Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.1.3
Report Generated On: Fri, 13 Jun 2025 10:48:30 GMT
Dependencies Scanned: 403 (181 unique)
Vulnerable Dependencies: 1
Vulnerabilities Found: 2
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2025-06-13T10:48:18Z
NVD API Last Modified: 2025-06-13T10:15:21Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Highest Severity	CVE Count	Confidence	Evidence Count
@colors/colors:1.6.0		pkg:npm/%40colors%2Fcolors@1.6.0		0		8
@commander-js/extra-typings:13.1.0		pkg:npm/%40commander-js%2Fextra-typings@13.1.0		0		8
@eslint-community/eslint-utils:4.7.0		pkg:npm/%40eslint-community%2Feslint-utils@4.7.0		0		8
@eslint-community/regexpp:4.12.1		pkg:npm/%40eslint-community%2Fregexpp@4.12.1		0		8
@eslint/config-array:0.20.0		pkg:npm/%40eslint%2Fconfig-array@0.20.0		0		8
@eslint/config-helpers:0.2.2		pkg:npm/%40eslint%2Fconfig-helpers@0.2.2		0		7
@eslint/core:0.14.0		pkg:npm/%40eslint%2Fcore@0.14.0		0		8
@eslint/eslintrc:3.3.1		pkg:npm/%40eslint%2Feslintrc@3.3.1		0		8
@eslint/js:9.28.0		pkg:npm/%40eslint%2Fjs@9.28.0		0		7
@eslint/object-schema:2.1.6		pkg:npm/%40eslint%2Fobject-schema@2.1.6		0		8
@eslint/plugin-kit:0.3.1		pkg:npm/%40eslint%2Fplugin-kit@0.3.1		0		8
@humanfs/core:0.19.1		pkg:npm/%40humanfs%2Fcore@0.19.1		0		8
@humanfs/node:0.16.6		pkg:npm/%40humanfs%2Fnode@0.16.6		0		8
@humanwhocodes/module-importer:1.0.1		pkg:npm/%40humanwhocodes%2Fmodule-importer@1.0.1		0		6
@humanwhocodes/retry:0.3.1		pkg:npm/%40humanwhocodes%2Fretry@0.3.1		0		6
@humanwhocodes/retry:0.4.2		pkg:npm/%40humanwhocodes%2Fretry@0.4.2		0		6
@nodelib/fs.scandir:2.1.5		pkg:npm/%40nodelib%2Ffs.scandir@2.1.5		0		5
@nodelib/fs.stat:2.0.5		pkg:npm/%40nodelib%2Ffs.stat@2.0.5		0		5
@nodelib/fs.walk:1.2.8		pkg:npm/%40nodelib%2Ffs.walk@1.2.8		0		5
@oxc-resolver/binding-linux-x64-gnu:11.1.0		pkg:npm/%40oxc-resolver%2Fbinding-linux-x64-gnu@11.1.0		0		6
@oxc-resolver/binding-linux-x64-musl:11.1.0		pkg:npm/%40oxc-resolver%2Fbinding-linux-x64-musl@11.1.0		0		6
@pkgr/core:0.2.4		pkg:npm/%40pkgr%2Fcore@0.2.4		0		7
@sinonjs/commons:3.0.1		pkg:npm/%40sinonjs%2Fcommons@3.0.1		0		8
@sinonjs/fake-timers:13.0.5		pkg:npm/%40sinonjs%2Ffake-timers@13.0.5		0		9
@sinonjs/samsam:8.0.2		pkg:npm/%40sinonjs%2Fsamsam@8.0.2		0		7
@tsconfig/node18:18.2.4		pkg:npm/%40tsconfig%2Fnode18@18.2.4		0		5
@types/cross-spawn:6.0.6		pkg:npm/%40types%2Fcross-spawn@6.0.6		0		6
@types/estree:1.0.7		pkg:npm/%40types%2Festree@1.0.7		0		6
@types/json-schema:7.0.15		pkg:npm/%40types%2Fjson-schema@7.0.15		0		6
@types/node:24.0.0		pkg:npm/%40types%2Fnode@24.0.0		0		6
@types/sinon:17.0.4		pkg:npm/%40types%2Fsinon@17.0.4		0		6
@types/sinonjs__fake-timers:8.1.5		pkg:npm/%40types%2Fsinonjs__fake-timers@8.1.5		0		6
@types/yauzl:2.10.0		pkg:npm/%40types%2Fyauzl@2.10.0		0		6
@typescript-eslint/eslint-plugin:8.34.0		pkg:npm/%40typescript-eslint%2Feslint-plugin@8.34.0		0		7
@typescript-eslint/parser:8.34.0		pkg:npm/%40typescript-eslint%2Fparser@8.34.0		0		7
@typescript-eslint/project-service:8.34.0		pkg:npm/%40typescript-eslint%2Fproject-service@8.34.0		0		7
@typescript-eslint/scope-manager:8.34.0		pkg:npm/%40typescript-eslint%2Fscope-manager@8.34.0		0		7
@typescript-eslint/tsconfig-utils:8.34.0		pkg:npm/%40typescript-eslint%2Ftsconfig-utils@8.34.0		0		7
@typescript-eslint/type-utils:8.34.0		pkg:npm/%40typescript-eslint%2Ftype-utils@8.34.0		0		7
@typescript-eslint/types:8.34.0		pkg:npm/%40typescript-eslint%2Ftypes@8.34.0		0		7
@typescript-eslint/typescript-estree:8.34.0		pkg:npm/%40typescript-eslint%2Ftypescript-estree@8.34.0		0		7
@typescript-eslint/utils:8.34.0		pkg:npm/%40typescript-eslint%2Futils@8.34.0		0		7
@typescript-eslint/visitor-keys:8.34.0		pkg:npm/%40typescript-eslint%2Fvisitor-keys@8.34.0		0		7
acorn-jsx:5.3.2		pkg:npm/acorn-jsx@5.3.2		0		9
acorn:8.14.1		pkg:npm/acorn@8.14.1		0		14
ajv:6.12.6	cpe:2.3:a:ajv.js:ajv:6.12.6:::::::*	pkg:npm/ajv@6.12.6		0	Highest	8
ansi-styles:4.3.0		pkg:npm/ansi-styles@4.3.0		0		8
argparse:2.0.1		pkg:npm/argparse@2.0.1		0		5
async:3.2.6	cpe:2.3:a:async_project:async:3.2.6:::::::*	pkg:npm/async@3.2.6		0	Highest	8
balanced-match:1.0.2		pkg:npm/balanced-match@1.0.2		0		9
brace-expansion:2.0.1	cpe:2.3:a:brace_expansion_project:brace_expansion:2.0.1:::::::*	pkg:npm/brace-expansion@2.0.1	HIGH	2	Highest	9
braces:3.0.3	cpe:2.3:a:braces_project:braces:3.0.3:::::::*	pkg:npm/braces@3.0.3		0	Highest	8
buffer-crc32:0.2.13		pkg:npm/buffer-crc32@0.2.13		0		7
callsites:3.1.0		pkg:npm/callsites@3.1.0		0		8
chalk:4.1.2		pkg:npm/chalk@4.1.2		0		5
color-convert:2.0.1		pkg:npm/color-convert@2.0.1		0		6
color-name:1.1.4		pkg:npm/color-name@1.1.4		0		8
commander:13.1.0		pkg:npm/commander@13.1.0		0		6
commander:7.2.0		pkg:npm/commander@7.2.0		0		6
concat-map:0.0.1		pkg:npm/concat-map@0.0.1		0		8
cross-spawn:7.0.6		pkg:npm/cross-spawn@7.0.6		0		7
debug:4.4.0	cpe:2.3:a:debug_project:debug:4.4.0:::::::*	pkg:npm/debug@4.4.0		0	Highest	6
deep-is:0.1.4		pkg:npm/deep-is@0.1.4		0		8
diff:7.0.0		pkg:npm/diff@7.0.0		0		7
ejs:3.1.10	cpe:2.3:a:ejs:ejs:3.1.10:::::::*	pkg:npm/ejs@3.1.10		0	Highest	8
end-of-stream:1.4.4		pkg:npm/end-of-stream@1.4.4		0		8
escape-string-regexp:4.0.0		pkg:npm/escape-string-regexp@4.0.0		0		8
eslint-config-prettier:10.1.5		pkg:npm/eslint-config-prettier@10.1.5		0		7
eslint-plugin-prettier:5.4.1		pkg:npm/eslint-plugin-prettier@5.4.1		0		7
eslint-scope:8.3.0		pkg:npm/eslint-scope@8.3.0		0		7
eslint-visitor-keys:3.4.3		pkg:npm/eslint-visitor-keys@3.4.3		0		8
eslint-visitor-keys:4.2.0		pkg:npm/eslint-visitor-keys@4.2.0		0		8
eslint:9.28.0		pkg:npm/eslint@9.28.0		0		8
espree:10.3.0		pkg:npm/espree@10.3.0		0		8
esquery:1.6.0		pkg:npm/esquery@1.6.0		0		8
esrecurse:4.3.0		pkg:npm/esrecurse@4.3.0		0		9
estraverse:5.3.0		pkg:npm/estraverse@5.3.0		0		9
esutils:2.0.3		pkg:npm/esutils@2.0.3		0		9
extract-zip:2.0.1		pkg:npm/extract-zip@2.0.1		0		6
fast-deep-equal:3.1.3		pkg:npm/fast-deep-equal@3.1.3		0		8
fast-diff:1.3.0		pkg:npm/fast-diff@1.3.0		0		7
fast-glob:3.3.3		pkg:npm/fast-glob@3.3.3		0		7
fast-json-stable-stringify:2.1.0		pkg:npm/fast-json-stable-stringify@2.1.0		0		9
fast-levenshtein:2.0.6		pkg:npm/fast-levenshtein@2.0.6		0		6
fastq:1.19.1		pkg:npm/fastq@1.19.1		0		8
fd-package-json:2.0.0		pkg:npm/fd-package-json@2.0.0		0		8
fd-slicer:1.1.0		pkg:npm/fd-slicer@1.1.0		0		7
file-entry-cache:8.0.0		pkg:npm/file-entry-cache@8.0.0		0		7
filelist:1.0.4		pkg:npm/filelist@1.0.4		0		8
fill-range:7.1.1		pkg:npm/fill-range@7.1.1		0		8
find-package:1.0.0		pkg:npm/find-package@1.0.0		0		8
find-up:5.0.0		pkg:npm/find-up@5.0.0		0		8
flat-cache:4.0.1		pkg:npm/flat-cache@4.0.1		0		7
flatted:3.3.3		pkg:npm/flatted@3.3.3		0		8
formatly:0.2.4		pkg:npm/formatly@0.2.4		0		7
genversion:3.2.0		pkg:npm/genversion@3.2.0		0		8
get-stream:5.2.0		pkg:npm/get-stream@5.2.0		0		8
glob-parent:5.1.2	cpe:2.3:a:gulpjs:glob-parent:5.1.2:::::::*	pkg:npm/glob-parent@5.1.2		0	Highest	6
glob-parent:6.0.2	cpe:2.3:a:gulpjs:glob-parent:6.0.2:::::::*	pkg:npm/glob-parent@6.0.2		0	Highest	6
globals:14.0.0		pkg:npm/globals@14.0.0		0		8
graphemer:1.4.0		pkg:npm/graphemer@1.4.0		0		8
has-flag:4.0.0		pkg:npm/has-flag@4.0.0		0		8
ignore:5.3.2		pkg:npm/ignore@5.3.2		0		7
ignore:7.0.5		pkg:npm/ignore@7.0.5		0		7
import-fresh:3.3.1		pkg:npm/import-fresh@3.3.1		0		8
imurmurhash:0.1.4		pkg:npm/imurmurhash@0.1.4		0		10
is-extglob:2.1.1		pkg:npm/is-extglob@2.1.1		0		8
is-glob:4.0.3		pkg:npm/is-glob@4.0.3		0		8
is-number:7.0.0		pkg:npm/is-number@7.0.0		0		8
isexe:2.0.0		pkg:npm/isexe@2.0.0		0		8
jake:10.9.2		pkg:npm/jake@10.9.2		0		6
jiti:2.4.2		pkg:npm/jiti@2.4.2		0		5
js-yaml:4.1.0	cpe:2.3:a:js-yaml_project:js-yaml:4.1.0:::::::*	pkg:npm/js-yaml@4.1.0		0	Highest	6
json-buffer:3.0.1		pkg:npm/json-buffer@3.0.1		0		7
json-schema-traverse:0.4.1		pkg:npm/json-schema-traverse@0.4.1		0		8
json-stable-stringify-without-jsonify:1.0.1		pkg:npm/json-stable-stringify-without-jsonify@1.0.1		0		9
keyv:4.5.4		pkg:npm/keyv@4.5.4		0		8
knip:5.60.2		pkg:npm/knip@5.60.2		0		9
levn:0.4.1		pkg:npm/levn@0.4.1		0		8
locate-path:6.0.0		pkg:npm/locate-path@6.0.0		0		10
lodash.get:4.4.2		pkg:npm/lodash.get@4.4.2		0		7
lodash.merge:4.6.2		pkg:npm/lodash.merge@4.6.2		0		7
merge2:1.4.1		pkg:npm/merge2@1.4.1		0		6
micromatch:4.0.8		pkg:npm/micromatch@4.0.8		0		8
minimatch:3.1.2	cpe:2.3:a:minimatch_project:minimatch:3.1.2:::::::*	pkg:npm/minimatch@3.1.2		0	Highest	6
minimatch:5.1.6	cpe:2.3:a:minimatch_project:minimatch:5.1.6:::::::*	pkg:npm/minimatch@5.1.6		0	Highest	6
minimatch:9.0.5	cpe:2.3:a:minimatch_project:minimatch:9.0.5:::::::*	pkg:npm/minimatch@9.0.5		0	Highest	6
minimist:1.2.8	cpe:2.3:a:substack:minimist:1.2.8:::::::*	pkg:npm/minimist@1.2.8		0	Highest	9
ms:2.1.3		pkg:npm/ms@2.1.3		0		5
natural-compare:1.4.0		pkg:npm/natural-compare@1.4.0		0		7
once:1.4.0		pkg:npm/once@1.4.0		0		6
optionator:0.9.4		pkg:npm/optionator@0.9.4		0		8
oxc-resolver:11.1.0		pkg:npm/oxc-resolver@11.1.0		0		6
p-limit:3.1.0		pkg:npm/p-limit@3.1.0		0		8
p-locate:5.0.0		pkg:npm/p-locate@5.0.0		0		10
parent-module:1.0.1		pkg:npm/parent-module@1.0.1		0		8
parents:1.0.1		pkg:npm/parents@1.0.1		0		9
path-exists:4.0.0		pkg:npm/path-exists@4.0.0		0		8
path-key:3.1.1		pkg:npm/path-key@3.1.1		0		8
path-platform:0.11.15		pkg:npm/path-platform@0.11.15		0		8
pend:1.2.0		pkg:npm/pend@1.2.0		0		7
picocolors:1.1.1		pkg:npm/picocolors@1.1.1		0		6
picomatch:2.3.1		pkg:npm/picomatch@2.3.1		0		8
picomatch:4.0.2		pkg:npm/picomatch@4.0.2		0		8
prelude-ls:1.2.1		pkg:npm/prelude-ls@1.2.1		0		8
prettier-linter-helpers:1.0.0		pkg:npm/prettier-linter-helpers@1.0.0		0		7
prettier:3.5.3		pkg:npm/prettier@3.5.3		0		7
pump:3.0.0		pkg:npm/pump@3.0.0		0		6
punycode:2.3.1		pkg:npm/punycode@2.3.1		0		9
purify-ts:2.1.0		pkg:npm/purify-ts@2.1.0		0		6
queue-microtask:1.2.3		pkg:npm/queue-microtask@1.2.3		0		10
resolve-from:4.0.0		pkg:npm/resolve-from@4.0.0		0		8
reusify:1.1.0		pkg:npm/reusify@1.1.0		0		8
run-parallel:1.2.0		pkg:npm/run-parallel@1.2.0		0		10
semver:7.7.2		pkg:npm/semver@7.7.2		0		6
shebang-command:2.0.0		pkg:npm/shebang-command@2.0.0		0		8
shebang-regex:3.0.0		pkg:npm/shebang-regex@3.0.0		0		8
sinon:20.0.0		pkg:npm/sinon@20.0.0		0		8
smol-toml:1.3.4		pkg:npm/smol-toml@1.3.4		0		7
strip-json-comments:3.1.1		pkg:npm/strip-json-comments@3.1.1		0		8
strip-json-comments:5.0.2		pkg:npm/strip-json-comments@5.0.2		0		8
supports-color:7.2.0		pkg:npm/supports-color@7.2.0		0		8
synckit:0.11.8		pkg:npm/synckit@0.11.8		0		6
to-regex-range:5.0.1		pkg:npm/to-regex-range@5.0.1		0		8
ts-api-utils:2.1.0		pkg:npm/ts-api-utils@2.1.0		0		7
type-check:0.4.0		pkg:npm/type-check@0.4.0		0		8
type-detect:4.0.8		pkg:npm/type-detect@4.0.8		0		6
type-detect:4.1.0		pkg:npm/type-detect@4.1.0		0		6
typescript-eslint:8.34.0		pkg:npm/typescript-eslint@8.34.0		0		7
typescript:5.8.3	cpe:2.3:a:microsoft:typescript:5.8.3:::::::*	pkg:npm/typescript@5.8.3		0	Highest	8
undici-types:7.8.0		pkg:npm/undici-types@7.8.0		0		7
undici:7.10.0	cpe:2.3:a:nodejs:undici:7.10.0:::::::*	pkg:npm/undici@7.10.0		0	Highest	7
uri-js:4.4.1	cpe:2.3:a:garycourt:uri-js:4.4.1:::::::* cpe:2.3:a:uri.js_project:uri.js:4.4.1:::::::*	pkg:npm/uri-js@4.4.1		0	Highest	8
walk-up-path:4.0.0		pkg:npm/walk-up-path@4.0.0		0		6
which:2.0.2		pkg:npm/which@2.0.2		0		6
word-wrap:1.2.5	cpe:2.3:a:word-wrap_project:word-wrap:1.2.5:::::::*	pkg:npm/word-wrap@1.2.5		0	Highest	8
wrappy:1.0.2		pkg:npm/wrappy@1.0.2		0		8
yauzl:2.10.0		pkg:npm/yauzl@2.10.0		0		8
yocto-queue:0.1.0		pkg:npm/yocto-queue@0.1.0		0		8
zod-validation-error:3.4.1		pkg:npm/zod-validation-error@3.4.1		0		8
zod:3.24.4	cpe:2.3:a:zod:zod:3.24.4:::::::*	pkg:npm/zod@3.24.4		0	Highest	8

