A Lightweight Sass Tool Set
thoughtbot/bourbon tiene un índice de salud de 24 sobre 100, lo que lo sitúa en la banda Crítico. Su puntuación más alta es Community & Adoption (93/100) y la más baja, Vitality (18/100). El repositorio está archivado, por lo que no cabe esperar más mantenimiento.
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Abandonment Policy applies a 40% multiplier to weighted overall health and gives it a ceiling of 29.
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación | Etiquetas |
|---|---|---|---|---|---|---|
| RubyGems | bourbon | 7.3.0 | - | 91 | hace 1273 días | — |
| npm | bourbon | 7.3.0 | 632.005 | 29 | hace 1273 días | csseyeglass-modulemixinssassscss |
¿Está vivo el proyecto: se escribe código y se publican versiones?
El silencio por sí solo nunca es el hallazgo: una biblioteca pequeña y terminada puede no necesitar commits durante años. Esta alerta exige ambas cosas: mucho tiempo sin un commit humano y obligaciones que el proyecto visiblemente no atiende. Los commits automatizados no cuentan como mantenimiento.
Cómo se evalúa el abandono| 0/36 | Recencia de push — último push hace 674 días |
| 0/36 | Cadencia de commits — 0/52 semanas con commits |
| 0/18 | Volumen de commits — 0 commits en el último año |
| 0/10 | OpenSSF Scorecard: Maintained — project is archived |
| commits_last_year | 0 |
| human_commit_share | — |
| days_since_last_push | 674 |
| active_weeks_last_year | 0 |
| 27/27 | Publica versiones — 55 versiones publicadas |
| 0/36 | Recencia de las versiones — última versión hace 1273 días |
| 12.6/27 | Cadencia de publicación — una versión cada ~235,9 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
| releases_count | 55 |
| latest_release_tag | v7.3.0 |
| releases_from_tags | no |
| days_since_latest_release | 1273 |
| mean_days_between_releases | 235,9 |
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
| 60/60 | Estrellas — 9008 estrellas |
| 24.4/25 | Forks — 858 forks |
| 0/15 | Observadores — 2 observadores |
| forks | 858 |
| stars | 9008 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
| 22.5/22.5 | README |
| 22.5/22.5 | Licencia — licencia reconocida (MIT) |
| 18/18 | Guía CONTRIBUTING |
| 13.5/13.5 | Código de conducta |
| 7.2/7.2 | Plantilla de issues |
| 6.3/6.3 | Plantilla de PR |
| has_readme | sí |
| has_license | sí |
| has_contributing | sí |
| has_issue_template | sí |
| has_code_of_conduct | sí |
| has_pull_request_template | sí |
| 77.3/80 | Descargas mensuales — 632.005 descargas/mes en npm, rubygems |
| 0/20 | Dependientes en el registro — no lo informa este ecosistema |
| packages | bourbon, bourbon |
| dependents | — |
| ecosystems | npm, rubygems |
| total_downloads | 28.511.050 |
| monthly_downloads | 632.005 |
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
| 43.2/54 | Factor bus — la mitad de los commits recae en 4 contribuyente(s) |
| 12.5/22.5 | Distribución de commits — el principal contribuyente firma el 45% de los commits |
| 13.5/13.5 | Amplitud de contribuyentes — 100 contribuyentes |
| 10/10 | OpenSSF Scorecard: Contributors — project has 31 contributing companies or organizations |
| bus_factor | 4 |
| contributors_sampled | 100 |
| top_contributor_share | 0,446 |
| 46.8/46.8 | Resolución de issues — 100% de issues cerradas |
| 22.8/38.3 | Aceptación de PR — 335/563 PR decididos fusionados |
| 6/15 | OpenSSF Scorecard: Code-Review — Found 12/29 approved changesets -- score normalized to 4 |
| merged_prs | 335 |
| open_issues | 0 |
| closed_issues | 568 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 228 |
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 21.2/25 | Alcance del propietario — 890 seguidores de thoughtbot |
| 25/25 | Trayectoria — 469 repos públicos, cuenta de ~18 años |
| followers | 890 |
| owner_type | Organization |
| is_verified | — |
| owner_login | thoughtbot |
| public_repos | 469 |
| account_age_days | 6674 |
| 25/25 | Publicado y resoluble — 2 paquete(s) en npm, rubygems |
| 4/35 | Recencia de publicación — última publicación hace 1273 días |
| 20/20 | Historial de versiones — 91 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
| packages | bourbon, bourbon |
| ecosystems | npm, rubygems |
| any_deprecated | no |
| min_days_since_publish | 1273 |
¿Existen unas prácticas mínimas de ingeniería y documentación?
| 24/24 | Flujos de trabajo de CI — 2 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 19 merged PRs checked by a CI test -- score normalized to 0 |
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
| 30/30 | README |
| 0/25 | Directorio de documentación |
| 15/15 | Sitio de documentación / página del proyecto — https://www.bourbon.io/ |
| 10/10 | Descripción del repositorio |
| 10/10 | Topics — 8 topics |
| 0/10 | Wiki |
| topics | sass, bourbon-family, css, scss, bourbon, sass-mixins, sass-library, sass-functions |
| has_wiki | no |
| homepage | https://www.bourbon.io/ |
| has_readme | sí |
| has_docs_dir | no |
| has_description | sí |
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — sin datos |
| 0/2.5 | CI-Tests — 0 out of 19 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 3/7.5 | Code-Review — Found 12/29 approved changesets -- score normalized to 4 |
| 2.5/2.5 | Contributors — project has 31 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Licencia — license file detected |
| 0/7.5 | Maintained — project is archived |
| 0/5 | Packaging — sin datos |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — sin datos |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 69 existing vulnerabilities detected |
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 4,4 |
| 35/35 | Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido |
| 0/25 | Dependencias indirectas libres de avisos conocidos — el conjunto transitivo no es separable de las dependencias de desarrollo y prueba en este alcance |
| 0/40 | Sin avisos pendientes — ningún aviso tiene fecha de publicación |
| source | osv |
| advisories | 96 |
| affected_packages | 50 |
| assessed_packages | 612 |
| unassessed_packages | 0 |
| affected_by_severity | critical 6, high 24, moderate 17, low 3 |
| direct_affected_packages | 0 |
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 0/40 | Historial de commits legible — sin datos |
| has_llms_txt | no |
| legible_history_share | — |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
| 0/18 | Arranque con un solo comando |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 0/11 | Verificación estática de tipos |
| 10/10 | Entorno reproducible — lockfile |
| 0/10 | Práctica demostrada con agentes — sin datos |
| 0/8 | Mantenimiento automatizado — sin datos |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| has_nix | no |
| has_tests | sí |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | — |
| toolchain_manifests | — |
| dependency_bot_commit_share | — |
| 0/45 | Código verificable por tipos — Ruby sin configuración de verificación de tipos |
| 55/55 | Tamaños de archivo manejables — 0/53 archivos fuente de más de 60 KB |
| primary_language | Ruby |
| largest_source_bytes | 1919 |
| source_files_sampled | 53 |
| oversized_source_files | 0 |
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/d | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 0 | CI-Tests | 0 out of 19 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 4 | Code-Review | Found 12/29 approved changesets -- score normalized to 4 |
| 10 | Contributors | project has 31 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project is archived |
| n/d | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 10 | Security-Policy | security policy file detected |
| n/d | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 69 existing vulnerabilities detected |
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 0 paquetes directos y 612 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
| Registro | Paquete | Versión | Relación |
|---|---|---|---|
| npm | @babel/code-frame | 7.0.0 | indirecta |
| npm | @babel/core | 7.4.5 | indirecta |
| npm | @babel/generator | 7.4.4 | indirecta |
| npm | @babel/helper-function-name | 7.1.0 | indirecta |
| npm | @babel/helper-get-function-arity | 7.0.0 | indirecta |
| npm | @babel/helper-split-export-declaration | 7.4.4 | indirecta |
| npm | @babel/helpers | 7.4.4 | indirecta |
| npm | @babel/highlight | 7.0.0 | indirecta |
| npm | @babel/parser | 7.4.5 | indirecta |
| npm | @babel/template | 7.4.4 | indirecta |
| npm | @babel/traverse | 7.4.5 | indirecta |
| npm | @babel/types | 7.4.4 | indirecta |
| npm | @mrmlnc/readdir-enhanced | 2.2.1 | indirecta |
| npm | @nodelib/fs.stat | 1.1.3 | indirecta |
| npm | @thoughtbot/stylelint-config | 1.1.0 | indirecta |
| npm | @types/events | 3.0.0 | indirecta |
| npm | @types/glob | 7.1.1 | indirecta |
| npm | @types/minimatch | 3.0.3 | indirecta |
| npm | @types/node | 12.0.7 | indirecta |
| npm | @types/unist | 2.0.3 | indirecta |
| npm | @types/vfile | 3.0.2 | indirecta |
| npm | @types/vfile-message | 1.0.1 | indirecta |
| npm | a-sync-waterfall | 1.0.1 | indirecta |
| npm | abbrev | 1.1.1 | indirecta |
| npm | ajv | 6.10.0 | indirecta |
| npm | ansi-align | 2.0.0 | indirecta |
| npm | ansi-regex | 2.1.1 | indirecta |
| npm | ansi-regex | 3.0.0 | indirecta |
| npm | ansi-regex | 4.1.0 | indirecta |
| npm | ansi-styles | 3.2.1 | indirecta |
| npm | anymatch | 2.0.0 | indirecta |
| npm | aproba | 1.2.0 | indirecta |
| npm | are-we-there-yet | 1.1.5 | indirecta |
| npm | argparse | 1.0.10 | indirecta |
| npm | arr-diff | 2.0.0 | indirecta |
| npm | arr-diff | 4.0.0 | indirecta |
| npm | arr-flatten | 1.1.0 | indirecta |
| npm | arr-union | 3.1.0 | indirecta |
| npm | array-find-index | 1.0.2 | indirecta |
| npm | array-union | 1.0.2 | indirecta |
| npm | array-uniq | 1.0.3 | indirecta |
| npm | array-unique | 0.2.1 | indirecta |
| npm | array-unique | 0.3.2 | indirecta |
| npm | arrify | 1.0.1 | indirecta |
| npm | asap | 2.0.6 | indirecta |
| npm | assign-symbols | 1.0.0 | indirecta |
| npm | astral-regex | 1.0.0 | indirecta |
| npm | async-each | 1.0.3 | indirecta |
| npm | atob | 2.1.2 | indirecta |
| npm | autoprefixer | 9.6.0 | indirecta |
| npm | babel-runtime | 6.26.0 | indirecta |
| npm | bail | 1.0.4 | indirecta |
| npm | balanced-match | 1.0.0 | indirecta |
| npm | base | 0.11.2 | indirecta |
| npm | binary-extensions | 1.13.1 | indirecta |
| npm | boxen | 1.3.0 | indirecta |
| npm | brace-expansion | 1.1.11 | indirecta |
| npm | braces | 1.8.5 | indirecta |
| npm | braces | 2.3.2 | indirecta |
| npm | braces | 3.0.2 | indirecta |
| npm | browserslist | 4.6.2 | indirecta |
| npm | buffer-from | 1.1.1 | indirecta |
| npm | cache-base | 1.0.1 | indirecta |
| npm | call-me-maybe | 1.0.1 | indirecta |
| npm | caller-callsite | 2.0.0 | indirecta |
| npm | caller-path | 2.0.0 | indirecta |
| npm | callsites | 2.0.0 | indirecta |
| npm | camel-case | 3.0.0 | indirecta |
| npm | camelcase | 2.1.1 | indirecta |
| npm | camelcase | 4.1.0 | indirecta |
| npm | camelcase-keys | 4.2.0 | indirecta |
| npm | caniuse-lite | 1.0.30000974 | indirecta |
| npm | capture-stack-trace | 1.0.1 | indirecta |
| npm | ccount | 1.0.4 | indirecta |
| npm | cdocparser | 0.13.0 | indirecta |
| npm | chalk | 2.4.2 | indirecta |
| npm | character-entities | 1.2.3 | indirecta |
| npm | character-entities-html4 | 1.1.3 | indirecta |
| npm | character-entities-legacy | 1.1.3 | indirecta |
| npm | character-reference-invalid | 1.1.3 | indirecta |
| npm | chokidar | 2.1.8 | indirecta |
| npm | chownr | 1.1.3 | indirecta |
| npm | chroma-js | 1.4.1 | indirecta |
| npm | ci-info | 1.6.0 | indirecta |
| npm | class-utils | 0.3.6 | indirecta |
| npm | clean-css | 4.2.1 | indirecta |
| npm | cli-boxes | 1.0.0 | indirecta |
| npm | cliui | 3.2.0 | indirecta |
| npm | clone | 0.2.0 | indirecta |
| npm | clone | 1.0.4 | indirecta |
| npm | clone-regexp | 2.2.0 | indirecta |
| npm | clone-stats | 0.0.1 | indirecta |
| npm | code-point-at | 1.1.0 | indirecta |
| npm | collapse-white-space | 1.0.5 | indirecta |
| npm | collection-visit | 1.0.0 | indirecta |
| npm | color-convert | 1.9.3 | indirecta |
| npm | color-name | 1.1.3 | indirecta |
| npm | commander | 2.17.1 | indirecta |
| npm | commander | 2.19.0 | indirecta |
| npm | component-emitter | 1.3.0 | indirecta |
| npm | concat-map | 0.0.1 | indirecta |
| npm | concat-stream | 1.6.2 | indirecta |
| npm | configstore | 3.1.2 | indirecta |
| npm | console-control-strings | 1.1.0 | indirecta |
| npm | convert-source-map | 1.6.0 | indirecta |
| npm | copy-descriptor | 0.1.1 | indirecta |
| npm | core-js | 2.6.11 | indirecta |
| npm | core-util-is | 1.0.2 | indirecta |
| npm | cosmiconfig | 5.2.1 | indirecta |
| npm | create-error-class | 3.0.2 | indirecta |
| npm | cross-spawn | 5.1.0 | indirecta |
| npm | crypto-random-string | 1.0.0 | indirecta |
| npm | cssesc | 3.0.0 | indirecta |
