jridgewell / resolve-uri

Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.

Cada punto abarca 4 días.

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 0 paquetes directos y 249 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 249 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 19 tienen avisos conocidos, de los cuales 0 son directas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 867,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "JavaScript": 2202551,
        "TypeScript": 8472
      },
      "pushed_at": "2026-03-05T16:04:19Z",
      "created_at": "2019-07-14T20:11:48Z",
      "owner_type": "User",
      "updated_at": "2025-08-04T22:00:52Z",
      "description": "Resolve a URI relative to an optional base URI",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "JavaScript",
      "significant_languages": [
        "JavaScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Justin Ridgewell",
      "type": "User",
      "login": "jridgewell",
      "company": "@google",
      "location": "New York, NY",
      "followers": 1319,
      "avatar_url": "https://avatars.githubusercontent.com/u/112982?v=4",
      "created_at": "2009-08-07T17:17:38Z",
      "is_verified": null,
      "public_repos": 245,
      "account_age_days": 6192
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v3.1.2",
          "kind": "patch",
          "published_at": "2024-02-14T19:34:49Z"
        },
        {
          "tag": "v3.1.1",
          "kind": "patch",
          "published_at": "2023-04-07T02:46:32Z"
        },
        {
          "tag": "v3.1.0",
          "kind": "minor",
          "published_at": "2022-07-05T23:40:31Z"
        },
        {
          "tag": "v3.0.8",
          "kind": "patch",
          "published_at": "2022-06-26T15:54:36Z"
        },
        {
          "tag": "v3.0.7",
          "kind": "patch",
          "published_at": "2022-05-05T21:56:59Z"
        },
        {
          "tag": "v3.0.6",
          "kind": "patch",
          "published_at": "2022-04-22T22:31:23Z"
        },
        {
          "tag": "v3.0.0",
          "kind": "major",
          "published_at": "2022-01-23T03:48:33Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2021-03-23T09:08:58Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "730a61ad423359a972b7935a4304db04983a3251",
          "body": "Fix typo in readme",
          "is_bot": false,
          "headline": "Merge pull request #125 from jsegura/patch-1",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2025-08-04T22:00:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c631f8690f735b1d41152821bfbc94393994c868",
          "body": null,
          "is_bot": false,
          "headline": "Fix typo in readme",
          "author_name": "Javier Segura",
          "author_login": "jsegura",
          "committed_at": "2025-08-04T21:49:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "caa7a299d6c688570773c81732f77d3c7035ded6",
          "body": null,
          "is_bot": false,
          "headline": "3.1.2",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2024-02-14T19:31:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e4b1e34cac37560ff5081526c90723277adce5d5",
          "body": "Use const enum for UrlType",
          "is_bot": false,
          "headline": "Merge pull request #120 from sapphi-red/main",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2024-02-14T19:29:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b69ba039a83ffa4314a9dbe7ec0565c3ac35d31",
          "body": null,
          "is_bot": false,
          "headline": "Use const enum for UrlType",
          "author_name": "sapphi-red",
          "author_login": "sapphi-red",
          "committed_at": "2024-02-14T11:01:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8189d8d3a10bccc7c7b425ca07aeb86999e90bcb",
          "body": null,
          "is_bot": false,
          "headline": "3.1.1",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2023-04-07T02:40:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45e34173fb851afc895c7145d80a92a8cf6c6b67",
          "body": null,
          "is_bot": false,
          "headline": "Use types instead of typings",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2023-04-07T02:21:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7cc23209430909a54f44b740e07cb27573535c95",
          "body": null,
          "is_bot": false,
          "headline": "3.1.0",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-07-05T23:39:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68f978294abe8d5e6cfef24c8468fb64dbb5e4c0",
          "body": "Implement query and hash resolution",
          "is_bot": false,
          "headline": "Merge pull request #114 from jridgewell/query-or-hash",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-07-05T23:35:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39b411f6a2beb9359fdecb305f0a98d40bb2619e",
          "body": null,
          "is_bot": false,
          "headline": "Implement query and hash resolution",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-07-05T23:35:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "65898cc5c7d6a5f518ead9d6d0c6a46fddbdea93",
          "body": null,
          "is_bot": false,
          "headline": "Update test generation",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-06-27T02:11:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "375388f7f7576806af0be689b2990cb409f593fc",
          "body": null,
          "is_bot": false,
          "headline": "Cleanup tsconfig.json",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-06-26T17:33:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e92ca23a0762f6b676b659a0e65d1504ea0ee09b",
          "body": null,
          "is_bot": false,
          "headline": "3.0.8",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-06-26T15:39:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e67fe995fa20d930157993d55642a81137e2bb8",
          "body": "Re: https://github.com/jridgewell/gen-mapping/pull/4",
          "is_bot": false,
          "headline": "fix \"exports\" for node 13.0-13.6",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-06-26T15:38:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a48202e6c38574dabc65b77cb4904ea2945ef77",
          "body": "Re: https://github.com/jridgewell/trace-mapping/issues/11",
          "is_bot": false,
          "headline": "Fix builts sources paths",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-06-26T15:35:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd7fbfe4b2bfa0df65950aa25770a0c28867c5d2",
          "body": null,
          "is_bot": false,
          "headline": "3.0.7",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-05-05T21:47:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e053d3994ea1a4d727bdb544383cb152d110fac",
          "body": null,
          "is_bot": false,
          "headline": "Add types field to exports",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-05-05T21:36:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5791927e4fbc08274e190c77d018c6ef0d7c8240",
          "body": null,
          "is_bot": false,
          "headline": "3.0.6",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-04-22T22:30:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1c6145496bde593d510b5b0977c6a8fbb4a34fc5",
          "body": "Fix parsing of file: URLs",
          "is_bot": false,
          "headline": "Merge pull request #106 from jridgewell/files",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-04-22T22:28:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "baaea2a70510bcbb01e3ed7e0380a2e90bd2e4ef",
          "body": "File URLs are a trip. They're supposed to be of like: `file:///root/path/file.js` (or\n`file:///C:/path/file.js` on Windows). But, the parsing is extremely loose. It doesn't require the\nregular `//` in the scheme, nor the leading `/` on the path. And they can parse a host in\n`file://foo/bar`, but not in `file://C:/bar`. Just trippy.",
          "is_bot": false,
          "headline": "Fix parsing of file: URLs",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-04-22T22:22:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1414cc30fba1de2e159b156b488b1b353e13a7ad",
          "body": null,
          "is_bot": false,
          "headline": "Fix tests in node 6",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-02-11T08:02:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15f80f374ce8250595e62c22271d932c0c0f741d",
          "body": null,
          "is_bot": false,
          "headline": "3.0.5",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-02-11T05:19:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa653a68a121a92abdf0f6910ce09d0d1780f3ca",
          "body": "The `user` group of `urlRegex` would eat beyond the `host` and into the `path`, which isn't valid.\nWhen this happened, it incorrectly assigned everything up to the package scope as the `user`.\nBecause we weren't expecting a URL-like, we'd strip the `scheme` during parsing, which made it a\npath-like,\n[…]\nen printing a path-like.\n\nBut now we correctly prevent the `user` from extending beyond the `host` of the URL, and the\npath-like `node_modules/@babel/runtime/...` will be parsed as part of the `path`.",
          "is_bot": false,
          "headline": "Fix parsing of node_modules with scoped packages",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-02-11T05:14:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "07c1110622d11103d876ecb07a0246177d2c7548",
          "body": null,
          "is_bot": false,
          "headline": "Test in legacy node versions",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-02-05T05:13:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b4b1168d58beb488e1e799651d488c3cc1ddca1d",
          "body": null,
          "is_bot": false,
          "headline": "3.0.4",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-02-03T03:19:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fecbdcdf6c53f3cbec82ab543bc63ba143c46819",
          "body": "With 910ac30e, we no longer depend on the URI class, so our support matrix opened wide up.",
          "is_bot": false,
          "headline": "Drop required node version to >= 6",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-02-03T03:18:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b755e9c3bfb6d4cc590b44e8d02a15e09e055cde",
          "body": null,
          "is_bot": false,
          "headline": "3.0.3",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-23T08:04:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e2d26123f2c41b46f15e28410734cc671e0dd3f",
          "body": null,
          "is_bot": false,
          "headline": "Fix regression with empty inputs",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-23T08:04:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6d69b3d644a39f17e7291d7c1c96c34a07f4b075",
          "body": null,
          "is_bot": false,
          "headline": "3.0.2",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-23T07:39:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a01ce439e95929866688c7db02a2b76a62d46555",
          "body": null,
          "is_bot": false,
          "headline": "Fix resolution of file:// URLs",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-23T07:39:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "241d54656fd91b616c6e54258a6cccb4bc6f20a7",
          "body": null,
          "is_bot": false,
          "headline": "3.0.1",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-23T05:03:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de44da84ae123b99abd18538cc4e22fff4609800",
          "body": null,
          "is_bot": false,
          "headline": "Test and fix empty inputs",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-23T05:02:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9bb812a96d6bc9f11729367b4f75693b390384f3",
          "body": null,
          "is_bot": false,
          "headline": "Remove badges from readme",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-23T03:51:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3fe53c0368abb4338e308b964526b5d3de4c1f2",
          "body": null,
          "is_bot": false,
          "headline": "Update deps and build system",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-23T03:50:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e303c7401987fd22c5b6338c0518da8da226655",
          "body": null,
          "is_bot": false,
          "headline": "Switch to considerably faster ava test setup",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-23T02:51:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ede1aa884dfc98c1dc5289b3fb2b251b043c58fc",
          "body": null,
          "is_bot": false,
          "headline": "3.0.0",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-22T11:35:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2b7099eff9d5cc62a2b95b8ede34079a42335b2b",
          "body": null,
          "is_bot": false,
          "headline": "Add exports field to package.json",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-22T11:35:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8320758f3ff739f656c3420b9983247f88e8a8a1",
          "body": null,
          "is_bot": false,
          "headline": "Comments and cleanup",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-22T11:30:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f400226b24e49211545e977b536b7f1b3b55117c",
          "body": null,
          "is_bot": false,
          "headline": "Update tests and fix bugs",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-22T10:24:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "910ac30e5b8e083960249309d6c8109706b65628",
          "body": "See https://github.com/angular/angular-cli/issues/22526 for context.",
          "is_bot": false,
          "headline": "Switch to a loose resolver",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2022-01-22T09:10:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80f67af8d48d855ec4616b8a8cf117b90156601f",
          "body": null,
          "is_bot": false,
          "headline": "2.0.0",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2021-03-23T09:02:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c22d1fbb64ecf04604fe232287ad82c864b983ac",
          "body": null,
          "is_bot": false,
          "headline": "Update tsconfig",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2021-03-23T08:57:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f83bce6a06a46fc6cab4dec24086319ed46b433e",
          "body": null,
          "is_bot": false,
          "headline": "Test and speed up uniq string generation",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2021-03-23T08:57:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4537a716c024596dc22e6add8f425eeeb8d6ee69",
          "body": null,
          "is_bot": false,
          "headline": "Speed up path normalization",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2021-03-23T08:16:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a5e60921b523ca2bf257fa976cc8b79ddc612f3",
          "body": null,
          "is_bot": false,
          "headline": "Fix generate tests",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2021-03-23T07:47:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f677745786e8b18ed7f974a64faa62204542f5ab",
          "body": "Most inputs aren't going to be absolute URLs, so testing before we try to construct the `URL` is a considerable speedup.",
          "is_bot": false,
          "headline": "2x speedup by avoiding URL throwing an error",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2021-03-23T07:44:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8380bfc47e406bc06109682f049efdf36c432816",
          "body": null,
          "is_bot": false,
          "headline": "Upgrade infra",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2021-03-14T10:27:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a00fde442e3fa90f2a31e7b8e94128de7ee7600",
          "body": null,
          "is_bot": false,
          "headline": "Switch to GH Actions",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2021-03-14T09:58:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e286d2da3700b6e074704981a06ee92a2312e1a",
          "body": "Update dependency @types/jest to v24.0.23",
          "is_bot": false,
