Bump tmp in the npm_and_yarn group across 1 directory #167

StefRuseva88 · 2025-11-22T10:09:06Z

No description provided.

Merge pull request #160 from StefRuseva88/main

Bumps the npm_and_yarn group with 1 update in the / directory: [tmp](https://github.com/raszi/node-tmp). Updates `tmp` from 0.2.3 to 0.2.4 - [Changelog](https://github.com/raszi/node-tmp/blob/master/CHANGELOG.md) - [Commits](raszi/node-tmp@v0.2.3...v0.2.4) --- updated-dependencies: - dependency-name: tmp dependency-version: 0.2.4 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

…_and_yarn-5a0513363d Bump tmp from 0.2.3 to 0.2.4 in the npm_and_yarn group across 1 directory

Bumps the npm_and_yarn group with 1 update in the / directory: [brace-expansion](https://github.com/juliangruber/brace-expansion). Updates `brace-expansion` from 1.1.11 to 1.1.12 - [Release notes](https://github.com/juliangruber/brace-expansion/releases) - [Commits](juliangruber/brace-expansion@1.1.11...v1.1.12) --- updated-dependencies: - dependency-name: brace-expansion dependency-version: 1.1.12 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

…_and_yarn-6ea9762674 Bump brace-expansion from 1.1.11 to 1.1.12 in the npm_and_yarn group across 1 directory

Bumps the npm_and_yarn group with 1 update in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 5.4.19 to 5.4.20 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.20/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.20/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 5.4.20 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

…_and_yarn-08d968b73d Bump vite from 5.4.19 to 5.4.20 in the npm_and_yarn group across 1 directory

Bumps the npm_and_yarn group with 1 update in the / directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite). Updates `vite` from 5.4.20 to 5.4.21 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/v5.4.21/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/v5.4.21/packages/vite) --- updated-dependencies: - dependency-name: vite dependency-version: 5.4.21 dependency-type: direct:development dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

…_and_yarn-d50880170f Bump vite from 5.4.20 to 5.4.21 in the npm_and_yarn group across 1 directory

Bumps the npm_and_yarn group with 1 update in the / directory: [js-yaml](https://github.com/nodeca/js-yaml). Updates `js-yaml` from 4.1.0 to 4.1.1 - [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md) - [Commits](nodeca/js-yaml@4.1.0...4.1.1) --- updated-dependencies: - dependency-name: js-yaml dependency-version: 4.1.1 dependency-type: indirect dependency-group: npm_and_yarn ... Signed-off-by: dependabot[bot] <[email protected]>

…_and_yarn-3c67cbb9cd Bump js-yaml from 4.1.0 to 4.1.1 in the npm_and_yarn group across 1 directory

github-actions · 2025-11-22T10:09:18Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

npm/brace-expansion

1.1.12

🟢 4.2

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 8/27 approved changesets -- score normalized to 2
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
Maintained	⚠️ 2	1 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 2
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy	⚠️ 0	security policy file not detected
Vulnerabilities	🟢 8	2 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/brace-expansion

2.0.2

🟢 4.2

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 8/27 approved changesets -- score normalized to 2
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
Maintained	⚠️ 2	1 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 2
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy	⚠️ 0	security policy file not detected
Vulnerabilities	🟢 8	2 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/js-yaml

4.1.1

🟢 5.2

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Code-Review	⚠️ 1	Found 4/30 approved changesets -- score normalized to 1
Maintained	🟢 5	5 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 5
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Packaging	⚠️ -1	packaging workflow not detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Vulnerabilities	🟢 10	0 existing vulnerabilities detected
License	🟢 10	license file detected
Fuzzing	🟢 10	project is fuzzed
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Security-Policy	🟢 10	security policy file detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/tmp

0.2.4

🟢 3.4

Details

Check	Score	Reason
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Maintained	⚠️ 0	0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Packaging	⚠️ -1	packaging workflow not detected
Code-Review	⚠️ 2	Found 3/14 approved changesets -- score normalized to 2
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Vulnerabilities	⚠️ 2	8 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/vite

5.4.21

🟢 6.9

Details

Check	Score	Reason
Code-Review	🟢 6	Found 16/24 approved changesets -- score normalized to 6
Maintained	🟢 10	30 commit(s) and 14 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	🟢 6	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
License	🟢 10	license file detected
Binary-Artifacts	🟢 7	binaries present in source code
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Signed-Releases	⚠️ -1	no releases found
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy	🟢 10	security policy file detected
Vulnerabilities	🟢 8	2 existing vulnerabilities detected
SAST	🟢 3	SAST tool is not run on all commits -- score normalized to 3

Scanned Files

package-lock.json

github-actions · 2025-11-22T10:09:42Z

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	57.24%	316 / 552
🔵	Statements	57.24%	316 / 552
🔵	Functions	86.36%	38 / 44
🔵	Branches	85.18%	69 / 81

File Coverage

No changed files found.

Generated in workflow #195 for commit 9dd8ecf by the Vitest Coverage Report Action

Merge pull request #167 from StefRuseva88/main

StefRuseva88 and others added 13 commits June 12, 2025 10:39

Merge pull request #161 from StefRuseva88/StefRuseva88-patch-1

0b83a00

Merge pull request #160 from StefRuseva88/main

Merge pull request #162 from StefRuseva88/dependabot/npm_and_yarn/npm…

266266a

…_and_yarn-5a0513363d Bump tmp from 0.2.3 to 0.2.4 in the npm_and_yarn group across 1 directory

Merge pull request #163 from StefRuseva88/dependabot/npm_and_yarn/npm…

a074ed7

…_and_yarn-6ea9762674 Bump brace-expansion from 1.1.11 to 1.1.12 in the npm_and_yarn group across 1 directory

Update package.json

e8d419a

Update test script in package.json

8d51ebb

Merge pull request #164 from StefRuseva88/dependabot/npm_and_yarn/npm…

9db831c

…_and_yarn-08d968b73d Bump vite from 5.4.19 to 5.4.20 in the npm_and_yarn group across 1 directory

Merge pull request #165 from StefRuseva88/dependabot/npm_and_yarn/npm…

d1a6bcb

…_and_yarn-d50880170f Bump vite from 5.4.20 to 5.4.21 in the npm_and_yarn group across 1 directory

Merge pull request #166 from StefRuseva88/dependabot/npm_and_yarn/npm…

9dd8ecf

…_and_yarn-3c67cbb9cd Bump js-yaml from 4.1.0 to 4.1.1 in the npm_and_yarn group across 1 directory

StefRuseva88 merged commit 42ac657 into StefRuseva88-patch-1 Nov 22, 2025
12 of 13 checks passed

StefRuseva88 added a commit that referenced this pull request Nov 22, 2025

Merge pull request #168 from StefRuseva88/StefRuseva88-patch-1

2c919e6

Merge pull request #167 from StefRuseva88/main

StefRuseva88 mentioned this pull request Nov 29, 2025

Merge pull request #168 from StefRuseva88/StefRuseva88-patch-1 #169

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump tmp in the npm_and_yarn group across 1 directory #167

Bump tmp in the npm_and_yarn group across 1 directory #167

Uh oh!

StefRuseva88 commented Nov 22, 2025

Uh oh!

github-actions bot commented Nov 22, 2025

Uh oh!

github-actions bot commented Nov 22, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump tmp in the npm_and_yarn group across 1 directory #167

Bump tmp in the npm_and_yarn group across 1 directory #167

Uh oh!

Conversation

StefRuseva88 commented Nov 22, 2025

Uh oh!

github-actions bot commented Nov 22, 2025

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

github-actions bot commented Nov 22, 2025

Coverage Report

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants