Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"arduino",
"linter",
"continuous-integration",
"ci",
"github-actions"
],
"is_fork": false,
"size_kb": 4587,
"has_wiki": false,
"homepage": null,
"languages": {
"TypeScript": 13621
},
"pushed_at": "2026-07-22T01:02:42Z",
"created_at": "2020-12-07T10:53:28Z",
"owner_type": "Organization",
"updated_at": "2026-07-15T01:14:38Z",
"description": "GitHub Actions action to check Arduino projects for problems",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://www.arduino.cc",
"name": "Arduino",
"type": "Organization",
"login": "arduino",
"company": null,
"location": null,
"followers": 5867,
"avatar_url": "https://avatars.githubusercontent.com/u/379109?v=4",
"created_at": "2010-08-28T16:37:04Z",
"is_verified": null,
"public_repos": 278,
"account_age_days": 5806
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2026-07-01T17:41:08Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2024-10-08T07:05:00Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2022-11-02T06:55:12Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2022-03-22T10:10:09Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2021-01-12T16:35:37Z"
}
],
"recent_commits": [
{
"oid": "726d8d2e228e3e42cf99cab81e557f71d0e4b3eb",
"body": "…s/setup-node-7\n\nBump actions/setup-node from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #694 from arduino/dependabot/github_actions/action…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-15T01:14:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb0fc7c46ee3b4b0242a54a49ceb91fbe6020595",
"body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/setup-node from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-15T01:02:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c79f936b11ab5180a6fe16a3c3fb2c3f57055c2b",
"body": "…-3.9.5\n\nBump prettier from 3.9.4 to 3.9.5",
"is_bot": false,
"headline": "Merge pull request #693 from arduino/dependabot/npm_and_yarn/prettier…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-10T23:30:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cce47b06a01f1aca52d5bfb471edcd9f235380b",
"body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.9.4 to 3.9.5.\n- [Release notes](https://github.com/prettier/prettier/releases)\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prettier/prettier/compare/3.9.4...3.9.5)\n\n---\nupdated\n[…]\nncies:\n- dependency-name: prettier\n dependency-version: 3.9.5\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump prettier from 3.9.4 to 3.9.5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T01:02:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b1ac76a030792b205419d4f9b08aaaa7531a2716",
"body": "…de-24.13.3\n\nBump @types/node from 24.13.2 to 24.13.3",
"is_bot": false,
"headline": "Merge pull request #692 from arduino/dependabot/npm_and_yarn/types/no…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-09T02:32:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03b5e54edb17d08e41ab23810e53ae88d0ef4efb",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.13.2 to 24.13.3.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-de\n[…]\n- dependency-name: \"@types/node\"\n dependency-version: 24.13.3\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @types/node from 24.13.2 to 24.13.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-09T01:03:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b8f7b7987ec1ee98b5165838feb17f2a0190a0f",
"body": "Update major version ref in readme snippets",
"is_bot": false,
"headline": "Merge pull request #690 from per1234/update-refs",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-01T17:47:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c43ce115434b7fd7553980a7f4a64b02d935c7c",
"body": "Following the 3.0.0 release of the action, the current major version ref is now v3. The action usage example snippets in\nthe project readme are hereby updated to demonstrate the use of that ref.",
"is_bot": false,
"headline": "Update major version ref in readme snippets",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-07-01T17:44:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a3603836c75e41753e531167395edeb90ba5dae",
"body": "…-3.9.4\n\nBump prettier from 3.9.3 to 3.9.4",
"is_bot": false,
"headline": "Merge pull request #689 from arduino/dependabot/npm_and_yarn/prettier…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-01T14:18:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8350fe3dd8f9fab22ad08ea55bb19e8e6b7ea94",
"body": "…o/setup-task-3\n\nBump arduino/setup-task from 2 to 3",
"is_bot": false,
"headline": "Merge pull request #688 from arduino/dependabot/github_actions/arduin…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-01T14:18:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f66809490dbe1952a85d3c428ecd99935af4b244",
"body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.9.3 to 3.9.4.\n- [Release notes](https://github.com/prettier/prettier/releases)\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prettier/prettier/compare/3.9.3...3.9.4)\n\n---\nupdated\n[…]\nncies:\n- dependency-name: prettier\n dependency-version: 3.9.4\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump prettier from 3.9.3 to 3.9.4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T01:02:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c521ec4eafffa516f477a5e4279fb62fa6076136",
"body": "Bumps [arduino/setup-task](https://github.com/arduino/setup-task) from 2 to 3.\n- [Release notes](https://github.com/arduino/setup-task/releases)\n- [Commits](https://github.com/arduino/setup-task/compare/v2...v3)\n\n---\nupdated-dependencies:\n- dependency-name: arduino/setup-task\n dependency-version: '3'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump arduino/setup-task from 2 to 3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T01:02:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a049a76cdd2f5eb00aefc82b7f7616ce03b922cb",
"body": "…tool-cache-4.0.0\n\nBump @actions/tool-cache from 3.0.1 to 4.0.0",
"is_bot": false,
"headline": "Merge pull request #612 from arduino/dependabot/npm_and_yarn/actions/…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-01T01:02:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cca245b01334656dff60210c3658bf81fd405b2",
"body": null,
"is_bot": false,
"headline": "Update dependency license metadata cache for `@actions/tool-cache` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-07-01T00:59:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "604a2271dc8e3380dd48bd7ecafc2b09f07d298c",
"body": "GitHub downloads each action run in a workflow during runtime and executes it as a complete package of code before you\ncan use workflow commands like run to interact with the runner machine. This means that we must provide all JavaScript\npackage dependencies as part of the distributed action in orde\n[…]\n action from the tip of the\n`main` branch to be used by the workflow run).\n\nThe update of the package dependency results in a change to the packaged code, so the packaging is here updated\naccordingly.",
"is_bot": false,
"headline": "Repackage action following `@actions/tool-cache` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-07-01T00:58:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1bcb55cd20bb20e08cec7dc0e875599cc22fb618",
"body": "Bumps [@actions/tool-cache](https://github.com/actions/toolkit/tree/HEAD/packages/tool-cache) from 3.0.1 to 4.0.0.\n- [Changelog](https://github.com/actions/toolkit/blob/main/packages/tool-cache/RELEASES.md)\n- [Commits](https://github.com/actions/toolkit/commits/@actions/cache@4.0.0/packages/tool-cac\n[…]\nendency-name: \"@actions/tool-cache\"\n dependency-version: 4.0.0\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @actions/tool-cache from 3.0.1 to 4.0.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T00:54:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fc9f51266522dbb26504968c562cbed36a32932c",
"body": "…io-3.0.2\n\nBump @actions/io from 2.0.0 to 3.0.2",
"is_bot": false,
"headline": "Merge pull request #610 from arduino/dependabot/npm_and_yarn/actions/…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-01T00:53:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "314694912f2ff4ceade36b93a6be4092d8ad34f1",
"body": "GitHub downloads each action run in a workflow during runtime and executes it as a complete package of code before you\ncan use workflow commands like run to interact with the runner machine. This means that we must provide all JavaScript\npackage dependencies as part of the distributed action in orde\n[…]\n action from the tip of the\n`main` branch to be used by the workflow run).\n\nThe update of the package dependency results in a change to the packaged code, so the packaging is here updated\naccordingly.",
"is_bot": false,
"headline": "Repackage action following `@actions/io` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-07-01T00:48:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ef63f8682ccabd26aeae5c60ca6cd1dfefe26b61",
"body": "Bumps [@actions/io](https://github.com/actions/toolkit/tree/HEAD/packages/io) from 2.0.0 to 3.0.2.\n- [Changelog](https://github.com/actions/toolkit/blob/main/packages/io/RELEASES.md)\n- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/io)\n\n---\nupdated-dependencies:\n- dependency-name: \"@actions/io\"\n dependency-version: 3.0.2\n dependency-type: direct:development\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @actions/io from 2.0.0 to 3.0.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T00:47:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1372cd7d8089068c3bc78f994168845f364eb547",
"body": "…core-3.0.1\n\nBump @actions/core from 2.0.3 to 3.0.1",
"is_bot": false,
"headline": "Merge pull request #648 from arduino/dependabot/npm_and_yarn/actions/…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-01T00:46:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0315441e5522b628b3556ce1052b10149b259869",
"body": null,
"is_bot": false,
"headline": "Update dependency license metadata cache for `@actions/core` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-07-01T00:42:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea03293c21817c94b6ce4659e1fd93b3aedb0295",
"body": "GitHub downloads each action run in a workflow during runtime and executes it as a complete package of code before you\ncan use workflow commands like run to interact with the runner machine. This means that we must provide all JavaScript\npackage dependencies as part of the distributed action in orde\n[…]\n action from the tip of the\n`main` branch to be used by the workflow run).\n\nThe update of the package dependency results in a change to the packaged code, so the packaging is here updated\naccordingly.",
"is_bot": false,
"headline": "Repackage action following `@actions/core` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-07-01T00:41:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5ba9ee7ad654ac3a178521746a061b87260d57b5",
"body": "Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 2.0.3 to 3.0.1.\n- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md)\n- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core)\n\n---\nupdated-dependencies:\n- dependency-name: \"@actions/core\"\n dependency-version: 3.0.1\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @actions/core from 2.0.3 to 3.0.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T00:39:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4823f71a32a2f080def6540baf8f23b38fc5b61",
"body": "Convert project to ECMAScript module format",
"is_bot": false,
"headline": "Merge pull request #687 from per1234/esm",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-07-01T00:37:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a94f852c7d81aa5f4232f8256699ea3dec1275ae",
"body": null,
