Skip to content

Bump the npm group across 3 directories with 38 updates - #84

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-48589b8eb8
Jan 22, 2026
Merged

Bump the npm group across 3 directories with 38 updates#84
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-48589b8eb8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 5 updates in the / directory:

Package From To
hono 4.11.4 4.11.5
@types/node 25.0.9 25.0.10
vitest 4.0.17 4.0.18
@vitest/coverage-v8 4.0.17 4.0.18
aws-cdk 2.1101.0 2.1102.0

Bumps the npm group with 5 updates in the /example directory:

Package From To
hono 4.11.4 4.11.5
@types/node 25.0.9 25.0.10
vitest 4.0.17 4.0.18
@vitest/coverage-v8 4.0.17 4.0.18
aws-cdk 2.1101.0 2.1102.0

Bumps the npm group with 3 updates in the /package directory: hono, @types/node and vitest.

Updates hono from 4.11.4 to 4.11.5

Release notes

Sourced from hono's releases.

v4.11.5

What's Changed

New Contributors

Full Changelog: honojs/hono@v4.11.4...v4.11.5

Commits

Updates @types/node from 25.0.9 to 25.0.10

Commits

Updates vitest from 4.0.17 to 4.0.18

Release notes

Sourced from vitest's releases.

v4.0.18

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates @vitest/coverage-v8 from 4.0.17 to 4.0.18

Release notes

Sourced from @​vitest/coverage-v8's releases.

v4.0.18

   🚀 Experimental Features

   🐞 Bug Fixes

    View changes on GitHub
Commits

Updates aws-cdk from 2.1101.0 to 2.1102.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1102.0

2.1102.0 (2026-01-22)

Features

Bug Fixes

Commits
  • 78fa807 fix(cli): remove legacy stack tags behavior (#1053)
  • 84aadd6 fix(cli): outdated instructions in README of python init template (#1047)
  • c82de09 fix: CDK app fails to launch if paths contain spaces (#1045)
  • 9765a69 feat(deps): upgrade aws-cdk-lib (#1034)
  • 83bf7cd feat: new package: @​aws-cdk/cloud-assembly-api (#1033)
  • 943967e feat(deps): upgrade aws-cdk-lib (#1027)
  • af43d43 feat(cli): support hotswap for AWS::BedrockAgentCore::Runtime (#991)
  • See full diff in compare view

Updates @rollup/rollup-android-arm-eabi from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-android-arm-eabi's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-android-arm-eabi's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-android-arm64 from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-android-arm64's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-android-arm64's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-darwin-arm64 from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-darwin-arm64's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-darwin-arm64's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-darwin-x64 from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-darwin-x64's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-darwin-x64's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-freebsd-arm64 from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-freebsd-arm64's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-freebsd-arm64's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-freebsd-x64 from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-freebsd-x64's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-freebsd-x64's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-arm-gnueabihf from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-arm-gnueabihf's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-arm-gnueabihf's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-arm-musleabihf from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-arm-musleabihf's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-arm-musleabihf's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-arm64-gnu from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-arm64-gnu's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-arm64-gnu's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-arm64-musl from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-arm64-musl's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-arm64-musl's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-loong64-gnu from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-loong64-gnu's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-loong64-gnu's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-loong64-musl from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-loong64-musl's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-loong64-musl's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-ppc64-gnu from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-ppc64-gnu's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-ppc64-gnu's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-ppc64-musl from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-ppc64-musl's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-ppc64-musl's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-riscv64-gnu from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-riscv64-gnu's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-riscv64-gnu's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-riscv64-musl from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-riscv64-musl's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-riscv64-musl's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-s390x-gnu from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-s390x-gnu's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-s390x-gnu's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-x64-gnu from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-x64-gnu's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-x64-gnu's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-linux-x64-musl from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-linux-x64-musl's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-linux-x64-musl's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-openbsd-x64 from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-openbsd-x64's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Changelog

Sourced from @​rollup/rollup-openbsd-x64's changelog.

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

Commits

Updates @rollup/rollup-openharmony-arm64 from 4.55.3 to 4.56.0

Release notes

Sourced from @​rollup/rollup-openharmony-arm64's releases.

v4.56.0

4.56.0

2026-01-22

Features

  • Track object property inclusions of dynamic namespace members (#6230)

Bug Fixes

  • Handle methods that access dynamically imported namespace members via this (#6230)

Pull Requests

@dependabot
Bump the npm group across 3 directories with 38 updates
1f96431 
Bumps the npm group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [hono](https://github.com/honojs/hono) | `4.11.4` | `4.11.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.9` | `25.0.10` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.17` | `4.0.18` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.17` | `4.0.18` |
| [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) | `2.1101.0` | `2.1102.0` |

Bumps the npm group with 5 updates in the /example directory:

| Package | From | To |
| --- | --- | --- |
| [hono](https://github.com/honojs/hono) | `4.11.4` | `4.11.5` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.0.9` | `25.0.10` |
| [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.0.17` | `4.0.18` |
| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.0.17` | `4.0.18` |
| [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) | `2.1101.0` | `2.1102.0` |

Bumps the npm group with 3 updates in the /package directory: [hono](https://github.com/honojs/hono), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest).


