Bump @actions/artifact from 1.1.2 to 2.2.1 · austenstone/copilot-license-cleanup@cdb74da

Triggered via pull request January 9, 2025 18:12

opened #136

Status Failure

Total duration 26s

Artifacts –

dependency-review.yml

on: pull_request

1 error and 6 warnings

Dependency review detected vulnerable packages.

npm/twirp-ts has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/signal-exit has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/graceful-fs has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/event-target-shim has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/core-util-is has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.

npm/bottleneck has an OpenSSF Scorecard of 1.9, which is less than this repository's threshold of 3.