"is_bot": false,
"headline": "Update dependency license metadata cache for `@actions/http-client` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-07-01T00:33:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5878f61ae5377c6244d2b1156ee9967c1bd544c",
"body": "GitHub downloads each action run in a workflow during runtime and executes it as a complete package of code before you\ncan use workflow commands like run to interact with the runner machine. This means that we must provide all JavaScript\npackage dependencies as part of the distributed action in orde\n[…]\n action from the tip of the\n`main` branch to be used by the workflow run).\n\nThe update of the package dependency results in a change to the packaged code, so the packaging is here updated\naccordingly.",
"is_bot": false,
"headline": "Repackage action following `@actions/http-client` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-07-01T00:33:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "711526cd420f7e0a42c90b51d4df70debee76b6b",
"body": "Bumps [@actions/http-client](https://github.com/actions/toolkit/tree/HEAD/packages/http-client) from 3.0.2 to 4.0.1.\n- [Changelog](https://github.com/actions/toolkit/blob/main/packages/http-client/RELEASES.md)\n- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/http-client)\n\n---\nupd\n[…]\nndency-name: \"@actions/http-client\"\n dependency-version: 4.0.1\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @actions/http-client from 3.0.2 to 4.0.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T00:33:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3f47152786cf090b13f4328f7269d68be5b9fca",
"body": "The switch from CommonJS to ECMAScript format is required in order to achieve compatibility between the ncc compiler\ntool and modern versions of the GitHub Actions Toolkit packages (which were converted to ECMAScript format).",
"is_bot": false,
"headline": "Convert project to ECMAScript module format",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-07-01T00:33:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "871c56a6ab37f1c80befef1023278671c89ababc",
"body": "…cc-0.44.1\n\nBump @vercel/ncc from 0.44.0 to 0.44.1",
"is_bot": false,
"headline": "Merge pull request #686 from arduino/dependabot/npm_and_yarn/vercel/n…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-30T01:41:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "631bf3ca993d2a1ec8aefc47ff1825575c7d8e49",
"body": "Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.44.0 to 0.44.1.\n- [Release notes](https://github.com/vercel/ncc/releases)\n- [Commits](https://github.com/vercel/ncc/compare/0.44.0...0.44.1)\n\n---\nupdated-dependencies:\n- dependency-name: \"@vercel/ncc\"\n dependency-version: 0.44.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @vercel/ncc from 0.44.0 to 0.44.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-30T01:38:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dca9d376ccbf16b9c8b1525c7906b76a8f628cd",
"body": "…-3.9.3\n\nBump prettier from 3.9.1 to 3.9.3",
"is_bot": false,
"headline": "Merge pull request #685 from arduino/dependabot/npm_and_yarn/prettier…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-30T01:36:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6550929def34a18bd5521b5664ac9eb3cd9d0e2",
"body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.9.1 to 3.9.3.\n- [Release notes](https://github.com/prettier/prettier/releases)\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prettier/prettier/compare/3.9.1...3.9.3)\n\n---\nupdated\n[…]\nncies:\n- dependency-name: prettier\n dependency-version: 3.9.3\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump prettier from 3.9.1 to 3.9.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-30T01:02:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9d6b89615ef3bd032a371351a583d2538adbfa13",
"body": "…-3.9.1\n\nBump prettier from 3.8.4 to 3.9.1",
"is_bot": false,
"headline": "Merge pull request #684 from arduino/dependabot/npm_and_yarn/prettier…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-29T09:13:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f639335012ad7e764b382a83ce94e0ef79cecb64",
"body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.8.4 to 3.9.1.\n- [Release notes](https://github.com/prettier/prettier/releases)\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prettier/prettier/compare/3.8.4...3.9.1)\n\n---\nupdated\n[…]\nncies:\n- dependency-name: prettier\n dependency-version: 3.9.1\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump prettier from 3.8.4 to 3.9.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-29T01:02:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db69d5a7da0ff95038610921bd2ceaccc4ea5ee5",
"body": "…cc-0.44.0\n\nBump @vercel/ncc from 0.38.4 to 0.44.0",
"is_bot": false,
"headline": "Merge pull request #675 from arduino/dependabot/npm_and_yarn/vercel/n…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-24T13:19:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd5861553a8c01355ef72ad5ca1601f0e6784de6",
"body": "Bumps [@vercel/ncc](https://github.com/vercel/ncc) from 0.38.4 to 0.44.0.\n- [Release notes](https://github.com/vercel/ncc/releases)\n- [Commits](https://github.com/vercel/ncc/compare/0.38.4...0.44.0)\n\n---\nupdated-dependencies:\n- dependency-name: \"@vercel/ncc\"\n dependency-version: 0.44.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @vercel/ncc from 0.38.4 to 0.44.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T12:56:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15df1aa2c462ceb0555a77f755c7c827f2e8a5b7",
"body": "…-3.8.4\n\nBump prettier from 3.8.3 to 3.8.4",
"is_bot": false,
"headline": "Merge pull request #676 from arduino/dependabot/npm_and_yarn/prettier…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-24T12:45:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76ec86012831bd68fef0cedef865dbe135a9cc74",
"body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.8.3 to 3.8.4.\n- [Release notes](https://github.com/prettier/prettier/releases)\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prettier/prettier/compare/3.8.3...3.8.4)\n\n---\nupdated\n[…]\nncies:\n- dependency-name: prettier\n dependency-version: 3.8.4\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump prettier from 3.8.3 to 3.8.4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T12:42:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ce73817fc46a3c89e56aaad3ebb40d1d7d0dfc59",
"body": "…de-24.13.2\n\nBump @types/node from 24.13.1 to 24.13.2",
"is_bot": false,
"headline": "Merge pull request #677 from arduino/dependabot/npm_and_yarn/types/no…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-24T12:41:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4a349f588901b0d7fcfc516dfcb3830268c080b",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.13.1 to 24.13.2.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-de\n[…]\n- dependency-name: \"@types/node\"\n dependency-version: 24.13.2\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @types/node from 24.13.1 to 24.13.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T12:38:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc62a589416d359f5743adef7520f28025aff76e",
"body": "….8.5\n\nBump semver from 7.8.2 to 7.8.5",
"is_bot": false,
"headline": "Merge pull request #680 from arduino/dependabot/npm_and_yarn/semver-7…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-24T12:36:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26e191a7c56f00ba1b8f44a8aa2fd9583bfa926e",
"body": null,
"is_bot": false,
"headline": "Update dependency license metadata cache for `semver` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-06-24T12:31:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a577fc30cd91baa6f6c0e832b985abc1a8b20e5a",
"body": "GitHub downloads each action run in a workflow during runtime and executes it as a complete package of code before you\ncan use workflow commands like run to interact with the runner machine. This means that we must provide all JavaScript\npackage dependencies as part of the distributed action in orde\n[…]\n action from the tip of the\n`main` branch to be used by the workflow run).\n\nThe update of the package dependency results in a change to the packaged code, so the packaging is here updated\naccordingly.",
"is_bot": false,
"headline": "Repackage action following `semver` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-06-24T12:31:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c8be8b8814e367dc52fcd4f46c4c058f38ccd13b",
"body": "Bumps [semver](https://github.com/npm/node-semver) from 7.8.2 to 7.8.5.\n- [Release notes](https://github.com/npm/node-semver/releases)\n- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/npm/node-semver/compare/v7.8.2...v7.8.5)\n\n---\nupdated-dependencies:\n- dependency-name: semver\n dependency-version: 7.8.5\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump semver from 7.8.2 to 7.8.5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T12:24:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8104493347f3b0a445065448b410e8a82299e7ba",
"body": "Bump msgpack from 1.1.0 to 1.2.1",
"is_bot": false,
"headline": "Merge pull request #681 from arduino/dependabot/pip/msgpack-1.2.1",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-24T12:23:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd179dd4ca8fcc2f68d7520f6747695eae021f81",
"body": "….27.0\n\nBump undici from 6.24.1 to 6.27.0",
"is_bot": false,
"headline": "Merge pull request #682 from arduino/dependabot/npm_and_yarn/undici-6…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-24T12:20:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b7a1a49dd208d41a400e926928a2126f41dc266",
"body": null,
"is_bot": false,
"headline": "Update dependency license metadata cache for `undici` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-06-24T12:10:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a495373e22296a6f288228eeb4a2a49417f34a9",
"body": "Bumps [undici](https://github.com/nodejs/undici) from 6.24.1 to 6.27.0.\n- [Release notes](https://github.com/nodejs/undici/releases)\n- [Commits](https://github.com/nodejs/undici/compare/v6.24.1...v6.27.0)\n\n---\nupdated-dependencies:\n- dependency-name: undici\n dependency-version: 6.27.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump undici from 6.24.1 to 6.27.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T21:50:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec3fe73e4da25bccecd42ef809117206ac52a836",
"body": "Bumps [msgpack](https://github.com/msgpack/msgpack-python) from 1.1.0 to 1.2.1.\n- [Release notes](https://github.com/msgpack/msgpack-python/releases)\n- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/msgpack/msgpack-python/compare/v1.1.0...v1.2.1)\n\n---\nupdated-dependencies:\n- dependency-name: msgpack\n dependency-version: 1.2.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump msgpack from 1.1.0 to 1.2.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T21:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f9e845c2b7ea3a8cdbb0f484b2d907cff21cd60",
"body": "Bump cryptography from 46.0.7 to 48.0.1",
"is_bot": false,
"headline": "Merge pull request #679 from arduino/dependabot/pip/cryptography-48.0.1",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-19T01:09:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f33a86c0a28f0ea49f6ac1d658ccd63fedaa3f7",
"body": "Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.7 to 48.0.1.\n- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)\n- [Commits](https://github.com/pyca/cryptography/compare/46.0.7...48.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: cryptography\n dependency-version: 48.0.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump cryptography from 46.0.7 to 48.0.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T01:06:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82ebbe1d89d732017a95ac31f2f50678f89e0f87",
"body": "…s/checkout-7\n\nBump actions/checkout from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #678 from arduino/dependabot/github_actions/action…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-19T01:04:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dedd578726124953763ba547f19f264b6f4b6d2e",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-19T01:02:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "142463cdb54d28b66ae009ebdb1fd439dc7943c9",
"body": "…de-24.13.1\n\nBump @types/node from 24.13.0 to 24.13.1",
"is_bot": false,
"headline": "Merge pull request #671 from arduino/dependabot/npm_and_yarn/types/no…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-08T05:58:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d293d8a41c57ae0024bf8d8e5aa30645216adfd",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.13.0 to 24.13.1.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-de\n[…]\n- dependency-name: \"@types/node\"\n dependency-version: 24.13.1\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @types/node from 24.13.0 to 24.13.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-08T01:02:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "991abc3e60857423bf72bf40ce3d65b5a6f2f7ee",
"body": "Bump dulwich from 1.1.0 to 1.2.5",
"is_bot": false,
"headline": "Merge pull request #668 from arduino/dependabot/pip/dulwich-1.2.5",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-07T02:05:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f605b38acd4e45f935572ae2663b7198ffe087c",
"body": "Bumps [dulwich](https://github.com/dulwich/dulwich) from 1.1.0 to 1.2.5.\n- [Release notes](https://github.com/dulwich/dulwich/releases)\n- [Changelog](https://github.com/jelmer/dulwich/blob/main/NEWS)\n- [Commits](https://github.com/dulwich/dulwich/compare/dulwich-1.1.0...dulwich-1.2.5)\n\n---\nupdated-dependencies:\n- dependency-name: dulwich\n dependency-version: 1.2.5\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump dulwich from 1.1.0 to 1.2.5",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-07T01:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfda933d40ac4c7d0199e78c00aeb44860d50f54",
"body": "…de-24.13.0\n\nBump @types/node from 24.12.4 to 24.13.0",
"is_bot": false,
"headline": "Merge pull request #670 from arduino/dependabot/npm_and_yarn/types/no…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-05T01:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff36d7ab09a406f6e16c27d16ab31a0bf4605975",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 24.12.4 to 24.13.0.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-de\n[…]\n- dependency-name: \"@types/node\"\n dependency-version: 24.13.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @types/node from 24.12.4 to 24.13.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-05T01:54:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8b8bcfeafcc3290186641c4fed6f68f4009a417b",
"body": "….8.2\n\nBump semver from 7.8.0 to 7.8.2",
"is_bot": false,
"headline": "Merge pull request #669 from arduino/dependabot/npm_and_yarn/semver-7…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-05T01:53:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b27dac2f22eeffbba6e4483b832f658bb7118c8",
"body": null,
"is_bot": false,
"headline": "Update dependency license metadata cache for `semver` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-06-05T01:46:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f38b092d64338f18e2147caf2efb7b5aea7a587e",
"body": "GitHub downloads each action run in a workflow during runtime and executes it as a complete package of code before you\ncan use workflow commands like run to interact with the runner machine. This means that we must provide all JavaScript\npackage dependencies as part of the distributed action in orde\n[…]\n action from the tip of the\n`main` branch to be used by the workflow run).\n\nThe update of the package dependency results in a change to the packaged code, so the packaging is here updated\naccordingly.",
"is_bot": false,
"headline": "Repackage action following `semver` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-06-05T01:45:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4bd6ddfb7bd5d34607af954b39d3a8767e533148",
"body": "Bumps [semver](https://github.com/npm/node-semver) from 7.8.0 to 7.8.2.\n- [Release notes](https://github.com/npm/node-semver/releases)\n- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/npm/node-semver/compare/v7.8.0...v7.8.2)\n\n---\nupdated-dependencies:\n- dependency-name: semver\n dependency-version: 7.8.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump semver from 7.8.0 to 7.8.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-05T01:02:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4072615aff7aa62cd2a4e8abf3c3ac66b76b5879",
"body": "…29.4.11\n\nBump ts-jest from 29.4.10 to 29.4.11",
"is_bot": false,
"headline": "Merge pull request #664 from arduino/dependabot/npm_and_yarn/ts-jest-…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-03T11:48:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1075fdec4db5db9434245ca1e565f145e966af7c",
"body": "Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.4.10 to 29.4.11.\n- [Release notes](https://github.com/kulshekhar/ts-jest/releases)\n- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.10...v29.4.11)\n[…]\ncies:\n- dependency-name: ts-jest\n dependency-version: 29.4.11\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ts-jest from 29.4.10 to 29.4.11",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-03T09:53:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a93001d027e3f3d2711f3077a640d15f5c24aa86",
"body": "Bump action runtime from node20 to node24",
"is_bot": false,
"headline": "Merge pull request #667 from pfeerick/bump-node20-to-node24",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-06-03T08:00:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c348f257c94fa1f71a86c41fdcab21650b5f059e",
"body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump action runtime from node20 to node24",
"author_name": "Peter Feerick",
"author_login": "pfeerick",
"committed_at": "2026-05-28T03:27:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "be881df1483c795dd7fedca7f55e6c8d0f6fdb98",
"body": "Fix npm validate nodemon schema",
"is_bot": false,
"headline": "Merge pull request #665 from pfeerick/fix-npm-validate-nodemon-schema",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-28T00:37:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2babf5c44883b224261b69fe293e195d42d30b27",
"body": "Per review feedback",
"is_bot": false,
"headline": "fix: preserve the alphabetical ordering of referenced schemas",
"author_name": "Peter Feerick",
"author_login": "pfeerick",
"committed_at": "2026-05-27T22:52:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9871249548eace87f6e11b8ff04e03700cb60fc2",
"body": "Follow-up to the nodemon fix: quikrun.json was also recently added as\nan external $ref in the schemastore package.json schema.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Also add missing quikrun schema reference to npm:validate",
"author_name": "Peter Feerick",
"author_login": "pfeerick",
"committed_at": "2026-05-24T23:32:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0b889fcbeabbfa09fa2df221846edd70c0ffa08c",
"body": "The package.json schema at schemastore.org added a $ref to nodemon.json.\nAdd nodemon.json to the list of downloaded reference schemas passed to\najv validate so it can resolve the reference.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix npm:validate failing due to missing nodemon schema reference",
"author_name": "Peter Feerick",
"author_login": "pfeerick",
"committed_at": "2026-05-24T23:24:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d1c0a8e4e15cdf4cb9309bd763f18c40ed62adae",
"body": "…29.4.10\n\nBump ts-jest from 29.4.9 to 29.4.10",
"is_bot": false,
"headline": "Merge pull request #661 from arduino/dependabot/npm_and_yarn/ts-jest-…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-19T18:33:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "248bff81b6ce398cbfb1e0b62d8f1b92394dfde9",
"body": "Bump idna from 3.10 to 3.15",
"is_bot": false,
"headline": "Merge pull request #662 from arduino/dependabot/pip/idna-3.15",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-19T17:48:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d43a22651d2750adb2897b08f1157e1c06f9398",
"body": "Bumps [idna](https://github.com/kjd/idna) from 3.10 to 3.15.\n- [Release notes](https://github.com/kjd/idna/releases)\n- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)\n- [Commits](https://github.com/kjd/idna/compare/v3.10...v3.15)\n\n---\nupdated-dependencies:\n- dependency-name: idna\n dependency-version: '3.15'\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump idna from 3.10 to 3.15",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-19T17:37:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c23c6c950267430268e78ae6c5c99fd6e1b5094d",
"body": "Bumps [ts-jest](https://github.com/kulshekhar/ts-jest) from 29.4.9 to 29.4.10.\n- [Release notes](https://github.com/kulshekhar/ts-jest/releases)\n- [Changelog](https://github.com/kulshekhar/ts-jest/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/kulshekhar/ts-jest/compare/v29.4.9...v29.4.10)\n\n\n[…]\ncies:\n- dependency-name: ts-jest\n dependency-version: 29.4.10\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump ts-jest from 29.4.9 to 29.4.10",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-19T11:29:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a20fcdedec50e5031833b6dc10afde1129f715eb",
"body": "Bump jest from 30.4.0 to 30.4.2",
"is_bot": false,
"headline": "Merge pull request #657 from arduino/dependabot/npm_and_yarn/jest-30.4.2",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-12T09:10:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66cbe6db2bfdd6c134422be8dcd41e8d353c52ce",
"body": "Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) from 30.4.0 to 30.4.2.\n- [Release notes](https://github.com/jestjs/jest/releases)\n- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/jestjs/jest/commits/v30.4.2/packages/jest)\n\n---\nu\n[…]\nndencies:\n- dependency-name: jest\n dependency-version: 30.4.2\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump jest from 30.4.0 to 30.4.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T09:05:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7494159116aa6692a49a6ebbe5476626a4165c57",
"body": "….8.0\n\nBump semver from 7.7.4 to 7.8.0",
"is_bot": false,
"headline": "Merge pull request #658 from arduino/dependabot/npm_and_yarn/semver-7…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-12T09:03:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "172838bba03e2af8316981ca3368be7ffb141c23",
"body": null,
"is_bot": false,
"headline": "Update dependency license metadata cache for `semver` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-05-12T08:58:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb824e66593c95b8c9469e970b5e1c6503c680cb",
"body": "GitHub downloads each action run in a workflow during runtime and executes it as a complete package of code before you\ncan use workflow commands like run to interact with the runner machine. This means that we must provide all JavaScript\npackage dependencies as part of the distributed action in orde\n[…]\n action from the tip of the\n`main` branch to be used by the workflow run).\n\nThe update of the package dependency results in a change to the packaged code, so the packaging is here updated\naccordingly.",
"is_bot": false,
"headline": "Repackage action following `semver` bump",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-05-12T08:58:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d13804f097bb3ece21466cb37a3e20e17756d2e",
"body": "Bumps [semver](https://github.com/npm/node-semver) from 7.7.4 to 7.8.0.\n- [Release notes](https://github.com/npm/node-semver/releases)\n- [Changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/npm/node-semver/compare/v7.7.4...v7.8.0)\n\n---\nupdated-dependencies:\n- dependency-name: semver\n dependency-version: 7.8.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump semver from 7.7.4 to 7.8.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T08:58:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "176daa787b4e6116ae28204c5f06854a6dac37c6",
"body": "Bump urllib3 from 2.6.3 to 2.7.0",
"is_bot": false,
"headline": "Merge pull request #659 from arduino/dependabot/pip/urllib3-2.7.0",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-12T08:43:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee2ccc8c42f26c484a6745f3ea2654fc47bd4bca",
"body": "Bumps [urllib3](https://github.com/urllib3/urllib3) from 2.6.3 to 2.7.0.\n- [Release notes](https://github.com/urllib3/urllib3/releases)\n- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)\n- [Commits](https://github.com/urllib3/urllib3/compare/2.6.3...2.7.0)\n\n---\nupdated-dependencies:\n- dependency-name: urllib3\n dependency-version: 2.7.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump urllib3 from 2.6.3 to 2.7.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T08:40:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd5d9cfa9940160e0a7fc65e3fa2a29ffcb31646",
"body": "…de-20.19.41\n\nBump @types/node from 20.19.40 to 20.19.41",
"is_bot": false,
"headline": "Merge pull request #660 from arduino/dependabot/npm_and_yarn/types/no…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-12T07:42:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c7b850e046363f3253b14500537a8daa3eb93e4",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.19.40 to 20.19.41.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-\n[…]\n dependency-name: \"@types/node\"\n dependency-version: 20.19.41\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @types/node from 20.19.40 to 20.19.41",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-12T06:29:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8d7f2564d993c31dfa58f0a19a5e02afb65db3c8",
"body": "…-3.1.2\n\nBump fast-uri from 3.0.2 to 3.1.2",
"is_bot": false,
"headline": "Merge pull request #655 from arduino/dependabot/npm_and_yarn/fast-uri…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-08T21:18:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42d226ba78f2f028c145a564edbbafcf8452fa68",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.0.2 to 3.1.2.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.0.2...v3.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump fast-uri from 3.0.2 to 3.1.2",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T21:03:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a11037a45b9c0669e1734f733001565a61478894",
"body": "…cus-30.4.0\n\nBump jest-circus from 30.4.0 to 30.4.1",
"is_bot": false,
"headline": "Merge pull request #653 from arduino/dependabot/npm_and_yarn/jest-cir…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-08T20:06:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df82a1a91d4365c561b7f3a1d05f0db47b277c25",
"body": "Bumps [jest-circus](https://github.com/jestjs/jest/tree/HEAD/packages/jest-circus) from 30.4.0 to 30.4.1.\n- [Release notes](https://github.com/jestjs/jest/releases)\n- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/jestjs/jest/commits/v30.4.1/package\n[…]\ns:\n- dependency-name: jest-circus\n dependency-version: 30.4.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump jest-circus from 30.4.0 to 30.4.1",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T19:49:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d9e329224c49d3bac97eab6105498cecc7e0b2e",
"body": "Bump jest from 30.3.0 to 30.4.0",
"is_bot": false,
"headline": "Merge pull request #654 from arduino/dependabot/npm_and_yarn/jest-30.4.0",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-08T19:48:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3c7bd289660eacaf7b425b28932cec7e8515014",
"body": "Bumps [jest](https://github.com/jestjs/jest/tree/HEAD/packages/jest) from 30.3.0 to 30.4.0.\n- [Release notes](https://github.com/jestjs/jest/releases)\n- [Changelog](https://github.com/jestjs/jest/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/jestjs/jest/commits/v30.4.0/packages/jest)\n\n---\nu\n[…]\nndencies:\n- dependency-name: jest\n dependency-version: 30.4.0\n dependency-type: direct:development\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump jest from 30.3.0 to 30.4.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T05:20:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e758abef9c2c033a4d47532b436969ed2a29107b",
"body": "…de-20.19.40\n\nBump @types/node from 20.19.39 to 20.19.40",
"is_bot": false,
"headline": "Merge pull request #651 from arduino/dependabot/npm_and_yarn/types/no…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-05-08T05:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "755f90e3d78d237f9192a2c809fd21e46c992b1d",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 20.19.39 to 20.19.40.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-\n[…]\n dependency-name: \"@types/node\"\n dependency-version: 20.19.40\n dependency-type: direct:development\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump @types/node from 20.19.39 to 20.19.40",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-08T01:02:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "445c3c49ff231bdc494be487be4b46254d34cbb9",
"body": "Bump poetry from 2.3.3 to 2.3.4",
"is_bot": false,
"headline": "Merge pull request #649 from arduino/dependabot/pip/poetry-2.3.4",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-04-23T02:36:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b159c27ce5096da3105e11e12e9c41fb7963df6",
"body": "Bumps [poetry](https://github.com/python-poetry/poetry) from 2.3.3 to 2.3.4.\n- [Release notes](https://github.com/python-poetry/poetry/releases)\n- [Changelog](https://github.com/python-poetry/poetry/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/python-poetry/poetry/compare/2.3.3...2.3.4)\n\n---\nupdated-dependencies:\n- dependency-name: poetry\n dependency-version: 2.3.4\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump poetry from 2.3.3 to 2.3.4",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-23T02:33:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "471a1e9e81f2ebccd42267afde71e4f5c25b59a5",
"body": "Previously, it was necessary to add the `--no-update` flag to the `poetry lock` command in order to prevent it from\nupdating the dependency versions in the lockfile. The behavior of the command has now been changed to always behave that\nway, and so the `--no-update` flag was removed from the command.",
"is_bot": false,
"headline": "Update `poetry:sync` task for Poetry >=2.0.0 CLI",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-04-23T02:33:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43c75344d089aa54c3d4f07ea21b3ac4780f3998",
"body": "…pt-6.0.3\n\nBump typescript from 5.9.3 to 6.0.3",
"is_bot": false,
"headline": "Merge pull request #645 from arduino/dependabot/npm_and_yarn/typescri…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-04-17T01:19:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3ec5ca0d93fa5e10d174068a2d5740e28b79a7b",
"body": "Previously, the default TypeScript `types` configuration was used. Prior to version 6.0.0, TypeScript used a default\nvalue of `[\"*\"]` for this configuration key. The default has been changed to `[]`. This caused compilation to fail with\nerrors like `Cannot find namespace 'NodeJS'` / `Cannot find nam\n[…]\n TypeScript 6.x was used.\n\nThe breakage is solved by explicitly specifying the type declaration files upon which the codebase and unit tests depend\nvia the `types` key of the TypeScript configuration.",
"is_bot": false,
"headline": "Specify type declaration files in TypeScript configuration",
"author_name": "per1234",
"author_login": "per1234",
"committed_at": "2026-04-17T01:16:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "900c3fa6aeeed12d2afe8031504051575587189f",
"body": "Bumps [typescript](https://github.com/microsoft/TypeScript) from 5.9.3 to 6.0.3.\n- [Release notes](https://github.com/microsoft/TypeScript/releases)\n- [Commits](https://github.com/microsoft/TypeScript/compare/v5.9.3...v6.0.3)\n\n---\nupdated-dependencies:\n- dependency-name: typescript\n dependency-version: 6.0.3\n dependency-type: direct:development\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump typescript from 5.9.3 to 6.0.3",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-17T01:03:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b48851a7109fc52d6ef67add6f0ec29fcaf9c288",
"body": "…-3.8.3\n\nBump prettier from 3.8.2 to 3.8.3",
"is_bot": false,
"headline": "Merge pull request #644 from arduino/dependabot/npm_and_yarn/prettier…",
"author_name": "Per Tillisch",
"author_login": "per1234",
"committed_at": "2026-04-15T14:20:41Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 5,
"commits_last_year": 306,
"latest_release_at": "2026-07-01T17:41:08Z",
"latest_release_tag": "v3.0.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 45,
"days_since_latest_release": 20,
"mean_days_between_releases": 499
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 9,
"stars": 57,
"watchers": 8,
"fork_history": {
"days": [
{
"date": "2021-01-24",
"count": 1
},
{
"date": "2021-06-21",
"count": 1
},
{
"date": "2021-07-11",
"count": 1
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-10-19",
"count": 1
},
{
"date": "2024-02-09",
"count": 1
},
{
"date": "2024-05-16",
"count": 1
},
{
"date": "2024-07-10",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
}
],
"complete": true,
"collected": 9,
"total_forks": 9
},
"star_history": {
"days": [
{
"date": "2021-01-12",
"count": 1
},
{
"date": "2021-01-13",
"count": 4
},
{
"date": "2021-01-14",
"count": 4
},
{
"date": "2021-01-16",
"count": 1
},
{
"date": "2021-01-24",
"count": 1
},
{
"date": "2021-02-02",
"count": 1
},
{
"date": "2021-06-17",
"count": 1
},
{
"date": "2021-07-21",
"count": 1
},
{
"date": "2021-08-04",
"count": 1
},
{
"date": "2021-09-02",
"count": 1
},
{
"date": "2021-09-03",
"count": 1
},
{
"date": "2021-12-19",
"count": 1
},
{
"date": "2022-02-10",
"count": 1
},
{
"date": "2022-02-21",
"count": 1
},
{
"date": "2022-05-08",
"count": 1
},
{
"date": "2022-06-14",
"count": 1
},
{
"date": "2022-07-25",
"count": 1
},
{
"date": "2022-12-21",
"count": 1
},
{
"date": "2022-12-22",
"count": 1
},
{
"date": "2022-12-23",
"count": 1
},
{
"date": "2023-01-12",
"count": 1
},
{
"date": "2023-02-01",
"count": 1
},
{
"date": "2023-04-11",
"count": 1
},
{
"date": "2023-04-15",
"count": 1
},
{
"date": "2023-05-10",
"count": 1
},
{
"date": "2023-06-06",
"count": 1
},
{
"date": "2023-08-01",
"count": 1
},
{
"date": "2023-10-09",
"count": 1
},
{
"date": "2023-10-30",
"count": 1
},
{
"date": "2023-11-20",
"count": 1
},
{
"date": "2023-12-27",
"count": 1
},
{
"date": "2024-01-01",
"count": 1
},
{
"date": "2024-01-29",
"count": 2
},
{
"date": "2024-02-13",
"count": 1
},
{
"date": "2024-02-19",
"count": 1
},
{
"date": "2024-05-16",
"count": 1
},
{
"date": "2024-08-14",
"count": 1
},
{
"date": "2024-10-20",
"count": 1
},
{
"date": "2024-11-26",
"count": 1
},
{
"date": "2025-04-04",
"count": 1
},
{
"date": "2025-05-19",
"count": 1
},
{
"date": "2025-06-06",
"count": 1
},
{
"date": "2025-06-12",
"count": 1
},
{
"date": "2025-09-30",
"count": 1
},
{
"date": "2025-10-24",
"count": 1
},
{
"date": "2025-11-08",
"count": 1
},
{
"date": "2025-11-30",
