Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-23 12:26 UTC

roblarsen / html5-boilerplate

starting html/css template. so much goodness baked in by default (previously named frontend pro template)

JavaScript · HTMLMIT★ 11 stars⑂ 2 forkssince Aug 2010forkView on GitHub ↗

roblarsen/html5-boilerplate holds a health index of 52 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (69/100) and lowest on Community & Adoption (20/100). It was last updated 20 days ago. 3 contributors account for most of its recent work.

52
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

52
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

Rob LarsenPersonal account
548 followers74 public repossince Aug 2010Palatino Consulting, LLC

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
npmhtml5-boilerplatepoints to another repo — not scored9.0.13,68215827 days agoh5bptemplatefront-end

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

55Moderate · 22% of overall

Development activity

62Moderate
How it's scored
28.8/36Push recency — last push 20 days ago
7.6/36Commit cadence — 11/52 weeks with commits
15.6/18Commit volume — 53 commits in the last year
10/10OpenSSF Scorecard: Maintained — 22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year53
human_commit_share0.26
days_since_last_push20
active_weeks_last_year11

Release discipline

44At risk
How it's scored
27/27Ships releases — 1 releases published
0/36Release recency — latest release 2,451 days ago
12.6/27Release cadence — cadence unknown (single release)
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count1
latest_release_tagv0.0.1
releases_from_tagsno
days_since_latest_release2,451
mean_days_between_releases—
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

20Critical · 18% of overall

Popularity & adoption

16Critical
How it's scored
16.2/60Stars — 11 stars
0/25Forks — 2 forks
0/15Watchers — 1 watchers
Inputs used
forks2
stars11
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Community health

25Critical
How it's scored
0/22.5README
22.5/22.5License — recognized license (MIT)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeno
has_licenseno
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

50Moderate · 24% of overall

Maintainer resilience (bus factor)

77Good
How it's scored
36/54Bus factor — 3 contributor(s) cover half of all commits
17.3/22.5Commit distribution — top contributor authored 23% of commits
13.5/13.5Contributor breadth — 98 contributors
10/10OpenSSF Scorecard: Contributors — project has 82 contributing companies or organizations
Inputs used
bus_factor3
contributors_sampled98
top_contributor_share0.231

Issue & PR responsiveness

1Critical
How it's scored
0/46.8Issue resolution — no issues or no data
0/38.3PR acceptance — 0/1 decided PRs merged
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Inputs used
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio—
closed_unmerged_prs1
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.

Ownership & stewardship

68Moderate
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
19.7/25Owner reach — 548 followers of roblarsen
25/25Track record — 74 public repos, account ~15 yr old
Inputs used
followers548
owner_typeUser
is_verified—
owner_loginroblarsen
public_repos74
account_age_days5,824
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.

Engineering Quality

Are baseline engineering and documentation practices in place?

69Moderate · 20% of overall

Engineering practices

88Excellent
How it's scored
24/24CI workflows — 8 workflow(s)
24/24Tests present
16/16Linter config — eslint.config.mjs
0/9.6Pre-commit hooks
6.4/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — no data
Inputs used
has_ciyes
has_testsyes
has_editorconfigyes
has_linter_configyes
has_precommit_configno
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.

Documentation

40At risk
How it's scored
0/30README
25/25Documentation directory
15/15Documentation / homepage site — http://html5boilerplate.com
0/10Repository description
0/10Topics
0/10Wiki
Inputs used
topics—
has_wikino
homepagehttp://html5boilerplate.com
has_readmeno
has_docs_diryes
has_descriptionno

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

66Moderate · 16% of overall

Security posture

58Moderate
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — no data
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 82 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
7.5/7.5Maintained — 22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
0/5Packaging — no data
4/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
5/5SAST — SAST tool detected: CodeQL
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5Vulnerabilities — 2 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate5.8
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.

Dependency advisories

100Excellent
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40No advisories left outstanding — no advisory carries a publication date
Inputs used
sourceosv
advisories3
affected_packages3
assessed_packages343
unassessed_packages6
affected_by_severityhigh 3
direct_affected_packages0
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 343 resolved dependencies against OSV. 6 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

56Moderate · 0% of overall

Agent context & guidance

40At risk
How it's scored
0/45Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 25 of 26 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.962
agent_instruction_files—
agent_instruction_max_bytes—

Verify loop (build / test / typecheck)

69Moderate
How it's scored
0/18One-command bootstrap
22/22Automated tests
11/11Lint / format config — eslint.config.mjs
0/11Static type checking
10/10Reproducible environment — lockfile
10/10Demonstrated agent practice — 5 of the last 100 commits agent-authored or agent-credited
8/8Automated maintenance — 73 of the last 100 commits are automated dependency updates
8/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 8
Inputs used
has_nixno
has_testsyes
lockfilespackage-lock.json
has_dockerfileno
typed_languageno
bootstrap_files—
has_devcontainerno
has_linter_configyes
typecheck_configs—
agent_commit_share0.05
toolchain_manifests—
dependency_bot_commit_share0.73

Code legibility for models

55Moderate
How it's scored
0/45Type-checkable code — JavaScript without a type-check config
55/55Manageable file sizes — 0/8 source files over 60KB
Inputs used
primary_languageJavaScript
largest_source_bytes3,644
source_files_sampled8
oversized_source_files0

Key facts

11GitHub stars
98contributors
53commits, last 12 months
20days since last push
1releases
3bus factor
0open issues
npmpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • Community profile unavailable
  • npm package 'html5-boilerplate' points at a different repository (https://github.com/h5bp/html5-boilerplate); excluded from ecosystem scoring

More detail

Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

111222212014-042016-052018-05

Each point covers 4 days.

OpenSSF Scorecard 5.8 / 10
5.8aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-23 12:26 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
n/aCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 82 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
n/aPackagingpackaging workflow not detected
8Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 8
10SASTSAST tool detected: CodeQL
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
8Vulnerabilities2 existing vulnerabilities detected
All dependencies 349