| npm | currently-unhandled | 0.4.1 | indirecta |
| npm | dargs | 4.1.0 | indirecta |
| npm | debug | 2.6.9 | indirecta |
| npm | debug | 3.2.6 | indirecta |
| npm | debug | 4.1.1 | indirecta |
| npm | decamelize | 1.2.0 | indirecta |
| npm | decamelize-keys | 1.1.0 | indirecta |
| npm | decode-uri-component | 0.2.0 | indirecta |
| npm | deep-extend | 0.6.0 | indirecta |
| npm | define-property | 0.2.5 | indirecta |
| npm | define-property | 1.0.0 | indirecta |
| npm | define-property | 2.0.2 | indirecta |
| npm | delegates | 1.0.0 | indirecta |
| npm | detect-libc | 1.0.3 | indirecta |
| npm | dir-glob | 2.2.2 | indirecta |
| npm | docopt | 0.6.2 | indirecta |
| npm | dom-serializer | 0.1.1 | indirecta |
| npm | domelementtype | 1.3.1 | indirecta |
| npm | domhandler | 2.4.2 | indirecta |
| npm | domutils | 1.7.0 | indirecta |
| npm | dot-prop | 4.2.0 | indirecta |
| npm | duplexer2 | 0.1.4 | indirecta |
| npm | duplexer3 | 0.1.4 | indirecta |
| npm | duplexify | 3.7.1 | indirecta |
| npm | electron-to-chromium | 1.3.155 | indirecta |
| npm | emoji-regex | 7.0.3 | indirecta |
| npm | emoji-regex | 8.0.0 | indirecta |
| npm | end-of-stream | 1.4.4 | indirecta |
| npm | ends-with | 0.2.0 | indirecta |
| npm | entities | 1.1.2 | indirecta |
| npm | error-ex | 1.3.2 | indirecta |
| npm | es6-denodeify | 0.1.5 | indirecta |
| npm | es6-promise | 3.3.1 | indirecta |
| npm | es6-promise | 4.2.8 | indirecta |
| npm | escape-string-regexp | 1.0.5 | indirecta |
| npm | esprima | 4.0.1 | indirecta |
| npm | esutils | 2.0.2 | indirecta |
| npm | execa | 0.7.0 | indirecta |
| npm | execall | 2.0.0 | indirecta |
| npm | expand-brackets | 0.1.5 | indirecta |
| npm | expand-brackets | 2.1.4 | indirecta |
| npm | expand-range | 1.8.2 | indirecta |
| npm | extend | 2.0.2 | indirecta |
| npm | extend | 3.0.2 | indirecta |
| npm | extend-shallow | 2.0.1 | indirecta |
| npm | extend-shallow | 3.0.2 | indirecta |
| npm | extglob | 0.3.2 | indirecta |
| npm | extglob | 2.0.4 | indirecta |
| npm | fast-deep-equal | 2.0.1 | indirecta |
| npm | fast-glob | 2.2.7 | indirecta |
| npm | fast-json-stable-stringify | 2.0.0 | indirecta |
| npm | file-entry-cache | 5.0.1 | indirecta |
| npm | filename-regex | 2.0.1 | indirecta |
| npm | fill-range | 2.2.4 | indirecta |
| npm | fill-range | 4.0.0 | indirecta |
| npm | fill-range | 7.0.1 | indirecta |
| npm | find-index | 0.1.1 | indirecta |
| npm | find-up | 2.1.0 | indirecta |
| npm | first-chunk-stream | 1.0.0 | indirecta |
| npm | flat-cache | 2.0.1 | indirecta |
| npm | flatted | 2.0.0 | indirecta |
| npm | for-in | 1.0.2 | indirecta |
| npm | for-own | 0.1.5 | indirecta |
| npm | fragment-cache | 0.2.1 | indirecta |
| npm | fs-extra | 2.1.2 | indirecta |
| npm | fs-minipass | 1.2.7 | indirecta |
| npm | fs.realpath | 1.0.0 | indirecta |
| npm | fsevents | 1.2.10 | indirecta |
| npm | gauge | 2.7.4 | indirecta |
| npm | get-stdin | 4.0.1 | indirecta |
| npm | get-stdin | 7.0.0 | indirecta |
| npm | get-stream | 3.0.0 | indirecta |
| npm | get-value | 2.0.6 | indirecta |
| npm | glob | 5.0.15 | indirecta |
| npm | glob | 7.1.4 | indirecta |
| npm | glob | 7.1.6 | indirecta |
| npm | glob-base | 0.3.0 | indirecta |
| npm | glob-parent | 2.0.0 | indirecta |
| npm | glob-parent | 3.1.0 | indirecta |
| npm | glob-stream | 5.3.5 | indirecta |
| npm | glob-to-regexp | 0.3.0 | indirecta |
| npm | glob2base | 0.0.12 | indirecta |
| npm | global-dirs | 0.1.1 | indirecta |
| npm | global-modules | 2.0.0 | indirecta |
| npm | global-prefix | 3.0.0 | indirecta |
| npm | globals | 11.12.0 | indirecta |
| npm | globby | 9.2.0 | indirecta |
| npm | globjoin | 0.1.4 | indirecta |
| npm | gonzales-pe | 4.2.4 | indirecta |
| npm | got | 6.7.1 | indirecta |
| npm | graceful-fs | 4.1.15 | indirecta |
| npm | gulp-sourcemaps | 1.6.0 | indirecta |
| npm | has-flag | 3.0.0 | indirecta |
| npm | has-unicode | 2.0.1 | indirecta |
| npm | has-value | 0.3.1 | indirecta |
| npm | has-value | 1.0.0 | indirecta |
| npm | has-values | 0.1.4 | indirecta |
| npm | has-values | 1.0.0 | indirecta |
| npm | he | 1.2.0 | indirecta |
| npm | hosted-git-info | 2.7.1 | indirecta |
| npm | html-minifier | 3.5.21 | indirecta |
| npm | html-tags | 3.0.0 | indirecta |
| npm | htmlparser2 | 3.10.1 | indirecta |
| npm | iconv-lite | 0.4.24 | indirecta |
| npm | ignore | 4.0.6 | indirecta |
| npm | ignore | 5.1.2 | indirecta |
| npm | ignore-walk | 3.0.3 | indirecta |
| npm | import-fresh | 2.0.0 | indirecta |
| npm | import-lazy | 2.1.0 | indirecta |
| npm | import-lazy | 4.0.0 | indirecta |
| npm | imurmurhash | 0.1.4 | indirecta |
| npm | indent-string | 3.2.0 | indirecta |
| npm | indexes-of | 1.0.1 | indirecta |
| npm | inflight | 1.0.6 | indirecta |
| npm | inherits | 2.0.3 | indirecta |
| npm | inherits | 2.0.4 | indirecta |
| npm | ini | 1.3.5 | indirecta |
| npm | invert-kv | 1.0.0 | indirecta |
| npm | is-accessor-descriptor | 0.1.6 | indirecta |
| npm | is-accessor-descriptor | 1.0.0 | indirecta |
| npm | is-alphabetical | 1.0.3 | indirecta |
| npm | is-alphanumeric | 1.0.0 | indirecta |
| npm | is-alphanumerical | 1.0.3 | indirecta |
| npm | is-arrayish | 0.2.1 | indirecta |
| npm | is-binary-path | 1.0.1 | indirecta |
| npm | is-buffer | 1.1.6 | indirecta |
| npm | is-buffer | 2.0.3 | indirecta |
| npm | is-ci | 1.2.1 | indirecta |
| npm | is-data-descriptor | 0.1.4 | indirecta |
| npm | is-data-descriptor | 1.0.0 | indirecta |
| npm | is-decimal | 1.0.3 | indirecta |
| npm | is-descriptor | 0.1.6 | indirecta |
| npm | is-descriptor | 1.0.2 | indirecta |
| npm | is-directory | 0.3.1 | indirecta |
| npm | is-dotfile | 1.0.3 | indirecta |
| npm | is-equal-shallow | 0.1.3 | indirecta |
| npm | is-extendable | 0.1.1 | indirecta |
| npm | is-extendable | 1.0.1 | indirecta |
| npm | is-extglob | 1.0.0 | indirecta |
| npm | is-extglob | 2.1.1 | indirecta |
| npm | is-fullwidth-code-point | 1.0.0 | indirecta |
| npm | is-fullwidth-code-point | 2.0.0 | indirecta |
| npm | is-fullwidth-code-point | 3.0.0 | indirecta |
| npm | is-glob | 2.0.1 | indirecta |
| npm | is-glob | 3.1.0 | indirecta |
| npm | is-glob | 4.0.1 | indirecta |
| npm | is-hexadecimal | 1.0.3 | indirecta |
| npm | is-installed-globally | 0.1.0 | indirecta |
| npm | is-npm | 1.0.0 | indirecta |
| npm | is-number | 2.1.0 | indirecta |
| npm | is-number | 3.0.0 | indirecta |
| npm | is-number | 4.0.0 | indirecta |
| npm | is-number | 7.0.0 | indirecta |
| npm | is-obj | 1.0.1 | indirecta |
| npm | is-path-inside | 1.0.1 | indirecta |
| npm | is-plain-obj | 1.1.0 | indirecta |
| npm | is-plain-object | 2.0.4 | indirecta |
| npm | is-posix-bracket | 0.1.1 | indirecta |
| npm | is-primitive | 2.0.0 | indirecta |
| npm | is-redirect | 1.0.0 | indirecta |
| npm | is-regexp | 2.1.0 | indirecta |
| npm | is-retry-allowed | 1.2.0 | indirecta |
| npm | is-stream | 1.1.0 | indirecta |
| npm | is-utf8 | 0.2.1 | indirecta |
| npm | is-valid-glob | 0.3.0 | indirecta |
| npm | is-whitespace-character | 1.0.3 | indirecta |
| npm | is-windows | 1.0.2 | indirecta |
| npm | is-word-character | 1.0.3 | indirecta |
| npm | isarray | 0.0.1 | indirecta |
| npm | isarray | 1.0.0 | indirecta |
| npm | isexe | 2.0.0 | indirecta |
| npm | isobject | 2.1.0 | indirecta |
| npm | isobject | 3.0.1 | indirecta |
| npm | js-tokens | 4.0.0 | indirecta |
| npm | js-yaml | 3.13.1 | indirecta |
| npm | jsesc | 2.5.2 | indirecta |
| npm | json-parse-better-errors | 1.0.2 | indirecta |
| npm | json-schema-traverse | 0.4.1 | indirecta |
| npm | json-stable-stringify-without-jsonify | 1.0.1 | indirecta |
| npm | json5 | 2.1.0 | indirecta |
| npm | jsonfile | 2.4.0 | indirecta |
| npm | kind-of | 3.2.2 | indirecta |
| npm | kind-of | 4.0.0 | indirecta |
| npm | kind-of | 5.1.0 | indirecta |
| npm | kind-of | 6.0.2 | indirecta |
| npm | known-css-properties | 0.14.0 | indirecta |
| npm | latest-version | 3.1.0 | indirecta |
| npm | lazystream | 1.0.0 | indirecta |
| npm | lcid | 1.0.0 | indirecta |
| npm | leven | 3.1.0 | indirecta |
| npm | load-json-file | 4.0.0 | indirecta |
| npm | locate-path | 2.0.0 | indirecta |
| npm | lodash | 4.17.14 | indirecta |
| npm | lodash | 4.17.15 | indirecta |
| npm | lodash._basebind | 2.4.1 | indirecta |
| npm | lodash._basecreate | 2.4.1 | indirecta |
| npm | lodash._basecreatecallback | 2.4.1 | indirecta |
| npm | lodash._basecreatewrapper | 2.4.1 | indirecta |
| npm | lodash._createwrapper | 2.4.1 | indirecta |
| npm | lodash._isnative | 2.4.1 | indirecta |
| npm | lodash._objecttypes | 2.4.1 | indirecta |
| npm | lodash._setbinddata | 2.4.1 | indirecta |
| npm | lodash._shimkeys | 2.4.1 | indirecta |
| npm | lodash._slice | 2.4.1 | indirecta |
| npm | lodash.assign | 2.4.1 | indirecta |
| npm | lodash.bind | 2.4.1 | indirecta |
| npm | lodash.difference | 4.5.0 | indirecta |
| npm | lodash.identity | 2.4.1 | indirecta |
| npm | lodash.isequal | 4.5.0 | indirecta |
| npm | lodash.isfunction | 2.4.1 | indirecta |
| npm | lodash.isobject | 2.4.1 | indirecta |
| npm | lodash.keys | 2.4.1 | indirecta |
| npm | lodash.noop | 2.4.1 | indirecta |
| npm | lodash.support | 2.4.1 | indirecta |
| npm | lodash.uniq | 4.5.0 | indirecta |
| npm | log-symbols | 2.2.0 | indirecta |
| npm | log-symbols | 3.0.0 | indirecta |
| npm | longest-streak | 2.0.3 | indirecta |
| npm | loud-rejection | 1.6.0 | indirecta |
| npm | lower-case | 1.1.4 | indirecta |
| npm | lowercase-keys | 1.0.1 | indirecta |
| npm | lru-cache | 4.1.5 | indirecta |
| npm | make-dir | 1.3.0 | indirecta |
| npm | map-cache | 0.2.2 | indirecta |
| npm | map-obj | 1.0.1 | indirecta |
| npm | map-obj | 2.0.0 | indirecta |
| npm | map-visit | 1.0.0 | indirecta |
| npm | markdown-escapes | 1.0.3 | indirecta |
| npm | markdown-table | 1.1.3 | indirecta |
| npm | marked | 0.6.3 | indirecta |
| npm | math-random | 1.0.4 | indirecta |
| npm | mathml-tag-names | 2.1.1 | indirecta |
| npm | mdast-util-compact | 1.0.3 | indirecta |
| npm | memoize-decorator | 1.0.2 | indirecta |
| npm | meow | 5.0.0 | indirecta |
| npm | merge-stream | 1.0.1 | indirecta |
| npm | merge2 | 1.2.3 | indirecta |
| npm | micromatch | 2.3.11 | indirecta |
| npm | micromatch | 3.1.10 | indirecta |
| npm | micromatch | 4.0.2 | indirecta |
| npm | minimatch | 3.0.4 | indirecta |
| npm | minimist | 0.0.8 | indirecta |
| npm | minimist | 1.1.3 | indirecta |
| npm | minimist | 1.2.0 | indirecta |
| npm | minimist-options | 3.0.2 | indirecta |
| npm | minipass | 2.9.0 | indirecta |
| npm | minizlib | 1.3.3 | indirecta |
| npm | mixin-deep | 1.3.2 | indirecta |
| npm | mkdirp | 0.5.1 | indirecta |
| npm | ms | 2.0.0 | indirecta |
| npm | ms | 2.1.2 | indirecta |
| npm | multipipe | 1.0.2 | indirecta |
| npm | nan | 2.14.0 | indirecta |
| npm | nanomatch | 1.2.13 | indirecta |
| npm | needle | 2.4.0 | indirecta |
| npm | no-case | 2.3.2 | indirecta |
| npm | node-pre-gyp | 0.12.0 | indirecta |
| npm | node-releases | 1.1.23 | indirecta |
| npm | nopt | 4.0.1 | indirecta |
| npm | normalize-package-data | 2.5.0 | indirecta |
| npm | normalize-path | 2.1.1 | indirecta |
| npm | normalize-path | 3.0.0 | indirecta |
| npm | normalize-range | 0.1.2 | indirecta |
| npm | normalize-selector | 0.2.0 | indirecta |
| npm | npm-bundled | 1.1.1 | indirecta |
| npm | npm-normalize-package-bin | 1.0.1 | indirecta |
| npm | npm-packlist | 1.4.7 | indirecta |
| npm | npm-run-path | 2.0.2 | indirecta |
| npm | npmlog | 4.1.2 | indirecta |
| npm | num2fraction | 1.2.2 | indirecta |
| npm | number-is-nan | 1.0.1 | indirecta |
| npm | nunjucks | 3.2.0 | indirecta |
| npm | object-assign | 3.0.0 | indirecta |
| npm | object-assign | 4.1.1 | indirecta |
| npm | object-copy | 0.1.0 | indirecta |
| npm | object-visit | 1.0.1 | indirecta |
| npm | object.omit | 2.0.1 | indirecta |
| npm | object.pick | 1.3.0 | indirecta |
| npm | once | 1.4.0 | indirecta |
| npm | ordered-read-streams | 0.3.0 | indirecta |
| npm | os-homedir | 1.0.2 | indirecta |
| npm | os-locale | 1.4.0 | indirecta |
| npm | os-tmpdir | 1.0.2 | indirecta |
| npm | osenv | 0.1.5 | indirecta |
| npm | p-finally | 1.0.0 | indirecta |
| npm | p-limit | 1.3.0 | indirecta |
| npm | p-locate | 2.0.0 | indirecta |
| npm | p-try | 1.0.0 | indirecta |
| npm | package-json | 4.0.1 | indirecta |
| npm | param-case | 2.1.1 | indirecta |
| npm | parse-entities | 1.2.2 | indirecta |
| npm | parse-glob | 3.0.4 | indirecta |
| npm | parse-json | 4.0.0 | indirecta |
| npm | pascalcase | 0.1.1 | indirecta |
| npm | path-dirname | 1.0.2 | indirecta |
| npm | path-exists | 3.0.0 | indirecta |
| npm | path-is-absolute | 1.0.1 | indirecta |
| npm | path-is-inside | 1.0.2 | indirecta |
| npm | path-key | 2.0.1 | indirecta |
| npm | path-parse | 1.0.6 | indirecta |
| npm | path-type | 3.0.0 | indirecta |
| npm | picomatch | 2.0.7 | indirecta |
| npm | pify | 3.0.0 | indirecta |
| npm | pify | 4.0.1 | indirecta |
| npm | posix-character-classes | 0.1.1 | indirecta |
| npm | postcss | 7.0.14 | indirecta |
| npm | postcss | 7.0.17 | indirecta |
| npm | postcss | 7.0.18 | indirecta |
| npm | postcss-html | 0.36.0 | indirecta |
| npm | postcss-jsx | 0.36.1 | indirecta |
| npm | postcss-less | 3.1.4 | indirecta |
| npm | postcss-markdown | 0.36.0 | indirecta |
| npm | postcss-media-query-parser | 0.2.3 | indirecta |
| npm | postcss-reporter | 6.0.1 | indirecta |
| npm | postcss-resolve-nested-selector | 0.1.1 | indirecta |
| npm | postcss-safe-parser | 4.0.1 | indirecta |
| npm | postcss-sass | 0.3.5 | indirecta |
| npm | postcss-scss | 2.0.0 | indirecta |
| npm | postcss-selector-parser | 3.1.1 | indirecta |
| npm | postcss-selector-parser | 6.0.2 | indirecta |
| npm | postcss-sorting | 5.0.1 | indirecta |
| npm | postcss-syntax | 0.36.2 | indirecta |
| npm | postcss-value-parser | 3.3.1 | indirecta |
| npm | postcss-value-parser | 4.0.2 | indirecta |
| npm | prepend-http | 1.0.4 | indirecta |
| npm | preserve | 0.2.0 | indirecta |
| npm | process-nextick-args | 2.0.1 | indirecta |
| npm | pseudomap | 1.0.2 | indirecta |
| npm | punycode | 2.1.1 | indirecta |
| npm | q | 1.5.1 | indirecta |
| npm | quick-lru | 1.1.0 | indirecta |
| npm | randomatic | 3.1.1 | indirecta |
| npm | rc | 1.2.8 | indirecta |
| npm | read-pkg | 3.0.0 | indirecta |
| npm | read-pkg-up | 3.0.0 | indirecta |
| npm | readable-stream | 1.0.34 | indirecta |
| npm | readable-stream | 1.1.14 | indirecta |
| npm | readable-stream | 2.3.6 | indirecta |
| npm | readable-stream | 3.4.0 | indirecta |
| npm | readdirp | 2.2.1 | indirecta |
| npm | redent | 2.0.0 | indirecta |
| npm | regenerator-runtime | 0.11.1 | indirecta |
| npm | regex-cache | 0.4.4 | indirecta |
| npm | regex-not | 1.0.2 | indirecta |
| npm | registry-auth-token | 3.4.0 | indirecta |
| npm | registry-url | 3.1.0 | indirecta |
| npm | relateurl | 0.2.7 | indirecta |
| npm | remark | 10.0.1 | indirecta |
| npm | remark-parse | 6.0.3 | indirecta |
| npm | remark-stringify | 6.0.4 | indirecta |
| npm | remove-trailing-separator | 1.1.0 | indirecta |
| npm | repeat-element | 1.1.3 | indirecta |
| npm | repeat-string | 1.6.1 | indirecta |
| npm | replace-ext | 0.0.1 | indirecta |
| npm | replace-ext | 1.0.0 | indirecta |
| npm | resolve | 1.11.1 | indirecta |
| npm | resolve-from | 3.0.0 | indirecta |
| npm | resolve-from | 5.0.0 | indirecta |
| npm | resolve-url | 0.2.1 | indirecta |
| npm | ret | 0.1.15 | indirecta |
| npm | rimraf | 2.6.3 | indirecta |
| npm | rimraf | 2.7.1 | indirecta |
| npm | safe-buffer | 5.1.2 | indirecta |
| npm | safe-regex | 1.1.0 | indirecta |
| npm | safe-wipe | 0.2.4 | indirecta |
| npm | safer-buffer | 2.1.2 | indirecta |
| npm | sass-convert | 0.5.2 | indirecta |
| npm | sassdoc | 2.7.1 | indirecta |
| npm | sassdoc-extras | 2.5.1 | indirecta |
| npm | sassdoc-theme-default | 2.8.3 | indirecta |
| npm | sax | 1.2.4 | indirecta |
| npm | scss-comment-parser | 0.8.4 | indirecta |
| npm | semver | 5.7.0 | indirecta |
| npm | semver | 5.7.1 | indirecta |
| npm | semver-diff | 2.1.0 | indirecta |
| npm | semver-regex | 1.0.0 | indirecta |
| npm | set-blocking | 2.0.0 | indirecta |
| npm | set-value | 2.0.1 | indirecta |
| npm | shebang-command | 1.2.0 | indirecta |
| npm | shebang-regex | 1.0.0 | indirecta |
| npm | signal-exit | 3.0.2 | indirecta |
| npm | slash | 2.0.0 | indirecta |
| npm | slash | 3.0.0 | indirecta |
| npm | slice-ansi | 2.1.0 | indirecta |
| npm | snapdragon | 0.8.2 | indirecta |
| npm | snapdragon-node | 2.1.1 | indirecta |
| npm | snapdragon-util | 3.0.1 | indirecta |
| npm | source-map | 0.5.7 | indirecta |
| npm | source-map | 0.6.1 | indirecta |
| npm | source-map-resolve | 0.5.2 | indirecta |
| npm | source-map-url | 0.4.0 | indirecta |
| npm | spdx-correct | 3.1.0 | indirecta |
| npm | spdx-exceptions | 2.2.0 | indirecta |
| npm | spdx-expression-parse | 3.0.0 | indirecta |
| npm | spdx-license-ids | 3.0.4 | indirecta |
| npm | specificity | 0.4.1 | indirecta |
| npm | split-string | 3.1.0 | indirecta |
| npm | sprintf-js | 1.0.3 | indirecta |
| npm | state-toggle | 1.0.2 | indirecta |
| npm | static-extend | 0.1.2 | indirecta |
| npm | stream-shift | 1.0.1 | indirecta |
| npm | string-width | 1.0.2 | indirecta |
| npm | string-width | 2.1.1 | indirecta |
| npm | string-width | 3.1.0 | indirecta |
| npm | string-width | 4.1.0 | indirecta |
| npm | string_decoder | 0.10.31 | indirecta |
| npm | string_decoder | 1.1.1 | indirecta |
| npm | string_decoder | 1.2.0 | indirecta |
| npm | stringify-entities | 1.3.2 | indirecta |
| npm | strip-ansi | 3.0.1 | indirecta |
| npm | strip-ansi | 4.0.0 | indirecta |
| npm | strip-ansi | 5.2.0 | indirecta |
| npm | strip-bom | 2.0.0 | indirecta |
| npm | strip-bom | 3.0.0 | indirecta |
| npm | strip-bom-stream | 1.0.0 | indirecta |
| npm | strip-eof | 1.0.0 | indirecta |
| npm | strip-indent | 1.0.1 | indirecta |
| npm | strip-indent | 2.0.0 | indirecta |
| npm | strip-json-comments | 2.0.1 | indirecta |
| npm | style-search | 0.1.0 | indirecta |
| npm | stylelint | 10.1.0 | indirecta |
| npm | stylelint-config-recommended | 2.2.0 | indirecta |
| npm | stylelint-declaration-block-no-ignored-properties | 2.1.0 | indirecta |
| npm | stylelint-order | 3.1.0 | indirecta |
| npm | stylelint-scss | 3.10.1 | indirecta |
| npm | sugarss | 2.0.0 | indirecta |
| npm | supports-color | 5.5.0 | indirecta |
| npm | supports-color | 6.1.0 | indirecta |
| npm | svg-tags | 1.0.0 | indirecta |
| npm | table | 5.4.0 | indirecta |
| npm | tar | 4.4.13 | indirecta |
| npm | term-size | 1.2.0 | indirecta |
| npm | through2 | 0.6.5 | indirecta |
| npm | through2 | 1.1.1 | indirecta |
| npm | through2 | 2.0.5 | indirecta |
| npm | through2-filter | 2.0.0 | indirecta |
| npm | through2-filter | 3.0.0 | indirecta |
| npm | timed-out | 4.0.1 | indirecta |
| npm | to-absolute-glob | 0.1.1 | indirecta |
| npm | to-fast-properties | 2.0.0 | indirecta |
| npm | to-object-path | 0.3.0 | indirecta |
| npm | to-regex | 3.0.2 | indirecta |
| npm | to-regex-range | 2.1.1 | indirecta |
| npm | to-regex-range | 5.0.1 | indirecta |
| npm | trim | 0.0.1 | indirecta |
| npm | trim-newlines | 2.0.0 | indirecta |
| npm | trim-right | 1.0.1 | indirecta |
| npm | trim-trailing-lines | 1.1.2 | indirecta |
| npm | trough | 1.0.4 | indirecta |
| npm | typedarray | 0.0.6 | indirecta |
| npm | uglify-js | 3.4.10 | indirecta |
| npm | unherit | 1.1.2 | indirecta |
| npm | unified | 7.1.0 | indirecta |
| npm | union-value | 1.0.1 | indirecta |
| npm | uniq | 1.0.1 | indirecta |
| npm | unique-stream | 2.3.1 | indirecta |
| npm | unique-string | 1.0.0 | indirecta |
| npm | unist-util-find-all-after | 1.0.4 | indirecta |
| npm | unist-util-is | 3.0.0 | indirecta |
| npm | unist-util-remove-position | 1.1.3 | indirecta |
| npm | unist-util-stringify-position | 1.1.2 | indirecta |
| npm | unist-util-visit | 1.4.1 | indirecta |
| npm | unist-util-visit-parents | 2.1.2 | indirecta |
| npm | unset-value | 1.0.0 | indirecta |
| npm | unzip-response | 2.0.1 | indirecta |
| npm | upath | 1.2.0 | indirecta |
| npm | update-notifier | 2.5.0 | indirecta |
| npm | upper-case | 1.1.3 | indirecta |
| npm | uri-js | 4.2.2 | indirecta |
| npm | urix | 0.1.0 | indirecta |
| npm | url-parse-lax | 1.0.0 | indirecta |
| npm | use | 3.1.1 | indirecta |
| npm | util-deprecate | 1.0.2 | indirecta |
| npm | vali-date | 1.0.0 | indirecta |
| npm | validate-npm-package-license | 3.0.4 | indirecta |
| npm | vfile | 3.0.1 | indirecta |
| npm | vfile-location | 2.0.5 | indirecta |
| npm | vfile-message | 1.1.1 | indirecta |
| npm | vinyl | 0.4.6 | indirecta |
| npm | vinyl | 1.2.0 | indirecta |
| npm | vinyl-fs | 2.4.4 | indirecta |
| npm | vinyl-source-stream | 1.1.2 | indirecta |
| npm | vinyl-string | 1.0.2 | indirecta |
| npm | which | 1.3.1 | indirecta |
| npm | wide-align | 1.1.3 | indirecta |
| npm | widest-line | 2.0.1 | indirecta |
| npm | window-size | 0.1.4 | indirecta |
| npm | wrap-ansi | 2.1.0 | indirecta |
| npm | wrappy | 1.0.2 | indirecta |
| npm | write | 1.0.3 | indirecta |
| npm | write-file-atomic | 2.4.3 | indirecta |
| npm | x-is-string | 0.1.0 | indirecta |
| npm | xdg-basedir | 3.0.0 | indirecta |
| npm | xtend | 4.0.1 | indirecta |
| npm | y18n | 3.2.1 | indirecta |
| npm | yallist | 2.1.2 | indirecta |
| npm | yallist | 3.1.1 | indirecta |
| npm | yargs | 3.32.0 | indirecta |
| npm | yargs-parser | 10.1.0 | indirecta |
Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 612 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 50 tienen avisos conocidos, de los cuales 0 son directas.
| Paquete | Versión | Relación | Gravedad | Avisos | Corregido en |
|---|---|---|---|---|---|
| @babel/traverse | 7.4.5 | indirecta | crítica | 1 | 8.0.0-alpha.4 |
| flatted | 2.0.0 | indirecta | crítica | 2 | 3.4.2 |
| fsevents | 1.2.10 | indirecta | crítica | 2 | 1.2.11 |
| minimist | 0.0.8 | indirecta | crítica | 2 | 1.2.6 |
| minimist | 1.1.3 | indirecta | crítica | 2 | 1.2.6 |
| minimist | 1.2.0 | indirecta | crítica | 2 | 1.2.6 |
| ansi-regex | 3.0.0 | indirecta | alta | 1 | 6.0.1 |
| ansi-regex | 4.1.0 | indirecta | alta | 1 | 6.0.1 |
| braces | 1.8.5 | indirecta | alta | 1 | 3.0.3 |
| braces | 2.3.2 | indirecta | alta | 1 | 3.0.3 |
| braces | 3.0.2 | indirecta | alta | 1 | 3.0.3 |
| cross-spawn | 5.1.0 | indirecta | alta | 1 | 7.0.5 |
| decode-uri-component | 0.2.0 | indirecta | alta | 1 | 0.2.1 |
| dot-prop | 4.2.0 | indirecta | alta | 1 | 5.1.1 |
| html-minifier | 3.5.21 | indirecta | alta | 1 | — |
| ini | 1.3.5 | indirecta | alta | 1 | 1.3.6 |
| json5 | 2.1.0 | indirecta | alta | 1 | 2.2.2 |
| kind-of | 6.0.2 | indirecta | alta | 1 | 6.0.3 |
| lodash | 4.17.14 | indirecta | alta | 6 | 4.18.0 |
| lodash | 4.17.15 | indirecta | alta | 6 | 4.18.0 |
| marked | 0.6.3 | indirecta | alta | 3 | 4.0.10 |
| minimatch | 3.0.4 | indirecta | alta | 4 | 10.2.3 |
| picomatch | 2.0.7 | indirecta | alta | 2 | 4.0.4 |
| semver | 5.7.0 | indirecta | alta | 1 | 7.5.2 |
| semver | 5.7.1 | indirecta | alta | 1 | 7.5.2 |
| semver-regex | 1.0.0 | indirecta | alta | 2 | 4.0.3 |
| tar | 4.4.13 | indirecta | alta | 13 | 7.5.16 |
| trim | 0.0.1 | indirecta | alta | 1 | 0.0.3 |
| trim-newlines | 2.0.0 | indirecta | alta | 1 | 4.0.1 |
| y18n | 3.2.1 | indirecta | alta | 1 | 5.0.5 |
| @babel/helpers | 7.4.4 | indirecta | moderada | 1 | 8.0.0-alpha.17 |
| ajv | 6.10.0 | indirecta | moderada | 2 | 8.18.0 |
| brace-expansion | 1.1.11 | indirecta | moderada | 2 | 5.0.5 |
| browserslist | 4.6.2 | indirecta | moderada | 1 | 4.16.5 |
| got | 6.7.1 | indirecta | moderada | 1 | 12.1.0 |
| hosted-git-info | 2.7.1 | indirecta | moderada | 1 | 3.0.8 |
| js-yaml | 3.13.1 | indirecta | moderada | 2 | 4.2.0 |
| micromatch | 2.3.11 | indirecta | moderada | 1 | 4.0.8 |
| micromatch | 3.1.10 | indirecta | moderada | 1 | 4.0.8 |
| micromatch | 4.0.2 | indirecta | moderada | 1 | 4.0.8 |
| nunjucks | 3.2.0 | indirecta | moderada | 1 | 3.2.4 |
| path-parse | 1.0.6 | indirecta | moderada | 1 | 1.0.7 |
| postcss | 7.0.14 | indirecta | moderada | 4 | 8.5.10 |
| postcss | 7.0.17 | indirecta | moderada | 4 | 8.5.10 |
| postcss | 7.0.18 | indirecta | moderada | 4 | 8.5.10 |
| sassdoc-extras | 2.5.1 | indirecta | moderada | 1 | — |
| yargs-parser | 10.1.0 | indirecta | moderada | 1 | 18.1.1 |
| @babel/core | 7.4.5 | indirecta | baja | 1 | 8.0.0-rc.6 |
| debug | 3.2.6 | indirecta | baja | 1 | 4.3.1 |
| debug | 4.1.1 | indirecta | baja | 1 | 4.3.1 |
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
{
"data": {
"repo": {
"topics": [
"sass",
"bourbon-family",
"css",
"scss",
"bourbon",
"sass-mixins",
"sass-library",
"sass-functions"
],
"is_fork": false,
"size_kb": 3159,
"has_wiki": false,
"homepage": "https://www.bourbon.io/",
"languages": {
"Ruby": 43728,
"SCSS": 1892,
"Gherkin": 2740,
"JavaScript": 241
},
"pushed_at": "2024-09-13T18:28:12Z",
"created_at": "2011-04-23T15:41:20Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T11:11:19Z",
"description": "A Lightweight Sass Tool Set",
"is_archived": true,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Ruby",
"significant_languages": [
"Ruby"
]
},
"owner": {
"blog": "https://thoughtbot.com",
"name": "thoughtbot, inc.",
"type": "Organization",
"login": "thoughtbot",
"company": null,
"location": null,
"followers": 890,
"avatar_url": "https://avatars.githubusercontent.com/u/6183?v=4",
"created_at": "2008-04-10T18:00:20Z",
"is_verified": null,
"public_repos": 469,
"account_age_days": 6674
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases_count": 55,
"commits_last_year": 0,
"latest_release_at": "2023-01-23T21:15:03Z",
"latest_release_tag": "v7.3.0",
"releases_from_tags": false,
"days_since_last_push": 674,
"active_weeks_last_year": 0,
"days_since_latest_release": 1273,
"mean_days_between_releases": 235.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": true,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "bourbon",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "rubygems",