"count": 1
},
{
"date": "2026-01-01",
"count": 1
},
{
"date": "2026-01-28",
"count": 1
},
{
"date": "2026-05-08",
"count": 1
}
],
"complete": true,
"collected": 57,
"total_stars": 57
},
"open_issues_and_prs": 9
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Taskfile.yml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 6451,
"source_files_sampled": 5,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"dist/package.json",
"package.json",
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.11",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp",
"GHSA-f886-m6hf-6m8v",
"GHSA-v6h2-p8h4-qcjw"
],
"fixed_version": "5.0.7",
"advisory_count": 3,
"oldest_advisory_days": 407
},
{
"name": "brace-expansion",
"direct": false,
"version": "2.1.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp"
],
"fixed_version": "5.0.7",
"advisory_count": 1,
"oldest_advisory_days": 1
},
{
"name": "fast-json-patch",
"direct": false,
"version": "2.2.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.3,
"advisory_ids": [
"GHSA-8gh8-hqwg-xf34"
],
"fixed_version": "3.1.1",
"advisory_count": 1,
"oldest_advisory_days": 1304
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-4c8g-83qw-93j6",
"GHSA-v2hh-gcrm-f6hx"
],
"fixed_version": "4.1.1",
"advisory_count": 2,
"oldest_advisory_days": 0
},
{
"name": "form-data",
"direct": false,
"version": "2.3.3",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-fjxv-7rqg-78g4",
"GHSA-hmw2-7cc7-3qxx"
],
"fixed_version": "4.0.6",
"advisory_count": 2,
"oldest_advisory_days": 365
},
{
"name": "js-yaml",
"direct": false,
"version": "3.14.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-52cp-r559-cp3m",
"GHSA-h67p-54hq-rp68"
],
"fixed_version": "4.3.0",
"advisory_count": 2,
"oldest_advisory_days": 36
},
{
"name": "uuid",
"direct": false,
"version": "3.4.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w5hq-g745-h8pq"
],
"fixed_version": "13.0.1",
"advisory_count": 1,
"oldest_advisory_days": 90
},
{
"name": "ajv",
"direct": false,
"version": "6.12.6",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-2g4f-4pwh-qvx6"
],
"fixed_version": "8.18.0",
"advisory_count": 1,
"oldest_advisory_days": 160
},
{
"name": "ajv",
"direct": false,
"version": "8.17.1",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-2g4f-4pwh-qvx6"
],
"fixed_version": "8.18.0",
"advisory_count": 1,
"oldest_advisory_days": 160
},
{
"name": "qs",
"direct": false,
"version": "6.5.3",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-6rw7-vpxm-498p"
],
"fixed_version": "6.14.1",
"advisory_count": 1,
"oldest_advisory_days": 203
},
{
"name": "request",
"direct": false,
"version": "2.88.2",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 6.1,
"advisory_ids": [
"GHSA-p8p7-x288-28g6"
],
"fixed_version": "3.0.0",
"advisory_count": 1,
"oldest_advisory_days": 1223
},
{
"name": "tough-cookie",
"direct": false,
"version": "2.5.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 6.5,
"advisory_ids": [
"GHSA-72xf-g2v4-qvf3"
],
"fixed_version": "4.1.3",
"advisory_count": 1,
"oldest_advisory_days": 1116
},
{
"name": "@babel/core",
"direct": false,
"version": "7.27.4",
"severity": "low",
"ecosystem": "npm",
"cvss_score": 3.2,
"advisory_ids": [
"GHSA-4x5r-pxfx-6jf8"
],
"fixed_version": "8.0.0-rc.6",
"advisory_count": 1,
"oldest_advisory_days": 36
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"low": 1,
"high": 7,
"moderate": 5
},
"advisory_count": 18,
"affected_count": 13,
"assessed_count": 512,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [
{
"name": "@actions/core",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.1"
},
{
"name": "@actions/http-client",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.1"
},
{
"name": "@actions/tool-cache",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "semver",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.8.5"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@actions/core",
"direct": true,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "@actions/http-client",
"direct": true,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "@actions/tool-cache",
"direct": true,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": true,
"version": "6.3.1",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": true,
"version": "7.8.5",
"ecosystem": "npm"
},
{
"name": "@actions/exec",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "@actions/io",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "@ampproject/remapping",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@babel/code-frame",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/compat-data",
"direct": false,
"version": "7.27.5",
"ecosystem": "npm"
},
{
"name": "@babel/core",
"direct": false,
"version": "7.27.4",
"ecosystem": "npm"
},
{
"name": "@babel/generator",
"direct": false,
"version": "7.27.5",
"ecosystem": "npm"
},
{
"name": "@babel/helper-compilation-targets",
"direct": false,
"version": "7.27.2",
"ecosystem": "npm"
},
{
"name": "@babel/helper-module-imports",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/helper-module-transforms",
"direct": false,
"version": "7.27.3",
"ecosystem": "npm"
},
{
"name": "@babel/helper-plugin-utils",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/helper-string-parser",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-identifier",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-option",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/helpers",
"direct": false,
"version": "7.27.6",
"ecosystem": "npm"
},
{
"name": "@babel/parser",
"direct": false,
"version": "7.27.5",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-async-generators",
"direct": false,
"version": "7.8.4",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-bigint",
"direct": false,
"version": "7.8.3",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-class-properties",
"direct": false,
"version": "7.12.13",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-class-static-block",
"direct": false,
"version": "7.14.5",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-import-attributes",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-import-meta",
"direct": false,
"version": "7.10.4",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-json-strings",
"direct": false,
"version": "7.8.3",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-jsx",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-logical-assignment-operators",
"direct": false,
"version": "7.10.4",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-nullish-coalescing-operator",
"direct": false,
"version": "7.8.3",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-numeric-separator",
"direct": false,
"version": "7.10.4",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-object-rest-spread",
"direct": false,
"version": "7.8.3",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-optional-catch-binding",
"direct": false,
"version": "7.8.3",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-optional-chaining",
"direct": false,
"version": "7.8.3",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-private-property-in-object",
"direct": false,
"version": "7.14.5",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-top-level-await",
"direct": false,
"version": "7.14.5",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-syntax-typescript",
"direct": false,
"version": "7.27.1",
"ecosystem": "npm"
},
{
"name": "@babel/template",
"direct": false,
"version": "7.27.2",
"ecosystem": "npm"
},
{
"name": "@babel/traverse",
"direct": false,
"version": "7.27.4",
"ecosystem": "npm"
},
{
"name": "@babel/types",
"direct": false,
"version": "7.28.4",
"ecosystem": "npm"
},
{
"name": "@bcoe/v8-coverage",
"direct": false,
"version": "0.2.3",
"ecosystem": "npm"
},
{
"name": "@emnapi/core",
"direct": false,
"version": "1.4.3",
"ecosystem": "npm"
},
{
"name": "@emnapi/runtime",
"direct": false,
"version": "1.4.3",
"ecosystem": "npm"
},
{
"name": "@emnapi/wasi-threads",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "@financial-times/origami-service-makefile",
"direct": false,
"version": "7.0.3",
"ecosystem": "npm"
},
{
"name": "@isaacs/cliui",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "@istanbuljs/load-nyc-config",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@istanbuljs/schema",
"direct": false,
"version": "0.1.3",
"ecosystem": "npm"
},
{
"name": "@jest/console",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/core",
"direct": false,
"version": "30.4.2",
"ecosystem": "npm"
},
{
"name": "@jest/diff-sequences",
"direct": false,
"version": "30.4.0",
"ecosystem": "npm"
},
{
"name": "@jest/environment",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/expect",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/expect-utils",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/fake-timers",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/get-type",
"direct": false,
"version": "30.1.0",
"ecosystem": "npm"
},
{
"name": "@jest/globals",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/pattern",
"direct": false,
"version": "30.4.0",
"ecosystem": "npm"
},
{
"name": "@jest/reporters",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/schemas",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/snapshot-utils",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/source-map",
"direct": false,
"version": "30.0.1",
"ecosystem": "npm"
},
{
"name": "@jest/test-result",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/test-sequencer",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/transform",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jest/types",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "@jridgewell/gen-mapping",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "@jridgewell/gen-mapping",
"direct": false,
"version": "0.3.8",
"ecosystem": "npm"
},
{
"name": "@jridgewell/resolve-uri",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "@jridgewell/set-array",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.4.14",
"ecosystem": "npm"
},
{
"name": "@jridgewell/trace-mapping",
"direct": false,
"version": "0.3.25",
"ecosystem": "npm"
},
{
"name": "@napi-rs/wasm-runtime",
"direct": false,
"version": "0.2.11",
"ecosystem": "npm"
},
{
"name": "@pkgjs/parseargs",
"direct": false,
"version": "0.11.0",
"ecosystem": "npm"
},
{
"name": "@pkgr/core",
"direct": false,
"version": "0.2.7",
"ecosystem": "npm"
},
{
"name": "@sinclair/typebox",
"direct": false,
"version": "0.34.49",
"ecosystem": "npm"
},
{
"name": "@sindresorhus/is",
"direct": false,
"version": "5.6.0",
"ecosystem": "npm"
},
{
"name": "@sinonjs/commons",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "@sinonjs/fake-timers",
"direct": false,
"version": "15.4.0",
"ecosystem": "npm"
},
{
"name": "@szmarczak/http-timer",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "@tybys/wasm-util",
"direct": false,
"version": "0.9.0",
"ecosystem": "npm"
},
{
"name": "@types/babel__core",
"direct": false,
"version": "7.20.5",
"ecosystem": "npm"
},
{
"name": "@types/babel__generator",
"direct": false,
"version": "7.27.0",
"ecosystem": "npm"
},
{
"name": "@types/babel__template",
"direct": false,
"version": "7.4.4",
"ecosystem": "npm"
},
{
"name": "@types/babel__traverse",
"direct": false,
"version": "7.28.0",
"ecosystem": "npm"
},
{
"name": "@types/http-cache-semantics",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "@types/istanbul-lib-coverage",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "@types/istanbul-lib-report",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "@types/istanbul-reports",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "@types/jest",
"direct": false,
"version": "30.0.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "24.13.3",
"ecosystem": "npm"
},
{
"name": "@types/semver",
"direct": false,
"version": "7.7.1",
"ecosystem": "npm"
},
{