          "headline": "Merge pull request #52 from jridgewell/renovate/jest-24.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-11-15T22:19:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e282cc83c4c25bbc777fbe826371024c16b2faa0",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/jest to v24.0.23",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-11-15T21:34:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "264096c6b4cc3b7a19ce1715b2b20d39c7ef4764",
          "body": "Update dependency @types/node to v12.12.8",
          "is_bot": false,
          "headline": "Merge pull request #51 from jridgewell/renovate/node-12.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-11-15T20:20:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "439706ca934023a38948423fc41d16b57b871fec",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/node to v12.12.8",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-11-15T20:17:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0404f5cfcf66a5ccb0d4815272beef8ca72f2149",
          "body": "Update dependency @types/node to v12.12.5",
          "is_bot": false,
          "headline": "Merge pull request #46 from jridgewell/renovate/node-12.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-11-01T18:25:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df83127e190c244c8629f9fef42e0fd467b98f1e",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/node to v12.12.5",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-11-01T17:51:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "790ea2b856d724ddd1e644e1c21343cc056fb637",
          "body": "Update dependency @types/node to v12.12.3",
          "is_bot": false,
          "headline": "Merge pull request #44 from jridgewell/renovate/node-12.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-31T19:47:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18823724f92975d3dcf751999fb1633c48ed801e",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/node to v12.12.3",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-31T19:43:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd2077e3aec8e14c7489a5763a02ce3145569b86",
          "body": "Update dependency rollup to v1.26.2",
          "is_bot": false,
          "headline": "Merge pull request #43 from jridgewell/renovate/rollup-1.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-31T19:42:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc2e3db2d6547f58db9531904e3a641f0296855e",
          "body": "Update dependency @types/jest to v24.0.21",
          "is_bot": false,
          "headline": "Merge pull request #45 from jridgewell/renovate/jest-24.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-31T19:42:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2c261d6d4c0270200c1f2732b63f6c3220c146c",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency rollup to v1.26.2",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-31T19:38:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48a6493ea21e5edf62fa6c4266766aad4f0cf2ed",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/jest to v24.0.21",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-29T22:29:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0565e1e1dd6b54a98039daafa32922ce0c3999a1",
          "body": "Update dependency rollup to v1.25.0",
          "is_bot": false,
          "headline": "Merge pull request #42 from jridgewell/renovate/rollup-1.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-18T16:39:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd0228f553c79bae05d5fa0e35999c51f62a0a74",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency rollup to v1.25.0",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-18T12:19:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86065fb58ce6e2bcb023fc7c32faa2efa295dea2",
          "body": "Update dependency @types/node to v12.11.1",
          "is_bot": false,
          "headline": "Merge pull request #41 from jridgewell/renovate/node-12.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-16T01:46:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bf5bd6b5cc78d51dc26a81f071d593e5e977bf2",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/node to v12.11.1",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-16T00:19:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6cb7455716286a64866261145e7dcbfd37c4a79",
          "body": "Update dependency @types/node to v12.11.0",
          "is_bot": false,
          "headline": "Merge pull request #40 from jridgewell/renovate/node-12.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-15T21:31:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9d0bdc30b9e349b4518da6ebd88db32c4740dbd",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/node to v12.11.0",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-15T21:27:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "664824cf658ffb6ebd7625071c16f9252bafd20a",
          "body": "Update dependency rollup to v1.24.0",
          "is_bot": false,
          "headline": "Merge pull request #39 from jridgewell/renovate/rollup-1.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-15T06:10:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7482782c08f0826fdcf02b6c153b993195cd1662",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency rollup to v1.24.0",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-15T06:04:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ab78e11b3242d6e92b8a0611207c67574235c28",
          "body": "Update dependency ts-node to v8.4.1",
          "is_bot": false,
          "headline": "Merge pull request #36 from jridgewell/renovate/ts-node-8.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-14T19:57:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "935b4fe2b1d5069ae59d495c4824f6360615f7e3",
          "body": "Update dependency @types/jest to v24.0.19",
          "is_bot": false,
          "headline": "Merge pull request #38 from jridgewell/renovate/jest-24.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-14T19:35:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d09e545f70bad099319784a047539f6f172f8cd7",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency ts-node to v8.4.1",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-14T19:32:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c95eaa1785be00c40b6364f64393b6463fe61aea",
          "body": "Update dependency typescript to v3.6.4",
          "is_bot": false,
          "headline": "Merge pull request #37 from jridgewell/renovate/typescript-3.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-14T19:31:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99a208855056c25973658cd4040de8c3910367cd",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/jest to v24.0.19",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-14T19:31:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ca039b16f474d7c986423686b452332945da144",
          "body": "Update dependency rollup to v1.23.1",
          "is_bot": false,
          "headline": "Merge pull request #35 from jridgewell/renovate/rollup-1.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-14T19:31:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45e105f4c54ee483ba0a535fda340760ce0e4a18",
          "body": "Update dependency ts-jest to v24.1.0",
          "is_bot": false,
          "headline": "Merge pull request #34 from jridgewell/renovate/ts-jest-24.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-14T19:31:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9056e6c8bd10fd09a2f5c7aa02d472a5b5d0fab2",
          "body": "Update dependency @types/node to v12.7.12",
          "is_bot": false,
          "headline": "Merge pull request #33 from jridgewell/renovate/node-12.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-10-14T19:31:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32117b04e5b5f4546646f3239484c4a87556d0b8",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency typescript to v3.6.4",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-09T20:27:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f0d2d308cf01e88df72e12bd177823fc4e8275f",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/node to v12.7.12",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-08T20:23:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26bac30e857a0acc289e05a786638c8a72141915",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency rollup to v1.23.1",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-10-05T06:13:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e421b80360c48783f70cb074bcc1eac71b0878e5",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency ts-jest to v24.1.0",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-09-12T20:21:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4461e5fbf532bec71d367ae7af140885749a1318",
          "body": "Update dependency typescript to v3.6.3",
          "is_bot": false,
          "headline": "Merge pull request #32 from jridgewell/renovate/typescript-3.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-09-10T21:14:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f47aec491124496e446c2ae129b4fd42a61d4345",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency typescript to v3.6.3",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-09-10T20:49:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6c01f9e5abeb7581e6ee464c6889fcd92b29c8f8",
          "body": "Update dependency tslint to v5.20.0",
          "is_bot": false,
          "headline": "Merge pull request #31 from jridgewell/renovate/tslint-5.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-09-10T01:16:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0f7a2e19d8ea71d519ea4939a7eb5b03f5f77d8",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency tslint to v5.20.0",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-09-10T00:45:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "446bd595da996b0519cc77726dbfb3f8f78a0bbe",
          "body": "Update dependency rollup to v1.21.2",
          "is_bot": false,
          "headline": "Merge pull request #30 from jridgewell/renovate/rollup-1.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-09-09T18:28:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a35fffc433f19fdddc466eb69a14fcd501cd093",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency rollup to v1.21.2",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-09-09T09:36:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "760f038a3824bce5dc1e8f30d748a64874e9eb50",
          "body": "Update dependency rollup to v1.21.0",
          "is_bot": false,
          "headline": "Merge pull request #29 from jridgewell/renovate/rollup-1.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-09-08T16:38:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "891e08a4a1d7155fb5584d1e24f683b33e08993c",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency rollup to v1.21.0",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-09-08T13:16:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dcdc88f682a48f24df4809a669f23ecf5b229a1",
          "body": "Update dependency @types/node to v12.7.4",
          "is_bot": false,
          "headline": "Merge pull request #28 from jridgewell/renovate/node-12.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-09-03T19:20:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "300346107221669c215f861eb581169b758042e5",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/node to v12.7.4",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-09-03T19:02:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e2e1d5cfc26b187fee294d96b99e90edc544700b",
          "body": "Update dependency @types/node to v12.7.3",
          "is_bot": false,
          "headline": "Merge pull request #27 from jridgewell/renovate/node-12.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-08-30T16:53:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d534d1fcc15fa581453bfadbeb89bd4c0370c8c4",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency @types/node to v12.7.3",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-08-30T05:30:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4001a9bcbc1c6769d2178d9483d64ecfbbf125dd",
          "body": "Update dependency typescript to v3.6.2",
          "is_bot": false,
          "headline": "Merge pull request #26 from jridgewell/renovate/typescript-3.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-08-28T18:19:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4ead7cb5e1985b569fc1da4b1e7b9309ecdd1ec5",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency typescript to v3.6.2",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-08-28T18:09:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6cffd518c4662fa01e31620296e93b0c2e3fc351",
          "body": "Update dependency rollup to v1.20.3",
          "is_bot": false,
          "headline": "Merge pull request #25 from jridgewell/renovate/rollup-1.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-08-28T17:37:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a766ad0c476fab274cefac9f353cbcc8f7f1330",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency rollup to v1.20.3",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-08-28T12:07:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2021c4cb0da067be9cae4b931f065594ca2f7891",
          "body": "…s-10.x\n\nUpdate dependency rollup-plugin-commonjs to v10.1.0",
          "is_bot": false,
          "headline": "Merge pull request #24 from jridgewell/renovate/rollup-plugin-commonj…",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-08-27T14:57:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bca67959687792e1242cc95c0b694baebba8b0a",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency rollup-plugin-commonjs to v10.1.0",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-08-27T06:59:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f793844e8e95b86b34da78bf84c7849b3b2d6ce3",
          "body": "Update dependency rollup to v1.20.2",
          "is_bot": false,
          "headline": "Merge pull request #23 from jridgewell/renovate/rollup-1.x",
          "author_name": "Justin Ridgewell",
          "author_login": "jridgewell",
          "committed_at": "2019-08-25T19:13:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa06e9170798d25a4f09ac16615be5229a24e83a",
          "body": null,
          "is_bot": false,
          "headline": "Update dependency rollup to v1.20.2",
          "author_name": "Renovate Bot",
          "author_login": "renovate-bot",
          "committed_at": "2019-08-25T05:58:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 8,
      "commits_last_year": 2,
      "latest_release_at": "2024-02-14T19:34:49Z",
      "latest_release_tag": "v3.1.2",
      "releases_from_tags": false,
      "days_since_last_push": 138,
      "active_weeks_last_year": 1,
      "days_since_latest_release": 888,
      "mean_days_between_releases": 151.2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@jridgewell/resolve-uri",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "resolve",
            "uri",
            "url",
            "path"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@jridgewell/resolve-uri",
          "is_deprecated": false,
          "latest_version": "3.1.2",
          "repository_url": "https://github.com/jridgewell/resolve-uri",
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 674616390,
          "first_published_at": "2019-07-14T20:12:33.885000Z",
          "latest_published_at": "2024-02-14T19:32:38.143000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 888
        }
      ]
    },
    "popularity": {
      "forks": 7,
      "stars": 11,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2022-04-06",
            "count": 1
          },
          {
            "date": "2024-01-19",
            "count": 1
          },
          {
            "date": "2024-02-14",
            "count": 1
          },
          {
            "date": "2024-07-23",
            "count": 3
          },
          {
            "date": "2025-08-04",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 7,
        "total_forks": 7
      },
      "star_history": null,
      "open_issues_and_prs": 18
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 1179242,
      "source_files_sampled": 15,
      "oversized_source_files": 4,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "flatted",
            "direct": false,
            "version": "3.1.1",
            "severity": "critical",