"matches_repo": true,
"registry_url": "https://rubygems.org/gems/bourbon",
"is_deprecated": false,
"latest_version": "7.3.0",
"repository_url": "https://github.com/thoughtbot/bourbon",
"versions_count": 91,
"total_downloads": 28511050,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2011-07-03T21:53:12.284000Z",
"latest_published_at": "2023-01-23T20:56:24.890000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 1273
},
{
"name": "bourbon",
"exists": true,
"license": "MIT",
"keywords": [
"css",
"eyeglass-module",
"mixins",
"sass",
"scss"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/bourbon",
"is_deprecated": false,
"latest_version": "7.3.0",
"repository_url": "https://github.com/thoughtbot/bourbon",
"versions_count": 29,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 7,
"monthly_downloads": 632005,
"first_published_at": "2013-03-02T23:52:54.327000Z",
"latest_published_at": "2023-01-23T20:59:27.687000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 1273
}
]
},
"popularity": {
"forks": 858,
"stars": 9008,
"watchers": 2,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"largest_source_bytes": 1919,
"source_files_sampled": 53,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Gemfile",
"package.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "@babel/traverse",
"direct": false,
"version": "7.4.5",
"severity": "critical",
"ecosystem": "npm",
"cvss_score": 9.3,
"advisory_ids": [
"GHSA-67hx-6x53-jw92"
],
"fixed_version": "8.0.0-alpha.4",
"advisory_count": 1,
"oldest_advisory_days": 1008
},
{
"name": "flatted",
"direct": false,
"version": "2.0.0",
"severity": "critical",
"ecosystem": "npm",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-25h7-pfq9-p65f",
"GHSA-rf6f-7fwh-wjgh"
],
"fixed_version": "3.4.2",
"advisory_count": 2,
"oldest_advisory_days": 129
},
{
"name": "fsevents",
"direct": false,
"version": "1.2.10",
"severity": "critical",
"ecosystem": "npm",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-8r6j-v8pm-fqw3",
"MAL-2023-462"
],
"fixed_version": "1.2.11",
"advisory_count": 2,
"oldest_advisory_days": 1179
},
{
"name": "minimist",
"direct": false,
"version": "0.0.8",
"severity": "critical",
"ecosystem": "npm",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-vh95-rmgr-6w4m",
"GHSA-xvch-5gv4-984h"
],
"fixed_version": "1.2.6",
"advisory_count": 2,
"oldest_advisory_days": 2298
},
{
"name": "minimist",
"direct": false,
"version": "1.1.3",
"severity": "critical",
"ecosystem": "npm",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-vh95-rmgr-6w4m",
"GHSA-xvch-5gv4-984h"
],
"fixed_version": "1.2.6",
"advisory_count": 2,
"oldest_advisory_days": 2298
},
{
"name": "minimist",
"direct": false,
"version": "1.2.0",
"severity": "critical",
"ecosystem": "npm",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-vh95-rmgr-6w4m",
"GHSA-xvch-5gv4-984h"
],
"fixed_version": "1.2.6",
"advisory_count": 2,
"oldest_advisory_days": 2298
},
{
"name": "ansi-regex",
"direct": false,
"version": "3.0.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-93q8-gq69-wqmw"
],
"fixed_version": "6.0.1",
"advisory_count": 1,
"oldest_advisory_days": 1763
},
{
"name": "ansi-regex",
"direct": false,
"version": "4.1.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-93q8-gq69-wqmw"
],
"fixed_version": "6.0.1",
"advisory_count": 1,
"oldest_advisory_days": 1763
},
{
"name": "braces",
"direct": false,
"version": "1.8.5",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-grv7-fg5c-xmjg"
],
"fixed_version": "3.0.3",
"advisory_count": 1,
"oldest_advisory_days": 796
},
{
"name": "braces",
"direct": false,
"version": "2.3.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-grv7-fg5c-xmjg"
],
"fixed_version": "3.0.3",
"advisory_count": 1,
"oldest_advisory_days": 796
},
{
"name": "braces",
"direct": false,
"version": "3.0.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-grv7-fg5c-xmjg"
],
"fixed_version": "3.0.3",
"advisory_count": 1,
"oldest_advisory_days": 796
},
{
"name": "cross-spawn",
"direct": false,
"version": "5.1.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3xgq-45jj-v275"
],
"fixed_version": "7.0.5",
"advisory_count": 1,
"oldest_advisory_days": 619
},
{
"name": "decode-uri-component",
"direct": false,
"version": "0.2.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w573-4hg7-7wgq"
],
"fixed_version": "0.2.1",
"advisory_count": 1,
"oldest_advisory_days": 1330
},
{
"name": "dot-prop",
"direct": false,
"version": "4.2.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.3,
"advisory_ids": [
"GHSA-ff7x-qrg7-qggm"
],
"fixed_version": "5.1.1",
"advisory_count": 1,
"oldest_advisory_days": 2181
},
{
"name": "html-minifier",
"direct": false,
"version": "3.5.21",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-pfq8-rq6v-vf5m"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 1357
},
{
"name": "ini",
"direct": false,
"version": "1.3.5",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.3,
"advisory_ids": [
"GHSA-qqgx-2p2h-9c37"
],
"fixed_version": "1.3.6",
"advisory_count": 1,
"oldest_advisory_days": 2047
},
{
"name": "json5",
"direct": false,
"version": "2.1.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.1,
"advisory_ids": [
"GHSA-9c47-m6qq-7p4h"
],
"fixed_version": "2.2.2",
"advisory_count": 1,
"oldest_advisory_days": 1299
},
{
"name": "kind-of",
"direct": false,
"version": "6.0.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-6c8f-qphg-qjgp"
],
"fixed_version": "6.0.3",
"advisory_count": 1,
"oldest_advisory_days": 2301
},
{
"name": "lodash",
"direct": false,
"version": "4.17.14",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 8.1,
"advisory_ids": [
"GHSA-29mw-wpgm-hmr9",
"GHSA-35jh-r3h4-6jhm",
"GHSA-f23m-r3pf-42rh",
"GHSA-p6mc-m468-83gw",
"GHSA-r5fr-rjxr-66jc",
"GHSA-xxjr-mmjv-4gpg"
],
"fixed_version": "4.18.0",
"advisory_count": 6,
"oldest_advisory_days": 2195
},
{
"name": "lodash",
"direct": false,
"version": "4.17.15",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 8.1,
"advisory_ids": [
"GHSA-29mw-wpgm-hmr9",
"GHSA-35jh-r3h4-6jhm",
"GHSA-f23m-r3pf-42rh",
"GHSA-p6mc-m468-83gw",
"GHSA-r5fr-rjxr-66jc",
"GHSA-xxjr-mmjv-4gpg"
],
"fixed_version": "4.18.0",
"advisory_count": 6,
"oldest_advisory_days": 2195
},
{
"name": "marked",
"direct": false,
"version": "0.6.3",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-5v2h-r2cx-5xgj",
"GHSA-ch52-vgq2-943f",
"GHSA-rrrm-qjm4-v8hf"
],
"fixed_version": "4.0.10",
"advisory_count": 3,
"oldest_advisory_days": 2145
},
{
"name": "minimatch",
"direct": false,
"version": "3.0.4",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-23c5-xmqv-rm74",
"GHSA-3ppc-4f35-3m26",
"GHSA-7r86-cg39-jmmj",
"GHSA-f8q6-p94x-37v3"
],
"fixed_version": "10.2.3",
"advisory_count": 4,
"oldest_advisory_days": 1371
},
{
"name": "picomatch",
"direct": false,
"version": "2.0.7",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3v7f-55p6-f55p",
"GHSA-c2c7-rcm5-vvqj"
],
"fixed_version": "4.0.4",
"advisory_count": 2,
"oldest_advisory_days": 116
},
{
"name": "semver",
"direct": false,
"version": "5.7.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-c2qf-rxjj-qqgw"
],
"fixed_version": "7.5.2",
"advisory_count": 1,
"oldest_advisory_days": 1125
},
{
"name": "semver",
"direct": false,
"version": "5.7.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-c2qf-rxjj-qqgw"
],
"fixed_version": "7.5.2",
"advisory_count": 1,
"oldest_advisory_days": 1125
},
{
"name": "semver-regex",
"direct": false,
"version": "1.0.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-44c6-4v22-4mhx",
"GHSA-4x5v-gmq8-25ch"
],
"fixed_version": "4.0.3",
"advisory_count": 2,
"oldest_advisory_days": 1763
},
{
"name": "tar",
"direct": false,
"version": "4.4.13",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 8.8,
"advisory_ids": [
"GHSA-34x7-hfp2-rc4v",
"GHSA-3jfq-g458-7qm9",
"GHSA-5955-9wpr-37jh",
"GHSA-83g3-92jg-28cx",
"GHSA-8qq5-rm4j-mr97",
"GHSA-9ppj-qmqm-q256",
"GHSA-9r2w-394v-53qc",
"GHSA-f5x3-32g6-xq36",
"GHSA-qffp-2rhf-9h96",
"GHSA-qq89-hq3f-393p"
],
"fixed_version": "7.5.16",
"advisory_count": 13,
"oldest_advisory_days": 1811
},
{
"name": "trim",
"direct": false,
"version": "0.0.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w5p7-h5w8-2hfq"
],
"fixed_version": "0.0.3",
"advisory_count": 1,
"oldest_advisory_days": 1896
},
{
"name": "trim-newlines",
"direct": false,
"version": "2.0.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-7p7h-4mm5-852v"
],
"fixed_version": "4.0.1",
"advisory_count": 1,
"oldest_advisory_days": 1868
},
{
"name": "y18n",
"direct": false,
"version": "3.2.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.3,
"advisory_ids": [
"GHSA-c4w7-xm78-47vh"
],
"fixed_version": "5.0.5",
"advisory_count": 1,
"oldest_advisory_days": 1938
},
{
"name": "@babel/helpers",
"direct": false,
"version": "7.4.4",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 6.2,
"advisory_ids": [
"GHSA-968p-4wvh-cqc8"
],
"fixed_version": "8.0.0-alpha.17",
"advisory_count": 1,
"oldest_advisory_days": 495
},
{
"name": "ajv",
"direct": false,
"version": "6.10.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.6,
"advisory_ids": [
"GHSA-2g4f-4pwh-qvx6",
"GHSA-v88g-cgmw-v5xw"
],
"fixed_version": "8.18.0",
"advisory_count": 2,
"oldest_advisory_days": 1620
},
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.11",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-f886-m6hf-6m8v",
"GHSA-v6h2-p8h4-qcjw"
],
"fixed_version": "5.0.5",
"advisory_count": 2,
"oldest_advisory_days": 405
},
{
"name": "browserslist",
"direct": false,
"version": "4.6.2",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-w8qv-6jwh-64r5"
],
"fixed_version": "4.16.5",
"advisory_count": 1,
"oldest_advisory_days": 1882
},
{
"name": "got",
"direct": false,
"version": "6.7.1",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-pfrx-2q88-qq97"
],
"fixed_version": "12.1.0",
"advisory_count": 1,
"oldest_advisory_days": 1492
},
{
"name": "hosted-git-info",
"direct": false,
"version": "2.7.1",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-43f8-2h32-f4cj"
],
"fixed_version": "3.0.8",
"advisory_count": 1,
"oldest_advisory_days": 1900
},
{
"name": "js-yaml",
"direct": false,
"version": "3.13.1",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-h67p-54hq-rp68",
"GHSA-mh29-5h37-fv8m"
],
"fixed_version": "4.2.0",
"advisory_count": 2,
"oldest_advisory_days": 248
},
{
"name": "micromatch",
"direct": false,
"version": "2.3.11",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-952p-6rrq-rcjv"
],
"fixed_version": "4.0.8",
"advisory_count": 1,
"oldest_advisory_days": 796
},
{
"name": "micromatch",
"direct": false,
"version": "3.1.10",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-952p-6rrq-rcjv"
],
"fixed_version": "4.0.8",
"advisory_count": 1,
"oldest_advisory_days": 796
},
{
"name": "micromatch",
"direct": false,
"version": "4.0.2",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-952p-6rrq-rcjv"
],
"fixed_version": "4.0.8",
"advisory_count": 1,
"oldest_advisory_days": 796
},
{
"name": "nunjucks",
"direct": false,
"version": "3.2.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 6.1,
"advisory_ids": [
"GHSA-x77j-w7wf-fjmw"
],
"fixed_version": "3.2.4",
"advisory_count": 1,
"oldest_advisory_days": 1186
},
{
"name": "path-parse",
"direct": false,
"version": "1.0.6",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-hj48-42vr-x3v9"
],
"fixed_version": "1.0.7",
"advisory_count": 1,
"oldest_advisory_days": 1805
},
{
"name": "postcss",
"direct": false,
"version": "7.0.14",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 6.1,
"advisory_ids": [
"GHSA-566m-qj78-rww5",
"GHSA-7fh5-64p2-3v2j",
"GHSA-hwj9-h5mp-3pm3",
"GHSA-qx2v-qp2m-jg93"
],
"fixed_version": "8.5.10",
"advisory_count": 4,
"oldest_advisory_days": 1897
},
{
"name": "postcss",
"direct": false,
"version": "7.0.17",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 6.1,
"advisory_ids": [
"GHSA-566m-qj78-rww5",
"GHSA-7fh5-64p2-3v2j",
"GHSA-hwj9-h5mp-3pm3",
"GHSA-qx2v-qp2m-jg93"
],
"fixed_version": "8.5.10",
"advisory_count": 4,
"oldest_advisory_days": 1897
},
{
"name": "postcss",
"direct": false,
"version": "7.0.18",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 6.1,
"advisory_ids": [
"GHSA-566m-qj78-rww5",
"GHSA-7fh5-64p2-3v2j",
"GHSA-hwj9-h5mp-3pm3",
"GHSA-qx2v-qp2m-jg93"
],
"fixed_version": "8.5.10",
"advisory_count": 4,
"oldest_advisory_days": 1897
},
{
"name": "sassdoc-extras",
"direct": false,
"version": "2.5.1",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.6,
"advisory_ids": [
"GHSA-3mpm-jx38-9m8w"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 298
},
{
"name": "yargs-parser",
"direct": false,
"version": "10.1.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-p9pc-299p-vxgp"
],
"fixed_version": "18.1.1",
"advisory_count": 1,
"oldest_advisory_days": 2144
},
{
"name": "@babel/core",
"direct": false,
"version": "7.4.5",
"severity": "low",
"ecosystem": "npm",
"cvss_score": 3.2,
"advisory_ids": [