"name": "@types/stack-utils",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "@types/yargs",
"direct": false,
"version": "17.0.33",
"ecosystem": "npm"
},
{
"name": "@types/yargs-parser",
"direct": false,
"version": "21.0.0",
"ecosystem": "npm"
},
{
"name": "@ungap/structured-clone",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-android-arm-eabi",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-android-arm64",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-darwin-arm64",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-darwin-x64",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-freebsd-x64",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-arm-gnueabihf",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-arm-musleabihf",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-arm64-gnu",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-arm64-musl",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-ppc64-gnu",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-riscv64-gnu",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-riscv64-musl",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-s390x-gnu",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-x64-gnu",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-linux-x64-musl",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-wasm32-wasi",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-win32-arm64-msvc",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-win32-ia32-msvc",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@unrs/resolver-binding-win32-x64-msvc",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@vercel/ncc",
"direct": false,
"version": "0.44.1",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "6.12.6",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.17.1",
"ecosystem": "npm"
},
{
"name": "ajv-cli",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-escapes",
"direct": false,
"version": "4.3.2",
"ecosystem": "npm"
},
{
"name": "ansi-red",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "6.1.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "6.2.1",
"ecosystem": "npm"
},
{
"name": "ansi-wrap",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "anymatch",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "argparse",
"direct": false,
"version": "1.0.10",
"ecosystem": "npm"
},
{
"name": "asn1",
"direct": false,
"version": "0.2.6",
"ecosystem": "npm"
},
{
"name": "assert-plus",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "asynckit",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "autolinker",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "aws-sign2",
"direct": false,
"version": "0.7.0",
"ecosystem": "npm"
},
{
"name": "aws4",
"direct": false,
"version": "1.13.2",
"ecosystem": "npm"
},
{
"name": "babel-jest",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "babel-plugin-istanbul",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "babel-plugin-jest-hoist",
"direct": false,
"version": "30.4.0",
"ecosystem": "npm"
},
{
"name": "babel-preset-current-node-syntax",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "babel-preset-jest",
"direct": false,
"version": "30.4.0",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "bcrypt-pbkdf",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "bluebird",
"direct": false,
"version": "3.7.2",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.11",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "browserslist",
"direct": false,
"version": "4.25.0",
"ecosystem": "npm"
},
{
"name": "bs-logger",
"direct": false,
"version": "0.2.6",
"ecosystem": "npm"
},
{
"name": "bser",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "buffer-from",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "cacheable-lookup",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "cacheable-request",
"direct": false,
"version": "10.2.14",
"ecosystem": "npm"
},
{
"name": "callsites",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "camelcase",
"direct": false,
"version": "5.3.1",
"ecosystem": "npm"
},
{
"name": "camelcase",
"direct": false,
"version": "6.3.0",
"ecosystem": "npm"
},
{
"name": "caniuse-lite",
"direct": false,
"version": "1.0.30001722",
"ecosystem": "npm"
},
{
"name": "caseless",
"direct": false,
"version": "0.12.0",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "char-regex",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "ci-info",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "cjs-module-lexer",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "co",
"direct": false,
"version": "4.6.0",
"ecosystem": "npm"
},
{
"name": "coffee-script",
"direct": false,
"version": "1.12.7",
"ecosystem": "npm"
},
{
"name": "collect-v8-coverage",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "combined-stream",
"direct": false,
"version": "1.0.8",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": false,
"version": "6.2.1",
"ecosystem": "npm"
},
{
"name": "concat-map",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "concat-stream",
"direct": false,
"version": "1.6.2",
"ecosystem": "npm"
},
{
"name": "concat-with-sourcemaps",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "convert-source-map",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "core-util-is",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "core-util-is",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "dashdash",
"direct": false,
"version": "1.14.1",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.3.3",
"ecosystem": "npm"
},
{
"name": "decompress-response",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "dedent",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "deep-extend",
"direct": false,
"version": "0.6.0",
"ecosystem": "npm"
},
{
"name": "deepmerge",
"direct": false,
"version": "4.3.1",
"ecosystem": "npm"
},
{
"name": "defer-to-connect",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "delayed-stream",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "detect-newline",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "diacritics-map",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "eastasianwidth",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "ecc-jsbn",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "electron-to-chromium",
"direct": false,
"version": "1.5.167",
"ecosystem": "npm"
},
{
"name": "emittery",
"direct": false,
"version": "0.13.1",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "9.2.2",
"ecosystem": "npm"
},
{
"name": "error-ex",
"direct": false,
"version": "1.3.4",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "esprima",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "execa",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "exit-x",
"direct": false,
"version": "0.2.2",
"ecosystem": "npm"
},
{
"name": "expand-range",
"direct": false,
"version": "1.8.2",
"ecosystem": "npm"
},
{
"name": "expect",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "extend",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "extend-shallow",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "extsprintf",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-json-patch",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "fast-json-stable-stringify",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "fb-watchman",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "2.2.4",
"ecosystem": "npm"
},
{
"name": "find-up",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "for-in",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "foreground-child",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "forever-agent",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "form-data",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "form-data-encoder",
"direct": false,
"version": "2.1.4",
"ecosystem": "npm"
},
{
"name": "fs.realpath",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "gensync",
"direct": false,
"version": "1.0.0-beta.2",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-package-type",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "getpass",
"direct": false,
"version": "0.1.7",
"ecosystem": "npm"
},
{
"name": "github-label-sync",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "10.5.0",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "7.1.6",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "11.12.0",
"ecosystem": "npm"
},
{
"name": "got",
"direct": false,
"version": "12.6.1",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.2.11",
"ecosystem": "npm"
},
{
"name": "gray-matter",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "gulp-header",
"direct": false,
"version": "1.8.12",
"ecosystem": "npm"
},
{
"name": "handlebars",
"direct": false,
"version": "4.7.9",
"ecosystem": "npm"
},
{
"name": "har-schema",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "har-validator",
"direct": false,
"version": "5.1.5",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "html-escaper",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "http-cache-semantics",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "http-signature",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "http2-wrapper",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "human-signals",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "import-local",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "imurmurhash",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "inflight",
"direct": false,
"version": "1.0.6",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "is",
"direct": false,
"version": "3.3.0",
"ecosystem": "npm"
},
{
"name": "is-arrayish",
"direct": false,
"version": "0.2.1",
"ecosystem": "npm"
},
{
"name": "is-buffer",
"direct": false,
"version": "1.1.6",
"ecosystem": "npm"
},
{
"name": "is-extendable",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "is-extendable",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-generator-fn",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "is-plain-object",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "is-stream",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "is-typedarray",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "isarray",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "isobject",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "isobject",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "isstream",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-coverage",
"direct": false,
"version": "3.2.2",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-instrument",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-report",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-source-maps",
"direct": false,
"version": "5.0.6",
"ecosystem": "npm"
},
{
"name": "istanbul-reports",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "jackspeak",
"direct": false,
"version": "3.4.3",
"ecosystem": "npm"
},
{
"name": "jest",
"direct": false,
"version": "30.4.2",
"ecosystem": "npm"
},
{
"name": "jest-changed-files",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-circus",
"direct": false,
"version": "30.4.2",
"ecosystem": "npm"
},
{
"name": "jest-cli",
"direct": false,
"version": "30.4.2",
"ecosystem": "npm"
},
{
"name": "jest-config",
"direct": false,
"version": "30.4.2",
"ecosystem": "npm"
},
{
"name": "jest-diff",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-docblock",
"direct": false,
"version": "30.4.0",
"ecosystem": "npm"
},
{
"name": "jest-each",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-environment-node",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-haste-map",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-leak-detector",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-matcher-utils",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-message-util",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-mock",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-pnp-resolver",