            "ecosystem": "npm",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-25h7-pfq9-p65f",
              "GHSA-rf6f-7fwh-wjgh"
            ],
            "fixed_version": "3.4.2",
            "advisory_count": 2,
            "oldest_advisory_days": 131
          },
          {
            "name": "rollup",
            "direct": false,
            "version": "2.66.0",
            "severity": "critical",
            "ecosystem": "npm",
            "cvss_score": 9.1,
            "advisory_ids": [
              "GHSA-gcx4-mw62-g8wm",
              "GHSA-mw96-cpmx-2vgc"
            ],
            "fixed_version": "4.59.0",
            "advisory_count": 2,
            "oldest_advisory_days": 666
          },
          {
            "name": "shell-quote",
            "direct": false,
            "version": "1.6.1",
            "severity": "critical",
            "ecosystem": "npm",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-395f-4hp3-45gv",
              "GHSA-w7jw-789q-3m8p"
            ],
            "fixed_version": "1.9.0",
            "advisory_count": 2,
            "oldest_advisory_days": 43
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "1.1.11",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3jxr-9vmj-r5cp",
              "GHSA-f886-m6hf-6m8v",
              "GHSA-v6h2-p8h4-qcjw"
            ],
            "fixed_version": "5.0.7",
            "advisory_count": 3,
            "oldest_advisory_days": 407
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-grv7-fg5c-xmjg"
            ],
            "fixed_version": "3.0.3",
            "advisory_count": 1,
            "oldest_advisory_days": 798
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "6.0.5",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3xgq-45jj-v275"
            ],
            "fixed_version": "7.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 621
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.3",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3xgq-45jj-v275"
            ],
            "fixed_version": "7.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 621
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.1.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-52cp-r559-cp3m",
              "GHSA-h67p-54hq-rp68",
              "GHSA-mh29-5h37-fv8m"
            ],
            "fixed_version": "4.3.0",
            "advisory_count": 3,
            "oldest_advisory_days": 250
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "3.0.4",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-23c5-xmqv-rm74",
              "GHSA-3ppc-4f35-3m26",
              "GHSA-7r86-cg39-jmmj",
              "GHSA-f8q6-p94x-37v3"
            ],
            "fixed_version": "10.2.3",
            "advisory_count": 4,
            "oldest_advisory_days": 1373
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.1",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3v7f-55p6-f55p",
              "GHSA-c2c7-rcm5-vvqj"
            ],
            "fixed_version": "4.0.4",
            "advisory_count": 2,
            "oldest_advisory_days": 118
          },
          {
            "name": "semver",
            "direct": false,
            "version": "5.7.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-c2qf-rxjj-qqgw"
            ],
            "fixed_version": "7.5.2",
            "advisory_count": 1,
            "oldest_advisory_days": 1127
          },
          {
            "name": "semver",
            "direct": false,
            "version": "6.3.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-c2qf-rxjj-qqgw"
            ],
            "fixed_version": "7.5.2",
            "advisory_count": 1,
            "oldest_advisory_days": 1127
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.3.5",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-c2qf-rxjj-qqgw"
            ],
            "fixed_version": "7.5.2",
            "advisory_count": 1,
            "oldest_advisory_days": 1127
          },
          {
            "name": "serialize-javascript",
            "direct": false,
            "version": "6.0.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-5c6j-r48x-rmvq",
              "GHSA-76p7-773f-r4q5",
              "GHSA-qj8w-gfj5-8c6v"
            ],
            "fixed_version": "7.0.5",
            "advisory_count": 3,
            "oldest_advisory_days": 526
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "6.12.6",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-2g4f-4pwh-qvx6"
            ],
            "fixed_version": "8.18.0",
            "advisory_count": 1,
            "oldest_advisory_days": 160
          },
          {
            "name": "diff",
            "direct": false,
            "version": "5.0.0",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-73rr-hh4g-fpgx"
            ],
            "fixed_version": "8.0.3",
            "advisory_count": 1,
            "oldest_advisory_days": 188
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.4",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-952p-6rrq-rcjv"
            ],
            "fixed_version": "4.0.8",
            "advisory_count": 1,
            "oldest_advisory_days": 798
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.2.0",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 4.3,
            "advisory_ids": [
              "GHSA-mwcw-c2x4-8c55"
            ],
            "fixed_version": "5.0.9",
            "advisory_count": 1,
            "oldest_advisory_days": 590
          },
          {
            "name": "word-wrap",
            "direct": false,
            "version": "1.2.3",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-j8xg-fqg3-53r7"
            ],
            "fixed_version": "1.2.4",
            "advisory_count": 1,
            "oldest_advisory_days": 1126
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 11,
          "critical": 3,
          "moderate": 5
        },
        "advisory_count": 32,
        "affected_count": 19,
        "assessed_count": 249,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@bcoe/v8-coverage",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/eslintrc",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/config-array",
            "direct": false,
            "version": "0.9.2",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/object-schema",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@istanbuljs/schema",
            "direct": false,
            "version": "0.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.scandir",
            "direct": false,
            "version": "2.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.stat",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.walk",
            "direct": false,
            "version": "1.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/plugin-typescript",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/pluginutils",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "0.0.39",
            "ecosystem": "npm"
          },
          {
            "name": "@types/istanbul-lib-coverage",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/json-schema",
            "direct": false,
            "version": "7.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/eslint-plugin",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/parser",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/scope-manager",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/type-utils",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/types",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/typescript-estree",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/utils",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/visitor-keys",
            "direct": false,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@ungap/promise-all-settled",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn-jsx",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "6.12.6",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-colors",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "3.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "anymatch",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "array-filter",
            "direct": false,
