Bump the npm-dependencies group across 1 directory with 4 updates by dependabot[bot] · Pull Request #521 · webstackdev/astro.webstackbuilders.com

dependabot · 2025-12-22T22:02:19Z

Bumps the npm-dependencies group with 4 updates in the / directory: @typescript-eslint/eslint-plugin, @typescript-eslint/parser, typescript-eslint and @rollup/rollup-linux-x64-gnu.

Updates @typescript-eslint/eslint-plugin from 8.50.0 to 8.50.1

Release notes

Sourced from @typescript-eslint/eslint-plugin's releases.

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)

❤️ Thank You

Josh Goldberg ✨

Tamashoo @Tamashoo

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/eslint-plugin's changelog.

8.50.1 (2025-12-22)

🩹 Fixes

eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)

eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

❤️ Thank You

Josh Goldberg ✨

Tamashoo @Tamashoo

You can read about our versioning strategy and releases on our website.

Commits

d520b88 chore(release): publish 8.50.1
46171f0 fix(eslint-plugin): [no-unnecessary-type-assertion] correct handling of undef...
6882a09 fix(eslint-plugin): [method-signature-style] ignore methods that return `this...
See full diff in compare view

Updates @typescript-eslint/parser from 8.50.0 to 8.50.1

Release notes

Sourced from @typescript-eslint/parser's releases.

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)

❤️ Thank You

Josh Goldberg ✨

Tamashoo @Tamashoo

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from @typescript-eslint/parser's changelog.

8.50.1 (2025-12-22)

This was a version bump only for parser to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

d520b88 chore(release): publish 8.50.1
See full diff in compare view

Updates typescript-eslint from 8.50.0 to 8.50.1

Release notes

Sourced from typescript-eslint's releases.

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

eslint-plugin: [method-signature-style] ignore methods that return this (#11813)

eslint-plugin: [no-unnecessary-type-assertion] correct handling of undefined vs. void (#11826)

❤️ Thank You

Josh Goldberg ✨

Tamashoo @Tamashoo

You can read about our versioning strategy and releases on our website.

Changelog

Sourced from typescript-eslint's changelog.

8.50.1 (2025-12-22)

This was a version bump only for typescript-eslint to align it with other projects, there were no code changes.

You can read about our versioning strategy and releases on our website.

Commits

d520b88 chore(release): publish 8.50.1
See full diff in compare view

Updates @rollup/rollup-linux-x64-gnu from 4.53.5 to 4.54.0

Release notes

Sourced from @rollup/rollup-linux-x64-gnu's releases.

v4.54.0

4.54.0

2025-12-20

Features

Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)

Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

#6046: fix: correctly handle wellknown protocols (@cyyynthia, @lukastaegert)

#6201: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6211: chore(deps): update msys2/setup-msys2 digest to 4f806de (@renovate[bot], @lukastaegert)

#6212: chore(deps): update actions/cache action to v5 (@renovate[bot])

#6213: chore(deps): update github artifact actions (major) (@renovate[bot])

#6214: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6215: chore(deps): lock file maintenance (@renovate[bot])

#6216: fix: include namespace variable paths during try-catch deoptimization (@schwing)

Changelog

Sourced from @rollup/rollup-linux-x64-gnu's changelog.

4.54.0

2025-12-20

Features

Enable tree-shaking for Symbol.hasInstance, Symbol.dispose and Symbol.asyncDispose properties if unused (#6046)

Bug Fixes

Ensure that well-known-Symbol-valued properties are not tree-shaken except in select cases (#6046)

Ensure namespace properties are included when referenced only from a try-catch (#6216)

Pull Requests

#6046: fix: correctly handle wellknown protocols (@cyyynthia, @lukastaegert)

#6201: chore(deps): update dependency lru-cache to v11 (@renovate[bot], @lukastaegert)

#6211: chore(deps): update msys2/setup-msys2 digest to 4f806de (@renovate[bot], @lukastaegert)

#6212: chore(deps): update actions/cache action to v5 (@renovate[bot])

#6213: chore(deps): update github artifact actions (major) (@renovate[bot])

#6214: fix(deps): lock file maintenance minor/patch updates (@renovate[bot])

#6215: chore(deps): lock file maintenance (@renovate[bot])

#6216: fix: include namespace variable paths during try-catch deoptimization (@schwing)

