Dependency Review · gravitational/teleport@40de4b9

Triggered via merge group March 12, 2025 19:26

ptgott

Status Failure

Total duration 3m 2s

Artifacts –

dependency-review.yaml

on: merge_group

2 errors and 10 warnings

Dependency review detected vulnerable packages.

$GITHUB_STEP_SUMMARY upload aborted, supports content up to a size of 1024k, got 1562k. For more information see: https://docs.github.com/actions/using-workflows/workflow-commands-for-github-actions#adding-a-markdown-summary

npm/cross-spawn has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/@ampproject/remapping has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/@bcoe/v8-coverage has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/@jridgewell/resolve-uri has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/@jridgewell/set-array has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/@jridgewell/trace-mapping has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/deepmerge has an OpenSSF Scorecard of 2.3, which is less than this repository's threshold of 3.

npm/fs.realpath has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/gensync has an OpenSSF Scorecard of 1.9, which is less than this repository's threshold of 3.

npm/get-caller-file has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.