Bump browserify-sign from 4.2.1 to 4.2.3 in /frontend · githubabcs-devops/ghas-bootcamp@d4192af

Triggered via pull request April 22, 2025 00:38

opened #35

Status Failure

Total duration 47s

Artifacts –

dependency-review.yml Required

on: pull_request

1 error and 10 warnings

Dependency review detected vulnerable packages.

npm/ssri has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.

npm/@webassemblyjs/ast has an OpenSSF Scorecard of 1.5, which is less than this repository's threshold of 3.

npm/@webassemblyjs/floating-point-hex-parser has an OpenSSF Scorecard of 1.5, which is less than this repository's threshold of 3.

npm/@webassemblyjs/helper-api-error has an OpenSSF Scorecard of 1.5, which is less than this repository's threshold of 3.

npm/@webassemblyjs/helper-buffer has an OpenSSF Scorecard of 1.5, which is less than this repository's threshold of 3.

npm/@webassemblyjs/helper-code-frame has an OpenSSF Scorecard of 1.5, which is less than this repository's threshold of 3.

npm/@webassemblyjs/helper-fsm has an OpenSSF Scorecard of 1.5, which is less than this repository's threshold of 3.

npm/@webassemblyjs/helper-module-context has an OpenSSF Scorecard of 1.5, which is less than this repository's threshold of 3.

npm/@webassemblyjs/helper-wasm-bytecode has an OpenSSF Scorecard of 1.5, which is less than this repository's threshold of 3.

npm/@webassemblyjs/helper-wasm-section has an OpenSSF Scorecard of 1.5, which is less than this repository's threshold of 3.