"direct": false,
"version": "1.2.3",
"ecosystem": "npm"
},
{
"name": "jest-regex-util",
"direct": false,
"version": "30.4.0",
"ecosystem": "npm"
},
{
"name": "jest-resolve",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-resolve-dependencies",
"direct": false,
"version": "30.4.2",
"ecosystem": "npm"
},
{
"name": "jest-runner",
"direct": false,
"version": "30.4.2",
"ecosystem": "npm"
},
{
"name": "jest-runtime",
"direct": false,
"version": "30.4.2",
"ecosystem": "npm"
},
{
"name": "jest-snapshot",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-util",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-validate",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-watcher",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "jest-worker",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "js-yaml",
"direct": false,
"version": "3.14.2",
"ecosystem": "npm"
},
{
"name": "jsbn",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "jsesc",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "json-buffer",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "json-parse-even-better-errors",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "json-schema",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "json-schema-migrate",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-stringify-safe",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "json5",
"direct": false,
"version": "2.2.3",
"ecosystem": "npm"
},
{
"name": "jsprim",
"direct": false,
"version": "1.4.2",
"ecosystem": "npm"
},
{
"name": "keyv",
"direct": false,
"version": "4.5.4",
"ecosystem": "npm"
},
{
"name": "kind-of",
"direct": false,
"version": "3.2.2",
"ecosystem": "npm"
},
{
"name": "kind-of",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "lazy-cache",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "leven",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "lines-and-columns",
"direct": false,
"version": "1.2.4",
"ecosystem": "npm"
},
{
"name": "list-item",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "locate-path",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "lodash._reinterpolate",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "lodash.memoize",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "lodash.template",
"direct": false,
"version": "4.18.1",
"ecosystem": "npm"
},
{
"name": "lodash.templatesettings",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "lowercase-keys",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "10.4.3",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "make-dir",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "make-error",
"direct": false,
"version": "1.3.6",
"ecosystem": "npm"
},
{
"name": "makeerror",
"direct": false,
"version": "1.0.12",
"ecosystem": "npm"
},
{
"name": "markdown-link",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "markdown-toc",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "math-random",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "merge-stream",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.52.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "2.1.35",
"ecosystem": "npm"
},
{
"name": "mimic-fn",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "mimic-response",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "mimic-response",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "3.1.5",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "9.0.9",
"ecosystem": "npm"
},
{
"name": "minimist",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "minipass",
"direct": false,
"version": "7.1.2",
"ecosystem": "npm"
},
{
"name": "mixin-deep",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "napi-postinstall",
"direct": false,
"version": "0.2.4",
"ecosystem": "npm"
},
{
"name": "natural-compare",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "neo-async",
"direct": false,
"version": "2.6.2",
"ecosystem": "npm"
},
{
"name": "nock",
"direct": false,
"version": "13.5.6",
"ecosystem": "npm"
},
{
"name": "node-int64",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "node-releases",
"direct": false,
"version": "2.0.19",
"ecosystem": "npm"
},
{
"name": "node.extend",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "normalize-path",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "normalize-url",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "npm-run-path",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "oauth-sign",
"direct": false,
"version": "0.9.0",
"ecosystem": "npm"
},
{
"name": "object.pick",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "octonode",
"direct": false,
"version": "0.10.2",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "onetime",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "p-cancelable",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "p-locate",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "p-try",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "package-json-from-dist",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "parse-json",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "path-exists",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "path-is-absolute",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-scurry",
"direct": false,
"version": "1.11.1",
"ecosystem": "npm"
},
{
"name": "performance-now",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "pirates",
"direct": false,
"version": "4.0.7",
"ecosystem": "npm"
},
{
"name": "pkg-dir",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "prettier",
"direct": false,
"version": "3.9.5",
"ecosystem": "npm"
},
{
"name": "pretty-format",
"direct": false,
"version": "30.4.1",
"ecosystem": "npm"
},
{
"name": "process-nextick-args",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "propagate",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "psl",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "punycode",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "pure-rand",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.5.3",
"ecosystem": "npm"
},
{
"name": "quick-lru",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "randomatic",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "randombytes",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "randomstring",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "react-is",
"direct": false,
"version": "18.3.1",
"ecosystem": "npm"
},
{
"name": "react-is",
"direct": false,
"version": "19.2.6",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "2.3.8",
"ecosystem": "npm"
},
{
"name": "remarkable",
"direct": false,
"version": "1.7.4",
"ecosystem": "npm"
},
{
"name": "repeat-element",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "repeat-string",
"direct": false,
"version": "1.6.1",
"ecosystem": "npm"
},
{
"name": "request",
"direct": false,
"version": "2.88.2",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "resolve-alpn",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "resolve-cwd",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "responselike",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "set-getter",
"direct": false,
"version": "0.1.1",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "slash",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "source-map-support",
"direct": false,
"version": "0.5.13",
"ecosystem": "npm"
},
{
"name": "sprintf-js",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "sshpk",
"direct": false,
"version": "1.18.0",
"ecosystem": "npm"
},
{
"name": "stack-utils",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "string-length",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "string_decoder",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "strip-bom",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "strip-color",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "strip-final-newline",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "8.1.1",
"ecosystem": "npm"
},
{
"name": "synckit",
"direct": false,
"version": "0.11.8",
"ecosystem": "npm"
},
{
"name": "test-exclude",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "through2",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "tmpl",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "to-object-path",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "toml",
"direct": false,
"version": "2.3.6",
"ecosystem": "npm"
},
{
"name": "tough-cookie",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "ts-jest",
"direct": false,
"version": "29.4.11",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "tunnel",
"direct": false,
"version": "0.0.6",
"ecosystem": "npm"
},
{
"name": "tunnel-agent",
"direct": false,
"version": "0.6.0",
"ecosystem": "npm"
},
{
"name": "tweetnacl",
"direct": false,
"version": "0.14.5",
"ecosystem": "npm"
},
{
"name": "type-detect",
"direct": false,
"version": "4.0.8",
"ecosystem": "npm"
},
{
"name": "type-fest",
"direct": false,
"version": "0.21.3",
"ecosystem": "npm"
},
{
"name": "type-fest",
"direct": false,
"version": "4.41.0",
"ecosystem": "npm"
},
{
"name": "typedarray",
"direct": false,
"version": "0.0.6",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "uglify-js",
"direct": false,
"version": "3.19.3",
"ecosystem": "npm"
},
{
"name": "undici",
"direct": false,
"version": "6.27.0",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "7.18.2",
"ecosystem": "npm"
},
{
"name": "unrs-resolver",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "update-browserslist-db",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "uri-js",
"direct": false,
"version": "4.4.1",
"ecosystem": "npm"
},
{
"name": "util-deprecate",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "uuid",
"direct": false,
"version": "3.4.0",
"ecosystem": "npm"
},
{
"name": "v8-to-istanbul",
"direct": false,
"version": "9.3.0",
"ecosystem": "npm"
},
{
"name": "verror",
"direct": false,
"version": "1.10.0",
"ecosystem": "npm"
},
{
"name": "walker",
"direct": false,
"version": "1.0.8",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "wordwrap",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "8.1.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "write-file-atomic",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "xtend",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "17.7.2",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "21.1.1",
"ecosystem": "npm"
},
{
"name": "yocto-queue",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "anyio",
"direct": false,
"version": "4.13.0",
"ecosystem": "pypi"
},
{
"name": "build",
"direct": false,
"version": "1.2.2.post1",
"ecosystem": "pypi"
},
{
"name": "cachecontrol",
"direct": false,
"version": "0.14.0",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2024.8.30",
"ecosystem": "pypi"
},
{
"name": "cffi",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "charset-normalizer",
"direct": false,
"version": "3.3.2",
"ecosystem": "pypi"
},
{
"name": "cleo",
"direct": false,
"version": "2.1.0",
"ecosystem": "pypi"
},
{
"name": "codespell",
"direct": false,
"version": "2.3.0",
"ecosystem": "pypi"
},
{
"name": "colorama",
"direct": false,
"version": "0.4.6",
"ecosystem": "pypi"
},
{
"name": "crashtest",
"direct": false,
"version": "0.4.1",
"ecosystem": "pypi"
},
{
"name": "cryptography",
"direct": false,
"version": "48.0.1",
"ecosystem": "pypi"
},
{
"name": "distlib",
"direct": false,
"version": "0.3.8",
"ecosystem": "pypi"
},
{
"name": "dulwich",
"direct": false,
"version": "1.2.5",
"ecosystem": "pypi"
},
{
"name": "fastjsonschema",
"direct": false,
"version": "2.20.0",
"ecosystem": "pypi"
},
{
"name": "filelock",
"direct": false,
"version": "3.20.3",
"ecosystem": "pypi"
},
{
"name": "findpython",
"direct": false,
"version": "0.7.1",
"ecosystem": "pypi"
},
{
"name": "h11",
"direct": false,
"version": "0.16.0",
