fix: bump the npm group with 29 updates · janbiasi/rollup-plugin-sbom@8bd433f

Triggered via pull request November 24, 2025 02:15

opened #215

Status Success

Total duration 55s

Artifacts –

dependency-review.yml

on: pull_request

5 warnings

npm/web-worker has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/tunnel has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/ip-address has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/human-signals has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/agent-base has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.