ESL SBOMator

Professional SBOM Analysis & Vulnerability Management

www.eswlab.com | Engineering Software Lab

ESL SBOMator

Project in Report:

MantiQ-Solidity

Report created: 2026-09-20 18:33:31

368

Total Components

4

Vulnerable Components

7

App CVEs

0

Vendored SDK CVEs

1.1%

Components with Known CVEs

0

Ransomware CVEs

Used in ransomware campaigns

0

Weaponized CVEs

Actively exploited in wild

0

No Known Exploitation

CVEs without active exploitation

7

Exploitation Not Assessed

No KEV analysis evidence in this SBOM

🏢 Vendor/Manufacturer Distribution

npm Community

259 components

70.4%

Sindre Sorhus

23 components

6.2%

Unknown

17 components

4.6%

DefinitelyTyped Contributors

9 components

2.4%

Jon Schlinkert

8 components

2.2%

Vulnerability Severity Distribution

1 Critical

2 High

4 Medium

0 Low

0 Unknown

Click any CVE/advisory ID below to view detailed vulnerability information from the source database

SBOM Version and License Quality Gate

Passed. All 368 components have a non-placeholder value or a documented exception.

368
Non-placeholder version values

0
Justified version exceptions

368
Non-placeholder license values

0
Justified license exceptions

No approved version or license exceptions were required.

Component Vulnerability Analysis

CVE result confidence: Results are based on the configured local scanners/databases. For Python AI projects, OSV/PyPA/GHSA advisories may add findings that are not present in NVD-only matching.

CVE analysis coverage (configured sources): 4 matched 364 scanned, no CVE 0 not analyzed 0 not applicable
0 of 368 components (0%) could not be assessed by the configured CVE sources (for example: no concrete version, no queryable package identity, or an excluded system component), so their absence of CVEs is not evidence they are unaffected. Only the 364 "scanned, no CVE" components were queried and returned no version-applicable advisory. See each component's esl:cve_analysis property for its exact status and reason.

Threat-Based Prioritization: Components are sorted by security threat level: RANSOMWARE WEAPONIZED Standard CVEs No CVEs

