From 21c5b3e37d15422d5c510f10aff9c47f7c9bd583 Mon Sep 17 00:00:00 2001
From: Raj-StepSecurity <rajkumar@stepsecurity.io>
Date: Thu, 22 Oct 2026 15:27:05 +0530
Subject: [PATCH] feat: Create osv-scanner.toml

---
 osv-scanner.toml | 3 +++
 1 file changed, 3 insertions(+)
 create mode 100644 osv-scanner.toml

diff --git a/osv-scanner.toml b/osv-scanner.toml
new file mode 100644
index 0000000..0e963a1
--- /dev/null
+++ b/osv-scanner.toml
@@ -0,0 +1,3 @@
+[[IgnoredVulns]]
+id = "GHSA-hp3w-g68c-fv3c"
+reason = "sprintf-js is a transitive dev-only dependency (via argparse) and is not included in the dist bundle, so there is no production impact."