Dependency review detected vulnerable packages.

Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803, step-security/harden-runner@a90bcbc6539c36a85cdfeb73f7e2f433735f215b. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

npm/safe-buffer has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/require-directory has an OpenSSF Scorecard of 2.3, which is less than this repository's threshold of 3.

npm/json-bigint has an OpenSSF Scorecard of 2.3, which is less than this repository's threshold of 3.

npm/get-caller-file has an OpenSSF Scorecard of 2.1, which is less than this repository's threshold of 3.

npm/escalade has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/ecdsa-sig-formatter has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.

npm/debug has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.

npm/color-name has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/buffer-equal-constant-time has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.