Updates `hono` from 4.11.4 to 4.11.5
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.11.4...v4.11.5)

Updates `@types/node` from 25.0.9 to 25.0.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vitest` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest)

Updates `@vitest/coverage-v8` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/coverage-v8)

Updates `aws-cdk` from 2.1101.0 to 2.1102.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1102.0/packages/aws-cdk)

Updates `@rollup/rollup-android-arm-eabi` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-android-arm64` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-darwin-arm64` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-darwin-x64` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-freebsd-arm64` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-freebsd-x64` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-arm-gnueabihf` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-arm-musleabihf` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-arm64-gnu` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-arm64-musl` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-loong64-gnu` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-loong64-musl` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-ppc64-gnu` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-ppc64-musl` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-riscv64-gnu` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-riscv64-musl` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-s390x-gnu` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-x64-gnu` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-linux-x64-musl` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-openbsd-x64` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-openharmony-arm64` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-win32-arm64-msvc` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-win32-ia32-msvc` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-win32-x64-gnu` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@rollup/rollup-win32-x64-msvc` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `@vitest/expect` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/expect)

Updates `@vitest/mocker` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/mocker)

Updates `@vitest/pretty-format` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/pretty-format)

Updates `@vitest/runner` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/runner)

Updates `@vitest/snapshot` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/snapshot)

Updates `@vitest/spy` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/spy)

Updates `@vitest/utils` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/utils)

Updates `rollup` from 4.55.3 to 4.56.0
- [Release notes](https://github.com/rollup/rollup/releases)
- [Changelog](https://github.com/rollup/rollup/blob/master/CHANGELOG.md)
- [Commits](rollup/rollup@v4.55.3...v4.56.0)

Updates `hono` from 4.11.4 to 4.11.5
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.11.4...v4.11.5)

Updates `@types/node` from 25.0.9 to 25.0.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vitest` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest)

Updates `@vitest/coverage-v8` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/coverage-v8)

Updates `aws-cdk` from 2.1101.0 to 2.1102.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1102.0/packages/aws-cdk)

Updates `hono` from 4.11.4 to 4.11.5
- [Release notes](https://github.com/honojs/hono/releases)
- [Commits](honojs/hono@v4.11.4...v4.11.5)

Updates `@types/node` from 25.0.9 to 25.0.10
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vitest` from 4.0.17 to 4.0.18
- [Release notes](https://github.com/vitest-dev/vitest/releases)
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.0.18/packages/vitest)

---
updated-dependencies:
- dependency-name: hono
  dependency-version: 4.11.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 25.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1102.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-android-arm-eabi"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-android-arm64"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-darwin-arm64"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-darwin-x64"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-freebsd-arm64"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-freebsd-x64"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-arm-gnueabihf"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-arm-musleabihf"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-arm64-gnu"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-arm64-musl"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-loong64-gnu"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-loong64-musl"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-ppc64-gnu"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-ppc64-musl"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-riscv64-gnu"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-riscv64-musl"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-s390x-gnu"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-x64-gnu"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-linux-x64-musl"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-openbsd-x64"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-openharmony-arm64"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-win32-arm64-msvc"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-win32-ia32-msvc"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-win32-x64-gnu"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@rollup/rollup-win32-x64-msvc"
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@vitest/expect"
  dependency-version: 4.0.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/mocker"
  dependency-version: 4.0.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/pretty-format"
  dependency-version: 4.0.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/runner"
  dependency-version: 4.0.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/snapshot"
  dependency-version: 4.0.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/spy"
  dependency-version: 4.0.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/utils"
  dependency-version: 4.0.18
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: rollup
  dependency-version: 4.56.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: hono
  dependency-version: 4.11.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 25.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@vitest/coverage-v8"
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1102.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: hono
  dependency-version: 4.11.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: "@types/node"
  dependency-version: 25.0.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: vitest
  dependency-version: 4.0.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jan 22, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) January 22, 2026 18:39
@github-actions

github-actions Bot commented Jan 22, 2026

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 27 package(s) with unknown licenses.
See the Details below.