Component	Version	Type	Vendor	License	CVEs	Score	Severity	Claimed / Computed	Response window	Vulnerabilities (Click CVE IDs)
sha.js Location: \package-lock.json	2.4.11 not_evaluated	library	🏢 npm Community Source: ecosystem	(MIT AND BSD-3-Clause) NPM	1	9.1	Critical	CRITICAL / n/a	Not applicable	sha.js is missing type checks leading to hash rewind and passing on crafted data 1 CVE ⚠️GHSA-95M3-7Q98-8XR5
serialize-javascript Location: \package-lock.json	6.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause NPM	5	8.1	High	HIGH / n/a	Not applicableNot applicableNot applicableNot applicableNot applicable	Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() 1 CVE ⚠️GHSA-5C6J-R48X-RMVQ Insecure serialization leading to RCE in serialize-javascript 1 CVE ⚠️GHSA-HXCC-F52P-WC94 Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects 1 CVE ⚠️GHSA-QJ8W-GFJ5-8C6V Cross-Site Scripting 2 CVEs ⚠️GHSA-76P7-773F-R4Q5 ⚠️GHSA-H9RV-JMMF-4PGX
bn.js Location: \package-lock.json	4.12.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	1	5.3	Medium	MEDIUM / n/a	Not applicable	bn.js affected by an infinite loop 1 CVE ⚠️GHSA-378V-28HJ-76WF
bn.js Location: \package-lock.json	5.2.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	1	5.3	Medium	MEDIUM / n/a	Not applicable	bn.js affected by an infinite loop 1 CVE ⚠️GHSA-378V-28HJ-76WF
@cspotcode/source-map-support Location: \package-lock.json	0.8.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@discoveryjs/json-ext Location: \package-lock.json	0.5.7 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@jridgewell/gen-mapping Location: \package-lock.json	0.3.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@jridgewell/resolve-uri Location: \package-lock.json	3.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@jridgewell/set-array Location: \package-lock.json	1.1.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@jridgewell/source-map Location: \package-lock.json	0.3.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@jridgewell/sourcemap-codec Location: \package-lock.json	1.4.14 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@jridgewell/trace-mapping Location: \package-lock.json	0.3.17 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@jridgewell/trace-mapping Location: \package-lock.json	0.3.9 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@microsoft/api-extractor Location: \package-lock.json	7.20.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@microsoft/api-extractor-model Location: \package-lock.json	7.16.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@microsoft/tsdoc Location: \package-lock.json	0.13.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@microsoft/tsdoc-config Location: \package-lock.json	0.15.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@rushstack/node-core-library Location: \package-lock.json	3.45.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@rushstack/rig-package Location: \package-lock.json	0.3.8 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@rushstack/ts-command-line Location: \package-lock.json	4.10.7 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@tsconfig/node10 Location: \package-lock.json	1.0.9 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@tsconfig/node12 Location: \package-lock.json	1.0.11 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@tsconfig/node14 Location: \package-lock.json	1.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@tsconfig/node16 Location: \package-lock.json	1.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/abstract-leveldown Location: \package-lock.json	7.2.0 not_evaluated	library	📦 DefinitelyTyped Contributors Source: curated metadata	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/argparse Location: \package-lock.json	1.0.38 not_evaluated	library	📦 DefinitelyTyped Contributors Source: curated metadata	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/eslint Location: \package-lock.json	8.4.10 not_evaluated	library	📦 OpenJS Foundation Source: known_maintainer	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/eslint-scope Location: \package-lock.json	3.7.4 not_evaluated	library	📦 DefinitelyTyped Contributors	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/estree Location: \package-lock.json	0.0.50 not_evaluated	library	📦 DefinitelyTyped Contributors Source: curated metadata	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/json-schema Location: \package-lock.json	7.0.11 not_evaluated	library	📦 DefinitelyTyped Contributors Source: curated metadata	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/mocha Location: \package-lock.json	9.0.0 not_evaluated	library	📦 DefinitelyTyped Contributors Source: curated metadata	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/node Location: \package-lock.json	12.20.24 not_evaluated	library	📦 DefinitelyTyped Contributors Source: curated metadata	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
@ungap/promise-all-settled Location: \package-lock.json	1.1.2 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/ast Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/floating-point-hex-parser Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/helper-api-error Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/helper-buffer Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/helper-numbers Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/helper-wasm-bytecode Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/helper-wasm-section Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/ieee754 Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/leb128 Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	Apache-2.0	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/utf8 Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/wasm-edit Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/wasm-gen Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/wasm-opt Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/wasm-parser Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webassemblyjs/wast-printer Location: \package-lock.json	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webpack-cli/configtest Location: \package-lock.json	1.2.0 not_evaluated	library	📦 webpack Contributors	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webpack-cli/info Location: \package-lock.json	1.5.0 not_evaluated	library	📦 webpack Contributors	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@webpack-cli/serve Location: \package-lock.json	1.7.0 not_evaluated	library	📦 webpack Contributors	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@xtuc/ieee754 Location: \package-lock.json	1.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause	0	0.0	No CVEs	unknown / n/a	Unknown	None
@xtuc/long Location: \package-lock.json	4.2.2 not_evaluated	library	🏢 npm Community Source: ecosystem	Apache-2.0	0	0.0	No CVEs	unknown / n/a	Unknown	None
acorn Location: \package-lock.json	8.8.1 not_evaluated	library	📦 marijn Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
acorn-import-assertions Location: \package-lock.json	1.8.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
acorn-walk Location: \package-lock.json	8.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ajv Location: \package-lock.json	6.12.6 not_evaluated	library	📦 Evgeny Poberezkin Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ajv-keywords Location: \package-lock.json	3.5.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ansi-colors Location: \package-lock.json	4.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ansi-regex Location: \package-lock.json	5.0.1 not_evaluated malicious_version	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ansi-styles Location: \package-lock.json	4.3.0 not_evaluated malicious_version	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
anymatch Location: \package-lock.json	3.1.3 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
arg Location: \package-lock.json	4.1.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
argparse Location: \package-lock.json	1.0.10 not_evaluated	library	📦 vitaly Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
argparse Location: \package-lock.json	2.0.1 not_evaluated	library	📦 vitaly Source: registry_cache:npm_registry	Python-2.0 NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
asn1.js Location: \package-lock.json	5.4.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
assert Location: \package-lock.json	2.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
available-typed-arrays Location: \package-lock.json	1.0.5 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
balanced-match Location: \package-lock.json	1.0.2 not_evaluated	library	📦 juliangruber Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
big.js Location: \package-lock.json	5.2.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
binary-extensions Location: \package-lock.json	2.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
brace-expansion Location: \package-lock.json	1.1.11 not_evaluated	library	📦 juliangruber Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
braces Location: \package-lock.json	3.0.2 not_evaluated	library	📦 Jon Schlinkert Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
browser-stdout Location: \package-lock.json	1.3.1 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
browserify-aes Location: \package-lock.json	1.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
browserify-cipher Location: \package-lock.json	1.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
browserify-des Location: \package-lock.json	1.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
browserify-rsa Location: \package-lock.json	4.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
browserify-sign Location: \package-lock.json	4.2.1 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
browserslist Location: \package-lock.json	4.21.4 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
buffer-from Location: \package-lock.json	1.1.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
buffer-xor Location: \package-lock.json	1.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
builtin-status-codes Location: \package-lock.json	3.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
