fix: bump the npm group with 29 updates · janbiasi/rollup-plugin-sbom@2aa6425

Triggered via pull request November 3, 2025 02:17

opened #210

Status Success

Total duration 46s

Artifacts –

dependency-review.yml

on: pull_request

5 warnings

npm/tunnel has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/sax has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/ip-address has an OpenSSF Scorecard of 2.1, which is less than this repository's threshold of 3.

npm/human-signals has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.

npm/agent-base has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.