License Issues

pnpm-lock.yaml

PackageVersionLicenseIssue Type
@rollup/rollup-android-arm-eabi4.56.0NullUnknown License
@rollup/rollup-android-arm644.56.0NullUnknown License
@rollup/rollup-darwin-arm644.56.0NullUnknown License
@rollup/rollup-darwin-x644.56.0NullUnknown License
@rollup/rollup-freebsd-arm644.56.0NullUnknown License
@rollup/rollup-freebsd-x644.56.0NullUnknown License
@rollup/rollup-linux-arm-gnueabihf4.56.0NullUnknown License
@rollup/rollup-linux-arm-musleabihf4.56.0NullUnknown License
@rollup/rollup-linux-arm64-gnu4.56.0NullUnknown License
@rollup/rollup-linux-arm64-musl4.56.0NullUnknown License
@rollup/rollup-linux-loong64-gnu4.56.0NullUnknown License
@rollup/rollup-linux-loong64-musl4.56.0NullUnknown License
@rollup/rollup-linux-ppc64-gnu4.56.0NullUnknown License
@rollup/rollup-linux-ppc64-musl4.56.0NullUnknown License
@rollup/rollup-linux-riscv64-gnu4.56.0NullUnknown License
@rollup/rollup-linux-riscv64-musl4.56.0NullUnknown License
@rollup/rollup-linux-s390x-gnu4.56.0NullUnknown License
@rollup/rollup-linux-x64-gnu4.56.0NullUnknown License
@rollup/rollup-linux-x64-musl4.56.0NullUnknown License
@rollup/rollup-openbsd-x644.56.0NullUnknown License
@rollup/rollup-openharmony-arm644.56.0NullUnknown License
@rollup/rollup-win32-arm64-msvc4.56.0NullUnknown License
@rollup/rollup-win32-ia32-msvc4.56.0NullUnknown License
@rollup/rollup-win32-x64-gnu4.56.0NullUnknown License
@rollup/rollup-win32-x64-msvc4.56.0NullUnknown License
@types/node25.0.10NullUnknown License
rollup4.56.0NullUnknown License

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
npm/@types/node 25.0.10 🟢 6.9
Details
CheckScoreReason
Code-Review🟢 8Found 26/30 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/@vitest/coverage-v8 4.0.18 UnknownUnknown
npm/aws-cdk 2.1102.0 UnknownUnknown
npm/hono 4.11.5 UnknownUnknown
npm/vitest 4.0.18 UnknownUnknown
npm/@types/node 25.0.10 🟢 6.9
Details
CheckScoreReason
Code-Review🟢 8Found 26/30 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/hono 4.11.5 UnknownUnknown
npm/vitest 4.0.18 UnknownUnknown
npm/@rollup/rollup-android-arm-eabi 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-android-arm64 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-darwin-arm64 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-darwin-x64 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-freebsd-arm64 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-freebsd-x64 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-arm-gnueabihf 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-arm-musleabihf 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-arm64-gnu 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-arm64-musl 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-loong64-gnu 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-loong64-musl 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-ppc64-gnu 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-ppc64-musl 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-riscv64-gnu 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-riscv64-musl 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-s390x-gnu 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-x64-gnu 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-linux-x64-musl 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-openbsd-x64 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-openharmony-arm64 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-win32-arm64-msvc 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-win32-ia32-msvc 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-win32-x64-gnu 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@rollup/rollup-win32-x64-msvc 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/@types/node 25.0.10 🟢 6.9
Details
CheckScoreReason
Code-Review🟢 8Found 26/30 approved changesets -- score normalized to 8
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Security-Policy🟢 10security policy file detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Signed-Releases⚠️ -1no releases found
Vulnerabilities🟢 100 existing vulnerabilities detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Fuzzing⚠️ 0project is not fuzzed
npm/@vitest/coverage-v8 4.0.18 UnknownUnknown
npm/@vitest/expect 4.0.18 UnknownUnknown
npm/@vitest/mocker 4.0.18 UnknownUnknown
npm/@vitest/pretty-format 4.0.18 UnknownUnknown
npm/@vitest/runner 4.0.18 UnknownUnknown
npm/@vitest/snapshot 4.0.18 UnknownUnknown
npm/@vitest/spy 4.0.18 UnknownUnknown
npm/@vitest/utils 4.0.18 UnknownUnknown
npm/aws-cdk 2.1102.0 UnknownUnknown
npm/hono 4.11.5 UnknownUnknown
npm/rollup 4.56.0 🟢 6.8
Details
CheckScoreReason
Code-Review🟢 5Found 7/12 approved changesets -- score normalized to 5
Maintained🟢 1030 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10
Security-Policy🟢 10security policy file detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
License🟢 9license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases⚠️ -1no releases found
Pinned-Dependencies🟢 6dependency not pinned by hash detected -- score normalized to 6
Packaging🟢 10packaging workflow detected
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities🟢 100 existing vulnerabilities detected
npm/vitest 4.0.18 UnknownUnknown

Scanned Files

  • example/package.json
  • package/package.json
  • pnpm-lock.yaml

@github-actions
github-actions Bot merged commit 86724c6 into main Jan 22, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/npm-48589b8eb8 branch January 22, 2026 18:40
This was referenced Feb 17, 2026
Closed
Closed
Closed
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

@poad poad

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@poad