"GHSA-4x5r-pxfx-6jf8"
],
"fixed_version": "8.0.0-rc.6",
"advisory_count": 1,
"oldest_advisory_days": 34
},
{
"name": "debug",
"direct": false,
"version": "3.2.6",
"severity": "low",
"ecosystem": "npm",
"cvss_score": 3.7,
"advisory_ids": [
"GHSA-gxpj-cx7g-858c"
],
"fixed_version": "4.3.1",
"advisory_count": 1,
"oldest_advisory_days": 2901
},
{
"name": "debug",
"direct": false,
"version": "4.1.1",
"severity": "low",
"ecosystem": "npm",
"cvss_score": 3.7,
"advisory_ids": [
"GHSA-gxpj-cx7g-858c"
],
"fixed_version": "4.3.1",
"advisory_count": 1,
"oldest_advisory_days": 2901
}
],
"collected": true,
"truncated": false,
"by_severity": {
"low": 3,
"high": 24,
"critical": 6,
"moderate": 17
},
"advisory_count": 96,
"affected_count": 50,
"assessed_count": 612,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"rubygems"
],
"dependencies": [],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@babel/code-frame",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "@babel/core",
"direct": false,
"version": "7.4.5",
"ecosystem": "npm"
},
{
"name": "@babel/generator",
"direct": false,
"version": "7.4.4",
"ecosystem": "npm"
},
{
"name": "@babel/helper-function-name",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "@babel/helper-get-function-arity",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "@babel/helper-split-export-declaration",
"direct": false,
"version": "7.4.4",
"ecosystem": "npm"
},
{
"name": "@babel/helpers",
"direct": false,
"version": "7.4.4",
"ecosystem": "npm"
},
{
"name": "@babel/highlight",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "@babel/parser",
"direct": false,
"version": "7.4.5",
"ecosystem": "npm"
},
{
"name": "@babel/template",
"direct": false,
"version": "7.4.4",
"ecosystem": "npm"
},
{
"name": "@babel/traverse",
"direct": false,
"version": "7.4.5",
"ecosystem": "npm"
},
{
"name": "@babel/types",
"direct": false,
"version": "7.4.4",
"ecosystem": "npm"
},
{
"name": "@mrmlnc/readdir-enhanced",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "@nodelib/fs.stat",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "@thoughtbot/stylelint-config",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@types/events",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "@types/glob",
"direct": false,
"version": "7.1.1",
"ecosystem": "npm"
},
{
"name": "@types/minimatch",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "12.0.7",
"ecosystem": "npm"
},
{
"name": "@types/unist",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "@types/vfile",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "@types/vfile-message",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "a-sync-waterfall",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "abbrev",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "6.10.0",
"ecosystem": "npm"
},
{
"name": "ansi-align",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "3.2.1",
"ecosystem": "npm"
},
{
"name": "anymatch",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "aproba",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "are-we-there-yet",
"direct": false,
"version": "1.1.5",
"ecosystem": "npm"
},
{
"name": "argparse",
"direct": false,
"version": "1.0.10",
"ecosystem": "npm"
},
{
"name": "arr-diff",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "arr-diff",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "arr-flatten",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "arr-union",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "array-find-index",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "array-union",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "array-uniq",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "array-unique",
"direct": false,
"version": "0.2.1",
"ecosystem": "npm"
},
{
"name": "array-unique",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "arrify",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "asap",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "assign-symbols",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "astral-regex",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "async-each",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "atob",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "autoprefixer",
"direct": false,
"version": "9.6.0",
"ecosystem": "npm"
},
{
"name": "babel-runtime",
"direct": false,
"version": "6.26.0",
"ecosystem": "npm"
},
{
"name": "bail",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "base",
"direct": false,
"version": "0.11.2",
"ecosystem": "npm"
},
{
"name": "binary-extensions",
"direct": false,
"version": "1.13.1",
"ecosystem": "npm"
},
{
"name": "boxen",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.11",
"ecosystem": "npm"
},
{
"name": "braces",
"direct": false,
"version": "1.8.5",
"ecosystem": "npm"
},
{
"name": "braces",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "braces",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "browserslist",
"direct": false,
"version": "4.6.2",
"ecosystem": "npm"
},
{
"name": "buffer-from",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "cache-base",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "call-me-maybe",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "caller-callsite",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "caller-path",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "callsites",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "camel-case",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "camelcase",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "camelcase",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "camelcase-keys",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "caniuse-lite",
"direct": false,
"version": "1.0.30000974",
"ecosystem": "npm"
},
{
"name": "capture-stack-trace",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "ccount",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "cdocparser",
"direct": false,
"version": "0.13.0",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "2.4.2",
"ecosystem": "npm"
},
{
"name": "character-entities",
"direct": false,
"version": "1.2.3",
"ecosystem": "npm"
},
{
"name": "character-entities-html4",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "character-entities-legacy",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "character-reference-invalid",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "chokidar",
"direct": false,
"version": "2.1.8",
"ecosystem": "npm"
},
{
"name": "chownr",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "chroma-js",
"direct": false,
"version": "1.4.1",
"ecosystem": "npm"
},
{
"name": "ci-info",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "class-utils",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "clean-css",
"direct": false,
"version": "4.2.1",
"ecosystem": "npm"
},
{
"name": "cli-boxes",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "clone",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "clone",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "clone-regexp",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "clone-stats",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "code-point-at",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "collapse-white-space",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "collection-visit",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "1.9.3",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": false,
"version": "2.17.1",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": false,
"version": "2.19.0",
"ecosystem": "npm"
},
{
"name": "component-emitter",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "concat-map",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "concat-stream",
"direct": false,
"version": "1.6.2",
"ecosystem": "npm"
},
{
"name": "configstore",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "console-control-strings",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "convert-source-map",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "copy-descriptor",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "core-js",
"direct": false,
"version": "2.6.11",
"ecosystem": "npm"
},
{
"name": "core-util-is",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "cosmiconfig",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "create-error-class",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "5.1.0",
"ecosystem": "npm"
},
{
"name": "crypto-random-string",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "cssesc",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "currently-unhandled",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "dargs",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "2.6.9",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "3.2.6",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "decamelize",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "decamelize-keys",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "decode-uri-component",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "deep-extend",
"direct": false,
"version": "0.6.0",
"ecosystem": "npm"
},
{
"name": "define-property",
"direct": false,
"version": "0.2.5",
"ecosystem": "npm"
},
{
"name": "define-property",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "define-property",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "delegates",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "detect-libc",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "dir-glob",
"direct": false,
"version": "2.2.2",
"ecosystem": "npm"
},
{
"name": "docopt",
"direct": false,
"version": "0.6.2",
"ecosystem": "npm"
},
{
"name": "dom-serializer",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "domelementtype",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "domhandler",
"direct": false,
"version": "2.4.2",
"ecosystem": "npm"
},
{
"name": "domutils",
"direct": false,
"version": "1.7.0",
"ecosystem": "npm"
},
{
"name": "dot-prop",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "duplexer2",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "duplexer3",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "duplexify",
"direct": false,
"version": "3.7.1",
"ecosystem": "npm"
},
{
"name": "electron-to-chromium",
"direct": false,
"version": "1.3.155",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "7.0.3",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "end-of-stream",
"direct": false,
"version": "1.4.4",
"ecosystem": "npm"
},
{
"name": "ends-with",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "entities",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "error-ex",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "es6-denodeify",
"direct": false,
"version": "0.1.5",
"ecosystem": "npm"
},
{
"name": "es6-promise",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "es6-promise",
"direct": false,
"version": "4.2.8",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "esprima",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "esutils",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "execa",
"direct": false,
"version": "0.7.0",
"ecosystem": "npm"
},
{
"name": "execall",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "expand-brackets",
"direct": false,
"version": "0.1.5",
"ecosystem": "npm"
},
{
"name": "expand-brackets",
"direct": false,
"version": "2.1.4",
"ecosystem": "npm"
},
{
"name": "expand-range",
"direct": false,
"version": "1.8.2",
"ecosystem": "npm"
},
{
"name": "extend",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "extend",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "extend-shallow",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "extend-shallow",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "extglob",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "extglob",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "fast-glob",
"direct": false,
"version": "2.2.7",
"ecosystem": "npm"
},
{
"name": "fast-json-stable-stringify",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "file-entry-cache",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "filename-regex",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "2.2.4",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "find-index",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "find-up",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "first-chunk-stream",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "flat-cache",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "flatted",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "for-in",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "for-own",
"direct": false,
"version": "0.1.5",
"ecosystem": "npm"
},
{
"name": "fragment-cache",
"direct": false,
"version": "0.2.1",
"ecosystem": "npm"
},
{
"name": "fs-extra",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "fs-minipass",
"direct": false,
"version": "1.2.7",
"ecosystem": "npm"