"ecosystem": "pypi"
},
{
"name": "httpcore",
"direct": false,
"version": "1.0.9",
"ecosystem": "pypi"
},
{
"name": "httpx",
"direct": false,
"version": "0.28.1",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.15",
"ecosystem": "pypi"
},
{
"name": "installer",
"direct": false,
"version": "0.7.0",
"ecosystem": "pypi"
},
{
"name": "jaraco-classes",
"direct": false,
"version": "3.4.0",
"ecosystem": "pypi"
},
{
"name": "jaraco-context",
"direct": false,
"version": "6.1.2",
"ecosystem": "pypi"
},
{
"name": "jaraco-functools",
"direct": false,
"version": "4.4.0",
"ecosystem": "pypi"
},
{
"name": "jeepney",
"direct": false,
"version": "0.8.0",
"ecosystem": "pypi"
},
{
"name": "keyring",
"direct": false,
"version": "25.7.0",
"ecosystem": "pypi"
},
{
"name": "more-itertools",
"direct": false,
"version": "10.5.0",
"ecosystem": "pypi"
},
{
"name": "msgpack",
"direct": false,
"version": "1.2.1",
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "26.0",
"ecosystem": "pypi"
},
{
"name": "pbs-installer",
"direct": false,
"version": "2026.3.25",
"ecosystem": "pypi"
},
{
"name": "pkginfo",
"direct": false,
"version": "1.12.1.2",
"ecosystem": "pypi"
},
{
"name": "platformdirs",
"direct": false,
"version": "4.3.6",
"ecosystem": "pypi"
},
{
"name": "poetry",
"direct": false,
"version": "2.3.4",
"ecosystem": "pypi"
},
{
"name": "poetry-core",
"direct": false,
"version": "2.3.2",
"ecosystem": "pypi"
},
{
"name": "pycparser",
"direct": false,
"version": "2.22",
"ecosystem": "pypi"
},
{
"name": "pyproject-hooks",
"direct": false,
"version": "1.2.0",
"ecosystem": "pypi"
},
{
"name": "pywin32-ctypes",
"direct": false,
"version": "0.2.3",
"ecosystem": "pypi"
},
{
"name": "rapidfuzz",
"direct": false,
"version": "3.10.0",
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": false,
"version": "2.33.0",
"ecosystem": "pypi"
},
{
"name": "requests-toolbelt",
"direct": false,
"version": "1.0.0",
"ecosystem": "pypi"
},
{
"name": "secretstorage",
"direct": false,
"version": "3.3.3",
"ecosystem": "pypi"
},
{
"name": "shellingham",
"direct": false,
"version": "1.5.4",
"ecosystem": "pypi"
},
{
"name": "tomlkit",
"direct": false,
"version": "0.13.2",
"ecosystem": "pypi"
},
{
"name": "trove-classifiers",
"direct": false,
"version": "2024.9.12",
"ecosystem": "pypi"
},
{
"name": "typing-extensions",
"direct": false,
"version": "4.15.0",
"ecosystem": "pypi"
},
{
"name": "urllib3",
"direct": false,
"version": "2.7.0",
"ecosystem": "pypi"
},
{
"name": "virtualenv",
"direct": false,
"version": "20.36.1",
"ecosystem": "pypi"
},
{
"name": "xattr",
"direct": false,
"version": "1.1.0",
"ecosystem": "pypi"
},
{
"name": "zstandard",
"direct": false,
"version": "0.25.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 512,
"direct_count": 5,
"indirect_count": 507
}
},
"maintainership": {
"issues": {
"open_prs": 6,
"merged_prs": 610,
"open_issues": 3,
"closed_ratio": 0.7,
"closed_issues": 7,
"closed_unmerged_prs": 70
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "per1234",
"commits": 805,
"avatar_url": "https://avatars.githubusercontent.com/u/8572152?v=4"
},
{
"type": "User",
"login": "silvanocerza",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/3314350?v=4"
},
{
"type": "User",
"login": "pfeerick",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/5500713?v=4"
},
{
"type": "User",
"login": "peternewman",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/6216436?v=4"
},
{
"type": "User",
"login": "Rotzbua",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/7337347?v=4"
},
{
"type": "User",
"login": "jpconstantineau",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/1149816?v=4"
},
{
"type": "User",
"login": "alranel",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/594957?v=4"
},
{
"type": "User",
"login": "umbynos",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/34278123?v=4"
},
{
"type": "User",
"login": "fscherwi",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/9285971?v=4"
}
],
"contributors_sampled": 9,
"top_contributor_share": 0.969
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"check-license.yml",
"check-npm-dependencies-task.yml",
"check-npm-task.yml",
"check-packaging-ncc-typescript-npm.yml",
"check-prettier-formatting-task.yml",
"check-toc-task.yml",
"check-tsconfig-task.yml",
"integration.yml",
"spell-check-task.yml",
"sync-labels-npm.yml",
"test-javascript-jest-task.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json",
"poetry.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 8,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 4,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/2 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 7,
"reason": "SAST tool is not run on all commits -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "16 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "726d8d2e228e3e42cf99cab81e557f71d0e4b3eb",
"ran_at": "2026-07-22T03:18:37Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T01:03:00Z",
"oldest_open_prs": [
{
"number": 391,
"created_at": "2024-07-10T10:15:27Z",
"last_comment_at": "2026-05-25T00:08:43Z",
"last_comment_author": "pfeerick"
},
{
"number": 672,
"created_at": "2026-06-08T01:02:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 683,
"created_at": "2026-06-29T01:02:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 691,
"created_at": "2026-07-09T01:02:53Z",
"last_comment_at": "2026-07-09T03:20:16Z",
"last_comment_author": "per1234"
},
{
"number": 695,
"created_at": "2026-07-21T01:02:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 696,
"created_at": "2026-07-22T01:02:43Z",
"last_comment_at": "2026-07-22T01:06:23Z",
"last_comment_author": "codecov-commenter"
}
],
"last_merged_pr_at": "2026-07-15T01:14:34Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 2,
"created_at": "2021-01-12T19:19:48Z",
"last_comment_at": "2021-07-11T20:33:09Z",
"last_comment_author": "peternewman"
},
{
"number": 11,
"created_at": "2021-05-27T18:14:59Z",
"last_comment_at": "2021-05-27T18:45:13Z",
"last_comment_author": "RobTillaart"
},
{
"number": 327,
"created_at": "2023-12-07T09:40:09Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/arduino/arduino-lint-action",
"host": "github.com",
"name": "arduino-lint-action",
"owner": "arduino"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"security": 61,
"vitality": 87,
"community": 55,
"governance": 54,
"engineering": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 87,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 95,
"inputs": {
"commits_last_year": 306,
"human_commit_share": 0.63,
"days_since_last_push": 0,
"active_weeks_last_year": 45
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "45/52 weeks with commits",
"points": 31.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 45
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "306 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 306
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 76,
"inputs": {
"releases_count": 5,
"latest_release_tag": "v3.0.0",
"releases_from_tags": false,
"days_since_latest_release": 20,
"mean_days_between_releases": 499
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "5 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 5
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 20 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 20
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~499 days",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 499
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 7,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 7 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 7
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 55,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"forks": 9,
"stars": 57,
"watchers": 8,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "57 stars",
"points": 28.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 57
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "9 forks",
"points": 7.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 9
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "8 watchers",
"points": 4.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 8
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 9,
"top_contributor_share": 0.969
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 97% of commits",
"points": 0.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 97
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "9 contributors",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 9
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"merged_prs": 610,
"open_issues": 3,
"closed_issues": 7,
"issue_closed_ratio": 0.7,
"closed_unmerged_prs": 70
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "70% of issues closed",
"points": 32.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 70
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "610/680 decided PRs merged",
"points": 34.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 610,
"decided": 680
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/2 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 5867,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "arduino",
"public_repos": 278,
"account_age_days": 5806
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "5,867 followers of arduino",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 5867,
"login": "arduino"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "278 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 278
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "11 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 11
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [
"arduino",
"linter",
"continuous-integration",
"ci",
"github-actions"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "5 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 5
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 61,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/2 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 7",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "16 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 512 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 512
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 18,
"affected_packages": 13,
"assessed_packages": 512,
"unassessed_packages": 0,
"affected_by_severity": "high 7, moderate 5, low 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 512,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 6
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 67,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.873,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "55 of 63 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 55,
"sampled": 63
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json",
"poetry.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Taskfile.yml"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.03,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.37
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Taskfile.yml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Taskfile.yml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 100 commits agent-authored or agent-credited",
"points": 6,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "37 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 37,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 6451,
"source_files_sampled": 5,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/5 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 5,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [],
"report_type": "repository",
"generated_at": "2026-07-22T03:18:56.114553Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/arduino/arduino-lint-action.svg",
"full_name": "arduino/arduino-lint-action",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}