.com/expressjs/body-parser"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/releases/tag/1.20.6"},{"type":"WEB","url":"https://github.com/expressjs/body-parser/releases/tag/v2.3.0"}],"versionKeys":["npm:body-parser@1.20.3","npm:body-parser@1.20.4"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-v6wh-96g9-6wx3","slug":"ghsa-v6wh-96g9-6wx3-0e881d08","dossier":false,"summary":"launch-editor: NTLMv2 hash disclosure via UNC path handling on Windows","aliases":["CVE-2026-53632"],"sourceIds":["GHSA-v6wh-96g9-6wx3"],"published":"2026-06-15T17:18:31Z","modified":"2026-09-10T03:50:50.705036566Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H"}],"references":[{"type":"WEB","url":"https://github.com/vitejs/launch-editor/security/advisories/GHSA-v6wh-96g9-6wx3"},{"type":"PACKAGE","url":"https://github.com/vitejs/launch-editor"}],"versionKeys":["npm:vite@5.4.21","npm:vite@6.3.5","npm:vite@6.4.1"],"packageCount":1,"repositoryCount":3},{"id":"GHSA-w7fw-mjwx-w883","slug":"ghsa-w7fw-mjwx-w883-ad60beb3","dossier":false,"summary":"qs's arrayLimit bypass in comma parsing allows denial of service","aliases":["CVE-2026-2391"],"sourceIds":["GHSA-w7fw-mjwx-w883"],"published":"2026-02-12T17:04:39Z","modified":"2026-09-10T03:50:35.973235487Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L"}],"references":[{"type":"WEB","url":"https://github.com/ljharb/qs/security/advisories/GHSA-w7fw-mjwx-w883"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2391"},{"type":"WEB","url":"https://github.com/ljharb/qs/commit/f6a7abff1f13d644db9b05fe4f2c98ada6bf8482"},{"type":"PACKAGE","url":"https://github.com/ljharb/qs"}],"versionKeys":["npm:qs@6.13.0","npm:qs@6.14.1"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-xcx6-jx8p-x3h5","slug":"ghsa-xcx6-jx8p-x3h5-de3b78cd","dossier":false,"summary":"MSAL Node authorization code flow may disclose parameters to an attacker-controlled endpoint","aliases":["CVE-2026-109461"],"sourceIds":["GHSA-xcx6-jx8p-x3h5"],"published":"2026-10-23T22:16:44Z","modified":"2026-10-23T22:30:05.010413241Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}],"references":[{"type":"WEB","url":"https://github.com/AzureAD/microsoft-authentication-library-for-js/security/advisories/GHSA-xcx6-jx8p-x3h5"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109461"},{"type":"WEB","url":"https://github.com/AzureAD/microsoft-authentication-library-for-js/pull/8901"},{"type":"WEB","url":"https://github.com/AzureAD/microsoft-authentication-library-for-js/commit/f550958586475dbfeb1cd44be14a2d653728850e"},{"type":"PACKAGE","url":"https://github.com/AzureAD/microsoft-authentication-library-for-js"},{"type":"WEB","url":"https://github.com/AzureAD/microsoft-authentication-library-for-js/releases/tag/msal-node-v7.1.0"},{"type":"WEB","url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-109461"}],"versionKeys":["npm:@azure/msal-node@5.6.0"],"packageCount":1,"repositoryCount":1},{"id":"GHSA-xwg4-73v4-xw9w","slug":"ghsa-xwg4-73v4-xw9w-e114930d","dossier":false,"summary":"nanoid: Integer Overflow or Wraparound","aliases":["CVE-2026-73086"],"sourceIds":["GHSA-xwg4-73v4-xw9w"],"published":"2026-09-01T19:23:45Z","modified":"2026-09-01T19:30:08.615560716Z","checkedAt":"2026-11-12T08:58:58.139Z","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"}],"references":[{"type":"WEB","url":"https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73086"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3"},{"type":"WEB","url":"https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac"},{"type":"PACKAGE","url":"https://github.com/ai/nanoid"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/3.3.12"},{"type":"WEB","url":"https://github.com/ai/nanoid/releases/tag/5.1.11"}],"versionKeys":["npm:nanoid@3.3.11"],"packageCount":1,"repositoryCount":3}]}}