},
{
"name": "fs.realpath",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "1.2.10",
"ecosystem": "npm"
},
{
"name": "gauge",
"direct": false,
"version": "2.7.4",
"ecosystem": "npm"
},
{
"name": "get-stdin",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "get-stdin",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "get-value",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "5.0.15",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "7.1.4",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "7.1.6",
"ecosystem": "npm"
},
{
"name": "glob-base",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "glob-parent",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "glob-parent",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "glob-stream",
"direct": false,
"version": "5.3.5",
"ecosystem": "npm"
},
{
"name": "glob-to-regexp",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "glob2base",
"direct": false,
"version": "0.0.12",
"ecosystem": "npm"
},
{
"name": "global-dirs",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "global-modules",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "global-prefix",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "11.12.0",
"ecosystem": "npm"
},
{
"name": "globby",
"direct": false,
"version": "9.2.0",
"ecosystem": "npm"
},
{
"name": "globjoin",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "gonzales-pe",
"direct": false,
"version": "4.2.4",
"ecosystem": "npm"
},
{
"name": "got",
"direct": false,
"version": "6.7.1",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.1.15",
"ecosystem": "npm"
},
{
"name": "gulp-sourcemaps",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "has-unicode",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "has-value",
"direct": false,
"version": "0.3.1",
"ecosystem": "npm"
},
{
"name": "has-value",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "has-values",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "has-values",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "he",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "hosted-git-info",
"direct": false,
"version": "2.7.1",
"ecosystem": "npm"
},
{
"name": "html-minifier",
"direct": false,
"version": "3.5.21",
"ecosystem": "npm"
},
{
"name": "html-tags",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "htmlparser2",
"direct": false,
"version": "3.10.1",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.4.24",
"ecosystem": "npm"
},
{
"name": "ignore",
"direct": false,
"version": "4.0.6",
"ecosystem": "npm"
},
{
"name": "ignore",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "ignore-walk",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "import-fresh",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "import-lazy",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "import-lazy",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "imurmurhash",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "indent-string",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "indexes-of",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "inflight",
"direct": false,
"version": "1.0.6",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ini",
"direct": false,
"version": "1.3.5",
"ecosystem": "npm"
},
{
"name": "invert-kv",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-accessor-descriptor",
"direct": false,
"version": "0.1.6",
"ecosystem": "npm"
},
{
"name": "is-accessor-descriptor",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-alphabetical",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "is-alphanumeric",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-alphanumerical",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "is-arrayish",
"direct": false,
"version": "0.2.1",
"ecosystem": "npm"
},
{
"name": "is-binary-path",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "is-buffer",
"direct": false,
"version": "1.1.6",
"ecosystem": "npm"
},
{
"name": "is-buffer",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "is-ci",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "is-data-descriptor",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "is-data-descriptor",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-decimal",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "is-descriptor",
"direct": false,
"version": "0.1.6",
"ecosystem": "npm"
},
{
"name": "is-descriptor",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "is-directory",
"direct": false,
"version": "0.3.1",
"ecosystem": "npm"
},
{
"name": "is-dotfile",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "is-equal-shallow",
"direct": false,
"version": "0.1.3",
"ecosystem": "npm"
},
{
"name": "is-extendable",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "is-extendable",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "is-extglob",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-extglob",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-glob",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "is-glob",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "is-glob",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "is-hexadecimal",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "is-installed-globally",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "is-npm",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "is-obj",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "is-path-inside",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "is-plain-obj",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "is-plain-object",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "is-posix-bracket",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "is-primitive",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "is-redirect",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-regexp",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-retry-allowed",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "is-stream",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "is-utf8",
"direct": false,
"version": "0.2.1",
"ecosystem": "npm"
},
{
"name": "is-valid-glob",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "is-whitespace-character",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "is-windows",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "is-word-character",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "isarray",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "isarray",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "isobject",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "isobject",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "js-yaml",
"direct": false,
"version": "3.13.1",
"ecosystem": "npm"
},
{
"name": "jsesc",
"direct": false,
"version": "2.5.2",
"ecosystem": "npm"
},
{
"name": "json-parse-better-errors",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "json-stable-stringify-without-jsonify",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "json5",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "jsonfile",
"direct": false,
"version": "2.4.0",
"ecosystem": "npm"
},
{
"name": "kind-of",
"direct": false,
"version": "3.2.2",
"ecosystem": "npm"
},
{
"name": "kind-of",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "kind-of",
"direct": false,
"version": "5.1.0",
"ecosystem": "npm"
},
{
"name": "kind-of",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "known-css-properties",
"direct": false,
"version": "0.14.0",
"ecosystem": "npm"
},
{
"name": "latest-version",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "lazystream",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "lcid",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "leven",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "load-json-file",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "locate-path",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "lodash",
"direct": false,
"version": "4.17.14",
"ecosystem": "npm"
},
{
"name": "lodash",
"direct": false,
"version": "4.17.15",
"ecosystem": "npm"
},
{
"name": "lodash._basebind",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash._basecreate",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash._basecreatecallback",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash._basecreatewrapper",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash._createwrapper",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash._isnative",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash._objecttypes",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash._setbinddata",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash._shimkeys",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash._slice",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash.assign",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash.bind",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash.difference",
"direct": false,
"version": "4.5.0",
"ecosystem": "npm"
},
{
"name": "lodash.identity",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash.isequal",
"direct": false,
"version": "4.5.0",
"ecosystem": "npm"
},
{
"name": "lodash.isfunction",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash.isobject",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash.keys",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash.noop",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash.support",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "lodash.uniq",
"direct": false,
"version": "4.5.0",
"ecosystem": "npm"
},
{
"name": "log-symbols",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "log-symbols",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "longest-streak",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "loud-rejection",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "lower-case",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "lowercase-keys",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "4.1.5",
"ecosystem": "npm"
},
{
"name": "make-dir",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "map-cache",
"direct": false,
"version": "0.2.2",
"ecosystem": "npm"
},
{
"name": "map-obj",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "map-obj",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "map-visit",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "markdown-escapes",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "markdown-table",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "marked",
"direct": false,
"version": "0.6.3",
"ecosystem": "npm"
},
{
"name": "math-random",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "mathml-tag-names",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "mdast-util-compact",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "memoize-decorator",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "meow",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "merge-stream",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "merge2",
"direct": false,
"version": "1.2.3",
"ecosystem": "npm"
},
{
"name": "micromatch",
"direct": false,
"version": "2.3.11",
"ecosystem": "npm"
},
{
"name": "micromatch",
"direct": false,
"version": "3.1.10",
"ecosystem": "npm"
},
{
"name": "micromatch",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "minimist",
"direct": false,
"version": "0.0.8",
"ecosystem": "npm"
},
{
"name": "minimist",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "minimist",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "minimist-options",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "minipass",
"direct": false,
"version": "2.9.0",
"ecosystem": "npm"
},
{
"name": "minizlib",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "mixin-deep",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "mkdirp",
"direct": false,
"version": "0.5.1",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "multipipe",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "nan",
"direct": false,
"version": "2.14.0",
"ecosystem": "npm"
},
{
"name": "nanomatch",
"direct": false,
"version": "1.2.13",
"ecosystem": "npm"
},
{
"name": "needle",
"direct": false,
"version": "2.4.0",
"ecosystem": "npm"
},
{
"name": "no-case",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "node-pre-gyp",
"direct": false,
"version": "0.12.0",
"ecosystem": "npm"
},
{
"name": "node-releases",
"direct": false,
"version": "1.1.23",
"ecosystem": "npm"
},
{
"name": "nopt",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "normalize-package-data",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "normalize-path",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "normalize-path",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "normalize-range",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "normalize-selector",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "npm-bundled",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "npm-normalize-package-bin",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "npm-packlist",