Commits

88f1430 4.54.0
e5e01c1 fix: include namespace variable paths during try-catch deoptimization (#6216)
107959c fix: correctly handle wellknown protocols (#6046)
160514d chore(deps): lock file maintenance (#6215)
59bda58 chore(deps): update msys2/setup-msys2 digest to 4f806de (#6211)
9b7ca4d chore(deps): update actions/cache action to v5 (#6212)
abf1fb5 chore(deps): update github artifact actions (major) (#6213)
0dec3ca fix(deps): lock file maintenance minor/patch updates (#6214)
c3fa50c chore(deps): update dependency lru-cache to v11 (#6201)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-dependencies group with 4 updates in the / directory: [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin), [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser), [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint) and [@rollup/rollup-linux-x64-gnu](https://github.com/rollup/rollup). Updates `@typescript-eslint/eslint-plugin` from 8.50.0 to 8.50.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.1/packages/eslint-plugin) Updates `@typescript-eslint/parser` from 8.50.0 to 8.50.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.1/packages/parser) Updates `typescript-eslint` from 8.50.0 to 8.50.1 - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/typescript-eslint/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.50.1/packages/typescript-eslint) Updates `@rollup/rollup-linux-x64-gnu` from 4.53.5 to 4.54.0 - [Release notes](https://github.com/rollup/rollup/releases) - [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md) - [Commits](rollup/rollup@v4.53.5...v4.54.0) --- updated-dependencies: - dependency-name: "@typescript-eslint/eslint-plugin" dependency-version: 8.50.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@typescript-eslint/parser" dependency-version: 8.50.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: typescript-eslint dependency-version: 8.50.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-dependencies - dependency-name: "@rollup/rollup-linux-x64-gnu" dependency-version: 4.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-12-22T22:02:20Z

Labels

The following labels could not be found: automerge 🤞, type: dependencies 🔗. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

github-actions · 2025-12-22T22:02:42Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@rollup/rollup-linux-x64-gnu

4.54.0

🟢 6.1

Details

Check	Score	Reason
Code-Review	🟢 4	Found 8/17 approved changesets -- score normalized to 4
Maintained	🟢 10	30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Security-Policy	🟢 10	security policy file detected
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
License	🟢 9	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ 1	branch protection is not maximal on development and all release branches
Packaging	🟢 10	packaging workflow detected
Pinned-Dependencies	🟢 6	dependency not pinned by hash detected -- score normalized to 6
Binary-Artifacts	🟢 10	no binaries found in the repo
Fuzzing	⚠️ 0	project is not fuzzed
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 10	0 existing vulnerabilities detected

npm/@typescript-eslint/eslint-plugin

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/parser

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/project-service

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/scope-manager

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/tsconfig-utils

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/type-utils

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/types

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/typescript-estree

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/utils

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/@typescript-eslint/visitor-keys

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

npm/typescript-eslint

8.50.1

🟢 5.2

Details

Check	Score	Reason
Maintained	🟢 10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Code-Review	🟢 7	Found 15/20 approved changesets -- score normalized to 7
License	🟢 10	license file detected
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Security-Policy	🟢 10	security policy file detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases	⚠️ -1	no releases found
Binary-Artifacts	🟢 10	no binaries found in the repo
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
Fuzzing	⚠️ 0	project is not fuzzed
Vulnerabilities	⚠️ 0	37 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

package-lock.json

github-actions · 2025-12-22T22:07:37Z

Coverage Report

Status	Category	Percentage	Covered / Total
🔵	Lines	71.66%	6010 / 8386
🔵	Statements	69.82%	6330 / 9066
🔵	Functions	71.17%	1168 / 1641
🔵	Branches	59.72%	3295 / 5517

File Coverage

No changed files found.

Generated in workflow #108 for commit cb67bcf by the Vitest Coverage Report Action

dependabot Bot had a problem deploying to preview December 22, 2025 22:02 Failure

dependabot Bot temporarily deployed to testing December 22, 2025 22:02 Inactive

webstackdev merged commit b49c7b9 into main Dec 22, 2025
12 of 14 checks passed

webstackdev deleted the dependabot/npm_and_yarn/npm-dependencies-6785315aad branch December 22, 2025 22:43

Navigation Menu

Bump the npm-dependencies group across 1 directory with 4 updates - #521

Bump the npm-dependencies group across 1 directory with 4 updates#521
webstackdev merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-dependencies-6785315aad

dependabot Bot commented on behalf of github Dec 22, 2025

Uh oh!

dependabot Bot commented on behalf of github Dec 22, 2025

Uh oh!

github-actions Bot commented Dec 22, 2025

Uh oh!

github-actions Bot commented Dec 22, 2025

Uh oh!

Uh oh!

This branch had an error being deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Dec 22, 2025

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

❤️ Thank You

8.50.1 (2025-12-22)

🩹 Fixes

❤️ Thank You

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

❤️ Thank You

8.50.1 (2025-12-22)

v8.50.1

8.50.1 (2025-12-22)

🩹 Fixes

❤️ Thank You

8.50.1 (2025-12-22)

v4.54.0

4.54.0

Features

Bug Fixes

Pull Requests

4.54.0

Features

Bug Fixes

Pull Requests

Uh oh!

dependabot Bot commented on behalf of github Dec 22, 2025

Labels

Uh oh!

github-actions Bot commented Dec 22, 2025

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

github-actions Bot commented Dec 22, 2025

Coverage Report

Uh oh!

Uh oh!

This branch had an error being deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant