diff --git a/.github/actions/orchestrator-free-sidecar/action.yml b/.github/actions/orchestrator-free-sidecar/action.yml index 196c86b0f6..edddfe1bc3 100644 --- a/.github/actions/orchestrator-free-sidecar/action.yml +++ b/.github/actions/orchestrator-free-sidecar/action.yml @@ -6,9 +6,9 @@ inputs: required: false default: "false" catalog_limit: - description: Maximum discovered route catalog size for the sidecar preflight. + description: Maximum discovered route catalog size for the sidecar preflight (a candidate list probed lazily to a readiness target, ADR-0029). required: false - default: "12" + default: "24" catalog_account_cap: description: Maximum routes admitted from one credential account. required: false diff --git a/.github/workflows/agent-mention-noema-dispatch.yml b/.github/workflows/agent-mention-noema-dispatch.yml index 5bed3e8963..ad8abc7b25 100644 --- a/.github/workflows/agent-mention-noema-dispatch.yml +++ b/.github/workflows/agent-mention-noema-dispatch.yml @@ -8,15 +8,26 @@ on: repository_dispatch: types: [agent-mention-noema] +concurrency: + # Workflow-level admission, for the same reason strix.yml, noema-review.yml, + # opencode-review.yml and opencode-review-dispatch.yml carry theirs at this level: + # a job-level group is never evaluated while the whole run waits behind the + # organization job ceiling, so a superseded mention keeps its queue slot until a + # runner frees up and only then cancels. At workflow level the older run is + # coalesced while both are still queued, which is where the slot is actually held. + # This workflow has a single job, so the group lives here and nowhere else -- + # every workflow in this repository that carries a group at both levels + # (strix.yml, opencode-review-dispatch.yml) gives the two levels DIFFERENT names, + # because a job requesting the group its own run already holds would wait on itself. + group: agent-mention-noema-${{ github.event.client_payload.target_repository }}-${{ github.event.client_payload.pr_number || github.run_id }} + cancel-in-progress: true + permissions: contents: read jobs: validate-and-forward: if: github.repository == 'ContextualWisdomLab/.github' - concurrency: - group: agent-mention-noema-${{ github.event.client_payload.target_repository }}-${{ github.event.client_payload.pr_number || github.run_id }} - cancel-in-progress: true runs-on: ubuntu-24.04 timeout-minutes: 5 permissions: diff --git a/.github/workflows/agent-mention-opencode-dispatch.yml b/.github/workflows/agent-mention-opencode-dispatch.yml index b27062ae37..05461c9551 100644 --- a/.github/workflows/agent-mention-opencode-dispatch.yml +++ b/.github/workflows/agent-mention-opencode-dispatch.yml @@ -8,15 +8,26 @@ on: repository_dispatch: types: [agent-mention-opencode] +concurrency: + # Workflow-level admission, for the same reason strix.yml, noema-review.yml, + # opencode-review.yml and opencode-review-dispatch.yml carry theirs at this level: + # a job-level group is never evaluated while the whole run waits behind the + # organization job ceiling, so a superseded mention keeps its queue slot until a + # runner frees up and only then cancels. At workflow level the older run is + # coalesced while both are still queued, which is where the slot is actually held. + # This workflow has a single job, so the group lives here and nowhere else -- + # every workflow in this repository that carries a group at both levels + # (strix.yml, opencode-review-dispatch.yml) gives the two levels DIFFERENT names, + # because a job requesting the group its own run already holds would wait on itself. + group: agent-mention-opencode-${{ github.event.client_payload.target_repository }}-${{ github.event.client_payload.pr_number || github.run_id }} + cancel-in-progress: true + permissions: contents: read jobs: validate-and-forward: if: github.repository == 'ContextualWisdomLab/.github' - concurrency: - group: agent-mention-opencode-${{ github.event.client_payload.target_repository }}-${{ github.event.client_payload.pr_number || github.run_id }} - cancel-in-progress: true runs-on: ubuntu-24.04 timeout-minutes: 5 permissions: diff --git a/.github/workflows/audit-central-ruleset.yml b/.github/workflows/audit-central-ruleset.yml index bf24e36c7c..2b72f21aab 100644 --- a/.github/workflows/audit-central-ruleset.yml +++ b/.github/workflows/audit-central-ruleset.yml @@ -105,6 +105,18 @@ jobs: python3 scripts/ci/audit_central_required_workflows.py --stacked "$stacked_ruleset_json" - name: Audit organization CodeQL coverage + # Runs even when the ruleset step above failed. Those two audits share a + # job but not a subject: the ruleset step exits 1 on owner-configured + # governance drift, and on 2026-09-06 it did exactly that ("exactly two + # approving reviews are not required", "last-push approval protection is + # disabled"), which silently took this CodeQL coverage detector down with + # it -- every run since 2026-09-04 failed there and never reached this + # step. This step builds its own repository list into its own temp file + # and the step above exports nothing to GITHUB_ENV or GITHUB_OUTPUT, so + # it has no data dependency to lose. The job still fails overall; what + # changes is that a coverage gap is reported instead of hidden behind an + # unrelated failure. + if: always() env: ORG_LOGIN: ContextualWisdomLab ORG_WIDE_CREDENTIAL_AVAILABLE: ${{ secrets.PR_REVIEW_MERGE_TOKEN != '' || secrets.OPENCODE_APPROVE_TOKEN != '' }} @@ -165,13 +177,21 @@ jobs: printf '[]\n' >"$coverage_json" while IFS=$'\t' read -r repository archived; do default_setup_state=null + # `state` alone is not coverage: a repository can report + # "configured" with an empty `languages` list, which scans nothing + # and produces no analyses (measured 2026-09-07 on life-os, aFIPC + # and inkspan). Collect both fields so the audit can tell those + # apart from a setup that actually covers a language. + default_setup_languages=null if [ "$archived" != "true" ]; then - default_setup_state_json="$RUNNER_TEMP/codeql-default-setup-${repository//[^A-Za-z0-9_.-]/_}.json" - if gh api "repos/${ORG_LOGIN}/${repository}/code-scanning/default-setup" --jq .state \ - >"$default_setup_state_json" 2>/dev/null; then - default_setup_state=$(jq -R '.' "$default_setup_state_json") + default_setup_json="$RUNNER_TEMP/codeql-default-setup-${repository//[^A-Za-z0-9_.-]/_}.json" + if gh api "repos/${ORG_LOGIN}/${repository}/code-scanning/default-setup" \ + >"$default_setup_json" 2>/dev/null; then + default_setup_state=$(jq '.state // null' "$default_setup_json") + default_setup_languages=$(jq '.languages // []' "$default_setup_json") else default_setup_state=null + default_setup_languages=null fi fi @@ -187,12 +207,13 @@ jobs: fi fi - echo "CODEQL_COVERAGE repository=${repository} archived=${archived} default_setup_state=${default_setup_state} latest_codeql_analysis=${latest_codeql_analysis}" + echo "CODEQL_COVERAGE repository=${repository} archived=${archived} default_setup_state=${default_setup_state} default_setup_languages=${default_setup_languages} latest_codeql_analysis=${latest_codeql_analysis}" jq --arg name "$repository" \ --argjson archived "$archived" \ --argjson default_setup_state "$default_setup_state" \ + --argjson default_setup_languages "$default_setup_languages" \ --argjson latest_codeql_analysis "$latest_codeql_analysis" \ - '. + [{name: $name, archived: $archived, default_setup_state: $default_setup_state, latest_codeql_analysis: $latest_codeql_analysis}]' \ + '. + [{name: $name, archived: $archived, default_setup_state: $default_setup_state, default_setup_languages: $default_setup_languages, latest_codeql_analysis: $latest_codeql_analysis}]' \ "$coverage_json" >"${coverage_json}.next" mv "${coverage_json}.next" "$coverage_json" done < <(jq -r '.[] | [.name, (.archived | tostring)] | @tsv' "$repositories_json") diff --git a/.github/workflows/codeql-pr.yml b/.github/workflows/codeql-pr.yml index cb07ad2fab..db06b7c4ba 100644 --- a/.github/workflows/codeql-pr.yml +++ b/.github/workflows/codeql-pr.yml @@ -2,12 +2,12 @@ # refuses to admit it, 0/43+ across every sampled repository # (docs/doctoring/codeql-pr-required-workflow-always-fails.md). This file # stays required-workflow-safe by never calling codeql-action itself: it -# detects languages, dispatches the actual scan via repository_dispatch to -# codeql-scan-dispatch.yml (which runs natively, unrestricted, in -# ContextualWisdomLab/.github). The shard then fails intentionally to release -# its runner; the handler publishes codeql-dispatch/ and reruns only -# that exact failed job. On rerun the shard reads the terminal status once. -# Design: +# detects languages, fails each analyze-head shard pending to release its +# runner, then one coordinator POSTs repository_dispatch to +# codeql-scan-dispatch.yml (native, unrestricted, in +# ContextualWisdomLab/.github) with the remaining language matrix. The +# handler publishes codeql-dispatch/ and reruns only that exact +# failed job. On rerun the shard reads the terminal status once. Design: # docs/adr/0025-codeql-required-workflow-dispatch-architecture.md. The # merge-preview scan (analyze-merge) is required nowhere (PR #1766) and was # dropped, not migrated. @@ -156,28 +156,21 @@ jobs: fail-fast: false matrix: ${{ fromJSON(needs.detect-languages.outputs.matrix) }} steps: - - name: Request current-head CodeQL scan dispatch - # Each shard dispatches only its own language and passes its exact - # run/job identity. The shard intentionally fails after dispatch so - # its runner is released; the trusted handler later reruns that one - # failed job after publishing a terminal current-head verdict. + - name: Read current-head CodeQL dispatch verdict + # Shards never dispatch. They re-check the live head, consume an + # authenticated codeql-dispatch/ verdict when one exists, + # and otherwise fail pending so the runner is released. One + # coordinator job POSTs the remaining language matrix after every + # shard has a job id. id: dispatch if: needs.detect-languages.outputs.code == 'true' env: GH_TOKEN: ${{ github.token }} - OIDC_AUDIENCE: opencode-github-action - OPENCODE_API_BASE_URL: https://api.opencode.ai TARGET_REPOSITORY: ${{ github.event.pull_request.base.repo.full_name || github.repository }} PR_NUMBER: ${{ github.event.pull_request.number }} - PR_BASE_REF: ${{ github.event.pull_request.base.ref }} - PR_BASE_SHA: ${{ github.event.pull_request.base.sha }} - PR_HEAD_REF: ${{ github.event.pull_request.head.ref }} PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }} LANGUAGE: ${{ matrix.language }} - BUILD_MODE: ${{ matrix.build-mode }} RUN_ATTEMPT: ${{ github.run_attempt }} - REQUIRED_RUN_ID: ${{ github.run_id }} - REQUIRED_JOB_ID: ${{ job.check_run_id }} run: | set -euo pipefail live_pr="$(gh api "repos/${TARGET_REPOSITORY}/pulls/${PR_NUMBER}")" @@ -219,43 +212,6 @@ jobs: echo "::error::Exact CodeQL job was rerun without an authenticated terminal verdict." exit 1 fi - if ! [[ "$REQUIRED_RUN_ID" =~ ^[1-9][0-9]*$ ]] || - ! [[ "$REQUIRED_JOB_ID" =~ ^[1-9][0-9]*$ ]]; then - echo "::error::CodeQL dispatch requires canonical current run and job ids." - exit 1 - fi - - if [ -z "${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-}" ] || [ -z "${ACTIONS_ID_TOKEN_REQUEST_URL:-}" ]; then - echo "::error::CodeQL scan dispatch requires GitHub OIDC." - exit 1 - fi - separator='&' - [[ "$ACTIONS_ID_TOKEN_REQUEST_URL" == *\?* ]] || separator='?' - oidc_token="$(curl -fsS -H "Authorization: Bearer ${ACTIONS_ID_TOKEN_REQUEST_TOKEN}" "${ACTIONS_ID_TOKEN_REQUEST_URL}${separator}audience=${OIDC_AUDIENCE}" | jq -r '.value // empty')" - if [ -z "$oidc_token" ]; then - echo "::error::CodeQL scan dispatch could not obtain its OIDC token." - exit 1 - fi - app_token="$(curl -fsS -X POST -H "Authorization: Bearer ${oidc_token}" "${OPENCODE_API_BASE_URL}/exchange_github_app_token" | jq -r '.token // empty')" - if [ -z "$app_token" ]; then - echo "::error::CodeQL scan dispatch could not obtain its repository-scoped app token." - exit 1 - fi - echo "::add-mask::$app_token" - jq -cn \ - --arg target_repository "$TARGET_REPOSITORY" \ - --arg pr_number "$PR_NUMBER" \ - --arg pr_base_ref "$PR_BASE_REF" \ - --arg pr_base_sha "$PR_BASE_SHA" \ - --arg pr_head_ref "$PR_HEAD_REF" \ - --arg pr_head_sha "$PR_HEAD_SHA" \ - --arg language "$LANGUAGE" \ - --arg build_mode "$BUILD_MODE" \ - --arg required_run_id "$REQUIRED_RUN_ID" \ - --arg required_job_id "$REQUIRED_JOB_ID" \ - --arg required_language "$LANGUAGE" \ - '{event_type:"codeql-scan",client_payload:{target_repository:$target_repository,pr_number:$pr_number,pr_base_ref:$pr_base_ref,pr_base_sha:$pr_base_sha,pr_head_ref:$pr_head_ref,pr_head_sha:$pr_head_sha,matrix:[{language:$language,"build-mode":$build_mode}],required_run_id:$required_run_id,required_job_id:$required_job_id,required_language:$required_language}}' | - GH_TOKEN="$app_token" gh api -X POST repos/ContextualWisdomLab/.github/dispatches --input - echo "verdict=pending" >>"$GITHUB_OUTPUT" - name: Release runner or enforce current-head CodeQL verdict @@ -287,3 +243,154 @@ jobs: exit 1 ;; esac + + dispatch-current-head: + name: Dispatch current-head CodeQL scan + needs: [detect-languages, analyze-head] + if: >- + always() + && github.event.action != 'closed' + && github.event.pull_request.state != 'closed' + && github.run_attempt == 1 + && needs.detect-languages.result == 'success' + && needs.detect-languages.outputs.code == 'true' + runs-on: ubuntu-24.04 + permissions: + contents: read + id-token: write + actions: read + steps: + - name: Dispatch current-head CodeQL scan + env: + GH_TOKEN: ${{ github.token }} + OIDC_AUDIENCE: opencode-github-action + OPENCODE_API_BASE_URL: https://api.opencode.ai + TARGET_REPOSITORY: ${{ github.event.pull_request.base.repo.full_name || github.repository }} + PR_NUMBER: ${{ github.event.pull_request.number }} + PR_BASE_REF: ${{ github.event.pull_request.base.ref }} + PR_BASE_SHA: ${{ github.event.pull_request.base.sha }} + PR_HEAD_REF: ${{ github.event.pull_request.head.ref }} + PR_HEAD_SHA: ${{ github.event.pull_request.head.sha }} + REQUIRED_RUN_ID: ${{ github.run_id }} + MATRIX: ${{ needs.detect-languages.outputs.matrix }} + run: | + set -euo pipefail + live_pr="$(gh api "repos/${TARGET_REPOSITORY}/pulls/${PR_NUMBER}")" + live_head="$(printf '%s' "$live_pr" | jq -r '.head.sha // empty')" + live_state="$(printf '%s' "$live_pr" | jq -r 'if (.state | type) == "string" then .state else empty end')" + if [ -z "$live_head" ] || [ -z "$live_state" ]; then + echo "::error::Could not validate live pull request state before CodeQL dispatch." + exit 1 + fi + if [ "$live_state" = "closed" ]; then + echo "PR is closed on the live exact head; a current-head CodeQL scan is not requested." + exit 0 + fi + if [ "${live_head,,}" != "${PR_HEAD_SHA,,}" ]; then + echo "Pull request head moved on the live open PR; a fresh dispatch will fire for the current head." + exit 0 + fi + if ! [[ "$REQUIRED_RUN_ID" =~ ^[1-9][0-9]*$ ]]; then + echo "::error::CodeQL dispatch requires a canonical current run id." + exit 1 + fi + + include_json="$(printf '%s' "$MATRIX" | jq -c '.include // empty' 2>/dev/null || true)" + if [ -z "$include_json" ] || + [ "$(printf '%s' "$include_json" | jq 'type == "array" and length >= 1')" != "true" ]; then + echo "::error::CodeQL coordinator received an empty or malformed language matrix." + exit 1 + fi + + jobs_json="$( + gh api --paginate "repos/${GITHUB_REPOSITORY}/actions/runs/${REQUIRED_RUN_ID}/jobs" --jq '.jobs[]' | + jq -s '{jobs:.}' + )" + required_jobs='[]' + while IFS= read -r entry; do + language="$(printf '%s' "$entry" | jq -r '.language // empty')" + expected_name="CodeQL compatibility analysis (${language})" + job_id="$(printf '%s' "$jobs_json" | jq -r --arg name "$expected_name" ' + [.jobs[]? | select(.name == $name) | .id] + | if length == 1 then .[0] | tostring else empty end + ')" + if ! [[ "$job_id" =~ ^[1-9][0-9]*$ ]]; then + echo "::error::CodeQL coordinator missing current-head job id for ${language}." + exit 1 + fi + required_jobs="$( + jq -c --arg language "$language" --argjson job_id "$job_id" \ + '. + [{language:$language,job_id:$job_id}]' <<<"$required_jobs" + )" + done < <(printf '%s' "$include_json" | jq -c '.[]') + + statuses="$(gh api "repos/${TARGET_REPOSITORY}/commits/${PR_HEAD_SHA}/statuses")" + pending_matrix='[]' + while IFS= read -r entry; do + language="$(printf '%s' "$entry" | jq -r '.language // empty')" + verdict_state="$(printf '%s' "$statuses" | jq -r --arg ctx "codeql-dispatch/${language}" ' + [ + .[] + | select(.context == $ctx) + | select( + (.creator.login // "" | ascii_downcase) as $creator + | $creator == "opencode-agent" or $creator == "opencode-agent[bot]" + ) + ] + | first // {} | .state // empty + ')" + case "$verdict_state" in + success|failure|error) + echo "Found authenticated current-head CodeQL verdict for ${language}: ${verdict_state}." + ;; + *) + pending_matrix="$(jq -c --argjson entry "$entry" '. + [$entry]' <<<"$pending_matrix")" + ;; + esac + done < <(printf '%s' "$include_json" | jq -c '.[]') + + if [ "$(printf '%s' "$pending_matrix" | jq 'length')" -eq 0 ]; then + echo "All detected CodeQL languages already have authenticated terminal verdicts; skipping dispatch." + exit 0 + fi + + required_jobs="$( + jq -nc --argjson pending "$pending_matrix" --argjson jobs "$required_jobs" ' + ($pending | map(.language)) as $langs + | [$jobs[] | select(.language as $l | $langs | index($l) != null)] + ' + )" + if [ "$(printf '%s' "$required_jobs" | jq 'length')" != "$(printf '%s' "$pending_matrix" | jq 'length')" ]; then + echo "::error::CodeQL coordinator could not bind a job id to every pending language." + exit 1 + fi + + if [ -z "${ACTIONS_ID_TOKEN_REQUEST_TOKEN:-}" ] || [ -z "${ACTIONS_ID_TOKEN_REQUEST_URL:-}" ]; then + echo "::error::CodeQL scan dispatch requires GitHub OIDC." + exit 1 + fi + separator='&' + [[ "$ACTIONS_ID_TOKEN_REQUEST_URL" == *\?* ]] || separator='?' + oidc_token="$(curl -fsS -H "Authorization: Bearer ${ACTIONS_ID_TOKEN_REQUEST_TOKEN}" "${ACTIONS_ID_TOKEN_REQUEST_URL}${separator}audience=${OIDC_AUDIENCE}" | jq -r '.value // empty')" + if [ -z "$oidc_token" ]; then + echo "::error::CodeQL scan dispatch could not obtain its OIDC token." + exit 1 + fi + app_token="$(curl -fsS -X POST -H "Authorization: Bearer ${oidc_token}" "${OPENCODE_API_BASE_URL}/exchange_github_app_token" | jq -r '.token // empty')" + if [ -z "$app_token" ]; then + echo "::error::CodeQL scan dispatch could not obtain its repository-scoped app token." + exit 1 + fi + echo "::add-mask::$app_token" + jq -cn \ + --arg target_repository "$TARGET_REPOSITORY" \ + --arg pr_number "$PR_NUMBER" \ + --arg pr_base_ref "$PR_BASE_REF" \ + --arg pr_base_sha "$PR_BASE_SHA" \ + --arg pr_head_ref "$PR_HEAD_REF" \ + --arg pr_head_sha "$PR_HEAD_SHA" \ + --argjson matrix "$pending_matrix" \ + --arg required_run_id "$REQUIRED_RUN_ID" \ + --argjson required_jobs "$required_jobs" \ + '{event_type:"codeql-scan",client_payload:{target_repository:$target_repository,pr_number:$pr_number,pr_base_ref:$pr_base_ref,pr_base_sha:$pr_base_sha,pr_head_ref:$pr_head_ref,pr_head_sha:$pr_head_sha,matrix:$matrix,required_run_id:$required_run_id,required_jobs:$required_jobs}}' | + GH_TOKEN="$app_token" gh api -X POST repos/ContextualWisdomLab/.github/dispatches --input - diff --git a/.github/workflows/codeql-scan-dispatch.yml b/.github/workflows/codeql-scan-dispatch.yml index 1ad28f3086..521ceeb167 100644 --- a/.github/workflows/codeql-scan-dispatch.yml +++ b/.github/workflows/codeql-scan-dispatch.yml @@ -26,8 +26,7 @@ concurrency: group: >- codeql-scan-dispatch-${{ github.event.client_payload.target_repository || github.repository }}-${{ - github.event.client_payload.pr_number || github.run_id }}-${{ - github.event.client_payload.required_language || 'unknown-language' }} + github.event.client_payload.pr_number || github.run_id }} cancel-in-progress: true permissions: @@ -50,8 +49,7 @@ jobs: head_sha: ${{ steps.validate.outputs.head_sha }} matrix: ${{ steps.validate.outputs.matrix }} required_run_id: ${{ steps.validate.outputs.required_run_id }} - required_job_id: ${{ steps.validate.outputs.required_job_id }} - required_language: ${{ steps.validate.outputs.required_language }} + required_jobs: ${{ steps.validate.outputs.required_jobs }} steps: - name: Exchange OpenCode app token for target repository metadata reads id: metadata_read_app_token @@ -146,16 +144,33 @@ jobs: SUPPLIED_BASE_SHA: ${{ github.event.client_payload.pr_base_sha || '' }} SUPPLIED_HEAD_REF: ${{ github.event.client_payload.pr_head_ref || '' }} SUPPLIED_HEAD_SHA: ${{ github.event.client_payload.pr_head_sha || '' }} - SUPPLIED_MATRIX: ${{ github.event.client_payload.matrix || '' }} + SUPPLIED_MATRIX: ${{ toJSON(github.event.client_payload.matrix) }} SUPPLIED_REQUIRED_RUN_ID: ${{ github.event.client_payload.required_run_id || '' }} + SUPPLIED_REQUIRED_JOBS: ${{ toJSON(github.event.client_payload.required_jobs) }} + # Pre-#2008 payloads still send scalar required_job_id + + # required_language with a one-shard matrix. Synthesize + # required_jobs from those only when the array is empty. SUPPLIED_REQUIRED_JOB_ID: ${{ github.event.client_payload.required_job_id || '' }} SUPPLIED_REQUIRED_LANGUAGE: ${{ github.event.client_payload.required_language || '' }} run: | set -euo pipefail - if [ -z "$ALLOWED_DISPATCH_ACTOR" ] || - [ "$DISPATCH_ACTOR" != "$ALLOWED_DISPATCH_ACTOR" ] || - [ "$DISPATCH_SENDER" != "$ALLOWED_DISPATCH_ACTOR" ]; then - printf '::error::repository_dispatch authorization rejected actor=%s sender=%s because both must match the configured scheduler identity.\n' "${DISPATCH_ACTOR:-}" "${DISPATCH_SENDER:-}" + # ALLOWED_DISPATCH_ACTOR is a comma-separated allowlist shared with + # opencode-review-dispatch.yml and pr-review-fix-scheduler.yml; all + # three parse it the same way. Actor AND sender must both equal the + # SAME listed identity, and an empty allowlist admits nothing. + actor_allowed=0 + IFS=',' read -r -a allowed_dispatch_actors <<<"$ALLOWED_DISPATCH_ACTOR" + for allowed_actor in "${allowed_dispatch_actors[@]}"; do + allowed_actor="${allowed_actor//[[:space:]]/}" + if [ -n "$allowed_actor" ] && + [ "$DISPATCH_ACTOR" = "$allowed_actor" ] && + [ "$DISPATCH_SENDER" = "$allowed_actor" ]; then + actor_allowed=1 + break + fi + done + if [ "$actor_allowed" -ne 1 ]; then + printf '::error::repository_dispatch authorization rejected actor=%s sender=%s because both must match one configured scheduler identity.\n' "${DISPATCH_ACTOR:-}" "${DISPATCH_SENDER:-}" exit 1 fi printf 'Authorized repository_dispatch actor=%s sender=%s target=%s.\n' "$DISPATCH_ACTOR" "$DISPATCH_SENDER" "$TARGET_REPOSITORY" @@ -167,19 +182,45 @@ jobs: fi matrix_json="$(printf '%s' "$SUPPLIED_MATRIX" | jq -c '.' 2>/dev/null || true)" + jobs_json="$(printf '%s' "$SUPPLIED_REQUIRED_JOBS" | jq -c '.' 2>/dev/null || true)" if [ -z "$matrix_json" ] || - [ "$(printf '%s' "$matrix_json" | jq 'type == "array" and length == 1')" != "true" ] || - [ "$(printf '%s' "$matrix_json" | jq '[.[] | select((.language | type == "string") and (.language | test("^[a-z0-9-]+$")) and (."build-mode" | type == "string"))] | length == ($ARGS.positional[0] | tonumber)' --args "$(printf '%s' "$matrix_json" | jq 'length')")" != "true" ]; then - printf '::error::CodeQL scan dispatch matrix must contain exactly one valid language/build-mode shard. matrix=%s\n' "${SUPPLIED_MATRIX:-}" + [ "$(printf '%s' "$matrix_json" | jq 'type == "array" and length >= 1')" != "true" ] || + [ "$(printf '%s' "$matrix_json" | jq '[.[] | select((.language | type == "string") and (.language | test("^[a-z0-9-]+$")) and (."build-mode" | type == "string"))] | length == ($ARGS.positional[0] | tonumber)' --args "$(printf '%s' "$matrix_json" | jq 'length')")" != "true" ] || + [ "$(printf '%s' "$matrix_json" | jq '(map(.language) | unique | length) == (map(.language) | length)')" != "true" ]; then + printf '::error::CodeQL scan dispatch matrix must contain at least one valid language/build-mode shard with unique languages. matrix=%s\n' "${SUPPLIED_MATRIX:-}" exit 1 fi - matrix_language="$(printf '%s' "$matrix_json" | jq -r '.[0].language // empty')" - if ! [[ "$SUPPLIED_REQUIRED_RUN_ID" =~ ^[1-9][0-9]*$ ]] || - ! [[ "$SUPPLIED_REQUIRED_JOB_ID" =~ ^[1-9][0-9]*$ ]] || - [ "$SUPPLIED_REQUIRED_LANGUAGE" != "$matrix_language" ]; then - printf '::error::CodeQL wake identity is missing, non-canonical, or does not match the dispatched language.\n' + if [ -z "$jobs_json" ] || + [ "$(printf '%s' "$jobs_json" | jq '(. == null) or (. == [])')" = "true" ]; then + if [ "$(printf '%s' "$matrix_json" | jq 'type == "array" and length == 1')" = "true" ] && + [[ "$SUPPLIED_REQUIRED_JOB_ID" =~ ^[1-9][0-9]*$ ]] && + [ "$SUPPLIED_REQUIRED_LANGUAGE" = "$(printf '%s' "$matrix_json" | jq -r '.[0].language // empty')" ]; then + jobs_json="$(jq -nc --arg language "$SUPPLIED_REQUIRED_LANGUAGE" --arg job_id "$SUPPLIED_REQUIRED_JOB_ID" '[{language: $language, job_id: ($job_id | tonumber)}]')" + fi + fi + if [ -z "$jobs_json" ] || + [ "$(jq -n --argjson matrix "$matrix_json" --argjson jobs "$jobs_json" ' + ($jobs | type == "array") + and (($jobs | length) == ($matrix | length)) + and ($jobs | all( + (.language | type == "string") + and (.language | test("^[a-z0-9-]+$")) + and ( + ((.job_id | type == "number") and (.job_id == (.job_id | floor)) and (.job_id >= 1)) + or ((.job_id | type == "string") and (.job_id | test("^[1-9][0-9]*$"))) + ) + )) + and (($jobs | map(.language) | sort) == ($matrix | map(.language) | sort)) + and (($jobs | map(.language) | unique | length) == ($jobs | length)) + ')" != "true" ]; then + printf '::error::CodeQL wake identity is missing, non-canonical, or does not match the dispatched languages one-to-one.\n' exit 1 fi + if ! [[ "$SUPPLIED_REQUIRED_RUN_ID" =~ ^[1-9][0-9]*$ ]]; then + printf '::error::CodeQL wake identity is missing, non-canonical, or does not match the dispatched languages one-to-one.\n' + exit 1 + fi + jobs_json="$(printf '%s' "$jobs_json" | jq -c 'map({language, job_id: (.job_id | tonumber)})')" pull_request_json="$(gh api "repos/${TARGET_REPOSITORY}/pulls/${PR_NUMBER}")" live_base_repository="$(jq -r '.base.repo.full_name // empty' <<<"$pull_request_json")" @@ -222,8 +263,9 @@ jobs: printf '%s\n' "$matrix_json" echo "EOF" printf 'required_run_id=%s\n' "$SUPPLIED_REQUIRED_RUN_ID" - printf 'required_job_id=%s\n' "$SUPPLIED_REQUIRED_JOB_ID" - printf 'required_language=%s\n' "$SUPPLIED_REQUIRED_LANGUAGE" + echo "required_jobs<>"$GITHUB_OUTPUT" printf 'Validated current live metadata for %s#%s: base=%s/%s head=%s/%s.\n' "$TARGET_REPOSITORY" "$PR_NUMBER" "$live_base_ref" "$live_base_sha" "$live_head_ref" "$live_head_sha" @@ -471,16 +513,16 @@ jobs: && needs.validate-dispatch.outputs.target_repository != '' && needs.validate-dispatch.outputs.pr_number != '' && needs.validate-dispatch.outputs.head_sha != '' - && github.event.client_payload.required_run_id != '' - && github.event.client_payload.required_job_id != '' + && needs.validate-dispatch.outputs.required_run_id != '' + && needs.validate-dispatch.outputs.required_jobs != '' env: GH_TOKEN: ${{ needs.validate-dispatch.outputs.target_repository == github.repository && github.token || secrets.PR_REVIEW_MERGE_TOKEN || secrets.OPENCODE_APPROVE_TOKEN }} TARGET_REPOSITORY: ${{ needs.validate-dispatch.outputs.target_repository }} PR_NUMBER: ${{ needs.validate-dispatch.outputs.pr_number }} HEAD_SHA: ${{ needs.validate-dispatch.outputs.head_sha }} REQUIRED_RUN_ID: ${{ needs.validate-dispatch.outputs.required_run_id }} - REQUIRED_JOB_ID: ${{ needs.validate-dispatch.outputs.required_job_id }} - REQUIRED_LANGUAGE: ${{ needs.validate-dispatch.outputs.required_language }} + REQUIRED_JOBS: ${{ needs.validate-dispatch.outputs.required_jobs }} + REQUIRED_LANGUAGE: ${{ matrix.language }} WAKE_TOKEN_SOURCE: ${{ needs.validate-dispatch.outputs.target_repository == github.repository && 'github-token' || secrets.PR_REVIEW_MERGE_TOKEN != '' && 'PR_REVIEW_MERGE_TOKEN' || secrets.OPENCODE_APPROVE_TOKEN != '' && 'OPENCODE_APPROVE_TOKEN' || 'unavailable' }} run: | set -euo pipefail @@ -488,6 +530,10 @@ jobs: echo "::error::Actions-capable CodeQL wake credential is unavailable." exit 1 fi + REQUIRED_JOB_ID="$(printf '%s' "$REQUIRED_JOBS" | jq -r --arg lang "$REQUIRED_LANGUAGE" ' + [.[] | select(.language == $lang) | .job_id | tostring] + | if length == 1 and (.[0] | test("^[1-9][0-9]*$")) then .[0] else empty end + ')" if ! [[ "$REQUIRED_RUN_ID" =~ ^[1-9][0-9]*$ ]] || ! [[ "$REQUIRED_JOB_ID" =~ ^[1-9][0-9]*$ ]] || ! [[ "$REQUIRED_LANGUAGE" =~ ^[a-z0-9-]+$ ]]; then diff --git a/.github/workflows/noema-review.yml b/.github/workflows/noema-review.yml index 21ea967201..f8ab55c896 100644 --- a/.github/workflows/noema-review.yml +++ b/.github/workflows/noema-review.yml @@ -688,6 +688,17 @@ jobs: echo "::notice::Noema model phase produced no publishable envelope; publication is skipped." fi + - name: Upload contextual-orchestrator sidecar evidence on failure + if: failure() && env.PR_NUMBER != '' + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + with: + name: noema-sidecar-evidence + path: | + strix_runs/contextual-orchestrator-sidecar.stderr.log + strix_runs/contextual-orchestrator-preflight.json + if-no-files-found: ignore + retention-days: 5 + - name: Refresh repository-scoped Noema GitHub App token for publication if: env.PR_NUMBER != '' && steps.noema_prepare.outputs.prepared == 'true' && steps.noema_credential.outputs.source == 'github-app' id: noema_github_app_publication_token diff --git a/.github/workflows/opencode-review-dispatch.yml b/.github/workflows/opencode-review-dispatch.yml index ade10b37c4..d86497b3f4 100644 --- a/.github/workflows/opencode-review-dispatch.yml +++ b/.github/workflows/opencode-review-dispatch.yml @@ -11,6 +11,28 @@ on: repository_dispatch: types: [opencode-review] +concurrency: + # Workflow-level admission, for the same reason strix.yml, noema-review.yml and + # opencode-review.yml carry theirs at this level: a job-level group is never + # evaluated while the whole run waits behind the organization job ceiling, so + # superseded dispatches for one pull request coalesce only after each of them + # has already been allocated a runner. Measured on 2026-09-06: of the five + # dispatch runs that passed `validate-pr-metadata`, four were rejected hours + # later by `opencode-review`'s privileged metadata check because the head had + # moved while they queued (runs 34002473295, 34010256951, 34015973300, + # 34016922761) -- each after `coverage-source-tree` and `coverage-evidence` + # had run. Cancelling the superseded run at creation returns that slot instead + # of spending it to discover the review's subject no longer exists. + # + # The key is the target pull request, matching the job-level group below and + # codeql-scan-dispatch.yml's workflow-level group; `github.run_id` keeps runs + # without a payload in their own groups rather than colliding. + group: >- + opencode-review-dispatch-${{ + github.event.client_payload.target_repository || github.repository }}-${{ + github.event.client_payload.pr_number || github.run_id }} + cancel-in-progress: true + permissions: contents: read @@ -124,10 +146,26 @@ jobs: run: | set -euo pipefail if [ "$EVENT_NAME" = "repository_dispatch" ]; then - if [ -z "$ALLOWED_DISPATCH_ACTOR" ] || - [ "$DISPATCH_ACTOR" != "$ALLOWED_DISPATCH_ACTOR" ] || - [ "$DISPATCH_SENDER" != "$ALLOWED_DISPATCH_ACTOR" ]; then - printf '::error::repository_dispatch authorization rejected actor=%s sender=%s because both must match the configured scheduler identity.\n' "${DISPATCH_ACTOR:-}" "${DISPATCH_SENDER:-}" + # More than one trusted identity dispatches this workflow: + # opencode-review.yml sends through the OpenCode GitHub App + # (opencode-agent[bot]) while pr-review-merge-scheduler.yml sends + # with its own token chain. Accept a comma-separated allowlist, + # parsed exactly like ALLOWED_DISPATCH_TARGETS below. The actor + # AND the sender must both equal the SAME allowlisted identity; + # an empty allowlist admits nothing. + actor_allowed=0 + IFS=',' read -r -a allowed_dispatch_actors <<<"$ALLOWED_DISPATCH_ACTOR" + for allowed_actor in "${allowed_dispatch_actors[@]}"; do + allowed_actor="${allowed_actor//[[:space:]]/}" + if [ -n "$allowed_actor" ] && + [ "$DISPATCH_ACTOR" = "$allowed_actor" ] && + [ "$DISPATCH_SENDER" = "$allowed_actor" ]; then + actor_allowed=1 + break + fi + done + if [ "$actor_allowed" -ne 1 ]; then + printf '::error::repository_dispatch authorization rejected actor=%s sender=%s because both must match one configured scheduler identity.\n' "${DISPATCH_ACTOR:-}" "${DISPATCH_SENDER:-}" exit 1 fi @@ -5598,6 +5636,24 @@ jobs: fi finding_index=$((finding_index + 1)) + + # The gate emits a second token for the class it can tell apart: + # STRIX_SANDBOX_UNAVAILABLE means Strix's own sandbox container + # never reached its Caido proxy, so the run died before the + # gateway served anything. Reporting that as "the gateway or its + # provider pool was unavailable" sends the reader to the wrong + # component -- the misattribution #1953 fixed in the gate itself, + # which survived here because this text was fixed for every + # STRIX_PROVIDER_UNAVAILABLE line. + if grep -q "STRIX_SANDBOX_UNAVAILABLE" "$strix_evidence_file"; then + printf '### %s. HIGH %s:%s - Strix sandbox bootstrap blocked current-head security evidence\n' "$finding_index" "$path" "$line" + printf -- '- Problem: Strix failed before producing vulnerability reports. The failed log reported STRIX_SANDBOX_UNAVAILABLE, which the gate emits when the run ended in Strix sandbox bootstrap after its bounded sandbox-specific retries.\n' + printf -- '- Root cause: Strix sandbox container did not reach its Caido proxy on 127.0.0.1, so the scan ended before any Vulnerability Report window was produced. This verdict names Strix sandbox, not the contextual-orchestrator gateway, and there is no application source line to patch from this evidence.\n' + printf -- '- Fix: Do not approve from this failed scan. Re-run Strix; the sandbox bootstrap is a startup race and the gate already retries it once. Do not change gateway or provider configuration on the strength of this finding.\n' + printf -- '- Regression test: Keep the gate emitting STRIX_SANDBOX_UNAVAILABLE for sandbox bootstrap failures and keep this consumer reading it, so a sandbox outage is never reported as a gateway outage.\n\n' + return 0 + fi + printf '### %s. HIGH %s:%s - Contextual-orchestrator provider availability blocked current-head security evidence\n' "$finding_index" "$path" "$line" printf -- '- Problem: Strix failed before producing vulnerability reports. The failed log reported LLM CONNECTION FAILED, RateLimitError or Too many requests, budget-limit output, gateway exhaustion, and Configured model and fallback models were unavailable.\n' printf -- '- Root cause: The contextual-orchestrator gateway or its discovered provider pool was unavailable for this run; no Strix Vulnerability Report window was produced, so there is no application source line to patch from this evidence.\n' diff --git a/.github/workflows/pr-review-fix-scheduler.yml b/.github/workflows/pr-review-fix-scheduler.yml index dc9c7415ca..0c0c05c151 100644 --- a/.github/workflows/pr-review-fix-scheduler.yml +++ b/.github/workflows/pr-review-fix-scheduler.yml @@ -153,9 +153,22 @@ jobs: # Only the direct repository_dispatch surface needs sender binding; # cross-repository invocations still pass the configured allowlist. if [ "$EVENT_NAME" = "repository_dispatch" ]; then - if [ -z "$ALLOWED_DISPATCH_ACTOR" ] || - [ "$DISPATCH_ACTOR" != "$ALLOWED_DISPATCH_ACTOR" ] || - [ "$DISPATCH_SENDER" != "$ALLOWED_DISPATCH_ACTOR" ]; then + # ALLOWED_DISPATCH_ACTOR is a comma-separated allowlist shared with + # opencode-review-dispatch.yml and codeql-scan-dispatch.yml; all + # three parse it the same way. Actor AND sender must both equal the + # SAME listed identity, and an empty allowlist admits nothing. + actor_allowed=0 + IFS=',' read -r -a allowed_dispatch_actors <<<"$ALLOWED_DISPATCH_ACTOR" + for allowed_actor in "${allowed_dispatch_actors[@]}"; do + allowed_actor="${allowed_actor//[[:space:]]/}" + if [ -n "$allowed_actor" ] && + [ "$DISPATCH_ACTOR" = "$allowed_actor" ] && + [ "$DISPATCH_SENDER" = "$allowed_actor" ]; then + actor_allowed=1 + break + fi + done + if [ "$actor_allowed" -ne 1 ]; then echo "::error::Scheduler repository dispatch actor or sender is unauthorized." exit 1 fi diff --git a/CHANGELOG.md b/CHANGELOG.md index 06b3dba425..bf192f6a9e 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,60 @@ +### Failed-check finding names the Strix sandbox instead of the gateway + +- `opencode-review-dispatch.yml`'s `emit_strix_provider_failure_finding` rendered one fixed finding for every `STRIX_PROVIDER_UNAVAILABLE` line, whose Root cause read "The contextual-orchestrator gateway or its discovered provider pool was unavailable for this run". `#1953` had just given the Strix sandbox bootstrap failure its own second verdict token (`STRIX_SANDBOX_UNAVAILABLE`) precisely because that attribution is wrong for it -- the sandbox container never reaches its Caido proxy, so the run dies before the gateway serves anything -- and this consumer re-applied the wrong attribution one step downstream, into the review findings and the failure census. The emitter now branches on the second token: a sandbox verdict gets a finding that names Strix's sandbox, says the verdict does not name the gateway, and tells the reader not to change gateway or provider configuration on its strength. A `STRIX_PROVIDER_UNAVAILABLE` line without the token keeps its existing text verbatim, so the gateway class has no regression surface. No test covered this finding text at all before (`gateway or its discovered provider pool` matched nothing under `tests/`); `tests/test_opencode_dispatch_strix_sandbox_finding.py` now runs the production emitter from the published run block and pins both directions plus the no-signal case. Refs #1953, #1935. + +### Strix gate keeps a recovered transient model error from failing a completed scan + +- `scripts/ci/strix_quick_gate.sh` `sanitize_known_strix_report_warnings` now also strips strix-agent's `strix.core.execution: transient model/provider error for ; replaying turn (attempt n/m, backoff Ns): …` WARNING lines before the report failure-signal scan. strix-agent 1.5.3 (`strix/core/execution.py:763`) emits that line only inside its bounded transient-retry branch, immediately before the replay runs; an exhausted retry logs `agent run failed for …; marking failed` at ERROR with a traceback and exits non-zero, and both of those still fail the gate. Observed on `.github#1689` run `34013778497`: a completed 63-minute scan (`run.json` `completed`, SARIF 0 results, attempt exit 0) was failed closed as `STRIX_PROVIDER_UNAVAILABLE … exhausted` on three such warnings, and the scheduler then dispatched another same-head scan. The pattern is anchored before the exception repr so the same class keeps matching after a gateway pin advance changes the exception type; re-verify the message format on every strix-agent bump. One documented side effect: when a provider's 503 body appears only inside a retry line's exception repr, removing that line also removes the only text `has_strix_report_provider_failure_signal` would have matched in the report log, which can make `is_model_retryable_error`'s report-only branch read a genuine outage as non-retryable. The direction is fail-closed (an exhausted retry still exits non-zero with its ERROR and traceback retained), and with a contextual-orchestrator primary the verdict branch answers before that classifier is consulted, so no path today changes its outcome; if fallback-model classification is ever wanted for a non-gateway primary, read the pre-sanitize attempt copy that `preserve_attempt_log` already keeps. Tests: `tests/test_strix_recovered_transient_sanitizer.py`. + +### Review sidecar preflight postpones a rate-limited account's candidates instead of banning them + +- `_preflight_review_agents` no longer ends its walk when every credential account has answered 429 twice in a row. A candidate set aside by `REVIEW_PREFLIGHT_ACCOUNT_SKIP_AFTER_429` is postponed to the end of the walk, and once the first pass ends with the readiness target unmet and probe budget left, the postponed candidates are probed in catalog order until the sixteen-probe budget is spent. On 2026-09-06 five sidecar boots whose probes began between 07:24Z and 08:05Z read `probed 6 / skipped 18 / ready 0` and failed closed: `.github` run 34016207820's six probes across all three accounts were refused 429 between 07:49:35.111Z and 07:49:35.767Z, so the rule set every account aside on two same-account requests about 310 ms apart and gave up with ten of sixteen probes unspent — and because deferral needs one ready route, nothing was served either; `keyverse#143`'s 08:20Z `noema-review` repeated it in a second repository (six probes, 369 ms, all 429). The pools are not dead in those minutes: run 34016093772 was inside its own preflight during that burst, and its `llama-3.2-11b` probes on the same two NVIDIA keys answered ready at 07:50:58.7Z and 07:50:59.0Z, 84 seconds after those keys refused. Whether the unspent probes would have found a ready route inside a burst is unmeasured and is not claimed; the change is justified by ending a walk under target with the budget in hand. Of the fourteen boots that ran the merged rule, eight spend all sixteen probes in the first pass and are unchanged; one (`argos` 34014143870, a serving boot at `12 / 12 / 3`) exhausts its candidates under budget and now gains a second pass, as do the five burst boots. The cost is stated rather than assumed: a refused probe costs about 120 ms, a silent one up to the 90 s receive timeout, and the postponed tail holds both (`google/gemma-4-31b-it` answered `TimeoutError` in 15 of the 19 probes that reached it), so the worst case adds up to about 15 minutes to a boot that still fails and the two-stage auto path goes from 8 to 24 requests including the priced stage. The second pass never draws on the shared escalation budget, so the priced fallback keeps the escalations it had. The report gains `postponed_probed_count` (`skipped_count` now counts postponed candidates the budget never reached) and, on a refused probe, `retry_after_s` when the response carried a whole-seconds `Retry-After` header — evidence only, nothing waits on it, so the next census can decide whether a delayed second pass is worth proposing. ADR-0029 is amended. Refs #1948, #1949. + +### Superseded OpenCode review dispatches coalesce before they take a runner + +- `opencode-review-dispatch.yml` now carries a workflow-level `concurrency` group keyed by the dispatched pull request (`opencode-review-dispatch--`, `cancel-in-progress: true`), matching `codeql-scan-dispatch.yml`'s workflow-level group and the rationale already recorded in `strix.yml`, `noema-review.yml` and `opencode-review.yml`: a job-level group is never evaluated while the whole run waits behind the organization job ceiling. The workflow kept its group only on the long `opencode-review-target` job, so two dispatches for one pull request each queued for hours and each was allocated a runner before the older one could be discarded. Measured on 2026-09-06: four of the five dispatch runs that passed `validate-pr-metadata` were rejected hours later by the privileged metadata check because the head had moved while they queued (runs `34002473295`, `34010256951`, `34015973300`, `34016922761`), each after `coverage-source-tree` and `coverage-evidence` had run. The privileged check itself is unchanged -- it rejected exactly what it should; what changes is that the superseded run is now cancelled at creation instead of spending a slot to discover its subject moved. + +### Strix gate names the sandbox bootstrap failure and retries it once + +- `scripts/ci/strix_quick_gate.sh` gives the Caido sandbox bootstrap race (`loginAsGuest failed after 10 attempts` on `127.0.0.1:`, upstream usestrix/strix#1036/#1037/#1056) its own bounded same-model retry budget, `STRIX_SANDBOX_BOOTSTRAP_RETRIES` (default 1), drawn on top of `STRIX_TRANSIENT_RETRY_PER_MODEL`. That budget is 0 in production because the gateway owns model failover, so the documented sandbox retry never ran: `argos` Strix run 34013128112 (2026-09-06) shows one attempt, `Docker image ready`, the proxy never reachable, Strix exiting after 240 s -- while the sidecar reported four ready and four deferred routes that were never called. The budget is charged in the same branch that grants the attempt, so a log matching the sandbox class together with a gateway class cannot extend the loop without charging it (caught by adversarial review of the first draft). The primary-scan verdict for that class now reads `STRIX_PROVIDER_UNAVAILABLE: STRIX_SANDBOX_UNAVAILABLE: the last Strix attempt ended in the sandbox bootstrap (...) after N sandbox-specific same-model retries (budget B); this verdict names Strix's sandbox, not the LLM gateway.` instead of `orchestrator/free exhausted`, stating only what the gate observed; the leading token is unchanged so the workflow's finding-free classification and its tests are untouched, and the second token lets the review census split sandbox outages from gateway ones (two of six recent Strix artifacts were this class). Refs #1948. + +### Review sidecar preflight fills the served set lazily to a readiness target + +- `_preflight_review_agents` now treats the catalog as a candidate list, probed in its tier-then-round-robin order until `REVIEW_PREFLIGHT_TARGET_READY = 8` routes are ready or `REVIEW_PREFLIGHT_MAX_PROBES = 16` probes are spent (ADR-0029). The two-stage candidate budget rises from 12 to 24 (`REVIEW_PREFLIGHT_MAX_TOTAL_ROUTES`; auto pool split 16 free / 8 priced; the sidecar's and the launcher's `ORCHESTRATOR_CATALOG_LIMIT` defaults follow), the production `free` pool lists all 24 (12 before), and the per-account cap stays 8. An account that answers 429 to `REVIEW_PREFLIGHT_ACCOUNT_SKIP_AFTER_429 = 2` consecutive probes has its remaining candidates skipped without a probe (a 429 is a per-key answer), so the probes it would have spent reach the other accounts' next candidates — under the real 2026-09-06 order that is the difference between about five ready routes and the target of eight — and a fully rate-limited hour costs two probes per account instead of the whole budget; the report gains `skipped_count` and `account_skip_after_429`. The sidecar's job-log echo of the preflight JSON grows from 160 to 400 lines so 16 probed routes are not cut off exactly in the dead hour the summary matters. A permanently dead candidate -- NIM lists `gemma-3-12b`/`gemma-3-4b` and answers 404 on every run -- now costs one probe instead of a served slot, and a healthy pool stops early instead of always probing every candidate. Motivation: after #1939's four-per-account slice each NVIDIA key's slots were its first four models alphabetically, two of them those 404s, so preflight readiness fell from 6/12 to 1–3/12 and `noema-review` on this repository went from 7 successes / 14 failures to 0 / 22. The report gains `candidate_count`, `target_ready` and `probe_budget`; `probed_count` counts probes actually sent. ADR-0003's stage-budget sentence is amended. Refs #1939, #1947, #1948. + +### Sidecar sanitizer keeps the exception type and innermost frame per traceback + +- `scripts/ci/sanitize_contextual_orchestrator_sidecar_stream.py` now reduces each Python traceback in the sidecar stream to one line, `unexpected_exception type= frame=contextual_orchestrator/.py::` (the type identifier and the innermost package frame only; the exception message, source echoes and non-package frames are never re-emitted; a traceback cut off by the sidecar dying or without a package frame reports `unknown`). The previous single, once-per-stream `sidecar emitted an unexpected exception` line kept neither the count nor the type: `.github#1812`'s strix run (33993155419) ended on 83 gateway `500 internal_error` responses -- the orchestrator's generic request handler prints one traceback per unhandled exception -- and no artifact could say which exception escaped or where. Chain sentences (`During handling of the above exception…`, `The above exception was the direct cause…`) are consumed, so a chained exception yields cause then effect. +### Contextual-orchestrator pin advance fixes orchestrator/free retry-stacking + +- Advanced the central sidecar's pinned immutable CO revision from `2e414d15` to protected `main@414f22973658c4ddc3d4320fcf7acd9b4e8ba991`, carrying contextual-orchestrator#1081's fix into Strix, OpenCode, and Noema. Root cause: `TaskOrchestrator._invoke`'s own retry-then-failover decision for a retryable 5xx (budgeted `1 + tool_retry_attempts` real tries per candidate) was getting multiplied by `ModelClient._send_with_retry`'s independent transient-retry-with-backoff underneath it (`max_retries + 1` further tries per call) -- up to 6 real network attempts against one already-flagged-flaky `orchestrator/free` agent before `_invoke` ever tried the next ranked candidate. Confirmed as the cause of independently observed incidents in #1912, #1231, #1503, and #1198, each spending 9-57+ minutes on one escalated route and surfacing that same route's model in its final error, never reaching a cleanly-ready sibling preflight had already found. The fix (`ModelClient.single_attempt_transport()`) changes only which agent gets tried next; no per-attempt timeout changed. Reproduced the bug directly against unmodified contextual-orchestrator `main` before the fix (6 real attempts) and confirmed the fix resolves it (<=2) before advancing this pin. `docs/adr/0003-contextual-orchestrator-vendored-free-zdr.md`'s 2026-09-06 amendment and `tests/test_contextual_orchestrator_review_sidecar_contract.py`'s `ORCH_PIN_SHA` were updated alongside this pin. All callers still consume an exact SHA; no branch or tag is introduced. + +### Review sidecar preflight keeps transient-rejected routes as deferred failover + +- `_preflight_review_agents` no longer discards a route whose 16-token probe answered with a status the serving gateway itself retries and fails over across (`408 409 425 429 500 502 503 504 529`, the vendored orchestrator's `TRANSIENT_HTTP_STATUS`). Such routes are kept as **deferred**, ranked after every ready route by a catalog-priority penalty, so a stalled or rate-limited ready route has somewhere to fail over to; `ready_count` is unchanged, a new `deferred_count` is reported, and `rejected_count` covers only routes the gateway would not retry either (404, auth failures, invalid responses). With no ready route the stage still fails as before, so ADR-0005's priced-catalog fallback contract is untouched. Motivation: `noema-review` run 33993637015 (2026-09-05) rejected 11 of 12 routes -- six with 429, three of them on NVIDIA keys whose sibling routes were ready -- served the single ready route for 542 s and returned 502; under this rule the same run would have served 1 ready + 6 deferred. The sanitized stream gains a `preflight_route_deferred` line alongside `preflight_route_rejected`. + +### Noema review ships sidecar evidence on failure + +- `noema-review.yml` now uploads `strix_runs/contextual-orchestrator-sidecar.stderr.log` and `strix_runs/contextual-orchestrator-preflight.json` as the `noema-sidecar-evidence` artifact when the verdict phase fails (`if: failure()`, the same pinned `actions/upload-artifact` Strix uses, `if-no-files-found: ignore`, 5-day retention). Until now a failed Noema run left `artifacts=0` -- run `33981136873` spent 3122 s walking six ready routes twice each and ended in HTTP 502 with no per-route trace anywhere but the sidecar's stderr -- so the only diagnosis available was the caller's one-line summary. The stderr file is the sanitizer's bounded allowlist output (`sanitize_contextual_orchestrator_sidecar_stream.py`), the same file Strix already publishes in `strix-reports`; per-attempt route outcomes still need an allowlisted structured line from the orchestrator to appear in it. Refs #1935, #1939. +### Sidecar sanitizer admits orchestrator route and circuit events + +- `scripts/ci/sanitize_contextual_orchestrator_sidecar_stream.py` now passes the orchestrator's own `provider_attempt`, `provider_attempt_failed` (cut before the free-text `error_message=`), `provider_backoff`, `provider_exhausted`, `provider_rejected_permanent`, `provider_no_retry_budget` and `circuit_failure|opened|reset|cleared` lines (whose `failures`/`reset_seconds` are floats at runtime, `2.0`/`30.0`), matched field by field against bounded identifier and number charsets, with either Python's default `LEVEL:name:` prefix or the sidecar formatter's `asctime LEVEL name` prefix (the timestamp is kept so per-route durations can be read as differences). Until now every one of these lines was folded into `omitted_unstructured_lines`, so the `provider_exhausted` WARNING that already fires today after a route's retry budget is spent never reached an artifact, and a 3122 s walk across six ready routes (run `33981136873`) had no per-route trace. Companion to #1943 (sidecar DEBUG logging) and #1944 (Noema uploads the file on failure). Refs #1935, #1939. +### Review sidecar records the orchestrator's per-attempt trace + +- `contextual_orchestrator_review_launcher.py` now configures the orchestrator process's logging before serving (`_configure_sidecar_logging`, calling the vendored `contextual_orchestrator.debug_logging.configure_logging`), defaulting to `DEBUG` with a timestamped format and overridable through `ORCHESTRATOR_SIDECAR_LOG_LEVEL`. The orchestrator logs every provider attempt, its classified failure, backoff, and circuit event at `DEBUG` and only `provider_exhausted`/`circuit_opened` at the default `WARNING`, so a failed review left no way to see which routes were tried or how long each took: a 3122 s `noema-review` 502 on 2026-09-05 could only be attributed to "six ready routes, two retry layers, about 548 s per hop" by reading source, not the log. None of the `DEBUG` sites at the vendored pin carries prompt or response content, and the sidecar already pipes this stderr through the redacting sanitizer before it is written to `strix_runs/contextual-orchestrator-sidecar.stderr.log`; a companion change uploads that file as a failure artifact. + +### Review sidecar catalog interleaves credential accounts + +- `build_zdr_prioritized_catalog` now fills each free/ZDR tier round-robin across independently credentialed accounts instead of in provider-name order. The sidecar exports `ORCHESTRATOR_CATALOG_ACCOUNT_CAP=8` with `ORCHESTRATOR_CATALOG_LIMIT=12`, and the sorted fill took 8 `nvidia_nim` routes and 4 `nvidia_nim_sub` routes before any `openrouter` route was reached, so a review that admitted 62 free routes across three accounts served a NVIDIA-only catalog (`noema-review` run 33969842312: `free_pool_admitted_routes` 62, `free_selected_count` 12, runtime preflight `ready_count` 2 of 12) and the failover loop had no other account to leave a stalled NVIDIA endpoint for -- the `noema-review` 502 class tracked in contextual-orchestrator#1045. Tier order (free before priced, ZDR before non-ZDR), the account cap, the limit, and the discovery-order independence contract are unchanged; the same input now yields 4 + 4 + 4. Contrasts with #1476, which hardens `_routable_discovered_models` against a pin that regresses the OpenRouter `evidence_only` flag: on the current pin (`2e414d15`, includes contextual-orchestrator#949) OpenRouter rows already reach the catalog builder, and the selection was what dropped them. + +### Scheduler holds pre-review branch updates while checks are in flight + +- `inspect_pr` now decides `wait` instead of `update_branch` when a behind, unreviewed head still has queued or running check runs (`has_in_flight_check_runs`, built on the existing `latest_check_runs`/`running_check_state`). Under a saturated runner queue each PR's own delayed `pull_request_target` scheduler run merged `main` into the head before review dispatch, cancelling every queued check on the old head (22/28 on #1926, 21/30 on #1484) and requeueing the PR at the back, so no head ever completed its checks: 76 of the 77 PRs merged into this repository since 2026-09-04 had 0/12 required contexts satisfied at merge time. The hold has no age cap on purpose -- a check that never finishes keeps the head in place instead of restarting that loop, and the update resumes once every newest check run is terminal. `CLAUDE.md` now describes both update paths. Tracked in #1935. + +### CodeQL scan dispatch matrix serialisation + +- Serialised the dispatched CodeQL matrix with `toJSON()` in `codeql-scan-dispatch.yml`. `codeql-pr.yml` sends `client_payload.matrix` as an array and the handler assigned it straight into `env:`, where a value must be a scalar, so GitHub rejected the step with "A sequence was not expected" and the dispatched scan never ran -- 0 successes against 136 failures since the handler was added in #1776. The validate step already consumes the value through `jq`, so JSON text is the shape it was written for and no consumer changes. Added a string contract test, because neither `yaml.safe_load` nor `actionlint` 1.7.12 flags this: it is an Actions template rule, so only GitHub's own validator rejects it and no local gate catches the class. + ### Contextual-orchestrator pin refresh - Advanced the central sidecar's default immutable CO revision to protected `main@2e414d15ba58f28597751b625a8a2f00fc9fadcf`, carrying current provider discovery, `orchestrator/free` workflow budget, web-search gateway, OpenCode Go, OpenRouter composition, and CI fixes into Strix, OpenCode, and Noema. The shared ModelClient default-timeout removal remains pending in contextual-orchestrator PR #1053. All callers still consume an exact SHA; no branch or tag is introduced. diff --git a/CLAUDE.md b/CLAUDE.md index f1b2cbb482..30db1fc23b 100644 --- a/CLAUDE.md +++ b/CLAUDE.md @@ -48,9 +48,10 @@ an actually-executed PoC via `scripts/ci/sandboxed_verify.py` or `scripts/ci/san split `Developer experience:` / `User experience:` sections). Deterministic code may repair only trusted `path:line` bindings on LLM probes that already carry an independent proof and source-line digest; it never invents observed -results. The scheduler updates a PR branch only -when the latest review is approved, no current-head check has failed, and GitHub reports the PR as -behind. The mechanical merge scheduler itself never synthesizes a fix: it gives `DIRTY`/`CONFLICTING` +results. The scheduler updates a PR branch in two cases: after approval, when no current-head check +has failed and GitHub reports the PR as behind; and before review dispatch, when the PR is behind and +no current-head check is still queued or running (an in-flight check is evidence the update would +discard; see #1935). The mechanical merge scheduler itself never synthesizes a fix: it gives `DIRTY`/`CONFLICTING` PRs repair guidance. A separate edit-capable autofix flow (`scripts/ci/pr_review_fix_scheduler.py` → `.github/workflows/pr-review-autofix.yml`) may, for an approved same-repository-head PR, merge the base into the head and resolve the conflict markers; the diff --git a/docs/adr/0003-contextual-orchestrator-vendored-free-zdr.md b/docs/adr/0003-contextual-orchestrator-vendored-free-zdr.md index 04dc04c7a2..9b0749f258 100644 --- a/docs/adr/0003-contextual-orchestrator-vendored-free-zdr.md +++ b/docs/adr/0003-contextual-orchestrator-vendored-free-zdr.md @@ -24,7 +24,7 @@ all five, and auto-optimize routing by cost. 1. **Vendoring, pinned**: `scripts/ci/contextual_orchestrator_review_sidecar.sh` clones `ContextualWisdomLab/contextual-orchestrator` at an exact SHA - (`2e414d15ba58f28597751b625a8a2f00fc9fadcf` today) into `RUNNER_TEMP`. The + (`414f22973658c4ddc3d4320fcf7acd9b4e8ba991` today) into `RUNNER_TEMP`. The source's `requirements.lock` is installed with `--require-hashes` and `--no-deps`, so dependency resolution cannot silently move the reviewed runtime. @@ -50,9 +50,12 @@ all five, and auto-optimize routing by cost. route rejects the real runtime request contract does it rebuild once from fully price-attested routes and record the rejected primary attempt. This is evidence-triggered failover, not an arbitrary free/paid mixing ratio. - Both stages share one twelve-route startup budget: no more than eight routes - enter the free primary stage and only its remaining capacity may enter priced - fallback. Full discovery counts remain in policy evidence, and the transient + Both stages share one bounded startup budget of twenty-four candidates: no + more than sixteen enter the free primary stage and only its remaining + capacity may enter priced fallback. Candidates are probed lazily in catalog + order until eight routes are ready or sixteen probes are spent per stage + (ADR-0029), so a dead candidate costs one probe, not a served slot. Full + discovery counts remain in policy evidence, and the transient priced catalog is removed immediately after loading. 3. **ZDR-first within each cost tier**: `scripts/ci/zdr_policy.py` defines ZDR the way OpenRouter does ("a provider will not store your data for any period @@ -256,3 +259,26 @@ all five, and auto-optimize routing by cost. fault. Accepted-size and tool-schema probes call the pinned client's deterministic mock response explicitly and therefore perform no provider call. +- **2026-09-06 amendment: advance the governed runtime pin to fix + `orchestrator/free` retry-stacking.** The vendored pin advances from + `2e414d15ba58f28597751b625a8a2f00fc9fadcf` to + `414f22973658c4ddc3d4320fcf7acd9b4e8ba991`, the commit that merges + `contextual-orchestrator#1081`. That PR fixes `TaskOrchestrator._invoke`'s + per-agent retry-then-failover decision (`RETRY_SAME_AGENT` for a retryable + 5xx, budgeted at `1 + tool_retry_attempts` real tries per candidate) getting + multiplied by `ModelClient._send_with_retry`'s own, independent + transient-retry-with-backoff loop underneath it (`max_retries + 1` further + tries per call) — up to `(tool_retry_attempts + 1) × (max_retries + 1)` real + network attempts (6 at production defaults) against one already-flagged-flaky + `orchestrator/free` agent before `_invoke` ever tried the next ranked + candidate. This is the confirmed root cause of independently observed + incidents in `ContextualWisdomLab/.github` PRs #1912, #1231, #1503, and + #1198, each spending 9–57+ minutes on one escalated route and surfacing that + same route's model in its final error, never reaching a cleanly-ready + sibling preflight had already found. The fix adds + `ModelClient.single_attempt_transport()` (a thread-local context manager + mirroring the existing `request_settings()` pattern) that forces + `_send_with_retry`'s retry budget to 0 for the duration of `_invoke`'s own + per-agent attempt; it changes only *which* agent gets tried next, never any + per-attempt timeout, consistent with the 2026-08-31 amendment above. No + other contextual-orchestrator behavior changes with this pin advance. diff --git a/docs/adr/0025-codeql-required-workflow-dispatch-architecture.md b/docs/adr/0025-codeql-required-workflow-dispatch-architecture.md index 065a9d4d0f..5a11894767 100644 --- a/docs/adr/0025-codeql-required-workflow-dispatch-architecture.md +++ b/docs/adr/0025-codeql-required-workflow-dispatch-architecture.md @@ -1,6 +1,6 @@ # 0025 — Restore central CodeQL as a required workflow via repository_dispatch -**Status:** Proposed · **Date:** 2026-09-03 · **Owner intent recorded:** loop-brief item 41 +**Status:** Proposed, amended 2026-09-07 (one dispatch per pull request; language independence is the handler job matrix) · **Date:** 2026-09-03 · **Owner intent recorded:** loop-brief item 41 ## Problem @@ -96,14 +96,29 @@ codeql-pr.yml (required workflow, runs in target repo context) does) before dispatching. analyze-head (matrix) -- SAME REQUIRED-CHECK NAME: "CodeQL compatibility analysis (${{ matrix.language }})". - No codeql-action reference. On attempt one it - dispatches its exact run id, job id, language, - and head, then fails intentionally to release - the runner. The trusted handler publishes the - terminal status and reruns only that failed - job. On attempt two the shard reads the - authenticated current-head status once and - reflects it as this job's own exit code. + No codeql-action reference and no + repository_dispatch. On attempt one it + re-checks the live head, consumes an + authenticated codeql-dispatch/ + status when one exists, and otherwise fails + pending to release the runner. The trusted + handler publishes the terminal status and + reruns only that failed job. On the woken + attempt the shard reads the authenticated + current-head status once and reflects it as + this job's own exit code. + dispatch-current-head -- NEW: needs analyze-head, runs on attempt one + of an open current-head PR after the shards + have job ids. Collects those ids from this + run's jobs API, POSTs event_type codeql-scan + once with the remaining language matrix and + required_jobs: [{language, job_id}, ...], and + fails closed if any shard job id is missing. + Skips the POST when every language already + has a terminal verdict. github.run_attempt == 1 + is required: a single-job wake re-runs + dependents, and a second POST would cancel + the in-flight multi-language handler. .github/workflows/codeql-scan-dispatch.yml (NEW, runs natively in .github, NOT admitted through the ruleset, so codeql-action is unrestricted here) @@ -151,24 +166,49 @@ NOT admitted through the ruleset, so codeql-action is unrestricted here) closed and leaves the required job failed. ``` -### Concurrency identity is per pull request and language shard +### Concurrency identity is per pull request; language independence is the job matrix -Each required `analyze-head` matrix job dispatches one language and supplies a -matching `required_language`. The native handler therefore serializes only the -same repository, pull request, and language tuple. A newer dispatch for that -tuple cancels its stale predecessor, while Python, JavaScript/TypeScript, and -Actions scans for the same head remain independent. +The required `analyze-head` matrix still publishes one named check per +language. It no longer POSTs. One `dispatch-current-head` job sends every +still-pending language in a single `codeql-scan` payload (`matrix` plus +`required_jobs`). The native handler's concurrency group is +`codeql-scan-dispatch-${target_repository}-${pr_number}` with +`cancel-in-progress: true`, so a newer HEAD of the same pull request cancels +its predecessor and other repositories or pull requests stay independent. -This distinction is required by the exact-job wake contract. On 2026-09-05, -contextual-orchestrator PR #1049 dispatched all three current-head language -jobs, but central run `33938784437` was the sole survivor because the handler's -group omitted `required_language`. The sibling runs cancelled one another, -leaving their required jobs failed in the documented `pending` handoff state. -The chosen key adds the already validated language to the existing workflow, -repository, and pull-request identity. Sending the full language matrix in one -dispatch was rejected because the handler validates one shard and wakes one -exact required job per run; changing that contract would enlarge the security -and recovery surface without solving another observed need. +Language independence is `strategy.fail-fast: false` on that one run's job +matrix. Each scan job still publishes `codeql-dispatch/` and wakes +only its own required job. One language's failure cannot cancel or skip a +sibling. + +#### 2026-09-07 amendment: one dispatch per pull request, adopted for the 60-job ceiling + +The 2026-09-05 per-language run was the right fix for the accident it +recorded. contextual-orchestrator PR #1049 dispatched three current-head +language jobs, and central run `33938784437` was the sole survivor because +the handler's group omitted `required_language`. Sibling runs cancelled one +another and left their required jobs failed in the `pending` handoff state. +Sending the full language matrix in one dispatch was rejected then because +the handler validated one shard and woke one exact required job per run; +enlarging that surface had no observed need. + +That need now exists. On 2026-09-07 the organization job ceiling (60 jobs) +was saturated by this fan-out: ContextualWisdomLab/.github had ~300 queued +runs, 149 of them `codeql-scan-dispatch.yml`, covering 60 PR@SHA tuples +(n=2:29, n=3:27, n=4:2). Duplicate cancellation could not collapse them: +the language is not present on the run name, the job name, or the REST +payload. The user-facing concurrency contract for pull-request workflows is +`{workflow}-{repository}-{PR}` with `cancel-in-progress: true` only for a +superseded HEAD of the same pull request, and a language suffix is +forbidden. + +The 2026-09-05 rejection of "full matrix in one dispatch" is therefore +superseded. The sibling-cancel failure mode is gone because siblings are +jobs in one run, not runs in one concurrency group. The exact-job wake +contract is preserved: `required_jobs` is a 1:1 map of language to canonical +job id, each scan shard looks up only its own id, and a missing, stale, or +mismatched identity still fails closed. The old scalar +`required_job_id`/`required_language` payload is retired. ## Scope decision: `analyze-merge` is dropped, not migrated @@ -240,9 +280,10 @@ blocker for this one. inline Python between `analyze-head`/`analyze-merge` today. exact run/job wake-up follows the OpenCode runner-release pattern while avoiding one occupied runner per language for the scan's full duration. -- A repository and pull request can now have one active native handler per - language. This modest concurrency increase is bounded by the detected CodeQL - matrix and prevents valid sibling evidence from being treated as stale work. +- A repository and pull request have one active native handler run. Language + parallelism is bounded by the detected CodeQL matrix inside that run, and a + superseded HEAD of the same pull request cancels the in-flight handler + instead of queuing another copy per language. - Re-admitting `codeql-pr.yml` to ruleset `18156473` must happen only after this design is implemented, tested, and its `detect-languages`/ `dispatch-analysis`/`analyze-head` jobs are confirmed free of any diff --git a/docs/adr/0029-sidecar-preflight-lazy-fill.md b/docs/adr/0029-sidecar-preflight-lazy-fill.md new file mode 100644 index 0000000000..166d49f9a8 --- /dev/null +++ b/docs/adr/0029-sidecar-preflight-lazy-fill.md @@ -0,0 +1,83 @@ +# ADR-0029: Review sidecar preflight fills the served set lazily to a readiness target + +- **Status:** Proposed +- **Date:** 2026-09-06 +- **Scope:** `scripts/ci/contextual_orchestrator_review_launcher.py` (`_preflight_review_agents`, the stage limits), `scripts/ci/contextual_orchestrator_review_sidecar.sh` (`ORCHESTRATOR_CATALOG_LIMIT` default), ADR-0003 §2's stage budget sentence +- **Amends:** ADR-0003 (the "twelve-route startup budget" clause). ADR-0005's attempt counts are historical and are not restored. + +## Problem + +The review sidecar selected a fixed catalog of twelve routes and probed every one of them, then served whatever was ready. `.github#1939` made the selection diverse (round-robin across credential accounts inside each cost/ZDR tier, four routes per account), which was right, but it exposed a second defect: the per-account slice is filled from an alphabetically sorted model list, and for both NVIDIA NIM keys the first four models are `deepseek-v4-flash`, `deepseek-v4-pro`, `gemma-3-12b`, `gemma-3-4b`. NIM lists the two `gemma-3` models but answers `404` to every chat request on every run observed. Each NVIDIA key therefore served two working routes, both the most contended models, while the pre-#1939 eight-slot fill had reached `meta/llama-3.2-11b`, `llama-3.2-90b` and `meta/muse-glimmer-30b`, which were ready in every Strix artifact of that afternoon. + +Measured on `ContextualWisdomLab/.github` (lane jan's census on `#1948`, verdict-step conclusions only, draft skips excluded): + +| window | preflight ready of 12 | `noema-review` success / failure | +|---|---|---| +| before `#1939` (`main@f2f91b80`, 2026-09-05T17:25Z) | 6, 6, 5 (16:37–16:56Z artifacts) | 7 / 14 | +| after | 1–3 (23:47Z onward) | 0 / 22 | + +The evening's rate-limit pressure is a confound; the mechanism is not. A fixed slice from a list with dead entries wastes the slice, and probing every candidate regardless of how many are already ready spends per-key rate budget (`#1948`) for nothing. + +## Constraints + +1. No model name is hard-coded anywhere in the fill; a dead candidate is discovered by its probe, not by a list. +2. Probe spend per sidecar boot stays bounded and is stated as a number, because the probes themselves consume the per-key budgets the served routes need (`#1948`). +3. `#1947`'s deferral (a probed route that answered a transient status is kept behind the ready routes) applies unchanged to whatever was probed. +4. ADR-0003's evidence-triggered priced fallback (only after every free candidate rejects) keeps its shape; the two stages still share one startup budget. +5. `ready_count` keeps its meaning (routes proven ready by a probe) so the peers' post-merge discriminators stay comparable. + +## Decision + +The catalog is a **candidate list**, not the served set. `build_zdr_prioritized_catalog` keeps its tier-then-round-robin order (`#1939`) and is asked for up to `REVIEW_PREFLIGHT_MAX_TOTAL_ROUTES = 24` candidates (per-account cap unchanged at 8; the sidecar's `ORCHESTRATOR_CATALOG_LIMIT` default rises from 12 to 24). `_preflight_review_agents` probes candidates **in that order and stops** as soon as `REVIEW_PREFLIGHT_TARGET_READY = 8` routes are ready or `REVIEW_PREFLIGHT_MAX_PROBES = 16` probes have been spent, whichever comes first. The auto pool's split becomes 16 free candidates and up to 8 priced fallback candidates; the production `free` pool (the sidecar default; it has no fallback stage) lists all 24. A silent candidate's probe costs up to one transport timeout (one artifact spent 805 s on 19 probes), so the probe cap bounds preflight wall time as well as request count. + +**Account skip.** *(The "skipped without a probe" and "two probes per account" claims in this paragraph are superseded by the 2026-09-06 amendment below: such a candidate is postponed, and the leftover budget is spent on it.)* A 429 at preflight is a per-key answer, not a per-model one. Once one credential account has answered 429 to `REVIEW_PREFLIGHT_ACCOUNT_SKIP_AFTER_429 = 2` consecutive probes, its remaining candidates are skipped without a probe and the walk continues with the other accounts' next candidates; the two probed routes are still deferred. Under the real 2026-09-06 candidate order (lane jan's table on `#1949`, rebuilt from `#1938`'s Strix artifact: both NVIDIA keys list deepseek ×2, gemma-3 ×2 (404), gemma-4-31b (empty), then the llama and muse routes; every OpenRouter free route answers 429) the plain sixteen-probe walk yields about five ready and five deferred and the readiness target is unreachable, because five probes go to an account whose every route had answered 429 in every artifact since 21:00Z and four to the dead gemma-3 entries. With the skip, the same sixteen probes reach both keys' `llama-3.2` routes and the target of eight. This is why the free pool lists 24 candidates while probing at most 16: the tail is reachable exactly when an account is skipped, and the report separates `skipped_count` from the unreached remainder (`candidate_count − probed_count − skipped_count`). A rate-limited hour therefore costs two probes per account instead of the full budget. + +The sidecar's job-log echo of the preflight JSON (`sed -n '1,400p'`, previously 160 lines) now fits 16 probed routes; the artifact copy was always complete. + +The report gains `candidate_count`, `target_ready` and `probe_budget`; `probed_count` now counts probes actually sent, and `rejected_count` is `probed − ready − deferred`. Unprobed candidates get no `routes` row. + +## Consequences + +- **Good:** a dead candidate costs one probe and yields its place to the next candidate in the same account's list; a healthy hour stops after about eight to twelve probes instead of always twelve; a bad hour is bounded at sixteen probes per stage. +- **Cost:** in an hour where nothing is ready the sidecar sends up to 16 probes per stage where it sent 12, a third more against already exhausted keys. This is the price of finding routes past the dead ones; `#1948`'s shared rate ledger is the lever above it. The cap is also a wall-time bound: a 16-token probe can hold the full 90 s receive timeout (`#1661` run 34008191123, 04:48Z, both NVIDIA keys' deepseek-v4-pro probes at 90.06 s and 90.10 s), so a fully silent hour costs at most 16 × 90 s = 24 minutes of preflight against 18 today, and the account-skip rule cuts a rate-limited hour to two probes per account. *(That last clause is superseded by the 2026-09-06 amendment: a rate-limited hour now spends the whole probe budget rather than two probes per account.)* +- **Unchanged:** a route that answers the probe and then goes silent at request time still costs the gateway's full retry budget (`contextual-orchestrator#1045`); readiness is measured at 16 tokens (`#1454`). +- **Discriminator:** post-merge, `probed_count` versus `candidate_count` per boot and `ready_count` of the served set, read from the `runtime preflight summary` in the job log or the `noema-sidecar-evidence` artifact, compared with the table above. + +## Alternatives considered + +- **Raise the per-account cap back to 8 with a 12-route limit** — restores the pre-#1939 pool but reintroduces the single-account fill that `#1939` fixed; the 404s would still occupy slots. +- **Exclude models that 404 by name** — a hard-coded exclusion list the next discovery change silently invalidates; rejected by constraint 1. The discovery-side question (why NIM lists models it does not serve) remains open in `contextual-orchestrator`. +- **Family-level interleave inside each account's list before the cap** (jan's second layer) — would make each NVIDIA key's first six candidates span deepseek, gemma, llama, muse, minimax, mistral, but it needs a model-family equivalence derived from names, which ADR-0003/#1468 deliberately avoid; kept in reserve if the post-merge census shows same-family contention as the residual after the account skip. +- **Probe all 24 candidates** — best served set, double the probe spend in the hour that can least afford it; rejected by constraint 2. + +## Amendment 2026-09-06: a set-aside candidate is postponed, not banned + +**Evidence.** Sixteen sidecar artifacts were collected on 2026-09-06 across `.github`, `argos`, `bandscope` and `naruon`; **fourteen** ran the merged rule (two, `argos` 34013128112 and `bandscope` 34013146167, still carry the pre-`#1949` report shape and are excluded). The fourteen fall into three classes, not two. + +| class | boots | `probed / skipped / ready` | second pass? | outcome | +|---|---|---|---|---| +| budget spent in the first pass | 8 | 16 / 4 / 5–6 | no — budget already gone | served; the sixth ready route (`llama-3.2-11b` on the second NVIDIA key, catalog position 17, ready in exactly these 8 artifacts) is reached **only** because four OpenRouter probes were set aside — the benefit the rule was designed for | +| candidates exhausted, budget left | 1 | 12 / 12 / 3 (`argos` 34014143870, 06:56Z) | **yes**, up to 4 probes | served with 5 deferred, but the target of 8 was unmet with 4 probes unspent | +| every account set aside | 5 | 6 / 18 / 0 (`rejected 6`, all 429) | **yes**, up to 10 probes | preflight failed closed | + +So the change is not confined to bursts: one served, ordinary-minute boot also ends its first pass under target with budget in hand. Only a boot that spends all sixteen probes in the first pass is untouched. + +The sidecar stderr of `.github` run 34016207820 shows its six probes (both NVIDIA keys' two deepseek routes, two OpenRouter routes) refused 429 between 07:49:35.111Z and 07:49:35.767Z. Because the walk is a round-robin across three accounts, "two consecutive 429s" on one account is two requests about **310 ms** apart (`nvidia_nim` at .111 and .422), not two probes a tenth of a second apart. The rule set all three accounts aside, the walk ended **with ten of its sixteen probes unspent**, and because deferral requires one ready route (`#1947`) nothing was served either. The five boots of that class span 07:24:50Z to 08:04:41Z. + +A refusal is not a verdict on the account. Run 34016093772 was inside its *own* preflight while that burst happened (its probes run from 07:46:21Z), and its `llama-3.2-11b` probes on the **same two NVIDIA keys** answered ready at 07:50:58.7Z and 07:50:59.0Z — 84 seconds after those keys refused 429 at 07:49:35Z. That boot ended `probed 16 / ready 5`. + +What is **not** measured: whether the ten unspent probes would have found a ready route *inside* the burst itself. No artifact answers it, because nothing records how long a refusal lasts — hence `retry_after_s` below. The pre-`#1949` walk failed similar windows for a different reason (`.github` runs 34006939646 / 34008191123 / 34008575125, 04:24–05:11Z: the same six 429s, then six gemma 404s, `ready 0` at `probed 12`), so the ban is not a regression this amendment invents; it is the ban meeting a 24-candidate list whose tail it can no longer reach. + +**Decision.** A candidate set aside by the account rule is appended to a postponed list in catalog order. Once the first pass ends with the readiness target unmet and probe budget left, the postponed candidates are probed in that order until the budget is spent; no account rule applies in that second pass. A boot that spends all sixteen probes in the first pass is unchanged; the other two classes above gain a second pass. The justification is not that the second pass rescues a burst — that is unmeasured — but that ending a walk under target with probe budget in hand is indefensible when the catalog's tail is where the ready routes live. Constraint 2 holds unchanged: at most sixteen probes per stage, and a silent second-pass probe is bounded by that count, not by a clock (ADR-0003 admits no time rule here). + +**Cost.** The second pass spends probes the walk used to abandon, so it lengthens the boot it rescues and the boot it does not. A refused probe costs about 120 ms. A **silent** one costs up to the full 90 s receive timeout (`#1661` run 34008191123, both NVIDIA keys' `deepseek-v4-pro` probes at 90.06 s and 90.10 s), and the postponed tail is full of them: `google/gemma-4-31b-it` answered `TimeoutError` in 15 of the 19 probes that reached it across these artifacts. The measured burst is therefore not a 1.2-second case — replaying 34016207820's catalog, its second pass would reach both `gemma-4-31b-it` entries, so about 3 minutes — and the worst case is 10 × 90 s ≈ **15 minutes** added to a boot that will still fail, taking a dead window from about 4 minutes to about 19 and holding the runner slot for it. + +**The two-stage path costs more than the free pool's figure.** Whenever a stage lists no more candidates than the probe budget — which is exactly the auto split, 16 free primary and 8 priced fallback — the account rule now saves nothing there, because the second pass re-probes everything it set aside. Measured on a two-account, all-429 auto run: `origin/main` sends 8 requests (4 primary, 4 priced), this design sends 24 (16 primary, 8 priced). The priced stage spends paid credit, so it doubles from 4 probes to 8 in a rate-limited hour. That is accepted for the same reason as the free pool — the priced stage only runs after every free route rejected, and stopping it half-probed is the same defect one layer down — but it is a real, stated cost, not a side effect. + +Two things are deliberately **not** traded away. The second pass never draws on the shared escalation budget (`REVIEW_PREFLIGHT_MAX_ESCALATIONS`, one counter for the whole run, carried into the priced stage by `#1458`): a postponed candidate that answers with the budget-too-small signature is rejected as `escalation_reserved_for_first_pass` rather than escalating, because otherwise candidates the previous design never probed would take escalations from the priced stage that had them, and a two-stage run measurably stops serving a route it used to serve. + +That competes directly with the org's 60-job ceiling work, and `#1949`'s measured benefit ("a dead window fails closed in about 4 minutes and returns the slot") is partly traded back for the chance to reach the catalog tail. It stays inside the probe budget this ADR bounds, `postponed_probed_count` plus the provisioning step's duration make the trade visible per boot, and `REVIEW_PREFLIGHT_MAX_PROBES` is the lever if the census says the exchange is bad. + +The report adds `postponed_probed_count`; `skipped_count` now means "postponed and never reached", and `candidate_count − probed_count − skipped_count` keeps its meaning. A refused probe additionally records `retry_after_s` when the response carried a whole-seconds `Retry-After` header (the HTTP-date form and out-of-range values record nothing). Nothing waits on that value; it exists so the next census can answer the question this amendment could not. + +**Discriminator.** `postponed_probed_count > 0` marks any boot that reached a second pass, which includes the `12 / 12 / 3` class as well as the burst class. To isolate the all-429 class, read the first `probed_count − postponed_probed_count` rows of `routes` (they are in probe order) and require every one to carry `http_status` 429. The next census asks (a) whether such boots end with `ready_count ≥ 1`, (b) what fraction of 429 rows carry `retry_after_s` and how long the refusals claim to last, (c) whether the healthy-minute figures (`ready 5–6`) are unchanged, and (d) the provisioning step's duration on those boots, so the benefit in (a) and the cost above are read from one table. If (a) is consistently 0 **and** (b) shows providers publishing a usable delay, the follow-up is to spend the second pass after that delay rather than immediately — a decision this ADR deliberately leaves to that data. `#1948`'s shared rate ledger remains the lever above all of it. diff --git a/docs/sbom/inventory.json b/docs/sbom/inventory.json index 4e6441ad46..cb4bff3fee 100644 --- a/docs/sbom/inventory.json +++ b/docs/sbom/inventory.json @@ -1,12 +1,45594 @@ { "schema": "cwl-sbom-inventory/v1", "summary": { - "repo_count": 0, - "component_count": 0, - "flagged_count": 0, + "repo_count": 64, + "component_count": 6735, + "flagged_count": 773, "policy": "commercial-license-only" }, - "license_totals": {}, - "flagged_licenses": [], - "repos": [] + "license_totals": { + "(Apache-2.0 OR MIT)": 2, + "(Apache-2.0 OR MIT) AND BSD-3-Clause": 1, + "(MIT OR Apache-2.0) AND NCSA": 1, + "(MIT OR Apache-2.0) AND Unicode-3.0": 7, + "(MIT OR CC0-1.0)": 1, + "0BSD": 8, + "0BSD AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND LicenseRef-scancode-python-cwi AND LicenseRef-scancode-secret-labs-2011 AND LicenseRef-scancode-unicode AND MIT AND Python-2.0": 1, + "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0": 5, + "0BSD AND BSD-3-Clause AND MIT AND Python-2.0": 2, + "0BSD OR MIT OR Apache-2.0": 2, + "Apache-2.0": 366, + "Apache-2.0 AND BSD-2-Clause": 21, + "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND MIT AND OFL-1.1": 1, + "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-scancode-public-domain AND MIT": 1, + "Apache-2.0 AND BSD-3-Clause": 7, + "Apache-2.0 AND BSD-3-Clause AND MIT AND Zlib": 2, + "Apache-2.0 AND BSD-3-Clause AND MPL-2.0": 5, + "Apache-2.0 AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later": 1, + "Apache-2.0 AND GPL-1.0-or-later AND MIT": 2, + "Apache-2.0 AND ISC": 6, + "Apache-2.0 AND LGPL-3.0-or-later": 6, + "Apache-2.0 AND LGPL-3.0-or-later AND MIT": 2, + "Apache-2.0 AND MIT": 24, + "Apache-2.0 AND MIT AND MPL-2.0": 1, + "Apache-2.0 AND Python-2.0": 6, + "Apache-2.0 OR BSD-2-Clause": 3, + "Apache-2.0 OR BSD-3-Clause": 6, + "Apache-2.0 OR BSD-3-Clause OR (Apache-2.0 AND BSD-3-Clause)": 1, + "Apache-2.0 OR BSL-1.0": 2, + "Apache-2.0 OR ISC OR MIT": 4, + "Apache-2.0 OR MIT": 139, + "Apache-2.0 WITH LLVM-exception": 5, + "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT": 20, + "BSD-2-Clause": 68, + "BSD-2-Clause AND BSD-2-Clause-Views": 2, + "BSD-2-Clause AND BSD-3-Clause": 62, + "BSD-2-Clause AND BSD-3-Clause AND CC-PDDC AND GPL-1.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-scancode-other-copyleft AND LicenseRef-scancode-public-domain": 1, + "BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT": 1, + "BSD-2-Clause AND BSD-3-Clause AND MIT": 5, + "BSD-2-Clause AND BSD-3-Clause AND Python-2.0 AND Ruby": 1, + "BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1": 2, + "BSD-2-Clause OR Apache-2.0 OR MIT": 8, + "BSD-3-Clause": 203, + "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0": 2, + "BSD-3-Clause AND GPL-1.0-or-later": 3, + "BSD-3-Clause AND LicenseRef-scancode-protobuf": 5, + "BSD-3-Clause AND MIT": 4, + "BSD-3-Clause AND Python-2.0": 1, + "BSD-3-Clause OR Apache-2.0": 5, + "BSD-3-Clause OR GPL-2.0-only": 1, + "BSD-3-Clause OR MIT OR Apache-2.0": 4, + "BlueOak-1.0.0": 42, + "CC-BY-3.0": 1, + "CC-BY-4.0": 5, + "CC0-1.0": 7, + "CC0-1.0 AND MIT": 6, + "CC0-1.0 AND Unlicense": 1, + "CC0-1.0 OR Apache-2.0 OR Apache-2.0 WITH LLVM-exception": 1, + "CC0-1.0 OR MIT-0 OR Apache-2.0": 3, + "CDLA-Permissive-2.0": 1, + "CNRI-Python AND Apache-2.0": 6, + "EPL-2.0": 5, + "EPL-2.0 OR (Apache-2.0 AND EPL-2.0)": 2, + "GPL-2.0-only AND GPL-2.0-or-later": 1, + "GPL-3.0 AND GPL-3.0-only AND GPL-3.0-or-later": 1, + "GPL-3.0-or-later": 6, + "ISC": 168, + "ISC AND MIT": 10, + "ISC AND MPL-2.0": 1, + "JSON AND MIT": 1, + "LGPL-2.1-or-later": 2, + "LGPL-3.0 AND LGPL-3.0-only": 5, + "LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later": 2, + "LGPL-3.0-or-later": 20, + "LicenseRef-NVIDIA-Proprietary": 7, + "LicenseRef-bad-apache-2.0mit": 3, + "LicenseRef-bad-bsd-2-clause-and-apache-2.0-and-llvm-exception-and-bsd-2-clause": 1, + "LicenseRef-bad-bsd-3-clausemit": 1, + "LicenseRef-bad-non-standard": 2, + "LicenseRef-github-OTHER": 1, + "LicenseRef-scancode-public-domain AND Unlicense": 1, + "LicenseRef-scancode-unicode AND MIT": 4, + "LicenseRef-scancode-unknown": 4, + "MIT": 3546, + "MIT AND Apache-2.0": 1, + "MIT AND BSD-3-Clause": 1, + "MIT AND MIT-0": 1, + "MIT AND MPL-2.0": 8, + "MIT AND PSF-2.0": 4, + "MIT AND Python-2.0": 14, + "MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause": 1, + "MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause": 1, + "MIT AND ZPL-2.1": 1, + "MIT OR (Apache-2.0 AND MIT)": 1, + "MIT OR (CC0-1.0 AND MIT)": 1, + "MIT OR Apache-2.0": 922, + "MIT OR Apache-2.0 OR LGPL-2.1-or-later": 8, + "MIT OR Apache-2.0 OR Zlib": 10, + "MIT OR Zlib OR Apache-2.0": 2, + "MIT-0": 18, + "MIT-CMU": 5, + "MPL-2.0": 130, + "MPL-2.0 AND MPL-1.1": 3, + "NOASSERTION": 534, + "OFL-1.1": 1, + "PSF-2.0": 8, + "Python-2.0": 3, + "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD": 16, + "Python-2.0 AND LGPL-2.1-or-later": 1, + "Python-2.0 AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD": 1, + "Unicode-3.0": 54, + "Unlicense": 2, + "Unlicense AND Unlicense AND GPL-3.0-or-later AND MPL-2.0 AND MIT AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-or-later AND BSD-3-Clause AND MIT AND LGPL-2.1-only AND BSD-2-Clause AND GPL-2.0-or-later": 1, + "Unlicense OR MIT": 26, + "Zlib": 5, + "Zlib OR Apache-2.0 OR MIT": 45 + }, + "flagged_licenses": [ + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/attest", + "version": "v4.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/checkout", + "version": "v7.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/checkout", + "version": "v7.0.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/create-github-app-token", + "version": "v3.2.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/dependency-review-action", + "version": "v5.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/download-artifact", + "version": "v8.0.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/setup-python", + "version": "v7.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/upload-artifact", + "version": "v6.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/upload-artifact", + "version": "v7.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "actions/upload-artifact", + "version": "v7.0.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "anchore/sbom-action", + "version": "v0.24.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "aquasecurity/trivy-action", + "version": "v0.36.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "caido-server-auth", + "version": "0.1.2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "cloudflare/wrangler-action", + "version": "v4.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "contextualwisdomlab-opencode-codegraph-tooling", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "cvss", + "version": "3.6", + "license": "LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "github/codeql-action", + "version": "v4.37.9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "google/osv-scanner-action", + "version": "v2.3.8", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "google/osv-scanner-action", + "version": "v2.5.