"direct": false,
"version": "1.4.7",
"ecosystem": "npm"
},
{
"name": "npm-run-path",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "npmlog",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "num2fraction",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "number-is-nan",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "nunjucks",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-copy",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "object-visit",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "object.omit",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "object.pick",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "ordered-read-streams",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "os-homedir",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "os-locale",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "os-tmpdir",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "osenv",
"direct": false,
"version": "0.1.5",
"ecosystem": "npm"
},
{
"name": "p-finally",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "p-locate",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "p-try",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "package-json",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "param-case",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "parse-entities",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "parse-glob",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "parse-json",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "pascalcase",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "path-dirname",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "path-exists",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "path-is-absolute",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "path-is-inside",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "path-parse",
"direct": false,
"version": "1.0.6",
"ecosystem": "npm"
},
{
"name": "path-type",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "pify",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "pify",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "posix-character-classes",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "postcss",
"direct": false,
"version": "7.0.14",
"ecosystem": "npm"
},
{
"name": "postcss",
"direct": false,
"version": "7.0.17",
"ecosystem": "npm"
},
{
"name": "postcss",
"direct": false,
"version": "7.0.18",
"ecosystem": "npm"
},
{
"name": "postcss-html",
"direct": false,
"version": "0.36.0",
"ecosystem": "npm"
},
{
"name": "postcss-jsx",
"direct": false,
"version": "0.36.1",
"ecosystem": "npm"
},
{
"name": "postcss-less",
"direct": false,
"version": "3.1.4",
"ecosystem": "npm"
},
{
"name": "postcss-markdown",
"direct": false,
"version": "0.36.0",
"ecosystem": "npm"
},
{
"name": "postcss-media-query-parser",
"direct": false,
"version": "0.2.3",
"ecosystem": "npm"
},
{
"name": "postcss-reporter",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "postcss-resolve-nested-selector",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "postcss-safe-parser",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "postcss-sass",
"direct": false,
"version": "0.3.5",
"ecosystem": "npm"
},
{
"name": "postcss-scss",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "postcss-selector-parser",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "postcss-selector-parser",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "postcss-sorting",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "postcss-syntax",
"direct": false,
"version": "0.36.2",
"ecosystem": "npm"
},
{
"name": "postcss-value-parser",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "postcss-value-parser",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "prepend-http",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "preserve",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "process-nextick-args",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "pseudomap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "punycode",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "q",
"direct": false,
"version": "1.5.1",
"ecosystem": "npm"
},
{
"name": "quick-lru",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "randomatic",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "rc",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "read-pkg",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "read-pkg-up",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "1.0.34",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "1.1.14",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "2.3.6",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "3.4.0",
"ecosystem": "npm"
},
{
"name": "readdirp",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "redent",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "regenerator-runtime",
"direct": false,
"version": "0.11.1",
"ecosystem": "npm"
},
{
"name": "regex-cache",
"direct": false,
"version": "0.4.4",
"ecosystem": "npm"
},
{
"name": "regex-not",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "registry-auth-token",
"direct": false,
"version": "3.4.0",
"ecosystem": "npm"
},
{
"name": "registry-url",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "relateurl",
"direct": false,
"version": "0.2.7",
"ecosystem": "npm"
},
{
"name": "remark",
"direct": false,
"version": "10.0.1",
"ecosystem": "npm"
},
{
"name": "remark-parse",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "remark-stringify",
"direct": false,
"version": "6.0.4",
"ecosystem": "npm"
},
{
"name": "remove-trailing-separator",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "repeat-element",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "repeat-string",
"direct": false,
"version": "1.6.1",
"ecosystem": "npm"
},
{
"name": "replace-ext",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "replace-ext",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "resolve",
"direct": false,
"version": "1.11.1",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "resolve-url",
"direct": false,
"version": "0.2.1",
"ecosystem": "npm"
},
{
"name": "ret",
"direct": false,
"version": "0.1.15",
"ecosystem": "npm"
},
{
"name": "rimraf",
"direct": false,
"version": "2.6.3",
"ecosystem": "npm"
},
{
"name": "rimraf",
"direct": false,
"version": "2.7.1",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "safe-regex",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "safe-wipe",
"direct": false,
"version": "0.2.4",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "sass-convert",
"direct": false,
"version": "0.5.2",
"ecosystem": "npm"
},
{
"name": "sassdoc",
"direct": false,
"version": "2.7.1",
"ecosystem": "npm"
},
{
"name": "sassdoc-extras",
"direct": false,
"version": "2.5.1",
"ecosystem": "npm"
},
{
"name": "sassdoc-theme-default",
"direct": false,
"version": "2.8.3",
"ecosystem": "npm"
},
{
"name": "sax",
"direct": false,
"version": "1.2.4",
"ecosystem": "npm"
},
{
"name": "scss-comment-parser",
"direct": false,
"version": "0.8.4",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "5.7.0",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "5.7.1",
"ecosystem": "npm"
},
{
"name": "semver-diff",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "semver-regex",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "set-blocking",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "set-value",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "slash",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "slash",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "slice-ansi",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "snapdragon",
"direct": false,
"version": "0.8.2",
"ecosystem": "npm"
},
{
"name": "snapdragon-node",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "snapdragon-util",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.5.7",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "source-map-resolve",
"direct": false,
"version": "0.5.2",
"ecosystem": "npm"
},
{
"name": "source-map-url",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "spdx-correct",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "spdx-exceptions",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "spdx-expression-parse",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "spdx-license-ids",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "specificity",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "split-string",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "sprintf-js",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "state-toggle",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "static-extend",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "stream-shift",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "string_decoder",
"direct": false,
"version": "0.10.31",
"ecosystem": "npm"
},
{
"name": "string_decoder",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "string_decoder",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "stringify-entities",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "strip-bom",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "strip-bom",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "strip-bom-stream",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "strip-eof",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "strip-indent",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "strip-indent",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "style-search",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "stylelint",
"direct": false,
"version": "10.1.0",
"ecosystem": "npm"
},
{
"name": "stylelint-config-recommended",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "stylelint-declaration-block-no-ignored-properties",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "stylelint-order",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "stylelint-scss",
"direct": false,
"version": "3.10.1",
"ecosystem": "npm"
},
{
"name": "sugarss",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "5.5.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "6.1.0",
"ecosystem": "npm"
},
{
"name": "svg-tags",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "table",
"direct": false,
"version": "5.4.0",
"ecosystem": "npm"
},
{
"name": "tar",
"direct": false,
"version": "4.4.13",
"ecosystem": "npm"
},
{
"name": "term-size",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "through2",
"direct": false,
"version": "0.6.5",
"ecosystem": "npm"
},
{
"name": "through2",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "through2",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "through2-filter",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "through2-filter",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "timed-out",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "to-absolute-glob",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "to-fast-properties",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "to-object-path",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "to-regex",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "to-regex-range",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "to-regex-range",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "trim",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "trim-newlines",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "trim-right",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "trim-trailing-lines",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "trough",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "typedarray",
"direct": false,
"version": "0.0.6",
"ecosystem": "npm"
},
{
"name": "uglify-js",
"direct": false,
"version": "3.4.10",
"ecosystem": "npm"
},
{
"name": "unherit",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "unified",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "union-value",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "uniq",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "unique-stream",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "unique-string",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "unist-util-find-all-after",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "unist-util-is",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "unist-util-remove-position",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "unist-util-stringify-position",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "unist-util-visit",
"direct": false,
"version": "1.4.1",
"ecosystem": "npm"
},
{