Full resolved dependency set from the GitHub dependency graph: 0 direct and 349 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
npm@aashutoshrathi/word-wrap1.2.6indirect
npm@eslint-community/eslint-utils4.9.0indirect
npm@eslint-community/regexpp4.12.2indirect
npm@eslint/config-array0.23.5indirect
npm@eslint/config-helpers0.6.0indirect
npm@eslint/core1.2.1indirect
npm@eslint/js10.0.1indirect
npm@eslint/object-schema3.0.5indirect
npm@eslint/plugin-kit0.7.2indirect
npm@gulpjs/messages1.1.0indirect
npm@gulpjs/to-absolute-glob4.0.0indirect
npm@humanfs/core0.19.1indirect
npm@humanfs/node0.16.7indirect
npm@humanwhocodes/module-importer1.0.1indirect
npm@humanwhocodes/retry0.4.3indirect
npm@isaacs/cliui8.0.2indirect
npm@nodelib/fs.scandir2.1.5indirect
npm@nodelib/fs.stat2.0.5indirect
npm@nodelib/fs.walk1.2.8indirect
npm@pkgjs/parseargs0.11.0indirect
npm@sindresorhus/merge-streams2.3.0indirect
npm@types/esrecurse4.3.1indirect
npm@types/estree1.0.8indirect
npm@types/expect1.20.4indirect
npm@types/json-schema7.0.15indirect
npm@types/node20.10.3indirect
npm@types/vinyl2.0.12indirect
npmabort-controller3.0.0indirect
npmacorn8.17.0indirect
npmacorn-jsx5.3.2indirect
npmajv6.15.0indirect
npmansi-colors1.1.0indirect
npmansi-regex5.0.1indirect
npmansi-regex6.0.1indirect
npmansi-styles4.3.0indirect
npmansi-styles6.2.1indirect
npmansi-wrap0.1.0indirect
npmanymatch3.1.3indirect
npmarchiver7.0.1indirect
npmarchiver-utils5.0.2indirect
npmargparse2.0.1indirect
npmarray-each1.0.1indirect
npmarray-slice1.1.0indirect
npmasync3.2.4indirect
npmasync-done2.0.0indirect
npmasync-settle2.0.0indirect
npmautoprefixer10.5.2indirect
npmb4a1.6.4indirect
npmbach2.0.1indirect
npmbalanced-match1.0.2indirect
npmbalanced-match4.0.4indirect
npmbase64-js1.5.1indirect
npmbaseline-browser-mapping2.10.38indirect
npmbinary-extensions2.3.0indirect
npmbl5.1.0indirect
npmbrace-expansion2.1.0indirect
npmbrace-expansion5.0.6indirect
npmbraces3.0.3indirect
npmbrowser-stdout1.3.1indirect
npmbrowserslist4.28.4indirect
npmbuffer6.0.3indirect
npmbuffer-crc321.0.0indirect
npmcamelcase6.2.1indirect
npmcaniuse-lite1.0.30001799indirect
npmchalk4.1.2indirect
npmchalk5.6.2indirect
npmchokidar3.6.0indirect
npmchokidar4.0.3indirect
npmcliui7.0.4indirect
npmcliui8.0.1indirect
npmclone2.1.2indirect
npmcolor-convert2.0.1indirect
npmcolor-name1.1.4indirect
npmcolor-support1.1.3indirect
npmcompress-commons6.0.2indirect
npmconcat-with-sourcemaps1.1.0indirect
npmconvert-source-map2.0.0indirect
npmcopy-props4.0.0indirect
npmcopy-webpack-plugin^14.0.0indirect
npmcore-util-is1.0.3indirect
npmcrc-321.2.2indirect
npmcrc32-stream6.0.0indirect
npmcross-spawn7.0.6indirect
npmdebug4.3.6indirect
npmdecamelize4.0.0indirect
npmdeep-is0.1.4indirect
npmdel8.0.1indirect
npmdetect-file1.0.0indirect
npmdiff8.0.4indirect
npmduplexify4.1.3indirect
npmeach-props3.0.0indirect
npmeastasianwidth0.2.0indirect
npmeasy-transform-stream1.0.1indirect
npmelectron-to-chromium1.5.378indirect
npmemoji-regex8.0.0indirect
npmemoji-regex9.2.2indirect
npmend-of-stream1.4.4indirect
npmescalade3.2.0indirect
npmescape-string-regexp4.0.0indirect
npmeslint10.6.0indirect
npmeslint-plugin-mocha11.3.0indirect
npmeslint-scope9.1.2indirect
npmeslint-visitor-keys3.4.3indirect
npmeslint-visitor-keys5.0.1indirect
npmespree11.2.0indirect
npmesquery1.7.0indirect
npmesrecurse4.3.0indirect
npmestraverse5.3.0indirect
npmesutils2.0.3indirect
npmevent-target-shim5.0.1indirect
npmevents3.3.0indirect
npmexpand-tilde2.0.2indirect
npmextend3.0.2indirect
npmfancy-log2.0.0indirect
npmfast-deep-equal3.1.3indirect
npmfast-fifo1.3.2indirect
npmfast-glob3.3.3indirect
npmfast-json-stable-stringify2.1.0indirect
npmfast-levenshtein2.0.6indirect
npmfast-levenshtein3.0.0indirect
npmfastest-levenshtein1.0.16indirect
npmfastq1.19.1indirect
npmfile-entry-cache8.0.0indirect
npmfill-range7.1.1indirect
npmfind-up5.0.0indirect
npmfindup-sync5.0.0indirect
npmfined2.0.0indirect
npmflagged-respawn2.0.0indirect
npmflat5.0.2indirect
npmflat-cache4.0.1indirect
npmflatted3.4.2indirect
npmfor-in1.0.2indirect
npmfor-own1.0.0indirect
npmforeground-child3.3.1indirect
npmfork-stream0.0.4indirect
npmfraction.js5.3.4indirect
npmfs-mkdirp-stream2.0.1indirect
npmfsevents2.3.3indirect
npmfunction-bind1.1.1indirect
npmget-caller-file2.0.5indirect
npmglob10.5.0indirect
npmglob13.0.6indirect
npmglob-parent5.1.2indirect
npmglob-parent6.0.2indirect
npmglob-stream8.0.3indirect
npmglob-watcher6.0.0indirect
npmglobal-modules1.0.0indirect
npmglobal-prefix1.0.2indirect
npmglobals15.15.0indirect
npmglobals16.4.0indirect
npmglobby14.1.0indirect
npmglogg2.2.0indirect
npmgraceful-fs4.2.11indirect
npmgulp5.0.1indirect
npmgulp-autoprefixer10.0.0indirect
npmgulp-cli3.1.0indirect
npmgulp-eslint-new2.6.2indirect
npmgulp-header2.0.12indirect
npmgulp-plugin-extras1.1.0indirect
npmgulp-rename2.1.0indirect
npmgulplog2.2.0indirect
npmhas1.0.3indirect
npmhas-flag4.0.0indirect
npmhe1.2.0indirect
npmhomedir-polyfill1.0.3indirect
npmhtml-webpack-plugin^5.6.7indirect
npmiconv-lite0.6.3indirect
npmieee7541.2.1indirect
npmignore5.2.0indirect
npmignore7.0.5indirect
npmimurmurhash0.1.4indirect
npminherits2.0.4indirect
npmini1.3.8indirect
npminterpret3.1.1indirect
npmis-absolute1.0.0indirect
npmis-binary-path2.1.0indirect
npmis-core-module2.8.0indirect
npmis-extglob2.1.1indirect
npmis-fullwidth-code-point3.0.0indirect
npmis-glob4.0.3indirect
npmis-negated-glob1.0.0indirect
npmis-number7.0.0indirect
npmis-path-cwd3.0.0indirect
npmis-path-inside3.0.3indirect
npmis-path-inside4.0.0indirect
npmis-plain-obj2.1.0indirect
npmis-plain-object5.0.0indirect
npmis-relative1.0.0indirect
npmis-stream2.0.1indirect
npmis-unc-path1.0.0indirect
npmis-unicode-supported0.1.0indirect
npmis-valid-glob1.0.0indirect
npmis-windows1.0.2indirect
npmisarray1.0.0indirect
npmisexe2.0.0indirect
npmisobject3.0.1indirect
npmjackspeak3.4.3indirect
npmjs-yaml4.2.0indirect
npmjson-buffer3.0.1indirect
npmjson-schema-traverse0.4.1indirect
npmjson-stable-stringify-without-jsonify1.0.1indirect
npmkeyv4.5.4indirect
npmlast-run2.0.0indirect
npmlazystream1.0.1indirect
npmlead4.0.0indirect
npmlevn0.4.1indirect
npmliftoff5.0.1indirect
npmlocate-path6.0.0indirect
npmlodash4.18.1indirect
npmlog-symbols4.1.0indirect
npmlru-cache10.4.3indirect
npmlru-cache11.2.7indirect
npmmain.css3.0.0indirect
npmmap-cache0.2.2indirect
npmmap-stream0.0.7indirect
npmmerge-stream2.0.0indirect
npmmerge21.4.1indirect
npmmicromatch4.0.8indirect
npmminimatch10.2.4indirect
npmminimatch10.2.5indirect
npmminimatch5.1.9indirect
npmminimatch9.0.9indirect
npmminipass7.1.3indirect
npmmocha11.7.5indirect
npmms2.1.2indirect
npmms2.1.3indirect
npmmute-stdout2.0.0indirect
npmnanoid3.3.15indirect
npmnatural-compare1.4.0indirect
npmnode-releases2.0.49indirect
npmnormalize-path3.0.0indirect
npmnow-and-later3.0.0indirect
npmobject.defaults1.1.0indirect
npmobject.pick1.3.0indirect
npmonce1.4.0indirect
npmoptionator0.9.3indirect
npmp-limit3.1.0indirect
npmp-locate5.0.0indirect
npmp-map7.0.3indirect
npmpackage-json-from-dist1.0.0indirect
npmparse-filepath1.0.2indirect
npmparse-passwd1.0.0indirect
npmpath-exists4.0.0indirect
npmpath-key3.1.1indirect
npmpath-parse1.0.7indirect
npmpath-root0.1.1indirect
npmpath-root-regex0.1.2indirect
npmpath-scurry1.11.1indirect
npmpath-scurry2.0.2indirect
npmpath-type6.0.0indirect
npmpicocolors1.1.1indirect
npmpicomatch2.3.2indirect
npmplugin-error2.0.1indirect
npmpostcss8.5.15indirect
npmpostcss-value-parser4.2.0indirect
npmprelude-ls1.2.1indirect
npmpresentable-error0.0.1indirect
npmprettier3.8.4indirect
npmprocess0.11.10indirect
npmprocess-nextick-args2.0.1indirect
npmpunycode2.3.1indirect
npmqueue-microtask1.2.3indirect
npmqueue-tick1.0.1indirect
npmreadable-stream2.3.8indirect
npmreadable-stream3.6.2indirect
npmreadable-stream4.5.2indirect
npmreaddir-glob1.1.3indirect
npmreaddirp3.6.0indirect
npmreaddirp4.1.2indirect
npmrechoir0.8.0indirect
npmremove-trailing-separator1.1.0indirect
npmreplace-ext2.0.0indirect
npmreplace-homedir2.0.0indirect
npmrequire-directory2.1.1indirect
npmresolve1.20.0indirect
npmresolve-dir1.0.1indirect
npmresolve-options2.0.0indirect
npmreusify1.1.0indirect
npmrun-parallel1.2.0indirect
npmsafe-buffer5.1.2indirect
npmsafe-buffer5.2.1indirect
npmsafer-buffer2.1.2indirect
npmsemver6.3.1indirect
npmsemver7.7.4indirect
npmsemver-greatest-satisfied-range2.0.0indirect
npmserialize-javascript7.0.5indirect
npmshebang-command2.0.0indirect
npmshebang-regex3.0.0indirect
npmsignal-exit4.1.0indirect
npmslash5.1.0indirect
npmsource-map0.5.7indirect
npmsource-map0.6.1indirect
npmsource-map-js1.2.1indirect
npmsparkles2.1.0indirect
npmstream-composer1.0.2indirect
npmstream-exhaust1.0.2indirect
npmstream-shift1.0.3indirect
npmstreamx2.15.1indirect
npmstring-width4.2.3indirect
npmstring-width5.1.2indirect
npmstring_decoder1.1.1indirect
npmstring_decoder1.3.0indirect
npmstrip-ansi6.0.1indirect
npmstrip-ansi7.1.0indirect
npmstrip-json-comments3.1.1indirect
npmsupports-color7.2.0indirect
npmsupports-color8.1.1indirect
npmsver1.8.4indirect
npmtar-stream3.1.6indirect
npmteex1.0.1indirect
npmternary-stream3.0.0indirect
npmthrough23.0.2indirect
npmthrough24.0.2indirect
npmto-regex-range5.0.1indirect
npmto-through3.0.0indirect
npmtype-check0.4.0indirect
npmunc-path-regex0.1.2indirect
npmundertaker2.0.0indirect
npmundertaker-registry2.0.0indirect
npmundici-types5.26.5indirect
npmunicorn-magic0.3.0indirect
npmupdate-browserslist-db1.2.3indirect
npmuri-js4.4.1indirect
npmutil-deprecate1.0.2indirect
npmv8flags4.0.1indirect
npmvalue-or-function4.0.0indirect
npmvinyl3.0.1indirect
npmvinyl-contents2.0.0indirect
npmvinyl-fs4.0.2indirect
npmvinyl-sourcemap2.0.0indirect
npmvinyl-sourcemaps-apply0.2.1indirect
npmwebpack^5.108.3indirect
npmwebpack-cli^7.1.0indirect
npmwebpack-dev-server^5.2.5indirect
npmwebpack-merge^6.0.1indirect
npmwhich1.3.1indirect
npmwhich2.0.2indirect
npmworkerpool9.3.3indirect
npmwrap-ansi7.0.0indirect
npmwrap-ansi8.1.0indirect
npmwrappy1.0.2indirect
npmy18n5.0.8indirect
npmyargs16.2.0indirect
npmyargs17.7.2indirect
npmyargs-parser20.2.9indirect
npmyargs-parser21.1.1indirect
npmyargs-unparser2.0.0indirect
npmyocto-queue0.1.0indirect
npmzip-stream6.0.1indirect
Dependency advisories 3

This repository publishes no package the index resolves, so its own dependency graph was assessed — 343 packages, which also include development and test pins that never ship: 3 carry known advisories, of which 0 are direct. 6 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.

PackageVersionRelationSeverityAdvisoriesFixed in
brace-expansion2.1.0indirecthigh15.0.7
brace-expansion5.0.6indirecthigh15.0.7
js-yaml4.2.0indirecthigh14.3.0

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": true,
      "size_kb": 22707,
      "has_wiki": false,
      "homepage": "http://html5boilerplate.com",
      "languages": {
        "HTML": 1922,
        "JavaScript": 10162
      },
      "pushed_at": "2026-07-03T01:42:03Z",
      "created_at": "2010-08-13T17:54:20Z",
      "owner_type": "User",
      "updated_at": "2026-07-03T01:30:17Z",
      "description": "starting html/css template. so much goodness baked in by default (previously named frontend pro template)",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "JavaScript",
      "significant_languages": [
        "JavaScript",
        "HTML"
      ]
    },
    "owner": {
      "blog": "http://htmlcssjavascript.com/",
      "name": "Rob Larsen",
      "type": "User",
      "login": "roblarsen",
      "company": "Palatino Consulting, LLC",
      "location": "Boston",
      "followers": 548,
      "avatar_url": "https://avatars.githubusercontent.com/u/361421?v=4",
      "created_at": "2010-08-11T20:54:10Z",
      "is_verified": null,
      "public_repos": 74,
      "account_age_days": 5824
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.0.1",
          "kind": "patch",
          "published_at": "2019-11-05T17:10:29Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b7e31d67f4cf83e23d51f4decc73618bf8bd77ba",
          "body": "Bumps [eslint](https://github.com/eslint/eslint) from 10.5.0 to 10.6.0.\n- [Release notes](https://github.com/eslint/eslint/releases)\n- [Commits](https://github.com/eslint/eslint/compare/v10.5.0...v10.6.0)\n\n---\nupdated-dependencies:\n- dependency-name: eslint\n  dependency-version: 10.6.0\n  dependency-\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint from 10.5.0 to 10.6.0 (#3449)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-02T03:06:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f160f1b69dfb61bb915e56c9e0a2b73b6382938f",
          "body": "Updates the requirements on [webpack-cli](https://github.com/webpack/webpack-cli) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-cli/releases)\n- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpa\n[…]\nndency-version: 7.1.0\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-cli requirement in /src (#3458)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T20:45:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "227dbf75ffa076d95b10c994a2b51dcd0ff5533f",
          "body": "…updates (#3462)\n\n* chore(deps): bump the github-actions group across 1 directory with 6 updates\n\nBumps the github-actions group with 6 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.0` |\n| [github/c\n[…]\nndabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump the github-actions group across 1 directory with 6 …",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T20:45:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f6367d67e308b781ddea0f9ca525b2542579140f",
          "body": null,
          "is_bot": false,
          "headline": "Moves checkout action up the chain to fix Windows build (#3463)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2026-07-01T19:57:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4fb2310c19024e735ff41acaf0444e1de987b22",
          "body": "…nce (#3324)",
          "is_bot": false,
          "headline": "ci: enhance Dependabot config with groups, cooldown, and monthly cade…",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2026-07-01T10:11:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0e6f7705e3717ab66c2964fdfb94619d2b466a00",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack/compare/v5.10\n[…]\nency-version: 5.108.1\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3459)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T02:58:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "663258eb5dfd1a2ced1112e7d59fcd238de386db",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)\n- [Commits](http\n[…]\nndency-version: 5.2.5\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3460)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-01T02:31:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5638df2a27317c96acbb6224771cd322eb5281c",
          "body": "* Upgrading eslint.\n\n* update",
          "is_bot": false,
          "headline": "Upgrading eslint. (#3447)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2026-06-26T11:02:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f0e475cd852d9ecbb04d2df2cc6b7381524a936",
          "body": "- Minimum = Node v22\n- Add Node v26 to support (as its current https://nodejs.org/en/about/previous-releases )",
          "is_bot": false,
          "headline": "Update NodeJS Support (#3446)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2026-06-26T02:27:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "087f82148f5cb9e75077150a03878b9ac0380e6e",
          "body": "* Add proposal guidelines for new projects\n\nThis document outlines the proposal guidelines for new projects seeking inclusion in the @h5bp organization, detailing requirements, evaluation criteria, and the proposal process.\n\n* Update PROPOSAL_GUIDELINES.md\n\ntypo fixes\n\n---------\n\nCo-authored-by: Christian Oliff <christianoliff@pm.me>",
          "is_bot": false,
          "headline": "Add proposal guidelines for new projects (#3443)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2026-06-26T00:44:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f81eec066d832e4274a87db67a58e4ee406dc576",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.0.0 to 6.4.0.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/2028fbc5c25fe9cf00d9f06a71cc4710d4507903...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e)\n\n---\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/setup-node from 6.0.0 to 6.4.0 (#3422)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:53:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4df3945e1fc092edad87d5b18afe6fe60d1e5e2b",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.1.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...043fb46d1a93c77aae656e7c1c\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 (#3418)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:52:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6edbf7fc4ccefa87547aaed2fac28dd66af348dc",
          "body": "Co-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(dist): update dist folder after build (#3445)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-25T03:51:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc7dc5eb02844aec6222af020b9b23c1e4152e10",
          "body": "…0 (#3417)\n\nBumps [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) from 8.3.0 to 8.4.0.\n- [Release notes](https://github.com/streetsidesoftware/cspell-action/releases)\n- [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md)\n- [\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump streetsidesoftware/cspell-action from 8.3.0 to 8.4.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:45:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a748fa25ee2b6f04d39c74e10be8d556bcc05dce",
          "body": "Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 6.0.1 to 7.0.3.\n- [Release notes](https://github.com/webpack/webpack-cli/releases)\n- [Changelog](https://github.com/webpack/webpack-cli/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@6.0.\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump webpack-cli from 6.0.1 to 7.0.3 in /src (#3386)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:18:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "572af58d1e31228cc9d9c655aa9bf64d21c4acad",
          "body": "…rc (#3384)\n\nBumps [copy-webpack-plugin](https://github.com/webpack/copy-webpack-plugin) from 13.0.1 to 14.0.0.\n- [Release notes](https://github.com/webpack/copy-webpack-plugin/releases)\n- [Changelog](https://github.com/webpack/copy-webpack-plugin/blob/main/CHANGELOG.md)\n- [Commits](https://github.c\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump copy-webpack-plugin from 13.0.1 to 14.0.0 in /s…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T03:03:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f586e5e82446b33adaa38f944d5508f7ed30bbbc",
          "body": "Bumps [gulp-autoprefixer](https://github.com/sindresorhus/gulp-autoprefixer) from 9.0.0 to 10.0.0.\n- [Release notes](https://github.com/sindresorhus/gulp-autoprefixer/releases)\n- [Commits](https://github.com/sindresorhus/gulp-autoprefixer/compare/v9.0.0...v10.0.0)\n\n---\nupdated-dependencies:\n- depend\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump gulp-autoprefixer from 9.0.0 to 10.0.0 (#3296)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T02:58:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3c10145b1da310c5092531f6198049245d7ae107",
          "body": "Updates the requirements on [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) to permit the latest version.\n- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)\n- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)\n- [Commit\n[…]\nndency-version: 5.6.7\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update html-webpack-plugin requirement in /src (#3421)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T02:40:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d056fc98219c28dae16632939efc28bc3a8bf0e",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)\n- [Commits](http\n[…]\nndency-version: 5.2.4\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3429)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-25T02:38:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae9124446e844d64a098ee1281e0ae1ef51e9187",
          "body": "* Initial plan\n\n* chore(deps): roll up patch/minor npm dependency updates\n\n- eslint-plugin-mocha: 11.1.0 → 11.3.0 (minor)\n- gulp-eslint-new: 2.6.0 → 2.6.2 (patch)\n- gulp-header: 2.0.9 → 2.0.12 (patch)\n- postcss: 8.4.32 → 8.5.15 (minor, transitive)\n- js-yaml: 4.1.1 → 4.2.0 (minor, transitive)\n- nanoi\n[…]\n 9→10,\ncopy-webpack-plugin 13→14, webpack-cli 6→7) will be handled in a\nfollow-up PR. All 25 tests pass.\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(deps): roll up patch/minor npm dependency updates (#3444)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-06-25T02:30:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3f2d2e2fe59a54e8b57d60c29c4dda253879b35a",
          "body": "* Remove twitter cards docs\n\n* Add dist",
          "is_bot": false,
          "headline": "Remove twitter cards docs (#3434)",
          "author_name": "Lourdes",
          "author_login": "Lourdesmarco",
          "committed_at": "2026-06-24T20:57:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ae2dfa2e5e66e65e684c86e53f6c96ab24a1f0",
          "body": "* Document color-scheme meta extension\n\n* Potential fix for pull request finding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "Document color-scheme meta extension (#3442)",
          "author_name": "Nightt",
          "author_login": "nightt5879",
          "committed_at": "2026-06-24T20:56:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "31357fdb7c4c4da60a7c910e95440444c2ca7a6d",
          "body": "* Initial plan\n\n* ci: drop Node 20 from test matrix, use Node 22 for publish, update docs\n\nAgent-Logs-Url: https://github.com/h5bp/html5-boilerplate/sessions/fc3e7fbd-ad7f-461e-adc2-a467bd7c365b\n\nCo-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>",
          "is_bot": false,
          "headline": "ci: drop Node 20 from matrix, migrate publish to Node 22 (#3414)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-04-22T21:40:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3d3ea0fb53d15c6f955acccdfdd09781b991a6fb",
          "body": "* Initial plan\n\n* Initial plan for supply chain health audit\n\nAgent-Logs-Url: https://github.com/h5bp/html5-boilerplate/sessions/01c785f4-3040-48bf-a01f-0a8ea9a890cb\n\nCo-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>\n\n* fix: clear CVEs, update dependabot to weekly schedule\n\nAgent\n[…]\noblarsen@users.noreply.github.com>\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: roblarsen <361421+roblarsen@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: clear CVEs and switch Dependabot to weekly cadence (#3416)",
          "author_name": "Copilot",
          "author_login": "Copilot",
          "committed_at": "2026-04-22T21:36:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3306aed80e0eb7630f76ab640129a3a9adc25cbb",
          "body": "* Improve GitHub Stars badge alt text\n\n* Fix: update GitHub Stars badge alt text only\n\n* Fix: revert title and update GitHub Stars alt text only\n\n* Update README.md\n\n* Fix badge order in README.md\n\n---------\n\nCo-authored-by: Christian Oliff <christianoliff@pm.me>",
          "is_bot": false,
          "headline": "Improve GitHub Stars badge alt text (#3409)",
          "author_name": "CHAITHANYA-KRISHNAPPA",
          "author_login": "CHAITHANYA-KRISHNAPPA",
          "committed_at": "2026-04-22T20:13:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ce8ad3c32e1744da4adecb978797168d5ee7df51",
          "body": "Bumps [lodash](https://github.com/lodash/lodash) from 4.17.21 to 4.17.23.\n- [Release notes](https://github.com/lodash/lodash/releases)\n- [Commits](https://github.com/lodash/lodash/compare/4.17.21...4.17.23)\n\n---\nupdated-dependencies:\n- dependency-name: lodash\n  dependency-version: 4.17.23\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump lodash from 4.17.21 to 4.17.23 (#3355)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:56:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "346671211c2f3121c8f59fff024bcd5aadec24ca",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/main/CHANGELOG.md)\n- [Commits](http\n[…]\nndency-version: 5.2.3\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3356)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:55:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76e4cc8b68b94a1e9953bdd02907880e3fa5620b",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 11.7.2 to 11.7.5.\n- [Release notes](https://github.com/mochajs/mocha/releases)\n- [Changelog](https://github.com/mochajs/mocha/blob/v11.7.5/CHANGELOG.md)\n- [Commits](https://github.com/mochajs/mocha/compare/v11.7.2...v11.7.5)\n\n---\nupdated-dependenc\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 11.7.2 to 11.7.5 (#3359)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:55:18Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d2bba571b288fd3b88e2927713d822a2fe0c9364",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 11.1.0 to 13.0.1.\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/node-glob/compare/v11.1.0...v13.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: glob\n  dependency-version: 13.0.\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 11.1.0 to 13.0.1 (#3360)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:54:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8de87c553fd9d6238dd96e50981521cafbeec348",
          "body": "Bumps [gulp-eslint-new](https://github.com/origin-1/gulp-eslint-new) from 2.4.0 to 2.6.0.\n- [Release notes](https://github.com/origin-1/gulp-eslint-new/releases)\n- [Changelog](https://github.com/origin-1/gulp-eslint-new/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/origin-1/gulp-eslint-new/\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump gulp-eslint-new from 2.4.0 to 2.6.0 (#3361)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:51:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e65e52bdb820c51995b8e2f17ed3b4af82c48c7",
          "body": "Updates the requirements on [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) to permit the latest version.\n- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)\n- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)\n- [Commit\n[…]\nndency-version: 5.6.6\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update html-webpack-plugin requirement in /src (#3363)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:50:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8bd92af2d3d6ba05fffba04327950dbdee2e03a8",
          "body": "Bumps  and [minimatch](https://github.com/isaacs/minimatch). These dependencies needed to be updated together.\n\nUpdates `minimatch` from 9.0.5 to 9.0.9\n- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/minimatch/compare/v9.0.5...v9.0.9)\n\n\n[…]\nch\n  dependency-version: 10.2.4\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump minimatch (#3365)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:46:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e7378571999893e3da7491054dafaa939e170b08",
          "body": "Bumps [actions/cache](https://github.com/actions/cache) from 3 to 5.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Commits](https://github.com/actions/cache/compare/v3...v5)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n  dependency-version: '5'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/cache from 3 to 5 (#3366)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:36:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3345fc0e814a40906b5461b2414d62fd51604e18",
          "body": "…0 (#3367)\n\nBumps [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) from 7.2.0 to 8.3.0.\n- [Release notes](https://github.com/streetsidesoftware/cspell-action/releases)\n- [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md)\n- [\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump streetsidesoftware/cspell-action from 7.2.0 to 8.3.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:36:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e3660dc12294153a1446b0d3d98534167ebb4791",
          "body": "…3 (#3368)\n\nBumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.7.3 to 4.8.3.\n- [Release notes](https://github.com/actions/dependency-review-action/releases)\n- [Commits](https://github.com/actions/dependency-review-action/compare/595b5aeba73380359d98a\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:35:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6de3e55b86315c3cb7bcdb07af27aa12d19f6e8",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack/compare/v5.10\n[…]\nency-version: 5.105.3\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3369)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:33:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bd01e8ad95dbfd9dda97e173a8120a424bdd50f9",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.2.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f8\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/checkout from 5.0.0 to 6.0.2 (#3370)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:31:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f7636d6fe7158e54f7c15f4ddda3dbba00fb1ede",
          "body": "Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6 to 8.\n- [Release notes](https://github.com/peter-evans/create-pull-request/releases)\n- [Commits](https://github.com/peter-evans/create-pull-request/compare/v6...v8)\n\n---\nupdated-dependencies:\n- depende\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump peter-evans/create-pull-request from 6 to 8 (#3371)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:31:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "323759f04199f890628fb97b02a2cd5afdfdf93b",
          "body": "Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2.\n- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2)\n\n---\nupdated-dependencies:\n- dependency-name: flatted\n  dependency-version: 3.4.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump flatted from 3.3.3 to 3.4.2 (#3374)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:31:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "423ebd8cc3e4d9760201932b93d1af214b063459",
          "body": "Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.\n- [Release notes](https://github.com/micromatch/picomatch/releases)\n- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.\n[…]\ntch\n  dependency-version: 2.3.2\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump picomatch from 2.3.1 to 2.3.2 (#3376)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-03-25T23:30:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "091a35738202b6dd03947368a95491af87e71dc8",
          "body": "Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.0 to 4.1.1.\n- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/nodeca/js-yaml/compare/4.1.0...4.1.1)\n\n---\nupdated-dependencies:\n- dependency-name: js-yaml\n  dependency-version: 4.1.1\n  dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump js-yaml from 4.1.0 to 4.1.1 (#3328)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-01T07:43:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88ce8763fcae9a63623bfc7284c5c57232befc4b",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) to 10.5.0 and updates ancestor dependency . These dependencies need to be updated together.\n\n\nUpdates `glob` from 10.4.5 to 10.5.0\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/node-gl\n[…]\ndency-version: 11.1.0\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump glob (#3329)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-12-01T07:19:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "83ba9d23ff559a169ba843abc6cd8992585af9d4",
          "body": "Bumps [del](https://github.com/sindresorhus/del) from 8.0.0 to 8.0.1.\n- [Release notes](https://github.com/sindresorhus/del/releases)\n- [Commits](https://github.com/sindresorhus/del/compare/v8.0.0...v8.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: del\n  dependency-version: 8.0.1\n  dependency-ty\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump del from 8.0.0 to 8.0.1 (#3299)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-07T10:50:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3a1e71d9864f3a1afa4f7ab42fdaaec1f59a914",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 6.0.0.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/a0853c24544627f65ddf259abe73b1d18a591444...2028fbc5c25fe9cf00d9f06a71cc4710d4507903)\n\n---\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (#3318)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-11-04T05:50:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "17f57319122b4c2c8baf81b0948cfd2f110d69dd",
          "body": "Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.2 to 2.4.3.\n- [Release notes](https://github.com/ossf/scorecard-action/releases)\n- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)\n- [Commits](https://github.com/ossf/scorecard-action/compare/\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump ossf/scorecard-action from 2.4.2 to 2.4.3 (#3303)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-10-01T07:08:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "97367a94f4ae679d09872d2fe44211443b3a6b91",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.1 to 3.30.5.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/f\n[…]\nirect:production\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump github/codeql-action from 3.30.1 to 3.30.5 (#3300)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-10-01T07:07:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b99ebd644acaf36d14a434c67022c542dba72186",
          "body": "* trying this a different way!\n\n* Update GitHub Actions to use specific commit SHAs\n\nChanged actions/checkout and actions/setup-node to reference specific commit SHAs for improved security and reproducibility. Also set 'persist-credentials' to false for checkout.\n\n---------\n\nCo-authored-by: Christian Oliff <christian_oliff@trimble.com>",
          "is_bot": false,
          "headline": "Updating `dist` via GitHub Actions and an automated PR (#3282)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2025-09-17T13:35:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94f79e4c174c68e0e4929d930ef776657735765c",
          "body": "Bumps [globals](https://github.com/sindresorhus/globals) from 16.3.0 to 16.4.0.\n- [Release notes](https://github.com/sindresorhus/globals/releases)\n- [Commits](https://github.com/sindresorhus/globals/compare/v16.3.0...v16.4.0)\n\n---\nupdated-dependencies:\n- dependency-name: globals\n  dependency-versio\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump globals from 16.3.0 to 16.4.0 (#3286)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-10T16:33:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f814431eead3bda309ffd70876582aa500cb1be1",
          "body": "This also pins move GitHub Actions so our initial score will be higher.",
          "is_bot": false,
          "headline": "Add OSSF Scorecard security workflow (#3287)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2025-09-10T16:31:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fd0124ecdd5861d5c2ad42761bd73400dfebd63",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md)\n- [Commits](ht\n[…]\nndency-version: 5.2.2\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3252)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-10T15:29:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e01d6e47fecfcaf339020751c86e7d1689e9fdb",
          "body": "Bumps [gulp-rename](https://github.com/hparra/gulp-rename) from 2.0.0 to 2.1.0.\n- [Release notes](https://github.com/hparra/gulp-rename/releases)\n- [Changelog](https://github.com/hparra/gulp-rename/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/hparra/gulp-rename/commits)\n\n---\nupdated-depe\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump gulp-rename from 2.0.0 to 2.1.0 (#3249)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-09-10T15:28:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "15bf5543c3559d680d62e7a76f5d47e30234cd14",
          "body": "* dependency updates, rolled up\n\n* eslintrc > eslint.config\n\n* eslint upgrade continues",
          "is_bot": false,
          "headline": "dependency updates, rolled up (#3281)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2025-09-10T15:20:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0db7c3c5d3d6c0ad5eabab2c183e78489513754",
          "body": "Updated workflow files to use specific commit SHAs for actions/checkout, actions/setup-node, github/codeql-action, and streetsidesoftware/cspell-action. This improves security and reproducibility by preventing unexpected changes from upstream action updates. Also set 'persist-credentials: false' for checkout steps to enhance security.",
          "is_bot": false,
          "headline": "Pin GitHub Actions to specific commit SHAs (#3284)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2025-09-10T14:13:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac08a17cb60a975336664c0090657a3e593f686e",
          "body": "Bumps [strip-json-comments](https://github.com/sindresorhus/strip-json-comments) from 5.0.1 to 5.0.2.\n- [Release notes](https://github.com/sindresorhus/strip-json-comments/releases)\n- [Commits](https://github.com/sindresorhus/strip-json-comments/compare/v5.0.1...v5.0.2)\n\n---\nupdated-dependencies:\n- \n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump strip-json-comments from 5.0.1 to 5.0.2 (#3242)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-23T02:30:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ec50fce6bef1bab5405a45c310f0a9be73d52a20",
          "body": null,
          "is_bot": false,
          "headline": "Add .vscode/settings.json & extensions.json files to project (#3245)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2025-06-23T02:29:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2eb593dfaa6aa7b8b5784f8b3fd2a426976bfebf",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Commits](https://github.com/webpack/webpack/compare/v5.99.7...v5.99.9)\n\n---\nupdated-dependencies:\n- dependency-name: webpack\n  dep\n[…]\ndency-version: 5.99.9\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3244)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-04T09:38:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "28417fd11d4d4d874898c60c451a630ed987d478",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 11.1.0 to 11.5.0.\n- [Release notes](https://github.com/mochajs/mocha/releases)\n- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/mochajs/mocha/compare/v11.1.0...v11.5.0)\n\n---\nupdated-dependencies\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 11.1.0 to 11.5.0 (#3240)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-04T09:31:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9a9f4e199050e6364399865b4a8863ad71b4dc40",
          "body": "* Update Node Versions (for tests)\n\n- Move all test to a single file\n- test on Node 20, 22 and 24 - on Windows and Ubuntu\n- Sort `package.json` (with VS Code extension of this https://www.npmjs.com/package/sort-package-json)\n\n* Update test.yml",
          "is_bot": false,
          "headline": "Update Node Versions (for tests) (#3237)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2025-06-04T09:30:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdd2d89351fd835c9e9be25771dfb3d4517bc645",
          "body": "Bumps [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) from 6 to 7.\n- [Release notes](https://github.com/streetsidesoftware/cspell-action/releases)\n- [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md)\n- [Commits](https://git\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump streetsidesoftware/cspell-action from 6 to 7 (#3243)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-06-02T04:13:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d833efb44e437c745a1773e0b2e9ac877b7b3cd4",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Commits](https://github.com/webpack/webpack/compare/v5.99.5...v5.99.7)\n\n---\nupdated-dependencies:\n- dependency-name: webpack\n  dep\n[…]\ndency-version: 5.99.7\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3233)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T15:14:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a51c70150fa41ec3814c55859397b6f704e86623",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.1 to 11.0.2.\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/node-glob/compare/v11.0.1...v11.0.2)\n\n---\nupdated-dependencies:\n- dependency-name: glob\n  dependency-version: 11.0.\n[…]\nrect:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 11.0.1 to 11.0.2 (#3234)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-05-02T15:13:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "01e7f51b1d265fd47f85e7f1e820d02ee6bff0d4",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md)\n- [Commits](ht\n[…]\nndency-version: 5.2.1\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3227)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T14:04:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a7751fef3b4710a0e72d3cd210e697e7dddd088",
          "body": "…rc (#3218)\n\nBumps [copy-webpack-plugin](https://github.com/webpack-contrib/copy-webpack-plugin) from 11.0.0 to 13.0.0.\n- [Release notes](https://github.com/webpack-contrib/copy-webpack-plugin/releases)\n- [Changelog](https://github.com/webpack-contrib/copy-webpack-plugin/blob/master/CHANGELOG.md)\n- \n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump copy-webpack-plugin from 11.0.0 to 13.0.0 in /s…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T13:59:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "acb43472fc2bcb97c22132529a512351f4492b1c",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Commits](https://github.com/webpack/webpack/compare/v5.94.0...v5.98.0)\n\n---\nupdated-dependencies:\n- dependency-name: webpack\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3217)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T13:53:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "345287ef46f584de4864103b3b7aa507d31f8325",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 10.7.3 to 11.1.0.\n- [Release notes](https://github.com/mochajs/mocha/releases)\n- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/mochajs/mocha/compare/v10.7.3...v11.1.0)\n\n---\nupdated-dependencies\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 10.7.3 to 11.1.0 (#3208)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-16T13:29:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fefdbc555e64c47905394cb51b0bb8f1207d2ea7",
          "body": "Bumps [webpack-cli](https://github.com/webpack/webpack-cli) from 5.1.4 to 6.0.1.\n- [Release notes](https://github.com/webpack/webpack-cli/releases)\n- [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack-cli/compare/webpack-cli@5.\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump webpack-cli from 5.1.4 to 6.0.1 in /src (#3200)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-15T14:05:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7541d5bb3b97eb2c759988c9df9f9c8c18e4e5cf",
          "body": "Updates the requirements on [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) to permit the latest version.\n- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)\n- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)\n- [Commit\n[…]\n: html-webpack-plugin\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update html-webpack-plugin requirement in /src (#3184)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-04-15T14:02:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8e133b851004cd6db20b707da1d29972b761809",
          "body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.4.2 to 3.5.3.\n- [Release notes](https://github.com/prettier/prettier/releases)\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prettier/prettier/compare/3.4.2...3.5.3)\n\n---\nupdated\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump prettier from 3.4.2 to 3.5.3 (#3226)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-25T07:33:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "789b7197fe68e8ac592f799649d08aeabb8da633",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 11.0.0 to 11.0.1.\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\n- [Commits](https://github.com/isaacs/node-glob/compare/v11.0.0...v11.0.1)\n\n---\nupdated-dependencies:\n- dependency-name: glob\n  dependency-type: direct:development\n  update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 11.0.0 to 11.0.1 (#3209)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-03-25T07:12:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c37e7b7e068ca53ff76459c255ebcb922bb13455",
          "body": "* Remove no-js class\n\n* Document alternative to no-js class",
          "is_bot": false,
          "headline": "Remove JS-conditional classes (#3222)",
          "author_name": "Adam Averay",
          "author_login": "adamaveray",
          "committed_at": "2025-03-06T15:27:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "401b4426e7a9a6008ffba276b103c25d52f8918b",
          "body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.3.3 to 3.4.2.\n- [Release notes](https://github.com/prettier/prettier/releases)\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/prettier/prettier/compare/3.3.3...3.4.2)\n\n---\nupdated\n[…]\nrect:development\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump prettier from 3.3.3 to 3.4.2 (#3202)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2025-02-05T09:43:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5a7112cff6e894d5e859cf08747e6e2c5e1689e",
          "body": "Bumps [eslint](https://github.com/eslint/eslint) from 8.57.0 to 8.57.1.\r\n- [Release notes](https://github.com/eslint/eslint/releases)\r\n- [Changelog](https://github.com/eslint/eslint/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/eslint/eslint/compare/v8.57.0...v8.57.1)\r\n\r\n---\r\nupdated-depen\n[…]\ndevelopment\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint from 8.57.0 to 8.57.1 (#3167)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-10-01T11:24:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2051e7f47eb2a8c4ff22b4dbaab699f501b43a65",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 10.5.2 to 10.7.3.\r\n- [Release notes](https://github.com/mochajs/mocha/releases)\r\n- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/mochajs/mocha/compare/v10.5.2...v10.7.3)\r\n\r\n---\r\nupdated-depend\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 10.5.2 to 10.7.3 (#3158)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-22T12:30:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c4610f373e9f644bda64b915686f6a6befbb6c3b",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\r\n- [Release notes](https://github.com/webpack/webpack/releases)\r\n- [Commits](https://github.com/webpack/webpack/compare/v5.92.1...v5.94.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: webpack\r\n  dependency-type: direct:development\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3157)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:45:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16a8a07b2f2c6742cfd33e3abbf59a1df0c38dfb",
          "body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.3.2 to 3.3.3.\r\n- [Release notes](https://github.com/prettier/prettier/releases)\r\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/prettier/prettier/compare/3.3.2...3.3.3)\r\n\r\n---\r\nu\n[…]\ndevelopment\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump prettier from 3.3.2 to 3.3.3 (#3147)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:44:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a545d58fd94aa61221665b183afa2f22f2ab104c",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 10.4.2 to 11.0.0.\r\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\r\n- [Commits](https://github.com/isaacs/node-glob/compare/v10.4.2...v11.0.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: glob\r\n  dependency-type: d\n[…]\ndevelopment\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 10.4.2 to 11.0.0 (#3145)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:27:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "92602749bf794f7dcb3c7e47140134aff02f16d7",
          "body": "Bumps [eslint-plugin-mocha](https://github.com/lo1tuma/eslint-plugin-mocha) from 10.4.3 to 10.5.0.\r\n- [Release notes](https://github.com/lo1tuma/eslint-plugin-mocha/releases)\r\n- [Changelog](https://github.com/lo1tuma/eslint-plugin-mocha/blob/10.5.0/CHANGELOG.md)\r\n- [Commits](https://github.com/lo1tu\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint-plugin-mocha from 10.4.3 to 10.5.0 (#3144)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:14:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "859dad015b75b7a4d528aa525a1398bb24380231",
          "body": "Bumps [webpack-merge](https://github.com/survivejs/webpack-merge) from 5.10.0 to 6.0.1.\r\n- [Changelog](https://github.com/survivejs/webpack-merge/blob/develop/CHANGELOG.md)\r\n- [Commits](https://github.com/survivejs/webpack-merge/compare/v5.10.0...v6.0.1)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-n\n[…]\ndevelopment\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump webpack-merge from 5.10.0 to 6.0.1 in /src (#3143)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-09-04T17:13:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "250757e847b69084de1da3aac4cbca7ca6c56644",
          "body": null,
          "is_bot": false,
          "headline": "Update Issue Config (#3160)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2024-09-04T17:11:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8228b2adc2faddf742fae4f9e33fe95f79be688d",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 10.4.0 to 10.5.2.\r\n- [Release notes](https://github.com/mochajs/mocha/releases)\r\n- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/mochajs/mocha/compare/v10.4.0...v10.5.2)\r\n\r\n---\r\nupdated-depend\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 10.4.0 to 10.5.2 (#3131)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-02T15:13:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ba99a1360babf6da476dad2a97ebd60be89cf0fc",
          "body": "Bumps [prettier](https://github.com/prettier/prettier) from 3.2.5 to 3.3.2.\r\n- [Release notes](https://github.com/prettier/prettier/releases)\r\n- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)\r\n- [Commits](https://github.com/prettier/prettier/compare/3.2.5...3.3.2)\r\n\r\n---\r\nu\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump prettier from 3.2.5 to 3.3.2 (#3129)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-02T15:04:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0ba9d75e12d95f75aa766c4e637ad34d6be00947",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 10.3.12 to 10.4.2.\r\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\r\n- [Commits](https://github.com/isaacs/node-glob/compare/v10.3.12...v10.4.2)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: glob\r\n  dependency-type:\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 10.3.12 to 10.4.2 (#3128)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-02T15:03:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "218f5270cf19af43899e02c7dbf36b7fc8b6ed77",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\r\n- [Release notes](https://github.com/webpack/webpack/releases)\r\n- [Commits](https://github.com/webpack/webpack/compare/v5.91.0...v5.92.1)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: webpack\r\n  dependency-type: direct:development\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3127)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-07-02T15:03:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7aad29bfb4efc2be6155bbcbac8937963a0a6725",
          "body": "Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.\r\n- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: braces\r\n  dependency-type: indirect\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump braces from 3.0.2 to 3.0.3 (#3124)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-06-25T01:50:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1ebdce9a80b4233aca081903d0047971f5ee68cc",
          "body": "- Fix release date year for recent release on CHANGELOG\r\n- Add https:// to www.robotstxt.org link-  this has advantage of allowing users to Ctrl+click to view site to view more details\r\n- Remove broken `#server-configuration` in-page link (doesn't exist)",
          "is_bot": false,
          "headline": "Minor docs fixes (#3119)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2024-05-20T16:14:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3deb82a9c6bcde26f348957a880e1d27aee57b07",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint-plugin-mocha from 10.4.1 to 10.4.3 (#3117)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-05-01T10:39:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07e9dc66b96ece4645bf47c7b656cec50227c93a",
          "body": "- Allow CodeQL workflow to be run from GitHub Actions WebUI at any time\r\n- Set CodeQL to also check for best practises/code problems (as well as security)\r\n- Capitalize Publish GH Action\r\n- Change Windows Test workflow for consistent file extension (also means its formatted with Prettier) and remove leading empty linebreak\r\n- Run Prettier (maybe we should add this to build script to ensure all code is formatted?)\r\n- Change .gitattributes to have LF line-endings for more file types",