Dependencies (vulnerable)

@colors/colors:1.6.0

Description:

get colors in your node.js console

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@colors/colors:1.6.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	DABH	Highest
Vendor	package.json	bugs	https://github.com/DABH/colors.js/issues	Highest
Vendor	package.json	description	get colors in your node.js console	Highest
Vendor	package.json	homepage	https://github.com/DABH/colors.js	Highest
Vendor	package.json	name	@colors/colors	Highest
Vendor	package.json	name	@colors/colors_project	Highest
Product	package.json	name	@colors/colors	Highest
Version	package.json	version	1.6.0	Highest

Identifiers

pkg:npm/%40colors%2Fcolors@1.6.0 (Confidence:Highest)

@commander-js/extra-typings:13.1.0

Description:

Infer strong typings for commander options and action handlers

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@commander-js/extra-typings:13.1.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author		Highest
Vendor	package.json	bugs.url	https://github.com/commander-js/extra-typings/issues	Highest
Vendor	package.json	description	Infer strong typings for commander options and action handlers	Highest
Vendor	package.json	homepage	https://github.com/commander-js/extra-typings#readme	Highest
Vendor	package.json	name	@commander-js/extra-typings	Highest
Vendor	package.json	name	@commander-js/extra-typings_project	Highest
Product	package.json	name	@commander-js/extra-typings	Highest
Version	package.json	version	13.1.0	Highest

Identifiers

pkg:npm/%40commander-js%2Fextra-typings@13.1.0 (Confidence:Highest)

@eslint-community/eslint-utils:4.7.0

Description:

Utilities for ESLint plugins.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@eslint-community/eslint-utils:^4.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/utils:8.34.0
owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Toru Nagashima	Highest
Vendor	package.json	bugs.url	https://github.com/eslint-community/eslint-utils/issues	Highest
Vendor	package.json	description	Utilities for ESLint plugins.	Highest
Vendor	package.json	homepage	https://github.com/eslint-community/eslint-utils#readme	Highest
Vendor	package.json	name	@eslint-community/eslint-utils	Highest
Vendor	package.json	name	@eslint-community/eslint-utils_project	Highest
Product	package.json	name	@eslint-community/eslint-utils	Highest
Version	package.json	version	4.7.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint-community%2Feslint-utils@4.7.0 (Confidence:Highest)

@eslint-community/regexpp:4.12.1

Description:

Regular expression parser for ECMAScript.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@eslint-community/regexpp:^4.12.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/eslint-plugin:8.34.0
owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Toru Nagashima	Highest
Vendor	package.json	bugs.url	https://github.com/eslint-community/regexpp/issues	Highest
Vendor	package.json	description	Regular expression parser for ECMAScript.	Highest
Vendor	package.json	homepage	https://github.com/eslint-community/regexpp#readme	Highest
Vendor	package.json	name	@eslint-community/regexpp	Highest
Vendor	package.json	name	@eslint-community/regexpp_project	Highest
Product	package.json	name	@eslint-community/regexpp	Highest
Version	package.json	version	4.12.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint-community%2Fregexpp@4.12.1 (Confidence:Highest)

@eslint/config-array:0.20.0

Description:

General purpose glob-based configuration matching.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@eslint/config-array:^0.20.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	General purpose glob-based configuration matching.	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite#readme	Highest
Vendor	package.json	name	@eslint/config-array	Highest
Vendor	package.json	name	@eslint/config-array_project	Highest
Product	package.json	name	@eslint/config-array	Highest
Version	package.json	version	0.20.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fconfig-array@0.20.0 (Confidence:Highest)

@eslint/config-helpers:0.2.2

Description:

Helper utilities for creating ESLint configuration

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@eslint/config-helpers:^0.2.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	Helper utilities for creating ESLint configuration	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite/tree/main/packages/config-helpers#readme	Highest
Vendor	package.json	name	@eslint/config-helpers	Highest
Vendor	package.json	name	@eslint/config-helpers_project	Highest
Product	package.json	name	@eslint/config-helpers	Highest
Version	package.json	version	0.2.2	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fconfig-helpers@0.2.2 (Confidence:Highest)

@eslint/core:0.14.0

Description:

Runtime-agnostic core of ESLint

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@eslint/core:^0.14.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@eslint/plugin-kit:0.3.1
owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	Runtime-agnostic core of ESLint	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite#readme	Highest
Vendor	package.json	name	@eslint/core	Highest
Vendor	package.json	name	@eslint/core_project	Highest
Product	package.json	name	@eslint/core	Highest
Version	package.json	version	0.14.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fcore@0.14.0 (Confidence:Highest)

@eslint/eslintrc:3.3.1

Description:

The legacy ESLintRC config file format for ESLint

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@eslint/eslintrc:^3.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/eslintrc/issues	Highest
Vendor	package.json	description	The legacy ESLintRC config file format for ESLint	Highest
Vendor	package.json	homepage	https://github.com/eslint/eslintrc#readme	Highest
Vendor	package.json	name	@eslint/eslintrc	Highest
Vendor	package.json	name	@eslint/eslintrc_project	Highest
Product	package.json	name	@eslint/eslintrc	Highest
Version	package.json	version	3.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Feslintrc@3.3.1 (Confidence:Highest)

@eslint/js:9.28.0

Description:

ESLint JavaScript language implementation

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@eslint/js:9.28.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs	https://github.com/eslint/eslint/issues/	Highest
Vendor	package.json	description	ESLint JavaScript language implementation	Highest
Vendor	package.json	homepage	https://eslint.org	Highest
Vendor	package.json	name	@eslint/js	Highest
Vendor	package.json	name	@eslint/js_project	Highest
Product	package.json	name	@eslint/js	Highest
Version	package.json	version	9.28.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fjs@9.28.0 (Confidence:Highest)

@eslint/object-schema:2.1.6

Description:

An object schema merger/validator

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@eslint/object-schema:2.1.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@eslint/config-array:0.20.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	An object schema merger/validator	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite#readme	Highest
Vendor	package.json	name	@eslint/object-schema	Highest
Vendor	package.json	name	@eslint/object-schema_project	Highest
Product	package.json	name	@eslint/object-schema	Highest
Version	package.json	version	2.1.6	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fobject-schema@2.1.6 (Confidence:Highest)

@eslint/plugin-kit:0.3.1

Description:

Utilities for building ESLint plugins.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@eslint/plugin-kit:^0.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/rewrite/issues	Highest
Vendor	package.json	description	Utilities for building ESLint plugins.	Highest
Vendor	package.json	homepage	https://github.com/eslint/rewrite#readme	Highest
Vendor	package.json	name	@eslint/plugin-kit	Highest
Vendor	package.json	name	@eslint/plugin-kit_project	Highest
Product	package.json	name	@eslint/plugin-kit	Highest
Version	package.json	version	0.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40eslint%2Fplugin-kit@0.3.1 (Confidence:Highest)

@humanfs/core:0.19.1

Description:

The core of the humanfs library.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@humanfs/node:0.16.6/@humanfs/core:^0.19.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@humanfs/node:0.16.6
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/humanwhocodes/humanfs/issues	Highest
Vendor	package.json	description	The core of the humanfs library.	Highest
Vendor	package.json	homepage	https://github.com/humanwhocodes/humanfs#readme	Highest
Vendor	package.json	name	@humanfs/core	Highest
Vendor	package.json	name	@humanfs/core_project	Highest
Product	package.json	name	@humanfs/core	Highest
Version	package.json	version	0.19.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40humanfs%2Fcore@0.19.1 (Confidence:Highest)

@humanfs/node:0.16.6

Description:

The Node.js bindings of the humanfs library.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@humanfs/node:^0.16.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas	Highest
Vendor	package.json	bugs.url	https://github.com/humanwhocodes/humanfs/issues	Highest
Vendor	package.json	description	The Node.js bindings of the humanfs library.	Highest
Vendor	package.json	homepage	https://github.com/humanwhocodes/humanfs#readme	Highest
Vendor	package.json	name	@humanfs/node	Highest
Vendor	package.json	name	@humanfs/node_project	Highest
Product	package.json	name	@humanfs/node	Highest
Version	package.json	version	0.16.6	Highest

Related Dependencies

Identifiers

pkg:npm/%40humanfs%2Fnode@0.16.6 (Confidence:Highest)

@humanwhocodes/module-importer:1.0.1

Description:

Universal module importer for Node.js

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@humanwhocodes/module-importer:^1.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zaks	Highest
Vendor	package.json	description	Universal module importer for Node.js	Highest
Vendor	package.json	name	@humanwhocodes/module-importer	Highest
Vendor	package.json	name	@humanwhocodes/module-importer_project	Highest
Product	package.json	name	@humanwhocodes/module-importer	Highest
Version	package.json	version	1.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40humanwhocodes%2Fmodule-importer@1.0.1 (Confidence:Highest)

@humanwhocodes/retry:0.3.1

Description:

A utility to retry failed async methods.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@humanwhocodes/retry:0.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@humanfs/node:0.16.6
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zaks	Highest
Vendor	package.json	description	A utility to retry failed async methods.	Highest
Vendor	package.json	name	@humanwhocodes/retry	Highest
Vendor	package.json	name	@humanwhocodes/retry_project	Highest
Product	package.json	name	@humanwhocodes/retry	Highest
Version	package.json	version	0.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40humanwhocodes%2Fretry@0.3.1 (Confidence:Highest)

@humanwhocodes/retry:0.4.2

Description:

A utility to retry failed async methods.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@humanwhocodes/retry:^0.4.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zaks	Highest
Vendor	package.json	description	A utility to retry failed async methods.	Highest
Vendor	package.json	name	@humanwhocodes/retry	Highest
Vendor	package.json	name	@humanwhocodes/retry_project	Highest
Product	package.json	name	@humanwhocodes/retry	Highest
Version	package.json	version	0.4.2	Highest

Related Dependencies

Identifiers

pkg:npm/%40humanwhocodes%2Fretry@0.4.2 (Confidence:Highest)

@nodelib/fs.scandir:2.1.5

Description:

List files and directories inside the specified directory

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@nodelib/fs.walk:1.2.8/@nodelib/fs.scandir:2.1.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@nodelib/fs.walk:1.2.8
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	List files and directories inside the specified directory	Highest
Vendor	package.json	name	@nodelib/fs.scandir	Highest
Vendor	package.json	name	@nodelib/fs.scandir_project	Highest
Product	package.json	name	@nodelib/fs.scandir	Highest
Version	package.json	version	2.1.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40nodelib%2Ffs.scandir@2.1.5 (Confidence:Highest)

@nodelib/fs.stat:2.0.5

Description:

Get the status of a file with some features

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?fast-glob:3.3.3/@nodelib/fs.stat:^2.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/fast-glob:3.3.3
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@nodelib/fs.scandir:2.1.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Get the status of a file with some features	Highest
Vendor	package.json	name	@nodelib/fs.stat	Highest
Vendor	package.json	name	@nodelib/fs.stat_project	Highest
Product	package.json	name	@nodelib/fs.stat	Highest
Version	package.json	version	2.0.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40nodelib%2Ffs.stat@2.0.5 (Confidence:Highest)

@nodelib/fs.walk:1.2.8

Description:

A library for efficiently walking a directory recursively

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.60.2/@nodelib/fs.walk:^1.2.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/fast-glob:3.3.3
owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	A library for efficiently walking a directory recursively	Highest
Vendor	package.json	name	@nodelib/fs.walk	Highest
Vendor	package.json	name	@nodelib/fs.walk_project	Highest
Product	package.json	name	@nodelib/fs.walk	Highest
Version	package.json	version	1.2.8	Highest

Related Dependencies

Identifiers

pkg:npm/%40nodelib%2Ffs.walk@1.2.8 (Confidence:Highest)

@oxc-resolver/binding-linux-x64-gnu:11.1.0

Description:

Oxc Resolver Node API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@oxc-resolver/binding-linux-x64-gnu:11.1.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Oxc Resolver Node API	Highest
Vendor	package.json	homepage	https://oxc.rs	Highest
Vendor	package.json	name	@oxc-resolver/binding-linux-x64-gnu	Highest
Vendor	package.json	name	@oxc-resolver/binding-linux-x64-gnu_project	Highest
Product	package.json	name	@oxc-resolver/binding-linux-x64-gnu	Highest
Version	package.json	version	11.1.0	Highest

Identifiers

pkg:npm/%40oxc-resolver%2Fbinding-linux-x64-gnu@11.1.0 (Confidence:Highest)

@oxc-resolver/binding-linux-x64-musl:11.1.0

Description:

Oxc Resolver Node API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@oxc-resolver/binding-linux-x64-musl:11.1.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Oxc Resolver Node API	Highest
Vendor	package.json	homepage	https://oxc.rs	Highest
Vendor	package.json	name	@oxc-resolver/binding-linux-x64-musl	Highest
Vendor	package.json	name	@oxc-resolver/binding-linux-x64-musl_project	Highest
Product	package.json	name	@oxc-resolver/binding-linux-x64-musl	Highest
Version	package.json	version	11.1.0	Highest

Identifiers

pkg:npm/%40oxc-resolver%2Fbinding-linux-x64-musl@11.1.0 (Confidence:Highest)

@pkgr/core:0.2.4

Description:

Shared core module for `@pkgr` packages or any package else

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?synckit:0.11.8/@pkgr/core:^0.2.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/synckit:0.11.8
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	JounQin <admin@1stg.me> (https://www.1stG.me)	Highest
Vendor	package.json	description	Shared core module for `@pkgr` packages or any package else	Highest
Vendor	package.json	homepage	https://github.com/un-ts/pkgr/blob/master/packages/core	Highest
Vendor	package.json	name	@pkgr/core	Highest
Vendor	package.json	name	@pkgr/core_project	Highest
Product	package.json	name	@pkgr/core	Highest
Version	package.json	version	0.2.4	Highest

Related Dependencies

Identifiers

pkg:npm/%40pkgr%2Fcore@0.2.4 (Confidence:Highest)

@sinonjs/commons:3.0.1

Description:

Simple functions shared among the sinon end user libraries

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?sinon:20.0.0/@sinonjs/commons:^3.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/sinon:20.0.0
owasp-dependency-check:0.6.2/@sinonjs/fake-timers:13.0.5
owasp-dependency-check:0.6.2/@sinonjs/samsam:8.0.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author		Highest
Vendor	package.json	bugs.url	https://github.com/sinonjs/commons/issues	Highest
Vendor	package.json	description	Simple functions shared among the sinon end user libraries	Highest
Vendor	package.json	homepage	https://github.com/sinonjs/commons#readme	Highest
Vendor	package.json	name	@sinonjs/commons	Highest
Vendor	package.json	name	@sinonjs/commons_project	Highest
Product	package.json	name	@sinonjs/commons	Highest
Version	package.json	version	3.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/%40sinonjs%2Fcommons@3.0.1 (Confidence:Highest)

@sinonjs/fake-timers:13.0.5

Description:

Fake JavaScript timers

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?sinon:20.0.0/@sinonjs/fake-timers:^13.0.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/sinon:20.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Christian Johansen	Highest
Vendor	package.json	bugs.mail	christian@cjohansen.no	Highest
Vendor	package.json	bugs.url	https://github.com/sinonjs/fake-timers/issues	Highest
Vendor	package.json	description	Fake JavaScript timers	Highest
Vendor	package.json	homepage	https://github.com/sinonjs/fake-timers	Highest
Vendor	package.json	name	@sinonjs/fake-timers	Highest
Vendor	package.json	name	@sinonjs/fake-timers_project	Highest
Product	package.json	name	@sinonjs/fake-timers	Highest
Version	package.json	version	13.0.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40sinonjs%2Ffake-timers@13.0.5 (Confidence:Highest)

