Bump jsonpath-plus from 8.1.0 to 10.3.0 · advanced-security/codeql-sarif-security-standard-annotator@2d4f6d6

Triggered via pull request April 4, 2025 10:44

opened #163

Status Success

Total duration 15s

Artifacts –

dependency-review.yml Required

on: pull_request

3 warnings

npm/jsep has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/@jsep-plugin/regex has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/@jsep-plugin/assignment has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.