call-bind Location: \package-lock.json	1.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
camelcase Location: \package-lock.json	6.3.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
caniuse-lite Location: \package-lock.json	1.0.30001435 not_evaluated	library	🏢 npm Community Source: ecosystem	CC-BY-4.0 NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
chalk Location: \package-lock.json	4.1.2 not_evaluated malicious_version	library	📦 Sindre Sorhus Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
chokidar Location: \package-lock.json	3.5.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
chrome-trace-event Location: \package-lock.json	1.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
cipher-base Location: \package-lock.json	1.0.4 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
cliui Location: \package-lock.json	7.0.4 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
clone-deep Location: \package-lock.json	4.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
color-convert Location: \package-lock.json	2.0.1 not_evaluated malicious_version	library	📦 Josh Junon Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
color-name Location: \package-lock.json	1.1.4 not_evaluated malicious_version	library	📦 Dmitry Iv Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
colorette Location: \package-lock.json	2.0.19 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
colors Location: \package-lock.json	1.2.5 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
commander Location: \package-lock.json	2.20.3 not_evaluated	library	📦 TJ Holowaychuk Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
commander Location: \package-lock.json	7.2.0 not_evaluated	library	📦 TJ Holowaychuk Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
concat-map Location: \package-lock.json	0.0.1 not_evaluated	library	📦 James Halliday Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
create-ecdh Location: \package-lock.json	4.0.4 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
create-hash Location: \package-lock.json	1.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
create-hmac Location: \package-lock.json	1.1.7 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
create-require Location: \package-lock.json	1.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
cross-env Location: \package-lock.json	7.0.3 not_evaluated	library	📦 Kent C. Dodds Source: known_maintainer	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
cross-spawn Location: \package-lock.json	7.0.3 not_evaluated	library	📦 André Cruz Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
crypto-browserify Location: \package-lock.json	3.12.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
debug Location: \package-lock.json	4.3.2 not_evaluated malicious_version	library	📦 TJ Holowaychuk Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
decamelize Location: \package-lock.json	4.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
define-properties Location: \package-lock.json	1.1.4 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
des.js Location: \package-lock.json	1.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
diff Location: \package-lock.json	4.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
diff Location: \package-lock.json	5.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
diffie-hellman Location: \package-lock.json	5.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
electron-to-chromium Location: \package-lock.json	1.4.284 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
emoji-regex Location: \package-lock.json	8.0.0 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
emojis-list Location: \package-lock.json	3.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
enhanced-resolve Location: \package-lock.json	5.12.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
envinfo Location: \package-lock.json	7.8.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
es-module-lexer Location: \package-lock.json	0.9.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
es6-object-assign Location: \package-lock.json	1.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
escalade Location: \package-lock.json	3.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
escape-string-regexp Location: \package-lock.json	4.0.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
eslint-scope Location: \package-lock.json	5.1.1 not_evaluated	library	📦 openjsfoundation Source: registry_cache:npm_registry	BSD-2-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
esrecurse Location: \package-lock.json	4.3.0 not_evaluated	library	📦 constellation Source: registry_cache:npm_registry	BSD-2-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
estraverse Location: \package-lock.json	4.3.0 not_evaluated	library	📦 nzakas Source: registry_cache:npm_registry	BSD-2-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
estraverse Location: \package-lock.json	5.3.0 not_evaluated	library	📦 nzakas Source: registry_cache:npm_registry	BSD-2-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
events Location: \package-lock.json	3.3.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
evp_bytestokey Location: \package-lock.json	1.0.3 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
execa Location: \package-lock.json	5.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
fast-deep-equal Location: \package-lock.json	3.1.3 not_evaluated	library	📦 Evgeny Poberezkin Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
fast-json-stable-stringify Location: \package-lock.json	2.1.0 not_evaluated	library	📦 James Halliday Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
fastest-levenshtein Location: \package-lock.json	1.0.16 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
fill-range Location: \package-lock.json	7.0.1 not_evaluated	library	📦 Jon Schlinkert Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
find-up Location: \package-lock.json	4.1.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
find-up Location: \package-lock.json	5.0.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
flat Location: \package-lock.json	5.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
for-each Location: \package-lock.json	0.3.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
fs-extra Location: \package-lock.json	7.0.1 not_evaluated	library	📦 JP Richardson Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
fs.realpath Location: \package-lock.json	1.0.0 not_evaluated	library	📦 Isaac Z. Schlueter Source: registry_cache:npm_registry	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
fsevents Location: \package-lock.json	2.3.2 not_evaluated malicious_version	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
function-bind Location: \package-lock.json	1.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
get-caller-file Location: \package-lock.json	2.0.5 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
get-intrinsic Location: \package-lock.json	1.1.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
get-stream Location: \package-lock.json	6.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
glob Location: \package-lock.json	7.1.7 not_evaluated	library	📦 Isaac Z. Schlueter Source: known_maintainer	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
glob-parent Location: \package-lock.json	5.1.2 not_evaluated	library	📦 Gulp Team Source: registry_cache:npm_registry	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
glob-to-regexp Location: \package-lock.json	0.4.1 not_evaluated	library	🏢 Unknown	BSD-2-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
gopd Location: \package-lock.json	1.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
graceful-fs Location: \package-lock.json	4.2.10 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
growl Location: \package-lock.json	1.10.5 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
has Location: \package-lock.json	1.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
has-flag Location: \package-lock.json	4.0.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
has-property-descriptors Location: \package-lock.json	1.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
has-symbols Location: \package-lock.json	1.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
has-tostringtag Location: \package-lock.json	1.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
hash-base Location: \package-lock.json	3.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
he Location: \package-lock.json	1.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
https-browserify Location: \package-lock.json	1.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
human-signals Location: \package-lock.json	2.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	Apache-2.0 NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
import-lazy Location: \package-lock.json	4.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
import-local Location: \package-lock.json	3.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
inflight Location: \package-lock.json	1.0.6 not_evaluated	library	📦 Isaac Z. Schlueter Source: registry_cache:npm_registry	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
interpret Location: \package-lock.json	1.4.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
interpret Location: \package-lock.json	2.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-arguments Location: \package-lock.json	1.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-binary-path Location: \package-lock.json	2.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-callable Location: \package-lock.json	1.2.7 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-core-module Location: \package-lock.json	2.11.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-extglob Location: \package-lock.json	2.1.1 not_evaluated	library	📦 Jon Schlinkert Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-fullwidth-code-point Location: \package-lock.json	3.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-generator-function Location: \package-lock.json	1.0.10 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-glob Location: \package-lock.json	4.0.3 not_evaluated	library	📦 Jon Schlinkert Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-nan Location: \package-lock.json	1.3.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-number Location: \package-lock.json	7.0.0 not_evaluated	library	📦 Jon Schlinkert Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-plain-obj Location: \package-lock.json	2.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-plain-object Location: \package-lock.json	2.0.4 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-stream Location: \package-lock.json	2.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-typed-array Location: \package-lock.json	1.1.10 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-unicode-supported Location: \package-lock.json	0.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