          "is_bot": false,
          "headline": "GitHub Actions Tidy-up (#3114)",
          "author_name": "Christian Oliff",
          "author_login": "coliff",
          "committed_at": "2024-04-23T17:16:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90066899f33e83c0866f8e078e97f9b82999db58",
          "body": "* Release 9.0.1\r\n\r\n* Updates Changelog",
          "is_bot": false,
          "headline": "Release 9.0.1 (#3112)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-16T14:31:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "519966c30cdbea60456f6609b0f4b01e80f16e5c",
          "body": null,
          "is_bot": false,
          "headline": "Update bug_report.yml",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-10T18:56:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72a8f610c892b49c9323d8e8420e010995a4f3a6",
          "body": "* Updates for gulp 5\r\n\r\n* .DS_Store ignored from copy operations",
          "is_bot": false,
          "headline": "Fixing tests on Windows + Windows test action (#3110)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-10T02:53:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38cf0f0c60e9bcf8c5572b11c6804085db356a5e",
          "body": "* Updates for gulp 5\r\n\r\n* .DS_Store ignored from copy operations",
          "is_bot": false,
          "headline": "Updates for gulp 5 (#3105)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-09T14:22:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d00a4b9fdadce8dc1992ce9b36c13eb9c1d3a9d8",
          "body": "* node 18+\r\n\r\n* Remove LGTM mention (service is no longer available)\r\n\r\n---------\r\n\r\nCo-authored-by: Christian Oliff <christianoliff@pm.me>",
          "is_bot": false,
          "headline": "node 18+ (#3104)",
          "author_name": "Rob Larsen",
          "author_login": "roblarsen",
          "committed_at": "2024-04-08T20:22:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6782409dafccb3c5ca209920473df2f6f4b325a8",
          "body": "Bumps [archiver](https://github.com/archiverjs/node-archiver) from 7.0.0 to 7.0.1.\r\n- [Release notes](https://github.com/archiverjs/node-archiver/releases)\r\n- [Changelog](https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/archiverjs/node-archiver/co\n[…]\ndevelopment\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump archiver from 7.0.0 to 7.0.1 (#3095)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:37:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "494a23993639a4e656b8207fdb06d360f2bda46d",
          "body": "Bumps [glob](https://github.com/isaacs/node-glob) from 10.3.10 to 10.3.12.\r\n- [Changelog](https://github.com/isaacs/node-glob/blob/main/changelog.md)\r\n- [Commits](https://github.com/isaacs/node-glob/compare/v10.3.10...v10.3.12)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: glob\r\n  dependency-typ\n[…]\ndevelopment\r\n  update-type: version-update:semver-patch\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump glob from 10.3.10 to 10.3.12 (#3096)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:37:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8bd981261dfb969878f227b4b4f75c8f0a89ab79",
          "body": "Bumps [eslint-plugin-mocha](https://github.com/lo1tuma/eslint-plugin-mocha) from 10.3.0 to 10.4.1.\r\n- [Release notes](https://github.com/lo1tuma/eslint-plugin-mocha/releases)\r\n- [Changelog](https://github.com/lo1tuma/eslint-plugin-mocha/blob/10.4.1/CHANGELOG.md)\r\n- [Commits](https://github.com/lo1tu\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump eslint-plugin-mocha from 10.3.0 to 10.4.1 (#3098)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:33:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c4f57fa9c08b1b01576f076778522d525f88e2ef",
          "body": "Bumps [mocha](https://github.com/mochajs/mocha) from 10.3.0 to 10.4.0.\r\n- [Release notes](https://github.com/mochajs/mocha/releases)\r\n- [Changelog](https://github.com/mochajs/mocha/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/mochajs/mocha/compare/v10.3.0...v10.4.0)\r\n\r\n---\r\nupdated-depe\n[…]\ndevelopment\r\n  update-type: version-update:semver-minor\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump mocha from 10.3.0 to 10.4.0 (#3099)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:23:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "01f2040e99b67830f8029114e5c85649c56888c1",
          "body": "Updates the requirements on [webpack](https://github.com/webpack/webpack) to permit the latest version.\r\n- [Release notes](https://github.com/webpack/webpack/releases)\r\n- [Commits](https://github.com/webpack/webpack/compare/v5.90.3...v5.91.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: webpack\r\n  dependency-type: direct:development\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack requirement in /src (#3101)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:22:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "307cef7a753848ff5ab526c8aa841a72b823cc04",
          "body": "Updates the requirements on [webpack-dev-server](https://github.com/webpack/webpack-dev-server) to permit the latest version.\r\n- [Release notes](https://github.com/webpack/webpack-dev-server/releases)\r\n- [Changelog](https://github.com/webpack/webpack-dev-server/blob/master/CHANGELOG.md)\r\n- [Commits]\n[…]\nbpack-dev-server\r\n  dependency-type: direct:development\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): update webpack-dev-server requirement in /src (#3102)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:20:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e750b328a2621a469fdf1533a55575a6edecc786",
          "body": "Bumps [gulp](https://github.com/gulpjs/gulp) from 4.0.2 to 5.0.0.\r\n- [Release notes](https://github.com/gulpjs/gulp/releases)\r\n- [Changelog](https://github.com/gulpjs/gulp/blob/master/CHANGELOG.md)\r\n- [Commits](https://github.com/gulpjs/gulp/compare/v4.0.2...v5.0.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- \n[…]\ndevelopment\r\n  update-type: version-update:semver-major\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump gulp from 4.0.2 to 5.0.0 (#3100)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T17:18:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e99a501a25f64aafb9a50f441087ed9486662e86",
          "body": "Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): bump streetsidesoftware/cspell-action from 5 to 6 (#3097)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2024-04-01T07:28:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 53,
      "latest_release_at": "2019-11-05T17:10:29Z",
      "latest_release_tag": "v0.0.1",
      "releases_from_tags": false,
      "days_since_last_push": 20,
      "active_weeks_last_year": 11,
      "days_since_latest_release": 2451,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": false,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": null,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "html5-boilerplate",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "h5bp",
            "template",
            "front-end"
          ],
          "ecosystem": "npm",
          "matches_repo": false,
          "registry_url": "https://www.npmjs.com/package/html5-boilerplate",
          "is_deprecated": false,
          "latest_version": "9.0.1",
          "repository_url": "https://github.com/h5bp/html5-boilerplate",
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 3682,
          "first_published_at": "2016-09-29T11:39:26.809000Z",
          "latest_published_at": "2024-04-16T14:35:40.940000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 827
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 11,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2014-04-09",
            "count": 1
          },
          {
            "date": "2018-05-30",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 3644,
      "source_files_sampled": 8,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "dist/package.json",
        "package.json",
        "src/package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.1.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3jxr-9vmj-r5cp"
            ],
            "fixed_version": "5.0.7",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.6",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3jxr-9vmj-r5cp"
            ],
            "fixed_version": "5.0.7",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.2.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-52cp-r559-cp3m"
            ],
            "fixed_version": "4.3.0",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 3
        },
        "advisory_count": 3,
        "affected_count": 3,
        "assessed_count": 343,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 6,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@aashutoshrathi/word-wrap",
            "direct": false,
            "version": "1.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/eslint-utils",
            "direct": false,
            "version": "4.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/regexpp",
            "direct": false,
            "version": "4.12.2",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-array",
            "direct": false,
            "version": "0.23.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-helpers",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/core",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/js",
            "direct": false,
            "version": "10.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/object-schema",
            "direct": false,
            "version": "3.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/plugin-kit",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "@gulpjs/messages",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@gulpjs/to-absolute-glob",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/core",
            "direct": false,
            "version": "0.19.1",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/node",
            "direct": false,
            "version": "0.16.7",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/module-importer",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/retry",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@isaacs/cliui",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.scandir",
            "direct": false,
            "version": "2.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.stat",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@nodelib/fs.walk",
            "direct": false,
            "version": "1.2.8",
            "ecosystem": "npm"
          },
          {
            "name": "@pkgjs/parseargs",
            "direct": false,
            "version": "0.11.0",
            "ecosystem": "npm"
          },
          {
            "name": "@sindresorhus/merge-streams",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/esrecurse",
            "direct": false,
            "version": "4.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "@types/expect",
            "direct": false,
            "version": "1.20.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/json-schema",
            "direct": false,
            "version": "7.0.15",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "20.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/vinyl",
            "direct": false,
            "version": "2.0.12",
            "ecosystem": "npm"
          },
          {
            "name": "abort-controller",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.17.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn-jsx",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "6.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-colors",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-wrap",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "anymatch",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "archiver",
            "direct": false,
            "version": "7.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "archiver-utils",
            "direct": false,
            "version": "5.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "array-each",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "array-slice",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "async",
            "direct": false,
            "version": "3.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "async-done",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "async-settle",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "autoprefixer",
            "direct": false,
            "version": "10.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "b4a",
            "direct": false,
            "version": "1.6.4",
            "ecosystem": "npm"
          },
          {
            "name": "bach",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "base64-js",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "baseline-browser-mapping",
            "direct": false,
            "version": "2.10.38",
            "ecosystem": "npm"
          },
          {
            "name": "binary-extensions",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "bl",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "browser-stdout",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "browserslist",
            "direct": false,
            "version": "4.28.4",
            "ecosystem": "npm"
          },
          {
            "name": "buffer",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "buffer-crc32",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "camelcase",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "caniuse-lite",
            "direct": false,
            "version": "1.0.30001799",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": false,
            "version": "5.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "chokidar",
            "direct": false,
            "version": "3.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "chokidar",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "cliui",
            "direct": false,
            "version": "7.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "cliui",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "clone",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "color-support",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "compress-commons",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "concat-with-sourcemaps",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "copy-props",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "copy-webpack-plugin",