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "grpcio", + "version": "1.81.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "grpcio-status", + "version": "1.81.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "hypothesis", + "version": "6.163.0", + "license": "MPL-2.0 AND MPL-1.1" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "interrogate", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "ossf/scorecard-action", + "version": "v2.4.3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "pytest", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "pytest-cov", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "r-lib/actions", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "step-security/harden-runner", + "version": "v2.13.2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "step-security/harden-runner", + "version": "v2.20.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "step-security/harden-runner", + "version": "v2.20.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "tqdm", + "version": "4.68.3", + "license": "MIT AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/.github", + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "name": "accounting-information-platform", + "version": "0.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "name": "actions/attest", + "version": "508db95dd578ae2727ebd6217d5ba78e4fbda05d", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "name": "actions/checkout", + "version": "631c942040754b6e095e929c1677c07e10ed4f87", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "name": "aquasecurity/trivy-action", + "version": "a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only" + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/aFIPC", + "name": "actions/checkout", + "version": "de0fac2e4500dabe0009e67214ff5f5447ce83dd", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/aFIPC", + "name": "r-lib/actions/check-r-package", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/aFIPC", + "name": "r-lib/actions/setup-r", + "version": "d3c5be51b12e724e68f33216ca3c148b66d5f0b6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/aFIPC", + "name": "r-lib/actions/setup-r-dependencies", + "version": "d3c5be51b12e724e68f33216ca3c148b66d5f0b6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/aFIPC", + "name": "step-security/harden-runner", + "version": "bf7454d06d71f1098171f2acdf0cd4708d7b5920", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "actions/create-github-app-token", + "version": "bcd2ba49218906704ab6c1aa796996da409d3eb1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "actions/download-artifact", + "version": "37930b1c2abaa49bbe596cd826c3c89aef350131", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "anomalyco/opencode/github", + "version": "77fc88c8ade8e5a620ebbe1197f3a572d29ae91a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "aquasecurity/trivy-action", + "version": "ed142fd0673e97e23eac54620cfb913e5ce36c25", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "backports-tarfile", + "version": "1.2.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "chardet", + "version": "5.2.0", + "license": "LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "docutils", + "version": "0.23", + "license": "BSD-2-Clause AND BSD-3-Clause AND CC-PDDC AND GPL-1.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-scancode-other-copyleft AND LicenseRef-scancode-public-domain" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "fqdn", + "version": "1.5.1", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "github/codeql-action/upload-sarif", + "version": "5595ccaf912efad79be6eef63a5619ff05969be3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "lark", + "version": "1.3.1", + "license": "MIT AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "lxml", + "version": "6.1.1", + "license": "BSD-3-Clause AND GPL-1.0-or-later" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "pypa/gh-action-pypi-publish", + "version": "dc37677b2e1c63e2034f94d8a5b11f265b73ba33", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "rfc3987-syntax", + "version": "1.1.0", + "license": "Apache-2.0 AND GPL-1.0-or-later AND MIT" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "setuptools", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@bandscope/desktop", + "version": "0.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@bandscope/shared-types", + "version": "0.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@base-ui/react", + "version": "^1.5.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@fontsource-variable/geist", + "version": "^5.2.9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@storybook/react-vite", + "version": "^10.4.6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@tailwindcss/vite", + "version": "^4.3.2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@tauri-apps/api", + "version": "^2.11.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@tauri-apps/cli", + "version": "^2.11.4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@testing-library/jest-dom", + "version": "^6.6.3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@testing-library/react", + "version": "^16.2.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@types/node", + "version": "^26.1.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@types/react", + "version": "^19.2.17", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@types/react-dom", + "version": "^19.2.3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@vitejs/plugin-react", + "version": "^6.0.2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "@vitest/coverage-v8", + "version": "^4.1.10", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "actions/setup-node", + "version": "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "actions/setup-python", + "version": "a309ff8b426b58ec0e2a45f0f869d46889d02405", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "anchore/sbom-action", + "version": "e22c389904149dbc22b58101806040fa8d37a610", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "aquasecurity/trivy-action", + "version": "ed142fd0673e97e23eac54620cfb913e5ce36c25", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "astral-sh/setup-uv", + "version": "11f9893b081a58869d3b5fccaea48c9e9e46f990", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "bandscope-analysis", + "version": "0.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "bandscope-workspace", + "version": "0.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "certifi", + "version": "2026.2.25", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "class-variance-authority", + "version": "^0.7.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "clsx", + "version": "^2.1.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "cssparser", + "version": "0.36.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "cssparser-macros", + "version": "0.6.1", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "cuda-bindings", + "version": "13.3.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "dtoa-short", + "version": "0.3.5", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "eslint", + "version": "^10.7.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "fast-check", + "version": "^4.8.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "github/codeql-action/upload-sarif", + "version": "99df26d4f13ea111d4ec1a7dddef6063f76b97e9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "jsdom", + "version": "^29.1.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lameenc", + "version": "1.8.4", + "license": "GPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-android-arm64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-darwin-arm64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-darwin-x64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-freebsd-x64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-arm64-gnu", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-arm64-musl", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-x64-gnu", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-x64-musl", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-win32-arm64-msvc", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-win32-x64-msvc", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "lucide-react", + "version": "^1.24.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "maturin", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "option-ext", + "version": "0.2.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "ossf/scorecard-action", + "version": "4eaacf0543bb3f2c246792bd56e8cdeffafb205a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "pathspec", + "version": "1.0.4", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "r-efi", + "version": "5.3.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "r-efi", + "version": "6.0.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "react", + "version": "^19.2.4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "react-dom", + "version": "^19.2.7", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "selectors", + "version": "0.36.1", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "sonner", + "version": "^2.0.7", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "soxr", + "version": "1.0.0", + "license": "Python-2.0 AND LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "storybook", + "version": "^10.4.6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "tailwind-merge", + "version": "^3.6.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "tailwindcss", + "version": "^4.2.4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "time", + "version": ">= 0.3.0,< 0.4.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "tqdm", + "version": "4.68.3", + "license": "MIT AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "tw-animate-css", + "version": "^1.4.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "typescript", + "version": "^6.0.3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "typescript-eslint", + "version": "^8.63.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "url", + "version": ">= 2.5.8,< 3.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "uuid", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "vite", + "version": "^8.1.4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "vitest", + "version": "^4.1.10", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/bandscope", + "name": "yt-dlp", + "version": "2026.7.4", + "license": "Unlicense AND Unlicense AND GPL-3.0-or-later AND MPL-2.0 AND MIT AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-or-later AND BSD-3-Clause AND MIT AND LGPL-2.1-only AND BSD-2-Clause AND GPL-2.0-or-later" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "actions/setup-java", + "version": "b6effb05e454b25005698d916606bdc6ffcbf961", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "org.apache.maven.plugins:maven-compiler-plugin", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "org.apache.maven.plugins:maven-surefire-plugin", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "org.jacoco:jacoco-maven-plugin", + "version": "0.8.15", + "license": "EPL-2.0 OR (Apache-2.0 AND EPL-2.0)" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "org.springframework.boot:spring-boot-maven-plugin", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "org.springframework.boot:spring-boot-starter-log4j2", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "org.springframework.boot:spring-boot-starter-test", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "org.springframework.boot:spring-boot-starter-validation", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "name": "org.springframework.boot:spring-boot-starter-webflux", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "aiofiles", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "coverage", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "fastapi", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "httpx", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "hypothesis", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "hypothesis", + "version": "6.165.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "mcp", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "python-multipart", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "tqdm", + "version": "4.68.4", + "license": "MIT AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "name": "uvicorn", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@chromatic-com/storybook", + "version": "latest", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@storybook/addon-a11y", + "version": "^10.5.10", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@storybook/addon-docs", + "version": "^10.5.10", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@storybook/addon-vitest", + "version": "^10.5.10", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@storybook/react-vite", + "version": "^10.5.10", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@types/node", + "version": "^24.13.3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@types/react", + "version": "^19.2.18", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@types/react-dom", + "version": "^19.2.4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@vitejs/plugin-react", + "version": "^6.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@vitest/browser-playwright", + "version": "latest", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "@vitest/coverage-v8", + "version": "latest", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "actions/setup-node", + "version": "820762786026740c76f36085b0efc47a31fe5020", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "actions/setup-python", + "version": "ece7cb06caefa5fff74198d8649806c4678c61a1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "actions/upload-artifact", + "version": "330a01c490aca151604b8cf639adc76d48f6c5d4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "alembic", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "astral-sh/setup-uv", + "version": "20cfd1bf945f4377ade1205e4dbc17946fc9a30d", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "axe-core", + "version": "4.13.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "certifi", + "version": "2026.7.22", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "chardet", + "version": "5.2.0", + "license": "LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "contextual-orchestrator", + "version": "0.2.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "fast-mlsirm", + "version": "0.9.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "fastapi", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "fqdn", + "version": "1.5.1", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "github/codeql-action/analyze", + "version": "db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "github/codeql-action/init", + "version": "db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "hypothesis", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "hypothesis", + "version": "6.165.10", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "hypothesis", + "version": "6.165.3", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lark", + "version": "1.3.1", + "license": "MIT AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "lxml", + "version": "6.1.1", + "license": "BSD-3-Clause AND GPL-1.0-or-later" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "maturin", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-darwin-arm64", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-darwin-x64", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-darwin-x64-baseline", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-linux-arm64", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-linux-arm64-musl", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-linux-x64", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-linux-x64-baseline", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-linux-x64-baseline-musl", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-linux-x64-musl", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-windows-x64", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "opencode-windows-x64-baseline", + "version": "1.18.22", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "oxlint", + "version": "^1.79.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "pip", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "playwright", + "version": "latest", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "psycopg", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "pyo3", + "version": ">= 0.29.0,< 0.30.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "rayon", + "version": ">= 1.10.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "react", + "version": "^19.2.8", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "react-dom", + "version": "^19.2.8", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "regex-automata", + "version": "0.4.18", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "rfc3987-syntax", + "version": "1.1.0", + "license": "Apache-2.0 AND GPL-1.0-or-later AND MIT" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "sqlalchemy", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "storybook", + "version": "^10.5.10", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "tiktoken-rs", + "version": ">= 0.7.0,< 0.8.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "typescript", + "version": "~6.0.2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "uvicorn", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "vite", + "version": "^8.2.2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "name": "vitest", + "version": "latest", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/ContextualWisdomLab.github.io", + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/ContextualWisdomLab.github.io", + "name": "github/codeql-action/analyze", + "version": "99df26d4f13ea111d4ec1a7dddef6063f76b97e9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/ContextualWisdomLab.github.io", + "name": "github/codeql-action/init", + "version": "99df26d4f13ea111d4ec1a7dddef6063f76b97e9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "actions/attest", + "version": "1e69f48acb82d1966a394da916b4c1698aa569d6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "actions/download-artifact", + "version": "37930b1c2abaa49bbe596cd826c3c89aef350131", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "actions/setup-node", + "version": "820762786026740c76f36085b0efc47a31fe5020", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "cssparser", + "version": "0.36.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "cssparser-macros", + "version": "0.6.1", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "dtoa-short", + "version": "0.3.5", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "dtolnay/rust-toolchain", + "version": "4be7066ada62dd38de10e7b70166bc74ed198c30", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "ilammy/msvc-dev-cmd", + "version": "0b201ec74fa43914dc39ae48a89fd1d8cb592756", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "jakoch/install-vulkan-sdk-action", + "version": "37effcfa045411f8bfbbda26df2fd1b3bf3436fa", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "Jimver/cuda-toolkit", + "version": "b8bf9c6c28f8a92fbb04dcfcaee872e60c57462d", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "mlsirm-core", + "version": "0.7.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "option-ext", + "version": "0.2.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "r-efi", + "version": "5.3.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "r-efi", + "version": "6.0.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "selectors", + "version": "0.36.1", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "softprops/action-gh-release", + "version": "3d0d9888cb7fd7b750713d6e236d1fcb99157228", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "Swatinem/rust-cache", + "version": "6323deb102c322ba6fcbdcafc7e3dddab59af2b6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "webpki-roots", + "version": "1.0.8", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "zbus", + "version": "5.17.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "zbus-secret-service-keyring-store", + "version": "1.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "zbus_macros", + "version": "5.17.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "zbus_names", + "version": "4.3.3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "zvariant", + "version": "5.13.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "zvariant_derive", + "version": "5.13.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/disksage", + "name": "zvariant_utils", + "version": "3.5.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "actions/download-artifact", + "version": "d3f86a106a0bac45b974a628896c90dbdf5c8093", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "backports-asyncio-runner", + "version": "1.2.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "certifi", + "version": "2026.7.22", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "coverage", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "hatchling", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "idna", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "pathspec", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "pypa/gh-action-pypi-publish", + "version": "dc37677b2e1c63e2034f94d8a5b11f265b73ba33", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "pytest", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "pytest-asyncio", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "step-security/harden-runner", + "version": "bf7454d06d71f1098171f2acdf0cd4708d7b5920", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "trove-classifiers", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "bytemuck", + "version": ">= 1.25.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "dtolnay/rust-toolchain", + "version": "4be7066ada62dd38de10e7b70166bc74ed198c30", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "fast-mlsirm", + "version": "0.9.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "github/codeql-action/analyze", + "version": "ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "github/codeql-action/init", + "version": "ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "google/clusterfuzzlite/actions/build_fuzzers", + "version": "884713a6c30a92e5e8544c39945cd7cb630abcd1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "google/clusterfuzzlite/actions/run_fuzzers", + "version": "884713a6c30a92e5e8544c39945cd7cb630abcd1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "hypothesis", + "version": "6.156.6", + "license": "MPL-2.0 AND MPL-1.1" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "maturin", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "numpy", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "pollster", + "version": ">= 1.0.1,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "proptest", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "PyO3/maturin-action", + "version": "e83996d129638aa358a18fbd1dfb82f0b0fb5d3b", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "pypa/gh-action-pypi-publish", + "version": "dc37677b2e1c63e2034f94d8a5b11f265b73ba33", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "pytest", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "r-efi", + "version": "5.3.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "r-efi", + "version": "6.0.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "sha2", + "version": ">= 0.10.9,< 0.11.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "time", + "version": ">= 0.3.0,< 0.4.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "time-macros", + "version": "0.2.32", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "uuid", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "name": "wgpu", + "version": ">= 30.0.0,< 31.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "axum", + "version": ">= 0.7.0,< 0.8.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "base64", + "version": ">= 0.22.0,< 0.23.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "cryptography", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "ext-curl", + "version": ">= 0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "ext-dom", + "version": ">= 0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "ext-mcrypt", + "version": ">= 0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "ext-openssl", + "version": ">= 0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "fastapi", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "flate2", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "form_urlencoded", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "httpx", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "itsdangerous", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "jinja2", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "jsonwebtoken", + "version": ">= 10.3.0,< 11.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "lxml", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "Microsoft.AspNet.Mvc", + "version": "5.2.9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "Microsoft.AspNet.Mvc.ko", + "version": "5.2.9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "Microsoft.AspNet.WebPages", + "version": "3.2.9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "pem", + "version": ">= 3.0.0,< 4.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "php", + "version": ">= 5.3.2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "phploc/phploc", + "version": ">= 0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "phpunit/phpunit", + "version": "4.8", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "pyjwt", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "pytest", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "python-multipart", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "rand", + "version": ">= 0.8.0,< 0.9.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "reqwest", + "version": ">= 0.12.0,< 0.13.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "roxmltree", + "version": ">= 0.20.0,< 0.21.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "rsa", + "version": ">= 0.9.0,< 0.10.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "rust-xmlsec", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "sebastian/phpcpd", + "version": ">= 0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "sha2", + "version": ">= 0.10.0,< 0.11.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "signxml", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "System.IdentityModel.Tokens.Jwt", + "version": "5.4.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "thiserror", + "version": ">= 2.0.0,< 3.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "time", + "version": ">= 0.3.0,< 0.4.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "tokio", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "tower-sessions", + "version": ">= 0.13.0,< 0.14.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "uvicorn", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "name": "x509-parser", + "version": ">= 0.16.0,< 0.17.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "actions/checkout", + "version": "11d5960a326750d5838078e36cf38b85af677262", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "actions/create-github-app-token", + "version": "bcd2ba49218906704ab6c1aa796996da409d3eb1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "actions/download-artifact", + "version": "d3f86a106a0bac45b974a628896c90dbdf5c8093", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "actions/setup-python", + "version": "a26af69be951a213d495a4c3e4e4022e16d87065", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "certifi", + "version": "2026.7.22", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "fastapi", + "version": ">= 0.115,< 1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "httpx", + "version": ">= 0.27,< 1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "jinja2", + "version": ">= 3.1,< 4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "korean-lunar-calendar", + "version": ">= 0.3.1,< 1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "pathspec", + "version": "1.1.1", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "pydantic", + "version": ">= 2.10,< 3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "pydantic-settings", + "version": ">= 2.7,< 3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "python-multipart", + "version": ">= 0.0.20,< 1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "reportlab", + "version": ">= 4.2,< 5", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "typer", + "version": ">= 0.15,< 1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "name": "uvicorn", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "actions/setup-node", + "version": "249970729cb0ef3589644e2896645e5dc5ba9c38", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/gyeot", + "name": "node-forge", + "version": "1.4.0", + "license": "BSD-3-Clause OR GPL-2.0-only" + }, + { + "repo": "ContextualWisdomLab/hyosung-itx-slogan-brief", + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/hyosung-itx-slogan-brief", + "name": "actions/setup-node", + "version": "49933ea5288caeca8642d1e84afbd3f7d6820020", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "actions/attest", + "version": "59d89421af93a897026c735860bf21b6eb4f7b26", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "actions/download-artifact", + "version": "37930b1c2abaa49bbe596cd826c3c89aef350131", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "actions/setup-node", + "version": "820762786026740c76f36085b0efc47a31fe5020", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "actions/setup-python", + "version": "a26af69be951a213d495a4c3e4e4022e16d87065", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "lxml", + "version": "6.1.0", + "license": "BSD-3-Clause AND GPL-1.0-or-later" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "openpyxl", + "version": ">= 3.1.5,< 4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "pnpm/action-setup", + "version": "0977fd99725f1db4007ccb2928dbb4e90d06cc86", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "pypa/gh-action-pypi-publish", + "version": "dc37677b2e1c63e2034f94d8a5b11f265b73ba33", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "python-docx", + "version": ">= 1.2.0,< 2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "python-pptx", + "version": ">= 1.0.2,< 2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "sigstore/cosign-installer", + "version": "6f9f17788090df1f26f669e9d70d6ae9567deba6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/inkspan", + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/kaefa", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/kaefa", + "name": "r-lib/actions/check-r-package", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/kaefa", + "name": "r-lib/actions/setup-pandoc", + "version": "d3c5be51b12e724e68f33216ca3c148b66d5f0b6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/kaefa", + "name": "r-lib/actions/setup-r", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/kaefa", + "name": "r-lib/actions/setup-r-dependencies", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "astral-sh/setup-uv", + "version": "20cfd1bf945f4377ade1205e4dbc17946fc9a30d", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "certifi", + "version": "2026.7.22", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "cwl-idp-account-unification", + "version": "0.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "fastapi", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "httpx", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "pydantic", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "pytest", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "pyyaml", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "ruff", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "setuptools", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "step-security/harden-runner", + "version": "05e31511f85b41b11d1cf0ef85d0992719546e2c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/keyverse", + "name": "uvicorn", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/linux-cluster-ops", + "name": "actions/attest-build-provenance", + "version": "a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/linux-cluster-ops", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/linux-cluster-ops", + "name": "actions/setup-python", + "version": "ece7cb06caefa5fff74198d8649806c4678c61a1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/linux-cluster-ops", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "actions/dependency-review-action", + "version": "a1d282b36b6f3519aa1f3fc636f609c47dddb294", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "actions/setup-java", + "version": "1bcf9fb12cf4aa7d266a90ae39939e61372fe520", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "com.fasterxml.jackson.core:jackson-databind", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "com.h2database:h2", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "github/codeql-action/analyze", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "github/codeql-action/autobuild", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "github/codeql-action/init", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "github/codeql-action/upload-sarif", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "io.debezium:debezium-api", + "version": "3.4.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "io.debezium:debezium-connector-postgres", + "version": "3.4.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "io.debezium:debezium-embedded", + "version": "3.4.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "io.micrometer:micrometer-tracing-bridge-brave", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "io.zipkin.reporter2:zipkin-reporter-brave", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.apache.maven.plugins:maven-dependency-plugin", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.flywaydb:flyway-core", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.flywaydb:flyway-database-postgresql", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.jacoco:jacoco-maven-plugin", + "version": "0.8.15", + "license": "EPL-2.0 OR (Apache-2.0 AND EPL-2.0)" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.junit.jupiter:junit-jupiter-api", + "version": "5.12.2", + "license": "EPL-2.0" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.junit.jupiter:junit-jupiter-engine", + "version": "5.12.2", + "license": "EPL-2.0" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.junit.platform:junit-platform-commons", + "version": "1.12.2", + "license": "EPL-2.0" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.junit.platform:junit-platform-engine", + "version": "1.12.2", + "license": "EPL-2.0" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.junit.platform:junit-platform-launcher", + "version": "1.12.2", + "license": "EPL-2.0" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.postgresql:postgresql", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.boot:spring-boot-configuration-processor", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.boot:spring-boot-maven-plugin", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.boot:spring-boot-starter-actuator", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.boot:spring-boot-starter-aop", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.boot:spring-boot-starter-data-jpa", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.boot:spring-boot-starter-security", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.boot:spring-boot-starter-test", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.boot:spring-boot-starter-web", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.cloud:spring-cloud-config-server", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.cloud:spring-cloud-starter-gateway", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.cloud:spring-cloud-starter-netflix-eureka-client", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.cloud:spring-cloud-starter-netflix-eureka-server", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.kafka:spring-kafka", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.retry:spring-retry", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "org.springframework.security:spring-security-test", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "name": "ossf/scorecard-action", + "version": "4eaacf0543bb3f2c246792bd56e8cdeffafb205a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-darwin-arm64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-darwin-x64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-linux-arm", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-linux-arm64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-linux-ppc64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-linux-riscv64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-linux-s390x", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-linux-x64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-linuxmusl-arm64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-libvips-linuxmusl-x64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-wasm32", + "version": "0.35.0", + "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-win32-arm64", + "version": "0.35.0", + "license": "Apache-2.0 AND LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-win32-ia32", + "version": "0.35.0", + "license": "Apache-2.0 AND LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "@img/sharp-win32-x64", + "version": "0.35.0", + "license": "Apache-2.0 AND LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "actions/cache", + "version": "55cc8345863c7cc4c66a329aec7e433d2d1c52a9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "actions/dependency-review-action", + "version": "a1d282b36b6f3519aa1f3fc636f609c47dddb294", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "actions/setup-node", + "version": "820762786026740c76f36085b0efc47a31fe5020", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "aioimaplib", + "version": "2.0.1", + "license": "GPL-3.0 AND GPL-3.0-only AND GPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "axe-core", + "version": "4.12.1", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "caido-server-auth", + "version": "0.1.2", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "cvss", + "version": "3.6", + "license": "LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "dnspython", + "version": "2.8.0", + "license": "ISC AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "docker/build-push-action", + "version": "53b7df96c91f9c12dcc8a07bcb9ccacbed38856a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "docker/login-action", + "version": "dbcb813823bdd20940b903addbd779551569679f", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "docker/metadata-action", + "version": "dc802804100637a589fabce1cb79ff13a1411302", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "docker/setup-buildx-action", + "version": "bb05f3f5519dd87d3ba754cc423b652a5edd6d2c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "docker/setup-qemu-action", + "version": "96fe6ef7f33517b61c61be40b68a1882f3264fb8", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "github/codeql-action/upload-sarif", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "grpcio", + "version": "1.81.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "grpcio", + "version": "1.82.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "grpcio-status", + "version": "1.81.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-android-arm64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-darwin-arm64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-darwin-x64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-freebsd-x64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-arm64-gnu", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-arm64-musl", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-x64-gnu", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-x64-musl", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-win32-arm64-msvc", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-win32-x64-msvc", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "naruon-backend", + "version": "0.14.4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "orjson", + "version": "3.11.9", + "license": "Apache-2.0 AND MIT AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "rankweave", + "version": "0.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "step-security/harden-runner", + "version": "bf7454d06d71f1098171f2acdf0cd4708d7b5920", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "tqdm", + "version": "4.68.3", + "license": "MIT AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "tqdm", + "version": "4.68.4", + "license": "MIT AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/naruon", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "actions/attest-build-provenance", + "version": "0f67c3f4856b2e3261c31976d6725780e5e4c373", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "actions/dependency-review-action", + "version": "a1d282b36b6f3519aa1f3fc636f609c47dddb294", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "actions/deploy-pages", + "version": "cd2ce8fcbc39b97be8ca5fce6e763baed58fa128", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "astral-sh/setup-uv", + "version": "c771a70e6277c0a99b617c7a806ffedaca235ff9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "backports-asyncio-runner", + "version": "1.2.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "certifi", + "version": "2026.2.25", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "docker/build-push-action", + "version": "53b7df96c91f9c12dcc8a07bcb9ccacbed38856a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "docker/login-action", + "version": "dbcb813823bdd20940b903addbd779551569679f", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "docker/metadata-action", + "version": "dc802804100637a589fabce1cb79ff13a1411302", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "docker/setup-buildx-action", + "version": "bb05f3f5519dd87d3ba754cc423b652a5edd6d2c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "docker/setup-qemu-action", + "version": "96fe6ef7f33517b61c61be40b68a1882f3264fb8", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "github/codeql-action/analyze", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "github/codeql-action/autobuild", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "github/codeql-action/init", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "github/codeql-action/upload-sarif", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "google/clusterfuzzlite/actions/build_fuzzers", + "version": "52ecc61cb587ee99c26825a112a21abf19c7448c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "google/clusterfuzzlite/actions/run_fuzzers", + "version": "52ecc61cb587ee99c26825a112a21abf19c7448c", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "newsdom-api", + "version": "0.2.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "ossf/scorecard-action", + "version": "2d1146689b8cda280b9bc96326124645441f03bc", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "pathspec", + "version": "1.0.4", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "pyinstaller", + "version": "6.21.0", + "license": "GPL-2.0-only AND GPL-2.0-or-later" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "pyinstaller-hooks-contrib", + "version": "2026.6", + "license": "Apache-2.0 AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later" + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-darwin-arm64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-darwin-x64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-linux-arm", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-linux-arm64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-linux-ppc64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-linux-riscv64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-linux-s390x", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-linux-x64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-linuxmusl-arm64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-libvips-linuxmusl-x64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-wasm32", + "version": "0.35.3", + "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-win32-arm64", + "version": "0.35.3", + "license": "Apache-2.0 AND LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-win32-ia32", + "version": "0.35.3", + "license": "Apache-2.0 AND LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "@img/sharp-win32-x64", + "version": "0.35.3", + "license": "Apache-2.0 AND LGPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/attest", + "version": "59d89421af93a897026c735860bf21b6eb4f7b26", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/checkout", + "version": "11bd71901bbe5b1630ceea73d27597364c9af683", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/checkout", + "version": "de0fac2e4500dabe0009e67214ff5f5447ce83dd", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/create-github-app-token", + "version": "bcd2ba49218906704ab6c1aa796996da409d3eb1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/download-artifact", + "version": "d3f86a106a0bac45b974a628896c90dbdf5c8093", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/setup-node", + "version": "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/setup-python", + "version": "a26af69be951a213d495a4c3e4e4022e16d87065", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "aquasecurity/setup-trivy", + "version": "81e514348e19b6112ce2a7e3ecbafe19c1e1f567", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "docker/setup-buildx-action", + "version": "37fe631027851001ddb9b187196cc803df7f5f0e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "interrogate", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-android-arm64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-darwin-arm64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-darwin-x64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-freebsd-x64", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-linux-arm64-gnu", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-linux-arm64-musl", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-linux-x64-gnu", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-linux-x64-musl", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-win32-arm64-msvc", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "lightningcss-win32-x64-msvc", + "version": "1.32.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "pydantic", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "pydantic-ai-slim", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "pytest", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "pytest-cov", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "setuptools", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "sigstore/cosign-installer", + "version": "6f9f17788090df1f26f669e9d70d6ae9567deba6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "tqdm", + "version": "4.68.4", + "license": "MIT AND MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/noema", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/OriginWeave", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/OriginWeave", + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/OriginWeave", + "name": "dtolnay/rust-toolchain", + "version": "4be7066ada62dd38de10e7b70166bc74ed198c30", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/OriginWeave", + "name": "step-security/harden-runner", + "version": "bf7454d06d71f1098171f2acdf0cd4708d7b5920", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/OriginWeave", + "name": "time-macros", + "version": "0.2.32", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "actions/setup-node", + "version": "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "actions/setup-python", + "version": "ece7cb06caefa5fff74198d8649806c4678c61a1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "aiohttp", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "alembic", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "asyncpg", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "asyncpg-stubs", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "cryptography", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "fastapi", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "github/codeql-action/analyze", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "github/codeql-action/autobuild", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "github/codeql-action/init", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "httpx", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "hypercorn", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "mypy", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "prometheus-client", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "psycopg", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "pydantic", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "pydantic-settings", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "pyjwt", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "pytest", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "pytest-asyncio", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "pytest-cov", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "python-jose", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "python-multipart", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "redis", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "requests", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "setuptools", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "snowflake-connector-python", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "sqlalchemy", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "starlette", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "step-security/harden-runner", + "version": "b09bb98e06d4d774595224525879c09bc6e98c40", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "types-python-jose", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "name": "urllib3", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "aiohttp", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "astral-sh/setup-uv", + "version": "c771a70e6277c0a99b617c7a806ffedaca235ff9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "backports-asyncio-runner", + "version": "1.2.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "cryptography", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "pg-llm-batch", + "version": "0.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "psycopg", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "pytest", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "pytest-asyncio", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "setuptools", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "step-security/harden-runner", + "version": "b09bb98e06d4d774595224525879c09bc6e98c40", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "actions/configure-pages", + "version": "45bfe0192ca1faeb007ade9deae92b16b8254a0d", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "actions/dependency-review-action", + "version": "a1d282b36b6f3519aa1f3fc636f609c47dddb294", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "actions/deploy-pages", + "version": "cd2ce8fcbc39b97be8ca5fce6e763baed58fa128", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "actions/setup-node", + "version": "2028fbc5c25fe9cf00d9f06a71cc4710d4507903", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "actions/setup-node", + "version": "39370e3970a6d050c480ffad4ff0ed4d3fdee5af", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "actions/upload-pages-artifact", + "version": "fc324d3547104276b827a68afc52ff2a11cc49c9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "github/codeql-action/analyze", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "github/codeql-action/init", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "name": "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml", + "version": "3a7550f43ba5b58905a821ce3a0ed24c4858b3f4", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "actions/setup-python", + "version": "ece7cb06caefa5fff74198d8649806c4678c61a1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "github/codeql-action/upload-sarif", + "version": "54f647b7e1bb85c95cddabcd46b0c578ec92bc1a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "hypothesis", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "hypothesis", + "version": "6.156.6", + "license": "MPL-2.0 AND MPL-1.1" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "ossf/scorecard-action", + "version": "4eaacf0543bb3f2c246792bd56e8cdeffafb205a", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "sqlalchemy", + "version": "", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "actions/cache", + "version": "0057852bfaa89a56745cba8c7296529d2fc39830", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "arbitrary", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "dtolnay/rust-toolchain", + "version": "4be7066ada62dd38de10e7b70166bc74ed198c30", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "dtolnay/rust-toolchain", + "version": "efcb852328a9f50117170cc43094fb6f09eaf1ae", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "github/codeql-action/upload-sarif", + "version": "ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "libfuzzer-sys", + "version": ">= 0.4.0,< 0.5.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "ossf/scorecard-action", + "version": "2d1146689b8cda280b9bc96326124645441f03bc", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "percent-encoding", + "version": ">= 2.0.0,< 3.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "proptest", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "r-efi", + "version": "5.3.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "r-efi", + "version": "6.0.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/wardnet", + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "@types/express", + "version": "^4.17.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "@types/inquirer", + "version": "^8.2.12", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "@types/node", + "version": "^24.0.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "@vitest/coverage-v8", + "version": "^3.2.6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "@vitest/ui", + "version": "^3.2.6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "actions/setup-python", + "version": "a26af69be951a213d495a4c3e4e4022e16d87065", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "astral-sh/setup-uv", + "version": "c771a70e6277c0a99b617c7a806ffedaca235ff9", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "axios", + "version": "^1.9.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "backports-asyncio-runner", + "version": "1.2.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "commander", + "version": "^14.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "eslint", + "version": "^9.27.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "express", + "version": "^4.18.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "extract-zip", + "version": "^2.0.1", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "inquirer", + "version": "^8.2.6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "open", + "version": "^10.0.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "pino", + "version": "^9.7.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "pypa/gh-action-pip-audit", + "version": "1220774d901786e6f652ae159f7b6bc8fea6d266", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "typescript", + "version": "^5.8.3", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "vitest", + "version": "^3.2.6", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "xtrmllmbatch", + "version": "0.1.0", + "license": "NOASSERTION" + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "name": "zod", + "version": "^3.25.67", + "license": "NOASSERTION" + } + ], + "repos": [ + { + "repo": "ContextualWisdomLab/.github", + "error": null, + "component_count": 172, + "components": [ + { + "name": "@colbymchenry/codegraph", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-darwin-arm64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-darwin-x64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-linux-arm64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-linux-x64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-win32-arm64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-win32-x64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "actions/attest", + "version": "v4.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "v7.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "v7.0.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/create-github-app-token", + "version": "v3.2.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/dependency-review-action", + "version": "v5.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "v8.0.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "v7.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "v6.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "v7.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "v7.0.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0", + "flagged": true + }, + { + "name": "aiohttp", + "version": "3.14.3", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "aiosignal", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "anchore/sbom-action", + "version": "v0.24.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "annotated-doc", + "version": "0.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-types", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.0", + "license": "MIT", + "flagged": false + }, + { + "name": "aquasecurity/trivy-action", + "version": "v0.36.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "attrs", + "version": "26.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "backoff", + "version": "2.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "bandit", + "version": "1.9.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "boolean-py", + "version": "5.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "cachecontrol", + "version": "0.14.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "caido-sdk-client", + "version": "0.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "caido-server-auth", + "version": "0.1.2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cffi", + "version": "2.0.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "charset-normalizer", + "version": "3.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "click", + "version": "8.4.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "cloudflare/wrangler-action", + "version": "v4.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "contextualwisdomlab-opencode-codegraph-tooling", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "coverage", + "version": "7.15.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "cryptography", + "version": "50.0.0", + "license": "Apache-2.0 OR BSD-3-Clause", + "flagged": false + }, + { + "name": "cvss", + "version": "3.6", + "license": "LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "cyclonedx-python-lib", + "version": "9.1.0", + "license": "Apache-2.0 AND Python-2.0", + "flagged": false + }, + { + "name": "defusedxml", + "version": "0.7.1", + "license": "PSF-2.0", + "flagged": false + }, + { + "name": "distro", + "version": "1.9.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "docker", + "version": "7.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "docstring-parser", + "version": "0.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fastuuid", + "version": "0.14.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "filelock", + "version": "3.29.4", + "license": "MIT", + "flagged": false + }, + { + "name": "filelock", + "version": "3.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "frozenlist", + "version": "1.8.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fsspec", + "version": "2026.6.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "github/codeql-action", + "version": "v4.37.9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "google-api-core", + "version": "2.33.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-auth", + "version": "2.55.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-aiplatform", + "version": "1.133.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-bigquery", + "version": "3.42.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-core", + "version": "2.6.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-resource-manager", + "version": "1.18.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-storage", + "version": "3.13.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-crc32c", + "version": "1.8.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-genai", + "version": "1.75.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-resumable-media", + "version": "2.10.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google/osv-scanner-action", + "version": "v2.3.8", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "google/osv-scanner-action", + "version": "v2.5.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "googleapis-common-protos", + "version": "1.75.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "gql", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "graphql-core", + "version": "3.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "griffelib", + "version": "2.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "grpc-google-iam-v1", + "version": "0.14.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "grpcio", + "version": "1.81.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0", + "flagged": true + }, + { + "name": "grpcio-status", + "version": "1.81.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0", + "flagged": true + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hf-xet", + "version": "1.5.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpcore2", + "version": "2.12.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx-sse", + "version": "0.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "httpx2", + "version": "2.12.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "huggingface-hub", + "version": "1.20.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "hypothesis", + "version": "6.163.0", + "license": "MPL-2.0 AND MPL-1.1", + "flagged": true + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "importlib-metadata", + "version": "8.9.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "interrogate", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "interrogate", + "version": "1.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jinja2", + "version": "3.1.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "jiter", + "version": "0.15.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonschema", + "version": "4.26.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonschema-specifications", + "version": "2025.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "license-expression", + "version": "30.4.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "litellm", + "version": "1.94.1", + "license": "MIT", + "flagged": false + }, + { + "name": "markdown-it-py", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "markupsafe", + "version": "3.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "mcp", + "version": "1.28.1", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "mdurl", + "version": "0.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "msgpack", + "version": "1.2.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "multidict", + "version": "6.7.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "openai", + "version": "2.54.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "openai-agents", + "version": "0.19.4", + "license": "MIT", + "flagged": false + }, + { + "name": "ossf/scorecard-action", + "version": "v2.4.3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "packageurl-python", + "version": "0.17.6", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "picomatch", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pillow", + "version": "12.3.0", + "license": "MIT-CMU", + "flagged": false + }, + { + "name": "pip", + "version": "26.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pip-api", + "version": "0.0.34", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pip-audit", + "version": "2.10.1", + "license": "Apache-2.0 AND ISC", + "flagged": false + }, + { + "name": "pip-requirements-parser", + "version": "32.0.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "platformdirs", + "version": "4.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "propcache", + "version": "0.5.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "proto-plus", + "version": "1.28.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "protobuf", + "version": "6.33.6", + "license": "BSD-3-Clause AND LicenseRef-scancode-protobuf", + "flagged": false + }, + { + "name": "py", + "version": "1.11.0", + "license": "MIT", + "flagged": false + }, + { + "name": "py-serializable", + "version": "2.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pyasn1", + "version": "0.6.4", + "license": "BSD-2-Clause AND BSD-3-Clause AND MIT", + "flagged": false + }, + { + "name": "pyasn1-modules", + "version": "0.4.2", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pydantic", + "version": "2.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-core", + "version": "2.46.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-settings", + "version": "2.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pyjwt", + "version": "2.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pyopenssl", + "version": "26.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pyparsing", + "version": "3.3.2", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "pypdf", + "version": "6.16.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pytest", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-cov", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest-cov", + "version": "7.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "python-dateutil", + "version": "2.9.0.post0", + "license": "Apache-2.0 AND BSD-3-Clause", + "flagged": false + }, + { + "name": "python-dotenv", + "version": "1.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "python-multipart", + "version": "0.0.32", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pyyaml", + "version": "6.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "r-lib/actions", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "referencing", + "version": "0.37.0", + "license": "MIT", + "flagged": false + }, + { + "name": "regex", + "version": "2026.7.19", + "license": "CNRI-Python AND Apache-2.0", + "flagged": false + }, + { + "name": "reportlab", + "version": "5.0.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "requests", + "version": "2.34.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "rich", + "version": "15.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rpds-py", + "version": "2026.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "shellingham", + "version": "1.5.4", + "license": "ISC", + "flagged": false + }, + { + "name": "six", + "version": "1.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sniffio", + "version": "1.3.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "sortedcontainers", + "version": "2.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "sse-starlette", + "version": "3.4.4", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "starlette", + "version": "1.3.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "step-security/harden-runner", + "version": "v2.13.2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "step-security/harden-runner", + "version": "v2.20.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "step-security/harden-runner", + "version": "v2.20.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "stevedore", + "version": "5.9.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "strix-agent", + "version": "1.5.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tabulate", + "version": "0.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tenacity", + "version": "9.1.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tiktoken", + "version": "0.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tokenizers", + "version": "0.23.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tomli", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tomli-w", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tqdm", + "version": "4.68.3", + "license": "MIT AND MPL-2.0", + "flagged": true + }, + { + "name": "truststore", + "version": "0.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "typer", + "version": "0.25.1", + "license": "MIT", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.4", + "license": "MIT", + "flagged": false + }, + { + "name": "urllib3", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "uv", + "version": "0.12.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "uvicorn", + "version": "0.49.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "websockets", + "version": "15.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "yarl", + "version": "1.24.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "zipp", + "version": "4.1.0", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/accounting-information-platform", + "error": null, + "component_count": 13, + "components": [ + { + "name": "accounting-information-platform", + "version": "0.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/attest", + "version": "508db95dd578ae2727ebd6217d5ba78e4fbda05d", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "631c942040754b6e095e929c1677c07e10ed4f87", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aquasecurity/trivy-action", + "version": "a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "coverage", + "version": "7.15.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "packaging", + "version": "26.3", + "license": "Apache-2.0 OR BSD-2-Clause", + "flagged": false + }, + { + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only", + "flagged": true + }, + { + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later", + "flagged": true + }, + { + "name": "setuptools", + "version": "84.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wheel", + "version": "0.48.0", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/aFIPC", + "error": null, + "component_count": 5, + "components": [ + { + "name": "actions/checkout", + "version": "de0fac2e4500dabe0009e67214ff5f5447ce83dd", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "r-lib/actions/check-r-package", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "r-lib/actions/setup-r", + "version": "d3c5be51b12e724e68f33216ca3c148b66d5f0b6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "r-lib/actions/setup-r-dependencies", + "version": "d3c5be51b12e724e68f33216ca3c148b66d5f0b6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "step-security/harden-runner", + "version": "bf7454d06d71f1098171f2acdf0cd4708d7b5920", + "license": "NOASSERTION", + "flagged": true + } + ] + }, + { + "repo": "ContextualWisdomLab/appguardrail", + "error": null, + "component_count": 85, + "components": [ + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/create-github-app-token", + "version": "bcd2ba49218906704ab6c1aa796996da409d3eb1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "37930b1c2abaa49bbe596cd826c3c89aef350131", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "anomalyco/opencode/github", + "version": "77fc88c8ade8e5a620ebbe1197f3a572d29ae91a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aquasecurity/trivy-action", + "version": "ed142fd0673e97e23eac54620cfb913e5ce36c25", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "arrow", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "attrs", + "version": "26.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "backports-tarfile", + "version": "1.2.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "boolean-py", + "version": "5.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "build", + "version": "1.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "cachecontrol", + "version": "0.14.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cffi", + "version": "2.0.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "chardet", + "version": "5.2.0", + "license": "LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "charset-normalizer", + "version": "3.4.7", + "license": "MIT", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "cryptography", + "version": "49.0.0", + "license": "BSD-3-Clause OR Apache-2.0", + "flagged": false + }, + { + "name": "cyclonedx-bom", + "version": "7.3.0", + "license": "Apache-2.0 AND Python-2.0", + "flagged": false + }, + { + "name": "cyclonedx-python-lib", + "version": "11.11.0", + "license": "Apache-2.0 AND Python-2.0", + "flagged": false + }, + { + "name": "defusedxml", + "version": "0.7.1", + "license": "PSF-2.0", + "flagged": false + }, + { + "name": "docutils", + "version": "0.23", + "license": "BSD-2-Clause AND BSD-3-Clause AND CC-PDDC AND GPL-1.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-scancode-other-copyleft AND LicenseRef-scancode-public-domain", + "flagged": true + }, + { + "name": "filelock", + "version": "3.29.4", + "license": "MIT", + "flagged": false + }, + { + "name": "fqdn", + "version": "1.5.1", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "github/codeql-action/upload-sarif", + "version": "5595ccaf912efad79be6eef63a5619ff05969be3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "id", + "version": "1.6.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "importlib-metadata", + "version": "9.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "isoduration", + "version": "20.11.0", + "license": "ISC", + "flagged": false + }, + { + "name": "jaraco-classes", + "version": "3.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jaraco-context", + "version": "6.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jaraco-functools", + "version": "4.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jeepney", + "version": "0.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonpointer", + "version": "3.1.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "jsonschema", + "version": "4.26.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonschema-specifications", + "version": "2025.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "keyring", + "version": "25.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lark", + "version": "1.3.1", + "license": "MIT AND MPL-2.0", + "flagged": true + }, + { + "name": "license-expression", + "version": "30.4.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "lxml", + "version": "6.1.1", + "license": "BSD-3-Clause AND GPL-1.0-or-later", + "flagged": true + }, + { + "name": "markdown-it-py", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mdurl", + "version": "0.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "more-itertools", + "version": "11.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "msgpack", + "version": "1.2.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nh3", + "version": "0.3.6", + "license": "MIT", + "flagged": false + }, + { + "name": "packageurl-python", + "version": "0.17.6", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "pip-api", + "version": "0.0.34", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pip-audit", + "version": "2.10.1", + "license": "Apache-2.0 AND ISC", + "flagged": false + }, + { + "name": "pip-requirements-parser", + "version": "32.0.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "platformdirs", + "version": "4.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "py-serializable", + "version": "2.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pypa/gh-action-pypi-publish", + "version": "dc37677b2e1c63e2034f94d8a5b11f265b73ba33", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pyparsing", + "version": "3.3.2", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "pyproject-hooks", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "python-dateutil", + "version": "2.9.0.post0", + "license": "Apache-2.0 AND BSD-3-Clause", + "flagged": false + }, + { + "name": "readme-renderer", + "version": "45.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "referencing", + "version": "0.37.0", + "license": "MIT", + "flagged": false + }, + { + "name": "requests", + "version": "2.34.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "requests-toolbelt", + "version": "1.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "rfc3339-validator", + "version": "0.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "rfc3986", + "version": "2.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "rfc3986-validator", + "version": "0.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "rfc3987-syntax", + "version": "1.1.0", + "license": "Apache-2.0 AND GPL-1.0-or-later AND MIT", + "flagged": true + }, + { + "name": "rich", + "version": "15.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rpds-py", + "version": "0.30.0", + "license": "MIT", + "flagged": false + }, + { + "name": "secretstorage", + "version": "3.5.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "setuptools", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "six", + "version": "1.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sortedcontainers", + "version": "2.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tomli", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tomli-w", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "twine", + "version": "6.2.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "tzdata", + "version": "2026.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "uri-template", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "urllib3", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "webcolors", + "version": "25.10.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "zipp", + "version": "4.1.0", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/bandscope", + "error": null, + "component_count": 1074, + "components": [ + { + "name": "@adobe/css-tools", + "version": "4.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@asamuzakjp/css-color", + "version": "5.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@asamuzakjp/dom-selector", + "version": "7.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@asamuzakjp/generational-cache", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@asamuzakjp/nwsapi", + "version": "2.3.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/code-frame", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/compat-data", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/core", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/generator", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-compilation-targets", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-globals", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-imports", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-transforms", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-string-parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-identifier", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-option", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helpers", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/parser", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/runtime", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/template", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/traverse", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/types", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@bandscope/desktop", + "version": "0.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@bandscope/shared-types", + "version": "0.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@base-ui/react", + "version": "1.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@base-ui/react", + "version": "^1.5.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@base-ui/utils", + "version": "0.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@bcoe/v8-coverage", + "version": "1.0.2", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "@bramus/specificity", + "version": "2.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/color-helpers", + "version": "6.1.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "@csstools/css-calc", + "version": "3.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-color-parser", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-parser-algorithms", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-syntax-patches-for-csstree", + "version": "1.1.7", + "license": "MIT-0", + "flagged": false + }, + { + "name": "@csstools/css-tokenizer", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "1.11.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "1.9.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.11.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.9.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@es-joy/jsdoccomment", + "version": "0.91.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@es-joy/resolve.exports", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/aix-ppc64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ia32", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-loong64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-mips64el", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ppc64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-riscv64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-s390x", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openharmony-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/sunos-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-ia32", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@eslint-community/eslint-utils", + "version": "4.10.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@eslint-community/regexpp", + "version": "4.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@eslint/config-array", + "version": "0.23.5", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@eslint/config-helpers", + "version": "0.7.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@eslint/core", + "version": "1.2.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@eslint/js", + "version": "10.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@eslint/object-schema", + "version": "3.0.5", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@eslint/plugin-kit", + "version": "0.7.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@exodus/bytes", + "version": "1.15.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@floating-ui/core", + "version": "1.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@floating-ui/dom", + "version": "1.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@floating-ui/react-dom", + "version": "2.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@floating-ui/utils", + "version": "0.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@fontsource-variable/geist", + "version": "5.3.0", + "license": "OFL-1.1", + "flagged": false + }, + { + "name": "@fontsource-variable/geist", + "version": "^5.2.9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@humanfs/core", + "version": "0.19.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@humanfs/node", + "version": "0.16.8", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@humanfs/types", + "version": "0.15.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@humanwhocodes/module-importer", + "version": "1.0.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@humanwhocodes/retry", + "version": "0.4.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@joshwooding/vite-plugin-react-docgen-typescript", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/gen-mapping", + "version": "0.3.13", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/remapping", + "version": "2.3.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/resolve-uri", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/sourcemap-codec", + "version": "1.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-android-arm64", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-darwin-arm64", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-darwin-x64", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-linux-arm-gnueabihf", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-linux-arm64-gnu", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-linux-arm64-musl", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-linux-riscv64-gnu", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-linux-x64-gnu", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-linux-x64-musl", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-win32-arm64-msvc", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/canvas-win32-x64-msvc", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/wasm-runtime", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-android-arm-eabi", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-android-arm64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-darwin-arm64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-darwin-x64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-freebsd-x64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm-gnueabihf", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm-musleabihf", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm64-musl", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-ppc64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-riscv64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-riscv64-musl", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-s390x-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-x64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-x64-musl", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-openharmony-arm64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-wasm32-wasi", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-win32-arm64-msvc", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-win32-ia32-msvc", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-win32-x64-msvc", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-project/types", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-project/types", + "version": "0.143.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-android-arm-eabi", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-android-arm64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-darwin-arm64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-darwin-x64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-freebsd-x64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm-gnueabihf", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm-musleabihf", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm64-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm64-musl", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-ppc64-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-riscv64-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-riscv64-musl", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-s390x-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-x64-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-x64-musl", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-openharmony-arm64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-wasm32-wasi", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-win32-arm64-msvc", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-win32-x64-msvc", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-android-arm64", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-arm64", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-x64", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-freebsd-x64", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm-gnueabihf", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-gnu", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-musl", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-ppc64-gnu", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-s390x-gnu", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-gnu", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-musl", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-openharmony-arm64", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-arm64-msvc", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-x64-msvc", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/pluginutils", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/pluginutils", + "version": "5.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@sindresorhus/base62", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@standard-schema/spec", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/builder-vite", + "version": "10.5.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/csf-plugin", + "version": "10.5.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/global", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/icons", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react", + "version": "10.5.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react-dom-shim", + "version": "10.5.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react-vite", + "version": "10.5.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react-vite", + "version": "^10.4.6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@tailwindcss/node", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-android-arm64", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-darwin-arm64", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-darwin-x64", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-freebsd-x64", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-arm-gnueabihf", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-arm64-gnu", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-arm64-musl", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-x64-gnu", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-x64-musl", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-wasm32-wasi", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-win32-arm64-msvc", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-win32-x64-msvc", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/vite", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/vite", + "version": "^4.3.2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@tauri-apps/api", + "version": "2.11.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/api", + "version": "^2.11.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@tauri-apps/cli", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli", + "version": "^2.11.4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@tauri-apps/cli-darwin-arm64", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-darwin-x64", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-linux-arm-gnueabihf", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-linux-arm64-gnu", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-linux-arm64-musl", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-linux-riscv64-gnu", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-linux-x64-gnu", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-linux-x64-musl", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-win32-arm64-msvc", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-win32-ia32-msvc", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@tauri-apps/cli-win32-x64-msvc", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "@testing-library/dom", + "version": "10.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/jest-dom", + "version": "6.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/jest-dom", + "version": "^6.6.3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@testing-library/react", + "version": "16.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/react", + "version": "^16.2.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@testing-library/user-event", + "version": "14.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tybys/wasm-util", + "version": "0.10.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/aria-query", + "version": "5.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__core", + "version": "7.20.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__generator", + "version": "7.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__template", + "version": "7.4.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__traverse", + "version": "7.28.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/chai", + "version": "5.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/deep-eql", + "version": "4.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/doctrine", + "version": "0.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/esrecurse", + "version": "4.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/estree", + "version": "1.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/json-schema", + "version": "7.0.15", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/node", + "version": "26.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/node", + "version": "^26.1.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@types/react", + "version": "19.2.18", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react", + "version": "^19.2.17", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@types/react-dom", + "version": "19.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react-dom", + "version": "^19.2.3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@types/resolve", + "version": "1.20.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/eslint-plugin", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/parser", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/project-service", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/scope-manager", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/tsconfig-utils", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/type-utils", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/types", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/typescript-estree", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/utils", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/visitor-keys", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitejs/plugin-react", + "version": "6.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitejs/plugin-react", + "version": "^6.0.2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@vitest/coverage-v8", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/coverage-v8", + "version": "^4.1.10", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@vitest/expect", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/expect", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/mocker", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/pretty-format", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/pretty-format", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/runner", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/snapshot", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/spy", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/spy", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/utils", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/utils", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@webcontainer/env", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn", + "version": "8.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn-jsx", + "version": "5.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "a309ff8b426b58ec0e2a45f0f869d46889d02405", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "adler2", + "version": "2.0.1", + "license": "0BSD OR MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "aho-corasick", + "version": "1.1.4", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "ajv", + "version": "6.15.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anchore/sbom-action", + "version": "e22c389904149dbc22b58101806040fa8d37a610", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "android_system_properties", + "version": "0.1.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "antlr4-python3-runtime", + "version": "4.9.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "anyhow", + "version": "1.0.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "aquasecurity/trivy-action", + "version": "ed142fd0673e97e23eac54620cfb913e5ce36c25", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "are-docs-informative", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "aria-query", + "version": "5.3.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "assertion-error", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-types", + "version": "0.16.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-v8-to-istanbul", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "astral-sh/setup-uv", + "version": "11f9893b081a58869d3b5fccaea48c9e9e46f990", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "atk", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "atk-sys", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "atomic-waker", + "version": "1.1.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "audioop-lts", + "version": "0.2.2", + "license": "Python-2.0 AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": false + }, + { + "name": "audioread", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "autocfg", + "version": "1.5.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "balanced-match", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "bandit", + "version": "1.9.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "bandscope-analysis", + "version": "0.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "bandscope-workspace", + "version": "0.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "base64", + "version": "0.21.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "base64", + "version": "0.22.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "baseline-browser-mapping", + "version": "2.11.13", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "bidi-js", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "bit-set", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bit-vec", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bitflags", + "version": "1.3.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bitflags", + "version": "2.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "block-buffer", + "version": "0.10.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "block2", + "version": "0.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "brace-expansion", + "version": "5.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "browserslist", + "version": "4.28.8", + "license": "MIT", + "flagged": false + }, + { + "name": "bs58", + "version": "0.5.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bumpalo", + "version": "3.20.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bundle-name", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "bytemuck", + "version": "1.25.1", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "byteorder", + "version": "1.5.0", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "bytes", + "version": "1.12.1", + "license": "MIT", + "flagged": false + }, + { + "name": "cairo-rs", + "version": "0.18.5", + "license": "MIT", + "flagged": false + }, + { + "name": "cairo-sys-rs", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "camino", + "version": "1.2.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "caniuse-lite", + "version": "1.0.30001809", + "license": "CC-BY-4.0", + "flagged": false + }, + { + "name": "cargo-platform", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cargo_metadata", + "version": "0.19.2", + "license": "MIT", + "flagged": false + }, + { + "name": "cargo_toml", + "version": "0.22.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "cc", + "version": "1.2.67", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.2.25", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cesu8", + "version": "1.1.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "cfb", + "version": "0.7.3", + "license": "MIT", + "flagged": false + }, + { + "name": "cffi", + "version": "2.0.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "cfg-expr", + "version": "0.15.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cfg-if", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "chai", + "version": "5.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "chai", + "version": "6.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "charset-normalizer", + "version": "3.4.6", + "license": "MIT", + "flagged": false + }, + { + "name": "check-error", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "chrono", + "version": "0.4.45", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "class-variance-authority", + "version": "0.7.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "class-variance-authority", + "version": "^0.7.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "cloudpickle", + "version": "3.1.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "clsx", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "clsx", + "version": "^2.1.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "combine", + "version": "4.6.7", + "license": "MIT", + "flagged": false + }, + { + "name": "comment-parser", + "version": "1.4.7", + "license": "MIT", + "flagged": false + }, + { + "name": "convert-source-map", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cookie", + "version": "0.18.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "core-foundation", + "version": "0.10.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "core-foundation-sys", + "version": "0.8.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "core-graphics", + "version": "0.25.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "core-graphics-types", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "coverage", + "version": "7.13.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "cpufeatures", + "version": "0.2.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crc32fast", + "version": "1.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cross-spawn", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "crossbeam-channel", + "version": "0.5.16", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crossbeam-utils", + "version": "0.8.22", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crypto-common", + "version": "0.1.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "css-tree", + "version": "3.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "css.escape", + "version": "1.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "cssparser", + "version": "0.36.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cssparser-macros", + "version": "0.6.1", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "csstype", + "version": "3.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "ctor", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "ctor-proc-macro", + "version": "0.0.7", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "cuda-bindings", + "version": "13.3.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "cuda-pathfinder", + "version": "1.5.6", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "cuda-toolkit", + "version": "13.0.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "darling", + "version": "0.23.0", + "license": "MIT", + "flagged": false + }, + { + "name": "darling_core", + "version": "0.23.0", + "license": "MIT", + "flagged": false + }, + { + "name": "darling_macro", + "version": "0.23.0", + "license": "MIT", + "flagged": false + }, + { + "name": "data-urls", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "debug", + "version": "4.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "decimal.js", + "version": "10.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "decorator", + "version": "5.2.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "deep-eql", + "version": "5.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "deep-is", + "version": "0.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "default-browser", + "version": "5.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "default-browser-id", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "define-lazy-prop", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "demucs", + "version": "4.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "dequal", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "deranged", + "version": "0.5.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "derive_more", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "derive_more-impl", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "detect-libc", + "version": "2.1.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "digest", + "version": "0.10.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dirs", + "version": "6.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dirs-sys", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dispatch2", + "version": "0.3.1", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "displaydoc", + "version": "0.2.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dlib", + "version": "0.5.3", + "license": "MIT", + "flagged": false + }, + { + "name": "dlopen2", + "version": "0.8.2", + "license": "MIT", + "flagged": false + }, + { + "name": "dlopen2_derive", + "version": "0.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "doctrine", + "version": "3.0.0", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "dom-accessibility-api", + "version": "0.5.16", + "license": "MIT", + "flagged": false + }, + { + "name": "dom-accessibility-api", + "version": "0.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "dom_query", + "version": "0.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "dora-search", + "version": "0.1.12", + "license": "MIT", + "flagged": false + }, + { + "name": "downcast-rs", + "version": "1.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dpi", + "version": "0.1.2", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "dtoa", + "version": "1.0.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dtoa-short", + "version": "0.3.5", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "dtor", + "version": "0.3.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "dtor-proc-macro", + "version": "0.0.6", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "dunce", + "version": "1.0.5", + "license": "CC0-1.0 OR MIT-0 OR Apache-2.0", + "flagged": false + }, + { + "name": "dyn-clone", + "version": "1.0.20", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "einops", + "version": "0.8.2", + "license": "MIT", + "flagged": false + }, + { + "name": "electron-to-chromium", + "version": "1.5.403", + "license": "ISC", + "flagged": false + }, + { + "name": "embed-resource", + "version": "3.0.11", + "license": "MIT", + "flagged": false + }, + { + "name": "embed_plist", + "version": "1.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "empathic", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "enhanced-resolve", + "version": "5.24.5", + "license": "MIT", + "flagged": false + }, + { + "name": "entities", + "version": "8.0.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "equivalent", + "version": "1.0.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "erased-serde", + "version": "0.4.10", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "errno", + "version": "0.3.14", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "es-errors", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-module-lexer", + "version": "2.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "esbuild", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "escalade", + "version": "3.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "escape-string-regexp", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint", + "version": "10.8.1", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint", + "version": "^10.7.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "eslint-plugin-jsdoc", + "version": "63.3.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "eslint-scope", + "version": "9.1.2", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "eslint-visitor-keys", + "version": "3.4.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "eslint-visitor-keys", + "version": "5.0.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "espree", + "version": "11.2.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "esprima", + "version": "4.0.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "esquery", + "version": "1.7.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "esrecurse", + "version": "4.3.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "estraverse", + "version": "5.3.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "estree-walker", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "estree-walker", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "esutils", + "version": "2.0.3", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "expect-type", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fast-check", + "version": "4.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-check", + "version": "^4.8.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "fast-deep-equal", + "version": "3.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-json-stable-stringify", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-levenshtein", + "version": "2.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "fastrand", + "version": "2.4.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "fdeflate", + "version": "0.3.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "fdir", + "version": "6.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "field-offset", + "version": "0.3.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "file-entry-cache", + "version": "8.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "filelock", + "version": "3.29.5", + "license": "MIT", + "flagged": false + }, + { + "name": "find-msvc-tools", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "find-up", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "flat-cache", + "version": "4.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "flate2", + "version": "1.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "flatted", + "version": "3.4.4", + "license": "ISC", + "flagged": false + }, + { + "name": "fnv", + "version": "1.0.7", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "foldhash", + "version": "0.2.0", + "license": "Zlib", + "flagged": false + }, + { + "name": "foreign-types", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "foreign-types-macros", + "version": "0.2.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "foreign-types-shared", + "version": "0.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "form_urlencoded", + "version": "1.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "fsspec", + "version": "2026.6.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "function-bind", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "futures-channel", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-core", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-executor", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-io", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-macro", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-sink", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-task", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-util", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "gdk", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gdk-pixbuf", + "version": "0.18.5", + "license": "MIT", + "flagged": false + }, + { + "name": "gdk-pixbuf-sys", + "version": "0.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "gdk-sys", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gdkwayland-sys", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "generic-array", + "version": "0.14.7", + "license": "MIT", + "flagged": false + }, + { + "name": "gensync", + "version": "1.0.0-beta.2", + "license": "MIT", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.2.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.3.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.4.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "gio", + "version": "0.18.4", + "license": "MIT", + "flagged": false + }, + { + "name": "gio-sys", + "version": "0.18.1", + "license": "MIT", + "flagged": false + }, + { + "name": "github/codeql-action/upload-sarif", + "version": "99df26d4f13ea111d4ec1a7dddef6063f76b97e9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "glib", + "version": "0.18.5", + "license": "MIT", + "flagged": false + }, + { + "name": "glib-macros", + "version": "0.18.5", + "license": "MIT", + "flagged": false + }, + { + "name": "glib-sys", + "version": "0.18.1", + "license": "MIT", + "flagged": false + }, + { + "name": "glob", + "version": "0.3.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "glob", + "version": "13.0.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "glob-parent", + "version": "6.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "gobject-sys", + "version": "0.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "graceful-fs", + "version": "4.2.11", + "license": "ISC", + "flagged": false + }, + { + "name": "gtk", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gtk-sys", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gtk3-macros", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "has-flag", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hashbrown", + "version": "0.12.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hashbrown", + "version": "0.17.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hasown", + "version": "2.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "heck", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "heck", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hex", + "version": "0.4.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "html-encoding-sniffer", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "html-entities", + "version": "2.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "html-escaper", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "html5ever", + "version": "0.38.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "http", + "version": "1.4.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "http-body", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "http-body-util", + "version": "0.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "httparse", + "version": "1.10.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hyper", + "version": "1.10.1", + "license": "MIT", + "flagged": false + }, + { + "name": "hyper-util", + "version": "0.1.20", + "license": "MIT", + "flagged": false + }, + { + "name": "iana-time-zone", + "version": "0.1.65", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "iana-time-zone-haiku", + "version": "0.1.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ico", + "version": "0.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "icu_collections", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_locale_core", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_normalizer", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_normalizer_data", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_properties", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_properties_data", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_provider", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "ident_case", + "version": "1.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "idna", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "idna_adapter", + "version": "1.2.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "ignore", + "version": "5.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ignore", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "imurmurhash", + "version": "0.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "indent-string", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "indexmap", + "version": "1.9.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "indexmap", + "version": "2.14.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "infer", + "version": "0.19.0", + "license": "MIT", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ipnet", + "version": "2.12.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "is-core-module", + "version": "2.16.2", + "license": "MIT", + "flagged": false + }, + { + "name": "is-docker", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-extglob", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-glob", + "version": "4.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "is-inside-container", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-potential-custom-element-name", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-wsl", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "isexe", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "istanbul-lib-coverage", + "version": "3.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-report", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-reports", + "version": "3.2.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "itoa", + "version": "1.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "javascriptcore-rs", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "javascriptcore-rs-sys", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jinja2", + "version": "3.1.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "jiti", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jni", + "version": "0.21.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jni-sys", + "version": "0.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jni-sys", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jni-sys-macros", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "joblib", + "version": "1.5.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "js-sys", + "version": "0.3.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "js-tokens", + "version": "10.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsdoc-type-pratt-parser", + "version": "8.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsdom", + "version": "29.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsdom", + "version": "^29.1.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "jsesc", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "json-buffer", + "version": "3.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "json-patch", + "version": "3.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "json-schema-traverse", + "version": "0.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "json-stable-stringify-without-jsonify", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "json5", + "version": "2.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonc-parser", + "version": "3.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonptr", + "version": "0.6.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "julius", + "version": "0.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "keyboard-types", + "version": "0.7.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "keyv", + "version": "4.5.4", + "license": "MIT", + "flagged": false + }, + { + "name": "lameenc", + "version": "1.8.4", + "license": "GPL-3.0-or-later", + "flagged": true + }, + { + "name": "lazy-loader", + "version": "0.5", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "levn", + "version": "0.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "libc", + "version": "0.2.186", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "libloading", + "version": "0.8.9", + "license": "ISC", + "flagged": false + }, + { + "name": "libredox", + "version": "0.1.18", + "license": "MIT", + "flagged": false + }, + { + "name": "librosa", + "version": "0.11.0", + "license": "ISC", + "flagged": false + }, + { + "name": "librt", + "version": "0.8.1", + "license": "BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1", + "flagged": false + }, + { + "name": "lightningcss", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-android-arm64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-arm64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-x64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-freebsd-x64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-gnu", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-musl", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-gnu", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-musl", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-arm64-msvc", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-x64-msvc", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "linux-raw-sys", + "version": "0.12.1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "litemap", + "version": "0.8.2", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "llvmlite", + "version": "0.45.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "locate-path", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lock_api", + "version": "0.4.14", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "log", + "version": "0.4.33", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "loupe", + "version": "3.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "lru-cache", + "version": "11.5.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "lru-cache", + "version": "5.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "lucide-react", + "version": "1.30.0", + "license": "ISC", + "flagged": false + }, + { + "name": "lucide-react", + "version": "^1.24.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "lz-string", + "version": "1.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "magic-string", + "version": "0.30.21", + "license": "MIT", + "flagged": false + }, + { + "name": "magicast", + "version": "0.5.4", + "license": "MIT", + "flagged": false + }, + { + "name": "make-dir", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "markdown-it-py", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "markup5ever", + "version": "0.38.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "markupsafe", + "version": "3.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "matrixmultiply", + "version": "0.3.10", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "maturin", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "mdn-data", + "version": "2.27.1", + "license": "CC0-1.0", + "flagged": false + }, + { + "name": "mdurl", + "version": "0.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "memchr", + "version": "2.8.3", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "memoffset", + "version": "0.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "mime", + "version": "0.3.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "min-indent", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "minimatch", + "version": "10.2.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "minimist", + "version": "1.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "minipass", + "version": "7.1.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "miniz_oxide", + "version": "0.8.9", + "license": "MIT OR Zlib OR Apache-2.0", + "flagged": false + }, + { + "name": "mio", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "mpmath", + "version": "1.3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "ms", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "msgpack", + "version": "1.2.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "muda", + "version": "0.19.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "mypy", + "version": "1.19.1", + "license": "BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1", + "flagged": false + }, + { + "name": "mypy-extensions", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "nanoid", + "version": "3.3.18", + "license": "MIT", + "flagged": false + }, + { + "name": "natural-compare", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ndarray", + "version": "0.16.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ndk", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ndk-sys", + "version": "0.6.0+11769913", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "networkx", + "version": "3.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "new_debug_unreachable", + "version": "1.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "node-releases", + "version": "2.0.53", + "license": "MIT", + "flagged": false + }, + { + "name": "num-complex", + "version": "0.4.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-conv", + "version": "0.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-integer", + "version": "0.1.46", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-traits", + "version": "0.2.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num_enum", + "version": "0.7.6", + "license": "BSD-3-Clause OR MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num_enum_derive", + "version": "0.7.6", + "license": "BSD-3-Clause OR MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "numba", + "version": "0.62.1", + "license": "0BSD AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND LicenseRef-scancode-python-cwi AND LicenseRef-scancode-secret-labs-2011 AND LicenseRef-scancode-unicode AND MIT AND Python-2.0", + "flagged": false + }, + { + "name": "numpy", + "version": "0.29.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "numpy", + "version": "2.3.5", + "license": "Apache-2.0 AND BSD-3-Clause AND MIT AND Zlib", + "flagged": false + }, + { + "name": "nvidia-cublas", + "version": "13.1.1.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nvidia-cuda-cupti", + "version": "13.0.85", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nvidia-cuda-nvrtc", + "version": "13.0.88", + "license": "LicenseRef-NVIDIA-Proprietary", + "flagged": false + }, + { + "name": "nvidia-cuda-runtime", + "version": "13.0.96", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nvidia-cudnn-cu13", + "version": "9.20.0.48", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nvidia-cufft", + "version": "12.0.0.61", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nvidia-cufile", + "version": "1.15.1.6", + "license": "LicenseRef-NVIDIA-Proprietary", + "flagged": false + }, + { + "name": "nvidia-curand", + "version": "10.4.0.35", + "license": "LicenseRef-NVIDIA-Proprietary", + "flagged": false + }, + { + "name": "nvidia-cusolver", + "version": "12.0.4.66", + "license": "LicenseRef-NVIDIA-Proprietary", + "flagged": false + }, + { + "name": "nvidia-cusparse", + "version": "12.6.3.3", + "license": "LicenseRef-NVIDIA-Proprietary", + "flagged": false + }, + { + "name": "nvidia-cusparselt-cu13", + "version": "0.8.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nvidia-nccl-cu13", + "version": "2.29.7", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nvidia-nvjitlink", + "version": "13.0.88", + "license": "LicenseRef-NVIDIA-Proprietary", + "flagged": false + }, + { + "name": "nvidia-nvshmem-cu13", + "version": "3.4.5", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nvidia-nvtx", + "version": "13.0.85", + "license": "LicenseRef-NVIDIA-Proprietary", + "flagged": false + }, + { + "name": "objc2", + "version": "0.6.4", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-app-kit", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-cloud-kit", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-data", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-foundation", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-graphics", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-image", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-location", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-text", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-encode", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-exception-helper", + "version": "0.1.1", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-foundation", + "version": "0.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-io-surface", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-quartz-core", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-ui-kit", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-user-notifications", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-web-kit", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "object-deep-merge", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "obug", + "version": "2.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "omegaconf", + "version": "2.3.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "once_cell", + "version": "1.21.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "open", + "version": "10.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "openunmix", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "option-ext", + "version": "0.2.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "optionator", + "version": "0.9.4", + "license": "MIT", + "flagged": false + }, + { + "name": "ossf/scorecard-action", + "version": "4eaacf0543bb3f2c246792bd56e8cdeffafb205a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "oxc-parser", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "oxc-resolver", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "p-limit", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "p-locate", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.0", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "pango", + "version": "0.18.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pango-sys", + "version": "0.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "parking_lot", + "version": "0.12.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "parking_lot_core", + "version": "0.9.12", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "parse-imports-exports", + "version": "0.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "parse-statements", + "version": "1.0.11", + "license": "JSON AND MIT", + "flagged": false + }, + { + "name": "parse5", + "version": "8.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-exists", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "path-key", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-parse", + "version": "1.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "path-scurry", + "version": "2.0.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "pathe", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pathspec", + "version": "1.0.4", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "pathval", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pdfjs-dist", + "version": "6.2.108", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "percent-encoding", + "version": "2.3.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "phf", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "phf_codegen", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "phf_generator", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "phf_macros", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "phf_shared", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "picocolors", + "version": "1.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "picomatch", + "version": "4.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "pin-project-lite", + "version": "0.2.17", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "pkg-config", + "version": "0.3.33", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "platformdirs", + "version": "4.9.4", + "license": "MIT", + "flagged": false + }, + { + "name": "plist", + "version": "1.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "png", + "version": "0.17.16", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "png", + "version": "0.18.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pollster", + "version": "0.4.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "pooch", + "version": "1.9.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "portable-atomic", + "version": "1.13.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "portable-atomic-util", + "version": "0.2.7", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "postcss", + "version": "8.5.25", + "license": "MIT", + "flagged": false + }, + { + "name": "potential_utf", + "version": "0.1.5", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "powerfmt", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "precomputed-hash", + "version": "0.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prelude-ls", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pretty-format", + "version": "27.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "proc-macro-crate", + "version": "1.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro-crate", + "version": "2.0.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro-crate", + "version": "3.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro-error", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro-error-attr", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro2", + "version": "1.0.106", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "punycode", + "version": "2.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pure-rand", + "version": "8.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pyo3", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-build-config", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-ffi", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-macros", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-macros-backend", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pytest", + "version": "9.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-cov", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pyyaml", + "version": "6.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "quick-xml", + "version": "0.39.4", + "license": "MIT", + "flagged": false + }, + { + "name": "quick-xml", + "version": "0.41.0", + "license": "MIT", + "flagged": false + }, + { + "name": "quote", + "version": "1.0.46", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "r-efi", + "version": "5.3.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "r-efi", + "version": "6.0.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "raw-window-handle", + "version": "0.6.2", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "rawpointer", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "react", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react", + "version": "^19.2.4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "react-docgen", + "version": "8.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "react-docgen-typescript", + "version": "2.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "react-dom", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react-dom", + "version": "^19.2.7", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "react-is", + "version": "17.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "recast", + "version": "0.23.19", + "license": "MIT", + "flagged": false + }, + { + "name": "redent", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "redox_syscall", + "version": "0.5.18", + "license": "MIT", + "flagged": false + }, + { + "name": "redox_users", + "version": "0.5.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ref-cast", + "version": "1.0.25", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ref-cast-impl", + "version": "1.0.25", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex", + "version": "1.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex-automata", + "version": "0.4.15", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex-syntax", + "version": "0.8.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "requests", + "version": "2.33.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "require-from-string", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "reqwest", + "version": "0.13.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "reselect", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "reserved-identifiers", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "resolve", + "version": "1.22.12", + "license": "MIT", + "flagged": false + }, + { + "name": "retrying", + "version": "1.4.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "rfd", + "version": "0.17.2", + "license": "MIT", + "flagged": false + }, + { + "name": "rich", + "version": "15.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rolldown", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "ruff", + "version": "0.15.5", + "license": "MIT", + "flagged": false + }, + { + "name": "run-applescript", + "version": "7.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rustc-hash", + "version": "2.1.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "rustc_version", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rustix", + "version": "1.1.4", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "rustversion", + "version": "1.0.23", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "same-file", + "version": "1.0.6", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "saxes", + "version": "6.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "scheduler", + "version": "0.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "schemars", + "version": "0.8.22", + "license": "MIT", + "flagged": false + }, + { + "name": "schemars", + "version": "0.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "schemars", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "schemars_derive", + "version": "0.8.22", + "license": "MIT", + "flagged": false + }, + { + "name": "scikit-learn", + "version": "1.8.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "scipy", + "version": "1.17.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "scoped-tls", + "version": "1.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "scopeguard", + "version": "1.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "selectors", + "version": "0.36.1", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "semver", + "version": "1.0.28", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "semver", + "version": "6.3.1", + "license": "ISC", + "flagged": false + }, + { + "name": "semver", + "version": "7.8.5", + "license": "ISC", + "flagged": false + }, + { + "name": "serde", + "version": "1.0.228", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "serde-untagged", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_core", + "version": "1.0.228", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive", + "version": "1.0.228", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive_internals", + "version": "0.29.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": "1.0.150", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "serde_repr", + "version": "0.1.20", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_spanned", + "version": "0.6.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_spanned", + "version": "1.1.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_with", + "version": "3.21.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_with_macros", + "version": "3.21.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serialize-to-javascript", + "version": "0.1.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serialize-to-javascript-impl", + "version": "0.1.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "servo_arc", + "version": "0.4.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "setuptools", + "version": "81.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sha2", + "version": "0.10.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "shebang-command", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shebang-regex", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shlex", + "version": "2.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "siginfo", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "simd-adler32", + "version": "0.3.9", + "license": "MIT", + "flagged": false + }, + { + "name": "siphasher", + "version": "1.0.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "slab", + "version": "0.4.12", + "license": "MIT", + "flagged": false + }, + { + "name": "smallvec", + "version": "1.15.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "socket2", + "version": "0.6.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "softbuffer", + "version": "0.4.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sonner", + "version": "2.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "sonner", + "version": "^2.0.7", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "soundfile", + "version": "0.13.1", + "license": "BSD-3-Clause AND Python-2.0", + "flagged": false + }, + { + "name": "soup3", + "version": "0.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "soup3-sys", + "version": "0.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "source-map", + "version": "0.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "source-map-js", + "version": "1.2.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "soxr", + "version": "1.0.0", + "license": "Python-2.0 AND LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "spdx-exceptions", + "version": "2.5.0", + "license": "CC-BY-3.0", + "flagged": false + }, + { + "name": "spdx-expression-parse", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "spdx-license-ids", + "version": "3.0.23", + "license": "CC0-1.0", + "flagged": false + }, + { + "name": "stable_deref_trait", + "version": "1.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "stackback", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "standard-aifc", + "version": "3.13.0", + "license": "PSF-2.0", + "flagged": false + }, + { + "name": "standard-chunk", + "version": "3.13.0", + "license": "PSF-2.0", + "flagged": false + }, + { + "name": "standard-sunau", + "version": "3.13.0", + "license": "PSF-2.0", + "flagged": false + }, + { + "name": "std-env", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "stevedore", + "version": "5.7.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "storybook", + "version": "10.5.7", + "license": "MIT", + "flagged": false + }, + { + "name": "storybook", + "version": "^10.4.6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "string_cache", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "string_cache_codegen", + "version": "0.6.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "strip-bom", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-indent", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-indent", + "version": "4.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "strsim", + "version": "0.11.1", + "license": "MIT", + "flagged": false + }, + { + "name": "submitit", + "version": "1.5.4", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-preserve-symlinks-flag", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "swift-rs", + "version": "1.0.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "symbol-tree", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "sympy", + "version": "1.14.0", + "license": "BSD-2-Clause AND BSD-3-Clause AND MIT", + "flagged": false + }, + { + "name": "syn", + "version": "1.0.109", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "2.0.118", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sync_wrapper", + "version": "1.0.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "synstructure", + "version": "0.13.2", + "license": "MIT", + "flagged": false + }, + { + "name": "system-deps", + "version": "6.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tailwind-merge", + "version": "3.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tailwind-merge", + "version": "^3.6.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "tailwindcss", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tailwindcss", + "version": "^4.2.4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "tao", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tao-macros", + "version": "0.1.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tapable", + "version": "2.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "target-lexicon", + "version": "0.12.16", + "license": "Apache-2.0 WITH LLVM-exception", + "flagged": false + }, + { + "name": "target-lexicon", + "version": "0.13.5", + "license": "Apache-2.0 WITH LLVM-exception", + "flagged": false + }, + { + "name": "tauri", + "version": "2.11.5", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-build", + "version": "2.6.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-codegen", + "version": "2.6.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-macros", + "version": "2.6.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-runtime", + "version": "2.11.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-runtime-wry", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-utils", + "version": "2.9.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-winres", + "version": "0.3.6", + "license": "MIT", + "flagged": false + }, + { + "name": "tendril", + "version": "0.5.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror", + "version": "1.0.69", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror", + "version": "2.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror-impl", + "version": "1.0.69", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror-impl", + "version": "2.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "threadpoolctl", + "version": "3.6.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "time", + "version": "0.3.53", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time", + "version": ">= 0.3.0,< 0.4.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "time-core", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time-macros", + "version": "0.2.31", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tiny-invariant", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tinybench", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyexec", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyglobby", + "version": "0.2.17", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyrainbow", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyrainbow", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyspy", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tinystr", + "version": "0.8.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "tinyvec", + "version": "1.12.0", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tinyvec_macros", + "version": "0.1.1", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "tldts", + "version": "7.4.10", + "license": "MIT", + "flagged": false + }, + { + "name": "tldts-core", + "version": "7.4.10", + "license": "MIT", + "flagged": false + }, + { + "name": "to-valid-identifier", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tokio", + "version": "1.52.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tokio-util", + "version": "0.7.18", + "license": "MIT", + "flagged": false + }, + { + "name": "toml", + "version": "0.8.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml", + "version": "0.9.12+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml", + "version": "1.1.2+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_datetime", + "version": "0.6.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_datetime", + "version": "0.7.5+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_datetime", + "version": "1.1.1+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_edit", + "version": "0.19.15", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_edit", + "version": "0.20.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_edit", + "version": "0.25.12+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_parser", + "version": "1.1.2+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_writer", + "version": "1.1.1+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "torch", + "version": "2.12.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "torchaudio", + "version": "2.11.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "tough-cookie", + "version": "6.0.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "tower", + "version": "0.5.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tower-http", + "version": "0.6.11", + "license": "MIT", + "flagged": false + }, + { + "name": "tower-layer", + "version": "0.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tower-service", + "version": "0.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tqdm", + "version": "4.68.3", + "license": "MIT AND MPL-2.0", + "flagged": true + }, + { + "name": "tr46", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tracing", + "version": "0.1.44", + "license": "MIT", + "flagged": false + }, + { + "name": "tracing-core", + "version": "0.1.36", + "license": "MIT", + "flagged": false + }, + { + "name": "treetable", + "version": "0.2.6", + "license": "Unlicense", + "flagged": false + }, + { + "name": "triton", + "version": "3.7.1", + "license": "MIT", + "flagged": false + }, + { + "name": "try-lock", + "version": "0.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "ts-api-utils", + "version": "2.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ts-dedent", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tsconfig-paths", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tslib", + "version": "2.8.1", + "license": "0BSD", + "flagged": false + }, + { + "name": "tw-animate-css", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tw-animate-css", + "version": "^1.4.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "type-check", + "version": "0.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "typeid", + "version": "1.0.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "typenum", + "version": "1.20.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "typescript", + "version": "6.0.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "typescript", + "version": "^6.0.3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "typescript-eslint", + "version": "8.66.0", + "license": "MIT", + "flagged": false + }, + { + "name": "typescript-eslint", + "version": "^8.63.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "undici", + "version": "7.29.0", + "license": "MIT", + "flagged": false + }, + { + "name": "undici-types", + "version": "8.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "unic-char-property", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unic-char-range", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unic-common", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unic-ucd-ident", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unic-ucd-version", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unicode-ident", + "version": "1.0.24", + "license": "(MIT OR Apache-2.0) AND Unicode-3.0", + "flagged": false + }, + { + "name": "unicode-segmentation", + "version": "1.13.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unplugin", + "version": "2.3.11", + "license": "MIT", + "flagged": false + }, + { + "name": "update-browserslist-db", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "uri-js", + "version": "4.4.1", + "license": "BSD-2-Clause AND BSD-2-Clause-Views", + "flagged": false + }, + { + "name": "url", + "version": "2.5.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "url", + "version": ">= 2.5.8,< 3.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "urllib3", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "urlpattern", + "version": "0.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "use-sync-external-store", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "utf8_iter", + "version": "1.0.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "uuid", + "version": "1.23.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "uuid", + "version": "1.25.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "uuid", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "version-compare", + "version": "0.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "version_check", + "version": "0.9.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "vite", + "version": "8.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "vite", + "version": "^8.1.4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "vitest", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "vitest", + "version": "^4.1.10", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "vswhom", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "vswhom-sys", + "version": "0.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "w3c-xmlserializer", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "walkdir", + "version": "2.5.0", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "want", + "version": "0.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "wasi", + "version": "0.11.1+wasi-snapshot-preview1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "wasip2", + "version": "1.0.4+wasi-0.2.12", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "wasm-bindgen", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-futures", + "version": "0.4.76", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro-support", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-shared", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-streams", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wayland-backend", + "version": "0.3.15", + "license": "MIT", + "flagged": false + }, + { + "name": "wayland-client", + "version": "0.31.14", + "license": "MIT", + "flagged": false + }, + { + "name": "wayland-protocols", + "version": "0.32.13", + "license": "MIT", + "flagged": false + }, + { + "name": "wayland-scanner", + "version": "0.31.10", + "license": "MIT", + "flagged": false + }, + { + "name": "wayland-sys", + "version": "0.31.11", + "license": "MIT", + "flagged": false + }, + { + "name": "web-sys", + "version": "0.3.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "web_atoms", + "version": "0.2.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "webidl-conversions", + "version": "8.0.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "webkit2gtk", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "webkit2gtk-sys", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "webpack-virtual-modules", + "version": "0.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "webview2-com", + "version": "0.38.2", + "license": "MIT", + "flagged": false + }, + { + "name": "webview2-com-macros", + "version": "0.8.1", + "license": "MIT", + "flagged": false + }, + { + "name": "webview2-com-sys", + "version": "0.38.2", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-mimetype", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-url", + "version": "16.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "which", + "version": "2.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "why-is-node-running", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "winapi", + "version": "0.3.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "winapi-i686-pc-windows-gnu", + "version": "0.4.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "winapi-util", + "version": "0.1.11", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "winapi-x86_64-pc-windows-gnu", + "version": "0.4.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "window-vibrancy", + "version": "0.6.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "windows", + "version": "0.61.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-collections", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-core", + "version": "0.61.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-core", + "version": "0.62.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-future", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-implement", + "version": "0.60.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-interface", + "version": "0.59.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-link", + "version": "0.1.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-link", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-numerics", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-result", + "version": "0.3.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-result", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-strings", + "version": "0.4.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-strings", + "version": "0.5.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.45.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.59.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.61.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-targets", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-targets", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-threading", + "version": "0.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-version", + "version": "0.1.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_gnullvm", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_msvc", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnu", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnu", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_msvc", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnu", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnu", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnullvm", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_msvc", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "winnow", + "version": "0.5.40", + "license": "MIT", + "flagged": false + }, + { + "name": "winnow", + "version": "0.7.15", + "license": "MIT", + "flagged": false + }, + { + "name": "winnow", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "winreg", + "version": "0.55.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wit-bindgen", + "version": "0.57.1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "word-wrap", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "writeable", + "version": "0.6.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "wry", + "version": "0.55.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "ws", + "version": "8.21.3", + "license": "MIT", + "flagged": false + }, + { + "name": "wsl-utils", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "xml-name-validator", + "version": "5.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "xmlchars", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "yallist", + "version": "3.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "yocto-queue", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "yoke", + "version": "0.8.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "yoke-derive", + "version": "0.8.2", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "yt-dlp", + "version": "2026.7.4", + "license": "Unlicense AND Unlicense AND GPL-3.0-or-later AND MPL-2.0 AND MIT AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-or-later AND BSD-3-Clause AND MIT AND LGPL-2.1-only AND BSD-2-Clause AND GPL-2.0-or-later", + "flagged": true + }, + { + "name": "zerofrom", + "version": "0.1.8", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerofrom-derive", + "version": "0.1.7", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerotrie", + "version": "0.2.4", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerovec", + "version": "0.11.6", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerovec-derive", + "version": "0.11.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zmij", + "version": "1.0.21", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/CalendarWeave", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/ccube-jco-potential-customer", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/clearfolio", + "error": null, + "component_count": 30, + "components": [ + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-java", + "version": "b6effb05e454b25005698d916606bdc6ffcbf961", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "com.code-intelligence:jazzer-api", + "version": "0.30.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "com.code-intelligence:jazzer-junit", + "version": "0.30.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "com.fasterxml.jackson.core:jackson-databind", + "version": "2.22.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "com.fasterxml.jackson:jackson-bom", + "version": "2.22.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "com.github.junrar:junrar", + "version": "8.1.0", + "license": "LicenseRef-bad-non-standard", + "flagged": false + }, + { + "name": "commons-io:commons-io", + "version": "2.22.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "org.apache.commons:commons-lang3", + "version": "3.20.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.apache.maven.plugins:maven-compiler-plugin", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.apache.maven.plugins:maven-javadoc-plugin", + "version": "3.12.0", + "license": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-scancode-public-domain AND MIT", + "flagged": false + }, + { + "name": "org.apache.maven.plugins:maven-surefire-plugin", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.apache.pdfbox:pdfbox", + "version": "3.0.8", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.bouncycastle:bcpkix-jdk18on", + "version": "1.85", + "license": "MIT", + "flagged": false + }, + { + "name": "org.bouncycastle:bcprov-jdk18on", + "version": "1.85.2", + "license": "LicenseRef-bad-non-standard", + "flagged": false + }, + { + "name": "org.jacoco:jacoco-maven-plugin", + "version": "0.8.15", + "license": "EPL-2.0 OR (Apache-2.0 AND EPL-2.0)", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-maven-plugin", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-starter-log4j2", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-starter-test", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-starter-validation", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-starter-webflux", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.webjars.npm:pdfjs-dist", + "version": "6.1.200", + "license": "Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND MIT AND OFL-1.1", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/codec-carver", + "error": null, + "component_count": 208, + "components": [ + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aho-corasick", + "version": "1.1.4", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "aiofiles", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aiofiles", + "version": "25.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0", + "flagged": true + }, + { + "name": "aiohttp", + "version": "3.14.3", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "aiosignal", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "android_system_properties", + "version": "0.1.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "annotated-doc", + "version": "0.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-types", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anstream", + "version": "1.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "anstyle", + "version": "1.0.14", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "anstyle-parse", + "version": "1.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "anstyle-query", + "version": "1.1.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "anstyle-wincon", + "version": "3.0.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "anyhow", + "version": "1.0.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.1", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "atheris", + "version": "3.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "attrs", + "version": "26.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "autocfg", + "version": "1.5.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bitflags", + "version": "2.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "block-buffer", + "version": "0.10.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "block2", + "version": "0.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "bumpalo", + "version": "3.20.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cc", + "version": "1.2.67", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cffi", + "version": "2.1.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "cfg-if", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "charset-normalizer", + "version": "3.4.9", + "license": "MIT", + "flagged": false + }, + { + "name": "chrono", + "version": "0.4.45", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "clap", + "version": "4.6.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "clap_builder", + "version": "4.6.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "clap_derive", + "version": "4.6.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "clap_lex", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "colorchoice", + "version": "1.0.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "core-foundation-sys", + "version": "0.8.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "coverage", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "coverage", + "version": "7.15.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "cpufeatures", + "version": "0.2.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crossbeam-deque", + "version": "0.8.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crossbeam-epoch", + "version": "0.9.20", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crossbeam-utils", + "version": "0.8.22", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crypto-common", + "version": "0.1.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cryptography", + "version": "49.0.0", + "license": "BSD-3-Clause OR Apache-2.0", + "flagged": false + }, + { + "name": "cryptography", + "version": "50.0.0", + "license": "Apache-2.0 OR BSD-3-Clause", + "flagged": false + }, + { + "name": "datasets", + "version": "5.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "digest", + "version": "0.10.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dill", + "version": "0.4.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "either", + "version": "1.16.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "exceptiongroup", + "version": "1.3.1", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "fastapi", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "fastapi", + "version": "0.139.0", + "license": "MIT", + "flagged": false + }, + { + "name": "faster-whisper", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "filelock", + "version": "3.30.2", + "license": "MIT", + "flagged": false + }, + { + "name": "find-msvc-tools", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "frozenlist", + "version": "1.8.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fsspec", + "version": "2026.4.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "futures-core", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-task", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-util", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "generic-array", + "version": "0.14.7", + "license": "MIT", + "flagged": false + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "heck", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hf-xet", + "version": "1.5.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpcore2", + "version": "2.5.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx-sse", + "version": "0.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "httpx2", + "version": "2.5.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "huggingface-hub", + "version": "1.23.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "hypothesis", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "hypothesis", + "version": "6.165.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "iana-time-zone", + "version": "0.1.65", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "iana-time-zone-haiku", + "version": "0.1.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "interrogate", + "version": "1.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is_terminal_polyfill", + "version": "1.70.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "itoa", + "version": "1.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jinja2", + "version": "3.1.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "js-sys", + "version": "0.3.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jsonschema", + "version": "4.26.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonschema-specifications", + "version": "2025.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "libc", + "version": "0.2.186", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "llguidance", + "version": "1.7.6", + "license": "MIT", + "flagged": false + }, + { + "name": "llvmlite", + "version": "0.48.0", + "license": "LicenseRef-bad-bsd-2-clause-and-apache-2.0-and-llvm-exception-and-bsd-2-clause", + "flagged": false + }, + { + "name": "log", + "version": "0.4.33", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "markdown-it-py", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "markupsafe", + "version": "3.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "mcp", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "mcp", + "version": "1.28.1", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "mdurl", + "version": "0.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "memchr", + "version": "2.8.3", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "miniaudio", + "version": "1.71", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "mlx", + "version": "0.32.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mlx-audio", + "version": "0.4.5", + "license": "MIT", + "flagged": false + }, + { + "name": "mlx-lm", + "version": "0.31.3", + "license": "MIT", + "flagged": false + }, + { + "name": "mlx-metal", + "version": "0.32.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mlx-vlm", + "version": "0.6.4", + "license": "MIT", + "flagged": false + }, + { + "name": "mlx-whisper", + "version": "0.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "more-itertools", + "version": "11.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mpmath", + "version": "1.3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "multidict", + "version": "6.7.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "multiprocess", + "version": "0.70.19", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "networkx", + "version": "3.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "num-traits", + "version": "0.2.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "numba", + "version": "0.66.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "numpy", + "version": "2.4.6", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "objc2", + "version": "0.6.4", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-encode", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-foundation", + "version": "0.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "once_cell", + "version": "1.21.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "once_cell_polyfill", + "version": "1.70.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "opencv-python", + "version": "5.0.0.93", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "pandas", + "version": "3.0.3", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "pillow", + "version": "12.3.0", + "license": "MIT-CMU", + "flagged": false + }, + { + "name": "pin-project-lite", + "version": "0.2.17", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "proc-macro2", + "version": "1.0.106", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "propcache", + "version": "0.5.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "protobuf", + "version": "7.35.1", + "license": "BSD-3-Clause AND LicenseRef-scancode-protobuf", + "flagged": false + }, + { + "name": "pyarrow", + "version": "25.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pydantic", + "version": "2.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-core", + "version": "2.46.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-settings", + "version": "2.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pyjwt", + "version": "2.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "python-dateutil", + "version": "2.9.0.post0", + "license": "Apache-2.0 AND BSD-3-Clause", + "flagged": false + }, + { + "name": "python-dotenv", + "version": "1.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "python-multipart", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "python-multipart", + "version": "0.0.32", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pywin32", + "version": "312", + "license": "PSF-2.0", + "flagged": false + }, + { + "name": "pyyaml", + "version": "6.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "quote", + "version": "1.0.46", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rayon", + "version": "1.12.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rayon-core", + "version": "1.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "referencing", + "version": "0.37.0", + "license": "MIT", + "flagged": false + }, + { + "name": "regex", + "version": "1.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex", + "version": "2026.7.10", + "license": "CNRI-Python AND Apache-2.0", + "flagged": false + }, + { + "name": "regex-automata", + "version": "0.4.15", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex-syntax", + "version": "0.8.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "requests", + "version": "2.34.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "rich", + "version": "15.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rpds-py", + "version": "0.30.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rpds-py", + "version": "2026.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "rustversion", + "version": "1.0.23", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "safetensors", + "version": "0.8.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "same-file", + "version": "1.0.6", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "scipy", + "version": "1.18.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "sentencepiece", + "version": "0.2.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "serde", + "version": "1.0.228", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_core", + "version": "1.0.228", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive", + "version": "1.0.228", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": "1.0.150", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "setuptools", + "version": "83.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sha2", + "version": "0.10.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "shellingham", + "version": "1.5.4", + "license": "ISC", + "flagged": false + }, + { + "name": "shlex", + "version": "2.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "six", + "version": "1.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "slab", + "version": "0.4.12", + "license": "MIT", + "flagged": false + }, + { + "name": "sortedcontainers", + "version": "2.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "sounddevice", + "version": "0.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "sse-starlette", + "version": "3.4.5", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "starlette", + "version": "1.3.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "strsim", + "version": "0.11.1", + "license": "MIT", + "flagged": false + }, + { + "name": "sympy", + "version": "1.14.0", + "license": "BSD-2-Clause AND BSD-3-Clause AND MIT", + "flagged": false + }, + { + "name": "syn", + "version": "2.0.119", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tiktoken", + "version": "0.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyvec", + "version": "1.12.0", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tinyvec_macros", + "version": "0.1.1", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "tokenizers", + "version": "0.22.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "torch", + "version": "2.13.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "tqdm", + "version": "4.68.4", + "license": "MIT AND MPL-2.0", + "flagged": true + }, + { + "name": "transformers", + "version": "5.12.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "truststore", + "version": "0.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "typenum", + "version": "1.20.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "typer", + "version": "0.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "unicode-ident", + "version": "1.0.24", + "license": "(MIT OR Apache-2.0) AND Unicode-3.0", + "flagged": false + }, + { + "name": "unicode-normalization", + "version": "0.1.25", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "urllib3", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "utf8parse", + "version": "0.2.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "uvicorn", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "uvicorn", + "version": "0.51.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "version_check", + "version": "0.9.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "walkdir", + "version": "2.5.0", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "wasm-bindgen", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro-support", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-shared", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "winapi-util", + "version": "0.1.11", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "windows-core", + "version": "0.62.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-implement", + "version": "0.60.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-interface", + "version": "0.59.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-link", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-result", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-strings", + "version": "0.5.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.61.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "xxhash", + "version": "3.8.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "yarl", + "version": "1.24.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "zmij", + "version": "1.0.23", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/ConceptWeave", + "error": null, + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/context-graph-contracts", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/contextual-orchestrator", + "error": null, + "component_count": 545, + "components": [ + { + "name": "@adobe/css-tools", + "version": "4.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/code-frame", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/compat-data", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/core", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/generator", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-compilation-targets", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-globals", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-imports", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-transforms", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-string-parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-identifier", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-option", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helpers", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/parser", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/runtime", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/template", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/traverse", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/types", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@bcoe/v8-coverage", + "version": "1.0.2", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "@blazediff/core", + "version": "1.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@chromatic-com/storybook", + "version": "5.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@chromatic-com/storybook", + "version": "latest", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@emnapi/core", + "version": "1.11.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "1.9.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.11.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.9.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/aix-ppc64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ia32", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-loong64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-mips64el", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ppc64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-riscv64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-s390x", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openharmony-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/sunos-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-arm64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-ia32", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-x64", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@joshwooding/vite-plugin-react-docgen-typescript", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/gen-mapping", + "version": "0.3.13", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/remapping", + "version": "2.3.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/resolve-uri", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/sourcemap-codec", + "version": "1.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@mdx-js/react", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/wasm-runtime", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@neoconfetti/react", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-android-arm-eabi", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-android-arm64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-darwin-arm64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-darwin-x64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-freebsd-x64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm-gnueabihf", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm-musleabihf", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm64-musl", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-ppc64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-riscv64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-riscv64-musl", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-s390x-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-x64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-x64-musl", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-openharmony-arm64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-wasm32-wasi", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-win32-arm64-msvc", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-win32-ia32-msvc", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-win32-x64-msvc", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-project/types", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-project/types", + "version": "0.146.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-android-arm-eabi", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-android-arm64", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-darwin-arm64", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-darwin-x64", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-freebsd-x64", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm-gnueabihf", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm-musleabihf", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm64-gnu", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm64-musl", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-ppc64-gnu", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-riscv64-gnu", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-riscv64-musl", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-s390x-gnu", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-x64-gnu", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-x64-musl", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-openharmony-arm64", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-wasm32-wasi", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-win32-arm64-msvc", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-win32-x64-msvc", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-android-arm-eabi", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-android-arm64", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-darwin-arm64", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-darwin-x64", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-freebsd-x64", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-arm-gnueabihf", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-arm-musleabihf", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-arm64-gnu", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-arm64-musl", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-ppc64-gnu", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-riscv64-gnu", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-riscv64-musl", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-s390x-gnu", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-x64-gnu", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-linux-x64-musl", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-openharmony-arm64", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-win32-arm64-msvc", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-win32-ia32-msvc", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxlint/binding-win32-x64-msvc", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@polka/url", + "version": "1.0.0-next.29", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-android-arm-eabi", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-android-arm64", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-arm64", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-x64", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-freebsd-x64", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm-gnueabihf", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-gnu", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-musl", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-ppc64-gnu", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-s390x-gnu", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-gnu", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-musl", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-openharmony-arm64", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-arm64-msvc", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-x64-msvc", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/pluginutils", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/pluginutils", + "version": "5.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@standard-schema/spec", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/addon-a11y", + "version": "10.5.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/addon-a11y", + "version": "^10.5.10", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@storybook/addon-docs", + "version": "10.5.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/addon-docs", + "version": "^10.5.10", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@storybook/addon-vitest", + "version": "10.5.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/addon-vitest", + "version": "^10.5.10", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@storybook/builder-vite", + "version": "10.5.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/csf-plugin", + "version": "10.5.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/global", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/icons", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react", + "version": "10.5.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react-dom-shim", + "version": "10.5.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react-vite", + "version": "10.5.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react-vite", + "version": "^10.5.10", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@testing-library/dom", + "version": "10.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/jest-dom", + "version": "6.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/user-event", + "version": "14.6.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@tybys/wasm-util", + "version": "0.10.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/aria-query", + "version": "5.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__core", + "version": "7.20.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__generator", + "version": "7.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__template", + "version": "7.4.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__traverse", + "version": "7.28.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/chai", + "version": "5.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/deep-eql", + "version": "4.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/doctrine", + "version": "0.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/estree", + "version": "1.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/mdx", + "version": "2.0.14", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/node", + "version": "24.13.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/node", + "version": "^24.13.3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@types/react", + "version": "19.2.18", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react", + "version": "^19.2.18", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@types/react-dom", + "version": "19.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react-dom", + "version": "^19.2.4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@types/resolve", + "version": "1.20.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitejs/plugin-react", + "version": "6.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitejs/plugin-react", + "version": "^6.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@vitest/browser", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/browser-playwright", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/browser-playwright", + "version": "latest", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@vitest/coverage-v8", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/coverage-v8", + "version": "latest", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@vitest/expect", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/expect", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/mocker", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/pretty-format", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/pretty-format", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/runner", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/snapshot", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/spy", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/spy", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/utils", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/utils", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@webcontainer/env", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn", + "version": "8.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "820762786026740c76f36085b0efc47a31fe5020", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "ece7cb06caefa5fff74198d8649806c4678c61a1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "330a01c490aca151604b8cf639adc76d48f6c5d4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aho-corasick", + "version": "1.1.5", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "alembic", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "alembic", + "version": "1.19.1", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-doc", + "version": "0.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-types", + "version": "0.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "6.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anyhow", + "version": "1.0.104", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "aria-query", + "version": "5.3.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "aria-query", + "version": "5.3.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "arrow", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "assertion-error", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-types", + "version": "0.16.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-v8-to-istanbul", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "astral-sh/setup-uv", + "version": "20cfd1bf945f4377ade1205e4dbc17946fc9a30d", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "async-timeout", + "version": "5.0.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "atheris", + "version": "3.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "attrs", + "version": "26.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "axe-core", + "version": "4.13.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "balanced-match", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "base64", + "version": "0.22.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "baseline-browser-mapping", + "version": "2.11.19", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "bit-set", + "version": "0.5.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bit-vec", + "version": "0.6.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "boolean-py", + "version": "5.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "brace-expansion", + "version": "5.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "browserslist", + "version": "4.28.8", + "license": "MIT", + "flagged": false + }, + { + "name": "bstr", + "version": "1.13.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bundle-name", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cachecontrol", + "version": "0.14.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "caniuse-lite", + "version": "1.0.30001810", + "license": "CC-BY-4.0", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "certifi", + "version": "2026.7.22", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cffi", + "version": "2.1.1", + "license": "MIT-0", + "flagged": false + }, + { + "name": "chai", + "version": "5.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "chai", + "version": "6.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "chardet", + "version": "5.2.0", + "license": "LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "charset-normalizer", + "version": "3.4.9", + "license": "MIT", + "flagged": false + }, + { + "name": "charset-normalizer", + "version": "3.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "check-error", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "chromatic", + "version": "18.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "contextual-orchestrator", + "version": "0.2.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "convert-source-map", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "coverage", + "version": "7.15.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "crossbeam-deque", + "version": "0.8.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crossbeam-epoch", + "version": "0.9.20", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crossbeam-utils", + "version": "0.8.22", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cryptography", + "version": "50.0.0", + "license": "Apache-2.0 OR BSD-3-Clause", + "flagged": false + }, + { + "name": "css.escape", + "version": "1.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "csstype", + "version": "3.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "cyclonedx-bom", + "version": "7.3.0", + "license": "Apache-2.0 AND Python-2.0", + "flagged": false + }, + { + "name": "cyclonedx-python-lib", + "version": "11.11.0", + "license": "Apache-2.0 AND Python-2.0", + "flagged": false + }, + { + "name": "debug", + "version": "4.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "deep-eql", + "version": "5.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "default-browser", + "version": "5.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "default-browser-id", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "define-lazy-prop", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "defusedxml", + "version": "0.7.1", + "license": "PSF-2.0", + "flagged": false + }, + { + "name": "dequal", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "detect-libc", + "version": "2.1.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "doctrine", + "version": "3.0.0", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "dom-accessibility-api", + "version": "0.5.16", + "license": "MIT", + "flagged": false + }, + { + "name": "dom-accessibility-api", + "version": "0.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "either", + "version": "1.18.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "electron-to-chromium", + "version": "1.5.415", + "license": "ISC", + "flagged": false + }, + { + "name": "empathic", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "es-errors", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-module-lexer", + "version": "2.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "esbuild", + "version": "0.28.2", + "license": "MIT", + "flagged": false + }, + { + "name": "escalade", + "version": "3.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "esprima", + "version": "4.0.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "estree-walker", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "estree-walker", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "esutils", + "version": "2.0.3", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "exceptiongroup", + "version": "1.3.1", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "expect-type", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fancy-regex", + "version": "0.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-mlsirm", + "version": "0.9.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "fastapi", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "fastapi", + "version": "0.141.1", + "license": "MIT", + "flagged": false + }, + { + "name": "fdir", + "version": "6.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "filelock", + "version": "3.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "fqdn", + "version": "1.5.1", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "fsevents", + "version": "2.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "function-bind", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gensync", + "version": "1.0.0-beta.2", + "license": "MIT", + "flagged": false + }, + { + "name": "github/codeql-action/analyze", + "version": "db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/init", + "version": "db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "glob", + "version": "13.0.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "googleapis-common-protos", + "version": "1.75.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "graceful-fs", + "version": "4.2.11", + "license": "ISC", + "flagged": false + }, + { + "name": "greenlet", + "version": "3.5.5", + "license": "MIT AND PSF-2.0", + "flagged": false + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-flag", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hasown", + "version": "2.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "heck", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "html-escaper", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "hypothesis", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "hypothesis", + "version": "6.165.10", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "hypothesis", + "version": "6.165.3", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "idna", + "version": "3.19", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "indent-string", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "interrogate", + "version": "1.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-core-module", + "version": "2.16.2", + "license": "MIT", + "flagged": false + }, + { + "name": "is-docker", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-inside-container", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-wsl", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "isoduration", + "version": "20.11.0", + "license": "ISC", + "flagged": false + }, + { + "name": "istanbul-lib-coverage", + "version": "3.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-report", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-reports", + "version": "3.2.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "itoa", + "version": "1.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "js-tokens", + "version": "10.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsesc", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "json5", + "version": "2.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonc-parser", + "version": "3.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonfile", + "version": "6.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonpointer", + "version": "3.1.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "jsonschema", + "version": "4.26.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonschema-specifications", + "version": "2025.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "lark", + "version": "1.3.1", + "license": "MIT AND MPL-2.0", + "flagged": true + }, + { + "name": "lazy_static", + "version": "1.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "libc", + "version": "0.2.189", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "license-expression", + "version": "30.4.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "loupe", + "version": "3.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "lru-cache", + "version": "11.5.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "lru-cache", + "version": "5.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "lxml", + "version": "6.1.1", + "license": "BSD-3-Clause AND GPL-1.0-or-later", + "flagged": true + }, + { + "name": "lz-string", + "version": "1.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "magic-string", + "version": "0.30.21", + "license": "MIT", + "flagged": false + }, + { + "name": "magicast", + "version": "0.5.4", + "license": "MIT", + "flagged": false + }, + { + "name": "make-dir", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mako", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "markdown-it-py", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "markupsafe", + "version": "3.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "maturin", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "mdurl", + "version": "0.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "memchr", + "version": "2.8.3", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "min-indent", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "minimatch", + "version": "10.2.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "minimist", + "version": "1.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "minipass", + "version": "7.1.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "mrmime", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ms", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "msgpack", + "version": "1.2.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nanoid", + "version": "3.3.18", + "license": "MIT", + "flagged": false + }, + { + "name": "node-releases", + "version": "2.0.53", + "license": "MIT", + "flagged": false + }, + { + "name": "numpy", + "version": "2.5.2", + "license": "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0", + "flagged": false + }, + { + "name": "obug", + "version": "2.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "once_cell", + "version": "1.21.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "open", + "version": "10.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "opencode-ai", + "version": "1.18.22", + "license": "MIT", + "flagged": false + }, + { + "name": "opencode-darwin-arm64", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-darwin-x64", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-darwin-x64-baseline", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-linux-arm64", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-linux-arm64-musl", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-linux-x64", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-linux-x64-baseline", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-linux-x64-baseline-musl", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-linux-x64-musl", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-windows-arm64", + "version": "1.18.22", + "license": "MIT", + "flagged": false + }, + { + "name": "opencode-windows-x64", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opencode-windows-x64-baseline", + "version": "1.18.22", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "opentelemetry-api", + "version": "1.44.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-exporter-otlp-proto-common", + "version": "1.44.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-exporter-otlp-proto-http", + "version": "1.44.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-proto", + "version": "1.44.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-sdk", + "version": "1.44.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-semantic-conventions", + "version": "0.65b0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "oxc-parser", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "oxc-resolver", + "version": "11.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "oxlint", + "version": "1.80.0", + "license": "MIT", + "flagged": false + }, + { + "name": "oxlint", + "version": "^1.79.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "packageurl-python", + "version": "0.17.6", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "packaging", + "version": "26.3", + "license": "Apache-2.0 OR BSD-2-Clause", + "flagged": false + }, + { + "name": "path-parse", + "version": "1.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "path-scurry", + "version": "2.0.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "pathe", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pathval", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "picocolors", + "version": "1.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "picomatch", + "version": "4.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "pip", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pip", + "version": "26.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pip-api", + "version": "0.0.34", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pip-audit", + "version": "2.10.1", + "license": "Apache-2.0 AND ISC", + "flagged": false + }, + { + "name": "pip-requirements-parser", + "version": "32.0.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "platformdirs", + "version": "4.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "playwright", + "version": "1.62.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "playwright", + "version": "latest", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "playwright-core", + "version": "1.62.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pngjs", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "portable-atomic", + "version": "1.15.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "postcss", + "version": "8.5.26", + "license": "MIT", + "flagged": false + }, + { + "name": "pretty-format", + "version": "27.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "proc-macro2", + "version": "1.0.107", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "protobuf", + "version": "7.36.0", + "license": "BSD-3-Clause AND LicenseRef-scancode-protobuf", + "flagged": false + }, + { + "name": "psycopg", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only", + "flagged": true + }, + { + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later", + "flagged": true + }, + { + "name": "py", + "version": "1.11.0", + "license": "MIT", + "flagged": false + }, + { + "name": "py-serializable", + "version": "2.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pydantic", + "version": "2.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-core", + "version": "2.46.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pygments", + "version": "2.21.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pyo3", + "version": "0.29.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3", + "version": ">= 0.29.0,< 0.30.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pyo3-build-config", + "version": "0.29.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-ffi", + "version": "0.29.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-macros", + "version": "0.29.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-macros-backend", + "version": "0.29.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyparsing", + "version": "3.3.2", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "pytest", + "version": "9.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-cov", + "version": "7.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "python-dateutil", + "version": "2.9.0.post0", + "license": "Apache-2.0 AND BSD-3-Clause", + "flagged": false + }, + { + "name": "quote", + "version": "1.0.47", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rayon", + "version": "1.12.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rayon", + "version": ">= 1.10.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "rayon-core", + "version": "1.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "react", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react", + "version": "^19.2.8", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "react-docgen", + "version": "8.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "react-docgen-typescript", + "version": "2.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "react-dom", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react-dom", + "version": "^19.2.8", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "react-is", + "version": "17.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "recast", + "version": "0.23.21", + "license": "MIT", + "flagged": false + }, + { + "name": "redent", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "redis", + "version": "8.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "referencing", + "version": "0.37.0", + "license": "MIT", + "flagged": false + }, + { + "name": "regex", + "version": "1.13.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex-automata", + "version": "0.4.18", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "regex-syntax", + "version": "0.8.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "requests", + "version": "2.34.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "resolve", + "version": "1.22.12", + "license": "MIT", + "flagged": false + }, + { + "name": "rfc3339-validator", + "version": "0.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "rfc3986-validator", + "version": "0.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "rfc3987-syntax", + "version": "1.1.0", + "license": "Apache-2.0 AND GPL-1.0-or-later AND MIT", + "flagged": true + }, + { + "name": "rich", + "version": "15.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rolldown", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "rpds-py", + "version": "0.30.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rpds-py", + "version": "2026.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "run-applescript", + "version": "7.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rustc-hash", + "version": "1.1.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "scheduler", + "version": "0.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "semver", + "version": "6.3.1", + "license": "ISC", + "flagged": false + }, + { + "name": "semver", + "version": "7.8.5", + "license": "ISC", + "flagged": false + }, + { + "name": "serde", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "serde_core", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": "1.0.151", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "siginfo", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "sirv", + "version": "3.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "six", + "version": "1.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sortedcontainers", + "version": "2.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "source-map", + "version": "0.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "source-map-js", + "version": "1.2.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "sqlalchemy", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "sqlalchemy", + "version": "2.0.52", + "license": "MIT", + "flagged": false + }, + { + "name": "stackback", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "starlette", + "version": "1.6.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "std-env", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "storybook", + "version": "10.5.10", + "license": "MIT", + "flagged": false + }, + { + "name": "storybook", + "version": "^10.5.10", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "strip-ansi", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-bom", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-indent", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-indent", + "version": "4.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-preserve-symlinks-flag", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "syn", + "version": "2.0.119", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "3.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tabulate", + "version": "0.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "target-lexicon", + "version": "0.13.5", + "license": "Apache-2.0 WITH LLVM-exception", + "flagged": false + }, + { + "name": "tiktoken-rs", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tiktoken-rs", + "version": ">= 0.7.0,< 0.8.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "tiny-invariant", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tinybench", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyexec", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyglobby", + "version": "0.2.17", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyrainbow", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyrainbow", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyspy", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tomli", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tomli-w", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "totalist", + "version": "3.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ts-dedent", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tsconfig-paths", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tslib", + "version": "2.8.1", + "license": "0BSD", + "flagged": false + }, + { + "name": "typescript", + "version": "6.0.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "typescript", + "version": "~6.0.2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tzdata", + "version": "2026.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tzdata", + "version": "2026.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "undici-types", + "version": "7.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "unicode-ident", + "version": "1.0.24", + "license": "(MIT OR Apache-2.0) AND Unicode-3.0", + "flagged": false + }, + { + "name": "universalify", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "unplugin", + "version": "2.3.11", + "license": "MIT", + "flagged": false + }, + { + "name": "update-browserslist-db", + "version": "1.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "uri-template", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "urllib3", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "use-sync-external-store", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "uv", + "version": "0.12.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "uvicorn", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "uvicorn", + "version": "0.52.4", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "vite", + "version": "8.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "vite", + "version": "^8.2.2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "vitest", + "version": "4.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "vitest", + "version": "latest", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "webcolors", + "version": "25.10.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "webpack-virtual-modules", + "version": "0.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "why-is-node-running", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ws", + "version": "8.21.3", + "license": "MIT", + "flagged": false + }, + { + "name": "wsl-utils", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "yallist", + "version": "3.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "zmij", + "version": "1.0.23", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/ContextualWisdomLab.github.io", + "error": null, + "component_count": 3, + "components": [ + { + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/analyze", + "version": "99df26d4f13ea111d4ec1a7dddef6063f76b97e9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/init", + "version": "99df26d4f13ea111d4ec1a7dddef6063f76b97e9", + "license": "NOASSERTION", + "flagged": true + } + ] + }, + { + "repo": "ContextualWisdomLab/DiagramWeave", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/disksage", + "error": null, + "component_count": 586, + "components": [ + { + "name": "actions/attest", + "version": "1e69f48acb82d1966a394da916b4c1698aa569d6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "37930b1c2abaa49bbe596cd826c3c89aef350131", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "820762786026740c76f36085b0efc47a31fe5020", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "adler2", + "version": "2.0.1", + "license": "0BSD OR MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "aes", + "version": "0.8.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "aho-corasick", + "version": "1.1.4", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "alloc-no-stdlib", + "version": "2.0.4", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "alloc-stdlib", + "version": "0.2.4", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "android_system_properties", + "version": "0.1.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "anyhow", + "version": "1.0.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "apple-native-keyring-store", + "version": "1.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "arrayvec", + "version": "0.7.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "async-broadcast", + "version": "0.7.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "async-channel", + "version": "2.5.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "async-executor", + "version": "1.14.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "async-io", + "version": "2.6.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "async-lock", + "version": "3.4.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "async-process", + "version": "2.5.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "async-recursion", + "version": "1.1.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "async-signal", + "version": "0.2.14", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "async-task", + "version": "4.7.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "async-trait", + "version": "0.1.89", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "atk", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "atk-sys", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "atoi_simd", + "version": "0.18.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "atomic-waker", + "version": "1.1.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "autocfg", + "version": "1.5.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "base64", + "version": "0.21.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "base64", + "version": "0.22.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "base64", + "version": "0.23.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bindgen", + "version": "0.72.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "bit-set", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bit-vec", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bitflags", + "version": "1.3.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bitflags", + "version": "2.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "blake3", + "version": "1.8.7", + "license": "CC0-1.0 OR Apache-2.0 OR Apache-2.0 WITH LLVM-exception", + "flagged": false + }, + { + "name": "block-buffer", + "version": "0.10.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "block-buffer", + "version": "0.12.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "block-padding", + "version": "0.3.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "block2", + "version": "0.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "blocking", + "version": "1.6.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "brotli", + "version": "8.0.4", + "license": "BSD-3-Clause AND MIT", + "flagged": false + }, + { + "name": "brotli-decompressor", + "version": "5.0.3", + "license": "LicenseRef-bad-bsd-3-clausemit", + "flagged": false + }, + { + "name": "bs58", + "version": "0.5.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bumpalo", + "version": "3.20.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bytemuck", + "version": "1.25.0", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "byteorder", + "version": "1.5.0", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "bytes", + "version": "1.12.1", + "license": "MIT", + "flagged": false + }, + { + "name": "cairo-rs", + "version": "0.18.5", + "license": "MIT", + "flagged": false + }, + { + "name": "cairo-sys-rs", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "calamine", + "version": "0.36.1", + "license": "MIT", + "flagged": false + }, + { + "name": "camino", + "version": "1.2.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cargo-platform", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cargo_metadata", + "version": "0.19.2", + "license": "MIT", + "flagged": false + }, + { + "name": "cargo_toml", + "version": "0.22.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "cbc", + "version": "0.1.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cc", + "version": "1.2.66", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cesu8", + "version": "1.1.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "cexpr", + "version": "0.6.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "cfb", + "version": "0.14.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cfb", + "version": "0.7.3", + "license": "MIT", + "flagged": false + }, + { + "name": "cfg-expr", + "version": "0.15.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cfg-if", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "chrono", + "version": "0.4.45", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cipher", + "version": "0.4.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "clang-sys", + "version": "1.8.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "cmake", + "version": "0.1.58", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "codepage", + "version": "0.1.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "combine", + "version": "4.6.7", + "license": "MIT", + "flagged": false + }, + { + "name": "concurrent-queue", + "version": "2.5.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "const-oid", + "version": "0.10.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "constant_time_eq", + "version": "0.4.2", + "license": "CC0-1.0 OR MIT-0 OR Apache-2.0", + "flagged": false + }, + { + "name": "cookie", + "version": "0.18.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "core-foundation", + "version": "0.10.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "core-foundation-sys", + "version": "0.8.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "core-graphics", + "version": "0.25.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "core-graphics-types", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cpufeatures", + "version": "0.2.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cpufeatures", + "version": "0.3.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crc32fast", + "version": "1.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crossbeam-channel", + "version": "0.5.16", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crossbeam-utils", + "version": "0.8.22", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crypto-common", + "version": "0.1.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crypto-common", + "version": "0.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cssparser", + "version": "0.36.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cssparser-macros", + "version": "0.6.1", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "csv", + "version": "1.4.0", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "csv-core", + "version": "0.1.13", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "ctor", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "ctor-proc-macro", + "version": "0.0.7", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "darling", + "version": "0.23.0", + "license": "MIT", + "flagged": false + }, + { + "name": "darling_core", + "version": "0.23.0", + "license": "MIT", + "flagged": false + }, + { + "name": "darling_macro", + "version": "0.23.0", + "license": "MIT", + "flagged": false + }, + { + "name": "dbus", + "version": "0.9.12", + "license": "LicenseRef-bad-apache-2.0mit", + "flagged": false + }, + { + "name": "debug_unsafe", + "version": "0.1.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "deranged", + "version": "0.5.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "derive_more", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "derive_more-impl", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "digest", + "version": "0.10.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "digest", + "version": "0.11.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dirs", + "version": "6.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dirs-sys", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dispatch2", + "version": "0.3.1", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "displaydoc", + "version": "0.2.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dlopen2", + "version": "0.8.2", + "license": "MIT", + "flagged": false + }, + { + "name": "dlopen2_derive", + "version": "0.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "dom_query", + "version": "0.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "dpi", + "version": "0.1.2", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "dtoa", + "version": "1.0.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dtoa-short", + "version": "0.3.5", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "dtolnay/rust-toolchain", + "version": "4be7066ada62dd38de10e7b70166bc74ed198c30", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "dtor", + "version": "0.3.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "dtor-proc-macro", + "version": "0.0.6", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "dunce", + "version": "1.0.5", + "license": "CC0-1.0 OR MIT-0 OR Apache-2.0", + "flagged": false + }, + { + "name": "dyn-clone", + "version": "1.0.20", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "either", + "version": "1.16.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "embed-resource", + "version": "3.0.11", + "license": "MIT", + "flagged": false + }, + { + "name": "embed_plist", + "version": "1.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "encoding_rs", + "version": "0.8.35", + "license": "(Apache-2.0 OR MIT) AND BSD-3-Clause", + "flagged": false + }, + { + "name": "endi", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "enumflags2", + "version": "0.7.12", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "enumflags2_derive", + "version": "0.7.12", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "equivalent", + "version": "1.0.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "erased-serde", + "version": "0.4.10", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "errno", + "version": "0.3.14", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "event-listener", + "version": "5.4.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "event-listener-strategy", + "version": "0.5.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "fast-float2", + "version": "0.2.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "fastrand", + "version": "2.4.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "fdeflate", + "version": "0.3.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "field-offset", + "version": "0.3.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "find-msvc-tools", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "find_cuda_helper", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "flate2", + "version": "1.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "fnv", + "version": "1.0.7", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "foldhash", + "version": "0.2.0", + "license": "Zlib", + "flagged": false + }, + { + "name": "foreign-types", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "foreign-types-macros", + "version": "0.2.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "foreign-types-shared", + "version": "0.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "form_urlencoded", + "version": "1.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "fs4", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-channel", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-core", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-executor", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-io", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-lite", + "version": "2.6.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "futures-macro", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-sink", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-task", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-util", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "gdk", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gdk-pixbuf", + "version": "0.18.5", + "license": "MIT", + "flagged": false + }, + { + "name": "gdk-pixbuf-sys", + "version": "0.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "gdk-sys", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gdkwayland-sys", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gdkx11", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gdkx11-sys", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "generic-array", + "version": "0.14.7", + "license": "MIT", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.2.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.3.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.4.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "gio", + "version": "0.18.4", + "license": "MIT", + "flagged": false + }, + { + "name": "gio-sys", + "version": "0.18.1", + "license": "MIT", + "flagged": false + }, + { + "name": "glib", + "version": "0.18.5", + "license": "MIT", + "flagged": false + }, + { + "name": "glib-macros", + "version": "0.18.5", + "license": "MIT", + "flagged": false + }, + { + "name": "glib-sys", + "version": "0.18.1", + "license": "MIT", + "flagged": false + }, + { + "name": "glob", + "version": "0.3.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "gobject-sys", + "version": "0.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "gtk", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gtk-sys", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gtk3-macros", + "version": "0.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "hashbrown", + "version": "0.12.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hashbrown", + "version": "0.17.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hashify", + "version": "0.2.9", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "heck", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "heck", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hermit-abi", + "version": "0.5.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hex", + "version": "0.4.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hkdf", + "version": "0.12.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hmac", + "version": "0.12.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "html5ever", + "version": "0.38.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "http", + "version": "1.4.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "http-body", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "http-body-util", + "version": "0.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "httparse", + "version": "1.10.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hybrid-array", + "version": "0.4.13", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hyper", + "version": "1.10.1", + "license": "MIT", + "flagged": false + }, + { + "name": "hyper-util", + "version": "0.1.20", + "license": "MIT", + "flagged": false + }, + { + "name": "iana-time-zone", + "version": "0.1.65", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "iana-time-zone-haiku", + "version": "0.1.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ico", + "version": "0.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "icu_collections", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_locale_core", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_normalizer", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_normalizer_data", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_properties", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_properties_data", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_provider", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "ident_case", + "version": "1.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "idna", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "idna_adapter", + "version": "1.2.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "ilammy/msvc-dev-cmd", + "version": "0b201ec74fa43914dc39ae48a89fd1d8cb592756", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "indexmap", + "version": "1.9.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "indexmap", + "version": "2.14.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "infer", + "version": "0.19.0", + "license": "MIT", + "flagged": false + }, + { + "name": "infer", + "version": "0.22.0", + "license": "MIT", + "flagged": false + }, + { + "name": "inout", + "version": "0.1.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ipnet", + "version": "2.12.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "is-docker", + "version": "0.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-wsl", + "version": "0.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "itertools", + "version": "0.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "itoa", + "version": "1.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jakoch/install-vulkan-sdk-action", + "version": "37effcfa045411f8bfbbda26df2fd1b3bf3436fa", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "javascriptcore-rs", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "javascriptcore-rs-sys", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "Jimver/cuda-toolkit", + "version": "b8bf9c6c28f8a92fbb04dcfcaee872e60c57462d", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "jni", + "version": "0.21.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jni-sys", + "version": "0.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jni-sys", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jni-sys-macros", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jobserver", + "version": "0.1.35", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "js-sys", + "version": "0.3.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "json-patch", + "version": "3.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jsonptr", + "version": "0.6.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "keyboard-types", + "version": "0.7.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "keyring", + "version": "4.1.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "keyring-core", + "version": "1.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "libappindicator", + "version": "0.9.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "libappindicator-sys", + "version": "0.9.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "libc", + "version": "0.2.189", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "libdbus-sys", + "version": "0.2.7", + "license": "LicenseRef-bad-apache-2.0mit", + "flagged": false + }, + { + "name": "libloading", + "version": "0.7.4", + "license": "ISC", + "flagged": false + }, + { + "name": "libloading", + "version": "0.8.9", + "license": "ISC", + "flagged": false + }, + { + "name": "libredox", + "version": "0.1.18", + "license": "MIT", + "flagged": false + }, + { + "name": "linux-raw-sys", + "version": "0.12.1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "litemap", + "version": "0.8.2", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "llama-cpp-2", + "version": "0.1.154", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "llama-cpp-sys-2", + "version": "0.1.154", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "lock_api", + "version": "0.4.14", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "log", + "version": "0.4.33", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "mail-parser", + "version": "0.11.7", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "markup5ever", + "version": "0.38.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "md-5", + "version": "0.10.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "memchr", + "version": "2.8.3", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "memoffset", + "version": "0.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "mime", + "version": "0.3.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "minimal-lexical", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "miniz_oxide", + "version": "0.8.9", + "license": "MIT OR Zlib OR Apache-2.0", + "flagged": false + }, + { + "name": "mio", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "mlsirm-core", + "version": "0.7.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "muda", + "version": "0.19.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "ndk", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ndk-sys", + "version": "0.6.0+11769913", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "new_debug_unreachable", + "version": "1.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "nom", + "version": "7.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "num", + "version": "0.4.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-bigint", + "version": "0.4.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-complex", + "version": "0.4.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-conv", + "version": "0.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-integer", + "version": "0.1.46", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-iter", + "version": "0.1.46", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-rational", + "version": "0.4.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-traits", + "version": "0.2.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num_enum", + "version": "0.7.6", + "license": "BSD-3-Clause OR MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num_enum_derive", + "version": "0.7.6", + "license": "BSD-3-Clause OR MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "objc2", + "version": "0.6.4", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-app-kit", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-cloud-kit", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-data", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-foundation", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-graphics", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-image", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-location", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-text", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-encode", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-exception-helper", + "version": "0.1.1", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-foundation", + "version": "0.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-io-surface", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-quartz-core", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-ui-kit", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-user-notifications", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-web-kit", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "once_cell", + "version": "1.21.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "open", + "version": "5.3.6", + "license": "MIT", + "flagged": false + }, + { + "name": "option-ext", + "version": "0.2.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "ordered-stream", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "oxilangtag", + "version": "0.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "oxiri", + "version": "0.2.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "oxrdf", + "version": "0.3.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "oxttl", + "version": "0.2.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pango", + "version": "0.18.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pango-sys", + "version": "0.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "parking", + "version": "2.2.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "parking_lot", + "version": "0.12.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "parking_lot_core", + "version": "0.9.12", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "percent-encoding", + "version": "2.3.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "phf", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "phf_codegen", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "phf_generator", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "phf_macros", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "phf_shared", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pin-project-lite", + "version": "0.2.17", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "piper", + "version": "0.2.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pkg-config", + "version": "0.3.33", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "plist", + "version": "1.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "png", + "version": "0.17.16", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "png", + "version": "0.18.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "polling", + "version": "3.11.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "potential_utf", + "version": "0.1.5", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "powerfmt", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ppv-lite86", + "version": "0.2.21", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "precomputed-hash", + "version": "0.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prettyplease", + "version": "0.2.37", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro-crate", + "version": "1.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro-crate", + "version": "2.0.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro-crate", + "version": "3.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro-error", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro-error-attr", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro2", + "version": "1.0.106", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "quick-xml", + "version": "0.41.0", + "license": "MIT", + "flagged": false + }, + { + "name": "quote", + "version": "1.0.46", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "r-efi", + "version": "5.3.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "r-efi", + "version": "6.0.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "rand", + "version": "0.9.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_chacha", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_core", + "version": "0.9.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "raw-window-handle", + "version": "0.6.2", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "redox_syscall", + "version": "0.5.18", + "license": "MIT", + "flagged": false + }, + { + "name": "redox_users", + "version": "0.5.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ref-cast", + "version": "1.0.25", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ref-cast-impl", + "version": "1.0.25", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex", + "version": "1.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex-automata", + "version": "0.4.15", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex-syntax", + "version": "0.8.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "reqwest", + "version": "0.13.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rfd", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ring", + "version": "0.17.14", + "license": "Apache-2.0 AND ISC", + "flagged": false + }, + { + "name": "rustc-hash", + "version": "2.1.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "rustc_version", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rustix", + "version": "1.1.4", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "rustls", + "version": "0.23.41", + "license": "Apache-2.0 OR ISC OR MIT", + "flagged": false + }, + { + "name": "rustls-pki-types", + "version": "1.15.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rustls-webpki", + "version": "0.103.13", + "license": "ISC", + "flagged": false + }, + { + "name": "rustversion", + "version": "1.0.23", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ryu", + "version": "1.0.23", + "license": "Apache-2.0 OR BSL-1.0", + "flagged": false + }, + { + "name": "same-file", + "version": "1.0.6", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "schemars", + "version": "0.8.22", + "license": "MIT", + "flagged": false + }, + { + "name": "schemars", + "version": "0.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "schemars", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "schemars_derive", + "version": "0.8.22", + "license": "MIT", + "flagged": false + }, + { + "name": "scopeguard", + "version": "1.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "secret-service", + "version": "5.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "security-framework", + "version": "3.7.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "security-framework-sys", + "version": "2.17.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "selectors", + "version": "0.36.1", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "semver", + "version": "1.0.28", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde-untagged", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_core", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive_internals", + "version": "0.29.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": "1.0.151", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_repr", + "version": "0.1.20", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_spanned", + "version": "0.6.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_spanned", + "version": "1.1.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_with", + "version": "3.21.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_with_macros", + "version": "3.21.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serialize-to-javascript", + "version": "0.1.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serialize-to-javascript-impl", + "version": "0.1.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "servo_arc", + "version": "0.4.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sha1", + "version": "0.11.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sha2", + "version": "0.10.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sha2", + "version": "0.11.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "shlex", + "version": "1.3.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "shlex", + "version": "2.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "signal-hook-registry", + "version": "1.4.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "simd-adler32", + "version": "0.3.9", + "license": "MIT", + "flagged": false + }, + { + "name": "siphasher", + "version": "1.0.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "slab", + "version": "0.4.12", + "license": "MIT", + "flagged": false + }, + { + "name": "smallvec", + "version": "1.15.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "socket2", + "version": "0.6.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "softbuffer", + "version": "0.4.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "softprops/action-gh-release", + "version": "3d0d9888cb7fd7b750713d6e236d1fcb99157228", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "soup3", + "version": "0.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "soup3-sys", + "version": "0.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "stable_deref_trait", + "version": "1.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "string_cache", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "string_cache_codegen", + "version": "0.6.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "strsim", + "version": "0.11.1", + "license": "MIT", + "flagged": false + }, + { + "name": "subtle", + "version": "2.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "Swatinem/rust-cache", + "version": "6323deb102c322ba6fcbdcafc7e3dddab59af2b6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "swift-rs", + "version": "1.0.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "1.0.109", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "2.0.118", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "3.0.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sync_wrapper", + "version": "1.0.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "synstructure", + "version": "0.13.2", + "license": "MIT", + "flagged": false + }, + { + "name": "system-deps", + "version": "6.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tao", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tao-macros", + "version": "0.1.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "target-lexicon", + "version": "0.12.16", + "license": "Apache-2.0 WITH LLVM-exception", + "flagged": false + }, + { + "name": "tauri", + "version": "2.11.5", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-build", + "version": "2.6.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-codegen", + "version": "2.6.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-macros", + "version": "2.6.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-plugin", + "version": "2.6.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-plugin-dialog", + "version": "2.7.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-plugin-fs", + "version": "2.5.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-plugin-opener", + "version": "2.5.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-runtime", + "version": "2.11.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-runtime-wry", + "version": "2.11.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-utils", + "version": "2.9.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tauri-winres", + "version": "0.3.6", + "license": "MIT", + "flagged": false + }, + { + "name": "tempfile", + "version": "3.27.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tendril", + "version": "0.5.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror", + "version": "1.0.69", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror", + "version": "2.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror-impl", + "version": "1.0.69", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror-impl", + "version": "2.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time", + "version": "0.3.53", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time-core", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time-macros", + "version": "0.2.31", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tinystr", + "version": "0.8.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "tinyvec", + "version": "1.11.0", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tinyvec_macros", + "version": "0.1.1", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "tokio", + "version": "1.52.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tokio-util", + "version": "0.7.18", + "license": "MIT", + "flagged": false + }, + { + "name": "toml", + "version": "0.8.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml", + "version": "0.9.12+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml", + "version": "1.1.2+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_datetime", + "version": "0.6.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_datetime", + "version": "0.7.5+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_datetime", + "version": "1.1.1+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_edit", + "version": "0.19.15", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_edit", + "version": "0.20.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_edit", + "version": "0.25.12+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_parser", + "version": "1.1.2+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "toml_writer", + "version": "1.1.1+spec-1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tower", + "version": "0.5.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tower-http", + "version": "0.6.11", + "license": "MIT", + "flagged": false + }, + { + "name": "tower-layer", + "version": "0.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tower-service", + "version": "0.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tracing", + "version": "0.1.44", + "license": "MIT", + "flagged": false + }, + { + "name": "tracing-attributes", + "version": "0.1.31", + "license": "MIT", + "flagged": false + }, + { + "name": "tracing-core", + "version": "0.1.36", + "license": "MIT", + "flagged": false + }, + { + "name": "trash", + "version": "5.2.6", + "license": "MIT", + "flagged": false + }, + { + "name": "tray-icon", + "version": "0.24.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "try-lock", + "version": "0.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "typed-path", + "version": "0.12.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "typeid", + "version": "1.0.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "typenum", + "version": "1.20.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "uds_windows", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "unic-char-property", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unic-char-range", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unic-common", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unic-ucd-ident", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unic-ucd-version", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unicode-general-category", + "version": "1.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "unicode-ident", + "version": "1.0.24", + "license": "(MIT OR Apache-2.0) AND Unicode-3.0", + "flagged": false + }, + { + "name": "unicode-normalization", + "version": "0.1.25", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unicode-segmentation", + "version": "1.13.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "untrusted", + "version": "0.9.0", + "license": "ISC", + "flagged": false + }, + { + "name": "ureq", + "version": "3.4.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ureq-proto", + "version": "0.6.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "url", + "version": "2.5.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "urlencoding", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "urlpattern", + "version": "0.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "utf8-zero", + "version": "0.8.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "utf8_iter", + "version": "1.0.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "uuid", + "version": "1.23.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "valuable", + "version": "0.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "version-compare", + "version": "0.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "version_check", + "version": "0.9.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "vswhom", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "vswhom-sys", + "version": "0.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "walkdir", + "version": "2.5.0", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "want", + "version": "0.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "wasi", + "version": "0.11.1+wasi-snapshot-preview1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "wasip2", + "version": "1.0.4+wasi-0.2.12", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "wasm-bindgen", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-futures", + "version": "0.4.76", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro-support", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-shared", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-streams", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "web-sys", + "version": "0.3.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "web-time", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "web_atoms", + "version": "0.2.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "webkit2gtk", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "webkit2gtk-sys", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "webpki-roots", + "version": "1.0.8", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "webview2-com", + "version": "0.38.2", + "license": "MIT", + "flagged": false + }, + { + "name": "webview2-com-macros", + "version": "0.8.1", + "license": "MIT", + "flagged": false + }, + { + "name": "webview2-com-sys", + "version": "0.38.2", + "license": "MIT", + "flagged": false + }, + { + "name": "winapi", + "version": "0.3.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "winapi-i686-pc-windows-gnu", + "version": "0.4.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "winapi-util", + "version": "0.1.11", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "winapi-x86_64-pc-windows-gnu", + "version": "0.4.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "window-vibrancy", + "version": "0.6.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "windows", + "version": "0.56.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows", + "version": "0.61.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-collections", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-core", + "version": "0.56.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-core", + "version": "0.61.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-core", + "version": "0.62.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-future", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-implement", + "version": "0.56.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-implement", + "version": "0.60.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-interface", + "version": "0.56.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-interface", + "version": "0.59.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-link", + "version": "0.1.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-link", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-native-keyring-store", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-numerics", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-result", + "version": "0.1.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-result", + "version": "0.3.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-result", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-strings", + "version": "0.4.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-strings", + "version": "0.5.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.45.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.52.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.59.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.60.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.61.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-targets", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-targets", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-targets", + "version": "0.53.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-threading", + "version": "0.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-version", + "version": "0.1.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_gnullvm", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_gnullvm", + "version": "0.53.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_msvc", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_msvc", + "version": "0.53.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnu", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnu", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnu", + "version": "0.53.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnullvm", + "version": "0.53.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_msvc", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_msvc", + "version": "0.53.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnu", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnu", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnu", + "version": "0.53.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnullvm", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnullvm", + "version": "0.53.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_msvc", + "version": "0.42.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_msvc", + "version": "0.53.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "winnow", + "version": "0.5.40", + "license": "MIT", + "flagged": false + }, + { + "name": "winnow", + "version": "0.7.15", + "license": "MIT", + "flagged": false + }, + { + "name": "winnow", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "winreg", + "version": "0.55.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wit-bindgen", + "version": "0.57.1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "writeable", + "version": "0.6.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "wry", + "version": "0.55.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "x11", + "version": "2.21.0", + "license": "MIT", + "flagged": false + }, + { + "name": "x11-dl", + "version": "2.21.0", + "license": "MIT", + "flagged": false + }, + { + "name": "yoke", + "version": "0.8.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "yoke-derive", + "version": "0.8.2", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zbus", + "version": "5.17.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "zbus-secret-service-keyring-store", + "version": "1.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "zbus_macros", + "version": "5.17.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "zbus_names", + "version": "4.3.3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "zerocopy", + "version": "0.8.54", + "license": "BSD-2-Clause OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zerocopy-derive", + "version": "0.8.54", + "license": "BSD-2-Clause OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zerofrom", + "version": "0.1.8", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerofrom-derive", + "version": "0.1.7", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zeroize", + "version": "1.9.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zeroize_derive", + "version": "1.5.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zerotrie", + "version": "0.2.4", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerovec", + "version": "0.11.6", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerovec-derive", + "version": "0.11.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zip", + "version": "8.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "zlib-rs", + "version": "0.6.6", + "license": "Zlib", + "flagged": false + }, + { + "name": "zmij", + "version": "1.0.21", + "license": "MIT", + "flagged": false + }, + { + "name": "zopfli", + "version": "0.8.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "zvariant", + "version": "5.13.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "zvariant_derive", + "version": "5.13.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "zvariant_utils", + "version": "3.5.0", + "license": "NOASSERTION", + "flagged": true + } + ] + }, + { + "repo": "ContextualWisdomLab/EgressWeave", + "error": null, + "component_count": 32, + "components": [ + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "d3f86a106a0bac45b974a628896c90dbdf5c8093", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "anyio", + "version": "4.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "backports-asyncio-runner", + "version": "1.2.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "certifi", + "version": "2026.7.22", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "coverage", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "exceptiongroup", + "version": "1.3.1", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hatchling", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "idna", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.3", + "license": "Apache-2.0 OR BSD-2-Clause", + "flagged": false + }, + { + "name": "pathspec", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pypa/gh-action-pypi-publish", + "version": "dc37677b2e1c63e2034f94d8a5b11f265b73ba33", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-asyncio", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest-asyncio", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "ruff", + "version": "0.16.1", + "license": "MIT", + "flagged": false + }, + { + "name": "step-security/harden-runner", + "version": "bf7454d06d71f1098171f2acdf0cd4708d7b5920", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "tomli", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "trove-classifiers", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + } + ] + }, + { + "repo": "ContextualWisdomLab/ELUNVERA", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/EmbedRelay", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/enterprise-architecture-core", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/fast-mlsirm", + "error": null, + "component_count": 242, + "components": [ + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "allocator-api2", + "version": "0.2.21", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "android_system_properties", + "version": "0.1.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "arbitrary", + "version": "1.4.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "arrayvec", + "version": "0.7.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ash", + "version": "0.38.0+1.3.281", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "atheris", + "version": "3.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "autocfg", + "version": "1.5.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bit-set", + "version": "0.10.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bit-set", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bit-vec", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bit-vec", + "version": "0.9.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bitflags", + "version": "2.13.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bitflags", + "version": "2.13.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "block-buffer", + "version": "0.10.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "block2", + "version": "0.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "build", + "version": "1.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "bumpalo", + "version": "3.20.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bytemuck", + "version": "1.25.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bytemuck", + "version": ">= 1.25.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "bytemuck_derive", + "version": "1.10.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "cc", + "version": "1.2.66", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cfg-if", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cfg_aliases", + "version": "0.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "codespan-reporting", + "version": "0.13.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "cpufeatures", + "version": "0.2.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crunchy", + "version": "0.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "crypto-common", + "version": "0.1.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "deranged", + "version": "0.5.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "digest", + "version": "0.10.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dispatch2", + "version": "0.3.1", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "dlib", + "version": "0.5.3", + "license": "MIT", + "flagged": false + }, + { + "name": "document-features", + "version": "0.2.12", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dtolnay/rust-toolchain", + "version": "4be7066ada62dd38de10e7b70166bc74ed198c30", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "equivalent", + "version": "1.0.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "errno", + "version": "0.3.14", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "fast-mlsirm", + "version": "0.9.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "fastrand", + "version": "2.4.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "find-msvc-tools", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "fnv", + "version": "1.0.7", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "foldhash", + "version": "0.2.0", + "license": "Zlib", + "flagged": false + }, + { + "name": "futures-core", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-core", + "version": "0.3.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-task", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-task", + "version": "0.3.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-util", + "version": "0.3.32", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-util", + "version": "0.3.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "generic-array", + "version": "0.14.7", + "license": "MIT", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.3.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.4.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "github/codeql-action/analyze", + "version": "ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/init", + "version": "ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "gl_generator", + "version": "0.14.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "glow", + "version": "0.17.0", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "glutin_wgl_sys", + "version": "0.6.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google/clusterfuzzlite/actions/build_fuzzers", + "version": "884713a6c30a92e5e8544c39945cd7cb630abcd1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "google/clusterfuzzlite/actions/run_fuzzers", + "version": "884713a6c30a92e5e8544c39945cd7cb630abcd1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "gpu-allocator", + "version": "0.28.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "half", + "version": "2.7.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hashbrown", + "version": "0.16.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hashbrown", + "version": "0.17.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "heck", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hypothesis", + "version": "6.156.6", + "license": "MPL-2.0 AND MPL-1.1", + "flagged": true + }, + { + "name": "indexmap", + "version": "2.14.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "itoa", + "version": "1.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jni-sys", + "version": "0.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jni-sys", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jni-sys-macros", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "jobserver", + "version": "0.1.35", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "js-sys", + "version": "0.3.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "khronos-egl", + "version": "6.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "khronos_api", + "version": "3.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "libc", + "version": "0.2.186", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "libc", + "version": "0.2.189", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "libfuzzer-sys", + "version": "0.4.13", + "license": "(MIT OR Apache-2.0) AND NCSA", + "flagged": false + }, + { + "name": "libloading", + "version": "0.8.9", + "license": "ISC", + "flagged": false + }, + { + "name": "libm", + "version": "0.2.16", + "license": "MIT", + "flagged": false + }, + { + "name": "linux-raw-sys", + "version": "0.12.1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "litrs", + "version": "1.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "lock_api", + "version": "0.4.14", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "log", + "version": "0.4.33", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "log", + "version": "0.4.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "matrixmultiply", + "version": "0.3.10", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "maturin", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "maturin", + "version": "1.14.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "memchr", + "version": "2.8.3", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "naga", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "naga-types", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ndarray", + "version": "0.17.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ndk-sys", + "version": "0.6.0+11769913", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-complex", + "version": "0.4.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-conv", + "version": "0.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-integer", + "version": "0.1.46", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-traits", + "version": "0.2.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "numpy", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "numpy", + "version": "0.29.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "numpy", + "version": "2.5.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "numpy", + "version": "2.5.2", + "license": "BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0", + "flagged": false + }, + { + "name": "objc2", + "version": "0.6.4", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-core-foundation", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-core-graphics", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-encode", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-foundation", + "version": "0.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "objc2-io-surface", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-metal", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "objc2-quartz-core", + "version": "0.3.2", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "once_cell", + "version": "1.21.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ordered-float", + "version": "5.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "parking_lot", + "version": "0.12.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "parking_lot_core", + "version": "0.9.12", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pin-project-lite", + "version": "0.2.17", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "pkg-config", + "version": "0.3.33", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pollster", + "version": "1.0.1", + "license": "LicenseRef-bad-apache-2.0mit", + "flagged": false + }, + { + "name": "pollster", + "version": ">= 1.0.1,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "portable-atomic", + "version": "1.13.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "portable-atomic", + "version": "1.15.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "portable-atomic-util", + "version": "0.2.7", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "powerfmt", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ppv-lite86", + "version": "0.2.21", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "presser", + "version": "0.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro2", + "version": "1.0.106", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro2", + "version": "1.0.107", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "profiling", + "version": "1.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proptest", + "version": "1.11.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proptest", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pyo3", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-build-config", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-ffi", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-macros", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pyo3-macros-backend", + "version": "0.29.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "PyO3/maturin-action", + "version": "e83996d129638aa358a18fbd1dfb82f0b0fb5d3b", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pypa/gh-action-pypi-publish", + "version": "dc37677b2e1c63e2034f94d8a5b11f265b73ba33", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pyproject-hooks", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "quick-error", + "version": "1.2.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "quote", + "version": "1.0.46", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "quote", + "version": "1.0.47", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "r-efi", + "version": "5.3.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "r-efi", + "version": "6.0.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "rand", + "version": "0.9.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_chacha", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_core", + "version": "0.9.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_xorshift", + "version": "0.4.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "range-alloc", + "version": "0.1.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "raw-window-handle", + "version": "0.6.2", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "raw-window-metal", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rawpointer", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "redox_syscall", + "version": "0.5.18", + "license": "MIT", + "flagged": false + }, + { + "name": "regex-syntax", + "version": "0.8.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "renderdoc-sys", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rustc-hash", + "version": "1.1.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "rustc-hash", + "version": "2.1.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "rustix", + "version": "1.1.4", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "rustversion", + "version": "1.0.23", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rusty-fork", + "version": "0.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "scopeguard", + "version": "1.