@sinonjs/samsam:8.0.2

Description:

Value identification and comparison functions

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?sinon:20.0.0/@sinonjs/samsam:^8.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/sinon:20.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Christian Johansen	Highest
Vendor	package.json	description	Value identification and comparison functions	Highest
Vendor	package.json	homepage	http://sinonjs.github.io/samsam/	Highest
Vendor	package.json	name	@sinonjs/samsam	Highest
Vendor	package.json	name	@sinonjs/samsam_project	Highest
Product	package.json	name	@sinonjs/samsam	Highest
Version	package.json	version	8.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/%40sinonjs%2Fsamsam@8.0.2 (Confidence:Highest)

@tsconfig/node18:18.2.4

Description:

A base TSConfig for working with Node 18.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@tsconfig/node18:18.2.4

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	A base TSConfig for working with Node 18.	Highest
Vendor	package.json	name	@tsconfig/node18	Highest
Vendor	package.json	name	@tsconfig/node18_project	Highest
Product	package.json	name	@tsconfig/node18	Highest
Version	package.json	version	18.2.4	Highest

Identifiers

pkg:npm/%40tsconfig%2Fnode18@18.2.4 (Confidence:Highest)

@types/cross-spawn:6.0.6

Description:

TypeScript definitions for cross-spawn

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@types/cross-spawn:6.0.6

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for cross-spawn	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cross-spawn	Highest
Vendor	package.json	name	@types/cross-spawn	Highest
Vendor	package.json	name	@types/cross-spawn_project	Highest
Product	package.json	name	@types/cross-spawn	Highest
Version	package.json	version	6.0.6	Highest

Identifiers

pkg:npm/%40types%2Fcross-spawn@6.0.6 (Confidence:Highest)

@types/estree:1.0.7

Description:

TypeScript definitions for estree

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/@types/estree:^1.0.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for estree	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/estree	Highest
Vendor	package.json	name	@types/estree	Highest
Vendor	package.json	name	@types/estree_project	Highest
Product	package.json	name	@types/estree	Highest
Version	package.json	version	1.0.7	Highest

Related Dependencies

Identifiers

pkg:npm/%40types%2Festree@1.0.7 (Confidence:Highest)

@types/json-schema:7.0.15

Description:

TypeScript definitions for json-schema

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?purify-ts:2.1.0/@types/json-schema:7.0.15

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/purify-ts:2.1.0
owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2/@eslint/core:0.14.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for json-schema	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/json-schema	Highest
Vendor	package.json	name	@types/json-schema	Highest
Vendor	package.json	name	@types/json-schema_project	Highest
Product	package.json	name	@types/json-schema	Highest
Version	package.json	version	7.0.15	Highest

Related Dependencies

Identifiers

pkg:npm/%40types%2Fjson-schema@7.0.15 (Confidence:Highest)

@types/node:24.0.0

Description:

TypeScript definitions for node

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@types/yauzl:2.10.0/@types/node:*

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@types/yauzl:2.10.0
owasp-dependency-check:0.6.2/@types/cross-spawn:6.0.6
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for node	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node	Highest
Vendor	package.json	name	@types/node	Highest
Vendor	package.json	name	@types/node_project	Highest
Product	package.json	name	@types/node	Highest
Version	package.json	version	24.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40types%2Fnode@24.0.0 (Confidence:Highest)

@types/sinon:17.0.4

Description:

TypeScript definitions for sinon

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@types/sinon:17.0.4

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for sinon	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/sinon	Highest
Vendor	package.json	name	@types/sinon	Highest
Vendor	package.json	name	@types/sinon_project	Highest
Product	package.json	name	@types/sinon	Highest
Version	package.json	version	17.0.4	Highest

Identifiers

pkg:npm/%40types%2Fsinon@17.0.4 (Confidence:Highest)

@types/sinonjs__fake-timers:8.1.5

Description:

TypeScript definitions for @sinonjs/fake-timers

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@types/sinonjs__fake-timers:8.1.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@types/sinon:17.0.4
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for @sinonjs/fake-timers	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/sinonjs__fake-timers	Highest
Vendor	package.json	name	@types/sinonjs__fake-timers	Highest
Vendor	package.json	name	@types/sinonjs__fake-timers_project	Highest
Product	package.json	name	@types/sinonjs__fake-timers	Highest
Version	package.json	version	8.1.5	Highest

Related Dependencies

Identifiers

pkg:npm/%40types%2Fsinonjs__fake-timers@8.1.5 (Confidence:Highest)

@types/yauzl:2.10.0

Description:

TypeScript definitions for yauzl

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@types/yauzl:2.10.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	TypeScript definitions for yauzl	Highest
Vendor	package.json	homepage	https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yauzl	Highest
Vendor	package.json	name	@types/yauzl	Highest
Vendor	package.json	name	@types/yauzl_project	Highest
Product	package.json	name	@types/yauzl	Highest
Version	package.json	version	2.10.0	Highest

Identifiers

pkg:npm/%40types%2Fyauzl@2.10.0 (Confidence:Highest)

@typescript-eslint/eslint-plugin:8.34.0

Description:

TypeScript plugin for ESLint

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?typescript-eslint:8.34.0/@typescript-eslint/eslint-plugin:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/typescript-eslint:8.34.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	TypeScript plugin for ESLint	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/eslint-plugin	Highest
Vendor	package.json	name	@typescript-eslint/eslint-plugin	Highest
Vendor	package.json	name	@typescript-eslint/eslint-plugin_project	Highest
Product	package.json	name	@typescript-eslint/eslint-plugin	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Feslint-plugin@8.34.0 (Confidence:Highest)

@typescript-eslint/parser:8.34.0

Description:

An ESLint custom parser which leverages TypeScript ESTree

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?typescript-eslint:8.34.0/@typescript-eslint/parser:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/typescript-eslint:8.34.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	An ESLint custom parser which leverages TypeScript ESTree	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/parser	Highest
Vendor	package.json	name	@typescript-eslint/parser	Highest
Vendor	package.json	name	@typescript-eslint/parser_project	Highest
Product	package.json	name	@typescript-eslint/parser	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Fparser@8.34.0 (Confidence:Highest)

@typescript-eslint/project-service:8.34.0

Description:

Standalone TypeScript project service wrapper for linting.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@typescript-eslint/typescript-estree:8.34.0/@typescript-eslint/project-service:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Standalone TypeScript project service wrapper for linting.	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/project-service	Highest
Vendor	package.json	name	@typescript-eslint/project-service_project	Highest
Product	package.json	name	@typescript-eslint/project-service	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Fproject-service@8.34.0 (Confidence:Highest)

@typescript-eslint/scope-manager:8.34.0

Description:

TypeScript scope analyser for ESLint

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@typescript-eslint/utils:8.34.0/@typescript-eslint/scope-manager:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/utils:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/parser:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/eslint-plugin:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	TypeScript scope analyser for ESLint	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/scope-manager	Highest
Vendor	package.json	name	@typescript-eslint/scope-manager	Highest
Vendor	package.json	name	@typescript-eslint/scope-manager_project	Highest
Product	package.json	name	@typescript-eslint/scope-manager	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Fscope-manager@8.34.0 (Confidence:Highest)

@typescript-eslint/tsconfig-utils:8.34.0

Description:

Utilities for collecting TSConfigs for linting scenarios.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@typescript-eslint/typescript-estree:8.34.0/@typescript-eslint/tsconfig-utils:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/project-service:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Utilities for collecting TSConfigs for linting scenarios.	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/tsconfig-utils	Highest
Vendor	package.json	name	@typescript-eslint/tsconfig-utils_project	Highest
Product	package.json	name	@typescript-eslint/tsconfig-utils	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Ftsconfig-utils@8.34.0 (Confidence:Highest)

@typescript-eslint/type-utils:8.34.0

Description:

Type utilities for working with TypeScript + ESLint together

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@typescript-eslint/type-utils:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/eslint-plugin:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Type utilities for working with TypeScript + ESLint together	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/type-utils	Highest
Vendor	package.json	name	@typescript-eslint/type-utils_project	Highest
Product	package.json	name	@typescript-eslint/type-utils	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Ftype-utils@8.34.0 (Confidence:Highest)

@typescript-eslint/types:8.34.0

Description:

Types for the TypeScript-ESTree AST spec

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@typescript-eslint/visitor-keys:8.34.0/@typescript-eslint/types:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/utils:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/parser:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/scope-manager:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/project-service:8.34.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@typescript-eslint/visitor-keys:8.34.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Types for the TypeScript-ESTree AST spec	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/types	Highest
Vendor	package.json	name	@typescript-eslint/types_project	Highest
Product	package.json	name	@typescript-eslint/types	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Ftypes@8.34.0 (Confidence:Highest)

@typescript-eslint/typescript-estree:8.34.0

Description:

A parser that converts TypeScript source code into an ESTree compatible form

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?@typescript-eslint/utils:8.34.0/@typescript-eslint/typescript-estree:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/utils:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/parser:8.34.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@typescript-eslint/type-utils:8.34.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	A parser that converts TypeScript source code into an ESTree compatible form	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/typescript-estree	Highest
Vendor	package.json	name	@typescript-eslint/typescript-estree	Highest
Vendor	package.json	name	@typescript-eslint/typescript-estree_project	Highest
Product	package.json	name	@typescript-eslint/typescript-estree	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Ftypescript-estree@8.34.0 (Confidence:Highest)

@typescript-eslint/utils:8.34.0

Description:

Utilities for working with TypeScript + ESLint together

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?typescript-eslint:8.34.0/@typescript-eslint/utils:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/eslint-plugin:8.34.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@typescript-eslint/type-utils:8.34.0
owasp-dependency-check:0.6.2/typescript-eslint:8.34.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Utilities for working with TypeScript + ESLint together	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/utils	Highest
Vendor	package.json	name	@typescript-eslint/utils	Highest
Vendor	package.json	name	@typescript-eslint/utils_project	Highest
Product	package.json	name	@typescript-eslint/utils	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Futils@8.34.0 (Confidence:Highest)

@typescript-eslint/visitor-keys:8.34.0

Description:

Visitor keys used to help traverse the TypeScript-ESTree AST

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/@typescript-eslint/visitor-keys:8.34.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/parser:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/eslint-plugin:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/scope-manager:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Visitor keys used to help traverse the TypeScript-ESTree AST	Highest
Vendor	package.json	homepage	https://typescript-eslint.io	Highest
Vendor	package.json	name	@typescript-eslint/visitor-keys	Highest
Vendor	package.json	name	@typescript-eslint/visitor-keys_project	Highest
Product	package.json	name	@typescript-eslint/visitor-keys	Highest
Version	package.json	version	8.34.0	Highest

Related Dependencies

Identifiers

pkg:npm/%40typescript-eslint%2Fvisitor-keys@8.34.0 (Confidence:Highest)

acorn-jsx:5.3.2

Description:

Modern, fast React.js JSX parser

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?espree:10.3.0/acorn-jsx:^5.3.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/espree:10.3.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Modern, fast React.js JSX parser	Highest
Vendor	package.json	homepage	https://github.com/acornjs/acorn-jsx	Highest
Vendor	package.json	maintainers.email	me@rreverser.com	Highest
Vendor	package.json	maintainers.name	Ingvar Stepanyan	Highest
Vendor	package.json	maintainers.web	http://rreverser.com/	Highest
Vendor	package.json	name	acorn-jsx	Highest
Vendor	package.json	name	acorn-jsx_project	Highest
Product	package.json	name	acorn-jsx	Highest
Version	package.json	version	5.3.2	Highest

Related Dependencies

Identifiers

pkg:npm/acorn-jsx@5.3.2 (Confidence:Highest)

acorn:8.14.1

Description:

ECMAScript parser

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?espree:10.3.0/acorn:^8.14.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/espree:10.3.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	ECMAScript parser	Highest
Vendor	package.json	homepage	https://github.com/acornjs/acorn	Highest
Vendor	package.json	maintainers.email	marijnh@gmail.com	Highest
Vendor	package.json	maintainers.email	me@rreverser.com	Highest
Vendor	package.json	maintainers.name	Adrian Heine	Highest
Vendor	package.json	maintainers.name	Ingvar Stepanyan	Highest
Vendor	package.json	maintainers.name	Marijn Haverbeke	Highest
Vendor	package.json	maintainers.web	http://adrianheine.de	Highest
Vendor	package.json	maintainers.web	https://marijnhaverbeke.nl	Highest
Vendor	package.json	maintainers.web	https://rreverser.com/	Highest
Vendor	package.json	name	acorn	Highest
Vendor	package.json	name	acorn_project	Highest
Product	package.json	name	acorn	Highest
Version	package.json	version	8.14.1	Highest

Related Dependencies

Identifiers

pkg:npm/acorn@8.14.1 (Confidence:Highest)

ajv:6.12.6

Description:

Another JSON Schema Validator

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/ajv:^6.12.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Evgeny Poberezkin	Highest
Vendor	package.json	bugs.url	https://github.com/ajv-validator/ajv/issues	Highest
Vendor	package.json	description	Another JSON Schema Validator	Highest
Vendor	package.json	homepage	https://github.com/ajv-validator/ajv	Highest
Vendor	package.json	name	ajv	Highest
Vendor	package.json	name	ajv_project	Highest
Product	package.json	name	ajv	Highest
Version	package.json	version	6.12.6	Highest

Related Dependencies

Identifiers

pkg:npm/ajv@6.12.6 (Confidence:Highest)
cpe:2.3:a:ajv.js:ajv:6.12.6:*:*:*:*:*:*:* (Confidence:Highest)

ansi-styles:4.3.0

Description:

ANSI escape codes for styling strings in the terminal

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ansi-styles:4.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/chalk:4.1.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	ANSI escape codes for styling strings in the terminal	Highest
Vendor	package.json	name	ansi-styles	Highest
Vendor	package.json	name	ansi-styles_project	Highest
Product	package.json	name	ansi-styles	Highest
Version	package.json	version	4.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/ansi-styles@4.3.0 (Confidence:Highest)

argparse:2.0.1

Description:

CLI arguments parser. Native port of python's argparse.

License:

Python-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?js-yaml:4.1.0/argparse:^2.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/js-yaml:4.1.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	CLI arguments parser. Native port of python's argparse.	Highest
Vendor	package.json	name	argparse	Highest
Vendor	package.json	name	argparse_project	Highest
Product	package.json	name	argparse	Highest
Version	package.json	version	2.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/argparse@2.0.1 (Confidence:Highest)

async:3.2.6

Description:

Higher-order functions and common patterns for asynchronous code

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?jake:10.9.2/async:^3.2.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/jake:10.9.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Caolan McMahon	Highest
Vendor	package.json	bugs.url	https://github.com/caolan/async/issues	Highest
Vendor	package.json	description	Higher-order functions and common patterns for asynchronous code	Highest
Vendor	package.json	homepage	https://caolan.github.io/async/	Highest
Vendor	package.json	name	async	Highest
Vendor	package.json	name	async_project	Highest
Product	package.json	name	async	Highest
Version	package.json	version	3.2.6	Highest

Related Dependencies

Identifiers

pkg:npm/async@3.2.6 (Confidence:Highest)
cpe:2.3:a:async_project:async:3.2.6:*:*:*:*:*:*:* (Confidence:Highest)

balanced-match:1.0.2

Description:

Match balanced character pairs, like "{" and "}"

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?brace-expansion:1.1.11/balanced-match:^1.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/brace-expansion:1.1.11
owasp-dependency-check:0.6.2/brace-expansion:2.0.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@juliangruber.com	Highest
Vendor	package.json	author.name	Julian Gruber	Highest
Vendor	package.json	author.url	http://juliangruber.com	Highest
Vendor	package.json	description	Match balanced character pairs, like "{" and "}"	Highest
Vendor	package.json	homepage	https://github.com/juliangruber/balanced-match	Highest
Vendor	package.json	name	balanced-match	Highest
Vendor	package.json	name	balanced-match_project	Highest
Product	package.json	name	balanced-match	Highest
Version	package.json	version	1.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/balanced-match@1.0.2 (Confidence:Highest)

brace-expansion:2.0.1

Description:

Brace expansion as known from sh/bash

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?minimatch:5.1.6/brace-expansion:^2.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/minimatch:5.1.6
owasp-dependency-check:0.6.2/minimatch:3.1.2
owasp-dependency-check:0.6.2/minimatch:9.0.5
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@juliangruber.com	Highest
Vendor	package.json	author.name	Julian Gruber	Highest
Vendor	package.json	author.url	http://juliangruber.com	Highest
Vendor	package.json	description	Brace expansion as known from sh/bash	Highest
Vendor	package.json	homepage	https://github.com/juliangruber/brace-expansion	Highest
Vendor	package.json	name	brace-expansion	Highest
Vendor	package.json	name	brace-expansion_project	Highest
Product	package.json	name	brace-expansion	Highest
Version	package.json	version	2.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/brace-expansion@2.0.1 (Confidence:Highest)
cpe:2.3:a:brace_expansion_project:brace_expansion:2.0.1:*:*:*:*:*:*:* (Confidence:Highest)

Published Vulnerabilities

CVE-2025-5889 (OSSINDEX)

A vulnerability was found in juliangruber brace-expansion up to 1.1.11/2.0.1/3.0.0/4.0.0. It has been rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 1.1.12, 2.0.2, 3.0.1 and 4.0.1 is able to address this issue. The name of the patch is a5b98a4f30d7813266b221435e1eaaf25a1b0ac5. It is recommended to upgrade the affected component.

