Dependency Review Test Formatting

[davelosert]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ❌ 1 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

package.json

Name	Version	Vulnerability	Severity
lodash	4.17.20	Command Injection in lodash	high
		Regular Expression Denial of Service (ReDoS) in lodash	moderate

Only included vulnerabilities with severity high or higher.

License Issues

Allowed Licenses: MIT

---

Incompatible Licenses

package.json

Package	Version	License
underscore	1.12.0	Apache 2.0

---

Invalid SPDX License Definitions

package.json

Package	Version	License
octoinvader	4.17.20	Non SPDX License

---

Unknown Licenses

package.json

Package	Version	License
my-other-dependency	4.17.20	No License

---

Scanned Manifest Files

package.json

• lodash@4.17.20
• underscore@1.12.0
• octoinvader@4.17.20
• my-other-dependency@4.17.20

[davelosert]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

package.json

• lodash@4.17.20
• underscore@1.12.0
• octoinvader@4.17.20
• my-other-dependency@4.17.20

[davelosert]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ❌ 2 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

package.json

Name	Version	Vulnerability	Severity
lodash	4.17.20	Command Injection in lodash	high
		Regular Expression Denial of Service (ReDoS) in lodash	moderate

Only included vulnerabilities with severity high or higher.

License Issues

package.json

Package	Version	License	Issue Type
underscore	1.12.0	Apache 2.0	Incompatible License
octoinvader	4.17.20	Non SPDX License	Invalid SPDX License
my-other-dependency	4.17.20	Null	Unknown License

.github/workflows/action.yml

Package	Version	License	Issue Type
owner/action-1	v1.2.2	XYZ-License	Invalid SPDX License
owner/action-2	main	Null	Unknown License

Allowed Licenses: MIT

Scanned Manifest Files

package.json

• lodash@4.17.20
• underscore@1.12.0
• octoinvader@4.17.20
• my-other-dependency@4.17.20

.github/workflows/action.yml

• owner/action-1@v1.2.2
• owner/action-2@main