Bump @actions/artifact from 1.1.2 to 2.1.11 · austenstone/copilot-license-cleanup@62dc86f

Triggered via pull request November 16, 2024 18:31

opened #119

Status Failure

Total duration 39s

Artifacts –

dependency-review.yml

on: pull_request

1 error and 5 warnings

Dependency review detected vulnerable packages.

npm/twirp-ts has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/graceful-fs has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/event-target-shim has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/core-util-is has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.

npm/bottleneck has an OpenSSF Scorecard of 1.9, which is less than this repository's threshold of 3.