chore(deps-dev): Bump @vercel/ncc from 0.38.1 to 0.38.3 · elide-dev/setup-elide@5d98cb9

Triggered via pull request November 18, 2024 06:02

opened #120

Status Failure

Total duration 5m 14s

Artifacts –

dependency-review.yml

on: pull_request

2 errors and 10 warnings

Dependency review detected vulnerable packages.

$GITHUB_STEP_SUMMARY upload aborted, supports content up to a size of 1024k, got 1414k. For more information see: https://docs.github.com/actions/using-workflows/workflow-commands-for-github-actions#adding-a-markdown-summary

npm/@bcoe/v8-coverage has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/bottleneck has an OpenSSF Scorecard of 1.9, which is less than this repository's threshold of 3.

npm/bs-logger has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.

npm/common-tags has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.

npm/deepmerge has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/deprecation has an OpenSSF Scorecard of 2.3, which is less than this repository's threshold of 3.

npm/eslint-plugin-filenames has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/jest-pnp-resolver has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/jest-sonar-reporter has an OpenSSF Scorecard of 2, which is less than this repository's threshold of 3.

npm/language-subtag-registry has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.