isexe Location: \package-lock.json	2.0.0 not_evaluated	library	📦 Isaac Z. Schlueter Source: registry_cache:npm_registry	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
isobject Location: \package-lock.json	3.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
jest-worker Location: \package-lock.json	27.5.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
jju Location: \package-lock.json	1.4.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
js-yaml Location: \package-lock.json	4.1.0 not_evaluated	library	📦 Vladimir Zapparov Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
json-parse-better-errors Location: \package-lock.json	1.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
json-schema-traverse Location: \package-lock.json	0.4.1 not_evaluated	library	📦 Evgeny Poberezkin Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
json5 Location: \package-lock.json	2.2.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
jsonfile Location: \package-lock.json	4.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
kind-of Location: \package-lock.json	6.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
level-js Location: \package-lock.json	6.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
loader-runner Location: \package-lock.json	4.3.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
loader-utils Location: \package-lock.json	2.0.4 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
locate-path Location: \package-lock.json	5.0.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
locate-path Location: \package-lock.json	6.0.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
lodash.get Location: \package-lock.json	4.4.2 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
lodash.isequal Location: \package-lock.json	4.5.0 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
log-symbols Location: \package-lock.json	4.1.0 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
lru-cache Location: \package-lock.json	6.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ltgt Location: \package-lock.json	2.2.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
make-error Location: \package-lock.json	1.3.6 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
mcl-wasm Location: \package-lock.json	0.9.0 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause	0	0.0	No CVEs	unknown / n/a	Unknown	None
md5.js Location: \package-lock.json	1.3.5 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
merge-stream Location: \package-lock.json	2.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
micromatch Location: \package-lock.json	4.0.5 not_evaluated	library	📦 Jon Schlinkert Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
miller-rabin Location: \package-lock.json	4.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
mime-db Location: \package-lock.json	1.52.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
mime-types Location: \package-lock.json	2.1.35 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
mimic-fn Location: \package-lock.json	2.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
minimatch Location: \package-lock.json	3.0.4 not_evaluated	library	📦 Isaac Z. Schlueter Source: known_maintainer	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
minimist Location: \package-lock.json	1.2.7 not_evaluated	library	📦 James Halliday Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
mocha Location: \package-lock.json	9.1.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ms Location: \package-lock.json	2.1.2 not_evaluated	library	📦 matheuss Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ms Location: \package-lock.json	2.1.3 not_evaluated	library	📦 matheuss Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
nanoid Location: \package-lock.json	3.1.25 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
neo-async Location: \package-lock.json	2.6.2 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
node-loader Location: \package-lock.json	1.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
node-releases Location: \package-lock.json	2.0.6 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
normalize-path Location: \package-lock.json	3.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
npm-run-path Location: \package-lock.json	4.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
object-is Location: \package-lock.json	1.1.5 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
object-keys Location: \package-lock.json	1.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
once Location: \package-lock.json	1.4.0 not_evaluated	library	📦 Isaac Z. Schlueter Source: registry_cache:npm_registry	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
onetime Location: \package-lock.json	5.1.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
os-browserify Location: \package-lock.json	0.3.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
p-limit Location: \package-lock.json	2.3.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
p-limit Location: \package-lock.json	3.1.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
p-locate Location: \package-lock.json	4.1.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
p-locate Location: \package-lock.json	5.0.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
p-try Location: \package-lock.json	2.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
parse-asn1 Location: \package-lock.json	5.1.6 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
path-browserify Location: \package-lock.json	1.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
path-exists Location: \package-lock.json	4.0.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
path-is-absolute Location: \package-lock.json	1.0.1 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
path-key Location: \package-lock.json	3.1.1 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
path-parse Location: \package-lock.json	1.0.7 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
pbkdf2 Location: \package-lock.json	3.1.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
picocolors Location: \package-lock.json	1.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
picomatch Location: \package-lock.json	2.3.1 not_evaluated	library	📦 Jon Schlinkert Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
pkg-dir Location: \package-lock.json	4.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
process Location: \package-lock.json	0.11.10 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
public-encrypt Location: \package-lock.json	4.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
punycode Location: \package-lock.json	2.1.1 not_evaluated	library	📦 Mathias Bynens Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
randombytes Location: \package-lock.json	2.1.0 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
randomfill Location: \package-lock.json	1.0.4 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
readdirp Location: \package-lock.json	3.6.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
rechoir Location: \package-lock.json	0.6.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
rechoir Location: \package-lock.json	0.7.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
require-directory Location: \package-lock.json	2.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
resolve Location: \package-lock.json	1.17.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
resolve Location: \package-lock.json	1.19.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
resolve-cwd Location: \package-lock.json	3.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
resolve-from Location: \package-lock.json	5.0.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ripemd160 Location: \package-lock.json	2.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
run-parallel-limit Location: \package-lock.json	1.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
safer-buffer Location: \package-lock.json	2.1.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
schema-utils Location: \package-lock.json	3.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
scrypt-js Location: \package-lock.json	3.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
semver Location: \package-lock.json	7.3.8 not_evaluated	library	📦 npm Inc. Source: known_maintainer	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
setimmediate Location: \package-lock.json	1.0.5 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
shallow-clone Location: \package-lock.json	3.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
shebang-command Location: \package-lock.json	2.0.0 not_evaluated	library	📦 Kevin Mårtensson Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
shebang-loader Location: \package-lock.json	0.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
shebang-regex Location: \package-lock.json	3.0.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
shelljs Location: \package-lock.json	0.8.5 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause	0	0.0	No CVEs	unknown / n/a	Unknown	None
shx Location: \package-lock.json	0.3.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
signal-exit Location: \package-lock.json	3.0.7 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
source-map Location: \package-lock.json	0.6.1 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
source-map-support Location: \package-lock.json	0.5.21 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