            "version": "0.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "array-map",
            "direct": false,
            "version": "0.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "array-reduce",
            "direct": false,
            "version": "0.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "array-union",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "binary-extensions",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "1.1.11",
            "ecosystem": "npm"
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "browser-stdout",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "c8",
            "direct": false,
            "version": "7.11.0",
            "ecosystem": "npm"
          },
          {
            "name": "callsites",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "camelcase",
            "direct": false,
            "version": "6.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "2.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "chokidar",
            "direct": false,
            "version": "3.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "cliui",
            "direct": false,
            "version": "7.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "1.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "concat-map",
            "direct": false,
            "version": "0.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "1.8.0",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "6.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "decamelize",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "deep-is",
            "direct": false,
            "version": "0.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "define-properties",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "diff",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "dir-glob",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "doctrine",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "error-ex",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "es-abstract",
            "direct": false,
            "version": "1.13.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-to-primitive",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "escalade",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint",
            "direct": false,
            "version": "8.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-config-prettier",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-scope",
            "direct": false,
            "version": "5.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-scope",
            "direct": false,
            "version": "7.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-utils",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "espree",
            "direct": false,
            "version": "9.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "esquery",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "esrecurse",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "esutils",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-glob",
            "direct": false,
            "version": "3.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "fast-json-stable-stringify",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-levenshtein",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "fastq",
            "direct": false,
            "version": "1.11.0",
            "ecosystem": "npm"
          },
          {
            "name": "file-entry-cache",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "fill-range",
            "direct": false,
            "version": "7.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "flat",
            "direct": false,
            "version": "5.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "flat-cache",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "flatted",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "foreground-child",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fs.realpath",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "functional-red-black-tree",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-caller-file",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "7.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "globals",
            "direct": false,
            "version": "13.12.0",
            "ecosystem": "npm"
          },
          {
            "name": "globby",
            "direct": false,
            "version": "11.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.9",
            "ecosystem": "npm"
          },
          {
            "name": "growl",
            "direct": false,
            "version": "1.10.5",
            "ecosystem": "npm"
          },
          {
            "name": "has",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "he",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "hosted-git-info",
            "direct": false,
            "version": "2.8.9",
            "ecosystem": "npm"
          },
          {
            "name": "html-escaper",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "import-fresh",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "imurmurhash",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "inflight",
            "direct": false,
            "version": "1.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "is-arrayish",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-binary-path",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-callable",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "is-core-module",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-date-object",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-extglob",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-glob",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-number",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-plain-obj",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-regex",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "is-symbol",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "is-unicode-supported",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-coverage",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-report",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-reports",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-parse-better-errors",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-stable-stringify-without-jsonify",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "jsonify",
            "direct": false,
            "version": "0.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "levn",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "load-json-file",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "locate-path",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lodash.merge",
            "direct": false,
            "version": "4.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "log-symbols",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "make-dir",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "memorystream",
            "direct": false,
            "version": "0.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "merge2",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "mocha",
            "direct": false,
            "version": "9.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "natural-compare",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "nice-try",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "normalize-package-data",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "normalize-path",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "npm-run-all",
            "direct": false,
            "version": "4.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "object-keys",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "optionator",
            "direct": false,