"name": "unist-util-visit-parents",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "unset-value",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "unzip-response",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "upath",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "update-notifier",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "upper-case",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "uri-js",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "urix",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "url-parse-lax",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "use",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "util-deprecate",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "vali-date",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "validate-npm-package-license",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "vfile",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "vfile-location",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "vfile-message",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "vinyl",
"direct": false,
"version": "0.4.6",
"ecosystem": "npm"
},
{
"name": "vinyl",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "vinyl-fs",
"direct": false,
"version": "2.4.4",
"ecosystem": "npm"
},
{
"name": "vinyl-source-stream",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "vinyl-string",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "wide-align",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "widest-line",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "window-size",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "write",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "write-file-atomic",
"direct": false,
"version": "2.4.3",
"ecosystem": "npm"
},
{
"name": "x-is-string",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "xdg-basedir",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "xtend",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "3.2.1",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "3.32.0",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "10.1.0",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 612,
"direct_count": 0,
"indirect_count": 612
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 335,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 568,
"closed_unmerged_prs": 228
},
"bus_factor": 4,
"top_contributors": [
{
"type": "User",
"login": "tysongach",
"commits": 150,
"avatar_url": "https://avatars.githubusercontent.com/u/903327?v=4"
},
{
"type": "User",
"login": "sikachu",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/4912?v=4"
},
{
"type": "User",
"login": "whmii",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/2489247?v=4"
},
{
"type": "User",
"login": "kylefiedler",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/223180?v=4"
},
{
"type": "User",
"login": "mike-burns",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/4550?v=4"
},
{
"type": "User",
"login": "mendozagioo",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/1576290?v=4"
},
{
"type": "User",
"login": "jamiebuilds",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/952783?v=4"
},
{
"type": "User",
"login": "joshuaogle",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/111194?v=4"
},
{
"type": "User",
"login": "mjankowski",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/225?v=4"
},
{
"type": "Bot",
"login": "dependabot-preview[bot]",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/in/2141?v=4"
}
],
"contributors_sampled": 100,
"top_contributor_share": 0.446
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"dynamic-readme.yml",
"dynamic-security.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 19 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 4,
"reason": "Found 12/29 approved changesets -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 31 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project is archived",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "69 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1cd55ce9c0f1785ddecc617b3ba6a40a0c61b7b8",
"ran_at": "2026-07-20T15:59:30Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/thoughtbot/bourbon",
"host": "github.com",
"name": "bourbon",
"owner": "thoughtbot"
},
"metrics": {
"overall": {
"key": "overall",
"band": "critical",
"name": "Overall health",
"note": "Abandonment Policy applies a 40% multiplier to weighted overall health and gives it a ceiling of 29.",
"notes": [
{
"code": "abandonment_overall_adjustment",
"params": {
"cap": 29,
"pct": 40
}
}
],
"value": 24,
"inputs": {
"security": 55,
"vitality": 18,
"community": 93,
"governance": 76,
"engineering": 55,
"abandonment_cap": 29,
"abandonment_state": "declared",
"abandonment_multiplier": 40,
"weighted_overall_before_abandonment": 59,
"overall_after_abandonment_multiplier": 24
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "critical",
"name": "Vitality",
"value": 18,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "critical",
"name": "Development activity",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"commits_last_year": 0,
"human_commit_share": null,
"days_since_last_push": 674,
"active_weeks_last_year": 0
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 674 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "push_recency",
"params": {
"days": 674
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "0/52 weeks with commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 0
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "0 commits in the last year",
"points": 0,
"status": "missed",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 0
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project is archived",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "at_risk",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"releases_count": 55,
"latest_release_tag": "v7.3.0",
"releases_from_tags": false,
"days_since_latest_release": 1273,
"mean_days_between_releases": 235.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "55 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 55
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 1273 days ago",
"points": 0,
"status": "missed",
"details": [
{
"code": "release_recency",
"params": {
"days": 1273
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~235.9 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 235.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "at_risk",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"cap": 29,
"state": "declared",
"guards": [],
"signals": [],
"red_flag": true,
"multiplier_pct": 40,
"declared_reason": "archived",
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "the repository is archived on GitHub",
"points": 40,
"status": "partial",
"details": [
{
"code": "abandonment_archived",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "excellent",
"name": "Community & Adoption",
"value": 93,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"forks": 858,
"stars": 9008,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "9,008 stars",
"points": 60,
"status": "met",
"details": [
{
"code": "stars",
"params": {
"count": 9008
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "858 forks",
"points": 24.4,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 858
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": true,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 7.2,
"status": "met",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "excellent",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 97,
"inputs": {
"packages": [
"bourbon",
"bourbon"
],
"dependents": null,
"ecosystems": "npm, rubygems",
"total_downloads": 28511050,
"monthly_downloads": 632005
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "632,005 downloads/month across npm, rubygems",
"points": 77.3,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 632005,
"ecosystems": "npm, rubygems"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 76,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"bus_factor": 4,
"contributors_sampled": 100,
"top_contributor_share": 0.446
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "4 contributor(s) cover half of all commits",
"points": 43.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 4
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 45% of commits",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 45
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "100 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 100
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 31 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"merged_prs": 335,
"open_issues": 0,
"closed_issues": 568,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 228
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "335/563 decided PRs merged",
"points": 22.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 335,
"decided": 563
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 12/29 approved changesets -- score normalized to 4",
"points": 6,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"followers": 890,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "thoughtbot",
"public_repos": 469,
"account_age_days": 6674
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "890 followers of thoughtbot",
"points": 21.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 890,
"login": "thoughtbot"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "469 public repos, account ~18 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 469
}
},
{
"code": "account_age_years",
"params": {
"years": 18
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "moderate",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"packages": [
"bourbon",
"bourbon"
],
"ecosystems": "npm, rubygems",
"any_deprecated": false,
"min_days_since_publish": 1273
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on npm, rubygems",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "npm, rubygems"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 1273 days ago",
"points": 4,
"status": "partial",
"details": [
{
"code": "publish_recency",
"params": {
"days": 1273
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "91 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 91
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 55,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 19 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"sass",
"bourbon-family",
"css",
"scss",
"bourbon",
"sass-mixins",
"sass-library",
"sass-functions"
],
"has_wiki": false,
"homepage": "https://www.bourbon.io/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.bourbon.io/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "8 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 8
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 55,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 19 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 12/29 approved changesets -- score normalized to 4",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 31 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project is archived",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "69 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 612 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 612
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 96,
"affected_packages": 50,
"assessed_packages": 612,
"unassessed_packages": 0,
"affected_by_severity": "critical 6, high 24, moderate 17, low 3",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 612,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 15
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "critical",
"name": "AI Readiness",
"value": 28,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": "Excluded from scoring (no data or not applicable): Legible commit history. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"legible_commit_history"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"has_llms_txt": false,
"legible_history_share": null,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): Demonstrated agent practice, Automated maintenance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"demonstrated_agent_practice",
"automated_maintenance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": null,
"toolchain_manifests": [],
"dependency_bot_commit_share": null
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Ruby",
"largest_source_bytes": 1919,
"source_files_sampled": 53,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Ruby without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Ruby"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/53 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 53,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-20T15:59:56.530570Z",
"schema_version": "0.16.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/thoughtbot/bourbon.svg",
"full_name": "thoughtbot/bourbon",
"license_state": "standard",
"license_spdx": "MIT"
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.16.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — RubyGems, npm.