sprintf-js Location: \package-lock.json	1.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
stream-browserify Location: \package-lock.json	3.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
stream-http Location: \package-lock.json	3.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
string-argv Location: \package-lock.json	0.3.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
string-width Location: \package-lock.json	4.2.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
strip-ansi Location: \package-lock.json	6.0.1 not_evaluated malicious_version	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
strip-final-newline Location: \package-lock.json	2.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
strip-json-comments Location: \package-lock.json	3.1.1 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
supports-color Location: \package-lock.json	7.2.0 not_evaluated malicious_version	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
supports-color Location: \package-lock.json	8.1.1 not_evaluated malicious_version	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
tapable Location: \package-lock.json	2.2.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
terser Location: \package-lock.json	5.16.1 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-2-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
terser-webpack-plugin Location: \package-lock.json	5.2.5 not_evaluated	library	🏢 Unknown	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
timsort Location: \package-lock.json	0.3.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
to-regex-range Location: \package-lock.json	5.0.1 not_evaluated	library	📦 Jon Schlinkert Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
ts-loader Location: \package-lock.json	9.3.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
ts-node Location: \package-lock.json	10.9.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
typescript Location: \package-lock.json	4.5.5 not_evaluated	library	📦 Microsoft Corporation Source: known_maintainer	Apache-2.0 NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
typescript Location: \package-lock.json	5.1.6 not_evaluated	library	📦 Microsoft Corporation Source: known_maintainer	Apache-2.0 NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
universalify Location: \package-lock.json	0.1.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
update-browserslist-db Location: \package-lock.json	1.0.10 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
uri-js Location: \package-lock.json	4.4.1 not_evaluated	library	📦 Gary Court Source: registry_cache:npm_registry	BSD-2-Clause NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
util Location: \package-lock.json	0.12.4 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
v8-compile-cache-lib Location: \package-lock.json	3.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
validator Location: \package-lock.json	13.7.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
watchpack Location: \package-lock.json	2.4.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
webpack Location: \package-lock.json	5.65.0 not_evaluated	library	📦 webpack Contributors Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
webpack-cli Location: \package-lock.json	4.9.1 not_evaluated	library	🏢 Unknown	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
webpack-merge Location: \package-lock.json	5.8.0 not_evaluated	library	🏢 Unknown	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
webpack-sources Location: \package-lock.json	3.2.3 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
which Location: \package-lock.json	2.0.2 not_evaluated	library	📦 GitHub Inc. Source: registry_cache:npm_registry	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
which-typed-array Location: \package-lock.json	1.1.9 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
wildcard Location: \package-lock.json	2.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
workerpool Location: \package-lock.json	6.1.5 not_evaluated	library	🏢 npm Community Source: ecosystem	Apache-2.0 NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
wrap-ansi Location: \package-lock.json	7.0.0 not_evaluated malicious_version	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
wrappy Location: \package-lock.json	1.0.2 not_evaluated	library	📦 Isaac Z. Schlueter Source: registry_cache:npm_registry	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
xtend Location: \package-lock.json	4.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
y18n Location: \package-lock.json	5.0.8 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
yallist Location: \package-lock.json	4.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
yargs Location: \package-lock.json	16.2.0 not_evaluated	library	📦 yargs Contributors Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
yargs-parser Location: \package-lock.json	20.2.4 not_evaluated	library	🏢 Unknown	ISC NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
yargs-unparser Location: \package-lock.json	2.0.0 not_evaluated	library	🏢 Unknown	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
yn Location: \package-lock.json	3.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
yocto-queue Location: \package-lock.json	0.1.0 not_evaluated	library	📦 Sindre Sorhus Source: registry_cache:npm_registry	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
z-schema Location: \package-lock.json	5.0.4 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
ethers	6.17.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@adraffy/ens-normalize	1.11.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@noble/curves	1.2.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@noble/hashes	1.3.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/node	22.7.5 not_evaluated	library	📦 DefinitelyTyped Contributors Source: curated metadata	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
undici-types	6.19.8 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
aes-js	4.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
tslib	2.7.0 not_evaluated	library	🏢 npm Community Source: ecosystem	0BSD	0	0.0	No CVEs	unknown / n/a	Unknown	None
ws	8.21.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
fast-check	4.10.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
pure-rand	8.4.2 not_evaluated	library	📦 Nicolas DUBIEN <github@dubien.org> Source: package.json	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
ganache	7.9.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@trufflesuite/bigint-buffer	1.1.10 not_evaluated	library	🏢 npm Community Source: ecosystem	Apache-2.0	0	0.0	No CVEs	unknown / n/a	Unknown	None
node-gyp-build	4.4.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@trufflesuite/uws-js-unofficial	20.30.0 not_evaluated	library	🏢 npm Community Source: ecosystem	Apache-2.0	0	0.0	No CVEs	unknown / n/a	Unknown	None
bufferutil	4.0.7 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
utf-8-validate	6.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
@types/seedrandom	3.0.1 not_evaluated	library	📦 DefinitelyTyped Contributors	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
abstract-level	1.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
buffer	6.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
base64-js	1.5.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
ieee754	1.2.1 not_evaluated	library	🏢 npm Community Source: ecosystem	BSD-3-Clause	0	0.0	No CVEs	unknown / n/a	Unknown	None
catering	2.1.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
is-buffer	2.0.5 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
level-supports	4.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
level-transcoder	1.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
module-error	1.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
queue-microtask	1.2.3 not_evaluated	library	📦 Feross Aboukhadijeh Source: registry_cache:npm_registry	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
level-concat-iterator	3.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
async-eventemitter	0.2.4 not_evaluated	library	🏢 Unknown	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
async	2.6.4 not_evaluated	library	📦 Caolan McMahon Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
lodash	4.17.21 not_evaluated	library	📦 Lodash Contributors Source: known_maintainer	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
emittery	0.10.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT NPM	0	0.0	No CVEs	unknown / n/a	Unknown	None
keccak	3.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
node-addon-api	2.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
readable-stream	3.6.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
inherits	2.0.4 not_evaluated	library	📦 isaacs Source: registry_cache:npm_registry	ISC	0	0.0	No CVEs	unknown / n/a	Unknown	None
string_decoder	1.3.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
safe-buffer	5.2.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
util-deprecate	1.0.2 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
leveldown	6.1.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
napi-macros	2.0.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
secp256k1	4.0.3 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
elliptic	6.5.4 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
brorand	1.1.0 not_evaluated	library	🏢 Unknown	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
hash.js	1.1.7 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
minimalistic-assert	1.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	ISC	0	0.0	No CVEs	unknown / n/a	Unknown	None
hmac-drbg	1.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
minimalistic-crypto-utils	1.0.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
solc	0.8.37 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
command-exists	1.2.9 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
follow-redirects	1.16.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
js-sha3	0.8.0 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
memorystream	0.3.1 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None
tmp	0.2.6 not_evaluated	library	🏢 npm Community Source: ecosystem	MIT	0	0.0	No CVEs	unknown / n/a	Unknown	None

* Response windows are anchored to the earliest public CNA, NVD, OSV, or GHSA timestamp, except CISA KEV findings, which use the KEV due date.

Report Generation Details

Technical Details

Generated: 2026-09-20 18:33:31

Source File: sbom-licensed.cdx.json

Enhancement: Local OSV database (offline / local databases)

Report Type: Full (with CVE analysis)

Vulnerability Database

CISA KEV Integration: Active Exploitation Detection

Local CVE database: not recorded

CVE sources:

Local OSV database: completed

Grype: skipped (Grype disabled by scan options)

Response-window methodology: The response deadline is anchored to the earliest public CNA, NVD, OSV, or GHSA timestamp, or to the CISA KEV due date. It is not anchored only to NVD because publication backlogs can make NVD later than the first public disclosure.

FDA/NTIA Compliance

📋 Supplier Field Coverage: 92/368 components (25.0%)
FDA requires supplier identification for medical device SBOM submissions

Supply chain adoption

Publication age of the installed version. A package profile is not a malware verdict. Missing registry evidence is not evaluated, never clean.

Cooling versions

No evaluated versions cooling.

Package version	Version age	Profile	Publisher changed	Signals
`pkg:npm/@cspotcode/source-map-support@0.8.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@discoveryjs/json-ext@0.5.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@jridgewell/gen-mapping@0.3.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@jridgewell/resolve-uri@3.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@jridgewell/set-array@1.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@jridgewell/source-map@0.3.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@jridgewell/sourcemap-codec@1.4.14`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@jridgewell/trace-mapping@0.3.17`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@jridgewell/trace-mapping@0.3.9`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@microsoft/api-extractor@7.20.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@microsoft/api-extractor-model@7.16.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@microsoft/tsdoc@0.13.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@microsoft/tsdoc-config@0.15.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@rushstack/node-core-library@3.45.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@rushstack/rig-package@0.3.8`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@rushstack/ts-command-line@4.10.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@tsconfig/node10@1.0.9`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@tsconfig/node12@1.0.11`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@tsconfig/node14@1.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@tsconfig/node16@1.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/abstract-leveldown@7.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/argparse@1.0.38`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/eslint@8.4.10`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/eslint-scope@3.7.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/estree@0.0.50`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/json-schema@7.0.11`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/mocha@9.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/node@12.20.24`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@ungap/promise-all-settled@1.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/ast@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/floating-point-hex-parser@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/helper-api-error@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/helper-buffer@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/helper-numbers@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/helper-wasm-bytecode@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/helper-wasm-section@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/ieee754@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/leb128@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/utf8@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/wasm-edit@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/wasm-gen@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/wasm-opt@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/wasm-parser@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webassemblyjs/wast-printer@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webpack-cli/configtest@1.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webpack-cli/info@1.5.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@webpack-cli/serve@1.7.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@xtuc/ieee754@1.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@xtuc/long@4.2.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/acorn@8.8.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/acorn-import-assertions@1.8.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/acorn-walk@8.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ajv@6.12.6`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ajv-keywords@3.5.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ansi-colors@4.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ansi-regex@5.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46966 (source: osv_mal)
`pkg:npm/ansi-styles@4.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46967 (source: osv_mal)
`pkg:npm/anymatch@3.1.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/arg@4.1.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/argparse@1.0.10`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/argparse@2.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/asn1.js@5.4.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/assert@2.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/available-typed-arrays@1.0.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/balanced-match@1.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/big.js@5.2.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/binary-extensions@2.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/bn.js@4.12.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/bn.js@5.2.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/brace-expansion@1.1.11`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/braces@3.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/browser-stdout@1.3.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/browserify-aes@1.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/browserify-cipher@1.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/browserify-des@1.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/browserify-rsa@4.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/browserify-sign@4.2.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/browserslist@4.21.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/buffer-from@1.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/buffer-xor@1.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/builtin-status-codes@3.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/call-bind@1.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/camelcase@6.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/caniuse-lite@1.0.30001435`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/chalk@4.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46969 (source: osv_mal)
`pkg:npm/chokidar@3.5.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/chrome-trace-event@1.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/cipher-base@1.0.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/cliui@7.0.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/clone-deep@4.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/color-convert@2.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46971 (source: osv_mal)
`pkg:npm/color-name@1.1.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46972 (source: osv_mal)
`pkg:npm/colorette@2.0.19`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/colors@1.2.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/commander@2.20.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/commander@7.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/concat-map@0.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/create-ecdh@4.0.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/create-hash@1.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/create-hmac@1.1.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/create-require@1.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/cross-env@7.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/cross-spawn@7.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/crypto-browserify@3.12.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/debug@4.3.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46974 (source: osv_mal)
`pkg:npm/decamelize@4.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/define-properties@1.1.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/des.js@1.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/diff@4.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/diff@5.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/diffie-hellman@5.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/electron-to-chromium@1.4.284`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/emoji-regex@8.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/emojis-list@3.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/enhanced-resolve@5.12.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/envinfo@7.8.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/es-module-lexer@0.9.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/es6-object-assign@1.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/escalade@3.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/escape-string-regexp@4.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/eslint-scope@5.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/esrecurse@4.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/estraverse@4.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/estraverse@5.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/events@3.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/evp_bytestokey@1.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/execa@5.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/fast-deep-equal@3.1.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/fast-json-stable-stringify@2.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/fastest-levenshtein@1.0.16`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/fill-range@7.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/find-up@4.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/find-up@5.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/flat@5.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/for-each@0.3.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/fs-extra@7.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/fs.realpath@1.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/fsevents@2.3.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2023-462 (source: osv_mal)
`pkg:npm/function-bind@1.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/get-caller-file@2.0.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/get-intrinsic@1.1.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/get-stream@6.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/glob@7.1.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/glob-parent@5.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/glob-to-regexp@0.4.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/gopd@1.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/graceful-fs@4.2.10`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/growl@1.10.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/has@1.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/has-flag@4.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/has-property-descriptors@1.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/has-symbols@1.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/has-tostringtag@1.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/hash-base@3.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/he@1.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/https-browserify@1.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/human-signals@2.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/import-lazy@4.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/import-local@3.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/inflight@1.0.6`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/interpret@1.4.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/interpret@2.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-arguments@1.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-binary-path@2.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-callable@1.2.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-core-module@2.11.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-extglob@2.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-fullwidth-code-point@3.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-generator-function@1.0.10`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-glob@4.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-nan@1.3.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-number@7.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-plain-obj@2.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-plain-object@2.0.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-stream@2.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-typed-array@1.1.10`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-unicode-supported@0.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/isexe@2.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/isobject@3.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/jest-worker@27.5.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/jju@1.4.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/js-yaml@4.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/json-parse-better-errors@1.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/json-schema-traverse@0.4.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/json5@2.2.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/jsonfile@4.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/kind-of@6.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/level-js@6.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/loader-runner@4.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/loader-utils@2.0.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/locate-path@5.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/locate-path@6.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/lodash.get@4.4.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/lodash.isequal@4.5.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/log-symbols@4.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/lru-cache@6.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ltgt@2.2.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/make-error@1.3.6`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/mcl-wasm@0.9.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/md5.js@1.3.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/merge-stream@2.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/micromatch@4.0.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/miller-rabin@4.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/mime-db@1.52.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/mime-types@2.1.35`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/mimic-fn@2.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/minimatch@3.0.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/minimist@1.2.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/mocha@9.1.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ms@2.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ms@2.1.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/nanoid@3.1.25`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/neo-async@2.6.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/node-loader@1.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/node-releases@2.0.6`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/normalize-path@3.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/npm-run-path@4.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/object-is@1.1.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/object-keys@1.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/once@1.4.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/onetime@5.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/os-browserify@0.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/p-limit@2.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/p-limit@3.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/p-locate@4.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/p-locate@5.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/p-try@2.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/parse-asn1@5.1.6`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/path-browserify@1.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/path-exists@4.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/path-is-absolute@1.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/path-key@3.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/path-parse@1.0.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/pbkdf2@3.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/picocolors@1.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/picomatch@2.3.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/pkg-dir@4.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/process@0.11.10`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/public-encrypt@4.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/punycode@2.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/randombytes@2.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/randomfill@1.0.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/readdirp@3.6.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/rechoir@0.6.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/rechoir@0.7.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/require-directory@2.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/resolve@1.17.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/resolve@1.19.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/resolve-cwd@3.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/resolve-from@5.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ripemd160@2.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/run-parallel-limit@1.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/safer-buffer@2.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/schema-utils@3.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/scrypt-js@3.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/semver@7.3.8`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/serialize-javascript@6.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/setimmediate@1.0.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/sha.js@2.4.11`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/shallow-clone@3.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/shebang-command@2.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/shebang-loader@0.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/shebang-regex@3.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/shelljs@0.8.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/shx@0.3.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/signal-exit@3.0.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/source-map@0.6.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/source-map-support@0.5.21`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/sprintf-js@1.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/stream-browserify@3.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/stream-http@3.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/string-argv@0.3.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/string-width@4.2.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/strip-ansi@6.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46980 (source: osv_mal)
`pkg:npm/strip-final-newline@2.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/strip-json-comments@3.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/supports-color@7.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46981 (source: osv_mal)
`pkg:npm/supports-color@8.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46981 (source: osv_mal)
`pkg:npm/tapable@2.2.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/terser@5.16.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/terser-webpack-plugin@5.2.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/timsort@0.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/to-regex-range@5.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ts-loader@9.3.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ts-node@10.9.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/typescript@4.5.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/typescript@5.1.6`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/universalify@0.1.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/update-browserslist-db@1.0.10`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/uri-js@4.4.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/util@0.12.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/v8-compile-cache-lib@3.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/validator@13.7.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/watchpack@2.4.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/webpack@5.65.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/webpack-cli@4.9.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/webpack-merge@5.8.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/webpack-sources@3.2.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/which@2.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/which-typed-array@1.1.9`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/wildcard@2.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/workerpool@6.1.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/wrap-ansi@7.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated Critical: malicious_version: Known malicious package name (all versions): OSV malicious-package record MAL-2025-46983 (source: osv_mal)
`pkg:npm/wrappy@1.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/xtend@4.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/y18n@5.0.8`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/yallist@4.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/yargs@16.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/yargs-parser@20.2.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/yargs-unparser@2.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/yn@3.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/yocto-queue@0.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/z-schema@5.0.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ethers@6.17.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@adraffy/ens-normalize@1.11.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@noble/curves@1.2.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@noble/hashes@1.3.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/node@22.7.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/undici-types@6.19.8`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/aes-js@4.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/tslib@2.7.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ws@8.21.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/fast-check@4.10.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/pure-rand@8.4.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ganache@7.9.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@trufflesuite/bigint-buffer@1.1.10`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/node-gyp-build@4.4.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@trufflesuite/uws-js-unofficial@20.30.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/bufferutil@4.0.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/utf-8-validate@6.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/@types/seedrandom@3.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/abstract-level@1.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/buffer@6.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/base64-js@1.5.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/ieee754@1.2.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/catering@2.1.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/is-buffer@2.0.5`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/level-supports@4.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/level-transcoder@1.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/module-error@1.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/queue-microtask@1.2.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/level-concat-iterator@3.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/async-eventemitter@0.2.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/async@2.6.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/lodash@4.17.21`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/emittery@0.10.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/keccak@3.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/node-addon-api@2.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/readable-stream@3.6.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/inherits@2.0.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/string_decoder@1.3.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/safe-buffer@5.2.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/util-deprecate@1.0.2`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/leveldown@6.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/napi-macros@2.0.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/secp256k1@4.0.3`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/elliptic@6.5.4`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/brorand@1.1.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/hash.js@1.1.7`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/minimalistic-assert@1.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/hmac-drbg@1.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/minimalistic-crypto-utils@1.0.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/solc@0.8.37`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/command-exists@1.2.9`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/follow-redirects@1.16.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/js-sha3@0.8.0`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/memorystream@0.3.1`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated
`pkg:npm/tmp@0.2.6`	Not evaluated	unknown	unknown	Info: not_evaluated: Registry publication evidence not evaluated