CWE-1333 Inefficient Regular Expression Complexity

CVSSv2:

Base Score: HIGH (7.099999904632568)
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References:

OSSINDEX - [CVE-2025-5889] CWE-1333 CWE-400
OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-5889
OSSIndex - https://github.com/juliangruber/brace-expansion/pull/65

Vulnerable Software & Versions (OSSINDEX):

cpe:2.3:a:*:brace-expansion:2.0.1:*:*:*:*:*:*:*

GHSA-v6h2-p8h4-qcjw (NPM)

A vulnerability was found in juliangruber brace-expansion up to 1.1.11. It has been rated as problematic. Affected by this issue is the function expand of the file index.js. The manipulation leads to inefficient regular expression complexity. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is a5b98a4f30d7813266b221435e1eaaf25a1b0ac5. It is recommended to apply a patch to fix this issue.

CWE-400 Uncontrolled Resource Consumption

CVSSv3:

Base Score: LOW (3.0999999046325684)
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Unscored:

Severity: low

References:

NPM Advisory reference: - https://gist.github.com/mmmsssttt404/37a40ce7d6e5ca604858fe30814d9466
NPM Advisory reference: - https://github.com/advisories/GHSA-v6h2-p8h4-qcjw
NPM Advisory reference: - https://github.com/juliangruber/brace-expansion/pull/65/commits/a5b98a4f30d7813266b221435e1eaaf25a1b0ac5
NPM Advisory reference: - https://nvd.nist.gov/vuln/detail/CVE-2025-5889
NPM Advisory reference: - https://vuldb.com/?ctiid.311660
NPM Advisory reference: - https://vuldb.com/?id.311660
NPM Advisory reference: - https://vuldb.com/?submit.585717

Vulnerable Software & Versions (NPM):

cpe:2.3:a:*:brace-expansion:\>\=2.0.1\<\=4.0.0:*:*:*:*:*:*:*

braces:3.0.3

Description:

Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?micromatch:4.0.8/braces:^3.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/micromatch:4.0.8
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/braces/issues	Highest
Vendor	package.json	description	Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/braces	Highest
Vendor	package.json	name	braces	Highest
Vendor	package.json	name	braces_project	Highest
Product	package.json	name	braces	Highest
Version	package.json	version	3.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/braces@3.0.3 (Confidence:Highest)
cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:*:*:* (Confidence:Highest)

buffer-crc32:0.2.13

Description:

A pure javascript CRC32 algorithm that plays nice with binary data

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yauzl:2.10.0/buffer-crc32:~0.2.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/yauzl:2.10.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Brian J. Brennan <brianloveswords@gmail.com>	Highest
Vendor	package.json	description	A pure javascript CRC32 algorithm that plays nice with binary data	Highest
Vendor	package.json	homepage	https://github.com/brianloveswords/buffer-crc32	Highest
Vendor	package.json	name	buffer-crc32	Highest
Vendor	package.json	name	buffer-crc32_project	Highest
Product	package.json	name	buffer-crc32	Highest
Version	package.json	version	0.2.13	Highest

Related Dependencies

Identifiers

pkg:npm/buffer-crc32@0.2.13 (Confidence:Highest)

callsites:3.1.0

Description:

Get callsites from the V8 stack trace API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?parent-module:1.0.1/callsites:^3.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/parent-module:1.0.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Get callsites from the V8 stack trace API	Highest
Vendor	package.json	name	callsites	Highest
Vendor	package.json	name	callsites_project	Highest
Product	package.json	name	callsites	Highest
Version	package.json	version	3.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/callsites@3.1.0 (Confidence:Highest)

chalk:4.1.2

Description:

Terminal string styling done right

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?jake:10.9.2/chalk:^4.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/jake:10.9.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Terminal string styling done right	Highest
Vendor	package.json	name	chalk	Highest
Vendor	package.json	name	chalk_project	Highest
Product	package.json	name	chalk	Highest
Version	package.json	version	4.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/chalk@4.1.2 (Confidence:Highest)

color-convert:2.0.1

Description:

Plain color conversion functions

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/color-convert:2.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/ansi-styles:4.3.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Heather Arthur <fayearthur@gmail.com>	Highest
Vendor	package.json	description	Plain color conversion functions	Highest
Vendor	package.json	name	color-convert	Highest
Vendor	package.json	name	color-convert_project	Highest
Product	package.json	name	color-convert	Highest
Version	package.json	version	2.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/color-convert@2.0.1 (Confidence:Highest)

color-name:1.1.4

Description:

A list of color names and its values

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/color-name:1.1.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/color-convert:2.0.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	DY <dfcreative@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/colorjs/color-name/issues	Highest
Vendor	package.json	description	A list of color names and its values	Highest
Vendor	package.json	homepage	https://github.com/colorjs/color-name	Highest
Vendor	package.json	name	color-name	Highest
Vendor	package.json	name	color-name_project	Highest
Product	package.json	name	color-name	Highest
Version	package.json	version	1.1.4	Highest

Related Dependencies

Identifiers

pkg:npm/color-name@1.1.4 (Confidence:Highest)

commander:13.1.0

Description:

the complete solution for node.js command-line programs

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/commander:13.1.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	TJ Holowaychuk <tj@vision-media.ca>	Highest
Vendor	package.json	description	the complete solution for node.js command-line programs	Highest
Vendor	package.json	name	commander	Highest
Vendor	package.json	name	commander_project	Highest
Product	package.json	name	commander	Highest
Version	package.json	version	13.1.0	Highest

Identifiers

pkg:npm/commander@13.1.0 (Confidence:Highest)

commander:7.2.0

Description:

the complete solution for node.js command-line programs

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/commander:7.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/genversion:3.2.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	TJ Holowaychuk <tj@vision-media.ca>	Highest
Vendor	package.json	description	the complete solution for node.js command-line programs	Highest
Vendor	package.json	name	commander	Highest
Vendor	package.json	name	commander_project	Highest
Product	package.json	name	commander	Highest
Version	package.json	version	7.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/commander@7.2.0 (Confidence:Highest)

concat-map:0.0.1

Description:

concatenative mapdashery

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?brace-expansion:1.1.11/concat-map:0.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/brace-expansion:1.1.11
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	concatenative mapdashery	Highest
Vendor	package.json	name	concat-map	Highest
Vendor	package.json	name	concat-map_project	Highest
Product	package.json	name	concat-map	Highest
Version	package.json	version	0.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/concat-map@0.0.1 (Confidence:Highest)

cross-spawn:7.0.6

Description:

Cross platform child_process#spawn and child_process#spawnSync

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?eslint:9.28.0/cross-spawn:^7.0.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	André Cruz <andre@moxy.studio>	Highest
Vendor	package.json	description	Cross platform child_process#spawn and child_process#spawnSync	Highest
Vendor	package.json	homepage	https://github.com/moxystudio/node-cross-spawn	Highest
Vendor	package.json	name	cross-spawn	Highest
Vendor	package.json	name	cross-spawn_project	Highest
Product	package.json	name	cross-spawn	Highest
Version	package.json	version	7.0.6	Highest

Related Dependencies

Identifiers

pkg:npm/cross-spawn@7.0.6 (Confidence:Highest)

debug:4.4.0

Description:

Lightweight debugging utility for Node.js and the browser

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?extract-zip:2.0.1/debug:^4.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@eslint/config-array:0.20.0
owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2/extract-zip:2.0.1
owasp-dependency-check:0.6.2/@typescript-eslint/parser:8.34.0
owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2/@typescript-eslint/project-service:8.34.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@typescript-eslint/type-utils:8.34.0
owasp-dependency-check:0.6.2/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Josh Junon (https://github.com/qix-)	Highest
Vendor	package.json	description	Lightweight debugging utility for Node.js and the browser	Highest
Vendor	package.json	name	debug	Highest
Vendor	package.json	name	debug_project	Highest
Product	package.json	name	debug	Highest
Version	package.json	version	4.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/debug@4.4.0 (Confidence:Highest)
cpe:2.3:a:debug_project:debug:4.4.0:*:*:*:*:*:*:* (Confidence:Highest)

deep-is:0.1.4

Description:

node's assert.deepEqual algorithm except for NaN being equal to NaN

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?optionator:0.9.4/deep-is:^0.1.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/optionator:0.9.4
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	thlorenz@gmx.de	Highest
Vendor	package.json	author.name	Thorsten Lorenz	Highest
Vendor	package.json	author.url	http://thlorenz.com	Highest
Vendor	package.json	description	node's assert.deepEqual algorithm except for NaN being equal to NaN	Highest
Vendor	package.json	name	deep-is	Highest
Vendor	package.json	name	deep-is_project	Highest
Product	package.json	name	deep-is	Highest
Version	package.json	version	0.1.4	Highest

Related Dependencies

Identifiers

pkg:npm/deep-is@0.1.4 (Confidence:Highest)

diff:7.0.0

Description:

A JavaScript text diff implementation.

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?sinon:20.0.0/diff:^7.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/sinon:20.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.email	kpdecker@gmail.com	Highest
Vendor	package.json	bugs.url	http://github.com/kpdecker/jsdiff/issues	Highest
Vendor	package.json	description	A JavaScript text diff implementation.	Highest
Vendor	package.json	name	diff	Highest
Vendor	package.json	name	diff_project	Highest
Product	package.json	name	diff	Highest
Version	package.json	version	7.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/diff@7.0.0 (Confidence:Highest)

ejs:3.1.10

Description:

Embedded JavaScript templates

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?genversion:3.2.0/ejs:^3.1.9

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/genversion:3.2.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matthew Eernisse <mde@fleegix.org> (http://fleegix.org)	Highest
Vendor	package.json	bugs	https://github.com/mde/ejs/issues	Highest
Vendor	package.json	description	Embedded JavaScript templates	Highest
Vendor	package.json	homepage	https://github.com/mde/ejs	Highest
Vendor	package.json	name	ejs	Highest
Vendor	package.json	name	ejs_project	Highest
Product	package.json	name	ejs	Highest
Version	package.json	version	3.1.10	Highest

Related Dependencies

Identifiers

pkg:npm/ejs@3.1.10 (Confidence:Highest)
cpe:2.3:a:ejs:ejs:3.1.10:*:*:*:*:*:*:* (Confidence:Highest)

end-of-stream:1.4.4

Description:

Call a callback when a readable/writable/duplex stream has completed or failed.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?pump:3.0.0/end-of-stream:^1.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/pump:3.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Mathias Buus <mathiasbuus@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/mafintosh/end-of-stream/issues	Highest
Vendor	package.json	description	Call a callback when a readable/writable/duplex stream has completed or failed.	Highest
Vendor	package.json	homepage	https://github.com/mafintosh/end-of-stream	Highest
Vendor	package.json	name	end-of-stream	Highest
Vendor	package.json	name	end-of-stream_project	Highest
Product	package.json	name	end-of-stream	Highest
Version	package.json	version	1.4.4	Highest

Related Dependencies

Identifiers

pkg:npm/end-of-stream@1.4.4 (Confidence:Highest)

escape-string-regexp:4.0.0

Description:

Escape RegExp special characters

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/escape-string-regexp:4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Escape RegExp special characters	Highest
Vendor	package.json	name	escape-string-regexp	Highest
Vendor	package.json	name	escape-string-regexp_project	Highest
Product	package.json	name	escape-string-regexp	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/escape-string-regexp@4.0.0 (Confidence:Highest)

eslint-config-prettier:10.1.5

Description:

Turns off all rules that are unnecessary or might conflict with Prettier.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint-config-prettier:10.1.5

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Simon Lydell	Highest
Vendor	package.json	description	Turns off all rules that are unnecessary or might conflict with Prettier.	Highest
Vendor	package.json	homepage	https://github.com/prettier/eslint-config-prettier#readme	Highest
Vendor	package.json	name	eslint-config-prettier	Highest
Vendor	package.json	name	eslint-config-prettier_project	Highest
Product	package.json	name	eslint-config-prettier	Highest
Version	package.json	version	10.1.5	Highest

Identifiers

pkg:npm/eslint-config-prettier@10.1.5 (Confidence:Highest)

eslint-plugin-prettier:5.4.1

Description:

Runs prettier as an eslint rule

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint-plugin-prettier:5.4.1

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Teddy Katz	Highest
Vendor	package.json	description	Runs prettier as an eslint rule	Highest
Vendor	package.json	homepage	https://github.com/prettier/eslint-plugin-prettier#readme	Highest
Vendor	package.json	name	eslint-plugin-prettier	Highest
Vendor	package.json	name	eslint-plugin-prettier_project	Highest
Product	package.json	name	eslint-plugin-prettier	Highest
Version	package.json	version	5.4.1	Highest

Identifiers

pkg:npm/eslint-plugin-prettier@5.4.1 (Confidence:Highest)

eslint-scope:8.3.0

Description:

ECMAScript scope analyzer for ESLint

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint-scope:8.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/eslint/js/issues	Highest
Vendor	package.json	description	ECMAScript scope analyzer for ESLint	Highest
Vendor	package.json	homepage	https://github.com/eslint/js/blob/main/packages/eslint-scope/README.md	Highest
Vendor	package.json	name	eslint-scope	Highest
Vendor	package.json	name	eslint-scope_project	Highest
Product	package.json	name	eslint-scope	Highest
Version	package.json	version	8.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/eslint-scope@8.3.0 (Confidence:Highest)

eslint-visitor-keys:3.4.3

Description:

Constants and utilities about visitor keys to traverse AST.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint-visitor-keys:3.4.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@eslint-community/eslint-utils:4.7.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Toru Nagashima (https://github.com/mysticatea)	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/eslint-visitor-keys/issues	Highest
Vendor	package.json	description	Constants and utilities about visitor keys to traverse AST.	Highest
Vendor	package.json	homepage	https://github.com/eslint/eslint-visitor-keys#readme	Highest
Vendor	package.json	name	eslint-visitor-keys	Highest
Vendor	package.json	name	eslint-visitor-keys_project	Highest
Product	package.json	name	eslint-visitor-keys	Highest
Version	package.json	version	3.4.3	Highest

Related Dependencies

Identifiers

pkg:npm/eslint-visitor-keys@3.4.3 (Confidence:Highest)

eslint-visitor-keys:4.2.0

Description:

Constants and utilities about visitor keys to traverse AST.

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?espree:10.3.0/eslint-visitor-keys:^4.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/espree:10.3.0
owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@typescript-eslint/visitor-keys:8.34.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Toru Nagashima (https://github.com/mysticatea)	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/js/issues	Highest
Vendor	package.json	description	Constants and utilities about visitor keys to traverse AST.	Highest
Vendor	package.json	homepage	https://github.com/eslint/js/blob/main/packages/eslint-visitor-keys/README.md	Highest
Vendor	package.json	name	eslint-visitor-keys	Highest
Vendor	package.json	name	eslint-visitor-keys_project	Highest
Product	package.json	name	eslint-visitor-keys	Highest
Version	package.json	version	4.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/eslint-visitor-keys@4.2.0 (Confidence:Highest)

eslint:9.28.0

Description:

An AST-based pattern checker for JavaScript.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/eslint:9.28.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas <nicholas+npm@nczconsulting.com>	Highest
Vendor	package.json	bugs	https://github.com/eslint/eslint/issues/	Highest
Vendor	package.json	description	An AST-based pattern checker for JavaScript.	Highest
Vendor	package.json	homepage	https://eslint.org	Highest
Vendor	package.json	name	eslint	Highest
Vendor	package.json	name	eslint_project	Highest
Product	package.json	name	eslint	Highest
Version	package.json	version	9.28.0	Highest

Identifiers

pkg:npm/eslint@9.28.0 (Confidence:Highest)

espree:10.3.0

Description:

An Esprima-compatible JavaScript parser built on Acorn

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/espree:10.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Nicholas C. Zakas <nicholas+npm@nczconsulting.com>	Highest
Vendor	package.json	bugs.url	https://github.com/eslint/js/issues	Highest
Vendor	package.json	description	An Esprima-compatible JavaScript parser built on Acorn	Highest
Vendor	package.json	homepage	https://github.com/eslint/js/blob/main/packages/espree/README.md	Highest
Vendor	package.json	name	espree	Highest
Vendor	package.json	name	espree_project	Highest
Product	package.json	name	espree	Highest
Version	package.json	version	10.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/espree@10.3.0 (Confidence:Highest)

esquery:1.6.0

Description:

A query library for ECMAScript AST using a CSS selector like query language.

