chore(deps): bump advanced-security/component-detection-dependency-submission-action from 0.0.6 to 0.1.0 · AlbusKavaliro/TempMaiSe@b3570c9

Triggered via pull request August 1, 2025 07:19

opened #138

Status Success

Total duration 2m 25s

Artifacts –

dependency-review.yaml

on: pull_request

1 error and 10 warnings

$GITHUB_STEP_SUMMARY upload aborted, supports content up to a size of 1024k, got 1388k. For more information see: https://docs.github.com/actions/using-workflows/workflow-commands-for-github-actions#adding-a-markdown-summary

npm/human-signals has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/graceful-fs has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/graceful-fs has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/get-caller-file has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/cross-spawn has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/core-util-is has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.

npm/compare-func has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/cli-table3 has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/bottleneck has an OpenSSF Scorecard of 1.9, which is less than this repository's threshold of 3.

npm/@isaacs/string-locale-compare has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.