Secret Exposure Scan

Secret scan not executed. gitleaks was selected for the standard scan, but the binary was not available on this machine.

Mythos readiness

0.0%
Fix available

0
Fix age over 180 days

0
Dormant

0
Response window overdue

0
Severity disagreement

0
Not evaluated (offline)

Fix Backlog

0.0% of 0 open findings have a fix. Unknown: 0. No fix available: 0.

0-30
0

31-90
0

91-180
0

180+
0

Top 10 oldest fixable findings

CVE	Component	Recommended	Major bump	Age bucket	Age days	Risk

One upgrade fixes N findings

Component	Recommended version	Findings fixed

Open findings by CVE year

No open findings with a CVE year.

Dormant findings

Top 10 by risk score. Dormant means more than 365 days since earliest public disclosure, a known fix, and an open state.

CVE	Component	Year	Age days	Risk	Factors
No dormant findings.

🎯 Top Actionable Risks

Unified 0-100 risk score = CVSS severity × exploit likelihood (KEV/EPSS) × applicability (reachability, VEX state, deployment scope). A trusted fix older than 180 days adds 5, dormant adds 8, and Medium with EPSS at least 0.10 adds 6. Open findings that are dormant or have EPSS at least 0.10 get a final floor of 40 (floor_medium); not affected or unreachable findings are never floored. Ranks the findings most worth acting on first.

Prioritize reachable code paths (push unknown/unreachable findings down)

Risk	Priority	CVE	Component	Why it ranks here
9	Info	`GHSA-95M3-7Q98-8XR5`	`npm/sha.js@2.4.11`	CVSS baseline Critical · VEX: not affected / unreachable
8	Info	`GHSA-5C6J-R48X-RMVQ`	`npm/serialize-javascript@6.0.0`	CVSS baseline High · VEX: not affected / unreachable
8	Info	`GHSA-HXCC-F52P-WC94`	`npm/serialize-javascript@6.0.0`	CVSS baseline High · VEX: not affected / unreachable
6	Info	`GHSA-QJ8W-GFJ5-8C6V`	`npm/serialize-javascript@6.0.0`	CVSS baseline Medium · VEX: not affected / unreachable
5	Info	`GHSA-378V-28HJ-76WF`	`npm/bn.js@4.12.0`	CVSS baseline Medium · VEX: not affected / unreachable
5	Info	`GHSA-76P7-773F-R4Q5`	`npm/serialize-javascript@6.0.0`	CVSS baseline Medium · VEX: not affected / unreachable
4	Info	`GHSA-H9RV-JMMF-4PGX`	`npm/serialize-javascript@6.0.0`	CVSS baseline Medium · VEX: not affected / unreachable

🏥 VEX - Vulnerability Exploitability Assessment

FDA Compliance: Patient harm assessment and mitigation timelines documented per FDA Section 524B(b)(1)

7

Total Vulnerabilities Assessed

0

Affected (Require Action)

0

Under Investigation

7

Not Affected

7

Unreachable (Not Imported)

Disposition reconciliation: 0 Affected + 7 Not Affected + 0 Under Investigation = 7 Total. Unreachable = present in the dependency set but not imported/used by first-party source code (entry-point reachability analysis); it is a subset of Not Affected.

VEX Assessments:

GHSA-378V-28HJ-76WF 🚫 NOT AFFECTED: UNREACHABLE

bn.js is present in the dependency set but is not imported/required by any first-party source file (entry-point reachability analysis). Vulnerable code is not in the application execution path. Severity: MEDIUM (CVSS 5.3). Evidence: Not imported by first-party source and not reachable from any imported package via the dependency graph.