chore(deps): update npm dev (major) · slsa-framework/slsa-verifier@9c0db6a

Triggered via pull request February 16, 2026 19:51

synchronize #874

Status Success

Total duration 1m 0s

Artifacts –

depsreview.yml

on: pull_request

10 warnings

npm/data-uri-to-buffer has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/cross-spawn has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/clipanion has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/aws4 has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/agent-base has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/@yarnpkg/shell has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/@yarnpkg/parsers has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/@yarnpkg/libzip has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/@yarnpkg/fslib has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/@yarnpkg/core has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.