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/esquery:1.6.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Joel Feenstra <jrfeenst+esquery@gmail.com>	Highest
Vendor	package.json	bugs	https://github.com/estools/esquery/issues	Highest
Vendor	package.json	description	A query library for ECMAScript AST using a CSS selector like query language.	Highest
Vendor	package.json	homepage	https://github.com/estools/esquery/	Highest
Vendor	package.json	name	esquery	Highest
Vendor	package.json	name	esquery_project	Highest
Product	package.json	name	esquery	Highest
Version	package.json	version	1.6.0	Highest

Related Dependencies

Identifiers

pkg:npm/esquery@1.6.0 (Confidence:Highest)

esrecurse:4.3.0

Description:

ECMAScript AST recursive visitor

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/esrecurse:4.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint-scope:8.3.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	ECMAScript AST recursive visitor	Highest
Vendor	package.json	homepage	https://github.com/estools/esrecurse	Highest
Vendor	package.json	maintainers.email	utatane.tea@gmail.com	Highest
Vendor	package.json	maintainers.name	Yusuke Suzuki	Highest
Vendor	package.json	maintainers.web	https://github.com/Constellation	Highest
Vendor	package.json	name	esrecurse	Highest
Vendor	package.json	name	esrecurse_project	Highest
Product	package.json	name	esrecurse	Highest
Version	package.json	version	4.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/esrecurse@4.3.0 (Confidence:Highest)

estraverse:5.3.0

Description:

ECMAScript JS AST traversal functions

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/estraverse:5.3.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint-scope:8.3.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/esrecurse:4.3.0
owasp-dependency-check:0.6.2/esquery:1.6.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	ECMAScript JS AST traversal functions	Highest
Vendor	package.json	homepage	https://github.com/estools/estraverse	Highest
Vendor	package.json	maintainers.email	utatane.tea@gmail.com	Highest
Vendor	package.json	maintainers.name	Yusuke Suzuki	Highest
Vendor	package.json	maintainers.web	http://github.com/Constellation	Highest
Vendor	package.json	name	estraverse	Highest
Vendor	package.json	name	estraverse_project	Highest
Product	package.json	name	estraverse	Highest
Version	package.json	version	5.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/estraverse@5.3.0 (Confidence:Highest)

esutils:2.0.3

Description:

utility box for ECMAScript language tools

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/esutils:2.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	utility box for ECMAScript language tools	Highest
Vendor	package.json	homepage	https://github.com/estools/esutils	Highest
Vendor	package.json	maintainers.email	utatane.tea@gmail.com	Highest
Vendor	package.json	maintainers.name	Yusuke Suzuki	Highest
Vendor	package.json	maintainers.web	http://github.com/Constellation	Highest
Vendor	package.json	name	esutils	Highest
Vendor	package.json	name	esutils_project	Highest
Product	package.json	name	esutils	Highest
Version	package.json	version	2.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/esutils@2.0.3 (Confidence:Highest)

extract-zip:2.0.1

Description:

unzip a zip file into a directory using 100% javascript

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/extract-zip:2.0.1

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	max ogden	Highest
Vendor	package.json	description	unzip a zip file into a directory using 100% javascript	Highest
Vendor	package.json	name	extract-zip	Highest
Vendor	package.json	name	extract-zip_project	Highest
Product	package.json	name	extract-zip	Highest
Version	package.json	version	2.0.1	Highest

Identifiers

pkg:npm/extract-zip@2.0.1 (Confidence:Highest)

fast-deep-equal:3.1.3

Description:

Fast deep equal

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/fast-deep-equal:3.1.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/ajv:6.12.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Evgeny Poberezkin	Highest
Vendor	package.json	bugs.url	https://github.com/epoberezkin/fast-deep-equal/issues	Highest
Vendor	package.json	description	Fast deep equal	Highest
Vendor	package.json	homepage	https://github.com/epoberezkin/fast-deep-equal#readme	Highest
Vendor	package.json	name	fast-deep-equal	Highest
Vendor	package.json	name	fast-deep-equal_project	Highest
Product	package.json	name	fast-deep-equal	Highest
Version	package.json	version	3.1.3	Highest

Related Dependencies

Identifiers

pkg:npm/fast-deep-equal@3.1.3 (Confidence:Highest)

fast-diff:1.3.0

Description:

Fast Javascript text diff

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?prettier-linter-helpers:1.0.0/fast-diff:^1.1.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/prettier-linter-helpers:1.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jason Chen <jhchen7@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/jhchen/fast-diff/issues	Highest
Vendor	package.json	description	Fast Javascript text diff	Highest
Vendor	package.json	name	fast-diff	Highest
Vendor	package.json	name	fast-diff_project	Highest
Product	package.json	name	fast-diff	Highest
Version	package.json	version	1.3.0	Highest

Related Dependencies

Identifiers

pkg:npm/fast-diff@1.3.0 (Confidence:Highest)

fast-glob:3.3.3

Description:

It's a very fast and efficient glob library for Node.js

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.60.2/fast-glob:^3.3.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	Denis Malinochkin	Highest
Vendor	package.json	author.url	https://mrmlnc.com	Highest
Vendor	package.json	description	It's a very fast and efficient glob library for Node.js	Highest
Vendor	package.json	name	fast-glob	Highest
Vendor	package.json	name	fast-glob_project	Highest
Product	package.json	name	fast-glob	Highest
Version	package.json	version	3.3.3	Highest

Related Dependencies

Identifiers

pkg:npm/fast-glob@3.3.3 (Confidence:Highest)

fast-json-stable-stringify:2.1.0

Description:

deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/fast-json-stable-stringify:2.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/ajv:6.12.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify	Highest
Vendor	package.json	homepage	https://github.com/epoberezkin/fast-json-stable-stringify	Highest
Vendor	package.json	name	fast-json-stable-stringify	Highest
Vendor	package.json	name	fast-json-stable-stringify_project	Highest
Product	package.json	name	fast-json-stable-stringify	Highest
Version	package.json	version	2.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/fast-json-stable-stringify@2.1.0 (Confidence:Highest)

fast-levenshtein:2.0.6

Description:

Efficient implementation of Levenshtein algorithm  with locale-specific collator support.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?optionator:0.9.4/fast-levenshtein:^2.0.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/optionator:0.9.4
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Ramesh Nair <ram@hiddentao.com> (http://www.hiddentao.com/)	Highest
Vendor	package.json	description	Efficient implementation of Levenshtein algorithm with locale-specific collator support.	Highest
Vendor	package.json	name	fast-levenshtein	Highest
Vendor	package.json	name	fast-levenshtein_project	Highest
Product	package.json	name	fast-levenshtein	Highest
Version	package.json	version	2.0.6	Highest

Related Dependencies

Identifiers

pkg:npm/fast-levenshtein@2.0.6 (Confidence:Highest)

fastq:1.19.1

Description:

Fast, in memory work queue

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/fastq:1.19.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@nodelib/fs.walk:1.2.8
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matteo Collina <hello@matteocollina.com>	Highest
Vendor	package.json	bugs.url	https://github.com/mcollina/fastq/issues	Highest
Vendor	package.json	description	Fast, in memory work queue	Highest
Vendor	package.json	homepage	https://github.com/mcollina/fastq#readme	Highest
Vendor	package.json	name	fastq	Highest
Vendor	package.json	name	fastq_project	Highest
Product	package.json	name	fastq	Highest
Version	package.json	version	1.19.1	Highest

Related Dependencies

Identifiers

pkg:npm/fastq@1.19.1 (Confidence:Highest)

fd-package-json:2.0.0

Description:

Utilities for finding the closest package.json file

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?formatly:0.2.4/fd-package-json:^2.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/formatly:0.2.4
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	James Garbutt (https://github.com/43081j)	Highest
Vendor	package.json	bugs.url	https://github.com/es-tooling/fd-package-json/issues	Highest
Vendor	package.json	description	Utilities for finding the closest package.json file	Highest
Vendor	package.json	homepage	https://github.com/es-tooling/fd-package-json#readme	Highest
Vendor	package.json	name	fd-package-json	Highest
Vendor	package.json	name	fd-package-json_project	Highest
Product	package.json	name	fd-package-json	Highest
Version	package.json	version	2.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/fd-package-json@2.0.0 (Confidence:Highest)

fd-slicer:1.1.0

Description:

safely create multiple ReadStream or WriteStream objects from the same file descriptor

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?yauzl:2.10.0/fd-slicer:~1.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/yauzl:2.10.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Andrew Kelley <superjoe30@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/andrewrk/node-fd-slicer/issues	Highest
Vendor	package.json	description	safely create multiple ReadStream or WriteStream objects from the same file descriptor	Highest
Vendor	package.json	name	fd-slicer	Highest
Vendor	package.json	name	fd-slicer_project	Highest
Product	package.json	name	fd-slicer	Highest
Version	package.json	version	1.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/fd-slicer@1.1.0 (Confidence:Highest)

file-entry-cache:8.0.0

Description:

Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/file-entry-cache:8.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	Jared Wray	Highest
Vendor	package.json	author.url	https://jaredwray.com	Highest
Vendor	package.json	description	Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process	Highest
Vendor	package.json	name	file-entry-cache	Highest
Vendor	package.json	name	file-entry-cache_project	Highest
Product	package.json	name	file-entry-cache	Highest
Version	package.json	version	8.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/file-entry-cache@8.0.0 (Confidence:Highest)

filelist:1.0.4

Description:

Lazy-evaluating list of files, based on globs or regex patterns

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?jake:10.9.2/filelist:^1.0.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/jake:10.9.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matthew Eernisse <mde@fleegix.org> (http://fleegix.org)	Highest
Vendor	package.json	bugs.url	https://github.com/mde/filelist/issues	Highest
Vendor	package.json	description	Lazy-evaluating list of files, based on globs or regex patterns	Highest
Vendor	package.json	homepage	https://github.com/mde/filelist	Highest
Vendor	package.json	name	filelist	Highest
Vendor	package.json	name	filelist_project	Highest
Product	package.json	name	filelist	Highest
Version	package.json	version	1.0.4	Highest

Related Dependencies

Identifiers

pkg:npm/filelist@1.0.4 (Confidence:Highest)

fill-range:7.1.1

Description:

Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/fill-range:7.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/braces:3.0.3

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/jonschlinkert/fill-range/issues	Highest
Vendor	package.json	description	Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`	Highest
Vendor	package.json	homepage	https://github.com/jonschlinkert/fill-range	Highest
Vendor	package.json	name	fill-range	Highest
Vendor	package.json	name	fill-range_project	Highest
Product	package.json	name	fill-range	Highest
Version	package.json	version	7.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/fill-range@7.1.1 (Confidence:Highest)

find-package:1.0.0

Description:

Find the nearest package.json in your current node module

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?genversion:3.2.0/find-package:^1.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/genversion:3.2.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Javier Alba	Highest
Vendor	package.json	bugs.url	https://github.com/jalba/find-package/issues	Highest
Vendor	package.json	description	Find the nearest package.json in your current node module	Highest
Vendor	package.json	homepage	https://github.com/jalba/find-package	Highest
Vendor	package.json	name	find-package	Highest
Vendor	package.json	name	find-package_project	Highest
Product	package.json	name	find-package	Highest
Version	package.json	version	1.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/find-package@1.0.0 (Confidence:Highest)

find-up:5.0.0

Description:

Find a file or directory by walking up parent directories

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/find-up:5.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Find a file or directory by walking up parent directories	Highest
Vendor	package.json	name	find-up	Highest
Vendor	package.json	name	find-up_project	Highest
Product	package.json	name	find-up	Highest
Version	package.json	version	5.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/find-up@5.0.0 (Confidence:Highest)

flat-cache:4.0.1

Description:

A stupidly simple key/value storage using files to persist some data

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/flat-cache:4.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/file-entry-cache:8.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	Jared Wray	Highest
Vendor	package.json	author.url	https://jaredwray.com	Highest
Vendor	package.json	description	A stupidly simple key/value storage using files to persist some data	Highest
Vendor	package.json	name	flat-cache	Highest
Vendor	package.json	name	flat-cache_project	Highest
Product	package.json	name	flat-cache	Highest
Version	package.json	version	4.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/flat-cache@4.0.1 (Confidence:Highest)

flatted:3.3.3

Description:

A super light and fast circular JSON parser.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/flatted:3.3.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/flat-cache:4.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Andrea Giammarchi	Highest
Vendor	package.json	bugs.url	https://github.com/WebReflection/flatted/issues	Highest
Vendor	package.json	description	A super light and fast circular JSON parser.	Highest
Vendor	package.json	homepage	https://github.com/WebReflection/flatted#readme	Highest
Vendor	package.json	name	flatted	Highest
Vendor	package.json	name	flatted_project	Highest
Product	package.json	name	flatted	Highest
Version	package.json	version	3.3.3	Highest

Related Dependencies

Identifiers

pkg:npm/flatted@3.3.3 (Confidence:Highest)

formatly:0.2.4

Description:

Formats your code with whatever formatter your project is already using. 🧼

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.60.2/formatly:^0.2.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	npm@joshuakgoldberg.com	Highest
Vendor	package.json	author.name	Josh Goldberg ✨	Highest
Vendor	package.json	description	Formats your code with whatever formatter your project is already using. 🧼	Highest
Vendor	package.json	name	formatly	Highest
Vendor	package.json	name	formatly_project	Highest
Product	package.json	name	formatly	Highest
Version	package.json	version	0.2.4	Highest

Related Dependencies

Identifiers

pkg:npm/formatly@0.2.4 (Confidence:Highest)

genversion:3.2.0

Description:

A command line utility to read version from package.json and attach it into your module as a property

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/genversion:3.2.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	akseli.palen@gmail.com	Highest
Vendor	package.json	author.name	Akseli Palen	Highest
Vendor	package.json	description	A command line utility to read version from package.json and attach it into your module as a property	Highest
Vendor	package.json	homepage	https://github.com/axelpale/genversion	Highest
Vendor	package.json	name	genversion	Highest
Vendor	package.json	name	genversion_project	Highest
Product	package.json	name	genversion	Highest
Version	package.json	version	3.2.0	Highest

Identifiers

pkg:npm/genversion@3.2.0 (Confidence:Highest)

get-stream:5.2.0

Description:

Get a stream as a string, buffer, or array

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/get-stream:5.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/extract-zip:2.0.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Get a stream as a string, buffer, or array	Highest
Vendor	package.json	name	get-stream	Highest
Vendor	package.json	name	get-stream_project	Highest
Product	package.json	name	get-stream	Highest
Version	package.json	version	5.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/get-stream@5.2.0 (Confidence:Highest)

glob-parent:5.1.2

Description:

Extract the non-magic parent path from a glob string.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/glob-parent:5.1.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/fast-glob:3.3.3
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Gulp Team <team@gulpjs.com> (https://gulpjs.com/)	Highest
Vendor	package.json	description	Extract the non-magic parent path from a glob string.	Highest
Vendor	package.json	name	glob-parent	Highest
Vendor	package.json	name	glob-parent_project	Highest
Product	package.json	name	glob-parent	Highest
Version	package.json	version	5.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/glob-parent@5.1.2 (Confidence:Highest)
cpe:2.3:a:gulpjs:glob-parent:5.1.2:*:*:*:*:*:*:* (Confidence:Highest)

glob-parent:6.0.2

Description:

Extract the non-magic parent path from a glob string.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/glob-parent:6.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Gulp Team <team@gulpjs.com> (https://gulpjs.com/)	Highest
Vendor	package.json	description	Extract the non-magic parent path from a glob string.	Highest
Vendor	package.json	name	glob-parent	Highest
Vendor	package.json	name	glob-parent_project	Highest
Product	package.json	name	glob-parent	Highest
Version	package.json	version	6.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/glob-parent@6.0.2 (Confidence:Highest)
cpe:2.3:a:gulpjs:glob-parent:6.0.2:*:*:*:*:*:*:* (Confidence:Highest)

globals:14.0.0

Description:

Global identifiers from different JavaScript environments

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/globals:14.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Global identifiers from different JavaScript environments	Highest
Vendor	package.json	name	globals	Highest
Vendor	package.json	name	globals_project	Highest
Product	package.json	name	globals	Highest
Version	package.json	version	14.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/globals@14.0.0 (Confidence:Highest)

graphemer:1.4.0

Description:

A JavaScript library that breaks strings into their individual user-perceived characters (including emojis!)

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/graphemer:1.4.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/eslint-plugin:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matt Davies <matt@filament.so> (https://github.com/mattpauldavies)	Highest
Vendor	package.json	bugs	https://github.com/flmnt/graphemer/issues	Highest
Vendor	package.json	description	A JavaScript library that breaks strings into their individual user-perceived characters (including emojis!)	Highest
Vendor	package.json	homepage	https://github.com/flmnt/graphemer	Highest
Vendor	package.json	name	graphemer	Highest
Vendor	package.json	name	graphemer_project	Highest
Product	package.json	name	graphemer	Highest
Version	package.json	version	1.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/graphemer@1.4.0 (Confidence:Highest)

has-flag:4.0.0

Description:

Check if argv has a specific flag

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?supports-color:7.2.0/has-flag:^4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/supports-color:7.2.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Check if argv has a specific flag	Highest
Vendor	package.json	name	has-flag	Highest
Vendor	package.json	name	has-flag_project	Highest
Product	package.json	name	has-flag	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/has-flag@4.0.0 (Confidence:Highest)

ignore:5.3.2

Description:

Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ignore:5.3.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	kael	Highest
Vendor	package.json	bugs.url	https://github.com/kaelzhang/node-ignore/issues	Highest
Vendor	package.json	description	Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.	Highest
Vendor	package.json	name	ignore	Highest
Vendor	package.json	name	ignore_project	Highest
Product	package.json	name	ignore	Highest
Version	package.json	version	5.3.2	Highest

Related Dependencies

Identifiers

pkg:npm/ignore@5.3.2 (Confidence:Highest)

ignore:7.0.5

Description:

Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ignore:7.0.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/eslint-plugin:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	kael	Highest
Vendor	package.json	bugs.url	https://github.com/kaelzhang/node-ignore/issues	Highest
Vendor	package.json	description	Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.	Highest
Vendor	package.json	name	ignore	Highest
Vendor	package.json	name	ignore_project	Highest
Product	package.json	name	ignore	Highest
Version	package.json	version	7.0.5	Highest

Related Dependencies

Identifiers

pkg:npm/ignore@7.0.5 (Confidence:Highest)

import-fresh:3.3.1

Description:

Import a module while bypassing the cache

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/import-fresh:3.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Import a module while bypassing the cache	Highest
Vendor	package.json	name	import-fresh	Highest
Vendor	package.json	name	import-fresh_project	Highest
Product	package.json	name	import-fresh	Highest
Version	package.json	version	3.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/import-fresh@3.3.1 (Confidence:Highest)

imurmurhash:0.1.4

Description:

An incremental implementation of MurmurHash3

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/imurmurhash:0.1.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	jensyt@gmail.com	Highest
Vendor	package.json	author.name	Jens Taylor	Highest
Vendor	package.json	author.url	https://github.com/homebrewing	Highest
Vendor	package.json	bugs.url	https://github.com/jensyt/imurmurhash-js/issues	Highest
Vendor	package.json	description	An incremental implementation of MurmurHash3	Highest
Vendor	package.json	homepage	https://github.com/jensyt/imurmurhash-js	Highest
Vendor	package.json	name	imurmurhash	Highest
Vendor	package.json	name	imurmurhash_project	Highest
Product	package.json	name	imurmurhash	Highest
Version	package.json	version	0.1.4	Highest

Related Dependencies

Identifiers

pkg:npm/imurmurhash@0.1.4 (Confidence:Highest)

is-extglob:2.1.1

Description:

Returns true if a string has an extglob.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?is-glob:4.0.3/is-extglob:^2.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/is-glob:4.0.3
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/jonschlinkert/is-extglob/issues	Highest
Vendor	package.json	description	Returns true if a string has an extglob.	Highest
Vendor	package.json	homepage	https://github.com/jonschlinkert/is-extglob	Highest
Vendor	package.json	name	is-extglob	Highest
Vendor	package.json	name	is-extglob_project	Highest
Product	package.json	name	is-extglob	Highest
Version	package.json	version	2.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/is-extglob@2.1.1 (Confidence:Highest)

is-glob:4.0.3

Description:

Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/is-glob:4.0.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/glob-parent:6.0.2
owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2/glob-parent:5.1.2
owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/is-glob/issues	Highest
Vendor	package.json	description	Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/is-glob	Highest
Vendor	package.json	name	is-glob	Highest
Vendor	package.json	name	is-glob_project	Highest
Product	package.json	name	is-glob	Highest
Version	package.json	version	4.0.3	Highest

Related Dependencies

Identifiers

pkg:npm/is-glob@4.0.3 (Confidence:Highest)

is-number:7.0.0

Description:

Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?to-regex-range:5.0.1/is-number:^7.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/to-regex-range:5.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/jonschlinkert/is-number/issues	Highest
Vendor	package.json	description	Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.	Highest
Vendor	package.json	homepage	https://github.com/jonschlinkert/is-number	Highest
Vendor	package.json	name	is-number	Highest
Vendor	package.json	name	is-number_project	Highest
Product	package.json	name	is-number	Highest
Version	package.json	version	7.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/is-number@7.0.0 (Confidence:Highest)

isexe:2.0.0

Description:

Minimal module to check if a file is executable.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?which:2.0.2/isexe:^2.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/which:2.0.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)	Highest
Vendor	package.json	bugs.url	https://github.com/isaacs/isexe/issues	Highest
Vendor	package.json	description	Minimal module to check if a file is executable.	Highest
Vendor	package.json	homepage	https://github.com/isaacs/isexe#readme	Highest
Vendor	package.json	name	isexe	Highest
Vendor	package.json	name	isexe_project	Highest
Product	package.json	name	isexe	Highest
Version	package.json	version	2.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/isexe@2.0.0 (Confidence:Highest)

jake:10.9.2

Description:

JavaScript build tool, similar to Make or Rake

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/jake:10.9.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/ejs:3.1.10
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matthew Eernisse <mde@fleegix.org> (http://fleegix.org)	Highest
Vendor	package.json	description	JavaScript build tool, similar to Make or Rake	Highest
Vendor	package.json	name	jake	Highest
Vendor	package.json	name	jake_project	Highest
Product	package.json	name	jake	Highest
Version	package.json	version	10.9.2	Highest

Related Dependencies

Identifiers

pkg:npm/jake@10.9.2 (Confidence:Highest)

jiti:2.4.2

Description:

Runtime typescript and ESM support for Node.js

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.60.2/jiti:^2.4.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Runtime typescript and ESM support for Node.js	Highest
Vendor	package.json	name	jiti	Highest
Vendor	package.json	name	jiti_project	Highest
Product	package.json	name	jiti	Highest
Version	package.json	version	2.4.2	Highest

Related Dependencies

Identifiers

pkg:npm/jiti@2.4.2 (Confidence:Highest)

js-yaml:4.1.0

Description:

YAML 1.2 parser and serializer

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?knip:5.60.2/js-yaml:^4.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Vladimir Zapparov <dervus.grim@gmail.com>	Highest
Vendor	package.json	description	YAML 1.2 parser and serializer	Highest
Vendor	package.json	name	js-yaml	Highest
Vendor	package.json	name	js-yaml_project	Highest
Product	package.json	name	js-yaml	Highest
Version	package.json	version	4.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/js-yaml@4.1.0 (Confidence:Highest)
cpe:2.3:a:js-yaml_project:js-yaml:4.1.0:*:*:*:*:*:*:* (Confidence:Highest)

json-buffer:3.0.1

Description:

JSON parse & stringify that supports binary via bops & base64

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?keyv:4.5.4/json-buffer:3.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/keyv:4.5.4
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Dominic Tarr <dominic.tarr@gmail.com> (http://dominictarr.com)	Highest
Vendor	package.json	description	JSON parse & stringify that supports binary via bops & base64	Highest
Vendor	package.json	homepage	https://github.com/dominictarr/json-buffer	Highest
Vendor	package.json	name	json-buffer	Highest
Vendor	package.json	name	json-buffer_project	Highest
Product	package.json	name	json-buffer	Highest
Version	package.json	version	3.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/json-buffer@3.0.1 (Confidence:Highest)

json-schema-traverse:0.4.1

Description:

Traverse JSON Schema passing each schema object to callback

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/json-schema-traverse:0.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/ajv:6.12.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Evgeny Poberezkin	Highest
Vendor	package.json	bugs.url	https://github.com/epoberezkin/json-schema-traverse/issues	Highest
Vendor	package.json	description	Traverse JSON Schema passing each schema object to callback	Highest
Vendor	package.json	homepage	https://github.com/epoberezkin/json-schema-traverse#readme	Highest
Vendor	package.json	name	json-schema-traverse	Highest
Vendor	package.json	name	json-schema-traverse_project	Highest
Product	package.json	name	json-schema-traverse	Highest
Version	package.json	version	0.4.1	Highest

Related Dependencies

Identifiers

pkg:npm/json-schema-traverse@0.4.1 (Confidence:Highest)

json-stable-stringify-without-jsonify:1.0.1

Description:

deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/json-stable-stringify-without-jsonify:1.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies	Highest
Vendor	package.json	homepage	https://github.com/samn/json-stable-stringify	Highest
Vendor	package.json	name	json-stable-stringify-without-jsonify	Highest
Vendor	package.json	name	json-stable-stringify-without-jsonify_project	Highest
Product	package.json	name	json-stable-stringify-without-jsonify	Highest
Version	package.json	version	1.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/json-stable-stringify-without-jsonify@1.0.1 (Confidence:Highest)

keyv:4.5.4

Description:

Simple key-value storage with support for multiple backends

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/keyv:4.5.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/flat-cache:4.0.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jared Wray <me@jaredwray.com> (http://jaredwray.com)	Highest
Vendor	package.json	bugs.url	https://github.com/jaredwray/keyv/issues	Highest
Vendor	package.json	description	Simple key-value storage with support for multiple backends	Highest
Vendor	package.json	homepage	https://github.com/jaredwray/keyv	Highest
Vendor	package.json	name	keyv	Highest
Vendor	package.json	name	keyv_project	Highest
Product	package.json	name	keyv	Highest
Version	package.json	version	4.5.4	Highest

Related Dependencies

Identifiers

pkg:npm/keyv@4.5.4 (Confidence:Highest)

knip:5.60.2

Description:

Find and fix unused dependencies, exports and files in your TypeScript and JavaScript projects

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/knip:5.60.2

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	lars@webpro.nl	Highest
Vendor	package.json	author.name	Lars Kappert	Highest
Vendor	package.json	bugs	https://github.com/webpro-nl/knip/issues	Highest
Vendor	package.json	description	Find and fix unused dependencies, exports and files in your TypeScript and JavaScript projects	Highest
Vendor	package.json	homepage	https://knip.dev	Highest
Vendor	package.json	name	knip	Highest
Vendor	package.json	name	knip_project	Highest
Product	package.json	name	knip	Highest
Version	package.json	version	5.60.2	Highest

Identifiers

pkg:npm/knip@5.60.2 (Confidence:Highest)

levn:0.4.1

Description:

Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?optionator:0.9.4/levn:^0.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/optionator:0.9.4
owasp-dependency-check:0.6.2/@eslint/plugin-kit:0.3.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	George Zahariev <z@georgezahariev.com>	Highest
Vendor	package.json	bugs	https://github.com/gkz/levn/issues	Highest
Vendor	package.json	description	Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible	Highest
Vendor	package.json	homepage	https://github.com/gkz/levn	Highest
Vendor	package.json	name	levn	Highest
Vendor	package.json	name	levn_project	Highest
Product	package.json	name	levn	Highest
Version	package.json	version	0.4.1	Highest

Related Dependencies

Identifiers

pkg:npm/levn@0.4.1 (Confidence:Highest)

locate-path:6.0.0

Description:

Get the first path that exists on disk of multiple paths

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/locate-path:6.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/find-up:5.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package-lock.json	name	locate-path	Highest
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Get the first path that exists on disk of multiple paths	Highest
Vendor	package.json	name	locate-path	Highest
Vendor	package.json	name	locate-path_project	Highest
Product	package-lock.json	name	locate-path	Highest
Product	package.json	name	locate-path	Highest
Version	package.json	version	6.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/locate-path@6.0.0 (Confidence:Highest)

lodash.get:4.4.2

Description:

The lodash method `_.get` exported as a module.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/lodash.get:4.4.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@sinonjs/samsam:8.0.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)	Highest
Vendor	package.json	description	The lodash method `_.get` exported as a module.	Highest
Vendor	package.json	homepage	https://lodash.com/	Highest
Vendor	package.json	name	lodash.get	Highest
Vendor	package.json	name	lodash.get_project	Highest
Product	package.json	name	lodash.get	Highest
Version	package.json	version	4.4.2	Highest

Related Dependencies

Identifiers

pkg:npm/lodash.get@4.4.2 (Confidence:Highest)

lodash.merge:4.6.2

Description:

The Lodash method `_.merge` exported as a module.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/lodash.merge:4.6.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	John-David Dalton <john.david.dalton@gmail.com>	Highest
Vendor	package.json	description	The Lodash method `_.merge` exported as a module.	Highest
Vendor	package.json	homepage	https://lodash.com/	Highest
Vendor	package.json	name	lodash.merge	Highest
Vendor	package.json	name	lodash.merge_project	Highest
Product	package.json	name	lodash.merge	Highest
Version	package.json	version	4.6.2	Highest

Related Dependencies

Identifiers

pkg:npm/lodash.merge@4.6.2 (Confidence:Highest)

merge2:1.4.1

Description:

Merge multiple streams into one stream in sequence or parallel.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/merge2:1.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/fast-glob:3.3.3
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Merge multiple streams into one stream in sequence or parallel.	Highest
Vendor	package.json	homepage	https://github.com/teambition/merge2	Highest
Vendor	package.json	name	merge2	Highest
Vendor	package.json	name	merge2_project	Highest
Product	package.json	name	merge2	Highest
Version	package.json	version	1.4.1	Highest

Related Dependencies

Identifiers

pkg:npm/merge2@1.4.1 (Confidence:Highest)

micromatch:4.0.8

Description:

Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/micromatch:4.0.8

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/fast-glob:3.3.3
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/micromatch/issues	Highest
Vendor	package.json	description	Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/micromatch	Highest
Vendor	package.json	name	micromatch	Highest
Vendor	package.json	name	micromatch_project	Highest
Product	package.json	name	micromatch	Highest
Version	package.json	version	4.0.8	Highest

Related Dependencies

Identifiers

pkg:npm/micromatch@4.0.8 (Confidence:Highest)

minimatch:3.1.2

Description:

a glob matcher in javascript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/minimatch:3.1.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@eslint/config-array:0.20.0
owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@eslint/eslintrc:3.3.1
owasp-dependency-check:0.6.2/jake:10.9.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)	Highest
Vendor	package.json	description	a glob matcher in javascript	Highest
Vendor	package.json	name	minimatch	Highest
Vendor	package.json	name	minimatch_project	Highest
Product	package.json	name	minimatch	Highest
Version	package.json	version	3.1.2	Highest

Related Dependencies

Identifiers

pkg:npm/minimatch@3.1.2 (Confidence:Highest)
cpe:2.3:a:minimatch_project:minimatch:3.1.2:*:*:*:*:*:*:* (Confidence:Highest)

minimatch:5.1.6

Description:

a glob matcher in javascript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/minimatch:5.1.6

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/filelist:1.0.4
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)	Highest
Vendor	package.json	description	a glob matcher in javascript	Highest
Vendor	package.json	name	minimatch	Highest
Vendor	package.json	name	minimatch_project	Highest
Product	package.json	name	minimatch	Highest
Version	package.json	version	5.1.6	Highest

Related Dependencies

Identifiers

pkg:npm/minimatch@5.1.6 (Confidence:Highest)
cpe:2.3:a:minimatch_project:minimatch:5.1.6:*:*:*:*:*:*:* (Confidence:Highest)

minimatch:9.0.5

Description:

a glob matcher in javascript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/minimatch:9.0.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)	Highest
Vendor	package.json	description	a glob matcher in javascript	Highest
Vendor	package.json	name	minimatch	Highest
Vendor	package.json	name	minimatch_project	Highest
Product	package.json	name	minimatch	Highest
Version	package.json	version	9.0.5	Highest

Related Dependencies

Identifiers

pkg:npm/minimatch@9.0.5 (Confidence:Highest)
cpe:2.3:a:minimatch_project:minimatch:9.0.5:*:*:*:*:*:*:* (Confidence:Highest)

minimist:1.2.8

Description:

parse argument options

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/minimist:1.2.8

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	parse argument options	Highest
Vendor	package.json	homepage	https://github.com/minimistjs/minimist	Highest
Vendor	package.json	name	minimist	Highest
Vendor	package.json	name	minimist_project	Highest
Product	package.json	name	minimist	Highest
Version	package.json	version	1.2.8	Highest

Related Dependencies

Identifiers

pkg:npm/minimist@1.2.8 (Confidence:Highest)
cpe:2.3:a:substack:minimist:1.2.8:*:*:*:*:*:*:* (Confidence:Highest)

ms:2.1.3

Description:

Tiny millisecond conversion utility

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ms:2.1.3

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/debug:4.4.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Tiny millisecond conversion utility	Highest
Vendor	package.json	name	ms	Highest
Vendor	package.json	name	ms_project	Highest
Product	package.json	name	ms	Highest
Version	package.json	version	2.1.3	Highest

Related Dependencies

Identifiers

pkg:npm/ms@2.1.3 (Confidence:Highest)

natural-compare:1.4.0

Description:

Compare strings containing a mix of letters and numbers in the way a human being would in sort order.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/natural-compare:1.4.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/eslint-plugin:8.34.0
owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Lauri Rooden (https://github.com/litejs/natural-compare-lite)	Highest
Vendor	package.json	bugs.url	https://github.com/litejs/natural-compare-lite/issues	Highest
Vendor	package.json	description	Compare strings containing a mix of letters and numbers in the way a human being would in sort order.	Highest
Vendor	package.json	name	natural-compare	Highest
Vendor	package.json	name	natural-compare_project	Highest
Product	package.json	name	natural-compare	Highest
Version	package.json	version	1.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/natural-compare@1.4.0 (Confidence:Highest)

once:1.4.0

Description:

Run a function exactly one time

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?pump:3.0.0/once:^1.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/end-of-stream:1.4.4
owasp-dependency-check:0.6.2/pump:3.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)	Highest
Vendor	package.json	description	Run a function exactly one time	Highest
Vendor	package.json	name	once	Highest
Vendor	package.json	name	once_project	Highest
Product	package.json	name	once	Highest
Version	package.json	version	1.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/once@1.4.0 (Confidence:Highest)

optionator:0.9.4

Description:

option parsing and help generation

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/optionator:0.9.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint:9.28.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	George Zahariev <z@georgezahariev.com>	Highest
Vendor	package.json	bugs	https://github.com/gkz/optionator/issues	Highest
Vendor	package.json	description	option parsing and help generation	Highest
Vendor	package.json	homepage	https://github.com/gkz/optionator	Highest
Vendor	package.json	name	optionator	Highest
Vendor	package.json	name	optionator_project	Highest
Product	package.json	name	optionator	Highest
Version	package.json	version	0.9.4	Highest

Related Dependencies

Identifiers

pkg:npm/optionator@0.9.4 (Confidence:Highest)

oxc-resolver:11.1.0

Description:

Oxc Resolver Node API

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/oxc-resolver:11.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	Oxc Resolver Node API	Highest
Vendor	package.json	homepage	https://oxc.rs	Highest
Vendor	package.json	name	oxc-resolver	Highest
Vendor	package.json	name	oxc-resolver_project	Highest
Product	package.json	name	oxc-resolver	Highest
Version	package.json	version	11.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/oxc-resolver@11.1.0 (Confidence:Highest)

p-limit:3.1.0

Description:

Run multiple promise-returning & async functions with limited concurrency

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/p-limit:3.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/p-locate:5.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Run multiple promise-returning & async functions with limited concurrency	Highest
Vendor	package.json	name	p-limit	Highest
Vendor	package.json	name	p-limit_project	Highest
Product	package.json	name	p-limit	Highest
Version	package.json	version	3.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/p-limit@3.1.0 (Confidence:Highest)

p-locate:5.0.0

Description:

Get the first fulfilled promise that satisfies the provided testing function

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/p-locate:5.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/locate-path:6.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package-lock.json	name	p-locate	Highest
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Get the first fulfilled promise that satisfies the provided testing function	Highest
Vendor	package.json	name	p-locate	Highest
Vendor	package.json	name	p-locate_project	Highest
Product	package-lock.json	name	p-locate	Highest
Product	package.json	name	p-locate	Highest
Version	package.json	version	5.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/p-locate@5.0.0 (Confidence:Highest)

parent-module:1.0.1

Description:

Get the path of the parent module

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/parent-module:1.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/import-fresh:3.3.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Get the path of the parent module	Highest
Vendor	package.json	name	parent-module	Highest
Vendor	package.json	name	parent-module_project	Highest
Product	package.json	name	parent-module	Highest
Version	package.json	version	1.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/parent-module@1.0.1 (Confidence:Highest)

parents:1.0.1

Description:

return all the parent directories for a directory

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/parents:1.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/find-package:1.0.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	mail@substack.net	Highest
Vendor	package.json	author.name	James Halliday	Highest
Vendor	package.json	author.url	http://substack.net	Highest
Vendor	package.json	description	return all the parent directories for a directory	Highest
Vendor	package.json	homepage	https://github.com/substack/node-parents	Highest
Vendor	package.json	name	parents	Highest
Vendor	package.json	name	parents_project	Highest
Product	package.json	name	parents	Highest
Version	package.json	version	1.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/parents@1.0.1 (Confidence:Highest)

path-exists:4.0.0

Description:

Check if a path exists

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/path-exists:4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/find-up:5.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Check if a path exists	Highest
Vendor	package.json	name	path-exists	Highest
Vendor	package.json	name	path-exists_project	Highest
Product	package.json	name	path-exists	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/path-exists@4.0.0 (Confidence:Highest)

path-key:3.1.1

Description:

Get the PATH environment variable key cross-platform

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/path-key:3.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/cross-spawn:7.0.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Get the PATH environment variable key cross-platform	Highest
Vendor	package.json	name	path-key	Highest
Vendor	package.json	name	path-key_project	Highest
Product	package.json	name	path-key	Highest
Version	package.json	version	3.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/path-key@3.1.1 (Confidence:Highest)

path-platform:0.11.15

Description:

Provide access to win32 and posix path operations; sourced directly from upstream Node.js

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/path-platform:0.11.15

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/parents:1.0.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Timothy J Fontaine <tjfontaine@gmail.com> (http://atxconsulting.com)	Highest
Vendor	package.json	bugs.url	http://github.com/tjfontaine/node-path-platform/issues	Highest
Vendor	package.json	description	Provide access to win32 and posix path operations; sourced directly from upstream Node.js	Highest
Vendor	package.json	homepage	http://github.com/tjfontaine/node-path-platform	Highest
Vendor	package.json	name	path-platform	Highest
Vendor	package.json	name	path-platform_project	Highest
Product	package.json	name	path-platform	Highest
Version	package.json	version	0.11.15	Highest

Related Dependencies

Identifiers

pkg:npm/path-platform@0.11.15 (Confidence:Highest)

pend:1.2.0

Description:

dead-simple optimistic async helper

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/pend:1.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/fd-slicer:1.1.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Andrew Kelley <superjoe30@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/andrewrk/node-pend/issues	Highest
Vendor	package.json	description	dead-simple optimistic async helper	Highest
Vendor	package.json	name	pend	Highest
Vendor	package.json	name	pend_project	Highest
Product	package.json	name	pend	Highest
Version	package.json	version	1.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/pend@1.2.0 (Confidence:Highest)

picocolors:1.1.1

Description:

The tiniest and the fastest library for terminal output formatting with ANSI colors

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/picocolors:1.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Alexey Raspopov	Highest
Vendor	package.json	description	The tiniest and the fastest library for terminal output formatting with ANSI colors	Highest
Vendor	package.json	name	picocolors	Highest
Vendor	package.json	name	picocolors_project	Highest
Product	package.json	name	picocolors	Highest
Version	package.json	version	1.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/picocolors@1.1.1 (Confidence:Highest)

picomatch:2.3.1

Description:

Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/picomatch:2.3.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/micromatch:4.0.8
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/picomatch/issues	Highest
Vendor	package.json	description	Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/picomatch	Highest
Vendor	package.json	name	picomatch	Highest
Vendor	package.json	name	picomatch_project	Highest
Product	package.json	name	picomatch	Highest
Version	package.json	version	2.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/picomatch@2.3.1 (Confidence:Highest)

picomatch:4.0.2

Description:

Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/picomatch:4.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/picomatch/issues	Highest
Vendor	package.json	description	Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/picomatch	Highest
Vendor	package.json	name	picomatch	Highest
Vendor	package.json	name	picomatch_project	Highest
Product	package.json	name	picomatch	Highest
Version	package.json	version	4.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/picomatch@4.0.2 (Confidence:Highest)

prelude-ls:1.2.1

Description:

prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?type-check:0.4.0/prelude-ls:^1.2.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/optionator:0.9.4
owasp-dependency-check:0.6.2/type-check:0.4.0
owasp-dependency-check:0.6.2/levn:0.4.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	George Zahariev <z@georgezahariev.com>	Highest
Vendor	package.json	bugs	https://github.com/gkz/prelude-ls/issues	Highest
Vendor	package.json	description	prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.	Highest
Vendor	package.json	homepage	http://preludels.com	Highest
Vendor	package.json	name	prelude-ls	Highest
Vendor	package.json	name	prelude-ls_project	Highest
Product	package.json	name	prelude-ls	Highest
Version	package.json	version	1.2.1	Highest

Related Dependencies

Identifiers

pkg:npm/prelude-ls@1.2.1 (Confidence:Highest)

prettier-linter-helpers:1.0.0

Description:

Utilities to help expose prettier output in linting tools

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/prettier-linter-helpers:1.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint-plugin-prettier:5.4.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/prettier/prettier-linter-helpers/issues	Highest
Vendor	package.json	description	Utilities to help expose prettier output in linting tools	Highest
Vendor	package.json	homepage	https://github.com/prettier/prettier-linter-helpers#readme	Highest
Vendor	package.json	name	prettier-linter-helpers	Highest
Vendor	package.json	name	prettier-linter-helpers_project	Highest
Product	package.json	name	prettier-linter-helpers	Highest
Version	package.json	version	1.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/prettier-linter-helpers@1.0.0 (Confidence:Highest)

prettier:3.5.3

Description:

Prettier is an opinionated code formatter

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/prettier:3.5.3

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	James Long	Highest
Vendor	package.json	description	Prettier is an opinionated code formatter	Highest
Vendor	package.json	homepage	https://prettier.io	Highest
Vendor	package.json	name	prettier	Highest
Vendor	package.json	name	prettier_project	Highest
Product	package.json	name	prettier	Highest
Version	package.json	version	3.5.3	Highest

Identifiers

pkg:npm/prettier@3.5.3 (Confidence:Highest)

pump:3.0.0

Description:

pipe streams together and close all of them if one of them closes

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/pump:3.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/get-stream:5.2.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Mathias Buus Madsen <mathiasbuus@gmail.com>	Highest
Vendor	package.json	description	pipe streams together and close all of them if one of them closes	Highest
Vendor	package.json	name	pump	Highest
Vendor	package.json	name	pump_project	Highest
Product	package.json	name	pump	Highest
Version	package.json	version	3.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/pump@3.0.0 (Confidence:Highest)

punycode:2.3.1

Description:

A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?uri-js:4.4.1/punycode:^2.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/uri-js:4.4.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.name	Mathias Bynens	Highest
Vendor	package.json	author.url	https://mathiasbynens.be/	Highest
Vendor	package.json	bugs	https://github.com/mathiasbynens/punycode.js/issues	Highest
Vendor	package.json	description	A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.	Highest
Vendor	package.json	homepage	https://mths.be/punycode	Highest
Vendor	package.json	name	punycode	Highest
Vendor	package.json	name	punycode_project	Highest
Product	package.json	name	punycode	Highest
Version	package.json	version	2.3.1	Highest

Related Dependencies

Identifiers

pkg:npm/punycode@2.3.1 (Confidence:Highest)

purify-ts:2.1.0

Description:

Functional programming standard library for TypeScript

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/purify-ts:2.1.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	gigobyte <s.iliev3@gmail.com>	Highest
Vendor	package.json	description	Functional programming standard library for TypeScript	Highest
Vendor	package.json	name	purify-ts	Highest
Vendor	package.json	name	purify-ts_project	Highest
Product	package.json	name	purify-ts	Highest
Version	package.json	version	2.1.0	Highest

Identifiers

pkg:npm/purify-ts@2.1.0 (Confidence:Highest)

queue-microtask:1.2.3

Description:

fast, tiny `queueMicrotask` shim for modern engines

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?run-parallel:1.2.0/queue-microtask:^1.2.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/run-parallel:1.2.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	feross@feross.org	Highest
Vendor	package.json	author.name	Feross Aboukhadijeh	Highest
Vendor	package.json	author.url	https://feross.org	Highest
Vendor	package.json	bugs.url	https://github.com/feross/queue-microtask/issues	Highest
Vendor	package.json	description	fast, tiny `queueMicrotask` shim for modern engines	Highest
Vendor	package.json	homepage	https://github.com/feross/queue-microtask	Highest
Vendor	package.json	name	queue-microtask	Highest
Vendor	package.json	name	queue-microtask_project	Highest
Product	package.json	name	queue-microtask	Highest
Version	package.json	version	1.2.3	Highest

Related Dependencies

Identifiers

pkg:npm/queue-microtask@1.2.3 (Confidence:Highest)

resolve-from:4.0.0

Description:

Resolve the path of a module like `require.resolve()` but from a given path

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/resolve-from:4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/import-fresh:3.3.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Resolve the path of a module like `require.resolve()` but from a given path	Highest
Vendor	package.json	name	resolve-from	Highest
Vendor	package.json	name	resolve-from_project	Highest
Product	package.json	name	resolve-from	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/resolve-from@4.0.0 (Confidence:Highest)

reusify:1.1.0

Description:

Reuse objects and functions with style

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/reusify:1.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/fastq:1.19.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Matteo Collina <hello@matteocollina.com>	Highest
Vendor	package.json	bugs.url	https://github.com/mcollina/reusify/issues	Highest
Vendor	package.json	description	Reuse objects and functions with style	Highest
Vendor	package.json	homepage	https://github.com/mcollina/reusify#readme	Highest
Vendor	package.json	name	reusify	Highest
Vendor	package.json	name	reusify_project	Highest
Product	package.json	name	reusify	Highest
Version	package.json	version	1.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/reusify@1.1.0 (Confidence:Highest)

run-parallel:1.2.0

Description:

Run an array of functions in parallel

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/run-parallel:1.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@nodelib/fs.scandir:2.1.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	feross@feross.org	Highest
Vendor	package.json	author.name	Feross Aboukhadijeh	Highest
Vendor	package.json	author.url	https://feross.org	Highest
Vendor	package.json	bugs.url	https://github.com/feross/run-parallel/issues	Highest
Vendor	package.json	description	Run an array of functions in parallel	Highest
Vendor	package.json	homepage	https://github.com/feross/run-parallel	Highest
Vendor	package.json	name	run-parallel	Highest
Vendor	package.json	name	run-parallel_project	Highest
Product	package.json	name	run-parallel	Highest
Version	package.json	version	1.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/run-parallel@1.2.0 (Confidence:Highest)

semver:7.7.2

Description:

The semantic version parser used by npm.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/semver:7.7.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	GitHub Inc.	Highest
Vendor	package.json	description	The semantic version parser used by npm.	Highest
Vendor	package.json	name	semver	Highest
Vendor	package.json	name	semver_project	Highest
Product	package.json	name	semver	Highest
Version	package.json	version	7.7.2	Highest

Related Dependencies

Identifiers

pkg:npm/semver@7.7.2 (Confidence:Highest)

shebang-command:2.0.0

Description:

Get the command from a shebang

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/shebang-command:2.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/cross-spawn:7.0.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	kevinmartensson@gmail.com	Highest
Vendor	package.json	author.name	Kevin Mårtensson	Highest
Vendor	package.json	author.url	github.com/kevva	Highest
Vendor	package.json	description	Get the command from a shebang	Highest
Vendor	package.json	name	shebang-command	Highest
Vendor	package.json	name	shebang-command_project	Highest
Product	package.json	name	shebang-command	Highest
Version	package.json	version	2.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/shebang-command@2.0.0 (Confidence:Highest)

shebang-regex:3.0.0

Description:

Regular expression for matching a shebang line

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/shebang-regex:3.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/shebang-command:2.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Regular expression for matching a shebang line	Highest
Vendor	package.json	name	shebang-regex	Highest
Vendor	package.json	name	shebang-regex_project	Highest
Product	package.json	name	shebang-regex	Highest
Version	package.json	version	3.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/shebang-regex@3.0.0 (Confidence:Highest)

sinon:20.0.0

Description:

JavaScript test spies, stubs and mocks.

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/sinon:20.0.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Christian Johansen	Highest
Vendor	package.json	bugs.url	http://github.com/sinonjs/sinon/issues	Highest
Vendor	package.json	description	JavaScript test spies, stubs and mocks.	Highest
Vendor	package.json	homepage	https://sinonjs.org/	Highest
Vendor	package.json	name	sinon	Highest
Vendor	package.json	name	sinon_project	Highest
Product	package.json	name	sinon	Highest
Version	package.json	version	20.0.0	Highest

Identifiers

pkg:npm/sinon@20.0.0 (Confidence:Highest)

smol-toml:1.3.4

Description:

A small, fast, and correct TOML parser/serializer

License:

BSD-3-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/smol-toml:1.3.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Cynthia <cyyynthia@borkenware.com>	Highest
Vendor	package.json	bugs	https://github.com/squirrelchat/smol-toml/issues	Highest
Vendor	package.json	description	A small, fast, and correct TOML parser/serializer	Highest
Vendor	package.json	name	smol-toml	Highest
Vendor	package.json	name	smol-toml_project	Highest
Product	package.json	name	smol-toml	Highest
Version	package.json	version	1.3.4	Highest

Related Dependencies

Identifiers

pkg:npm/smol-toml@1.3.4 (Confidence:Highest)

strip-json-comments:3.1.1

Description:

Strip comments from JSON. Lets you use comments in your JSON files!

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/strip-json-comments:3.1.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@eslint/eslintrc:3.3.1

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Strip comments from JSON. Lets you use comments in your JSON files!	Highest
Vendor	package.json	name	strip-json-comments	Highest
Vendor	package.json	name	strip-json-comments_project	Highest
Product	package.json	name	strip-json-comments	Highest
Version	package.json	version	3.1.1	Highest

Related Dependencies

Identifiers

pkg:npm/strip-json-comments@3.1.1 (Confidence:Highest)

strip-json-comments:5.0.2

Description:

Strip comments from JSON. Lets you use comments in your JSON files!

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/strip-json-comments:5.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Strip comments from JSON. Lets you use comments in your JSON files!	Highest
Vendor	package.json	name	strip-json-comments	Highest
Vendor	package.json	name	strip-json-comments_project	Highest
Product	package.json	name	strip-json-comments	Highest
Version	package.json	version	5.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/strip-json-comments@5.0.2 (Confidence:Highest)

supports-color:7.2.0

Description:

Detect whether a terminal supports color

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/supports-color:7.2.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/sinon:20.0.0
owasp-dependency-check:0.6.2/chalk:4.1.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	sindresorhus.com	Highest
Vendor	package.json	description	Detect whether a terminal supports color	Highest
Vendor	package.json	name	supports-color	Highest
Vendor	package.json	name	supports-color_project	Highest
Product	package.json	name	supports-color	Highest
Version	package.json	version	7.2.0	Highest

Related Dependencies

Identifiers

pkg:npm/supports-color@7.2.0 (Confidence:Highest)

synckit:0.11.8

Description:

Perform async work synchronously in Node.js using `worker_threads` with first-class TypeScript support.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/synckit:0.11.8

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/eslint-plugin-prettier:5.4.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	JounQin <admin@1stg.me> (https://www.1stG.me)	Highest
Vendor	package.json	description	Perform async work synchronously in Node.js using `worker_threads` with first-class TypeScript support.	Highest
Vendor	package.json	name	synckit	Highest
Vendor	package.json	name	synckit_project	Highest
Product	package.json	name	synckit	Highest
Version	package.json	version	0.11.8	Highest

Related Dependencies

Identifiers

pkg:npm/synckit@0.11.8 (Confidence:Highest)

to-regex-range:5.0.1

Description:

Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/to-regex-range:5.0.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/fill-range:7.1.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/micromatch/to-regex-range/issues	Highest
Vendor	package.json	description	Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.	Highest
Vendor	package.json	homepage	https://github.com/micromatch/to-regex-range	Highest
Vendor	package.json	name	to-regex-range	Highest
Vendor	package.json	name	to-regex-range_project	Highest
Product	package.json	name	to-regex-range	Highest
Version	package.json	version	5.0.1	Highest

Related Dependencies

Identifiers

pkg:npm/to-regex-range@5.0.1 (Confidence:Highest)

ts-api-utils:2.1.0

Description:

Utility functions for working with TypeScript's API. Successor to the wonderful tsutils. 🛠️️

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/ts-api-utils:2.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@typescript-eslint/typescript-estree:8.34.0
owasp-dependency-check:0.6.2/@typescript-eslint/eslint-plugin:8.34.0
owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/@typescript-eslint/type-utils:8.34.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	npm@joshuakgoldberg.com	Highest
Vendor	package.json	author.name	JoshuaKGoldberg	Highest
Vendor	package.json	description	Utility functions for working with TypeScript's API. Successor to the wonderful tsutils. 🛠️️	Highest
Vendor	package.json	name	ts-api-utils	Highest
Vendor	package.json	name	ts-api-utils_project	Highest
Product	package.json	name	ts-api-utils	Highest
Version	package.json	version	2.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/ts-api-utils@2.1.0 (Confidence:Highest)

type-check:0.4.0

Description:

type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/type-check:0.4.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/optionator:0.9.4
owasp-dependency-check:0.6.2/levn:0.4.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	George Zahariev <z@georgezahariev.com>	Highest
Vendor	package.json	bugs	https://github.com/gkz/type-check/issues	Highest
Vendor	package.json	description	type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.	Highest
Vendor	package.json	homepage	https://github.com/gkz/type-check	Highest
Vendor	package.json	name	type-check	Highest
Vendor	package.json	name	type-check_project	Highest
Product	package.json	name	type-check	Highest
Version	package.json	version	0.4.0	Highest

Related Dependencies

Identifiers

pkg:npm/type-check@0.4.0 (Confidence:Highest)

type-detect:4.0.8

Description:

Improved typeof detection for node.js and the browser.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/type-detect:4.0.8

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@sinonjs/commons:3.0.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jake Luer <jake@alogicalparadox.com> (http://alogicalparadox.com)	Highest
Vendor	package.json	description	Improved typeof detection for node.js and the browser.	Highest
Vendor	package.json	name	type-detect	Highest
Vendor	package.json	name	type-detect_project	Highest
Product	package.json	name	type-detect	Highest
Version	package.json	version	4.0.8	Highest

Related Dependencies

Identifiers

pkg:npm/type-detect@4.0.8 (Confidence:Highest)

type-detect:4.1.0

Description:

Improved typeof detection for node.js and the browser.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/type-detect:4.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@sinonjs/samsam:8.0.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jake Luer <jake@alogicalparadox.com> (http://alogicalparadox.com)	Highest
Vendor	package.json	description	Improved typeof detection for node.js and the browser.	Highest
Vendor	package.json	name	type-detect	Highest
Vendor	package.json	name	type-detect_project	Highest
Product	package.json	name	type-detect	Highest
Version	package.json	version	4.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/type-detect@4.1.0 (Confidence:Highest)

typescript-eslint:8.34.0

Description:

Tooling which enables you to use TypeScript with ESLint

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/typescript-eslint:8.34.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/typescript-eslint/typescript-eslint/issues	Highest
Vendor	package.json	description	Tooling which enables you to use TypeScript with ESLint	Highest
Vendor	package.json	homepage	https://typescript-eslint.io/packages/typescript-eslint	Highest
Vendor	package.json	name	typescript-eslint	Highest
Vendor	package.json	name	typescript-eslint_project	Highest
Product	package.json	name	typescript-eslint	Highest
Version	package.json	version	8.34.0	Highest

Identifiers

pkg:npm/typescript-eslint@8.34.0 (Confidence:Highest)

typescript:5.8.3

Description:

TypeScript is a language for application scale JavaScript development

License:

Apache-2.0

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/typescript:5.8.3

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Microsoft Corp.	Highest
Vendor	package.json	bugs.url	https://github.com/microsoft/TypeScript/issues	Highest
Vendor	package.json	description	TypeScript is a language for application scale JavaScript development	Highest
Vendor	package.json	homepage	https://www.typescriptlang.org/	Highest
Vendor	package.json	name	typescript	Highest
Vendor	package.json	name	typescript_project	Highest
Product	package.json	name	typescript	Highest
Version	package.json	version	5.8.3	Highest

Identifiers

pkg:npm/typescript@5.8.3 (Confidence:Highest)
cpe:2.3:a:microsoft:typescript:5.8.3:*:*:*:*:*:*:* (Confidence:Highest)

undici-types:7.8.0

Description:

A stand-alone types package for Undici

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/undici-types:7.8.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/@types/node:24.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/nodejs/undici/issues	Highest
Vendor	package.json	description	A stand-alone types package for Undici	Highest
Vendor	package.json	homepage	https://undici.nodejs.org	Highest
Vendor	package.json	name	undici-types	Highest
Vendor	package.json	name	undici-types_project	Highest
Product	package.json	name	undici-types	Highest
Version	package.json	version	7.8.0	Highest

Related Dependencies

Identifiers

pkg:npm/undici-types@7.8.0 (Confidence:Highest)

undici:7.10.0

Description:

An HTTP/1.1 client, written from scratch for Node.js

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/undici:7.10.0

Referenced In Project/Scope: owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	bugs.url	https://github.com/nodejs/undici/issues	Highest
Vendor	package.json	description	An HTTP/1.1 client, written from scratch for Node.js	Highest
Vendor	package.json	homepage	https://undici.nodejs.org	Highest
Vendor	package.json	name	undici	Highest
Vendor	package.json	name	undici_project	Highest
Product	package.json	name	undici	Highest
Version	package.json	version	7.10.0	Highest

Identifiers

pkg:npm/undici@7.10.0 (Confidence:Highest)
cpe:2.3:a:nodejs:undici:7.10.0:*:*:*:*:*:*:* (Confidence:Highest)

uri-js:4.4.1

Description:

An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.

License:

BSD-2-Clause

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/uri-js:4.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/ajv:6.12.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Gary Court <gary.court@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/garycourt/uri-js/issues	Highest
Vendor	package.json	description	An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.	Highest
Vendor	package.json	homepage	https://github.com/garycourt/uri-js	Highest
Vendor	package.json	name	uri-js	Highest
Vendor	package.json	name	uri-js_project	Highest
Product	package.json	name	uri-js	Highest
Version	package.json	version	4.4.1	Highest

Related Dependencies

Identifiers

pkg:npm/uri-js@4.4.1 (Confidence:Highest)
cpe:2.3:a:garycourt:uri-js:4.4.1:*:*:*:*:*:*:* (Confidence:Highest)
cpe:2.3:a:uri.js_project:uri.js:4.4.1:*:*:*:*:*:*:* (Confidence:Highest)

walk-up-path:4.0.0

Description:

Given a path string, return a generator that walks up the path, emitting each dirname.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/walk-up-path:4.0.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/fd-package-json:2.0.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (https://izs.me)	Highest
Vendor	package.json	description	Given a path string, return a generator that walks up the path, emitting each dirname.	Highest
Vendor	package.json	name	walk-up-path	Highest
Vendor	package.json	name	walk-up-path_project	Highest
Product	package.json	name	walk-up-path	Highest
Version	package.json	version	4.0.0	Highest

Related Dependencies

Identifiers

pkg:npm/walk-up-path@4.0.0 (Confidence:Highest)

which:2.0.2

Description:

Like which(1) unix command. Find the first instance of an executable in the PATH.

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/which:2.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/cross-spawn:7.0.6

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)	Highest
Vendor	package.json	description	Like which(1) unix command. Find the first instance of an executable in the PATH.	Highest
Vendor	package.json	name	which	Highest
Vendor	package.json	name	which_project	Highest
Product	package.json	name	which	Highest
Version	package.json	version	2.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/which@2.0.2 (Confidence:Highest)

word-wrap:1.2.5

Description:

Wrap words to a specified length.

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/word-wrap:1.2.5

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/optionator:0.9.4
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Jon Schlinkert (https://github.com/jonschlinkert)	Highest
Vendor	package.json	bugs.url	https://github.com/jonschlinkert/word-wrap/issues	Highest
Vendor	package.json	description	Wrap words to a specified length.	Highest
Vendor	package.json	homepage	https://github.com/jonschlinkert/word-wrap	Highest
Vendor	package.json	name	word-wrap	Highest
Vendor	package.json	name	word-wrap_project	Highest
Product	package.json	name	word-wrap	Highest
Version	package.json	version	1.2.5	Highest

Related Dependencies

Identifiers

pkg:npm/word-wrap@1.2.5 (Confidence:Highest)
cpe:2.3:a:word-wrap_project:word-wrap:1.2.5:*:*:*:*:*:*:* (Confidence:Highest)

wrappy:1.0.2

Description:

Callback wrapping utility

License:

ISC

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/wrappy:1.0.2

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/once:1.4.0
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)	Highest
Vendor	package.json	bugs.url	https://github.com/npm/wrappy/issues	Highest
Vendor	package.json	description	Callback wrapping utility	Highest
Vendor	package.json	homepage	https://github.com/npm/wrappy	Highest
Vendor	package.json	name	wrappy	Highest
Vendor	package.json	name	wrappy_project	Highest
Product	package.json	name	wrappy	Highest
Version	package.json	version	1.0.2	Highest

Related Dependencies

Identifiers

pkg:npm/wrappy@1.0.2 (Confidence:Highest)

yauzl:2.10.0

Description:

yet another unzip library for node

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/yauzl:2.10.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/extract-zip:2.0.1
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Josh Wolfe <thejoshwolfe@gmail.com>	Highest
Vendor	package.json	bugs.url	https://github.com/thejoshwolfe/yauzl/issues	Highest
Vendor	package.json	description	yet another unzip library for node	Highest
Vendor	package.json	homepage	https://github.com/thejoshwolfe/yauzl	Highest
Vendor	package.json	name	yauzl	Highest
Vendor	package.json	name	yauzl_project	Highest
Product	package.json	name	yauzl	Highest
Version	package.json	version	2.10.0	Highest

Related Dependencies

Identifiers

pkg:npm/yauzl@2.10.0 (Confidence:Highest)

yocto-queue:0.1.0

Description:

Tiny queue data structure

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/yocto-queue:0.1.0

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2
owasp-dependency-check:0.6.2/p-limit:3.1.0

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	sindresorhus@gmail.com	Highest
Vendor	package.json	author.name	Sindre Sorhus	Highest
Vendor	package.json	author.url	https://sindresorhus.com	Highest
Vendor	package.json	description	Tiny queue data structure	Highest
Vendor	package.json	name	yocto-queue	Highest
Vendor	package.json	name	yocto-queue_project	Highest
Product	package.json	name	yocto-queue	Highest
Version	package.json	version	0.1.0	Highest

Related Dependencies

Identifiers

pkg:npm/yocto-queue@0.1.0 (Confidence:Highest)

zod-validation-error:3.4.1

Description:

Wrap zod validation errors in user-friendly readable messages

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/zod-validation-error:3.4.1

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author.email	dimitris@jmike.gr	Highest
Vendor	package.json	author.name	Dimitrios C. Michalakos	Highest
Vendor	package.json	author.url	https://github.com/jmike	Highest
Vendor	package.json	description	Wrap zod validation errors in user-friendly readable messages	Highest
Vendor	package.json	name	zod-validation-error	Highest
Vendor	package.json	name	zod-validation-error_project	Highest
Product	package.json	name	zod-validation-error	Highest
Version	package.json	version	3.4.1	Highest

Related Dependencies

Identifiers

pkg:npm/zod-validation-error@3.4.1 (Confidence:Highest)

zod:3.24.4

Description:

TypeScript-first schema declaration and validation library with static type inference

License:

MIT

File Path: /home/runner/work/owasp-dependency-check/owasp-dependency-check/package-lock.json?/zod:3.24.4

Referenced In Projects/Scopes:

owasp-dependency-check:0.6.2/knip:5.60.2
owasp-dependency-check:0.6.2

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Colin McDonnell <colin@colinhacks.com>	Highest
Vendor	package.json	bugs.url	https://github.com/colinhacks/zod/issues	Highest
Vendor	package.json	description	TypeScript-first schema declaration and validation library with static type inference	Highest
Vendor	package.json	homepage	https://zod.dev	Highest
Vendor	package.json	name	zod	Highest
Vendor	package.json	name	zod_project	Highest
Product	package.json	name	zod	Highest
Version	package.json	version	3.24.4	Highest

Related Dependencies

Identifiers

pkg:npm/zod@3.24.4 (Confidence:Highest)
cpe:2.3:a:zod:zod:3.24.4:*:*:*:*:*:*:* (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues Sponsor

Project: owasp-dependency-check

Summary

Dependencies (vulnerable)

@colors/colors:1.6.0

Evidence

Identifiers

@commander-js/extra-typings:13.1.0

Evidence

Identifiers

@eslint-community/eslint-utils:4.7.0

Evidence

Related Dependencies

Identifiers

@eslint-community/regexpp:4.12.1

Evidence

Related Dependencies

Identifiers

@eslint/config-array:0.20.0

Evidence

Related Dependencies

Identifiers

@eslint/config-helpers:0.2.2

Evidence

Related Dependencies

Identifiers

@eslint/core:0.14.0

Evidence

Related Dependencies

Identifiers

@eslint/eslintrc:3.3.1

Evidence

Related Dependencies

Identifiers

@eslint/js:9.28.0

Evidence

Related Dependencies

Identifiers

@eslint/object-schema:2.1.6

Evidence

Related Dependencies

Identifiers

@eslint/plugin-kit:0.3.1

Evidence

Related Dependencies

Identifiers

@humanfs/core:0.19.1

Evidence

Related Dependencies

Identifiers

@humanfs/node:0.16.6

Evidence

Related Dependencies

Identifiers

@humanwhocodes/module-importer:1.0.1

Evidence

Related Dependencies

Identifiers

@humanwhocodes/retry:0.3.1

Evidence

Related Dependencies

Identifiers

@humanwhocodes/retry:0.4.2

Evidence

Related Dependencies

Identifiers

@nodelib/fs.scandir:2.1.5

Evidence

Related Dependencies

Identifiers

@nodelib/fs.stat:2.0.5

Evidence

Related Dependencies

Identifiers

@nodelib/fs.walk:1.2.8

Evidence

Related Dependencies

Identifiers

@oxc-resolver/binding-linux-x64-gnu:11.1.0

Evidence

How to read the report | Suppressing false positives | Getting Help: github issues

Sponsor