            "direct": false,
            "version": "^14.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "core-util-is",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "crc-32",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "crc32-stream",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.3.6",
            "ecosystem": "npm"
          },
          {
            "name": "decamelize",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "deep-is",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "del",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "detect-file",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "diff",
            "direct": false,
            "version": "8.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "duplexify",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "each-props",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "eastasianwidth",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "easy-transform-stream",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "electron-to-chromium",
            "direct": false,
            "version": "1.5.378",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "9.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "end-of-stream",
            "direct": false,
            "version": "1.4.4",
            "ecosystem": "npm"
          },
          {
            "name": "escalade",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint",
            "direct": false,
            "version": "10.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-plugin-mocha",
            "direct": false,
            "version": "11.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-scope",
            "direct": false,
            "version": "9.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "3.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "espree",
            "direct": false,
            "version": "11.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "esquery",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "esrecurse",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "esutils",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "event-target-shim",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "events",
            "direct": false,
            "version": "3.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "expand-tilde",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "extend",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "fancy-log",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-fifo",
            "direct": false,
            "version": "1.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-glob",
            "direct": false,
            "version": "3.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-json-stable-stringify",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-levenshtein",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "fast-levenshtein",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fastest-levenshtein",
            "direct": false,
            "version": "1.0.16",
            "ecosystem": "npm"
          },
          {
            "name": "fastq",
            "direct": false,
            "version": "1.19.1",
            "ecosystem": "npm"
          },
          {
            "name": "file-entry-cache",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fill-range",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "findup-sync",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fined",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "flagged-respawn",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "flat",
            "direct": false,
            "version": "5.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "flat-cache",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "flatted",
            "direct": false,
            "version": "3.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "for-in",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "for-own",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "foreground-child",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "fork-stream",
            "direct": false,
            "version": "0.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "fraction.js",
            "direct": false,
            "version": "5.3.4",
            "ecosystem": "npm"
          },
          {
            "name": "fs-mkdirp-stream",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-caller-file",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "10.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "glob",
            "direct": false,
            "version": "13.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "glob-stream",
            "direct": false,
            "version": "8.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "glob-watcher",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "global-modules",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "global-prefix",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "globals",
            "direct": false,
            "version": "15.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "globals",
            "direct": false,
            "version": "16.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "globby",
            "direct": false,
            "version": "14.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "glogg",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "gulp",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-autoprefixer",
            "direct": false,
            "version": "10.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-cli",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-eslint-new",
            "direct": false,
            "version": "2.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-header",
            "direct": false,
            "version": "2.0.12",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-plugin-extras",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "gulp-rename",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "gulplog",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "has",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "he",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "homedir-polyfill",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "html-webpack-plugin",
            "direct": false,
            "version": "^5.6.7",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.6.3",
            "ecosystem": "npm"
          },
          {
            "name": "ieee754",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "imurmurhash",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ini",
            "direct": false,
            "version": "1.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "interpret",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-absolute",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-binary-path",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-core-module",
            "direct": false,
            "version": "2.8.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-extglob",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-glob",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-negated-glob",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-number",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-path-cwd",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-path-inside",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-path-inside",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-plain-obj",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-plain-object",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-relative",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-stream",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-unc-path",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-unicode-supported",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-valid-glob",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-windows",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "isarray",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isobject",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "jackspeak",
            "direct": false,
            "version": "3.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-buffer",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-stable-stringify-without-jsonify",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "keyv",
            "direct": false,
            "version": "4.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "last-run",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lazystream",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "lead",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "levn",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "liftoff",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "locate-path",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "lodash",
            "direct": false,
            "version": "4.18.1",
            "ecosystem": "npm"
          },
          {
            "name": "log-symbols",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "10.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "lru-cache",
            "direct": false,
            "version": "11.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "main.css",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "map-cache",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "map-stream",
            "direct": false,
            "version": "0.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "merge-stream",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge2",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "5.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "9.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "minipass",
            "direct": false,
            "version": "7.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "mocha",
            "direct": false,
            "version": "11.7.5",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "mute-stdout",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.15",
            "ecosystem": "npm"
          },
          {
            "name": "natural-compare",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-releases",
            "direct": false,
            "version": "2.0.49",
            "ecosystem": "npm"
          },
          {
            "name": "normalize-path",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "now-and-later",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "object.defaults",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "object.pick",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "optionator",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-locate",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-map",
            "direct": false,
            "version": "7.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "package-json-from-dist",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "parse-filepath",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "parse-passwd",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-exists",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-parse",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "path-root",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-root-regex",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "path-scurry",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-scurry",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "path-type",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "plugin-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.15",
            "ecosystem": "npm"
          },
          {
            "name": "postcss-value-parser",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "prelude-ls",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "presentable-error",
            "direct": false,
            "version": "0.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": false,
            "version": "3.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "process",
            "direct": false,
            "version": "0.11.10",
            "ecosystem": "npm"
          },
          {
            "name": "process-nextick-args",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "punycode",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "queue-microtask",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "queue-tick",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "readable-stream",
            "direct": false,
            "version": "2.3.8",
            "ecosystem": "npm"
          },
          {
            "name": "readable-stream",
            "direct": false,
            "version": "3.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "readable-stream",
            "direct": false,
            "version": "4.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "readdir-glob",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "readdirp",
            "direct": false,
            "version": "3.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "readdirp",
            "direct": false,
            "version": "4.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "rechoir",
            "direct": false,
            "version": "0.8.0",
            "ecosystem": "npm"
          },
          {
            "name": "remove-trailing-separator",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "replace-ext",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "replace-homedir",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "require-directory",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "resolve",
            "direct": false,
            "version": "1.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-dir",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "resolve-options",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "reusify",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "run-parallel",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safe-buffer",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "safe-buffer",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "6.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.7.4",
            "ecosystem": "npm"
          },
          {
            "name": "semver-greatest-satisfied-range",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "serialize-javascript",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "slash",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.5.7",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "sparkles",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "stream-composer",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "stream-exhaust",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "stream-shift",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "streamx",
            "direct": false,
            "version": "2.15.1",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "5.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "string_decoder",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "string_decoder",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "7.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-json-comments",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "8.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "sver",
            "direct": false,
            "version": "1.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "tar-stream",
            "direct": false,
            "version": "3.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "teex",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ternary-stream",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "through2",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "through2",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "to-regex-range",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "to-through",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-check",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "unc-path-regex",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "undertaker",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "undertaker-registry",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "5.26.5",
            "ecosystem": "npm"
          },
          {
            "name": "unicorn-magic",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "update-browserslist-db",
            "direct": false,
            "version": "1.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "uri-js",
            "direct": false,
            "version": "4.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "util-deprecate",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "v8flags",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "value-or-function",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl-contents",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl-fs",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl-sourcemap",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vinyl-sourcemaps-apply",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "webpack",
            "direct": false,
            "version": "^5.108.3",
            "ecosystem": "npm"
          },
          {
            "name": "webpack-cli",
            "direct": false,
            "version": "^7.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "webpack-dev-server",
            "direct": false,
            "version": "^5.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "webpack-merge",
            "direct": false,
            "version": "^6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "workerpool",
            "direct": false,
            "version": "9.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "8.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "y18n",
            "direct": false,
            "version": "5.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "yargs",
            "direct": false,
            "version": "16.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "yargs",
            "direct": false,
            "version": "17.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "20.2.9",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "21.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-unparser",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "yocto-queue",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "zip-stream",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 349,
        "direct_count": 0,
        "indirect_count": 349
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 3,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "paulirish",
          "commits": 420,
          "avatar_url": "https://avatars.githubusercontent.com/u/39191?v=4"
        },
        {
          "type": "User",
          "login": "roblarsen",
          "commits": 384,
          "avatar_url": "https://avatars.githubusercontent.com/u/361421?v=4"
        },
        {
          "type": "User",
          "login": "coliff",
          "commits": 251,
          "avatar_url": "https://avatars.githubusercontent.com/u/1212885?v=4"
        },
        {
          "type": "User",
          "login": "necolas",
          "commits": 161,
          "avatar_url": "https://avatars.githubusercontent.com/u/239676?v=4"
        },
        {
          "type": "User",
          "login": "alrra",
          "commits": 149,
          "avatar_url": "https://avatars.githubusercontent.com/u/1223565?v=4"
        },
        {
          "type": "User",
          "login": "mathiasbynens",
          "commits": 59,
          "avatar_url": "https://avatars.githubusercontent.com/u/81942?v=4"
        },
        {
          "type": "User",
          "login": "drublic",
          "commits": 43,
          "avatar_url": "https://avatars.githubusercontent.com/u/502487?v=4"
        },
        {
          "type": "User",
          "login": "chuanxshi",
          "commits": 27,
          "avatar_url": "https://avatars.githubusercontent.com/u/153513?v=4"
        },
        {
          "type": "User",
          "login": "h5bp-bot",
          "commits": 26,
          "avatar_url": "https://avatars.githubusercontent.com/u/8667317?v=4"
        },
        {
          "type": "User",
          "login": "darktable",
          "commits": 20,
          "avatar_url": "https://avatars.githubusercontent.com/u/585604?v=4"
        }
      ],
      "contributors_sampled": 98,
      "top_contributor_share": 0.231
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build-dist.yml",
        "codeql-analysis.yml",
        "dependency-review.yml",
        "ossf-scorecard.yml",
        "publish.yml",
        "push-to-template.yml",
        "spellcheck.yml",
        "test.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "eslint.config.mjs"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 82 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 8,
            "reason": "dependency not pinned by hash detected -- score normalized to 8",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool detected: CodeQL",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "b7e31d67f4cf83e23d51f4decc73618bf8bd77ba",
        "ran_at": "2026-07-23T12:26:20Z",
        "aggregate_score": 5.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-21T12:58:21Z",
      "oldest_open_prs": [
        {
          "number": 2,
          "created_at": "2025-09-09T18:50:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": null,
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/roblarsen/html5-boilerplate",
    "host": "github.com",
    "name": "html5-boilerplate",
    "owner": "roblarsen"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 52,
      "inputs": {
        "security": 66,
        "vitality": 55,
        "community": 20,
        "governance": 50,
        "engineering": 69
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 55,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 62,
            "inputs": {
              "commits_last_year": 53,
              "human_commit_share": 0.26,
              "days_since_last_push": 20,
              "active_weeks_last_year": 11
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 20 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 20
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "11/52 weeks with commits",
                "points": 7.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 11
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "53 commits in the last year",
                "points": 15.6,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 53
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "at_risk",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 44,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.0.1",
              "releases_from_tags": false,
              "days_since_latest_release": 2451,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2451 days ago",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2451
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 21,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 21 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 21
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 20,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 16,
            "inputs": {
              "forks": 2,
              "stars": 11,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "11 stars",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": false,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 50,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "bus_factor": 3,
              "contributors_sampled": 98,
              "top_contributor_share": 0.231
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "3 contributor(s) cover half of all commits",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 23% of commits",
                "points": 17.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 23
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "98 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 98
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 82 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "0/1 decided PRs merged",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 0,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "followers": 548,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "roblarsen",
              "public_repos": 74,
              "account_age_days": 5824
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "548 followers of roblarsen",
                "points": 19.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 548,
                      "login": "roblarsen"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "74 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 74
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 69,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.mjs",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": "http://html5boilerplate.com",
              "has_readme": false,
              "has_docs_dir": true,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "http://html5boilerplate.com",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 66,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 5.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 82 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "22 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool detected: CodeQL",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 343 resolved dependencies against OSV; 6 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 343
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 6
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 3,
              "affected_packages": 3,
              "assessed_packages": 343,
              "unassessed_packages": 6,
              "affected_by_severity": "high 3",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 343,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 27
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 56,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.962,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "25 of 26 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 25,
                      "sampled": 26
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 69,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.05,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.73
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.mjs",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "5 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 5,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "73 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 73,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 8",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 55,
            "inputs": {
              "primary_language": "JavaScript",
              "largest_source_bytes": 3644,
              "source_files_sampled": 8,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "JavaScript without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "JavaScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/8 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 8,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "Community profile unavailable",
    "npm package 'html5-boilerplate' points at a different repository (https://github.com/h5bp/html5-boilerplate); excluded from ecosystem scoring"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T12:26:36.525923Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/roblarsen/html5-boilerplate.svg",
  "full_name": "roblarsen/html5-boilerplate",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Related records

Inspected repositories sharing catalogue tags or ecosystems with roblarsen/html5-boilerplate. Read them side by side →

97apache/supersetApache Superset is a Data Visualization and Data Exploration PlatformExcellent93deepset-ai/haystackOpen-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.Excellent93apache/airflowApache Airflow - A platform to programmatically author, schedule, and monitor workflowsExcellent93spotify/backstageBackstage is an open framework for building developer portalsExcellent92fastify/fastifyFast and low overhead web framework, for Node.jsExcellent91dotnet/aspnetcoreASP.NET Core is a cross-platform .NET framework for building modern cloud-based web applications on Windows, Mac, or Linux.Excellent

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statistics — npm.