            "version": "0.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-locate",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "parent-module",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "parse-json",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-exists",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-is-absolute",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-parse",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "path-type",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-type",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "pidtree",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "pify",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "prelude-ls",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "punycode",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "queue-microtask",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "randombytes",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "read-pkg",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "readdirp",
            "direct": false,
            "version": "3.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "regexpp",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "require-directory",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "resolve",
            "direct": false,
            "version": "1.22.0",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-from",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "reusify",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "rimraf",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "rollup",
            "direct": false,
            "version": "2.66.0",
            "ecosystem": "npm"
          },
          {
            "name": "run-parallel",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safe-buffer",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "5.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "6.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.3.5",
            "ecosystem": "npm"
          },
          {
            "name": "serialize-javascript",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shell-quote",
            "direct": false,
            "version": "1.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "3.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "slash",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "spdx-correct",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "spdx-exceptions",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "spdx-expression-parse",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "spdx-license-ids",
            "direct": false,
            "version": "3.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "string.prototype.padend",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-bom",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-json-comments",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "5.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "8.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "supports-preserve-symlinks-flag",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "test-exclude",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "text-table",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "to-regex-range",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "1.14.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsutils",
            "direct": false,
            "version": "3.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-check",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-fest",
            "direct": false,
            "version": "0.20.2",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "4.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "uri-js",
            "direct": false,
            "version": "4.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "v8-compile-cache",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "v8-to-istanbul",
            "direct": false,
            "version": "8.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "validate-npm-package-license",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "word-wrap",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "workerpool",
            "direct": false,
            "version": "6.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "y18n",
            "direct": false,
            "version": "5.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "yallist",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "yargs",
            "direct": false,
            "version": "16.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "20.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "20.2.9",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-unparser",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "yocto-queue",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 249,
        "direct_count": 0,
        "indirect_count": 249
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 14,
        "merged_prs": 52,
        "open_issues": 4,
        "closed_ratio": 0.333,
        "closed_issues": 2,
        "closed_unmerged_prs": 53
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "jridgewell",
          "commits": 104,
          "avatar_url": "https://avatars.githubusercontent.com/u/112982?v=4"
        },
        {
          "type": "User",
          "login": "renovate-bot",
          "commits": 48,
          "avatar_url": "https://avatars.githubusercontent.com/u/25180681?v=4"
        },
        {
          "type": "User",
          "login": "jsegura",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/8453?v=4"
        },
        {
          "type": "User",
          "login": "sapphi-red",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/49056869?v=4"
        }
      ],
      "contributors_sampled": 4,
      "top_contributor_share": 0.675
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "test.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".eslintrc.js"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 0,
            "reason": "0 out of 4 merged PRs checked by a CI test -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 2/25 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 5 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "29 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "730a61ad423359a972b7935a4304db04983a3251",
        "ran_at": "2026-07-22T15:46:43Z",
        "aggregate_score": 3.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2025-08-04T22:01:32Z",
      "oldest_open_prs": [
        {
          "number": 98,
          "created_at": "2022-01-24T18:32:19Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 101,
          "created_at": "2022-02-19T12:05:58Z",
          "last_comment_at": "2023-03-24T21:52:05Z",
          "last_comment_author": "renovate"
        },
        {
          "number": 102,
          "created_at": "2022-02-19T12:06:22Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 103,
          "created_at": "2022-02-23T15:19:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 104,
          "created_at": "2022-03-01T02:56:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 105,
          "created_at": "2022-03-16T05:42:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 107,
          "created_at": "2022-04-22T22:31:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 109,
          "created_at": "2022-04-30T02:35:24Z",
          "last_comment_at": "2023-10-01T01:16:30Z",
          "last_comment_author": "liuxingbaoyu"
        },
        {
          "number": 112,
          "created_at": "2022-06-22T14:10:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 115,
          "created_at": "2022-08-20T23:59:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 119,
          "created_at": "2023-04-07T02:22:41Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 121,
          "created_at": "2024-05-09T11:11:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 122,
          "created_at": "2024-09-24T10:36:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 123,
          "created_at": "2024-12-02T18:23:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2025-08-04T22:00:46Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 92,
          "created_at": "2021-10-18T22:57:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 108,
          "created_at": "2022-04-29T04:29:44Z",
          "last_comment_at": "2022-04-29T14:46:17Z",
          "last_comment_author": "cspotcode"
        },
        {
          "number": 110,
