Skip to content

Add large pkg lock example again for DR Action branch test #35

Add large pkg lock example again for DR Action branch test

Add large pkg lock example again for DR Action branch test #35

Re-run triggered June 4, 2024 18:06
Status Failure
Total duration 56s
Artifacts

dependency-review.yml

on: pull_request
dependency-review
46s
dependency-review
Fit to window
Zoom out
Zoom in

Annotations

1 error and 11 warnings
dependency-review
Dependency review detected vulnerable packages.
dependency-review
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
dependency-review
Unexpected input(s) 'content-summary-in-pr', valid inputs are ['repo-token', 'fail-on-severity', 'fail-on-scopes', 'base-ref', 'head-ref', 'config-file', 'allow-licenses', 'deny-licenses', 'allow-dependencies-licenses', 'allow-ghsas', 'external-repo-token', 'license-check', 'vulnerability-check', 'comment-summary-in-pr', 'deny-packages', 'deny-groups', 'retry-on-snapshot-warnings', 'retry-on-snapshot-warnings-timeout', 'warn-only', 'show-openssf-scorecard', 'warn-on-openssf-scorecard-level']
OpenSSF Scorecard Warning
npm/agent-base has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
npm/array-flatten has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
npm/core-util-is has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
npm/encoding has an OpenSSF Scorecard of 1.8, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
npm/event-target-shim has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
npm/http-proxy-agent has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
npm/inherits has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
npm/inherits has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.
OpenSSF Scorecard Warning
npm/json-bigint has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.