          "created_at": "2022-05-01T06:01:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 124,
          "created_at": "2025-06-13T16:40:22Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/jridgewell/resolve-uri",
    "host": "github.com",
    "name": "resolve-uri",
    "owner": "jridgewell"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 47,
      "inputs": {
        "security": 46,
        "vitality": 27,
        "community": 57,
        "governance": 50,
        "engineering": 58
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "critical",
        "name": "Vitality",
        "value": 27,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "critical",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 15,
            "inputs": {
              "commits_last_year": 2,
              "human_commit_share": 1,
              "days_since_last_push": 138,
              "active_weeks_last_year": 1
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 138 days ago",
                "points": 9.9,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 138
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "1/52 weeks with commits",
                "points": 0.7,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "2 commits in the last year",
                "points": 4.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 44,
            "inputs": {
              "releases_count": 8,
              "latest_release_tag": "v3.1.2",
              "releases_from_tags": false,
              "days_since_latest_release": 888,
              "mean_days_between_releases": 151.2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "8 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 888 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 888
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~151.2 days",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 151.2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "dormant",
              "guards": [],
              "signals": [
                "release_stall",
                "scorecard_unmaintained"
              ],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": 14,
              "unanswered_open_issues": 4,
              "days_since_last_merged_pr": 351,
              "days_since_last_human_commit": 351,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "no human commit for 351 days, with nothing left unanswered",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_quiet",
                    "params": {
                      "days": 351
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 57,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 23,
            "inputs": {
              "forks": 7,
              "stars": 11,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "11 stars",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "7 forks",
                "points": 6.5,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 7
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "excellent",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "packages": [
                "@jridgewell/resolve-uri"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 674616390
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "674,616,390 downloads/month across npm",
                "points": 80,
                "status": "met",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 674616390,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 50,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 32,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 4,
              "top_contributor_share": 0.675
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 68% of commits",
                "points": 7.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 68
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "4 contributors",
                "points": 5.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 34,
            "inputs": {
              "merged_prs": 52,
              "open_issues": 4,
              "closed_issues": 2,
              "issue_closed_ratio": 0.333,
              "closed_unmerged_prs": 53
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "33% of issues closed",
                "points": 15.6,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 33
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "52/105 decided PRs merged",
                "points": 18.9,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 52,
                      "decided": 105
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 2/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "followers": 1319,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "jridgewell",
              "public_repos": 245,
              "account_age_days": 6192
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "1,319 followers of jridgewell",
                "points": 22.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 1319,
                      "login": "jridgewell"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "245 public repos, account ~16 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 245
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 16
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "moderate",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "packages": [
                "@jridgewell/resolve-uri"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 888
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 888 days ago",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 888
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "15 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 58,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".eslintrc.js",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".eslintrc.js"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "0 out of 4 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 46,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 32,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "0 out of 4 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 2/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 5 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "29 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 249 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 249
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 32,
              "affected_packages": 19,
              "assessed_packages": 249,
              "unassessed_packages": 0,
              "affected_by_severity": "critical 3, high 11, moderate 5",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 249,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 8
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "at_risk",
        "name": "AI Readiness",
        "value": 44,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "critical",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 18,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.34,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "34 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 18.1,
                "status": "partial",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 34,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".eslintrc.js",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".eslintrc.js"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 67,
            "inputs": {
              "primary_language": "JavaScript",
              "largest_source_bytes": 1179242,
              "source_files_sampled": 15,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "JavaScript with type-check config (tsconfig.json)",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "typecheck_config_language",
                    "params": {
                      "files": "tsconfig.json",
                      "language": "JavaScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/15 source files over 60KB",
                "points": 40.3,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 15,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T15:46:52.352526Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/jridgewell/resolve-uri.svg",
  "full_name": "jridgewell/resolve-uri",
  "license_state": "standard",
  "license_spdx": "MIT"
}