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde", + "version": "1.0.228", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "serde_core", + "version": "1.0.228", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_core", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive", + "version": "1.0.228", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": "1.0.151", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "sha2", + "version": "0.10.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sha2", + "version": ">= 0.10.9,< 0.11.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "shlex", + "version": "2.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "slab", + "version": "0.4.12", + "license": "MIT", + "flagged": false + }, + { + "name": "slotmap", + "version": "1.1.1", + "license": "Zlib", + "flagged": false + }, + { + "name": "smallvec", + "version": "1.15.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sortedcontainers", + "version": "2.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "spirv", + "version": "0.4.0+sdk-1.4.341.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "static_assertions", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "2.0.118", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "2.0.119", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "3.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "target-lexicon", + "version": "0.13.5", + "license": "Apache-2.0 WITH LLVM-exception", + "flagged": false + }, + { + "name": "tempfile", + "version": "3.27.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "termcolor", + "version": "1.4.1", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "thiserror", + "version": "2.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror", + "version": "2.0.20", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror-impl", + "version": "2.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror-impl", + "version": "2.0.20", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time", + "version": "0.3.55", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time", + "version": ">= 0.3.0,< 0.4.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "time-core", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time-macros", + "version": "0.2.32", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "typenum", + "version": "1.20.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unarray", + "version": "0.1.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unicode-ident", + "version": "1.0.24", + "license": "(MIT OR Apache-2.0) AND Unicode-3.0", + "flagged": false + }, + { + "name": "unicode-width", + "version": "0.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "uuid", + "version": "1.25.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "uuid", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "version_check", + "version": "0.9.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wait-timeout", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasip2", + "version": "1.0.4+wasi-0.2.12", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "wasm-bindgen", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-futures", + "version": "0.4.76", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro-support", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-shared", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wayland-sys", + "version": "0.31.11", + "license": "MIT", + "flagged": false + }, + { + "name": "web-sys", + "version": "0.3.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wgpu", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wgpu", + "version": ">= 30.0.0,< 31.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "wgpu-core", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wgpu-core-deps-apple", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wgpu-core-deps-emscripten", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wgpu-core-deps-windows-linux-android", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wgpu-hal", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wgpu-naga-bridge", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wgpu-types", + "version": "30.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "winapi-util", + "version": "0.1.11", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "windows", + "version": "0.62.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-collections", + "version": "0.3.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-core", + "version": "0.62.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-future", + "version": "0.3.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-implement", + "version": "0.60.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-interface", + "version": "0.59.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-link", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-numerics", + "version": "0.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-result", + "version": "0.4.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-strings", + "version": "0.5.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.61.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-threading", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wit-bindgen", + "version": "0.57.1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "xml-rs", + "version": "0.8.28", + "license": "MIT", + "flagged": false + }, + { + "name": "zerocopy", + "version": "0.8.54", + "license": "BSD-2-Clause OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zerocopy", + "version": "0.8.56", + "license": "BSD-2-Clause OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zerocopy-derive", + "version": "0.8.54", + "license": "BSD-2-Clause OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zerocopy-derive", + "version": "0.8.56", + "license": "BSD-2-Clause OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zmij", + "version": "1.0.23", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/feelanet-adfs", + "error": null, + "component_count": 303, + "components": [ + { + "name": "@bcoe/v8-coverage", + "version": "1.0.2", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "@isaacs/cliui", + "version": "8.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "@istanbuljs/schema", + "version": "0.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/resolve-uri", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/sourcemap-codec", + "version": "1.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@node-saml/node-saml", + "version": "5.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@node-saml/passport-saml", + "version": "5.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@pkgjs/parseargs", + "version": "0.11.0", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "@types/babel-types", + "version": "7.0.16", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babylon", + "version": "6.16.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/body-parser", + "version": "1.19.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/connect", + "version": "3.4.38", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/debug", + "version": "4.1.13", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/express", + "version": "4.17.25", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/express-serve-static-core", + "version": "4.19.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/http-errors", + "version": "2.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/istanbul-lib-coverage", + "version": "2.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/mime", + "version": "1.3.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/ms", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/node", + "version": "26.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/passport", + "version": "1.0.17", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/passport-strategy", + "version": "0.2.38", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/qs", + "version": "6.15.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/range-parser", + "version": "1.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/send", + "version": "0.17.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/send", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/serve-static", + "version": "1.15.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/xml-encryption", + "version": "1.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/xml2js", + "version": "0.4.14", + "license": "MIT", + "flagged": false + }, + { + "name": "@xmldom/is-dom-node", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@xmldom/xmldom", + "version": "0.8.13", + "license": "MIT", + "flagged": false + }, + { + "name": "accepts", + "version": "1.3.8", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn-globals", + "version": "1.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "align-text", + "version": "0.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "6.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "4.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "6.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "array-flatten", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "asap", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "axum", + "version": ">= 0.7.0,< 0.8.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "babel-runtime", + "version": "6.26.0", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-types", + "version": "6.26.0", + "license": "MIT", + "flagged": false + }, + { + "name": "babylon", + "version": "6.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "balanced-match", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "balanced-match", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "base64", + "version": ">= 0.22.0,< 0.23.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "basic-auth", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "body-parser", + "version": "1.20.5", + "license": "MIT", + "flagged": false + }, + { + "name": "body-parser", + "version": "1.20.6", + "license": "MIT", + "flagged": false + }, + { + "name": "brace-expansion", + "version": "2.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "brace-expansion", + "version": "5.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "buffer-equal-constant-time", + "version": "1.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "bytes", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "c8", + "version": "10.1.3", + "license": "ISC", + "flagged": false + }, + { + "name": "call-bind-apply-helpers", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "call-bound", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "camelcase", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "center-align", + "version": "0.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "character-parser", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "clean-css", + "version": "4.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "cliui", + "version": "2.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "cliui", + "version": "8.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "color-convert", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "color-name", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "commander", + "version": "2.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "constantinople", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "content-disposition", + "version": "0.5.4", + "license": "MIT", + "flagged": false + }, + { + "name": "content-type", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "convert-source-map", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cookie", + "version": "0.7.2", + "license": "MIT", + "flagged": false + }, + { + "name": "cookie-parser", + "version": "1.4.7", + "license": "MIT", + "flagged": false + }, + { + "name": "cookie-signature", + "version": "1.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "core-js", + "version": "2.6.12", + "license": "MIT", + "flagged": false + }, + { + "name": "cross-spawn", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "cryptography", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "css", + "version": "1.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "css-parse", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "css-stringify", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "debug", + "version": "2.6.9", + "license": "MIT", + "flagged": false + }, + { + "name": "debug", + "version": "4.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "decamelize", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "depd", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "destroy", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "dunder-proto", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "eastasianwidth", + "version": "0.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ecdsa-sig-formatter", + "version": "1.0.11", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "ee-first", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "emoji-regex", + "version": "8.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "emoji-regex", + "version": "9.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "encodeurl", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-define-property", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "es-errors", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-object-atoms", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "escalade", + "version": "3.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "escape-html", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "esutils", + "version": "2.0.3", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "etag", + "version": "1.8.1", + "license": "MIT", + "flagged": false + }, + { + "name": "express", + "version": "4.22.2", + "license": "MIT", + "flagged": false + }, + { + "name": "express-rate-limit", + "version": "8.5.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ext-curl", + "version": ">= 0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "ext-dom", + "version": ">= 0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "ext-mcrypt", + "version": ">= 0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "ext-openssl", + "version": ">= 0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "fastapi", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "finalhandler", + "version": "1.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "find-up", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "firebase/php-jwt", + "version": "5.0.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "flate2", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "foreground-child", + "version": "3.3.1", + "license": "ISC", + "flagged": false + }, + { + "name": "form_urlencoded", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "forwarded", + "version": "0.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fresh", + "version": "0.5.2", + "license": "MIT", + "flagged": false + }, + { + "name": "function-bind", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "get-caller-file", + "version": "2.0.5", + "license": "ISC", + "flagged": false + }, + { + "name": "get-intrinsic", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "get-proto", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "glob", + "version": "10.5.0", + "license": "ISC", + "flagged": false + }, + { + "name": "gopd", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-flag", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-symbols", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hasown", + "version": "2.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "html-escaper", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "http-errors", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "httpx", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "iconv-lite", + "version": "0.4.24", + "license": "MIT", + "flagged": false + }, + { + "name": "inherits", + "version": "2.0.4", + "license": "ISC", + "flagged": false + }, + { + "name": "io.jsonwebtoken:jjwt-api", + "version": "0.10.7", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "io.jsonwebtoken:jjwt-impl", + "version": "0.10.7", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "io.jsonwebtoken:jjwt-jackson", + "version": "0.10.7", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "ip-address", + "version": "10.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ipaddr.js", + "version": "1.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-buffer", + "version": "1.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-promise", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-promise", + "version": "2.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "isexe", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "istanbul-lib-coverage", + "version": "3.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-report", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-reports", + "version": "3.2.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "itsdangerous", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "jackspeak", + "version": "3.4.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "jade", + "version": "1.11.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jinja2", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "jsonwebtoken", + "version": "9.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonwebtoken", + "version": ">= 10.3.0,< 11.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "jstransformer", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jwa", + "version": "1.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jws", + "version": "3.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "kind-of", + "version": "3.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "lazy-cache", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "locate-path", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lodash", + "version": "4.18.1", + "license": "MIT", + "flagged": false + }, + { + "name": "lodash.includes", + "version": "4.3.0", + "license": "CC0-1.0 AND MIT", + "flagged": false + }, + { + "name": "lodash.isboolean", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "lodash.isinteger", + "version": "4.0.4", + "license": "CC0-1.0 AND MIT", + "flagged": false + }, + { + "name": "lodash.isnumber", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "lodash.isplainobject", + "version": "4.0.6", + "license": "CC0-1.0 AND MIT", + "flagged": false + }, + { + "name": "lodash.isstring", + "version": "4.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "lodash.once", + "version": "4.1.1", + "license": "CC0-1.0 AND MIT", + "flagged": false + }, + { + "name": "longest", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "lru-cache", + "version": "10.4.3", + "license": "ISC", + "flagged": false + }, + { + "name": "lxml", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "make-dir", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "math-intrinsics", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "media-typer", + "version": "0.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "merge-descriptors", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "methods", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "Microsoft.AspNet.Mvc", + "version": "5.2.9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "Microsoft.AspNet.Mvc.ko", + "version": "5.2.9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "Microsoft.AspNet.Razor", + "version": "3.2.9", + "license": "LicenseRef-scancode-unknown", + "flagged": false + }, + { + "name": "Microsoft.AspNet.Razor.ko", + "version": "3.2.9", + "license": "LicenseRef-scancode-unknown", + "flagged": false + }, + { + "name": "Microsoft.AspNet.WebPages", + "version": "3.2.9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "Microsoft.AspNet.WebPages.ko", + "version": "3.2.9", + "license": "LicenseRef-scancode-unknown", + "flagged": false + }, + { + "name": "Microsoft.CodeDom.Providers.DotNetCompilerPlatform", + "version": "2.0.1", + "license": "LicenseRef-github-OTHER", + "flagged": false + }, + { + "name": "Microsoft.IdentityModel.Clients.ActiveDirectory", + "version": "4.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "Microsoft.IdentityModel.JsonWebTokens", + "version": "5.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "Microsoft.IdentityModel.Logging", + "version": "5.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "Microsoft.IdentityModel.Tokens", + "version": "5.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "Microsoft.Web.Infrastructure", + "version": "2.0.1", + "license": "LicenseRef-scancode-unknown", + "flagged": false + }, + { + "name": "mime", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mime-db", + "version": "1.52.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mime-types", + "version": "2.1.35", + "license": "MIT", + "flagged": false + }, + { + "name": "minimatch", + "version": "10.2.5", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "minimatch", + "version": "9.0.9", + "license": "ISC", + "flagged": false + }, + { + "name": "minimist", + "version": "1.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "minipass", + "version": "7.1.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "mkdirp", + "version": "0.5.6", + "license": "MIT", + "flagged": false + }, + { + "name": "morgan", + "version": "1.11.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ms", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ms", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "negotiator", + "version": "0.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "Newtonsoft.Json", + "version": "12.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "node-uuid", + "version": "1.4.8", + "license": "MIT", + "flagged": false + }, + { + "name": "object-inspect", + "version": "1.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "on-finished", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "on-headers", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "p-limit", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "p-locate", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "package-json-from-dist", + "version": "1.0.1", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "parseurl", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "passport", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "passport-strategy", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "path-exists", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "path-key", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-scurry", + "version": "1.11.1", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "path-to-regexp", + "version": "0.1.13", + "license": "MIT", + "flagged": false + }, + { + "name": "pause", + "version": "0.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pdepend/pdepend", + "version": "1.1.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pem", + "version": ">= 3.0.0,< 4.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "php", + "version": ">= 5.3.2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "phploc/phploc", + "version": ">= 0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "phpunit/phpunit", + "version": "4.8", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "promise", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "promise", + "version": "6.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "proxy-addr", + "version": "2.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "pyjwt", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "python-multipart", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "qs", + "version": "6.15.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "rand", + "version": ">= 0.8.0,< 0.9.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "range-parser", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "raw-body", + "version": "2.5.3", + "license": "MIT", + "flagged": false + }, + { + "name": "regenerator-runtime", + "version": "0.11.1", + "license": "MIT", + "flagged": false + }, + { + "name": "repeat-string", + "version": "1.6.1", + "license": "MIT", + "flagged": false + }, + { + "name": "require-directory", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "reqwest", + "version": ">= 0.12.0,< 0.13.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "right-align", + "version": "0.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "roxmltree", + "version": ">= 0.20.0,< 0.21.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "rsa", + "version": ">= 0.9.0,< 0.10.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "rust-xmlsec", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "safe-buffer", + "version": "5.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "safe-buffer", + "version": "5.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "safer-buffer", + "version": "2.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "satooshi/php-coveralls", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "sax", + "version": "1.6.0", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "sebastian/phpcpd", + "version": ">= 0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "semver", + "version": "7.8.5", + "license": "ISC", + "flagged": false + }, + { + "name": "send", + "version": "0.19.2", + "license": "MIT", + "flagged": false + }, + { + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "serve-static", + "version": "1.16.3", + "license": "MIT", + "flagged": false + }, + { + "name": "setprototypeof", + "version": "1.2.0", + "license": "ISC", + "flagged": false + }, + { + "name": "sha2", + "version": ">= 0.10.0,< 0.11.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "shebang-command", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shebang-regex", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "side-channel", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "side-channel-list", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "side-channel-map", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "side-channel-weakmap", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "signal-exit", + "version": "4.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "signxml", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "source-map", + "version": "0.5.7", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "source-map", + "version": "0.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "squizlabs/php_codesniffer", + "version": "2.9.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "statuses", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "string-width", + "version": "4.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "string-width", + "version": "5.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-ansi", + "version": "6.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-ansi", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "System.IdentityModel.Tokens.Jwt", + "version": "5.4.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "test-exclude", + "version": "7.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "thiserror", + "version": ">= 2.0.0,< 3.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "time", + "version": ">= 0.3.0,< 0.4.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "to-fast-properties", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "toidentifier", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tokio", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "tower-sessions", + "version": ">= 0.13.0,< 0.14.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "transformers", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "type-is", + "version": "1.6.18", + "license": "MIT", + "flagged": false + }, + { + "name": "uglify-js", + "version": "2.8.29", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "uglify-to-browserify", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "undici-types", + "version": "8.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "unpipe", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "utils-merge", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "uvicorn", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "v8-to-istanbul", + "version": "9.3.0", + "license": "ISC", + "flagged": false + }, + { + "name": "vary", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "void-elements", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "which", + "version": "2.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "window-size", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "with", + "version": "4.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "wordwrap", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "wrap-ansi", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wrap-ansi", + "version": "8.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "x509-parser", + "version": ">= 0.16.0,< 0.17.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "xml-crypto", + "version": "6.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "xml-encryption", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "xml2js", + "version": "0.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "xmlbuilder", + "version": "11.0.1", + "license": "LicenseRef-scancode-unicode AND MIT", + "flagged": false + }, + { + "name": "xmlbuilder", + "version": "15.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "xpath", + "version": "0.0.32", + "license": "MIT", + "flagged": false + }, + { + "name": "xpath", + "version": "0.0.33", + "license": "MIT", + "flagged": false + }, + { + "name": "xpath", + "version": "0.0.34", + "license": "MIT", + "flagged": false + }, + { + "name": "y18n", + "version": "5.0.8", + "license": "ISC", + "flagged": false + }, + { + "name": "yargs", + "version": "17.7.3", + "license": "MIT", + "flagged": false + }, + { + "name": "yargs", + "version": "3.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "yargs-parser", + "version": "21.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "yocto-queue", + "version": "0.1.0", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/four-pillars", + "error": null, + "component_count": 70, + "components": [ + { + "name": "actions/checkout", + "version": "11d5960a326750d5838078e36cf38b85af677262", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/create-github-app-token", + "version": "bcd2ba49218906704ab6c1aa796996da409d3eb1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "d3f86a106a0bac45b974a628896c90dbdf5c8093", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "a26af69be951a213d495a4c3e4e4022e16d87065", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "annotated-doc", + "version": "0.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-types", + "version": "0.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "build", + "version": "1.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.7.22", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "charset-normalizer", + "version": "3.4.9", + "license": "MIT", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "coverage", + "version": "7.15.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fastapi", + "version": "0.141.1", + "license": "MIT", + "flagged": false + }, + { + "name": "fastapi", + "version": ">= 0.115,< 1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hatchling", + "version": "1.31.0", + "license": "MIT", + "flagged": false + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpcore2", + "version": "2.9.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httptools", + "version": "0.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx", + "version": ">= 0.27,< 1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "httpx2", + "version": "2.9.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jinja2", + "version": "3.1.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "jinja2", + "version": ">= 3.1,< 4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "korean-lunar-calendar", + "version": "0.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "korean-lunar-calendar", + "version": ">= 0.3.1,< 1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "librt", + "version": "0.13.0", + "license": "MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "markdown-it-py", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "markupsafe", + "version": "3.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "mdurl", + "version": "0.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "mypy", + "version": "1.20.2", + "license": "MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "mypy-extensions", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "pathspec", + "version": "1.1.1", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "pillow", + "version": "12.3.0", + "license": "MIT-CMU", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic", + "version": "2.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic", + "version": ">= 2.10,< 3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pydantic-core", + "version": "2.46.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-settings", + "version": "2.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-settings", + "version": ">= 2.7,< 3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pyproject-hooks", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest", + "version": "8.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-asyncio", + "version": "0.26.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pytest-cov", + "version": "6.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "python-dotenv", + "version": "1.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "python-multipart", + "version": "0.0.32", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "python-multipart", + "version": ">= 0.0.20,< 1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pyyaml", + "version": "6.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "reportlab", + "version": "4.5.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "reportlab", + "version": ">= 4.2,< 5", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "rich", + "version": "15.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ruff", + "version": "0.16.1", + "license": "MIT", + "flagged": false + }, + { + "name": "shellingham", + "version": "1.5.4", + "license": "ISC", + "flagged": false + }, + { + "name": "starlette", + "version": "1.3.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "trove-classifiers", + "version": "2026.6.1.19", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "truststore", + "version": "0.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "typer", + "version": "0.27.1", + "license": "MIT", + "flagged": false + }, + { + "name": "typer", + "version": ">= 0.15,< 1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "uvicorn", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "uvicorn", + "version": "0.52.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "uvloop", + "version": "0.22.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "watchfiles", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "websockets", + "version": "17.0.1", + "license": "BSD-3-Clause", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/governance-risk-compliance", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/gyeot", + "error": null, + "component_count": 831, + "components": [ + { + "name": "@babel/code-frame", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/compat-data", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/core", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/generator", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-annotate-as-pure", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-compilation-targets", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-create-class-features-plugin", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-create-regexp-features-plugin", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-define-polyfill-provider", + "version": "0.6.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-globals", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-member-expression-to-functions", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-imports", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-transforms", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-optimise-call-expression", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-plugin-utils", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-remap-async-to-generator", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-replace-supers", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-skip-transparent-expression-wrappers", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-string-parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-identifier", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-option", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-wrap-function", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helpers", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/parser", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-proposal-decorators", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-proposal-export-default-from", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-async-generators", + "version": "7.8.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-bigint", + "version": "7.8.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-class-properties", + "version": "7.12.13", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-class-static-block", + "version": "7.14.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-decorators", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-dynamic-import", + "version": "7.8.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-export-default-from", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-flow", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-import-attributes", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-import-meta", + "version": "7.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-json-strings", + "version": "7.8.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-jsx", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-logical-assignment-operators", + "version": "7.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-nullish-coalescing-operator", + "version": "7.8.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-numeric-separator", + "version": "7.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-object-rest-spread", + "version": "7.8.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-optional-catch-binding", + "version": "7.8.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-optional-chaining", + "version": "7.8.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-private-property-in-object", + "version": "7.14.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-top-level-await", + "version": "7.14.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-syntax-typescript", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-async-generator-functions", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-async-to-generator", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-block-scoping", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-class-properties", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-class-static-block", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-classes", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-destructuring", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-export-namespace-from", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-flow-strip-types", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-for-of", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-logical-assignment-operators", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-modules-commonjs", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-named-capturing-groups-regex", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-nullish-coalescing-operator", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-object-rest-spread", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-optional-catch-binding", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-optional-chaining", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-parameters", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-private-methods", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-private-property-in-object", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-react-display-name", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-react-jsx", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-react-jsx-development", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-react-pure-annotations", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-runtime", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-typescript", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-unicode-regex", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/preset-typescript", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/runtime", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/template", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/traverse", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/types", + "version": "7.29.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@bcoe/v8-coverage", + "version": "0.2.3", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "@egjs/hammerjs", + "version": "2.0.17", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "1.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/aix-ppc64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ia32", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-loong64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-mips64el", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ppc64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-riscv64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-s390x", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openharmony-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/sunos-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-ia32", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo-google-fonts/material-symbols", + "version": "0.4.44", + "license": "MIT AND Apache-2.0", + "flagged": false + }, + { + "name": "@expo/cli", + "version": "57.0.17", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/code-signing-certificates", + "version": "0.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/config", + "version": "57.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/config-plugins", + "version": "57.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/config-types", + "version": "57.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/devcert", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/devtools", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/dom-webview", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/env", + "version": "2.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/expo-modules-macros-plugin", + "version": "0.6.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/fingerprint", + "version": "0.20.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/image-utils", + "version": "0.11.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/inline-modules", + "version": "0.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/json-file", + "version": "11.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/local-build-cache-provider", + "version": "57.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/log-box", + "version": "57.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/metro", + "version": "56.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/metro-config", + "version": "57.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/metro-file-map", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/metro-runtime", + "version": "57.0.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/osascript", + "version": "2.7.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/package-manager", + "version": "1.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/plist", + "version": "0.8.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/prebuild-config", + "version": "57.0.13", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/require-utils", + "version": "57.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/router-server", + "version": "57.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/schema-utils", + "version": "57.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/sdk-runtime-versions", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/spawn-async", + "version": "1.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/sudo-prompt", + "version": "9.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/ui", + "version": "57.0.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/ws-tunnel", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@expo/xcpretty", + "version": "4.4.4", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "@isaacs/cliui", + "version": "8.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "@isaacs/ttlcache", + "version": "1.4.1", + "license": "ISC", + "flagged": false + }, + { + "name": "@istanbuljs/load-nyc-config", + "version": "1.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "@istanbuljs/schema", + "version": "0.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/console", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/core", + "version": "30.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/diff-sequences", + "version": "30.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/environment", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/expect", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/expect-utils", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/fake-timers", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/get-type", + "version": "30.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/globals", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/pattern", + "version": "30.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/reporters", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/schemas", + "version": "29.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/schemas", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/snapshot-utils", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/source-map", + "version": "30.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/test-result", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/test-sequencer", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/transform", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/types", + "version": "29.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@jest/types", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/gen-mapping", + "version": "0.3.13", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/remapping", + "version": "2.3.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/resolve-uri", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/source-map", + "version": "0.3.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/sourcemap-codec", + "version": "1.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/wasm-runtime", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@pkgjs/parseargs", + "version": "0.11.0", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "@pkgr/core", + "version": "0.3.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/primitive", + "version": "1.1.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-collection", + "version": "1.1.15", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-compose-refs", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-context", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-dialog", + "version": "1.1.23", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-direction", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-dismissable-layer", + "version": "1.1.19", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-focus-guards", + "version": "1.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-focus-scope", + "version": "1.1.16", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-id", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-portal", + "version": "1.1.17", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-presence", + "version": "1.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-primitive", + "version": "2.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-roving-focus", + "version": "1.1.19", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-slot", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-tabs", + "version": "1.1.21", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-callback-ref", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-controllable-state", + "version": "1.2.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-effect-event", + "version": "0.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-is-hydrated", + "version": "0.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-layout-effect", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native-async-storage/async-storage", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native-masked-view/masked-view", + "version": "0.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/asset-utils", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/babel-plugin-codegen", + "version": "0.86.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/codegen", + "version": "0.86.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/codegen", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/community-cli-plugin", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/debugger-frontend", + "version": "0.86.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "@react-native/debugger-frontend", + "version": "0.87.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "@react-native/debugger-shell", + "version": "0.86.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/debugger-shell", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/dev-middleware", + "version": "0.86.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/dev-middleware", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/gradle-plugin", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/normalize-colors", + "version": "0.86.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/normalize-colors", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@react-native/virtualized-lists", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@sinclair/typebox", + "version": "0.27.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@sinclair/typebox", + "version": "0.34.52", + "license": "MIT", + "flagged": false + }, + { + "name": "@sinonjs/commons", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "@sinonjs/fake-timers", + "version": "15.4.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "@tybys/wasm-util", + "version": "0.10.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__core", + "version": "7.20.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__generator", + "version": "7.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__template", + "version": "7.4.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__traverse", + "version": "7.28.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/emscripten", + "version": "1.41.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/hammerjs", + "version": "2.0.46", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/istanbul-lib-coverage", + "version": "2.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/istanbul-lib-report", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/istanbul-reports", + "version": "3.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/jest", + "version": "30.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/node", + "version": "24.13.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/node", + "version": "26.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/pg", + "version": "8.20.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react", + "version": "19.2.18", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react-test-renderer", + "version": "19.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/stack-utils", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/yargs", + "version": "17.0.35", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/yargs-parser", + "version": "21.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@ungap/structured-clone", + "version": "1.3.3", + "license": "ISC", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-android-arm-eabi", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-android-arm64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-darwin-arm64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-darwin-x64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-freebsd-x64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-arm-gnueabihf", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-arm-musleabihf", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-arm64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-arm64-musl", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-loong64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-loong64-musl", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-ppc64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-riscv64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-riscv64-musl", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-s390x-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-x64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-x64-musl", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-openharmony-arm64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-wasm32-wasi", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-win32-arm64-msvc", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-win32-ia32-msvc", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-win32-x64-msvc", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@xmldom/xmldom", + "version": "0.8.15", + "license": "MIT", + "flagged": false + }, + { + "name": "@xmldom/xmldom", + "version": "0.9.12", + "license": "MIT", + "flagged": false + }, + { + "name": "abort-controller", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "accepts", + "version": "1.3.8", + "license": "MIT", + "flagged": false + }, + { + "name": "accepts", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn", + "version": "8.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "249970729cb0ef3589644e2896645e5dc5ba9c38", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "agent-base", + "version": "7.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "agent-cli-detector", + "version": "0.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "anser", + "version": "1.4.10", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-escapes", + "version": "4.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "4.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "6.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "3.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "4.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "6.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "anymatch", + "version": "3.1.3", + "license": "ISC", + "flagged": false + }, + { + "name": "arg", + "version": "5.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "argparse", + "version": "1.0.10", + "license": "MIT", + "flagged": false + }, + { + "name": "argparse", + "version": "2.0.1", + "license": "Python-2.0", + "flagged": false + }, + { + "name": "aria-hidden", + "version": "1.2.6", + "license": "MIT", + "flagged": false + }, + { + "name": "asap", + "version": "2.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "await-lock", + "version": "2.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-jest", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-plugin-istanbul", + "version": "7.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "babel-plugin-jest-hoist", + "version": "30.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-plugin-polyfill-corejs2", + "version": "0.4.17", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-plugin-polyfill-corejs3", + "version": "0.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-plugin-polyfill-regenerator", + "version": "0.6.8", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-plugin-react-compiler", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-plugin-react-native-web", + "version": "0.21.2", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-plugin-syntax-hermes-parser", + "version": "0.36.1", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-plugin-transform-flow-enums", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-preset-current-node-syntax", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-preset-expo", + "version": "57.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "babel-preset-jest", + "version": "30.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "badgin", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "balanced-match", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "barcode-detector", + "version": "3.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "base64-js", + "version": "1.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "baseline-browser-mapping", + "version": "2.11.18", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "big-integer", + "version": "1.6.52", + "license": "LicenseRef-scancode-public-domain AND Unlicense", + "flagged": false + }, + { + "name": "boolbase", + "version": "1.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "bplist-creator", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "bplist-parser", + "version": "0.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "bplist-parser", + "version": "0.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "brace-expansion", + "version": "5.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "braces", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "browserslist", + "version": "4.28.8", + "license": "MIT", + "flagged": false + }, + { + "name": "bs-logger", + "version": "0.2.6", + "license": "MIT", + "flagged": false + }, + { + "name": "bser", + "version": "2.1.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "buffer-from", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "bytes", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "callsites", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "camelcase", + "version": "5.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "camelcase", + "version": "6.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "caniuse-lite", + "version": "1.0.30001809", + "license": "CC-BY-4.0", + "flagged": false + }, + { + "name": "chalk", + "version": "2.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "chalk", + "version": "4.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "char-regex", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "chrome-launcher", + "version": "0.15.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "chromium-edge-launcher", + "version": "0.3.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "ci-info", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ci-info", + "version": "3.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ci-info", + "version": "4.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cjs-module-lexer", + "version": "2.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "cli-cursor", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cli-spinners", + "version": "2.9.2", + "license": "MIT", + "flagged": false + }, + { + "name": "client-only", + "version": "0.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "cliui", + "version": "8.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "clone", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "co", + "version": "4.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "collect-v8-coverage", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "color", + "version": "4.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "color-convert", + "version": "1.9.3", + "license": "MIT", + "flagged": false + }, + { + "name": "color-convert", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "color-name", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "color-name", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "color-string", + "version": "1.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "commander", + "version": "12.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "commander", + "version": "2.20.3", + "license": "MIT", + "flagged": false + }, + { + "name": "commander", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "compressible", + "version": "2.0.18", + "license": "MIT", + "flagged": false + }, + { + "name": "compression", + "version": "1.8.1", + "license": "MIT", + "flagged": false + }, + { + "name": "connect", + "version": "3.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "convert-source-map", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "core-js-compat", + "version": "3.50.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cross-spawn", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "css-select", + "version": "5.2.2", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "css-tree", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "css-what", + "version": "6.2.2", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "csstype", + "version": "3.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "debug", + "version": "2.6.9", + "license": "MIT", + "flagged": false + }, + { + "name": "debug", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "debug", + "version": "4.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "decode-uri-component", + "version": "0.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "dedent", + "version": "1.7.2", + "license": "MIT", + "flagged": false + }, + { + "name": "deepmerge", + "version": "4.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "defaults", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "depd", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "destroy", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "detect-libc", + "version": "2.1.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "detect-newline", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "detect-node-es", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "dnssd-advertise", + "version": "1.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "dom-serializer", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "domelementtype", + "version": "2.3.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "domhandler", + "version": "5.0.3", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "domutils", + "version": "3.2.2", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "eastasianwidth", + "version": "0.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ee-first", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "electron-to-chromium", + "version": "1.5.412", + "license": "ISC", + "flagged": false + }, + { + "name": "emittery", + "version": "0.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "emoji-regex", + "version": "8.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "emoji-regex", + "version": "9.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "encodeurl", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "encodeurl", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "entities", + "version": "4.5.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "error-ex", + "version": "1.3.4", + "license": "MIT", + "flagged": false + }, + { + "name": "error-stack-parser", + "version": "2.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "es-errors", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "esbuild", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "escalade", + "version": "3.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "escape-html", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "escape-string-regexp", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "escape-string-regexp", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "escape-string-regexp", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "esprima", + "version": "4.0.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "etag", + "version": "1.8.1", + "license": "MIT", + "flagged": false + }, + { + "name": "event-target-shim", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "execa", + "version": "5.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "exit-x", + "version": "0.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "expect", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo", + "version": "57.0.15", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-application", + "version": "57.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-asset", + "version": "57.0.13", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-audio", + "version": "57.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-camera", + "version": "57.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-constants", + "version": "57.0.13", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-crypto", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-file-system", + "version": "57.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-font", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-glass-effect", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-haptics", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-image-loader", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-image-manipulator", + "version": "57.0.12", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-image-picker", + "version": "57.0.12", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-keep-awake", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-linking", + "version": "57.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-media-library", + "version": "57.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-modules-autolinking", + "version": "57.0.10", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-modules-core", + "version": "57.0.12", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-modules-jsi", + "version": "57.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-notifications", + "version": "57.0.13", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-router", + "version": "57.0.15", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-secure-store", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-server", + "version": "57.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-sqlite", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-status-bar", + "version": "57.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-symbols", + "version": "57.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "expo-video", + "version": "57.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "exponential-backoff", + "version": "3.1.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fast-deep-equal", + "version": "3.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-json-stable-stringify", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fb-dotslash", + "version": "0.5.8", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "fb-watchman", + "version": "2.0.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fdir", + "version": "6.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fetch-nodeshim", + "version": "0.4.10", + "license": "MIT", + "flagged": false + }, + { + "name": "fill-range", + "version": "7.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "filter-obj", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "finalhandler", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "find-up", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "flow-enums-runtime", + "version": "0.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "fontfaceobserver", + "version": "2.3.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "foreground-child", + "version": "3.3.1", + "license": "ISC", + "flagged": false + }, + { + "name": "fresh", + "version": "0.5.2", + "license": "MIT", + "flagged": false + }, + { + "name": "fs.realpath", + "version": "1.0.0", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "function-bind", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gensync", + "version": "1.0.0-beta.2", + "license": "MIT", + "flagged": false + }, + { + "name": "get-caller-file", + "version": "2.0.5", + "license": "ISC", + "flagged": false + }, + { + "name": "get-nonce", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "get-package-type", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "get-stream", + "version": "6.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "getenv", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "glob", + "version": "10.5.0", + "license": "ISC", + "flagged": false + }, + { + "name": "glob", + "version": "13.0.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "glob", + "version": "7.2.3", + "license": "ISC", + "flagged": false + }, + { + "name": "graceful-fs", + "version": "4.2.11", + "license": "ISC", + "flagged": false + }, + { + "name": "handlebars", + "version": "4.7.9", + "license": "MIT", + "flagged": false + }, + { + "name": "has-flag", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-flag", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hasown", + "version": "2.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "hermes-compiler", + "version": "250829098.0.16", + "license": "MIT", + "flagged": false + }, + { + "name": "hermes-estree", + "version": "0.35.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hermes-estree", + "version": "0.36.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hermes-estree", + "version": "0.36.1", + "license": "MIT", + "flagged": false + }, + { + "name": "hermes-parser", + "version": "0.35.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hermes-parser", + "version": "0.36.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hermes-parser", + "version": "0.36.1", + "license": "MIT", + "flagged": false + }, + { + "name": "hoist-non-react-statics", + "version": "3.3.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "hosted-git-info", + "version": "7.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "html-escaper", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "http-errors", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "https-proxy-agent", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "human-signals", + "version": "2.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "ignore", + "version": "5.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "image-size", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "import-local", + "version": "3.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "imurmurhash", + "version": "0.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "inflight", + "version": "1.0.6", + "license": "ISC", + "flagged": false + }, + { + "name": "inherits", + "version": "2.0.4", + "license": "ISC", + "flagged": false + }, + { + "name": "invariant", + "version": "2.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "is-arrayish", + "version": "0.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-arrayish", + "version": "0.3.4", + "license": "MIT", + "flagged": false + }, + { + "name": "is-core-module", + "version": "2.16.2", + "license": "MIT", + "flagged": false + }, + { + "name": "is-docker", + "version": "2.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-generator-fn", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-number", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-plain-obj", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-stream", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-wsl", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "isexe", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "istanbul-lib-coverage", + "version": "3.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-instrument", + "version": "6.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-report", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-source-maps", + "version": "5.0.6", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-reports", + "version": "3.2.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "jackspeak", + "version": "3.4.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "jest", + "version": "30.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-changed-files", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-circus", + "version": "30.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-cli", + "version": "30.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-config", + "version": "30.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-diff", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-docblock", + "version": "30.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-each", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-environment-node", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-get-type", + "version": "29.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-haste-map", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-leak-detector", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-matcher-utils", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-message-util", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-mock", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-pnp-resolver", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-regex-util", + "version": "30.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-resolve", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-resolve-dependencies", + "version": "30.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-runner", + "version": "30.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-runtime", + "version": "30.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-snapshot", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-util", + "version": "29.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-util", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-validate", + "version": "29.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-validate", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-watcher", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-worker", + "version": "29.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jest-worker", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jimp-compact", + "version": "0.16.1", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-yaml", + "version": "3.15.1", + "license": "MIT", + "flagged": false + }, + { + "name": "js-yaml", + "version": "4.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsc-safe-url", + "version": "0.2.4", + "license": "0BSD", + "flagged": false + }, + { + "name": "jsesc", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "json-parse-even-better-errors", + "version": "2.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "json5", + "version": "2.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "kleur", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "lan-network", + "version": "0.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "leven", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lighthouse-logger", + "version": "1.4.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lines-and-columns", + "version": "1.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "locate-path", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lodash.debounce", + "version": "4.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "lodash.memoize", + "version": "4.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "lodash.throttle", + "version": "4.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "log-symbols", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "loose-envify", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lru-cache", + "version": "10.4.3", + "license": "ISC", + "flagged": false + }, + { + "name": "lru-cache", + "version": "11.5.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "lru-cache", + "version": "5.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "make-dir", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "make-error", + "version": "1.3.6", + "license": "ISC", + "flagged": false + }, + { + "name": "makeerror", + "version": "1.0.12", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "marky", + "version": "1.3.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "mdn-data", + "version": "2.0.14", + "license": "CC0-1.0", + "flagged": false + }, + { + "name": "memoize-one", + "version": "5.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "merge-options", + "version": "3.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "merge-stream", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-babel-transformer", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-babel-transformer", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-cache", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-cache", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-cache-key", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-cache-key", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-config", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-config", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-core", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-core", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-file-map", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-file-map", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-minify-terser", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-minify-terser", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-resolver", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-resolver", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-runtime", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-runtime", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-source-map", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-source-map", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-symbolicate", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-symbolicate", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-transform-plugins", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-transform-plugins", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-transform-worker", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "metro-transform-worker", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "micromatch", + "version": "4.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "mime", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mime-db", + "version": "1.52.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mime-db", + "version": "1.54.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mime-types", + "version": "2.1.35", + "license": "MIT", + "flagged": false + }, + { + "name": "mime-types", + "version": "3.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "mimic-fn", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mimic-fn", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "minimatch", + "version": "10.2.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "minimatch", + "version": "3.1.5", + "license": "ISC", + "flagged": false + }, + { + "name": "minimatch", + "version": "9.0.9", + "license": "ISC", + "flagged": false + }, + { + "name": "minimist", + "version": "1.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "minipass", + "version": "7.1.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "mkdirp", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "ms", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ms", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "multitars", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "nanoid", + "version": "3.3.18", + "license": "MIT", + "flagged": false + }, + { + "name": "napi-postinstall", + "version": "0.3.4", + "license": "MIT", + "flagged": false + }, + { + "name": "natural-compare", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "negotiator", + "version": "0.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "negotiator", + "version": "0.6.4", + "license": "MIT", + "flagged": false + }, + { + "name": "negotiator", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "neo-async", + "version": "2.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "node-forge", + "version": "1.4.0", + "license": "BSD-3-Clause OR GPL-2.0-only", + "flagged": true + }, + { + "name": "node-int64", + "version": "0.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "node-releases", + "version": "2.0.53", + "license": "MIT", + "flagged": false + }, + { + "name": "normalize-path", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "npm-package-arg", + "version": "11.0.3", + "license": "ISC", + "flagged": false + }, + { + "name": "npm-run-path", + "version": "4.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "nth-check", + "version": "2.1.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "nullthrows", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ob1", + "version": "0.84.5", + "license": "MIT", + "flagged": false + }, + { + "name": "ob1", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "on-finished", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "on-finished", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "on-headers", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "once", + "version": "1.4.0", + "license": "ISC", + "flagged": false + }, + { + "name": "onetime", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "onetime", + "version": "5.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "open", + "version": "7.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ora", + "version": "3.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "p-limit", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "p-limit", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "p-locate", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "p-try", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "package-json-from-dist", + "version": "1.0.1", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "parse-json", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "parse-png", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "parseurl", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "path-exists", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "path-is-absolute", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-key", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-parse", + "version": "1.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "path-scurry", + "version": "1.11.1", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "path-scurry", + "version": "2.0.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "pg", + "version": "8.22.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pg-cloudflare", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pg-connection-string", + "version": "2.14.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pg-int8", + "version": "1.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "pg-pool", + "version": "3.14.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pg-protocol", + "version": "1.15.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pg-types", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pgpass", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "picocolors", + "version": "1.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "picomatch", + "version": "2.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "picomatch", + "version": "4.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "pirates", + "version": "4.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "pkg-dir", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "plist", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pngjs", + "version": "3.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "postcss", + "version": "8.5.26", + "license": "MIT", + "flagged": false + }, + { + "name": "postgres-array", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "postgres-bytea", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "postgres-date", + "version": "1.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "postgres-interval", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pretty-format", + "version": "29.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pretty-format", + "version": "30.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "proc-log", + "version": "4.2.0", + "license": "ISC", + "flagged": false + }, + { + "name": "progress", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "promise", + "version": "8.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "prompts", + "version": "2.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "pure-rand", + "version": "7.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "query-string", + "version": "7.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "queue", + "version": "6.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "range-parser", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "react", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react-devtools-core", + "version": "6.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "react-dom", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react-fast-compare", + "version": "3.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "react-freeze", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "react-is", + "version": "16.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "react-is", + "version": "18.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "react-is", + "version": "19.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "react-native", + "version": "0.87.0", + "license": "MIT", + "flagged": false + }, + { + "name": "react-native-drawer-layout", + "version": "4.2.10", + "license": "MIT", + "flagged": false + }, + { + "name": "react-native-gesture-handler", + "version": "2.32.0", + "license": "MIT", + "flagged": false + }, + { + "name": "react-native-safe-area-context", + "version": "5.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "react-native-screens", + "version": "4.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "react-native-svg", + "version": "15.15.5", + "license": "MIT", + "flagged": false + }, + { + "name": "react-refresh", + "version": "0.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "react-remove-scroll", + "version": "2.7.2", + "license": "MIT", + "flagged": false + }, + { + "name": "react-remove-scroll-bar", + "version": "2.3.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react-style-singleton", + "version": "2.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "regenerate", + "version": "1.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "regenerate-unicode-properties", + "version": "10.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "regenerator-runtime", + "version": "0.13.11", + "license": "MIT", + "flagged": false + }, + { + "name": "regexpu-core", + "version": "6.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "regjsgen", + "version": "0.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "regjsparser", + "version": "0.13.2", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "require-directory", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "resolve", + "version": "1.22.12", + "license": "MIT", + "flagged": false + }, + { + "name": "resolve-cwd", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "resolve-from", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "resolve-workspace-root", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "restore-cursor", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "safe-buffer", + "version": "5.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "sandbox-cli-detector", + "version": "0.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sax", + "version": "1.6.1", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "scheduler", + "version": "0.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "semver", + "version": "6.3.1", + "license": "ISC", + "flagged": false + }, + { + "name": "semver", + "version": "7.8.5", + "license": "ISC", + "flagged": false + }, + { + "name": "send", + "version": "0.19.2", + "license": "MIT", + "flagged": false + }, + { + "name": "serialize-error", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "serve-static", + "version": "1.16.3", + "license": "MIT", + "flagged": false + }, + { + "name": "server-only", + "version": "0.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "setprototypeof", + "version": "1.2.0", + "license": "ISC", + "flagged": false + }, + { + "name": "sf-symbols-typescript", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shallowequal", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shebang-command", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shebang-regex", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shell-quote", + "version": "1.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "signal-exit", + "version": "3.0.7", + "license": "ISC", + "flagged": false + }, + { + "name": "signal-exit", + "version": "4.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "simple-plist", + "version": "1.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "simple-swizzle", + "version": "0.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "sisteransi", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "slash", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "slugify", + "version": "1.6.9", + "license": "MIT", + "flagged": false + }, + { + "name": "source-map", + "version": "0.5.7", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "source-map", + "version": "0.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "source-map-js", + "version": "1.2.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "source-map-support", + "version": "0.5.13", + "license": "MIT", + "flagged": false + }, + { + "name": "source-map-support", + "version": "0.5.21", + "license": "MIT", + "flagged": false + }, + { + "name": "split-on-first", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "split2", + "version": "4.2.0", + "license": "ISC", + "flagged": false + }, + { + "name": "sprintf-js", + "version": "1.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "stack-utils", + "version": "2.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "stackframe", + "version": "1.3.4", + "license": "MIT", + "flagged": false + }, + { + "name": "stacktrace-parser", + "version": "0.1.11", + "license": "MIT", + "flagged": false + }, + { + "name": "standard-navigation", + "version": "0.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "statuses", + "version": "1.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "statuses", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "stream-buffers", + "version": "2.2.0", + "license": "Unlicense", + "flagged": false + }, + { + "name": "strict-uri-encode", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "string-length", + "version": "4.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "string-width", + "version": "4.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "string-width", + "version": "5.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-ansi", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-ansi", + "version": "6.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-ansi", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-bom", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-final-newline", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-json-comments", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "structured-headers", + "version": "0.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "5.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "8.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-hyperlinks", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-preserve-symlinks-flag", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "synckit", + "version": "0.11.13", + "license": "MIT", + "flagged": false + }, + { + "name": "tagged-tag", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "terminal-link", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "terser", + "version": "5.50.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "test-exclude", + "version": "6.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "throat", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyglobby", + "version": "0.2.17", + "license": "MIT", + "flagged": false + }, + { + "name": "tmpl", + "version": "1.0.5", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "to-regex-range", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "toidentifier", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "toqr", + "version": "0.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ts-jest", + "version": "29.4.12", + "license": "MIT", + "flagged": false + }, + { + "name": "tslib", + "version": "2.8.1", + "license": "0BSD", + "flagged": false + }, + { + "name": "tsx", + "version": "4.23.1", + "license": "MIT", + "flagged": false + }, + { + "name": "type-detect", + "version": "4.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "type-fest", + "version": "0.21.3", + "license": "CC0-1.0 AND MIT", + "flagged": false + }, + { + "name": "type-fest", + "version": "0.7.1", + "license": "MIT OR (CC0-1.0 AND MIT)", + "flagged": false + }, + { + "name": "type-fest", + "version": "4.41.0", + "license": "CC0-1.0 AND MIT", + "flagged": false + }, + { + "name": "type-fest", + "version": "5.8.0", + "license": "(MIT OR CC0-1.0)", + "flagged": false + }, + { + "name": "typescript", + "version": "5.9.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "typescript", + "version": "6.0.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "uglify-js", + "version": "3.19.3", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "undici-types", + "version": "7.18.2", + "license": "MIT", + "flagged": false + }, + { + "name": "undici-types", + "version": "8.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "unicode-canonical-property-names-ecmascript", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "unicode-match-property-ecmascript", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "unicode-match-property-value-ecmascript", + "version": "2.2.1", + "license": "LicenseRef-scancode-unicode AND MIT", + "flagged": false + }, + { + "name": "unicode-property-aliases-ecmascript", + "version": "2.2.0", + "license": "LicenseRef-scancode-unicode AND MIT", + "flagged": false + }, + { + "name": "unpipe", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "unrs-resolver", + "version": "1.12.2", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "update-browserslist-db", + "version": "1.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "use-callback-ref", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "use-latest-callback", + "version": "0.2.6", + "license": "MIT", + "flagged": false + }, + { + "name": "use-sidecar", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "utils-merge", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "uuid", + "version": "11.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "v8-to-istanbul", + "version": "9.3.0", + "license": "ISC", + "flagged": false + }, + { + "name": "validate-npm-package-name", + "version": "5.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "vary", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "vaul", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "vlq", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "walker", + "version": "1.0.8", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "warn-once", + "version": "0.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "wcwidth", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-fetch", + "version": "3.6.20", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-url-minimum", + "version": "0.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "which", + "version": "2.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "wordwrap", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wrap-ansi", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wrap-ansi", + "version": "8.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wrappy", + "version": "1.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "write-file-atomic", + "version": "5.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "ws", + "version": "7.5.13", + "license": "MIT", + "flagged": false + }, + { + "name": "ws", + "version": "8.21.3", + "license": "MIT", + "flagged": false + }, + { + "name": "xcode", + "version": "3.0.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "xml2js", + "version": "0.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "xmlbuilder", + "version": "11.0.1", + "license": "LicenseRef-scancode-unicode AND MIT", + "flagged": false + }, + { + "name": "xmlbuilder", + "version": "15.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "xtend", + "version": "4.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "y18n", + "version": "5.0.8", + "license": "ISC", + "flagged": false + }, + { + "name": "yallist", + "version": "3.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "yaml", + "version": "2.9.0", + "license": "ISC", + "flagged": false + }, + { + "name": "yargs", + "version": "17.7.3", + "license": "MIT", + "flagged": false + }, + { + "name": "yargs-parser", + "version": "21.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "yocto-queue", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "zod", + "version": "3.25.76", + "license": "MIT", + "flagged": false + }, + { + "name": "zxing-wasm", + "version": "3.1.3", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/hyosung-itx-slogan-brief", + "error": null, + "component_count": 2, + "components": [ + { + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "49933ea5288caeca8642d1e84afbd3f7d6820020", + "license": "NOASSERTION", + "flagged": true + } + ] + }, + { + "repo": "ContextualWisdomLab/inkspan", + "error": null, + "component_count": 567, + "components": [ + { + "name": "@adobe/css-tools", + "version": "4.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@ampproject/remapping", + "version": "2.3.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@asamuzakjp/css-color", + "version": "3.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/code-frame", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/compat-data", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/core", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/generator", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-compilation-targets", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-globals", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-imports", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-transforms", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-plugin-utils", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-string-parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-identifier", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-option", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helpers", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-react-jsx-self", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/plugin-transform-react-jsx-source", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/runtime", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/template", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/traverse", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/types", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@bcoe/v8-coverage", + "version": "1.0.2", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "@csstools/color-helpers", + "version": "5.1.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "@csstools/css-calc", + "version": "2.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-color-parser", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-parser-algorithms", + "version": "3.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-tokenizer", + "version": "3.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "1.11.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "1.9.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.11.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.9.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/aix-ppc64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-x64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-arm64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-x64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-arm64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-x64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ia32", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-loong64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-mips64el", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ppc64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-riscv64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-s390x", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-x64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-arm64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-x64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-arm64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-x64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openharmony-arm64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/sunos-x64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-arm64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-ia32", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-x64", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@isaacs/cliui", + "version": "8.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "@istanbuljs/schema", + "version": "0.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@joshwooding/vite-plugin-react-docgen-typescript", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/gen-mapping", + "version": "0.3.13", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/remapping", + "version": "2.3.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/resolve-uri", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/sourcemap-codec", + "version": "1.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@mdx-js/react", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@microsoft/api-extractor", + "version": "7.58.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@microsoft/api-extractor-model", + "version": "7.33.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@microsoft/tsdoc", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@microsoft/tsdoc-config", + "version": "0.18.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@mixmark-io/domino", + "version": "2.2.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "@napi-rs/wasm-runtime", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-android-arm-eabi", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-android-arm64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-darwin-arm64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-darwin-x64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-freebsd-x64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm-gnueabihf", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm-musleabihf", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-arm64-musl", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-ppc64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-riscv64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-riscv64-musl", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-s390x-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-x64-gnu", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-linux-x64-musl", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-openharmony-arm64", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-wasm32-wasi", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-win32-arm64-msvc", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-win32-ia32-msvc", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-parser/binding-win32-x64-msvc", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-project/types", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-android-arm-eabi", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-android-arm64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-darwin-arm64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-darwin-x64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-freebsd-x64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm-gnueabihf", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm-musleabihf", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm64-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-arm64-musl", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-ppc64-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-riscv64-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-riscv64-musl", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-s390x-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-x64-gnu", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-linux-x64-musl", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-openharmony-arm64", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-wasm32-wasi", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-win32-arm64-msvc", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-resolver/binding-win32-x64-msvc", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@pkgjs/parseargs", + "version": "0.11.0", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "@playwright/test", + "version": "1.62.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@popperjs/core", + "version": "2.11.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@remirror/core-constants", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/pluginutils", + "version": "1.0.0-beta.27", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/pluginutils", + "version": "5.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-android-arm-eabi", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-android-arm64", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-darwin-arm64", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-darwin-x64", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-freebsd-arm64", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-freebsd-x64", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-arm-gnueabihf", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-arm-musleabihf", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-arm64-gnu", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-arm64-musl", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-loong64-gnu", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-loong64-musl", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-ppc64-gnu", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-ppc64-musl", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-riscv64-gnu", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-riscv64-musl", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-s390x-gnu", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-x64-gnu", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-linux-x64-musl", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-openbsd-x64", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-openharmony-arm64", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-win32-arm64-msvc", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-win32-ia32-msvc", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-win32-x64-gnu", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rollup/rollup-win32-x64-msvc", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@rushstack/node-core-library", + "version": "5.23.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rushstack/problem-matcher", + "version": "0.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rushstack/rig-package", + "version": "0.7.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rushstack/terminal", + "version": "0.24.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@rushstack/ts-command-line", + "version": "5.3.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/addon-docs", + "version": "10.5.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/builder-vite", + "version": "10.5.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/csf-plugin", + "version": "10.5.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/global", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/icons", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react", + "version": "10.5.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react-dom-shim", + "version": "10.5.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@storybook/react-vite", + "version": "10.5.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/dom", + "version": "10.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/jest-dom", + "version": "6.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/react", + "version": "16.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/user-event", + "version": "14.6.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/core", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-blockquote", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-bold", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-bubble-menu", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-bullet-list", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-code", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-code-block", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-collaboration", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-collaboration-cursor", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-document", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-dropcursor", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-floating-menu", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-gapcursor", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-hard-break", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-heading", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-history", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-horizontal-rule", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-image", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-italic", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-link", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-list-item", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-ordered-list", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-paragraph", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-placeholder", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-strike", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-table", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-table-cell", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-table-header", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-table-row", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-text", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/extension-text-style", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/pm", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/react", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tiptap/starter-kit", + "version": "2.27.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@tybys/wasm-util", + "version": "0.10.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/argparse", + "version": "1.0.38", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/aria-query", + "version": "5.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__core", + "version": "7.20.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__generator", + "version": "7.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__template", + "version": "7.4.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/babel__traverse", + "version": "7.28.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/chai", + "version": "5.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/deep-eql", + "version": "4.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/doctrine", + "version": "0.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/estree", + "version": "1.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/linkify-it", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/markdown-it", + "version": "14.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/mdurl", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/mdx", + "version": "2.0.14", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/node", + "version": "22.20.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/prop-types", + "version": "15.7.15", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react", + "version": "18.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react-dom", + "version": "18.3.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/resolve", + "version": "1.20.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/turndown", + "version": "5.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/use-sync-external-store", + "version": "0.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitejs/plugin-react", + "version": "4.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/coverage-v8", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/expect", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/expect", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/mocker", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/pretty-format", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/pretty-format", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/runner", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/snapshot", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/spy", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/spy", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/utils", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/utils", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@volar/language-core", + "version": "2.4.28", + "license": "MIT", + "flagged": false + }, + { + "name": "@volar/source-map", + "version": "2.4.28", + "license": "MIT", + "flagged": false + }, + { + "name": "@volar/typescript", + "version": "2.4.28", + "license": "MIT", + "flagged": false + }, + { + "name": "@vue/compiler-core", + "version": "3.5.39", + "license": "MIT", + "flagged": false + }, + { + "name": "@vue/compiler-dom", + "version": "3.5.39", + "license": "MIT", + "flagged": false + }, + { + "name": "@vue/compiler-vue2", + "version": "2.7.16", + "license": "MIT", + "flagged": false + }, + { + "name": "@vue/language-core", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@vue/shared", + "version": "3.5.39", + "license": "MIT", + "flagged": false + }, + { + "name": "@webcontainer/env", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn", + "version": "8.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "actions/attest", + "version": "59d89421af93a897026c735860bf21b6eb4f7b26", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "37930b1c2abaa49bbe596cd826c3c89aef350131", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "820762786026740c76f36085b0efc47a31fe5020", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "a26af69be951a213d495a4c3e4e4022e16d87065", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "agent-base", + "version": "7.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "ajv", + "version": "8.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ajv-draft-04", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ajv-formats", + "version": "3.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "alien-signals", + "version": "0.4.14", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-regex", + "version": "6.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "4.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "6.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "argparse", + "version": "1.0.10", + "license": "MIT", + "flagged": false + }, + { + "name": "argparse", + "version": "2.0.1", + "license": "Python-2.0", + "flagged": false + }, + { + "name": "aria-query", + "version": "5.3.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "aria-query", + "version": "5.3.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "assertion-error", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-types", + "version": "0.16.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-v8-to-istanbul", + "version": "0.3.12", + "license": "MIT", + "flagged": false + }, + { + "name": "asynckit", + "version": "0.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "balanced-match", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "baseline-browser-mapping", + "version": "2.10.43", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "brace-expansion", + "version": "5.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "browserslist", + "version": "4.28.5", + "license": "MIT", + "flagged": false + }, + { + "name": "bundle-name", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cac", + "version": "6.7.14", + "license": "MIT", + "flagged": false + }, + { + "name": "call-bind-apply-helpers", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "caniuse-lite", + "version": "1.0.30001803", + "license": "CC-BY-4.0", + "flagged": false + }, + { + "name": "chai", + "version": "5.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "check-error", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "color-convert", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "color-name", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "combined-stream", + "version": "1.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "compare-versions", + "version": "6.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "confbox", + "version": "0.1.8", + "license": "BSD-3-Clause AND MIT", + "flagged": false + }, + { + "name": "confbox", + "version": "0.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "convert-source-map", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "coverage", + "version": "7.15.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "crelt", + "version": "1.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "cross-spawn", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "css.escape", + "version": "1.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "cssstyle", + "version": "4.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "csstype", + "version": "3.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "data-urls", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "de-indent", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "debug", + "version": "4.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "decimal.js", + "version": "10.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "deep-eql", + "version": "5.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "default-browser", + "version": "5.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "default-browser-id", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "define-lazy-prop", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "delayed-stream", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "dequal", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "diff", + "version": "8.0.4", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "doctrine", + "version": "3.0.0", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "dom-accessibility-api", + "version": "0.5.16", + "license": "MIT", + "flagged": false + }, + { + "name": "dom-accessibility-api", + "version": "0.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "dunder-proto", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "eastasianwidth", + "version": "0.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "electron-to-chromium", + "version": "1.5.389", + "license": "ISC", + "flagged": false + }, + { + "name": "emoji-regex", + "version": "8.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "emoji-regex", + "version": "9.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "empathic", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "entities", + "version": "4.5.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "entities", + "version": "6.0.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "entities", + "version": "7.0.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "es-define-property", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "es-errors", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-module-lexer", + "version": "1.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-object-atoms", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "es-set-tostringtag", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "esbuild", + "version": "0.25.12", + "license": "MIT", + "flagged": false + }, + { + "name": "escalade", + "version": "3.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "escape-string-regexp", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "esprima", + "version": "4.0.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "estree-walker", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "estree-walker", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "esutils", + "version": "2.0.3", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "et-xmlfile", + "version": "2.0.0", + "license": "0BSD AND BSD-3-Clause AND MIT AND Python-2.0", + "flagged": false + }, + { + "name": "expect-type", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "exsolve", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-deep-equal", + "version": "3.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-uri", + "version": "3.1.5", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "fdir", + "version": "6.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "foreground-child", + "version": "3.3.1", + "license": "ISC", + "flagged": false + }, + { + "name": "form-data", + "version": "4.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "fs-extra", + "version": "11.3.6", + "license": "MIT", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "function-bind", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "gensync", + "version": "1.0.0-beta.2", + "license": "MIT", + "flagged": false + }, + { + "name": "get-intrinsic", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "get-proto", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "glob", + "version": "10.5.0", + "license": "ISC", + "flagged": false + }, + { + "name": "glob", + "version": "13.0.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "gopd", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "graceful-fs", + "version": "4.2.11", + "license": "ISC", + "flagged": false + }, + { + "name": "has-flag", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-symbols", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-tostringtag", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "hasown", + "version": "2.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "he", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "html-encoding-sniffer", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "html-escaper", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "http-proxy-agent", + "version": "7.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "https-proxy-agent", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "iconv-lite", + "version": "0.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "import-lazy", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "indent-string", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-core-module", + "version": "2.16.2", + "license": "MIT", + "flagged": false + }, + { + "name": "is-docker", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-fullwidth-code-point", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-inside-container", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-potential-custom-element-name", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-wsl", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "isexe", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "isomorphic.js", + "version": "0.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "istanbul-lib-coverage", + "version": "3.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-report", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-source-maps", + "version": "5.0.6", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-reports", + "version": "3.2.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "jackspeak", + "version": "3.4.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "jju", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "10.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "9.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsdom", + "version": "25.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsesc", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "json-schema-traverse", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "json5", + "version": "2.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonc-parser", + "version": "3.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonfile", + "version": "6.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "kolorist", + "version": "1.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lib0", + "version": "0.2.117", + "license": "MIT", + "flagged": false + }, + { + "name": "linkify-it", + "version": "5.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "linkifyjs", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "local-pkg", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "loose-envify", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "loupe", + "version": "3.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "lru-cache", + "version": "10.4.3", + "license": "ISC", + "flagged": false + }, + { + "name": "lru-cache", + "version": "11.5.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "lru-cache", + "version": "5.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "lxml", + "version": "6.1.0", + "license": "BSD-3-Clause AND GPL-1.0-or-later", + "flagged": true + }, + { + "name": "lz-string", + "version": "1.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "magic-string", + "version": "0.30.21", + "license": "MIT", + "flagged": false + }, + { + "name": "magicast", + "version": "0.3.5", + "license": "MIT", + "flagged": false + }, + { + "name": "make-dir", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "markdown-it", + "version": "14.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "marked", + "version": "15.0.12", + "license": "BSD-3-Clause AND MIT", + "flagged": false + }, + { + "name": "math-intrinsics", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mdurl", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mime-db", + "version": "1.52.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mime-types", + "version": "2.1.35", + "license": "MIT", + "flagged": false + }, + { + "name": "min-indent", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "minimatch", + "version": "10.2.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "minimatch", + "version": "10.2.5", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "minimist", + "version": "1.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "minipass", + "version": "7.1.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "mlly", + "version": "1.8.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ms", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "muggle-string", + "version": "0.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "nanoid", + "version": "3.3.18", + "license": "MIT", + "flagged": false + }, + { + "name": "node-releases", + "version": "2.0.51", + "license": "MIT", + "flagged": false + }, + { + "name": "nwsapi", + "version": "2.2.24", + "license": "MIT", + "flagged": false + }, + { + "name": "open", + "version": "10.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "openpyxl", + "version": "3.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "openpyxl", + "version": ">= 3.1.5,< 4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "orderedmap", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "oxc-parser", + "version": "0.127.0", + "license": "MIT", + "flagged": false + }, + { + "name": "oxc-resolver", + "version": "11.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "package-json-from-dist", + "version": "1.0.1", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "packaging", + "version": "25.0", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "parse5", + "version": "7.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "path-browserify", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-key", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-parse", + "version": "1.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "path-scurry", + "version": "1.11.1", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "path-scurry", + "version": "2.0.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "pathe", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pathval", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "picocolors", + "version": "1.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "picomatch", + "version": "4.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "pillow", + "version": "12.3.0", + "license": "MIT-CMU", + "flagged": false + }, + { + "name": "pkg-types", + "version": "1.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pkg-types", + "version": "2.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "playwright", + "version": "1.62.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "playwright-core", + "version": "1.62.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pnpm/action-setup", + "version": "0977fd99725f1db4007ccb2928dbb4e90d06cc86", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "postcss", + "version": "8.5.25", + "license": "MIT", + "flagged": false + }, + { + "name": "pretty-format", + "version": "27.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-changeset", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-collab", + "version": "1.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-commands", + "version": "1.7.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-dropcursor", + "version": "1.8.3", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-gapcursor", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-history", + "version": "1.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-inputrules", + "version": "1.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-keymap", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-markdown", + "version": "1.13.5", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-menu", + "version": "1.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-model", + "version": "1.25.11", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-schema-basic", + "version": "1.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-schema-list", + "version": "1.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-state", + "version": "1.4.4", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-tables", + "version": "1.8.5", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-trailing-node", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-transform", + "version": "1.12.0", + "license": "MIT", + "flagged": false + }, + { + "name": "prosemirror-view", + "version": "1.42.1", + "license": "MIT", + "flagged": false + }, + { + "name": "punycode", + "version": "2.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "punycode.js", + "version": "2.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pypa/gh-action-pypi-publish", + "version": "dc37677b2e1c63e2034f94d8a5b11f265b73ba33", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "9.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "python-docx", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "python-docx", + "version": ">= 1.2.0,< 2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "python-pptx", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "python-pptx", + "version": ">= 1.0.2,< 2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "quansync", + "version": "0.2.11", + "license": "MIT", + "flagged": false + }, + { + "name": "react", + "version": "18.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "react-docgen", + "version": "8.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "react-docgen-typescript", + "version": "2.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "react-dom", + "version": "18.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "react-is", + "version": "17.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "react-refresh", + "version": "0.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "recast", + "version": "0.23.21", + "license": "MIT", + "flagged": false + }, + { + "name": "redent", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "require-from-string", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "resolve", + "version": "1.22.12", + "license": "MIT", + "flagged": false + }, + { + "name": "rollup", + "version": "4.62.2", + "license": "MIT", + "flagged": false + }, + { + "name": "rope-sequence", + "version": "1.3.4", + "license": "MIT", + "flagged": false + }, + { + "name": "rrweb-cssom", + "version": "0.7.1", + "license": "MIT", + "flagged": false + }, + { + "name": "rrweb-cssom", + "version": "0.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "run-applescript", + "version": "7.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "safer-buffer", + "version": "2.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "saxes", + "version": "6.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "scheduler", + "version": "0.23.2", + "license": "MIT", + "flagged": false + }, + { + "name": "semver", + "version": "6.3.1", + "license": "ISC", + "flagged": false + }, + { + "name": "semver", + "version": "7.7.4", + "license": "ISC", + "flagged": false + }, + { + "name": "semver", + "version": "7.8.5", + "license": "ISC", + "flagged": false + }, + { + "name": "setuptools", + "version": "83.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shebang-command", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shebang-regex", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "siginfo", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "signal-exit", + "version": "4.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "sigstore/cosign-installer", + "version": "6f9f17788090df1f26f669e9d70d6ae9567deba6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "source-map", + "version": "0.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "source-map-js", + "version": "1.2.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "sprintf-js", + "version": "1.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "stackback", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "std-env", + "version": "3.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "storybook", + "version": "10.5.8", + "license": "MIT", + "flagged": false + }, + { + "name": "string-argv", + "version": "0.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "string-width", + "version": "4.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "string-width", + "version": "5.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-ansi", + "version": "6.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-ansi", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-bom", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-indent", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-indent", + "version": "4.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-literal", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "8.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-preserve-symlinks-flag", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "symbol-tree", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "test-exclude", + "version": "7.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "tiny-invariant", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tinybench", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyexec", + "version": "0.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyglobby", + "version": "0.2.17", + "license": "MIT", + "flagged": false + }, + { + "name": "tinypool", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyrainbow", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyspy", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tippy.js", + "version": "6.3.7", + "license": "MIT", + "flagged": false + }, + { + "name": "tldts", + "version": "6.1.86", + "license": "MIT", + "flagged": false + }, + { + "name": "tldts-core", + "version": "6.1.86", + "license": "MIT", + "flagged": false + }, + { + "name": "tough-cookie", + "version": "5.1.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "tr46", + "version": "5.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ts-dedent", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tsconfig-paths", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tslib", + "version": "2.8.1", + "license": "0BSD", + "flagged": false + }, + { + "name": "turndown", + "version": "7.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "turndown-plugin-gfm", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "typescript", + "version": "5.9.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "uc.micro", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ufo", + "version": "1.6.4", + "license": "MIT", + "flagged": false + }, + { + "name": "undici-types", + "version": "6.21.0", + "license": "MIT", + "flagged": false + }, + { + "name": "universalify", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "unplugin", + "version": "2.3.11", + "license": "MIT", + "flagged": false + }, + { + "name": "update-browserslist-db", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "use-sync-external-store", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "vite", + "version": "6.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "vite-node", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "vite-plugin-dts", + "version": "4.5.4", + "license": "MIT", + "flagged": false + }, + { + "name": "vitest", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "vscode-uri", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "w3c-keyname", + "version": "2.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "w3c-xmlserializer", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "webidl-conversions", + "version": "7.0.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "webpack-virtual-modules", + "version": "0.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-encoding", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-mimetype", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-url", + "version": "14.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wheel", + "version": "0.47.0", + "license": "MIT", + "flagged": false + }, + { + "name": "which", + "version": "2.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "why-is-node-running", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wrap-ansi", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wrap-ansi", + "version": "8.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ws", + "version": "8.21.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ws", + "version": "8.21.3", + "license": "MIT", + "flagged": false + }, + { + "name": "wsl-utils", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "xlsxwriter", + "version": "3.2.9", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "xml-name-validator", + "version": "5.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "xmlchars", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "y-prosemirror", + "version": "1.3.7", + "license": "MIT", + "flagged": false + }, + { + "name": "y-protocols", + "version": "1.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "yallist", + "version": "3.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "yjs", + "version": "13.6.31", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/IRT-bibliography-set", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/j-planner", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/kaefa", + "error": null, + "component_count": 5, + "components": [ + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "r-lib/actions/check-r-package", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "r-lib/actions/setup-pandoc", + "version": "d3c5be51b12e724e68f33216ca3c148b66d5f0b6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "r-lib/actions/setup-r", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "r-lib/actions/setup-r-dependencies", + "version": "6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590", + "license": "NOASSERTION", + "flagged": true + } + ] + }, + { + "repo": "ContextualWisdomLab/keyverse", + "error": null, + "component_count": 52, + "components": [ + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "annotated-doc", + "version": "0.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-types", + "version": "0.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "astral-sh/setup-uv", + "version": "20cfd1bf945f4377ade1205e4dbc17946fc9a30d", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "atheris", + "version": "3.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "attrs", + "version": "26.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.7.22", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cffi", + "version": "2.1.1", + "license": "MIT-0", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "coverage", + "version": "7.15.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "cryptography", + "version": "50.0.0", + "license": "Apache-2.0 OR BSD-3-Clause", + "flagged": false + }, + { + "name": "cwl-idp-account-unification", + "version": "0.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "fastapi", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "fastapi", + "version": "0.141.1", + "license": "MIT", + "flagged": false + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpcore2", + "version": "2.9.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx2", + "version": "2.9.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "interrogate", + "version": "1.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "py", + "version": "1.11.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pydantic", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pydantic", + "version": "2.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-core", + "version": "2.46.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pytest", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pyyaml", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pyyaml", + "version": "6.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "ruff", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "ruff", + "version": "0.16.3", + "license": "MIT", + "flagged": false + }, + { + "name": "setuptools", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "setuptools", + "version": "84.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "starlette", + "version": "1.3.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "step-security/harden-runner", + "version": "05e31511f85b41b11d1cf0ef85d0992719546e2c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "tabulate", + "version": "0.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "truststore", + "version": "0.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.4", + "license": "MIT", + "flagged": false + }, + { + "name": "uvicorn", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "uvicorn", + "version": "0.52.3", + "license": "BSD-3-Clause", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/learning-content-studio", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/learning-interoperability-contracts", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/learning-management-platform", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/learning-record-store", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/life-os", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/LineageWeave", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/linux-cluster-ops", + "error": null, + "component_count": 5, + "components": [ + { + "name": "actions/attest-build-provenance", + "version": "a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "ece7cb06caefa5fff74198d8649806c4678c61a1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "atheris", + "version": "3.0.0", + "license": "Apache-2.0", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/litellm-patched-proxy", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/macos_utility_packs", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/metering-billing-platform", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/mhtml-etl-gateway", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/mightyETL", + "error": null, + "component_count": 54, + "components": [ + { + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/dependency-review-action", + "version": "a1d282b36b6f3519aa1f3fc636f609c47dddb294", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-java", + "version": "1bcf9fb12cf4aa7d266a90ae39939e61372fe520", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "com.fasterxml.jackson.core:jackson-databind", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "com.fasterxml.jackson:jackson-bom", + "version": "2.21.5", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "com.h2database:h2", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/analyze", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/autobuild", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/init", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/upload-sarif", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "io.debezium:debezium-api", + "version": "3.4.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "io.debezium:debezium-connector-postgres", + "version": "3.4.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "io.debezium:debezium-embedded", + "version": "3.4.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "io.jsonwebtoken:jjwt", + "version": "0.13.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "io.micrometer:micrometer-tracing-bridge-brave", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "io.zipkin.reporter2:zipkin-reporter-brave", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.apache.maven.plugins:maven-compiler-plugin", + "version": "3.13.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.apache.maven.plugins:maven-dependency-plugin", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.apache.maven.plugins:maven-dependency-plugin", + "version": "3.9.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.apache.maven.plugins:maven-surefire-plugin", + "version": "3.5.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.flywaydb:flyway-core", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.flywaydb:flyway-database-postgresql", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.jacoco:jacoco-maven-plugin", + "version": "0.8.15", + "license": "EPL-2.0 OR (Apache-2.0 AND EPL-2.0)", + "flagged": true + }, + { + "name": "org.junit.jupiter:junit-jupiter-api", + "version": "5.12.2", + "license": "EPL-2.0", + "flagged": true + }, + { + "name": "org.junit.jupiter:junit-jupiter-engine", + "version": "5.12.2", + "license": "EPL-2.0", + "flagged": true + }, + { + "name": "org.junit.platform:junit-platform-commons", + "version": "1.12.2", + "license": "EPL-2.0", + "flagged": true + }, + { + "name": "org.junit.platform:junit-platform-engine", + "version": "1.12.2", + "license": "EPL-2.0", + "flagged": true + }, + { + "name": "org.junit.platform:junit-platform-launcher", + "version": "1.12.2", + "license": "EPL-2.0", + "flagged": true + }, + { + "name": "org.mockito:mockito-core", + "version": "5.21.0", + "license": "MIT", + "flagged": false + }, + { + "name": "org.mockito:mockito-junit-jupiter", + "version": "5.21.0", + "license": "MIT", + "flagged": false + }, + { + "name": "org.postgresql:postgresql", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.postgresql:postgresql", + "version": "42.7.12", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "org.springframework.boot:spring-boot-configuration-processor", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-dependencies", + "version": "3.5.16", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.springframework.boot:spring-boot-maven-plugin", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-maven-plugin", + "version": "3.5.16", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.springframework.boot:spring-boot-starter-actuator", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-starter-aop", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-starter-data-jpa", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-starter-security", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-starter-test", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.boot:spring-boot-starter-web", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.cloud:spring-cloud-config-server", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.cloud:spring-cloud-dependencies", + "version": "2025.0.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.springframework.cloud:spring-cloud-starter-gateway", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.cloud:spring-cloud-starter-netflix-eureka-client", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.cloud:spring-cloud-starter-netflix-eureka-server", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.kafka:spring-kafka", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.kafka:spring-kafka", + "version": "3.3.16", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.springframework.retry:spring-retry", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "org.springframework.retry:spring-retry", + "version": "2.0.13", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "org.springframework.security:spring-security-test", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "ossf/scorecard-action", + "version": "4eaacf0543bb3f2c246792bd56e8cdeffafb205a", + "license": "NOASSERTION", + "flagged": true + } + ] + }, + { + "repo": "ContextualWisdomLab/naruon", + "error": null, + "component_count": 794, + "components": [ + { + "name": "@alloc/quick-lru", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@asamuzakjp/css-color", + "version": "6.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@asamuzakjp/dom-selector", + "version": "8.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/code-frame", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/compat-data", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/core", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/generator", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-compilation-targets", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-globals", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-imports", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-module-transforms", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-string-parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-identifier", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-option", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helpers", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/runtime", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/template", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/traverse", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/types", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@base-ui/react", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@base-ui/utils", + "version": "0.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@bcoe/v8-coverage", + "version": "1.0.2", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "@bramus/specificity", + "version": "2.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/color-helpers", + "version": "6.1.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "@csstools/css-calc", + "version": "3.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-color-parser", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-parser-algorithms", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-syntax-patches-for-csstree", + "version": "1.1.7", + "license": "MIT-0", + "flagged": false + }, + { + "name": "@csstools/css-tokenizer", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@egjs/hammerjs", + "version": "2.0.17", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "1.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "1.11.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.11.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.11.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@eslint-community/eslint-utils", + "version": "4.10.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@eslint-community/regexpp", + "version": "4.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@eslint/config-array", + "version": "0.21.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@eslint/config-helpers", + "version": "0.4.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@eslint/core", + "version": "0.17.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@eslint/eslintrc", + "version": "3.3.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@eslint/js", + "version": "9.39.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@eslint/object-schema", + "version": "2.1.7", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@eslint/plugin-kit", + "version": "0.4.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@exodus/bytes", + "version": "1.15.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@floating-ui/core", + "version": "1.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@floating-ui/dom", + "version": "1.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@floating-ui/react-dom", + "version": "2.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@floating-ui/utils", + "version": "0.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@humanfs/core", + "version": "0.19.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@humanfs/node", + "version": "0.16.8", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@humanfs/types", + "version": "0.15.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@humanwhocodes/module-importer", + "version": "1.0.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@humanwhocodes/retry", + "version": "0.4.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/colour", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@img/sharp-darwin-arm64", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-darwin-x64", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-freebsd-wasm32", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-libvips-darwin-arm64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-darwin-x64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-arm", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-arm64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-ppc64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-riscv64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-s390x", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-x64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linuxmusl-arm64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linuxmusl-x64", + "version": "1.3.0", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-linux-arm", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-arm64", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-ppc64", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-riscv64", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-s390x", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-x64", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linuxmusl-arm64", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linuxmusl-x64", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-wasm32", + "version": "0.35.0", + "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT", + "flagged": true + }, + { + "name": "@img/sharp-webcontainers-wasm32", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-win32-arm64", + "version": "0.35.0", + "license": "Apache-2.0 AND LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-win32-ia32", + "version": "0.35.0", + "license": "Apache-2.0 AND LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-win32-x64", + "version": "0.35.0", + "license": "Apache-2.0 AND LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@jridgewell/gen-mapping", + "version": "0.3.13", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/remapping", + "version": "2.3.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/resolve-uri", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/sourcemap-codec", + "version": "1.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/wasm-runtime", + "version": "1.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/env", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/eslint-plugin-next", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/swc-darwin-arm64", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/swc-darwin-x64", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/swc-linux-arm64-gnu", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/swc-linux-arm64-musl", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/swc-linux-x64-gnu", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/swc-linux-x64-musl", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/swc-win32-arm64-msvc", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@next/swc-win32-x64-msvc", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "@nodelib/fs.scandir", + "version": "2.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@nodelib/fs.stat", + "version": "2.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@nodelib/fs.walk", + "version": "1.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@nolyfill/is-core-module", + "version": "1.0.39", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-project/types", + "version": "0.139.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@playwright/test", + "version": "1.62.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@radix-ui/primitive", + "version": "1.1.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-collection", + "version": "1.1.15", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-compose-refs", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-context", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-direction", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-id", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-presence", + "version": "1.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-primitive", + "version": "2.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-roving-focus", + "version": "1.1.19", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-slot", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-tabs", + "version": "1.1.21", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-callback-ref", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-controllable-state", + "version": "1.2.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-effect-event", + "version": "0.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-is-hydrated", + "version": "0.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@radix-ui/react-use-layout-effect", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-android-arm64", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-arm64", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-x64", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-freebsd-x64", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm-gnueabihf", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-gnu", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-musl", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-ppc64-gnu", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-s390x-gnu", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-gnu", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-musl", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-openharmony-arm64", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-wasm32-wasi", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-arm64-msvc", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-x64-msvc", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/pluginutils", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rtsao/scc", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@standard-schema/spec", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@swc/helpers", + "version": "0.5.15", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@tailwindcss/node", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-android-arm64", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-darwin-arm64", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-darwin-x64", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-freebsd-x64", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-arm-gnueabihf", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-arm64-gnu", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-arm64-musl", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-x64-gnu", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-linux-x64-musl", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-wasm32-wasi", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-win32-arm64-msvc", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/oxide-win32-x64-msvc", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tailwindcss/postcss", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@tybys/wasm-util", + "version": "0.10.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/chai", + "version": "5.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/deep-eql", + "version": "4.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/estree", + "version": "1.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/hammerjs", + "version": "2.0.46", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/json-schema", + "version": "7.0.15", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/json5", + "version": "0.0.29", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/node", + "version": "26.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react", + "version": "19.2.17", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react-dom", + "version": "19.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/eslint-plugin", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/parser", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/project-service", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/scope-manager", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/tsconfig-utils", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/type-utils", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/types", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/typescript-estree", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/utils", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@typescript-eslint/visitor-keys", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-android-arm-eabi", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-android-arm64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-darwin-arm64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-darwin-x64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-freebsd-x64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-arm-gnueabihf", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-arm-musleabihf", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-arm64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-arm64-musl", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-loong64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-loong64-musl", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-ppc64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-riscv64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-riscv64-musl", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-s390x-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-x64-gnu", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-linux-x64-musl", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-openharmony-arm64", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-wasm32-wasi", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-win32-arm64-msvc", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-win32-ia32-msvc", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@unrs/resolver-binding-win32-x64-msvc", + "version": "1.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/coverage-v8", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/expect", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/mocker", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/pretty-format", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/runner", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/snapshot", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/spy", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/utils", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn", + "version": "8.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "acorn-jsx", + "version": "5.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "actions/cache", + "version": "55cc8345863c7cc4c66a329aec7e433d2d1c52a9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/dependency-review-action", + "version": "a1d282b36b6f3519aa1f3fc636f609c47dddb294", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "820762786026740c76f36085b0efc47a31fe5020", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0", + "flagged": true + }, + { + "name": "aiohttp", + "version": "3.14.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "aioimaplib", + "version": "2.0.1", + "license": "GPL-3.0 AND GPL-3.0-only AND GPL-3.0-or-later", + "flagged": true + }, + { + "name": "aiosignal", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "aiosmtplib", + "version": "5.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ajv", + "version": "6.15.0", + "license": "MIT", + "flagged": false + }, + { + "name": "alembic", + "version": "1.18.5", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-doc", + "version": "0.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-types", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "4.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.1", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "argparse", + "version": "2.0.1", + "license": "Python-2.0", + "flagged": false + }, + { + "name": "aria-query", + "version": "5.3.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "array-buffer-byte-length", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "array-includes", + "version": "3.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "array.prototype.findlast", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "array.prototype.findlastindex", + "version": "1.2.6", + "license": "MIT", + "flagged": false + }, + { + "name": "array.prototype.flat", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "array.prototype.flatmap", + "version": "1.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "array.prototype.tosorted", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "arraybuffer.prototype.slice", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "asgiref", + "version": "3.11.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "assertion-error", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-types-flow", + "version": "0.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-v8-to-istanbul", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "async-function", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "asyncpg", + "version": "0.31.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "attrs", + "version": "26.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "available-typed-arrays", + "version": "1.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "axe-core", + "version": "4.12.1", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "axobject-query", + "version": "4.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "backoff", + "version": "2.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "balanced-match", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "bandit", + "version": "1.9.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "baseline-browser-mapping", + "version": "2.11.5", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "bidi-js", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "brace-expansion", + "version": "5.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "braces", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "browserslist", + "version": "4.28.7", + "license": "MIT", + "flagged": false + }, + { + "name": "caido-sdk-client", + "version": "0.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "caido-server-auth", + "version": "0.1.2", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "call-bind", + "version": "1.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "call-bind-apply-helpers", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "call-bound", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "callsites", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "caniuse-lite", + "version": "1.0.30001806", + "license": "CC-BY-4.0", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cffi", + "version": "2.0.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "cffi", + "version": "2.1.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "chai", + "version": "6.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "chalk", + "version": "4.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "charset-normalizer", + "version": "3.4.7", + "license": "MIT", + "flagged": false + }, + { + "name": "charset-normalizer", + "version": "3.4.9", + "license": "MIT", + "flagged": false + }, + { + "name": "class-variance-authority", + "version": "0.7.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "client-only", + "version": "0.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "clsx", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "color-convert", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "color-name", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "component-emitter", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "convert-source-map", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "coverage", + "version": "7.15.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "cross-spawn", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "cryptography", + "version": "49.0.0", + "license": "BSD-3-Clause OR Apache-2.0", + "flagged": false + }, + { + "name": "cryptography", + "version": "50.0.0", + "license": "Apache-2.0 OR BSD-3-Clause", + "flagged": false + }, + { + "name": "css-tree", + "version": "3.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "csstype", + "version": "3.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "cvss", + "version": "3.6", + "license": "LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "damerau-levenshtein", + "version": "1.0.8", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "data-urls", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "data-view-buffer", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "data-view-byte-length", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "data-view-byte-offset", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "debug", + "version": "3.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "debug", + "version": "4.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "decimal.js", + "version": "10.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "deep-is", + "version": "0.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "define-data-property", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "define-properties", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "defusedxml", + "version": "0.7.1", + "license": "PSF-2.0", + "flagged": false + }, + { + "name": "detect-libc", + "version": "2.1.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "distro", + "version": "1.9.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "dnspython", + "version": "2.8.0", + "license": "ISC AND MPL-2.0", + "flagged": true + }, + { + "name": "docker", + "version": "7.2.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "docker/build-push-action", + "version": "53b7df96c91f9c12dcc8a07bcb9ccacbed38856a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "docker/login-action", + "version": "dbcb813823bdd20940b903addbd779551569679f", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "docker/metadata-action", + "version": "dc802804100637a589fabce1cb79ff13a1411302", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "docker/setup-buildx-action", + "version": "bb05f3f5519dd87d3ba754cc423b652a5edd6d2c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "docker/setup-qemu-action", + "version": "96fe6ef7f33517b61c61be40b68a1882f3264fb8", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "docstring-parser", + "version": "0.18.0", + "license": "MIT", + "flagged": false + }, + { + "name": "doctrine", + "version": "2.1.0", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "dunder-proto", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "electron-to-chromium", + "version": "1.5.396", + "license": "ISC", + "flagged": false + }, + { + "name": "email-validator", + "version": "2.3.0", + "license": "CC0-1.0 AND Unlicense", + "flagged": false + }, + { + "name": "emoji-regex", + "version": "9.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "enhanced-resolve", + "version": "5.24.3", + "license": "MIT", + "flagged": false + }, + { + "name": "entities", + "version": "8.0.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "es-abstract", + "version": "1.24.2", + "license": "MIT", + "flagged": false + }, + { + "name": "es-abstract-get", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-define-property", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "es-errors", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-iterator-helpers", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-module-lexer", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-object-atoms", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "es-set-tostringtag", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-shim-unscopables", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "es-to-primitive", + "version": "1.3.4", + "license": "MIT", + "flagged": false + }, + { + "name": "escalade", + "version": "3.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "escape-string-regexp", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint", + "version": "9.39.5", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint-config-next", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint-import-resolver-node", + "version": "0.3.10", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint-import-resolver-typescript", + "version": "3.10.1", + "license": "ISC", + "flagged": false + }, + { + "name": "eslint-module-utils", + "version": "2.14.0", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint-plugin-import", + "version": "2.32.0", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint-plugin-jsx-a11y", + "version": "6.10.2", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint-plugin-react", + "version": "7.37.5", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint-plugin-react-hooks", + "version": "7.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "eslint-scope", + "version": "8.4.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "eslint-visitor-keys", + "version": "3.4.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "eslint-visitor-keys", + "version": "4.2.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "eslint-visitor-keys", + "version": "5.0.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "espree", + "version": "10.4.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "esquery", + "version": "1.7.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "esrecurse", + "version": "4.3.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "estraverse", + "version": "5.3.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "estree-walker", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "esutils", + "version": "2.0.3", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "expect-type", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fast-check", + "version": "4.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-deep-equal", + "version": "3.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-glob", + "version": "3.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-json-stable-stringify", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-levenshtein", + "version": "2.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "fastapi", + "version": "0.138.2", + "license": "MIT", + "flagged": false + }, + { + "name": "fastapi", + "version": "0.139.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fastq", + "version": "1.20.1", + "license": "ISC", + "flagged": false + }, + { + "name": "fastuuid", + "version": "0.14.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "fdir", + "version": "6.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "file-entry-cache", + "version": "8.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "filelock", + "version": "3.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "fill-range", + "version": "7.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "find-up", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "flat-cache", + "version": "4.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "flatted", + "version": "3.4.3", + "license": "ISC", + "flagged": false + }, + { + "name": "for-each", + "version": "0.3.5", + "license": "MIT", + "flagged": false + }, + { + "name": "frozenlist", + "version": "1.8.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "fsspec", + "version": "2026.6.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "function-bind", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "function.prototype.name", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "functions-have-names", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "genai-prices", + "version": "0.0.71", + "license": "MIT", + "flagged": false + }, + { + "name": "generator-function", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "gensync", + "version": "1.0.0-beta.2", + "license": "MIT", + "flagged": false + }, + { + "name": "get-intrinsic", + "version": "1.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "get-proto", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "get-symbol-description", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "get-tsconfig", + "version": "4.14.0", + "license": "MIT", + "flagged": false + }, + { + "name": "github/codeql-action/upload-sarif", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "glob-parent", + "version": "5.1.2", + "license": "ISC", + "flagged": false + }, + { + "name": "glob-parent", + "version": "6.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "globals", + "version": "14.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "globals", + "version": "16.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "globalthis", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "google-api-core", + "version": "2.31.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-api-python-client", + "version": "2.198.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-auth", + "version": "2.55.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-auth", + "version": "2.55.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-auth-httplib2", + "version": "0.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-auth-oauthlib", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-aiplatform", + "version": "1.160.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-bigquery", + "version": "3.42.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-core", + "version": "2.6.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-resource-manager", + "version": "1.18.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-cloud-storage", + "version": "3.12.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-crc32c", + "version": "1.8.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-genai", + "version": "2.11.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "google-resumable-media", + "version": "2.10.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "googleapis-common-protos", + "version": "1.75.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "gopd", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "gql", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "graceful-fs", + "version": "4.2.11", + "license": "ISC", + "flagged": false + }, + { + "name": "graphql-core", + "version": "3.2.11", + "license": "MIT", + "flagged": false + }, + { + "name": "greenlet", + "version": "3.5.3", + "license": "MIT AND PSF-2.0", + "flagged": false + }, + { + "name": "griffelib", + "version": "2.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "grpc-google-iam-v1", + "version": "0.14.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "grpcio", + "version": "1.81.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0", + "flagged": true + }, + { + "name": "grpcio", + "version": "1.82.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0", + "flagged": true + }, + { + "name": "grpcio-status", + "version": "1.81.1", + "license": "Apache-2.0 AND BSD-3-Clause AND MPL-2.0", + "flagged": true + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-bigints", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-flag", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-property-descriptors", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "has-proto", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-symbols", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-tostringtag", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "hasown", + "version": "2.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "hermes-estree", + "version": "0.25.1", + "license": "MIT", + "flagged": false + }, + { + "name": "hermes-parser", + "version": "0.25.1", + "license": "MIT", + "flagged": false + }, + { + "name": "hf-xet", + "version": "1.5.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "html-encoding-sniffer", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "html-escaper", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpcore2", + "version": "2.5.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httplib2", + "version": "0.32.0", + "license": "MIT", + "flagged": false + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx-sse", + "version": "0.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "httpx2", + "version": "2.5.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "huggingface-hub", + "version": "1.23.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "icalendar", + "version": "7.2.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "ignore", + "version": "5.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ignore", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "import-fresh", + "version": "3.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "importlib-metadata", + "version": "8.9.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "imurmurhash", + "version": "0.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "internal-slot", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-array-buffer", + "version": "3.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "is-async-function", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-bigint", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-boolean-object", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "is-bun-module", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-callable", + "version": "1.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "is-core-module", + "version": "2.16.2", + "license": "MIT", + "flagged": false + }, + { + "name": "is-data-view", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "is-date-object", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-document.all", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-extglob", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-finalizationregistry", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-generator-function", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "is-glob", + "version": "4.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "is-map", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "is-negative-zero", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "is-number", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-number-object", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-potential-custom-element-name", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-regex", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-set", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "is-shared-array-buffer", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "is-string", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-symbol", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-typed-array", + "version": "1.1.15", + "license": "MIT", + "flagged": false + }, + { + "name": "is-weakmap", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "is-weakref", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "is-weakset", + "version": "2.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "isarray", + "version": "2.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "isexe", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "istanbul-lib-coverage", + "version": "3.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-report", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-reports", + "version": "3.2.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "iterator.prototype", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "jinja2", + "version": "3.1.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "jiter", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jiti", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "10.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-yaml", + "version": "4.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jschema-to-python", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "jsdom", + "version": "30.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsesc", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "json-buffer", + "version": "3.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "json-schema-traverse", + "version": "0.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "json-stable-stringify-without-jsonify", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "json5", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "json5", + "version": "2.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonpatch", + "version": "1.33", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "jsonpickle", + "version": "4.1.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "jsonpointer", + "version": "3.1.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "jsonschema", + "version": "4.26.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsonschema-specifications", + "version": "2025.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "jsx-ast-utils", + "version": "3.3.5", + "license": "MIT", + "flagged": false + }, + { + "name": "keycharm", + "version": "0.4.0", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "keyv", + "version": "4.5.4", + "license": "MIT", + "flagged": false + }, + { + "name": "langchain-core", + "version": "1.4.8", + "license": "MIT", + "flagged": false + }, + { + "name": "langchain-core", + "version": "1.4.9", + "license": "MIT", + "flagged": false + }, + { + "name": "langchain-protocol", + "version": "0.0.18", + "license": "MIT", + "flagged": false + }, + { + "name": "langchain-text-splitters", + "version": "1.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "langsmith", + "version": "0.10.1", + "license": "MIT", + "flagged": false + }, + { + "name": "langsmith", + "version": "0.10.2", + "license": "MIT", + "flagged": false + }, + { + "name": "langsmith", + "version": "0.9.4", + "license": "MIT", + "flagged": false + }, + { + "name": "language-subtag-registry", + "version": "0.3.23", + "license": "CC0-1.0", + "flagged": false + }, + { + "name": "language-tags", + "version": "1.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "levn", + "version": "0.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "lightningcss", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-android-arm64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-arm64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-x64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-freebsd-x64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-gnu", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-musl", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-gnu", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-musl", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-arm64-msvc", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-x64-msvc", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "linkify-it-py", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "litellm", + "version": "1.89.2", + "license": "MIT", + "flagged": false + }, + { + "name": "locate-path", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lodash.merge", + "version": "4.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "logfire-api", + "version": "4.37.0", + "license": "MIT", + "flagged": false + }, + { + "name": "loose-envify", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lru-cache", + "version": "11.5.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "lru-cache", + "version": "5.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "lucide-react", + "version": "1.27.0", + "license": "ISC", + "flagged": false + }, + { + "name": "magic-string", + "version": "0.30.21", + "license": "MIT", + "flagged": false + }, + { + "name": "magicast", + "version": "0.5.3", + "license": "MIT", + "flagged": false + }, + { + "name": "make-dir", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mako", + "version": "1.3.12", + "license": "MIT", + "flagged": false + }, + { + "name": "markdown-it-py", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "markupsafe", + "version": "3.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "math-intrinsics", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mcp", + "version": "1.28.1", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "mdit-py-plugins", + "version": "0.6.1", + "license": "MIT", + "flagged": false + }, + { + "name": "mdn-data", + "version": "2.27.1", + "license": "CC0-1.0", + "flagged": false + }, + { + "name": "mdurl", + "version": "0.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "merge2", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "micromatch", + "version": "4.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "minimatch", + "version": "10.2.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "minimatch", + "version": "3.1.5", + "license": "ISC", + "flagged": false + }, + { + "name": "minimist", + "version": "1.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "ms", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "multidict", + "version": "6.7.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "nanoid", + "version": "3.3.18", + "license": "MIT", + "flagged": false + }, + { + "name": "napi-postinstall", + "version": "0.3.4", + "license": "MIT", + "flagged": false + }, + { + "name": "naruon-backend", + "version": "0.14.4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "natural-compare", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "next", + "version": "16.2.12", + "license": "MIT", + "flagged": false + }, + { + "name": "node-exports-info", + "version": "1.6.2", + "license": "MIT", + "flagged": false + }, + { + "name": "node-releases", + "version": "2.0.51", + "license": "MIT", + "flagged": false + }, + { + "name": "numpy", + "version": "2.5.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "oauthlib", + "version": "3.3.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "object-assign", + "version": "4.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "object-inspect", + "version": "1.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "object-keys", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "object.assign", + "version": "4.1.7", + "license": "MIT", + "flagged": false + }, + { + "name": "object.entries", + "version": "1.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "object.fromentries", + "version": "2.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "object.groupby", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "object.values", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "obug", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "openai", + "version": "2.44.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "openai", + "version": "2.45.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "openai-agents", + "version": "0.14.6", + "license": "MIT", + "flagged": false + }, + { + "name": "opentelemetry-api", + "version": "1.43.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-exporter-otlp", + "version": "1.43.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-exporter-otlp-proto-common", + "version": "1.43.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-exporter-otlp-proto-grpc", + "version": "1.43.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-exporter-otlp-proto-http", + "version": "1.43.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-instrumentation", + "version": "0.64b0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-instrumentation-asgi", + "version": "0.64b0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-instrumentation-fastapi", + "version": "0.64b0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-proto", + "version": "1.43.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-sdk", + "version": "1.43.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-semantic-conventions", + "version": "0.64b0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-util-http", + "version": "0.64b0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "optionator", + "version": "0.9.4", + "license": "MIT", + "flagged": false + }, + { + "name": "orjson", + "version": "3.11.9", + "license": "Apache-2.0 AND MIT AND MPL-2.0", + "flagged": true + }, + { + "name": "own-keys", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "p-limit", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "p-locate", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "parent-module", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "parse5", + "version": "8.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-exists", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "path-key", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-parse", + "version": "1.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "pathe", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pbr", + "version": "7.0.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pgvector", + "version": "0.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "pgvector", + "version": "0.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "picocolors", + "version": "1.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "picomatch", + "version": "2.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "picomatch", + "version": "4.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "platformdirs", + "version": "4.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "playwright", + "version": "1.62.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "playwright-core", + "version": "1.62.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "possible-typed-array-names", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "postcss", + "version": "8.5.24", + "license": "MIT", + "flagged": false + }, + { + "name": "prelude-ls", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prometheus-client", + "version": "0.25.0", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "prometheus-fastapi-instrumentator", + "version": "8.0.2", + "license": "BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT", + "flagged": false + }, + { + "name": "prop-types", + "version": "15.8.1", + "license": "MIT", + "flagged": false + }, + { + "name": "propcache", + "version": "0.5.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "proto-plus", + "version": "1.28.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "proto-plus", + "version": "1.28.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "protobuf", + "version": "6.33.6", + "license": "BSD-3-Clause AND LicenseRef-scancode-protobuf", + "flagged": false + }, + { + "name": "protobuf", + "version": "7.35.1", + "license": "BSD-3-Clause AND LicenseRef-scancode-protobuf", + "flagged": false + }, + { + "name": "punycode", + "version": "2.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pure-rand", + "version": "8.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "pyasn1", + "version": "0.6.3", + "license": "BSD-2-Clause AND BSD-3-Clause AND MIT", + "flagged": false + }, + { + "name": "pyasn1", + "version": "0.6.4", + "license": "BSD-2-Clause AND BSD-3-Clause AND MIT", + "flagged": false + }, + { + "name": "pyasn1-modules", + "version": "0.4.2", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pydantic", + "version": "2.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-ai-slim", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-core", + "version": "2.46.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-graph", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-settings", + "version": "2.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pyjwt", + "version": "2.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pyparsing", + "version": "3.3.2", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-asyncio", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "python-dateutil", + "version": "2.9.0.post0", + "license": "Apache-2.0 AND BSD-3-Clause", + "flagged": false + }, + { + "name": "python-dotenv", + "version": "1.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "python-multipart", + "version": "0.0.32", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pyyaml", + "version": "6.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "queue-microtask", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "rankweave", + "version": "0.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "react", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react-dom", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react-is", + "version": "16.13.1", + "license": "MIT", + "flagged": false + }, + { + "name": "react-resizable-panels", + "version": "4.12.2", + "license": "MIT", + "flagged": false + }, + { + "name": "referencing", + "version": "0.37.0", + "license": "MIT", + "flagged": false + }, + { + "name": "reflect.getprototypeof", + "version": "1.0.10", + "license": "MIT", + "flagged": false + }, + { + "name": "regex", + "version": "2026.6.28", + "license": "CNRI-Python AND Apache-2.0", + "flagged": false + }, + { + "name": "regex", + "version": "2026.7.10", + "license": "CNRI-Python AND Apache-2.0", + "flagged": false + }, + { + "name": "regexp.prototype.flags", + "version": "1.5.4", + "license": "MIT", + "flagged": false + }, + { + "name": "requests", + "version": "2.34.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "requests-oauthlib", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "requests-toolbelt", + "version": "1.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "require-from-string", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "reselect", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "resolve", + "version": "2.0.0-next.7", + "license": "MIT", + "flagged": false + }, + { + "name": "resolve-from", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "resolve-pkg-maps", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "reusify", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rich", + "version": "15.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "rolldown", + "version": "1.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "rpds-py", + "version": "2026.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "ruff", + "version": "0.15.20", + "license": "MIT", + "flagged": false + }, + { + "name": "ruff", + "version": "0.15.21", + "license": "MIT", + "flagged": false + }, + { + "name": "run-parallel", + "version": "1.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "safe-array-concat", + "version": "1.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "safe-push-apply", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "safe-regex-test", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sarif-om", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "saxes", + "version": "6.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "scheduler", + "version": "0.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "semver", + "version": "6.3.1", + "license": "ISC", + "flagged": false + }, + { + "name": "semver", + "version": "7.8.5", + "license": "ISC", + "flagged": false + }, + { + "name": "set-function-length", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "set-function-name", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "set-proto", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "setuptools", + "version": "82.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "setuptools", + "version": "83.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sharp", + "version": "0.35.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "shebang-command", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shebang-regex", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "side-channel", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "side-channel-list", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "side-channel-map", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "side-channel-weakmap", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "siginfo", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "six", + "version": "1.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sniffio", + "version": "1.3.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "source-map-js", + "version": "1.2.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "sqlalchemy", + "version": "2.0.51", + "license": "MIT", + "flagged": false + }, + { + "name": "sse-starlette", + "version": "3.4.5", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "stable-hash", + "version": "0.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "stackback", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "starlette", + "version": "1.3.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "std-env", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "step-security/harden-runner", + "version": "bf7454d06d71f1098171f2acdf0cd4708d7b5920", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "stevedore", + "version": "5.9.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "stop-iteration-iterator", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "string.prototype.includes", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "string.prototype.matchall", + "version": "4.0.12", + "license": "MIT", + "flagged": false + }, + { + "name": "string.prototype.repeat", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "string.prototype.trim", + "version": "1.2.11", + "license": "MIT", + "flagged": false + }, + { + "name": "string.prototype.trimend", + "version": "1.0.10", + "license": "MIT", + "flagged": false + }, + { + "name": "string.prototype.trimstart", + "version": "1.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-bom", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-json-comments", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "strix-agent", + "version": "1.0.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "styled-jsx", + "version": "5.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-preserve-symlinks-flag", + "version": "1.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "symbol-tree", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tailwind-merge", + "version": "3.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tailwindcss", + "version": "4.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tapable", + "version": "2.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tenacity", + "version": "9.1.4", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "textual", + "version": "8.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "tiktoken", + "version": "0.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinybench", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyexec", + "version": "1.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyglobby", + "version": "0.2.17", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyrainbow", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tldts", + "version": "7.4.9", + "license": "MIT", + "flagged": false + }, + { + "name": "tldts-core", + "version": "7.4.9", + "license": "MIT", + "flagged": false + }, + { + "name": "to-regex-range", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tokenizers", + "version": "0.23.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tough-cookie", + "version": "6.0.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "tqdm", + "version": "4.68.3", + "license": "MIT AND MPL-2.0", + "flagged": true + }, + { + "name": "tqdm", + "version": "4.68.4", + "license": "MIT AND MPL-2.0", + "flagged": true + }, + { + "name": "tr46", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "truststore", + "version": "0.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "ts-api-utils", + "version": "2.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tsconfig-paths", + "version": "3.15.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tslib", + "version": "2.8.1", + "license": "0BSD", + "flagged": false + }, + { + "name": "tw-animate-css", + "version": "1.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "type-check", + "version": "0.4.0", + "license": "MIT", + "flagged": false + }, + { + "name": "typed-array-buffer", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "typed-array-byte-length", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "typed-array-byte-offset", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "typed-array-length", + "version": "1.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "types-requests", + "version": "2.33.0.20260712", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "typescript", + "version": "6.0.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "typescript-eslint", + "version": "8.65.0", + "license": "MIT", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "tzdata", + "version": "2026.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tzdata", + "version": "2026.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "uc-micro-py", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "unbox-primitive", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "undici", + "version": "8.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "undici-types", + "version": "8.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "unrs-resolver", + "version": "1.12.2", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "update-browserslist-db", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "uri-js", + "version": "4.4.1", + "license": "BSD-2-Clause AND BSD-2-Clause-Views", + "flagged": false + }, + { + "name": "uritemplate", + "version": "4.2.0", + "license": "Apache-2.0 OR BSD-3-Clause OR (Apache-2.0 AND BSD-3-Clause)", + "flagged": false + }, + { + "name": "urllib3", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "use-sync-external-store", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "uuid", + "version": "14.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "uuid-utils", + "version": "0.16.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "uuid-utils", + "version": "0.17.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "uvicorn", + "version": "0.49.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "uvicorn", + "version": "0.51.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "vis-data", + "version": "8.0.4", + "license": "(Apache-2.0 OR MIT)", + "flagged": false + }, + { + "name": "vis-network", + "version": "10.1.0", + "license": "MIT OR (Apache-2.0 AND MIT)", + "flagged": false + }, + { + "name": "vis-util", + "version": "6.0.0", + "license": "(Apache-2.0 OR MIT)", + "flagged": false + }, + { + "name": "vite", + "version": "8.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "vitest", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "w3c-xmlserializer", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "webidl-conversions", + "version": "8.0.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "websockets", + "version": "15.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "websockets", + "version": "16.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "websockets", + "version": "16.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "whatwg-mimetype", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-url", + "version": "16.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-url", + "version": "17.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "wheel", + "version": "0.47.0", + "license": "MIT", + "flagged": false + }, + { + "name": "which", + "version": "2.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "which-boxed-primitive", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "which-builtin-type", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "which-collection", + "version": "1.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "which-typed-array", + "version": "1.1.22", + "license": "MIT", + "flagged": false + }, + { + "name": "why-is-node-running", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "word-wrap", + "version": "1.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "wrapt", + "version": "2.2.2", + "license": "BSD-2-Clause AND BSD-3-Clause AND Python-2.0 AND Ruby", + "flagged": false + }, + { + "name": "xml-name-validator", + "version": "5.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "xmlchars", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "xxhash", + "version": "3.8.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "xxhash", + "version": "3.8.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "yallist", + "version": "3.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "yarl", + "version": "1.24.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "yocto-queue", + "version": "0.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "zipp", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "zod", + "version": "4.4.3", + "license": "MIT", + "flagged": false + }, + { + "name": "zod-validation-error", + "version": "4.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "zstandard", + "version": "0.25.0", + "license": "BSD-3-Clause", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/newsdom-api", + "error": null, + "component_count": 87, + "components": [ + { + "name": "actions/attest-build-provenance", + "version": "0f67c3f4856b2e3261c31976d6725780e5e4c373", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/dependency-review-action", + "version": "a1d282b36b6f3519aa1f3fc636f609c47dddb294", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/deploy-pages", + "version": "cd2ce8fcbc39b97be8ca5fce6e763baed58fa128", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "altgraph", + "version": "0.17.5", + "license": "MIT AND MIT-0", + "flagged": false + }, + { + "name": "annotated-doc", + "version": "0.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-types", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "astral-sh/setup-uv", + "version": "c771a70e6277c0a99b617c7a806ffedaca235ff9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "atheris", + "version": "3.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "atheris", + "version": "3.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "babel", + "version": "2.18.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "backports-asyncio-runner", + "version": "1.2.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "backrefs", + "version": "5.9", + "license": "MIT", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.2.25", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "charset-normalizer", + "version": "3.4.7", + "license": "MIT", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "coverage", + "version": "7.13.5", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "docker/build-push-action", + "version": "53b7df96c91f9c12dcc8a07bcb9ccacbed38856a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "docker/login-action", + "version": "dbcb813823bdd20940b903addbd779551569679f", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "docker/metadata-action", + "version": "dc802804100637a589fabce1cb79ff13a1411302", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "docker/setup-buildx-action", + "version": "bb05f3f5519dd87d3ba754cc423b652a5edd6d2c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "docker/setup-qemu-action", + "version": "96fe6ef7f33517b61c61be40b68a1882f3264fb8", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "exceptiongroup", + "version": "1.3.1", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "fastapi", + "version": "0.135.3", + "license": "MIT", + "flagged": false + }, + { + "name": "ghp-import", + "version": "2.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "github/codeql-action/analyze", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/autobuild", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/init", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/upload-sarif", + "version": "f205ea1c3313d32999d8d6a48b4f6530d4437b38", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "google/clusterfuzzlite/actions/build_fuzzers", + "version": "52ecc61cb587ee99c26825a112a21abf19c7448c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "google/clusterfuzzlite/actions/run_fuzzers", + "version": "52ecc61cb587ee99c26825a112a21abf19c7448c", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpcore2", + "version": "2.4.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx2", + "version": "2.4.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jinja2", + "version": "3.1.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "macholib", + "version": "1.16.4", + "license": "MIT", + "flagged": false + }, + { + "name": "markdown", + "version": "3.10.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "markupsafe", + "version": "3.0.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "mergedeep", + "version": "1.3.4", + "license": "MIT", + "flagged": false + }, + { + "name": "mkdocs", + "version": "1.6.1", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "mkdocs-get-deps", + "version": "0.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "mkdocs-material", + "version": "9.7.7", + "license": "MIT", + "flagged": false + }, + { + "name": "mkdocs-material-extensions", + "version": "1.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "newsdom-api", + "version": "0.2.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "ossf/scorecard-action", + "version": "2d1146689b8cda280b9bc96326124645441f03bc", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "packaging", + "version": "26.0", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "paginate", + "version": "0.5.7", + "license": "MIT", + "flagged": false + }, + { + "name": "pathspec", + "version": "1.0.4", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "pefile", + "version": "2023.2.7", + "license": "MIT", + "flagged": false + }, + { + "name": "pillow", + "version": "12.3.0", + "license": "MIT-CMU", + "flagged": false + }, + { + "name": "platformdirs", + "version": "4.9.6", + "license": "MIT", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic", + "version": "2.12.5", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-core", + "version": "2.41.5", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pyinstaller", + "version": "6.21.0", + "license": "GPL-2.0-only AND GPL-2.0-or-later", + "flagged": true + }, + { + "name": "pyinstaller-hooks-contrib", + "version": "2026.6", + "license": "Apache-2.0 AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later", + "flagged": true + }, + { + "name": "pymdown-extensions", + "version": "11.0.1", + "license": "BSD-3-Clause AND MIT", + "flagged": false + }, + { + "name": "pypdf", + "version": "6.15.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pytest", + "version": "9.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-asyncio", + "version": "1.3.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pytest-cov", + "version": "7.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "python-dateutil", + "version": "2.9.0.post0", + "license": "Apache-2.0 AND BSD-3-Clause", + "flagged": false + }, + { + "name": "python-multipart", + "version": "0.0.31", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pywin32-ctypes", + "version": "0.2.3", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pyyaml", + "version": "6.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "pyyaml-env-tag", + "version": "1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "reportlab", + "version": "4.4.10", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "requests", + "version": "2.33.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "setuptools", + "version": "83.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "six", + "version": "1.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "starlette", + "version": "1.3.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "tomli", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "truststore", + "version": "0.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.15.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "urllib3", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "uvicorn", + "version": "0.44.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "watchdog", + "version": "6.0.0", + "license": "Apache-2.0 AND Python-2.0", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/noema", + "error": null, + "component_count": 249, + "components": [ + { + "name": "@babel/helper-string-parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-identifier", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/types", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@bcoe/v8-coverage", + "version": "1.0.2", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "@cloudflare/kv-asset-handler", + "version": "0.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "@cloudflare/unenv-preset", + "version": "2.16.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "@cloudflare/workerd-darwin-64", + "version": "1.20260625.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@cloudflare/workerd-darwin-arm64", + "version": "1.20260625.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@cloudflare/workerd-linux-64", + "version": "1.20260625.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@cloudflare/workerd-linux-arm64", + "version": "1.20260625.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@cloudflare/workerd-windows-64", + "version": "1.20260625.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@cloudflare/workers-types", + "version": "4.20260630.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-darwin-arm64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-darwin-x64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-linux-arm64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-linux-x64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-win32-arm64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@colbymchenry/codegraph-win32-x64", + "version": "1.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@cspotcode/source-map-support", + "version": "0.8.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "1.11.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "1.11.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/aix-ppc64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/android-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/darwin-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/freebsd-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ia32", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-loong64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-mips64el", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-ppc64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-riscv64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-s390x", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/linux-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/netbsd-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openbsd-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/openharmony-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/sunos-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-arm64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-ia32", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@esbuild/win32-x64", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@img/colour", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@img/sharp-darwin-arm64", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-darwin-x64", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-freebsd-wasm32", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-libvips-darwin-arm64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-darwin-x64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-arm", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-arm64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-ppc64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-riscv64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-s390x", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linux-x64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linuxmusl-arm64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-libvips-linuxmusl-x64", + "version": "1.3.2", + "license": "LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-linux-arm", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-arm64", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-ppc64", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-riscv64", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-s390x", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linux-x64", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linuxmusl-arm64", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-linuxmusl-x64", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-wasm32", + "version": "0.35.3", + "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT", + "flagged": true + }, + { + "name": "@img/sharp-webcontainers-wasm32", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@img/sharp-win32-arm64", + "version": "0.35.3", + "license": "Apache-2.0 AND LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-win32-ia32", + "version": "0.35.3", + "license": "Apache-2.0 AND LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@img/sharp-win32-x64", + "version": "0.35.3", + "license": "Apache-2.0 AND LGPL-3.0-or-later", + "flagged": true + }, + { + "name": "@jridgewell/resolve-uri", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/sourcemap-codec", + "version": "1.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/wasm-runtime", + "version": "1.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-project/types", + "version": "0.137.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@poppinss/colors", + "version": "4.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@poppinss/dumper", + "version": "0.6.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@poppinss/exception", + "version": "1.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-android-arm64", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-arm64", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-x64", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-freebsd-x64", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm-gnueabihf", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-gnu", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-musl", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-ppc64-gnu", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-s390x-gnu", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-gnu", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-musl", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-openharmony-arm64", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-wasm32-wasi", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-arm64-msvc", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-x64-msvc", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/pluginutils", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@sindresorhus/is", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@speed-highlight/core", + "version": "1.2.17", + "license": "CC0-1.0", + "flagged": false + }, + { + "name": "@standard-schema/spec", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@tybys/wasm-util", + "version": "0.10.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/chai", + "version": "5.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/deep-eql", + "version": "4.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/estree", + "version": "1.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/coverage-v8", + "version": "4.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/expect", + "version": "4.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/mocker", + "version": "4.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/pretty-format", + "version": "4.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/runner", + "version": "4.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/snapshot", + "version": "4.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/spy", + "version": "4.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/utils", + "version": "4.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "actions/attest", + "version": "59d89421af93a897026c735860bf21b6eb4f7b26", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "11bd71901bbe5b1630ceea73d27597364c9af683", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "de0fac2e4500dabe0009e67214ff5f5447ce83dd", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/create-github-app-token", + "version": "bcd2ba49218906704ab6c1aa796996da409d3eb1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/download-artifact", + "version": "d3f86a106a0bac45b974a628896c90dbdf5c8093", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "a26af69be951a213d495a4c3e4e4022e16d87065", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "annotated-types", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.1", + "license": "MIT", + "flagged": false + }, + { + "name": "aquasecurity/setup-trivy", + "version": "81e514348e19b6112ce2a7e3ecbafe19c1e1f567", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "assertion-error", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-v8-to-istanbul", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "attrs", + "version": "26.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "blake3-wasm", + "version": "2.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "chai", + "version": "6.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "charset-normalizer", + "version": "3.4.9", + "license": "MIT", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "convert-source-map", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cookie", + "version": "1.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "coverage", + "version": "7.15.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "detect-libc", + "version": "2.1.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "distro", + "version": "1.9.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "docker/setup-buildx-action", + "version": "37fe631027851001ddb9b187196cc803df7f5f0e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "error-stack-parser-es", + "version": "1.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "es-module-lexer", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "esbuild", + "version": "0.28.1", + "license": "MIT", + "flagged": false + }, + { + "name": "estree-walker", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "expect-type", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fdir", + "version": "6.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "genai-prices", + "version": "0.0.71", + "license": "MIT", + "flagged": false + }, + { + "name": "griffelib", + "version": "2.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "has-flag", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "html-escaper", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpcore2", + "version": "2.5.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx2", + "version": "2.5.0", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "interrogate", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "interrogate", + "version": "1.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "istanbul-lib-coverage", + "version": "3.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-report", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-reports", + "version": "3.2.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "jiter", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "10.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "kleur", + "version": "4.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "lightningcss", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-android-arm64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-arm64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-x64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-freebsd-x64", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-gnu", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-musl", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-gnu", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-musl", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-arm64-msvc", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-x64-msvc", + "version": "1.32.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "logfire-api", + "version": "4.37.0", + "license": "MIT", + "flagged": false + }, + { + "name": "magic-string", + "version": "0.30.21", + "license": "MIT", + "flagged": false + }, + { + "name": "magicast", + "version": "0.5.3", + "license": "MIT", + "flagged": false + }, + { + "name": "make-dir", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "miniflare", + "version": "4.20260625.0", + "license": "MIT", + "flagged": false + }, + { + "name": "nanoid", + "version": "3.3.18", + "license": "MIT", + "flagged": false + }, + { + "name": "obug", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "openai", + "version": "2.45.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-api", + "version": "1.43.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "path-to-regexp", + "version": "6.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pathe", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "picocolors", + "version": "1.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "picomatch", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "postcss", + "version": "8.5.25", + "license": "MIT", + "flagged": false + }, + { + "name": "py", + "version": "1.11.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pydantic", + "version": "2.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-ai-slim", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pydantic-ai-slim", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-core", + "version": "2.46.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-graph", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pytest", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-cov", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest-cov", + "version": "7.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "regex", + "version": "2026.7.10", + "license": "CNRI-Python AND Apache-2.0", + "flagged": false + }, + { + "name": "requests", + "version": "2.34.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "rolldown", + "version": "1.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "semver", + "version": "7.8.5", + "license": "ISC", + "flagged": false + }, + { + "name": "setuptools", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "sharp", + "version": "0.35.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "siginfo", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "sigstore/cosign-installer", + "version": "6f9f17788090df1f26f669e9d70d6ae9567deba6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "sniffio", + "version": "1.3.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "source-map-js", + "version": "1.2.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "stackback", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "std-env", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "10.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tabulate", + "version": "0.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tiktoken", + "version": "0.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinybench", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyexec", + "version": "1.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyglobby", + "version": "0.2.17", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyrainbow", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tomli", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tqdm", + "version": "4.68.4", + "license": "MIT AND MPL-2.0", + "flagged": true + }, + { + "name": "truststore", + "version": "0.10.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tslib", + "version": "2.8.1", + "license": "0BSD", + "flagged": false + }, + { + "name": "typescript", + "version": "5.9.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "undici", + "version": "7.29.0", + "license": "MIT", + "flagged": false + }, + { + "name": "unenv", + "version": "2.0.0-rc.24", + "license": "MIT", + "flagged": false + }, + { + "name": "urllib3", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "vite", + "version": "8.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "vitest", + "version": "4.1.9", + "license": "MIT", + "flagged": false + }, + { + "name": "why-is-node-running", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "workerd", + "version": "1.20260625.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "wrangler", + "version": "4.105.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ws", + "version": "8.21.0", + "license": "MIT", + "flagged": false + }, + { + "name": "youch", + "version": "4.1.0-beta.10", + "license": "MIT", + "flagged": false + }, + { + "name": "youch-core", + "version": "0.3.3", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/Orgmetra", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/OriginWeave", + "error": null, + "component_count": 79, + "components": [ + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "asn1-rs", + "version": "0.7.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "asn1-rs-derive", + "version": "0.6.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "asn1-rs-impl", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "autocfg", + "version": "1.5.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "base64", + "version": "0.22.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bit-vec", + "version": "0.9.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "block-buffer", + "version": "0.10.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cc", + "version": "1.4.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cfg-if", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cpufeatures", + "version": "0.2.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "crypto-common", + "version": "0.1.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "data-encoding", + "version": "2.11.1", + "license": "MIT", + "flagged": false + }, + { + "name": "der-parser", + "version": "10.0.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "deranged", + "version": "0.5.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "digest", + "version": "0.10.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "displaydoc", + "version": "0.2.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dtolnay/rust-toolchain", + "version": "4be7066ada62dd38de10e7b70166bc74ed198c30", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "find-msvc-tools", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "generic-array", + "version": "0.14.7", + "license": "MIT", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.2.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "lazy_static", + "version": "1.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "libc", + "version": "0.2.189", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "memchr", + "version": "2.8.3", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "minimal-lexical", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "nom", + "version": "7.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "num-bigint", + "version": "0.4.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-conv", + "version": "0.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-integer", + "version": "0.1.46", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "num-traits", + "version": "0.2.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "oid-registry", + "version": "0.8.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "once_cell", + "version": "1.21.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "pem", + "version": "3.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "powerfmt", + "version": "0.2.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro2", + "version": "1.0.107", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "quote", + "version": "1.0.47", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rcgen", + "version": "0.14.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ring", + "version": "0.17.14", + "license": "Apache-2.0 AND ISC", + "flagged": false + }, + { + "name": "rusticata-macros", + "version": "4.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rustls", + "version": "0.23.42", + "license": "Apache-2.0 OR ISC OR MIT", + "flagged": false + }, + { + "name": "rustls-pki-types", + "version": "1.15.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rustls-webpki", + "version": "0.103.13", + "license": "ISC", + "flagged": false + }, + { + "name": "serde", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_core", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sha2", + "version": "0.10.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "shlex", + "version": "2.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "step-security/harden-runner", + "version": "bf7454d06d71f1098171f2acdf0cd4708d7b5920", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "subtle", + "version": "2.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "syn", + "version": "2.0.119", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "3.0.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "synstructure", + "version": "0.13.2", + "license": "MIT", + "flagged": false + }, + { + "name": "thiserror", + "version": "2.0.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror-impl", + "version": "2.0.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time", + "version": "0.3.55", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time-core", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "time-macros", + "version": "0.2.32", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "tinyvec", + "version": "1.10.0", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tinyvec_macros", + "version": "0.1.1", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "typenum", + "version": "1.20.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unicode-ident", + "version": "1.0.24", + "license": "(MIT OR Apache-2.0) AND Unicode-3.0", + "flagged": false + }, + { + "name": "unicode-normalization", + "version": "0.1.25", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "untrusted", + "version": "0.9.0", + "license": "ISC", + "flagged": false + }, + { + "name": "version_check", + "version": "0.9.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasi", + "version": "0.11.1+wasi-snapshot-preview1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.52.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-targets", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnu", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnu", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "x509-parser", + "version": "0.18.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "yasna", + "version": "0.6.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "zeroize", + "version": "1.9.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/pg-erd-cloud", + "error": null, + "component_count": 217, + "components": [ + { + "name": "@adobe/css-tools", + "version": "4.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@asamuzakjp/css-color", + "version": "6.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@asamuzakjp/dom-selector", + "version": "8.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/code-frame", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-string-parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/helper-validator-identifier", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/parser", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/runtime", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@babel/types", + "version": "7.29.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@bcoe/v8-coverage", + "version": "1.0.2", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "@bramus/specificity", + "version": "2.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/color-helpers", + "version": "6.1.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "@csstools/css-calc", + "version": "3.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-color-parser", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-parser-algorithms", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@csstools/css-syntax-patches-for-csstree", + "version": "1.1.7", + "license": "MIT-0", + "flagged": false + }, + { + "name": "@csstools/css-tokenizer", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/core", + "version": "2.0.0-alpha.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/runtime", + "version": "2.0.0-alpha.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@emnapi/wasi-threads", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@exodus/bytes", + "version": "1.15.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/resolve-uri", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/sourcemap-codec", + "version": "1.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@napi-rs/wasm-runtime", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@oxc-project/types", + "version": "0.142.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-android-arm64", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-arm64", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-darwin-x64", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-freebsd-x64", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm-gnueabihf", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-gnu", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-arm64-musl", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-ppc64-gnu", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-s390x-gnu", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-gnu", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-linux-x64-musl", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-openharmony-arm64", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-wasm32-wasi", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-arm64-msvc", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/binding-win32-x64-msvc", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@rolldown/pluginutils", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@standard-schema/spec", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/dom", + "version": "10.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/jest-dom", + "version": "6.9.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/react", + "version": "16.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@testing-library/user-event", + "version": "14.6.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@tybys/wasm-util", + "version": "0.10.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/aria-query", + "version": "5.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/chai", + "version": "5.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/d3-color", + "version": "3.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/d3-drag", + "version": "3.0.7", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/d3-interpolate", + "version": "3.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/d3-selection", + "version": "3.0.11", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/d3-transition", + "version": "3.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/d3-zoom", + "version": "3.0.8", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/deep-eql", + "version": "4.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/estree", + "version": "1.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react", + "version": "19.2.18", + "license": "MIT", + "flagged": false + }, + { + "name": "@types/react-dom", + "version": "19.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/coverage-v8", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/expect", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/mocker", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/pretty-format", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/runner", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/snapshot", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/spy", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@vitest/utils", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "@xyflow/react", + "version": "12.11.3", + "license": "MIT", + "flagged": false + }, + { + "name": "@xyflow/system", + "version": "0.0.80", + "license": "MIT", + "flagged": false + }, + { + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "ece7cb06caefa5fff74198d8649806c4678c61a1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aiohttp", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "alembic", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "ansi-regex", + "version": "5.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "5.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "aria-query", + "version": "5.3.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "assertion-error", + "version": "2.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "ast-v8-to-istanbul", + "version": "1.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "asyncpg", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "asyncpg-stubs", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "bidi-js", + "version": "1.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "chai", + "version": "6.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "classcat", + "version": "5.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "convert-source-map", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cryptography", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "css-tree", + "version": "3.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "css.escape", + "version": "1.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "csstype", + "version": "3.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "d3-color", + "version": "3.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "d3-dispatch", + "version": "3.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "d3-drag", + "version": "3.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "d3-ease", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "d3-interpolate", + "version": "3.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "d3-selection", + "version": "3.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "d3-timer", + "version": "3.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "d3-transition", + "version": "3.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "d3-zoom", + "version": "3.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "data-urls", + "version": "7.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "decimal.js", + "version": "10.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "dequal", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "detect-libc", + "version": "2.1.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "dom-accessibility-api", + "version": "0.5.16", + "license": "MIT", + "flagged": false + }, + { + "name": "dom-accessibility-api", + "version": "0.6.3", + "license": "MIT", + "flagged": false + }, + { + "name": "entities", + "version": "8.0.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "es-module-lexer", + "version": "2.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "estree-walker", + "version": "3.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "expect-type", + "version": "1.3.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "fast-check", + "version": "4.8.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fastapi", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "fdir", + "version": "6.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "github/codeql-action/analyze", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/autobuild", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/init", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "has-flag", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "html-encoding-sniffer", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "html-escaper", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "httpx", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "hypercorn", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "indent-string", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "is-potential-custom-element-name", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "istanbul-lib-coverage", + "version": "3.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-report", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-reports", + "version": "3.2.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "js-tokens", + "version": "10.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "js-tokens", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "jsdom", + "version": "30.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "lightningcss", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-android-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-arm64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-darwin-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-freebsd-x64", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm-gnueabihf", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-arm64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-gnu", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-linux-x64-musl", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-arm64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lightningcss-win32-x64-msvc", + "version": "1.33.0", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "lru-cache", + "version": "11.5.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "lz-string", + "version": "1.5.0", + "license": "MIT", + "flagged": false + }, + { + "name": "magic-string", + "version": "0.30.21", + "license": "MIT", + "flagged": false + }, + { + "name": "magicast", + "version": "0.5.3", + "license": "MIT", + "flagged": false + }, + { + "name": "make-dir", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mdn-data", + "version": "2.27.1", + "license": "CC0-1.0", + "flagged": false + }, + { + "name": "min-indent", + "version": "1.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "mypy", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "nanoid", + "version": "3.3.16", + "license": "MIT", + "flagged": false + }, + { + "name": "obug", + "version": "2.1.3", + "license": "MIT", + "flagged": false + }, + { + "name": "parse5", + "version": "8.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pathe", + "version": "2.0.3", + "license": "MIT", + "flagged": false + }, + { + "name": "picocolors", + "version": "1.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "picomatch", + "version": "4.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "postcss", + "version": "8.5.25", + "license": "MIT", + "flagged": false + }, + { + "name": "pretty-format", + "version": "27.5.1", + "license": "MIT", + "flagged": false + }, + { + "name": "prometheus-client", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "psycopg", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "punycode", + "version": "2.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pure-rand", + "version": "8.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pydantic-settings", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pyjwt", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest-asyncio", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest-cov", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "python-jose", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "python-multipart", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "react", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react-dom", + "version": "19.2.8", + "license": "MIT", + "flagged": false + }, + { + "name": "react-is", + "version": "17.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "redent", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "redis", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "requests", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "require-from-string", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "rolldown", + "version": "1.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "saxes", + "version": "6.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "scheduler", + "version": "0.27.0", + "license": "MIT", + "flagged": false + }, + { + "name": "semver", + "version": "7.8.5", + "license": "ISC", + "flagged": false + }, + { + "name": "setuptools", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "siginfo", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "snowflake-connector-python", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "source-map-js", + "version": "1.2.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "sqlalchemy", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "stackback", + "version": "0.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "starlette", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "std-env", + "version": "4.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "step-security/harden-runner", + "version": "b09bb98e06d4d774595224525879c09bc6e98c40", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "strip-indent", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "symbol-tree", + "version": "3.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tinybench", + "version": "2.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyexec", + "version": "1.2.4", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyglobby", + "version": "0.2.17", + "license": "MIT", + "flagged": false + }, + { + "name": "tinyrainbow", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tldts", + "version": "7.4.10", + "license": "MIT", + "flagged": false + }, + { + "name": "tldts-core", + "version": "7.4.10", + "license": "MIT", + "flagged": false + }, + { + "name": "tough-cookie", + "version": "6.0.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "tr46", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tslib", + "version": "2.8.1", + "license": "0BSD", + "flagged": false + }, + { + "name": "types-python-jose", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "typescript", + "version": "6.0.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "undici", + "version": "8.10.0", + "license": "MIT", + "flagged": false + }, + { + "name": "urllib3", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "use-sync-external-store", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "vite", + "version": "8.2.1", + "license": "MIT", + "flagged": false + }, + { + "name": "vitest", + "version": "4.1.10", + "license": "MIT", + "flagged": false + }, + { + "name": "w3c-xmlserializer", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "webidl-conversions", + "version": "8.0.1", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "whatwg-mimetype", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-url", + "version": "16.0.1", + "license": "MIT", + "flagged": false + }, + { + "name": "whatwg-url", + "version": "17.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "why-is-node-running", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "xml-name-validator", + "version": "5.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "xmlchars", + "version": "2.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "zustand", + "version": "4.5.7", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/pg-llm-batch", + "error": null, + "component_count": 41, + "components": [ + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "5fda3b95a4ea91299a34e894583c3862153e4b97", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0", + "flagged": true + }, + { + "name": "aiohttp", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aiohttp", + "version": "3.14.3", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "aiosignal", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "astral-sh/setup-uv", + "version": "c771a70e6277c0a99b617c7a806ffedaca235ff9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "async-timeout", + "version": "5.0.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "attrs", + "version": "26.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "backports-asyncio-runner", + "version": "1.2.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "cffi", + "version": "2.1.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "cryptography", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "cryptography", + "version": "50.0.0", + "license": "Apache-2.0 OR BSD-3-Clause", + "flagged": false + }, + { + "name": "exceptiongroup", + "version": "1.3.1", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "frozenlist", + "version": "1.8.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "multidict", + "version": "6.7.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "opentelemetry-api", + "version": "1.44.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "pg-llm-batch", + "version": "0.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "propcache", + "version": "0.5.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "psycopg", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only", + "flagged": true + }, + { + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later", + "flagged": true + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pytest", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-asyncio", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest-asyncio", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "ruff", + "version": "0.16.1", + "license": "MIT", + "flagged": false + }, + { + "name": "setuptools", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "step-security/harden-runner", + "version": "b09bb98e06d4d774595224525879c09bc6e98c40", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "tomli", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "tzdata", + "version": "2026.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "yarl", + "version": "1.24.2", + "license": "Apache-2.0", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/pingora-gateway", + "error": null, + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/PolicyWeave", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/psychometrics-commons", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/quarantine-sandbox-runtime", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/RankWeave", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/saju-caldav", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/scopeweave", + "error": null, + "component_count": 72, + "components": [ + { + "name": "@bcoe/v8-coverage", + "version": "1.0.2", + "license": "ISC AND MIT", + "flagged": false + }, + { + "name": "@hono/node-server", + "version": "2.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "@istanbuljs/schema", + "version": "0.1.6", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/resolve-uri", + "version": "3.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/sourcemap-codec", + "version": "1.5.5", + "license": "MIT", + "flagged": false + }, + { + "name": "@jridgewell/trace-mapping", + "version": "0.3.31", + "license": "MIT", + "flagged": false + }, + { + "name": "@playwright/test", + "version": "1.62.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "@types/istanbul-lib-coverage", + "version": "2.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/configure-pages", + "version": "45bfe0192ca1faeb007ade9deae92b16b8254a0d", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/dependency-review-action", + "version": "a1d282b36b6f3519aa1f3fc636f609c47dddb294", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/deploy-pages", + "version": "cd2ce8fcbc39b97be8ca5fce6e763baed58fa128", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "2028fbc5c25fe9cf00d9f06a71cc4710d4507903", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-node", + "version": "39370e3970a6d050c480ffad4ff0ed4d3fdee5af", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-pages-artifact", + "version": "fc324d3547104276b827a68afc52ff2a11cc49c9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "ansi-regex", + "version": "6.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "ansi-styles", + "version": "6.2.3", + "license": "MIT", + "flagged": false + }, + { + "name": "balanced-match", + "version": "4.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "brace-expansion", + "version": "5.0.9", + "license": "MIT", + "flagged": false + }, + { + "name": "c8", + "version": "12.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "cliui", + "version": "9.0.1", + "license": "ISC", + "flagged": false + }, + { + "name": "convert-source-map", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "cross-spawn", + "version": "7.0.6", + "license": "MIT", + "flagged": false + }, + { + "name": "emoji-regex", + "version": "10.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "escalade", + "version": "3.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "fast-check", + "version": "4.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "find-up", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "foreground-child", + "version": "3.3.1", + "license": "ISC", + "flagged": false + }, + { + "name": "fsevents", + "version": "2.3.2", + "license": "MIT", + "flagged": false + }, + { + "name": "get-caller-file", + "version": "2.0.5", + "license": "ISC", + "flagged": false + }, + { + "name": "get-east-asian-width", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "github/codeql-action/analyze", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "github/codeql-action/init", + "version": "8aad20d150bbac5944a9f9d289da16a4b0d87c1e", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "glob", + "version": "13.0.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml", + "version": "3a7550f43ba5b58905a821ce3a0ed24c4858b3f4", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "has-flag", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hono", + "version": "4.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "html-escaper", + "version": "2.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "isexe", + "version": "2.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "istanbul-lib-coverage", + "version": "3.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-lib-report", + "version": "3.0.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "istanbul-reports", + "version": "3.2.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "locate-path", + "version": "6.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "lru-cache", + "version": "11.5.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "make-dir", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "minimatch", + "version": "10.2.6", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "minipass", + "version": "7.1.3", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "p-limit", + "version": "3.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "p-locate", + "version": "5.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "path-exists", + "version": "4.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "path-key", + "version": "3.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "path-scurry", + "version": "2.0.2", + "license": "BlueOak-1.0.0", + "flagged": false + }, + { + "name": "playwright", + "version": "1.62.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "playwright-core", + "version": "1.62.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "pure-rand", + "version": "8.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "semver", + "version": "7.8.5", + "license": "ISC", + "flagged": false + }, + { + "name": "shebang-command", + "version": "2.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "shebang-regex", + "version": "3.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "signal-exit", + "version": "4.1.0", + "license": "ISC", + "flagged": false + }, + { + "name": "string-width", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "string-width", + "version": "8.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "strip-ansi", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "supports-color", + "version": "7.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "test-exclude", + "version": "8.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "v8-to-istanbul", + "version": "9.3.0", + "license": "ISC", + "flagged": false + }, + { + "name": "which", + "version": "2.0.2", + "license": "ISC", + "flagged": false + }, + { + "name": "wrap-ansi", + "version": "9.0.2", + "license": "MIT", + "flagged": false + }, + { + "name": "y18n", + "version": "5.0.8", + "license": "ISC", + "flagged": false + }, + { + "name": "yargs", + "version": "18.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "yargs-parser", + "version": "21.1.1", + "license": "ISC", + "flagged": false + }, + { + "name": "yargs-parser", + "version": "22.0.0", + "license": "ISC", + "flagged": false + }, + { + "name": "yocto-queue", + "version": "0.1.0", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/semantic-data-portal", + "error": null, + "component_count": 45, + "components": [ + { + "name": "actions/checkout", + "version": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "ece7cb06caefa5fff74198d8649806c4678c61a1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "043fb46d1a93c77aae656e7c1c64a875d1fc6a0a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "annotated-doc", + "version": "0.0.4", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-types", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.1", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.2", + "license": "MIT", + "flagged": false + }, + { + "name": "atheris", + "version": "3.0.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cffi", + "version": "2.1.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "cryptography", + "version": "49.0.0", + "license": "BSD-3-Clause OR Apache-2.0", + "flagged": false + }, + { + "name": "fastapi", + "version": "0.139.0", + "license": "MIT", + "flagged": false + }, + { + "name": "github/codeql-action/upload-sarif", + "version": "54f647b7e1bb85c95cddabcd46b0c578ec92bc1a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "greenlet", + "version": "3.2.5", + "license": "MIT AND PSF-2.0", + "flagged": false + }, + { + "name": "greenlet", + "version": "3.5.3", + "license": "MIT AND PSF-2.0", + "flagged": false + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "hypothesis", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "hypothesis", + "version": "6.156.6", + "license": "MPL-2.0 AND MPL-1.1", + "flagged": true + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "ossf/scorecard-action", + "version": "4eaacf0543bb3f2c246792bd56e8cdeffafb205a", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only", + "flagged": true + }, + { + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later", + "flagged": true + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pydantic", + "version": "2.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-core", + "version": "2.46.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pyjwt", + "version": "2.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "setuptools", + "version": "80.9.0", + "license": "MIT", + "flagged": false + }, + { + "name": "sortedcontainers", + "version": "2.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "sqlalchemy", + "version": "", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "sqlalchemy", + "version": "2.0.51", + "license": "MIT", + "flagged": false + }, + { + "name": "starlette", + "version": "1.3.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "tzdata", + "version": "2026.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "tzdata", + "version": "2026.3", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "uvicorn", + "version": "0.51.0", + "license": "BSD-3-Clause", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/supply-chain-control-plane", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/TEPP", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/ThreadWeave", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/Veilpick", + "error": null, + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/wardnet", + "error": null, + "component_count": 185, + "components": [ + { + "name": "actions/cache", + "version": "0057852bfaa89a56745cba8c7296529d2fc39830", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "arbitrary", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "atomic-waker", + "version": "1.1.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "autocfg", + "version": "1.5.1", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "axum", + "version": "0.8.9", + "license": "MIT", + "flagged": false + }, + { + "name": "axum-core", + "version": "0.5.6", + "license": "MIT", + "flagged": false + }, + { + "name": "base64", + "version": "0.22.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bit-set", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bit-vec", + "version": "0.8.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "bitflags", + "version": "2.13.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bumpalo", + "version": "3.20.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "bytes", + "version": "1.12.1", + "license": "MIT", + "flagged": false + }, + { + "name": "cc", + "version": "1.4.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cfg-if", + "version": "1.0.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cfg_aliases", + "version": "0.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "chacha20", + "version": "0.10.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "cpufeatures", + "version": "0.3.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "displaydoc", + "version": "0.2.7", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "dtolnay/rust-toolchain", + "version": "4be7066ada62dd38de10e7b70166bc74ed198c30", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "dtolnay/rust-toolchain", + "version": "efcb852328a9f50117170cc43094fb6f09eaf1ae", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "errno", + "version": "0.3.14", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "fastrand", + "version": "2.5.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "find-msvc-tools", + "version": "0.1.9", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "fnv", + "version": "1.0.7", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "form_urlencoded", + "version": "1.2.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-channel", + "version": "0.3.33", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-core", + "version": "0.3.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-io", + "version": "0.3.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-macro", + "version": "0.3.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-sink", + "version": "0.3.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-task", + "version": "0.3.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "futures-util", + "version": "0.3.34", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.2.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.3.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "getrandom", + "version": "0.4.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "github/codeql-action/upload-sarif", + "version": "ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "http", + "version": "1.5.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "http-body", + "version": "1.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "http-body-util", + "version": "0.1.4", + "license": "MIT", + "flagged": false + }, + { + "name": "httparse", + "version": "1.10.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "httpdate", + "version": "1.0.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "hyper", + "version": "1.11.0", + "license": "MIT", + "flagged": false + }, + { + "name": "hyper-rustls", + "version": "0.27.9", + "license": "Apache-2.0 OR ISC OR MIT", + "flagged": false + }, + { + "name": "hyper-util", + "version": "0.1.20", + "license": "MIT", + "flagged": false + }, + { + "name": "icu_collections", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_locale_core", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_normalizer", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_normalizer_data", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_properties", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_properties_data", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "icu_provider", + "version": "2.2.0", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "idna", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "idna_adapter", + "version": "1.2.2", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "ipnet", + "version": "2.12.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "itoa", + "version": "1.0.18", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "js-sys", + "version": "0.3.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "libc", + "version": "0.2.189", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "libfuzzer-sys", + "version": ">= 0.4.0,< 0.5.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "linux-raw-sys", + "version": "0.12.1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "litemap", + "version": "0.8.2", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "log", + "version": "0.4.33", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "lru-slab", + "version": "0.1.2", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "matchit", + "version": "0.8.4", + "license": "MIT AND BSD-3-Clause", + "flagged": false + }, + { + "name": "memchr", + "version": "2.8.3", + "license": "Unlicense OR MIT", + "flagged": false + }, + { + "name": "mime", + "version": "0.3.17", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "mime_guess", + "version": "2.0.5", + "license": "MIT", + "flagged": false + }, + { + "name": "mio", + "version": "1.2.2", + "license": "MIT", + "flagged": false + }, + { + "name": "num-traits", + "version": "0.2.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "once_cell", + "version": "1.21.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ossf/scorecard-action", + "version": "2d1146689b8cda280b9bc96326124645441f03bc", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "percent-encoding", + "version": "2.3.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "percent-encoding", + "version": ">= 2.0.0,< 3.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pin-project-lite", + "version": "0.2.17", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "potential_utf", + "version": "0.1.5", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "ppv-lite86", + "version": "0.2.21", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proc-macro2", + "version": "1.0.107", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proptest", + "version": "1.11.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "proptest", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "quick-error", + "version": "1.2.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "quinn", + "version": "0.11.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "quinn-proto", + "version": "0.11.16", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "quinn-udp", + "version": "0.5.15", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "quote", + "version": "1.0.47", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "r-efi", + "version": "5.3.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "r-efi", + "version": "6.0.0", + "license": "MIT OR Apache-2.0 OR LGPL-2.1-or-later", + "flagged": true + }, + { + "name": "rand", + "version": "0.10.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand", + "version": "0.9.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_chacha", + "version": "0.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_core", + "version": "0.10.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_core", + "version": "0.9.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_pcg", + "version": "0.10.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rand_xorshift", + "version": "0.4.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "regex-syntax", + "version": "0.8.11", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "reqwest", + "version": "0.12.28", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ring", + "version": "0.17.14", + "license": "Apache-2.0 AND ISC", + "flagged": false + }, + { + "name": "rustc-hash", + "version": "2.1.3", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "rustix", + "version": "1.1.4", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "rustls", + "version": "0.23.43", + "license": "Apache-2.0 OR ISC OR MIT", + "flagged": false + }, + { + "name": "rustls-pki-types", + "version": "1.15.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rustls-webpki", + "version": "0.103.13", + "license": "ISC", + "flagged": false + }, + { + "name": "rustversion", + "version": "1.0.23", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "rusty-fork", + "version": "0.3.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "ryu", + "version": "1.0.23", + "license": "Apache-2.0 OR BSL-1.0", + "flagged": false + }, + { + "name": "serde", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "serde_core", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_derive", + "version": "1.0.229", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": "1.0.151", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_json", + "version": ">= 1.0.0,< 2.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "serde_path_to_error", + "version": "0.1.20", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "serde_urlencoded", + "version": "0.7.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "shlex", + "version": "2.0.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "signal-hook-registry", + "version": "1.4.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "slab", + "version": "0.4.12", + "license": "MIT", + "flagged": false + }, + { + "name": "smallvec", + "version": "1.15.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "socket2", + "version": "0.6.5", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "stable_deref_trait", + "version": "1.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "subtle", + "version": "2.6.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "syn", + "version": "2.0.119", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "syn", + "version": "3.0.3", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "sync_wrapper", + "version": "1.0.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "synstructure", + "version": "0.13.2", + "license": "MIT", + "flagged": false + }, + { + "name": "tempfile", + "version": "3.27.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror", + "version": "2.0.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "thiserror-impl", + "version": "2.0.19", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tinystr", + "version": "0.8.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "tinyvec", + "version": "1.12.0", + "license": "Zlib OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "tinyvec_macros", + "version": "0.1.1", + "license": "MIT OR Apache-2.0 OR Zlib", + "flagged": false + }, + { + "name": "tokio", + "version": "1.53.1", + "license": "MIT", + "flagged": false + }, + { + "name": "tokio-macros", + "version": "2.7.2", + "license": "MIT", + "flagged": false + }, + { + "name": "tokio-rustls", + "version": "0.26.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "tokio-util", + "version": "0.7.19", + "license": "MIT", + "flagged": false + }, + { + "name": "tower", + "version": "0.5.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tower-http", + "version": "0.6.11", + "license": "MIT", + "flagged": false + }, + { + "name": "tower-layer", + "version": "0.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tower-service", + "version": "0.3.3", + "license": "MIT", + "flagged": false + }, + { + "name": "tracing", + "version": "0.1.44", + "license": "MIT", + "flagged": false + }, + { + "name": "tracing-core", + "version": "0.1.36", + "license": "MIT", + "flagged": false + }, + { + "name": "try-lock", + "version": "0.2.5", + "license": "MIT", + "flagged": false + }, + { + "name": "unarray", + "version": "0.1.4", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unicase", + "version": "2.9.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "unicode-ident", + "version": "1.0.24", + "license": "(MIT OR Apache-2.0) AND Unicode-3.0", + "flagged": false + }, + { + "name": "untrusted", + "version": "0.9.0", + "license": "ISC", + "flagged": false + }, + { + "name": "url", + "version": "2.5.8", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "utf8_iter", + "version": "1.0.4", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "wait-timeout", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "want", + "version": "0.3.1", + "license": "MIT", + "flagged": false + }, + { + "name": "wasi", + "version": "0.11.1+wasi-snapshot-preview1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "wasip2", + "version": "1.0.4+wasi-0.2.12", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "wasm-bindgen", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-futures", + "version": "0.4.76", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-macro-support", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-bindgen-shared", + "version": "0.2.126", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wasm-streams", + "version": "0.4.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "web-sys", + "version": "0.3.103", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "web-time", + "version": "1.1.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "webpki-roots", + "version": "1.0.9", + "license": "CDLA-Permissive-2.0", + "flagged": false + }, + { + "name": "windows-link", + "version": "0.2.1", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.52.0", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-sys", + "version": "0.61.2", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows-targets", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_aarch64_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnu", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_i686_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnu", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_gnullvm", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "windows_x86_64_msvc", + "version": "0.52.6", + "license": "MIT OR Apache-2.0", + "flagged": false + }, + { + "name": "wit-bindgen", + "version": "0.57.1", + "license": "Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "writeable", + "version": "0.6.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "yoke", + "version": "0.8.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "yoke-derive", + "version": "0.8.2", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerocopy", + "version": "0.8.55", + "license": "BSD-2-Clause OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zerocopy-derive", + "version": "0.8.55", + "license": "BSD-2-Clause OR Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zerofrom", + "version": "0.1.8", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerofrom-derive", + "version": "0.1.7", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zeroize", + "version": "1.9.0", + "license": "Apache-2.0 OR MIT", + "flagged": false + }, + { + "name": "zerotrie", + "version": "0.2.4", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerovec", + "version": "0.11.6", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zerovec-derive", + "version": "0.11.3", + "license": "Unicode-3.0", + "flagged": false + }, + { + "name": "zmij", + "version": "1.0.23", + "license": "MIT", + "flagged": false + } + ] + }, + { + "repo": "ContextualWisdomLab/xtrm-lead-pi-outbound", + "error": "gh: Not Found (HTTP 404)", + "component_count": 0, + "components": [] + }, + { + "repo": "ContextualWisdomLab/xtrmLLMBatchPython", + "error": null, + "component_count": 82, + "components": [ + { + "name": "@types/express", + "version": "^4.17.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@types/inquirer", + "version": "^8.2.12", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@types/node", + "version": "^24.0.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@vitest/coverage-v8", + "version": "^3.2.6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "@vitest/ui", + "version": "^3.2.6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/checkout", + "version": "3d3c42e5aac5ba805825da76410c181273ba90b1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/setup-python", + "version": "a26af69be951a213d495a4c3e4e4022e16d87065", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "actions/upload-artifact", + "version": "ea165f8d65b6e75b540449e92b4886f43607fa02", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "aiofiles", + "version": "25.1.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "aiohappyeyeballs", + "version": "2.7.1", + "license": "0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0", + "flagged": true + }, + { + "name": "aiohttp", + "version": "3.14.1", + "license": "Apache-2.0 AND MIT", + "flagged": false + }, + { + "name": "aioresponses", + "version": "0.7.9", + "license": "MIT", + "flagged": false + }, + { + "name": "aiosignal", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "aiosqlite", + "version": "0.22.1", + "license": "MIT", + "flagged": false + }, + { + "name": "annotated-types", + "version": "0.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "anyio", + "version": "4.14.1", + "license": "MIT", + "flagged": false + }, + { + "name": "astral-sh/setup-uv", + "version": "c771a70e6277c0a99b617c7a806ffedaca235ff9", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "async-timeout", + "version": "5.0.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "attrs", + "version": "26.1.0", + "license": "MIT", + "flagged": false + }, + { + "name": "axios", + "version": "^1.9.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "backports-asyncio-runner", + "version": "1.2.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "certifi", + "version": "2026.6.17", + "license": "MPL-2.0", + "flagged": true + }, + { + "name": "cffi", + "version": "2.0.0", + "license": "MIT-0", + "flagged": false + }, + { + "name": "charset-normalizer", + "version": "3.4.7", + "license": "MIT", + "flagged": false + }, + { + "name": "click", + "version": "8.4.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "colorama", + "version": "0.4.6", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "commander", + "version": "^14.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "cryptography", + "version": "49.0.0", + "license": "BSD-3-Clause OR Apache-2.0", + "flagged": false + }, + { + "name": "eslint", + "version": "^9.27.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "et-xmlfile", + "version": "2.0.0", + "license": "0BSD AND BSD-3-Clause AND MIT AND Python-2.0", + "flagged": false + }, + { + "name": "exceptiongroup", + "version": "1.3.1", + "license": "MIT AND Python-2.0", + "flagged": false + }, + { + "name": "express", + "version": "^4.18.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "extract-zip", + "version": "^2.0.1", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "frozenlist", + "version": "1.8.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "github.com/lib/pq", + "version": "v1.12.3", + "license": "MIT", + "flagged": false + }, + { + "name": "h11", + "version": "0.16.0", + "license": "MIT", + "flagged": false + }, + { + "name": "httpcore", + "version": "1.0.9", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "httpx", + "version": "0.28.1", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "idna", + "version": "3.18", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "iniconfig", + "version": "2.3.0", + "license": "MIT", + "flagged": false + }, + { + "name": "inquirer", + "version": "^8.2.6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "markdown-it-py", + "version": "4.2.0", + "license": "MIT", + "flagged": false + }, + { + "name": "mdurl", + "version": "0.1.2", + "license": "MIT", + "flagged": false + }, + { + "name": "multidict", + "version": "6.7.1", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "numpy", + "version": "2.2.6", + "license": "Apache-2.0 AND BSD-3-Clause AND MIT AND Zlib", + "flagged": false + }, + { + "name": "numpy", + "version": "2.4.6", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "numpy", + "version": "2.5.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "open", + "version": "^10.0.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "openpyxl", + "version": "3.1.5", + "license": "MIT", + "flagged": false + }, + { + "name": "packaging", + "version": "26.2", + "license": "Apache-2.0 AND BSD-2-Clause", + "flagged": false + }, + { + "name": "pandas", + "version": "2.3.3", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "pandas", + "version": "3.0.3", + "license": "BSD-2-Clause AND BSD-3-Clause", + "flagged": false + }, + { + "name": "pino", + "version": "^9.7.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pluggy", + "version": "1.6.0", + "license": "MIT", + "flagged": false + }, + { + "name": "propcache", + "version": "0.5.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "psycopg", + "version": "3.3.4", + "license": "LGPL-3.0 AND LGPL-3.0-only", + "flagged": true + }, + { + "name": "psycopg-binary", + "version": "3.3.4", + "license": "GPL-3.0-or-later", + "flagged": true + }, + { + "name": "pycparser", + "version": "3.0", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pydantic", + "version": "2.13.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pydantic-core", + "version": "2.46.4", + "license": "MIT", + "flagged": false + }, + { + "name": "pygments", + "version": "2.20.0", + "license": "BSD-2-Clause", + "flagged": false + }, + { + "name": "pypa/gh-action-pip-audit", + "version": "1220774d901786e6f652ae159f7b6bc8fea6d266", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "pytest", + "version": "9.1.1", + "license": "MIT", + "flagged": false + }, + { + "name": "pytest-asyncio", + "version": "1.4.0", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "python-dateutil", + "version": "2.9.0.post0", + "license": "Apache-2.0 AND BSD-3-Clause", + "flagged": false + }, + { + "name": "python-dotenv", + "version": "1.2.2", + "license": "BSD-3-Clause", + "flagged": false + }, + { + "name": "pytz", + "version": "2026.2", + "license": "MIT AND ZPL-2.1", + "flagged": false + }, + { + "name": "regex", + "version": "2026.6.28", + "license": "CNRI-Python AND Apache-2.0", + "flagged": false + }, + { + "name": "requests", + "version": "2.34.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "rich", + "version": "15.0.0", + "license": "MIT", + "flagged": false + }, + { + "name": "six", + "version": "1.17.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tiktoken", + "version": "0.13.0", + "license": "MIT", + "flagged": false + }, + { + "name": "tomli", + "version": "2.4.1", + "license": "MIT", + "flagged": false + }, + { + "name": "typescript", + "version": "^5.8.3", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "typing-extensions", + "version": "4.16.0", + "license": "Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD", + "flagged": true + }, + { + "name": "typing-inspection", + "version": "0.4.2", + "license": "MIT", + "flagged": false + }, + { + "name": "tzdata", + "version": "2026.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "urllib3", + "version": "2.7.0", + "license": "MIT", + "flagged": false + }, + { + "name": "vitest", + "version": "^3.2.6", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "xtrmllmbatch", + "version": "0.1.0", + "license": "NOASSERTION", + "flagged": true + }, + { + "name": "yarl", + "version": "1.24.2", + "license": "Apache-2.0", + "flagged": false + }, + { + "name": "zod", + "version": "^3.25.67", + "license": "NOASSERTION", + "flagged": true + } + ] + } + ] } diff --git a/docs/sbom/inventory.md b/docs/sbom/inventory.md index 8892aa3b33..2e50195376 100644 --- a/docs/sbom/inventory.md +++ b/docs/sbom/inventory.md @@ -1,6 +1,6 @@ # Organization SBOM inventory -Generated: pending first scheduled run +Generated: 2026-09-07T21:16:50Z One central view of every managed repository's software components, versions, and licenses. Feeds license and vulnerability governance @@ -8,18 +8,7930 @@ alongside the central Security Scan. ## Summary -- Repositories: 0 -- Components: 0 +- Repositories: 64 +- Components: 6735 - Policy: commercial-license-only -- Flagged licenses: 0 +- Flagged licenses: 773 ## License roll-up | License | Components | | --- | ---: | +| (Apache-2.0 OR MIT) | 2 | +| (Apache-2.0 OR MIT) AND BSD-3-Clause | 1 | +| (MIT OR Apache-2.0) AND NCSA | 1 | +| (MIT OR Apache-2.0) AND Unicode-3.0 | 7 | +| (MIT OR CC0-1.0) | 1 | +| 0BSD | 8 | +| 0BSD AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND LicenseRef-scancode-python-cwi AND LicenseRef-scancode-secret-labs-2011 AND LicenseRef-scancode-unicode AND MIT AND Python-2.0 | 1 | +| 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 ⚠️ | 5 | +| 0BSD AND BSD-3-Clause AND MIT AND Python-2.0 | 2 | +| 0BSD OR MIT OR Apache-2.0 | 2 | +| Apache-2.0 | 366 | +| Apache-2.0 AND BSD-2-Clause | 21 | +| Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND MIT AND OFL-1.1 | 1 | +| Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-scancode-public-domain AND MIT | 1 | +| Apache-2.0 AND BSD-3-Clause | 7 | +| Apache-2.0 AND BSD-3-Clause AND MIT AND Zlib | 2 | +| Apache-2.0 AND BSD-3-Clause AND MPL-2.0 ⚠️ | 5 | +| Apache-2.0 AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later ⚠️ | 1 | +| Apache-2.0 AND GPL-1.0-or-later AND MIT ⚠️ | 2 | +| Apache-2.0 AND ISC | 6 | +| Apache-2.0 AND LGPL-3.0-or-later ⚠️ | 6 | +| Apache-2.0 AND LGPL-3.0-or-later AND MIT ⚠️ | 2 | +| Apache-2.0 AND MIT | 24 | +| Apache-2.0 AND MIT AND MPL-2.0 ⚠️ | 1 | +| Apache-2.0 AND Python-2.0 | 6 | +| Apache-2.0 OR BSD-2-Clause | 3 | +| Apache-2.0 OR BSD-3-Clause | 6 | +| Apache-2.0 OR BSD-3-Clause OR (Apache-2.0 AND BSD-3-Clause) | 1 | +| Apache-2.0 OR BSL-1.0 | 2 | +| Apache-2.0 OR ISC OR MIT | 4 | +| Apache-2.0 OR MIT | 139 | +| Apache-2.0 WITH LLVM-exception | 5 | +| Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | 20 | +| BSD-2-Clause | 68 | +| BSD-2-Clause AND BSD-2-Clause-Views | 2 | +| BSD-2-Clause AND BSD-3-Clause | 62 | +| BSD-2-Clause AND BSD-3-Clause AND CC-PDDC AND GPL-1.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-scancode-other-copyleft AND LicenseRef-scancode-public-domain ⚠️ | 1 | +| BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT | 1 | +| BSD-2-Clause AND BSD-3-Clause AND MIT | 5 | +| BSD-2-Clause AND BSD-3-Clause AND Python-2.0 AND Ruby | 1 | +| BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1 | 2 | +| BSD-2-Clause OR Apache-2.0 OR MIT | 8 | +| BSD-3-Clause | 203 | +| BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0 | 2 | +| BSD-3-Clause AND GPL-1.0-or-later ⚠️ | 3 | +| BSD-3-Clause AND LicenseRef-scancode-protobuf | 5 | +| BSD-3-Clause AND MIT | 4 | +| BSD-3-Clause AND Python-2.0 | 1 | +| BSD-3-Clause OR Apache-2.0 | 5 | +| BSD-3-Clause OR GPL-2.0-only ⚠️ | 1 | +| BSD-3-Clause OR MIT OR Apache-2.0 | 4 | +| BlueOak-1.0.0 | 42 | +| CC-BY-3.0 | 1 | +| CC-BY-4.0 | 5 | +| CC0-1.0 | 7 | +| CC0-1.0 AND MIT | 6 | +| CC0-1.0 AND Unlicense | 1 | +| CC0-1.0 OR Apache-2.0 OR Apache-2.0 WITH LLVM-exception | 1 | +| CC0-1.0 OR MIT-0 OR Apache-2.0 | 3 | +| CDLA-Permissive-2.0 | 1 | +| CNRI-Python AND Apache-2.0 | 6 | +| EPL-2.0 ⚠️ | 5 | +| EPL-2.0 OR (Apache-2.0 AND EPL-2.0) ⚠️ | 2 | +| GPL-2.0-only AND GPL-2.0-or-later ⚠️ | 1 | +| GPL-3.0 AND GPL-3.0-only AND GPL-3.0-or-later ⚠️ | 1 | +| GPL-3.0-or-later ⚠️ | 6 | +| ISC | 168 | +| ISC AND MIT | 10 | +| ISC AND MPL-2.0 ⚠️ | 1 | +| JSON AND MIT | 1 | +| LGPL-2.1-or-later ⚠️ | 2 | +| LGPL-3.0 AND LGPL-3.0-only ⚠️ | 5 | +| LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later ⚠️ | 2 | +| LGPL-3.0-or-later ⚠️ | 20 | +| LicenseRef-NVIDIA-Proprietary | 7 | +| LicenseRef-bad-apache-2.0mit | 3 | +| LicenseRef-bad-bsd-2-clause-and-apache-2.0-and-llvm-exception-and-bsd-2-clause | 1 | +| LicenseRef-bad-bsd-3-clausemit | 1 | +| LicenseRef-bad-non-standard | 2 | +| LicenseRef-github-OTHER | 1 | +| LicenseRef-scancode-public-domain AND Unlicense | 1 | +| LicenseRef-scancode-unicode AND MIT | 4 | +| LicenseRef-scancode-unknown | 4 | +| MIT | 3546 | +| MIT AND Apache-2.0 | 1 | +| MIT AND BSD-3-Clause | 1 | +| MIT AND MIT-0 | 1 | +| MIT AND MPL-2.0 ⚠️ | 8 | +| MIT AND PSF-2.0 | 4 | +| MIT AND Python-2.0 | 14 | +| MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause | 1 | +| MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause | 1 | +| MIT AND ZPL-2.1 | 1 | +| MIT OR (Apache-2.0 AND MIT) | 1 | +| MIT OR (CC0-1.0 AND MIT) | 1 | +| MIT OR Apache-2.0 | 922 | +| MIT OR Apache-2.0 OR LGPL-2.1-or-later ⚠️ | 8 | +| MIT OR Apache-2.0 OR Zlib | 10 | +| MIT OR Zlib OR Apache-2.0 | 2 | +| MIT-0 | 18 | +| MIT-CMU | 5 | +| MPL-2.0 ⚠️ | 130 | +| MPL-2.0 AND MPL-1.1 ⚠️ | 3 | +| NOASSERTION ⚠️ | 534 | +| OFL-1.1 | 1 | +| PSF-2.0 | 8 | +| Python-2.0 | 3 | +| Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD ⚠️ | 16 | +| Python-2.0 AND LGPL-2.1-or-later ⚠️ | 1 | +| Python-2.0 AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | 1 | +| Unicode-3.0 | 54 | +| Unlicense | 2 | +| Unlicense AND Unlicense AND GPL-3.0-or-later AND MPL-2.0 AND MIT AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-or-later AND BSD-3-Clause AND MIT AND LGPL-2.1-only AND BSD-2-Clause AND GPL-2.0-or-later ⚠️ | 1 | +| Unlicense OR MIT | 26 | +| Zlib | 5 | +| Zlib OR Apache-2.0 OR MIT | 45 | ## Flagged components (policy violations) -No copyleft or NOASSERTION components detected. +| Repository | Component | Version | License | +| --- | --- | --- | --- | +| ContextualWisdomLab/.github | actions/attest | v4.1.0 | NOASSERTION | +| ContextualWisdomLab/.github | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/.github | actions/checkout | v7.0.0 | NOASSERTION | +| ContextualWisdomLab/.github | actions/checkout | v7.0.1 | NOASSERTION | +| ContextualWisdomLab/.github | actions/create-github-app-token | v3.2.0 | NOASSERTION | +| ContextualWisdomLab/.github | actions/dependency-review-action | v5.0.0 | NOASSERTION | +| ContextualWisdomLab/.github | actions/download-artifact | v8.0.1 | NOASSERTION | +| ContextualWisdomLab/.github | actions/setup-python | v7.0.0 | NOASSERTION | +| ContextualWisdomLab/.github | actions/upload-artifact | v6.0.0 | NOASSERTION | +| ContextualWisdomLab/.github | actions/upload-artifact | v7.0.0 | NOASSERTION | +| ContextualWisdomLab/.github | actions/upload-artifact | v7.0.1 | NOASSERTION | +| ContextualWisdomLab/.github | aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | +| ContextualWisdomLab/.github | anchore/sbom-action | v0.24.0 | NOASSERTION | +| ContextualWisdomLab/.github | aquasecurity/trivy-action | v0.36.0 | NOASSERTION | +| ContextualWisdomLab/.github | caido-server-auth | 0.1.2 | NOASSERTION | +| ContextualWisdomLab/.github | certifi | 2026.6.17 | MPL-2.0 | +| ContextualWisdomLab/.github | cloudflare/wrangler-action | v4.0.0 | NOASSERTION | +| ContextualWisdomLab/.github | contextualwisdomlab-opencode-codegraph-tooling | — | NOASSERTION | +| ContextualWisdomLab/.github | cvss | 3.6 | LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later | +| ContextualWisdomLab/.github | github/codeql-action | v4.37.9 | NOASSERTION | +| ContextualWisdomLab/.github | google/osv-scanner-action | v2.3.8 | NOASSERTION | +| ContextualWisdomLab/.github | google/osv-scanner-action | v2.5.1 | NOASSERTION | +| ContextualWisdomLab/.github | grpcio | 1.81.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | +| ContextualWisdomLab/.github | grpcio-status | 1.81.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | +| ContextualWisdomLab/.github | hypothesis | 6.163.0 | MPL-2.0 AND MPL-1.1 | +| ContextualWisdomLab/.github | interrogate | — | NOASSERTION | +| ContextualWisdomLab/.github | ossf/scorecard-action | v2.4.3 | NOASSERTION | +| ContextualWisdomLab/.github | pytest | — | NOASSERTION | +| ContextualWisdomLab/.github | pytest-cov | — | NOASSERTION | +| ContextualWisdomLab/.github | r-lib/actions | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | +| ContextualWisdomLab/.github | step-security/harden-runner | v2.13.2 | NOASSERTION | +| ContextualWisdomLab/.github | step-security/harden-runner | v2.20.0 | NOASSERTION | +| ContextualWisdomLab/.github | step-security/harden-runner | v2.20.1 | NOASSERTION | +| ContextualWisdomLab/.github | tqdm | 4.68.3 | MIT AND MPL-2.0 | +| ContextualWisdomLab/.github | typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/accounting-information-platform | accounting-information-platform | 0.1.0 | NOASSERTION | +| ContextualWisdomLab/accounting-information-platform | actions/attest | 508db95dd578ae2727ebd6217d5ba78e4fbda05d | NOASSERTION | +| ContextualWisdomLab/accounting-information-platform | actions/checkout | 631c942040754b6e095e929c1677c07e10ed4f87 | NOASSERTION | +| ContextualWisdomLab/accounting-information-platform | actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | +| ContextualWisdomLab/accounting-information-platform | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/accounting-information-platform | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/accounting-information-platform | aquasecurity/trivy-action | a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 | NOASSERTION | +| ContextualWisdomLab/accounting-information-platform | psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | +| ContextualWisdomLab/accounting-information-platform | psycopg-binary | 3.3.4 | GPL-3.0-or-later | +| ContextualWisdomLab/aFIPC | actions/checkout | de0fac2e4500dabe0009e67214ff5f5447ce83dd | NOASSERTION | +| ContextualWisdomLab/aFIPC | r-lib/actions/check-r-package | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | +| ContextualWisdomLab/aFIPC | r-lib/actions/setup-r | d3c5be51b12e724e68f33216ca3c148b66d5f0b6 | NOASSERTION | +| ContextualWisdomLab/aFIPC | r-lib/actions/setup-r-dependencies | d3c5be51b12e724e68f33216ca3c148b66d5f0b6 | NOASSERTION | +| ContextualWisdomLab/aFIPC | step-security/harden-runner | bf7454d06d71f1098171f2acdf0cd4708d7b5920 | NOASSERTION | +| ContextualWisdomLab/appguardrail | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/appguardrail | actions/create-github-app-token | bcd2ba49218906704ab6c1aa796996da409d3eb1 | NOASSERTION | +| ContextualWisdomLab/appguardrail | actions/download-artifact | 37930b1c2abaa49bbe596cd826c3c89aef350131 | NOASSERTION | +| ContextualWisdomLab/appguardrail | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/appguardrail | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/appguardrail | anomalyco/opencode/github | 77fc88c8ade8e5a620ebbe1197f3a572d29ae91a | NOASSERTION | +| ContextualWisdomLab/appguardrail | aquasecurity/trivy-action | ed142fd0673e97e23eac54620cfb913e5ce36c25 | NOASSERTION | +| ContextualWisdomLab/appguardrail | backports-tarfile | 1.2.0 | NOASSERTION | +| ContextualWisdomLab/appguardrail | certifi | 2026.6.17 | MPL-2.0 | +| ContextualWisdomLab/appguardrail | chardet | 5.2.0 | LGPL-2.1-or-later | +| ContextualWisdomLab/appguardrail | docutils | 0.23 | BSD-2-Clause AND BSD-3-Clause AND CC-PDDC AND GPL-1.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-scancode-other-copyleft AND LicenseRef-scancode-public-domain | +| ContextualWisdomLab/appguardrail | fqdn | 1.5.1 | MPL-2.0 | +| ContextualWisdomLab/appguardrail | github/codeql-action/upload-sarif | 5595ccaf912efad79be6eef63a5619ff05969be3 | NOASSERTION | +| ContextualWisdomLab/appguardrail | lark | 1.3.1 | MIT AND MPL-2.0 | +| ContextualWisdomLab/appguardrail | lxml | 6.1.1 | BSD-3-Clause AND GPL-1.0-or-later | +| ContextualWisdomLab/appguardrail | pypa/gh-action-pypi-publish | dc37677b2e1c63e2034f94d8a5b11f265b73ba33 | NOASSERTION | +| ContextualWisdomLab/appguardrail | rfc3987-syntax | 1.1.0 | Apache-2.0 AND GPL-1.0-or-later AND MIT | +| ContextualWisdomLab/appguardrail | setuptools | — | NOASSERTION | +| ContextualWisdomLab/appguardrail | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/bandscope | @bandscope/desktop | 0.1.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | @bandscope/shared-types | 0.1.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | @base-ui/react | ^1.5.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | @fontsource-variable/geist | ^5.2.9 | NOASSERTION | +| ContextualWisdomLab/bandscope | @storybook/react-vite | ^10.4.6 | NOASSERTION | +| ContextualWisdomLab/bandscope | @tailwindcss/vite | ^4.3.2 | NOASSERTION | +| ContextualWisdomLab/bandscope | @tauri-apps/api | ^2.11.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | @tauri-apps/cli | ^2.11.4 | NOASSERTION | +| ContextualWisdomLab/bandscope | @testing-library/jest-dom | ^6.6.3 | NOASSERTION | +| ContextualWisdomLab/bandscope | @testing-library/react | ^16.2.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | @types/node | ^26.1.1 | NOASSERTION | +| ContextualWisdomLab/bandscope | @types/react | ^19.2.17 | NOASSERTION | +| ContextualWisdomLab/bandscope | @types/react-dom | ^19.2.3 | NOASSERTION | +| ContextualWisdomLab/bandscope | @vitejs/plugin-react | ^6.0.2 | NOASSERTION | +| ContextualWisdomLab/bandscope | @vitest/coverage-v8 | ^4.1.10 | NOASSERTION | +| ContextualWisdomLab/bandscope | actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | +| ContextualWisdomLab/bandscope | actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | +| ContextualWisdomLab/bandscope | actions/setup-node | 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e | NOASSERTION | +| ContextualWisdomLab/bandscope | actions/setup-python | a309ff8b426b58ec0e2a45f0f869d46889d02405 | NOASSERTION | +| ContextualWisdomLab/bandscope | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/bandscope | anchore/sbom-action | e22c389904149dbc22b58101806040fa8d37a610 | NOASSERTION | +| ContextualWisdomLab/bandscope | aquasecurity/trivy-action | ed142fd0673e97e23eac54620cfb913e5ce36c25 | NOASSERTION | +| ContextualWisdomLab/bandscope | astral-sh/setup-uv | 11f9893b081a58869d3b5fccaea48c9e9e46f990 | NOASSERTION | +| ContextualWisdomLab/bandscope | bandscope-analysis | 0.1.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | bandscope-workspace | 0.1.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | certifi | 2026.2.25 | MPL-2.0 | +| ContextualWisdomLab/bandscope | class-variance-authority | ^0.7.1 | NOASSERTION | +| ContextualWisdomLab/bandscope | clsx | ^2.1.1 | NOASSERTION | +| ContextualWisdomLab/bandscope | cssparser | 0.36.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | cssparser-macros | 0.6.1 | MPL-2.0 | +| ContextualWisdomLab/bandscope | cuda-bindings | 13.3.1 | NOASSERTION | +| ContextualWisdomLab/bandscope | dtoa-short | 0.3.5 | MPL-2.0 | +| ContextualWisdomLab/bandscope | eslint | ^10.7.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | fast-check | ^4.8.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | github/codeql-action/upload-sarif | 99df26d4f13ea111d4ec1a7dddef6063f76b97e9 | NOASSERTION | +| ContextualWisdomLab/bandscope | jsdom | ^29.1.1 | NOASSERTION | +| ContextualWisdomLab/bandscope | lameenc | 1.8.4 | GPL-3.0-or-later | +| ContextualWisdomLab/bandscope | lightningcss | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-android-arm64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-darwin-arm64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-darwin-x64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-freebsd-x64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-arm-gnueabihf | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-arm64-gnu | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-arm64-musl | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-x64-gnu | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-x64-musl | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-win32-arm64-msvc | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-win32-x64-msvc | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | lucide-react | ^1.24.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | maturin | — | NOASSERTION | +| ContextualWisdomLab/bandscope | option-ext | 0.2.0 | MPL-2.0 | +| ContextualWisdomLab/bandscope | ossf/scorecard-action | 4eaacf0543bb3f2c246792bd56e8cdeffafb205a | NOASSERTION | +| ContextualWisdomLab/bandscope | pathspec | 1.0.4 | MPL-2.0 | +| ContextualWisdomLab/bandscope | r-efi | 5.3.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | +| ContextualWisdomLab/bandscope | r-efi | 6.0.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | +| ContextualWisdomLab/bandscope | react | ^19.2.4 | NOASSERTION | +| ContextualWisdomLab/bandscope | react-dom | ^19.2.7 | NOASSERTION | +| ContextualWisdomLab/bandscope | selectors | 0.36.1 | MPL-2.0 | +| ContextualWisdomLab/bandscope | serde | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | sonner | ^2.0.7 | NOASSERTION | +| ContextualWisdomLab/bandscope | soxr | 1.0.0 | Python-2.0 AND LGPL-2.1-or-later | +| ContextualWisdomLab/bandscope | storybook | ^10.4.6 | NOASSERTION | +| ContextualWisdomLab/bandscope | tailwind-merge | ^3.6.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | tailwindcss | ^4.2.4 | NOASSERTION | +| ContextualWisdomLab/bandscope | time | >= 0.3.0,< 0.4.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | tqdm | 4.68.3 | MIT AND MPL-2.0 | +| ContextualWisdomLab/bandscope | tw-animate-css | ^1.4.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | typescript | ^6.0.3 | NOASSERTION | +| ContextualWisdomLab/bandscope | typescript-eslint | ^8.63.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/bandscope | url | >= 2.5.8,< 3.0.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | uuid | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/bandscope | vite | ^8.1.4 | NOASSERTION | +| ContextualWisdomLab/bandscope | vitest | ^4.1.10 | NOASSERTION | +| ContextualWisdomLab/bandscope | yt-dlp | 2026.7.4 | Unlicense AND Unlicense AND GPL-3.0-or-later AND MPL-2.0 AND MIT AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-or-later AND BSD-3-Clause AND MIT AND LGPL-2.1-only AND BSD-2-Clause AND GPL-2.0-or-later | +| ContextualWisdomLab/clearfolio | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/clearfolio | actions/setup-java | b6effb05e454b25005698d916606bdc6ffcbf961 | NOASSERTION | +| ContextualWisdomLab/clearfolio | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/clearfolio | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/clearfolio | org.apache.maven.plugins:maven-compiler-plugin | — | NOASSERTION | +| ContextualWisdomLab/clearfolio | org.apache.maven.plugins:maven-surefire-plugin | — | NOASSERTION | +| ContextualWisdomLab/clearfolio | org.jacoco:jacoco-maven-plugin | 0.8.15 | EPL-2.0 OR (Apache-2.0 AND EPL-2.0) | +| ContextualWisdomLab/clearfolio | org.springframework.boot:spring-boot-maven-plugin | — | NOASSERTION | +| ContextualWisdomLab/clearfolio | org.springframework.boot:spring-boot-starter-log4j2 | — | NOASSERTION | +| ContextualWisdomLab/clearfolio | org.springframework.boot:spring-boot-starter-test | — | NOASSERTION | +| ContextualWisdomLab/clearfolio | org.springframework.boot:spring-boot-starter-validation | — | NOASSERTION | +| ContextualWisdomLab/clearfolio | org.springframework.boot:spring-boot-starter-webflux | — | NOASSERTION | +| ContextualWisdomLab/codec-carver | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/codec-carver | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/codec-carver | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/codec-carver | aiofiles | — | NOASSERTION | +| ContextualWisdomLab/codec-carver | aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | +| ContextualWisdomLab/codec-carver | certifi | 2026.6.17 | MPL-2.0 | +| ContextualWisdomLab/codec-carver | coverage | — | NOASSERTION | +| ContextualWisdomLab/codec-carver | fastapi | — | NOASSERTION | +| ContextualWisdomLab/codec-carver | httpx | — | NOASSERTION | +| ContextualWisdomLab/codec-carver | hypothesis | — | NOASSERTION | +| ContextualWisdomLab/codec-carver | hypothesis | 6.165.0 | MPL-2.0 | +| ContextualWisdomLab/codec-carver | mcp | — | NOASSERTION | +| ContextualWisdomLab/codec-carver | python-multipart | — | NOASSERTION | +| ContextualWisdomLab/codec-carver | tqdm | 4.68.4 | MIT AND MPL-2.0 | +| ContextualWisdomLab/codec-carver | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/codec-carver | uvicorn | — | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @chromatic-com/storybook | latest | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @storybook/addon-a11y | ^10.5.10 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @storybook/addon-docs | ^10.5.10 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @storybook/addon-vitest | ^10.5.10 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @storybook/react-vite | ^10.5.10 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @types/node | ^24.13.3 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @types/react | ^19.2.18 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @types/react-dom | ^19.2.4 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @vitejs/plugin-react | ^6.1.0 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @vitest/browser-playwright | latest | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | @vitest/coverage-v8 | latest | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | actions/setup-node | 820762786026740c76f36085b0efc47a31fe5020 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | actions/setup-python | ece7cb06caefa5fff74198d8649806c4678c61a1 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | actions/upload-artifact | 330a01c490aca151604b8cf639adc76d48f6c5d4 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | alembic | — | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | astral-sh/setup-uv | 20cfd1bf945f4377ade1205e4dbc17946fc9a30d | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | axe-core | 4.13.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | certifi | 2026.6.17 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | certifi | 2026.7.22 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | chardet | 5.2.0 | LGPL-2.1-or-later | +| ContextualWisdomLab/contextual-orchestrator | contextual-orchestrator | 0.2.0 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | fast-mlsirm | 0.9.1 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | fastapi | — | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | fqdn | 1.5.1 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | github/codeql-action/analyze | db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | github/codeql-action/init | db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | hypothesis | — | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | hypothesis | 6.165.10 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | hypothesis | 6.165.3 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lark | 1.3.1 | MIT AND MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/contextual-orchestrator | lxml | 6.1.1 | BSD-3-Clause AND GPL-1.0-or-later | +| ContextualWisdomLab/contextual-orchestrator | maturin | — | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-darwin-arm64 | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-darwin-x64 | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-darwin-x64-baseline | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-linux-arm64 | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-linux-arm64-musl | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-linux-x64 | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-linux-x64-baseline | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-linux-x64-baseline-musl | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-linux-x64-musl | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-windows-x64 | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | opencode-windows-x64-baseline | 1.18.22 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | oxlint | ^1.79.0 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | pip | — | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | playwright | latest | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | psycopg | — | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | +| ContextualWisdomLab/contextual-orchestrator | psycopg-binary | 3.3.4 | GPL-3.0-or-later | +| ContextualWisdomLab/contextual-orchestrator | pyo3 | >= 0.29.0,< 0.30.0 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | rayon | >= 1.10.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | react | ^19.2.8 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | react-dom | ^19.2.8 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | regex-automata | 0.4.18 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | rfc3987-syntax | 1.1.0 | Apache-2.0 AND GPL-1.0-or-later AND MIT | +| ContextualWisdomLab/contextual-orchestrator | serde | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | sqlalchemy | — | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | storybook | ^10.5.10 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | tiktoken-rs | >= 0.7.0,< 0.8.0 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | typescript | ~6.0.2 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/contextual-orchestrator | uvicorn | — | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | vite | ^8.2.2 | NOASSERTION | +| ContextualWisdomLab/contextual-orchestrator | vitest | latest | NOASSERTION | +| ContextualWisdomLab/ContextualWisdomLab.github.io | actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | +| ContextualWisdomLab/ContextualWisdomLab.github.io | github/codeql-action/analyze | 99df26d4f13ea111d4ec1a7dddef6063f76b97e9 | NOASSERTION | +| ContextualWisdomLab/ContextualWisdomLab.github.io | github/codeql-action/init | 99df26d4f13ea111d4ec1a7dddef6063f76b97e9 | NOASSERTION | +| ContextualWisdomLab/disksage | actions/attest | 1e69f48acb82d1966a394da916b4c1698aa569d6 | NOASSERTION | +| ContextualWisdomLab/disksage | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/disksage | actions/download-artifact | 37930b1c2abaa49bbe596cd826c3c89aef350131 | NOASSERTION | +| ContextualWisdomLab/disksage | actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | +| ContextualWisdomLab/disksage | actions/setup-node | 820762786026740c76f36085b0efc47a31fe5020 | NOASSERTION | +| ContextualWisdomLab/disksage | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/disksage | cssparser | 0.36.0 | MPL-2.0 | +| ContextualWisdomLab/disksage | cssparser-macros | 0.6.1 | MPL-2.0 | +| ContextualWisdomLab/disksage | dtoa-short | 0.3.5 | MPL-2.0 | +| ContextualWisdomLab/disksage | dtolnay/rust-toolchain | 4be7066ada62dd38de10e7b70166bc74ed198c30 | NOASSERTION | +| ContextualWisdomLab/disksage | ilammy/msvc-dev-cmd | 0b201ec74fa43914dc39ae48a89fd1d8cb592756 | NOASSERTION | +| ContextualWisdomLab/disksage | jakoch/install-vulkan-sdk-action | 37effcfa045411f8bfbbda26df2fd1b3bf3436fa | NOASSERTION | +| ContextualWisdomLab/disksage | Jimver/cuda-toolkit | b8bf9c6c28f8a92fbb04dcfcaee872e60c57462d | NOASSERTION | +| ContextualWisdomLab/disksage | mlsirm-core | 0.7.0 | NOASSERTION | +| ContextualWisdomLab/disksage | option-ext | 0.2.0 | MPL-2.0 | +| ContextualWisdomLab/disksage | r-efi | 5.3.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | +| ContextualWisdomLab/disksage | r-efi | 6.0.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | +| ContextualWisdomLab/disksage | selectors | 0.36.1 | MPL-2.0 | +| ContextualWisdomLab/disksage | softprops/action-gh-release | 3d0d9888cb7fd7b750713d6e236d1fcb99157228 | NOASSERTION | +| ContextualWisdomLab/disksage | Swatinem/rust-cache | 6323deb102c322ba6fcbdcafc7e3dddab59af2b6 | NOASSERTION | +| ContextualWisdomLab/disksage | webpki-roots | 1.0.8 | NOASSERTION | +| ContextualWisdomLab/disksage | zbus | 5.17.0 | NOASSERTION | +| ContextualWisdomLab/disksage | zbus-secret-service-keyring-store | 1.0.0 | NOASSERTION | +| ContextualWisdomLab/disksage | zbus_macros | 5.17.0 | NOASSERTION | +| ContextualWisdomLab/disksage | zbus_names | 4.3.3 | NOASSERTION | +| ContextualWisdomLab/disksage | zvariant | 5.13.0 | NOASSERTION | +| ContextualWisdomLab/disksage | zvariant_derive | 5.13.0 | NOASSERTION | +| ContextualWisdomLab/disksage | zvariant_utils | 3.5.0 | NOASSERTION | +| ContextualWisdomLab/EgressWeave | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/EgressWeave | actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | +| ContextualWisdomLab/EgressWeave | actions/download-artifact | d3f86a106a0bac45b974a628896c90dbdf5c8093 | NOASSERTION | +| ContextualWisdomLab/EgressWeave | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/EgressWeave | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/EgressWeave | actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | +| ContextualWisdomLab/EgressWeave | backports-asyncio-runner | 1.2.0 | NOASSERTION | +| ContextualWisdomLab/EgressWeave | certifi | 2026.7.22 | MPL-2.0 | +| ContextualWisdomLab/EgressWeave | coverage | — | NOASSERTION | +| ContextualWisdomLab/EgressWeave | hatchling | — | NOASSERTION | +| ContextualWisdomLab/EgressWeave | idna | — | NOASSERTION | +| ContextualWisdomLab/EgressWeave | pathspec | — | NOASSERTION | +| ContextualWisdomLab/EgressWeave | pypa/gh-action-pypi-publish | dc37677b2e1c63e2034f94d8a5b11f265b73ba33 | NOASSERTION | +| ContextualWisdomLab/EgressWeave | pytest | — | NOASSERTION | +| ContextualWisdomLab/EgressWeave | pytest-asyncio | — | NOASSERTION | +| ContextualWisdomLab/EgressWeave | step-security/harden-runner | bf7454d06d71f1098171f2acdf0cd4708d7b5920 | NOASSERTION | +| ContextualWisdomLab/EgressWeave | trove-classifiers | — | NOASSERTION | +| ContextualWisdomLab/EgressWeave | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/fast-mlsirm | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | bytemuck | >= 1.25.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | dtolnay/rust-toolchain | 4be7066ada62dd38de10e7b70166bc74ed198c30 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | fast-mlsirm | 0.9.1 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | github/codeql-action/analyze | ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | github/codeql-action/init | ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | google/clusterfuzzlite/actions/build_fuzzers | 884713a6c30a92e5e8544c39945cd7cb630abcd1 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | google/clusterfuzzlite/actions/run_fuzzers | 884713a6c30a92e5e8544c39945cd7cb630abcd1 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | hypothesis | 6.156.6 | MPL-2.0 AND MPL-1.1 | +| ContextualWisdomLab/fast-mlsirm | maturin | — | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | numpy | — | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | pollster | >= 1.0.1,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | proptest | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | PyO3/maturin-action | e83996d129638aa358a18fbd1dfb82f0b0fb5d3b | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | pypa/gh-action-pypi-publish | dc37677b2e1c63e2034f94d8a5b11f265b73ba33 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | pytest | — | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | r-efi | 5.3.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | +| ContextualWisdomLab/fast-mlsirm | r-efi | 6.0.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | +| ContextualWisdomLab/fast-mlsirm | serde | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | sha2 | >= 0.10.9,< 0.11.0 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | time | >= 0.3.0,< 0.4.0 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | time-macros | 0.2.32 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | uuid | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/fast-mlsirm | wgpu | >= 30.0.0,< 31.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | axum | >= 0.7.0,< 0.8.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | base64 | >= 0.22.0,< 0.23.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | cryptography | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | ext-curl | >= 0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | ext-dom | >= 0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | ext-mcrypt | >= 0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | ext-openssl | >= 0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | fastapi | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | flate2 | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | form_urlencoded | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | httpx | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | itsdangerous | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | jinja2 | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | jsonwebtoken | >= 10.3.0,< 11.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | lxml | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | Microsoft.AspNet.Mvc | 5.2.9 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | Microsoft.AspNet.Mvc.ko | 5.2.9 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | Microsoft.AspNet.WebPages | 3.2.9 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | pem | >= 3.0.0,< 4.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | php | >= 5.3.2 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | phploc/phploc | >= 0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | phpunit/phpunit | 4.8 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | pyjwt | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | pytest | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | python-multipart | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | rand | >= 0.8.0,< 0.9.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | reqwest | >= 0.12.0,< 0.13.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | roxmltree | >= 0.20.0,< 0.21.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | rsa | >= 0.9.0,< 0.10.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | rust-xmlsec | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | sebastian/phpcpd | >= 0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | serde | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | sha2 | >= 0.10.0,< 0.11.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | signxml | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | System.IdentityModel.Tokens.Jwt | 5.4.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | thiserror | >= 2.0.0,< 3.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | time | >= 0.3.0,< 0.4.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | tokio | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | tower-sessions | >= 0.13.0,< 0.14.0 | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | uvicorn | — | NOASSERTION | +| ContextualWisdomLab/feelanet-adfs | x509-parser | >= 0.16.0,< 0.17.0 | NOASSERTION | +| ContextualWisdomLab/four-pillars | actions/checkout | 11d5960a326750d5838078e36cf38b85af677262 | NOASSERTION | +| ContextualWisdomLab/four-pillars | actions/create-github-app-token | bcd2ba49218906704ab6c1aa796996da409d3eb1 | NOASSERTION | +| ContextualWisdomLab/four-pillars | actions/download-artifact | d3f86a106a0bac45b974a628896c90dbdf5c8093 | NOASSERTION | +| ContextualWisdomLab/four-pillars | actions/setup-python | a26af69be951a213d495a4c3e4e4022e16d87065 | NOASSERTION | +| ContextualWisdomLab/four-pillars | actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | +| ContextualWisdomLab/four-pillars | certifi | 2026.7.22 | MPL-2.0 | +| ContextualWisdomLab/four-pillars | fastapi | >= 0.115,< 1 | NOASSERTION | +| ContextualWisdomLab/four-pillars | httpx | >= 0.27,< 1 | NOASSERTION | +| ContextualWisdomLab/four-pillars | jinja2 | >= 3.1,< 4 | NOASSERTION | +| ContextualWisdomLab/four-pillars | korean-lunar-calendar | >= 0.3.1,< 1 | NOASSERTION | +| ContextualWisdomLab/four-pillars | pathspec | 1.1.1 | MPL-2.0 | +| ContextualWisdomLab/four-pillars | pydantic | >= 2.10,< 3 | NOASSERTION | +| ContextualWisdomLab/four-pillars | pydantic-settings | >= 2.7,< 3 | NOASSERTION | +| ContextualWisdomLab/four-pillars | python-multipart | >= 0.0.20,< 1 | NOASSERTION | +| ContextualWisdomLab/four-pillars | reportlab | >= 4.2,< 5 | NOASSERTION | +| ContextualWisdomLab/four-pillars | typer | >= 0.15,< 1 | NOASSERTION | +| ContextualWisdomLab/four-pillars | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/four-pillars | uvicorn | — | NOASSERTION | +| ContextualWisdomLab/gyeot | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/gyeot | actions/setup-node | 249970729cb0ef3589644e2896645e5dc5ba9c38 | NOASSERTION | +| ContextualWisdomLab/gyeot | actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | +| ContextualWisdomLab/gyeot | lightningcss | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/gyeot | node-forge | 1.4.0 | BSD-3-Clause OR GPL-2.0-only | +| ContextualWisdomLab/hyosung-itx-slogan-brief | actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | +| ContextualWisdomLab/hyosung-itx-slogan-brief | actions/setup-node | 49933ea5288caeca8642d1e84afbd3f7d6820020 | NOASSERTION | +| ContextualWisdomLab/inkspan | actions/attest | 59d89421af93a897026c735860bf21b6eb4f7b26 | NOASSERTION | +| ContextualWisdomLab/inkspan | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/inkspan | actions/download-artifact | 37930b1c2abaa49bbe596cd826c3c89aef350131 | NOASSERTION | +| ContextualWisdomLab/inkspan | actions/setup-node | 820762786026740c76f36085b0efc47a31fe5020 | NOASSERTION | +| ContextualWisdomLab/inkspan | actions/setup-python | a26af69be951a213d495a4c3e4e4022e16d87065 | NOASSERTION | +| ContextualWisdomLab/inkspan | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/inkspan | lxml | 6.1.0 | BSD-3-Clause AND GPL-1.0-or-later | +| ContextualWisdomLab/inkspan | openpyxl | >= 3.1.5,< 4 | NOASSERTION | +| ContextualWisdomLab/inkspan | pnpm/action-setup | 0977fd99725f1db4007ccb2928dbb4e90d06cc86 | NOASSERTION | +| ContextualWisdomLab/inkspan | pypa/gh-action-pypi-publish | dc37677b2e1c63e2034f94d8a5b11f265b73ba33 | NOASSERTION | +| ContextualWisdomLab/inkspan | python-docx | >= 1.2.0,< 2 | NOASSERTION | +| ContextualWisdomLab/inkspan | python-pptx | >= 1.0.2,< 2 | NOASSERTION | +| ContextualWisdomLab/inkspan | sigstore/cosign-installer | 6f9f17788090df1f26f669e9d70d6ae9567deba6 | NOASSERTION | +| ContextualWisdomLab/inkspan | typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/kaefa | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/kaefa | r-lib/actions/check-r-package | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | +| ContextualWisdomLab/kaefa | r-lib/actions/setup-pandoc | d3c5be51b12e724e68f33216ca3c148b66d5f0b6 | NOASSERTION | +| ContextualWisdomLab/kaefa | r-lib/actions/setup-r | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | +| ContextualWisdomLab/kaefa | r-lib/actions/setup-r-dependencies | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | +| ContextualWisdomLab/keyverse | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/keyverse | actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | +| ContextualWisdomLab/keyverse | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/keyverse | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/keyverse | astral-sh/setup-uv | 20cfd1bf945f4377ade1205e4dbc17946fc9a30d | NOASSERTION | +| ContextualWisdomLab/keyverse | certifi | 2026.7.22 | MPL-2.0 | +| ContextualWisdomLab/keyverse | cwl-idp-account-unification | 0.1.0 | NOASSERTION | +| ContextualWisdomLab/keyverse | fastapi | — | NOASSERTION | +| ContextualWisdomLab/keyverse | httpx | — | NOASSERTION | +| ContextualWisdomLab/keyverse | pydantic | — | NOASSERTION | +| ContextualWisdomLab/keyverse | pytest | — | NOASSERTION | +| ContextualWisdomLab/keyverse | pyyaml | — | NOASSERTION | +| ContextualWisdomLab/keyverse | ruff | — | NOASSERTION | +| ContextualWisdomLab/keyverse | setuptools | — | NOASSERTION | +| ContextualWisdomLab/keyverse | step-security/harden-runner | 05e31511f85b41b11d1cf0ef85d0992719546e2c | NOASSERTION | +| ContextualWisdomLab/keyverse | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/keyverse | uvicorn | — | NOASSERTION | +| ContextualWisdomLab/linux-cluster-ops | actions/attest-build-provenance | a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 | NOASSERTION | +| ContextualWisdomLab/linux-cluster-ops | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/linux-cluster-ops | actions/setup-python | ece7cb06caefa5fff74198d8649806c4678c61a1 | NOASSERTION | +| ContextualWisdomLab/linux-cluster-ops | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/mightyETL | actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | +| ContextualWisdomLab/mightyETL | actions/dependency-review-action | a1d282b36b6f3519aa1f3fc636f609c47dddb294 | NOASSERTION | +| ContextualWisdomLab/mightyETL | actions/setup-java | 1bcf9fb12cf4aa7d266a90ae39939e61372fe520 | NOASSERTION | +| ContextualWisdomLab/mightyETL | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/mightyETL | com.fasterxml.jackson.core:jackson-databind | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | com.h2database:h2 | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | github/codeql-action/analyze | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | +| ContextualWisdomLab/mightyETL | github/codeql-action/autobuild | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | +| ContextualWisdomLab/mightyETL | github/codeql-action/init | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | +| ContextualWisdomLab/mightyETL | github/codeql-action/upload-sarif | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | +| ContextualWisdomLab/mightyETL | io.debezium:debezium-api | 3.4.0 | NOASSERTION | +| ContextualWisdomLab/mightyETL | io.debezium:debezium-connector-postgres | 3.4.0 | NOASSERTION | +| ContextualWisdomLab/mightyETL | io.debezium:debezium-embedded | 3.4.0 | NOASSERTION | +| ContextualWisdomLab/mightyETL | io.micrometer:micrometer-tracing-bridge-brave | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | io.zipkin.reporter2:zipkin-reporter-brave | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.apache.maven.plugins:maven-dependency-plugin | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.flywaydb:flyway-core | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.flywaydb:flyway-database-postgresql | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.jacoco:jacoco-maven-plugin | 0.8.15 | EPL-2.0 OR (Apache-2.0 AND EPL-2.0) | +| ContextualWisdomLab/mightyETL | org.junit.jupiter:junit-jupiter-api | 5.12.2 | EPL-2.0 | +| ContextualWisdomLab/mightyETL | org.junit.jupiter:junit-jupiter-engine | 5.12.2 | EPL-2.0 | +| ContextualWisdomLab/mightyETL | org.junit.platform:junit-platform-commons | 1.12.2 | EPL-2.0 | +| ContextualWisdomLab/mightyETL | org.junit.platform:junit-platform-engine | 1.12.2 | EPL-2.0 | +| ContextualWisdomLab/mightyETL | org.junit.platform:junit-platform-launcher | 1.12.2 | EPL-2.0 | +| ContextualWisdomLab/mightyETL | org.postgresql:postgresql | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.boot:spring-boot-configuration-processor | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.boot:spring-boot-maven-plugin | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.boot:spring-boot-starter-actuator | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.boot:spring-boot-starter-aop | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.boot:spring-boot-starter-data-jpa | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.boot:spring-boot-starter-security | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.boot:spring-boot-starter-test | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.boot:spring-boot-starter-web | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.cloud:spring-cloud-config-server | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.cloud:spring-cloud-starter-gateway | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.cloud:spring-cloud-starter-netflix-eureka-client | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.cloud:spring-cloud-starter-netflix-eureka-server | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.kafka:spring-kafka | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.retry:spring-retry | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | org.springframework.security:spring-security-test | — | NOASSERTION | +| ContextualWisdomLab/mightyETL | ossf/scorecard-action | 4eaacf0543bb3f2c246792bd56e8cdeffafb205a | NOASSERTION | +| ContextualWisdomLab/naruon | @img/sharp-libvips-darwin-arm64 | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-libvips-darwin-x64 | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-libvips-linux-arm | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-libvips-linux-arm64 | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-libvips-linux-ppc64 | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-libvips-linux-riscv64 | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-libvips-linux-s390x | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-libvips-linux-x64 | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-libvips-linuxmusl-arm64 | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-libvips-linuxmusl-x64 | 1.3.0 | LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-wasm32 | 0.35.0 | Apache-2.0 AND LGPL-3.0-or-later AND MIT | +| ContextualWisdomLab/naruon | @img/sharp-win32-arm64 | 0.35.0 | Apache-2.0 AND LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-win32-ia32 | 0.35.0 | Apache-2.0 AND LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | @img/sharp-win32-x64 | 0.35.0 | Apache-2.0 AND LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | actions/cache | 55cc8345863c7cc4c66a329aec7e433d2d1c52a9 | NOASSERTION | +| ContextualWisdomLab/naruon | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/naruon | actions/dependency-review-action | a1d282b36b6f3519aa1f3fc636f609c47dddb294 | NOASSERTION | +| ContextualWisdomLab/naruon | actions/setup-node | 820762786026740c76f36085b0efc47a31fe5020 | NOASSERTION | +| ContextualWisdomLab/naruon | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/naruon | aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | +| ContextualWisdomLab/naruon | aioimaplib | 2.0.1 | GPL-3.0 AND GPL-3.0-only AND GPL-3.0-or-later | +| ContextualWisdomLab/naruon | axe-core | 4.12.1 | MPL-2.0 | +| ContextualWisdomLab/naruon | caido-server-auth | 0.1.2 | NOASSERTION | +| ContextualWisdomLab/naruon | certifi | 2026.6.17 | MPL-2.0 | +| ContextualWisdomLab/naruon | cvss | 3.6 | LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later | +| ContextualWisdomLab/naruon | dnspython | 2.8.0 | ISC AND MPL-2.0 | +| ContextualWisdomLab/naruon | docker/build-push-action | 53b7df96c91f9c12dcc8a07bcb9ccacbed38856a | NOASSERTION | +| ContextualWisdomLab/naruon | docker/login-action | dbcb813823bdd20940b903addbd779551569679f | NOASSERTION | +| ContextualWisdomLab/naruon | docker/metadata-action | dc802804100637a589fabce1cb79ff13a1411302 | NOASSERTION | +| ContextualWisdomLab/naruon | docker/setup-buildx-action | bb05f3f5519dd87d3ba754cc423b652a5edd6d2c | NOASSERTION | +| ContextualWisdomLab/naruon | docker/setup-qemu-action | 96fe6ef7f33517b61c61be40b68a1882f3264fb8 | NOASSERTION | +| ContextualWisdomLab/naruon | github/codeql-action/upload-sarif | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | +| ContextualWisdomLab/naruon | grpcio | 1.81.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | +| ContextualWisdomLab/naruon | grpcio | 1.82.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | +| ContextualWisdomLab/naruon | grpcio-status | 1.81.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-android-arm64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-darwin-arm64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-darwin-x64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-freebsd-x64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-arm-gnueabihf | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-arm64-gnu | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-arm64-musl | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-x64-gnu | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-x64-musl | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-win32-arm64-msvc | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-win32-x64-msvc | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/naruon | naruon-backend | 0.14.4 | NOASSERTION | +| ContextualWisdomLab/naruon | orjson | 3.11.9 | Apache-2.0 AND MIT AND MPL-2.0 | +| ContextualWisdomLab/naruon | rankweave | 0.1.0 | NOASSERTION | +| ContextualWisdomLab/naruon | step-security/harden-runner | bf7454d06d71f1098171f2acdf0cd4708d7b5920 | NOASSERTION | +| ContextualWisdomLab/naruon | tqdm | 4.68.3 | MIT AND MPL-2.0 | +| ContextualWisdomLab/naruon | tqdm | 4.68.4 | MIT AND MPL-2.0 | +| ContextualWisdomLab/naruon | typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/naruon | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/newsdom-api | actions/attest-build-provenance | 0f67c3f4856b2e3261c31976d6725780e5e4c373 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | actions/dependency-review-action | a1d282b36b6f3519aa1f3fc636f609c47dddb294 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | actions/deploy-pages | cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/newsdom-api | astral-sh/setup-uv | c771a70e6277c0a99b617c7a806ffedaca235ff9 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | backports-asyncio-runner | 1.2.0 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | certifi | 2026.2.25 | MPL-2.0 | +| ContextualWisdomLab/newsdom-api | docker/build-push-action | 53b7df96c91f9c12dcc8a07bcb9ccacbed38856a | NOASSERTION | +| ContextualWisdomLab/newsdom-api | docker/login-action | dbcb813823bdd20940b903addbd779551569679f | NOASSERTION | +| ContextualWisdomLab/newsdom-api | docker/metadata-action | dc802804100637a589fabce1cb79ff13a1411302 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | docker/setup-buildx-action | bb05f3f5519dd87d3ba754cc423b652a5edd6d2c | NOASSERTION | +| ContextualWisdomLab/newsdom-api | docker/setup-qemu-action | 96fe6ef7f33517b61c61be40b68a1882f3264fb8 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | github/codeql-action/analyze | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | github/codeql-action/autobuild | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | github/codeql-action/init | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | github/codeql-action/upload-sarif | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | google/clusterfuzzlite/actions/build_fuzzers | 52ecc61cb587ee99c26825a112a21abf19c7448c | NOASSERTION | +| ContextualWisdomLab/newsdom-api | google/clusterfuzzlite/actions/run_fuzzers | 52ecc61cb587ee99c26825a112a21abf19c7448c | NOASSERTION | +| ContextualWisdomLab/newsdom-api | newsdom-api | 0.2.0 | NOASSERTION | +| ContextualWisdomLab/newsdom-api | ossf/scorecard-action | 2d1146689b8cda280b9bc96326124645441f03bc | NOASSERTION | +| ContextualWisdomLab/newsdom-api | pathspec | 1.0.4 | MPL-2.0 | +| ContextualWisdomLab/newsdom-api | pyinstaller | 6.21.0 | GPL-2.0-only AND GPL-2.0-or-later | +| ContextualWisdomLab/newsdom-api | pyinstaller-hooks-contrib | 2026.6 | Apache-2.0 AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later | +| ContextualWisdomLab/newsdom-api | typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/noema | @img/sharp-libvips-darwin-arm64 | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-libvips-darwin-x64 | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-libvips-linux-arm | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-libvips-linux-arm64 | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-libvips-linux-ppc64 | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-libvips-linux-riscv64 | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-libvips-linux-s390x | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-libvips-linux-x64 | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-libvips-linuxmusl-arm64 | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-libvips-linuxmusl-x64 | 1.3.2 | LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-wasm32 | 0.35.3 | Apache-2.0 AND LGPL-3.0-or-later AND MIT | +| ContextualWisdomLab/noema | @img/sharp-win32-arm64 | 0.35.3 | Apache-2.0 AND LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-win32-ia32 | 0.35.3 | Apache-2.0 AND LGPL-3.0-or-later | +| ContextualWisdomLab/noema | @img/sharp-win32-x64 | 0.35.3 | Apache-2.0 AND LGPL-3.0-or-later | +| ContextualWisdomLab/noema | actions/attest | 59d89421af93a897026c735860bf21b6eb4f7b26 | NOASSERTION | +| ContextualWisdomLab/noema | actions/checkout | 11bd71901bbe5b1630ceea73d27597364c9af683 | NOASSERTION | +| ContextualWisdomLab/noema | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/noema | actions/checkout | de0fac2e4500dabe0009e67214ff5f5447ce83dd | NOASSERTION | +| ContextualWisdomLab/noema | actions/create-github-app-token | bcd2ba49218906704ab6c1aa796996da409d3eb1 | NOASSERTION | +| ContextualWisdomLab/noema | actions/download-artifact | d3f86a106a0bac45b974a628896c90dbdf5c8093 | NOASSERTION | +| ContextualWisdomLab/noema | actions/setup-node | 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e | NOASSERTION | +| ContextualWisdomLab/noema | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/noema | actions/setup-python | a26af69be951a213d495a4c3e4e4022e16d87065 | NOASSERTION | +| ContextualWisdomLab/noema | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/noema | aquasecurity/setup-trivy | 81e514348e19b6112ce2a7e3ecbafe19c1e1f567 | NOASSERTION | +| ContextualWisdomLab/noema | certifi | 2026.6.17 | MPL-2.0 | +| ContextualWisdomLab/noema | docker/setup-buildx-action | 37fe631027851001ddb9b187196cc803df7f5f0e | NOASSERTION | +| ContextualWisdomLab/noema | interrogate | — | NOASSERTION | +| ContextualWisdomLab/noema | lightningcss | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-android-arm64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-darwin-arm64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-darwin-x64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-freebsd-x64 | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-linux-arm-gnueabihf | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-linux-arm64-gnu | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-linux-arm64-musl | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-linux-x64-gnu | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-linux-x64-musl | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-win32-arm64-msvc | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | lightningcss-win32-x64-msvc | 1.32.0 | MPL-2.0 | +| ContextualWisdomLab/noema | pydantic | — | NOASSERTION | +| ContextualWisdomLab/noema | pydantic-ai-slim | — | NOASSERTION | +| ContextualWisdomLab/noema | pytest | — | NOASSERTION | +| ContextualWisdomLab/noema | pytest-cov | — | NOASSERTION | +| ContextualWisdomLab/noema | setuptools | — | NOASSERTION | +| ContextualWisdomLab/noema | sigstore/cosign-installer | 6f9f17788090df1f26f669e9d70d6ae9567deba6 | NOASSERTION | +| ContextualWisdomLab/noema | tqdm | 4.68.4 | MIT AND MPL-2.0 | +| ContextualWisdomLab/noema | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/OriginWeave | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/OriginWeave | actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | +| ContextualWisdomLab/OriginWeave | dtolnay/rust-toolchain | 4be7066ada62dd38de10e7b70166bc74ed198c30 | NOASSERTION | +| ContextualWisdomLab/OriginWeave | step-security/harden-runner | bf7454d06d71f1098171f2acdf0cd4708d7b5920 | NOASSERTION | +| ContextualWisdomLab/OriginWeave | time-macros | 0.2.32 | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | actions/setup-node | 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | actions/setup-python | ece7cb06caefa5fff74198d8649806c4678c61a1 | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | aiohttp | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | alembic | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | asyncpg | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | asyncpg-stubs | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | cryptography | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | fastapi | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | github/codeql-action/analyze | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | github/codeql-action/autobuild | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | github/codeql-action/init | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | httpx | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | hypercorn | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | lightningcss | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | +| ContextualWisdomLab/pg-erd-cloud | mypy | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | prometheus-client | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | psycopg | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | pydantic | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | pydantic-settings | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | pyjwt | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | pytest | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | pytest-asyncio | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | pytest-cov | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | python-jose | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | python-multipart | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | redis | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | requests | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | setuptools | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | snowflake-connector-python | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | sqlalchemy | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | starlette | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | step-security/harden-runner | b09bb98e06d4d774595224525879c09bc6e98c40 | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | types-python-jose | — | NOASSERTION | +| ContextualWisdomLab/pg-erd-cloud | urllib3 | — | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | +| ContextualWisdomLab/pg-llm-batch | aiohttp | — | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | astral-sh/setup-uv | c771a70e6277c0a99b617c7a806ffedaca235ff9 | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | backports-asyncio-runner | 1.2.0 | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | cryptography | — | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | pg-llm-batch | 0.1.0 | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | psycopg | — | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | +| ContextualWisdomLab/pg-llm-batch | psycopg-binary | 3.3.4 | GPL-3.0-or-later | +| ContextualWisdomLab/pg-llm-batch | pytest | — | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | pytest-asyncio | — | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | setuptools | — | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | step-security/harden-runner | b09bb98e06d4d774595224525879c09bc6e98c40 | NOASSERTION | +| ContextualWisdomLab/pg-llm-batch | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/scopeweave | actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | +| ContextualWisdomLab/scopeweave | actions/configure-pages | 45bfe0192ca1faeb007ade9deae92b16b8254a0d | NOASSERTION | +| ContextualWisdomLab/scopeweave | actions/dependency-review-action | a1d282b36b6f3519aa1f3fc636f609c47dddb294 | NOASSERTION | +| ContextualWisdomLab/scopeweave | actions/deploy-pages | cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 | NOASSERTION | +| ContextualWisdomLab/scopeweave | actions/setup-node | 2028fbc5c25fe9cf00d9f06a71cc4710d4507903 | NOASSERTION | +| ContextualWisdomLab/scopeweave | actions/setup-node | 39370e3970a6d050c480ffad4ff0ed4d3fdee5af | NOASSERTION | +| ContextualWisdomLab/scopeweave | actions/upload-pages-artifact | fc324d3547104276b827a68afc52ff2a11cc49c9 | NOASSERTION | +| ContextualWisdomLab/scopeweave | github/codeql-action/analyze | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | +| ContextualWisdomLab/scopeweave | github/codeql-action/init | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | +| ContextualWisdomLab/scopeweave | google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml | 3a7550f43ba5b58905a821ce3a0ed24c4858b3f4 | NOASSERTION | +| ContextualWisdomLab/semantic-data-portal | actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | +| ContextualWisdomLab/semantic-data-portal | actions/setup-python | ece7cb06caefa5fff74198d8649806c4678c61a1 | NOASSERTION | +| ContextualWisdomLab/semantic-data-portal | actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | +| ContextualWisdomLab/semantic-data-portal | certifi | 2026.6.17 | MPL-2.0 | +| ContextualWisdomLab/semantic-data-portal | github/codeql-action/upload-sarif | 54f647b7e1bb85c95cddabcd46b0c578ec92bc1a | NOASSERTION | +| ContextualWisdomLab/semantic-data-portal | hypothesis | — | NOASSERTION | +| ContextualWisdomLab/semantic-data-portal | hypothesis | 6.156.6 | MPL-2.0 AND MPL-1.1 | +| ContextualWisdomLab/semantic-data-portal | ossf/scorecard-action | 4eaacf0543bb3f2c246792bd56e8cdeffafb205a | NOASSERTION | +| ContextualWisdomLab/semantic-data-portal | psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | +| ContextualWisdomLab/semantic-data-portal | psycopg-binary | 3.3.4 | GPL-3.0-or-later | +| ContextualWisdomLab/semantic-data-portal | sqlalchemy | — | NOASSERTION | +| ContextualWisdomLab/semantic-data-portal | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/wardnet | actions/cache | 0057852bfaa89a56745cba8c7296529d2fc39830 | NOASSERTION | +| ContextualWisdomLab/wardnet | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/wardnet | actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | +| ContextualWisdomLab/wardnet | arbitrary | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/wardnet | dtolnay/rust-toolchain | 4be7066ada62dd38de10e7b70166bc74ed198c30 | NOASSERTION | +| ContextualWisdomLab/wardnet | dtolnay/rust-toolchain | efcb852328a9f50117170cc43094fb6f09eaf1ae | NOASSERTION | +| ContextualWisdomLab/wardnet | github/codeql-action/upload-sarif | ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd | NOASSERTION | +| ContextualWisdomLab/wardnet | libfuzzer-sys | >= 0.4.0,< 0.5.0 | NOASSERTION | +| ContextualWisdomLab/wardnet | ossf/scorecard-action | 2d1146689b8cda280b9bc96326124645441f03bc | NOASSERTION | +| ContextualWisdomLab/wardnet | percent-encoding | >= 2.0.0,< 3.0.0 | NOASSERTION | +| ContextualWisdomLab/wardnet | proptest | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/wardnet | r-efi | 5.3.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | +| ContextualWisdomLab/wardnet | r-efi | 6.0.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | +| ContextualWisdomLab/wardnet | serde | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/wardnet | serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | @types/express | ^4.17.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | @types/inquirer | ^8.2.12 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | @types/node | ^24.0.1 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | @vitest/coverage-v8 | ^3.2.6 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | @vitest/ui | ^3.2.6 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | actions/setup-python | a26af69be951a213d495a4c3e4e4022e16d87065 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | +| ContextualWisdomLab/xtrmLLMBatchPython | astral-sh/setup-uv | c771a70e6277c0a99b617c7a806ffedaca235ff9 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | axios | ^1.9.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | backports-asyncio-runner | 1.2.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | certifi | 2026.6.17 | MPL-2.0 | +| ContextualWisdomLab/xtrmLLMBatchPython | commander | ^14.0.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | eslint | ^9.27.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | express | ^4.18.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | extract-zip | ^2.0.1 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | inquirer | ^8.2.6 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | open | ^10.0.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | pino | ^9.7.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | +| ContextualWisdomLab/xtrmLLMBatchPython | psycopg-binary | 3.3.4 | GPL-3.0-or-later | +| ContextualWisdomLab/xtrmLLMBatchPython | pypa/gh-action-pip-audit | 1220774d901786e6f652ae159f7b6bc8fea6d266 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | typescript | ^5.8.3 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | +| ContextualWisdomLab/xtrmLLMBatchPython | vitest | ^3.2.6 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | xtrmllmbatch | 0.1.0 | NOASSERTION | +| ContextualWisdomLab/xtrmLLMBatchPython | zod | ^3.25.67 | NOASSERTION | ## Per-repository components + +### ContextualWisdomLab/.github + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @colbymchenry/codegraph | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-darwin-arm64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-darwin-x64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-linux-arm64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-linux-x64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-win32-arm64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-win32-x64 | 1.4.1 | MIT | no | +| actions/attest | v4.1.0 | NOASSERTION | yes | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/checkout | v7.0.0 | NOASSERTION | yes | +| actions/checkout | v7.0.1 | NOASSERTION | yes | +| actions/create-github-app-token | v3.2.0 | NOASSERTION | yes | +| actions/dependency-review-action | v5.0.0 | NOASSERTION | yes | +| actions/download-artifact | v8.0.1 | NOASSERTION | yes | +| actions/setup-python | v7.0.0 | NOASSERTION | yes | +| actions/upload-artifact | v6.0.0 | NOASSERTION | yes | +| actions/upload-artifact | v7.0.0 | NOASSERTION | yes | +| actions/upload-artifact | v7.0.1 | NOASSERTION | yes | +| aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | yes | +| aiohttp | 3.14.3 | Apache-2.0 AND MIT | no | +| aiosignal | 1.4.0 | Apache-2.0 | no | +| anchore/sbom-action | v0.24.0 | NOASSERTION | yes | +| annotated-doc | 0.0.4 | MIT | no | +| annotated-types | 0.7.0 | MIT | no | +| anyio | 4.14.0 | MIT | no | +| aquasecurity/trivy-action | v0.36.0 | NOASSERTION | yes | +| attrs | 26.1.0 | MIT | no | +| backoff | 2.2.1 | MIT | no | +| bandit | 1.9.4 | Apache-2.0 | no | +| boolean-py | 5.0 | BSD-2-Clause | no | +| cachecontrol | 0.14.4 | Apache-2.0 | no | +| caido-sdk-client | 0.2.0 | MIT | no | +| caido-server-auth | 0.1.2 | NOASSERTION | yes | +| certifi | 2026.6.17 | MPL-2.0 | yes | +| cffi | 2.0.0 | MIT-0 | no | +| charset-normalizer | 3.5.1 | MIT | no | +| click | 8.4.1 | BSD-3-Clause | no | +| click | 8.4.2 | BSD-3-Clause | no | +| cloudflare/wrangler-action | v4.0.0 | NOASSERTION | yes | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| contextualwisdomlab-opencode-codegraph-tooling | — | NOASSERTION | yes | +| coverage | 7.15.4 | Apache-2.0 | no | +| cryptography | 50.0.0 | Apache-2.0 OR BSD-3-Clause | no | +| cvss | 3.6 | LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later | yes | +| cyclonedx-python-lib | 9.1.0 | Apache-2.0 AND Python-2.0 | no | +| defusedxml | 0.7.1 | PSF-2.0 | no | +| distro | 1.9.0 | Apache-2.0 | no | +| docker | 7.1.0 | Apache-2.0 | no | +| docstring-parser | 0.18.0 | MIT | no | +| fastuuid | 0.14.0 | BSD-2-Clause AND BSD-3-Clause | no | +| filelock | 3.29.4 | MIT | no | +| filelock | 3.29.7 | MIT | no | +| frozenlist | 1.8.0 | Apache-2.0 | no | +| fsspec | 2026.6.0 | BSD-3-Clause | no | +| github/codeql-action | v4.37.9 | NOASSERTION | yes | +| google-api-core | 2.33.0 | Apache-2.0 | no | +| google-auth | 2.55.1 | Apache-2.0 | no | +| google-cloud-aiplatform | 1.133.0 | Apache-2.0 | no | +| google-cloud-bigquery | 3.42.2 | Apache-2.0 | no | +| google-cloud-core | 2.6.0 | Apache-2.0 | no | +| google-cloud-resource-manager | 1.18.0 | Apache-2.0 | no | +| google-cloud-storage | 3.13.1 | Apache-2.0 | no | +| google-crc32c | 1.8.0 | Apache-2.0 | no | +| google-genai | 1.75.0 | Apache-2.0 | no | +| google-resumable-media | 2.10.0 | Apache-2.0 | no | +| google/osv-scanner-action | v2.3.8 | NOASSERTION | yes | +| google/osv-scanner-action | v2.5.1 | NOASSERTION | yes | +| googleapis-common-protos | 1.75.0 | Apache-2.0 | no | +| gql | 4.0.0 | MIT | no | +| graphql-core | 3.2.12 | MIT | no | +| griffelib | 2.1.0 | ISC | no | +| grpc-google-iam-v1 | 0.14.4 | Apache-2.0 | no | +| grpcio | 1.81.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | yes | +| grpcio-status | 1.81.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | yes | +| h11 | 0.16.0 | MIT | no | +| hf-xet | 1.5.1 | Apache-2.0 | no | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpcore2 | 2.12.0 | BSD-3-Clause | no | +| httpx | 0.28.1 | BSD-3-Clause | no | +| httpx-sse | 0.4.3 | MIT | no | +| httpx2 | 2.12.0 | BSD-3-Clause | no | +| huggingface-hub | 1.20.0 | Apache-2.0 | no | +| hypothesis | 6.163.0 | MPL-2.0 AND MPL-1.1 | yes | +| idna | 3.18 | BSD-3-Clause | no | +| importlib-metadata | 8.9.0 | Apache-2.0 | no | +| iniconfig | 2.3.0 | MIT | no | +| interrogate | — | NOASSERTION | yes | +| interrogate | 1.7.0 | MIT | no | +| jinja2 | 3.1.6 | BSD-2-Clause AND BSD-3-Clause | no | +| jiter | 0.15.0 | MIT | no | +| jsonschema | 4.26.0 | MIT | no | +| jsonschema-specifications | 2025.9.1 | MIT | no | +| license-expression | 30.4.4 | Apache-2.0 | no | +| litellm | 1.94.1 | MIT | no | +| markdown-it-py | 4.2.0 | MIT | no | +| markupsafe | 3.0.3 | BSD-3-Clause | no | +| mcp | 1.28.1 | MIT AND Python-2.0 | no | +| mdurl | 0.1.2 | MIT | no | +| msgpack | 1.2.1 | Apache-2.0 | no | +| multidict | 6.7.1 | Apache-2.0 | no | +| openai | 2.54.0 | Apache-2.0 | no | +| openai-agents | 0.19.4 | MIT | no | +| ossf/scorecard-action | v2.4.3 | NOASSERTION | yes | +| packageurl-python | 0.17.6 | MIT | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| picomatch | 4.0.4 | MIT | no | +| pillow | 12.3.0 | MIT-CMU | no | +| pip | 26.2.1 | MIT | no | +| pip-api | 0.0.34 | Apache-2.0 | no | +| pip-audit | 2.10.1 | Apache-2.0 AND ISC | no | +| pip-requirements-parser | 32.0.1 | Apache-2.0 AND MIT | no | +| platformdirs | 4.10.0 | MIT | no | +| pluggy | 1.6.0 | MIT | no | +| propcache | 0.5.2 | Apache-2.0 | no | +| proto-plus | 1.28.1 | Apache-2.0 | no | +| protobuf | 6.33.6 | BSD-3-Clause AND LicenseRef-scancode-protobuf | no | +| py | 1.11.0 | MIT | no | +| py-serializable | 2.1.0 | Apache-2.0 | no | +| pyasn1 | 0.6.4 | BSD-2-Clause AND BSD-3-Clause AND MIT | no | +| pyasn1-modules | 0.4.2 | BSD-2-Clause AND BSD-3-Clause | no | +| pycparser | 3.0 | BSD-3-Clause | no | +| pydantic | 2.13.4 | MIT | no | +| pydantic-core | 2.46.4 | MIT | no | +| pydantic-settings | 2.14.2 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pyjwt | 2.13.0 | MIT | no | +| pyopenssl | 26.4.0 | Apache-2.0 | no | +| pyparsing | 3.3.2 | MIT AND Python-2.0 | no | +| pypdf | 6.16.1 | BSD-3-Clause | no | +| pytest | — | NOASSERTION | yes | +| pytest | 9.1.1 | MIT | no | +| pytest-cov | — | NOASSERTION | yes | +| pytest-cov | 7.1.0 | MIT | no | +| python-dateutil | 2.9.0.post0 | Apache-2.0 AND BSD-3-Clause | no | +| python-dotenv | 1.2.2 | BSD-3-Clause | no | +| python-multipart | 0.0.32 | Apache-2.0 | no | +| pyyaml | 6.0.3 | MIT | no | +| r-lib/actions | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | yes | +| referencing | 0.37.0 | MIT | no | +| regex | 2026.7.19 | CNRI-Python AND Apache-2.0 | no | +| reportlab | 5.0.0 | BSD-2-Clause AND BSD-3-Clause | no | +| requests | 2.34.2 | Apache-2.0 | no | +| rich | 15.0.0 | MIT | no | +| rpds-py | 2026.5.1 | MIT | no | +| shellingham | 1.5.4 | ISC | no | +| six | 1.17.0 | MIT | no | +| sniffio | 1.3.1 | Apache-2.0 AND MIT | no | +| sortedcontainers | 2.4.0 | Apache-2.0 | no | +| sse-starlette | 3.4.4 | BSD-3-Clause | no | +| starlette | 1.3.1 | BSD-3-Clause | no | +| step-security/harden-runner | v2.13.2 | NOASSERTION | yes | +| step-security/harden-runner | v2.20.0 | NOASSERTION | yes | +| step-security/harden-runner | v2.20.1 | NOASSERTION | yes | +| stevedore | 5.9.0 | Apache-2.0 | no | +| strix-agent | 1.5.3 | Apache-2.0 | no | +| tabulate | 0.10.0 | MIT | no | +| tenacity | 9.1.4 | Apache-2.0 | no | +| tiktoken | 0.13.0 | MIT | no | +| tokenizers | 0.23.1 | Apache-2.0 | no | +| tomli | 2.4.1 | MIT | no | +| tomli-w | 1.2.0 | MIT | no | +| tqdm | 4.68.3 | MIT AND MPL-2.0 | yes | +| truststore | 0.10.4 | MIT | no | +| typer | 0.25.1 | MIT | no | +| typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.4 | MIT | no | +| urllib3 | 2.7.0 | MIT | no | +| uv | 0.12.7 | MIT OR Apache-2.0 | no | +| uvicorn | 0.49.0 | BSD-3-Clause | no | +| websockets | 15.0.1 | BSD-3-Clause | no | +| yarl | 1.24.2 | Apache-2.0 | no | +| zipp | 4.1.0 | MIT | no | + +### ContextualWisdomLab/accounting-information-platform + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| accounting-information-platform | 0.1.0 | NOASSERTION | yes | +| actions/attest | 508db95dd578ae2727ebd6217d5ba78e4fbda05d | NOASSERTION | yes | +| actions/checkout | 631c942040754b6e095e929c1677c07e10ed4f87 | NOASSERTION | yes | +| actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| aquasecurity/trivy-action | a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 | NOASSERTION | yes | +| coverage | 7.15.4 | Apache-2.0 | no | +| packaging | 26.3 | Apache-2.0 OR BSD-2-Clause | no | +| psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | yes | +| psycopg-binary | 3.3.4 | GPL-3.0-or-later | yes | +| setuptools | 84.0.0 | MIT | no | +| wheel | 0.48.0 | MIT | no | + +### ContextualWisdomLab/aFIPC + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | de0fac2e4500dabe0009e67214ff5f5447ce83dd | NOASSERTION | yes | +| r-lib/actions/check-r-package | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | yes | +| r-lib/actions/setup-r | d3c5be51b12e724e68f33216ca3c148b66d5f0b6 | NOASSERTION | yes | +| r-lib/actions/setup-r-dependencies | d3c5be51b12e724e68f33216ca3c148b66d5f0b6 | NOASSERTION | yes | +| step-security/harden-runner | bf7454d06d71f1098171f2acdf0cd4708d7b5920 | NOASSERTION | yes | + +### ContextualWisdomLab/appguardrail + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/create-github-app-token | bcd2ba49218906704ab6c1aa796996da409d3eb1 | NOASSERTION | yes | +| actions/download-artifact | 37930b1c2abaa49bbe596cd826c3c89aef350131 | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| anomalyco/opencode/github | 77fc88c8ade8e5a620ebbe1197f3a572d29ae91a | NOASSERTION | yes | +| aquasecurity/trivy-action | ed142fd0673e97e23eac54620cfb913e5ce36c25 | NOASSERTION | yes | +| arrow | 1.4.0 | Apache-2.0 | no | +| attrs | 26.1.0 | MIT | no | +| backports-tarfile | 1.2.0 | NOASSERTION | yes | +| boolean-py | 5.0 | BSD-2-Clause | no | +| build | 1.5.1 | MIT | no | +| cachecontrol | 0.14.4 | Apache-2.0 | no | +| certifi | 2026.6.17 | MPL-2.0 | yes | +| cffi | 2.0.0 | MIT-0 | no | +| chardet | 5.2.0 | LGPL-2.1-or-later | yes | +| charset-normalizer | 3.4.7 | MIT | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| cryptography | 49.0.0 | BSD-3-Clause OR Apache-2.0 | no | +| cyclonedx-bom | 7.3.0 | Apache-2.0 AND Python-2.0 | no | +| cyclonedx-python-lib | 11.11.0 | Apache-2.0 AND Python-2.0 | no | +| defusedxml | 0.7.1 | PSF-2.0 | no | +| docutils | 0.23 | BSD-2-Clause AND BSD-3-Clause AND CC-PDDC AND GPL-1.0-or-later AND GPL-3.0-only AND GPL-3.0-or-later AND LicenseRef-scancode-other-copyleft AND LicenseRef-scancode-public-domain | yes | +| filelock | 3.29.4 | MIT | no | +| fqdn | 1.5.1 | MPL-2.0 | yes | +| github/codeql-action/upload-sarif | 5595ccaf912efad79be6eef63a5619ff05969be3 | NOASSERTION | yes | +| id | 1.6.1 | Apache-2.0 | no | +| idna | 3.18 | BSD-3-Clause | no | +| importlib-metadata | 9.0.0 | Apache-2.0 | no | +| iniconfig | 2.3.0 | MIT | no | +| isoduration | 20.11.0 | ISC | no | +| jaraco-classes | 3.4.0 | MIT | no | +| jaraco-context | 6.1.2 | MIT | no | +| jaraco-functools | 4.5.0 | MIT | no | +| jeepney | 0.9.0 | MIT | no | +| jsonpointer | 3.1.1 | BSD-3-Clause | no | +| jsonschema | 4.26.0 | MIT | no | +| jsonschema-specifications | 2025.9.1 | MIT | no | +| keyring | 25.7.0 | MIT | no | +| lark | 1.3.1 | MIT AND MPL-2.0 | yes | +| license-expression | 30.4.4 | Apache-2.0 | no | +| lxml | 6.1.1 | BSD-3-Clause AND GPL-1.0-or-later | yes | +| markdown-it-py | 4.2.0 | MIT | no | +| mdurl | 0.1.2 | MIT | no | +| more-itertools | 11.1.0 | MIT | no | +| msgpack | 1.2.1 | Apache-2.0 | no | +| nh3 | 0.3.6 | MIT | no | +| packageurl-python | 0.17.6 | MIT | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| pip-api | 0.0.34 | Apache-2.0 | no | +| pip-audit | 2.10.1 | Apache-2.0 AND ISC | no | +| pip-requirements-parser | 32.0.1 | Apache-2.0 AND MIT | no | +| platformdirs | 4.10.0 | MIT | no | +| pluggy | 1.6.0 | MIT | no | +| py-serializable | 2.1.0 | Apache-2.0 | no | +| pycparser | 3.0 | BSD-3-Clause | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pypa/gh-action-pypi-publish | dc37677b2e1c63e2034f94d8a5b11f265b73ba33 | NOASSERTION | yes | +| pyparsing | 3.3.2 | MIT AND Python-2.0 | no | +| pyproject-hooks | 1.2.0 | MIT | no | +| pytest | 9.1.1 | MIT | no | +| python-dateutil | 2.9.0.post0 | Apache-2.0 AND BSD-3-Clause | no | +| readme-renderer | 45.0 | Apache-2.0 | no | +| referencing | 0.37.0 | MIT | no | +| requests | 2.34.2 | Apache-2.0 | no | +| requests-toolbelt | 1.0.0 | Apache-2.0 | no | +| rfc3339-validator | 0.1.4 | MIT | no | +| rfc3986 | 2.0.0 | Apache-2.0 | no | +| rfc3986-validator | 0.1.1 | MIT | no | +| rfc3987-syntax | 1.1.0 | Apache-2.0 AND GPL-1.0-or-later AND MIT | yes | +| rich | 15.0.0 | MIT | no | +| rpds-py | 0.30.0 | MIT | no | +| secretstorage | 3.5.0 | BSD-3-Clause | no | +| setuptools | — | NOASSERTION | yes | +| six | 1.17.0 | MIT | no | +| sortedcontainers | 2.4.0 | Apache-2.0 | no | +| tomli | 2.4.1 | MIT | no | +| tomli-w | 1.2.0 | MIT | no | +| twine | 6.2.0 | Apache-2.0 | no | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| tzdata | 2026.2 | Apache-2.0 | no | +| uri-template | 1.3.0 | MIT | no | +| urllib3 | 2.7.0 | MIT | no | +| webcolors | 25.10.0 | BSD-3-Clause | no | +| zipp | 4.1.0 | MIT | no | + +### ContextualWisdomLab/bandscope + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @adobe/css-tools | 4.5.0 | MIT | no | +| @asamuzakjp/css-color | 5.1.11 | MIT | no | +| @asamuzakjp/dom-selector | 7.1.1 | MIT | no | +| @asamuzakjp/generational-cache | 1.0.1 | MIT | no | +| @asamuzakjp/nwsapi | 2.3.9 | MIT | no | +| @babel/code-frame | 7.29.7 | MIT | no | +| @babel/compat-data | 7.29.7 | MIT | no | +| @babel/core | 7.29.7 | MIT | no | +| @babel/generator | 7.29.8 | MIT | no | +| @babel/helper-compilation-targets | 7.29.7 | MIT | no | +| @babel/helper-globals | 7.29.7 | MIT | no | +| @babel/helper-module-imports | 7.29.7 | MIT | no | +| @babel/helper-module-transforms | 7.29.7 | MIT | no | +| @babel/helper-string-parser | 7.29.7 | MIT | no | +| @babel/helper-validator-identifier | 7.29.7 | MIT | no | +| @babel/helper-validator-option | 7.29.7 | MIT | no | +| @babel/helpers | 7.29.7 | MIT | no | +| @babel/parser | 7.29.8 | MIT | no | +| @babel/runtime | 7.29.7 | MIT | no | +| @babel/template | 7.29.7 | MIT | no | +| @babel/traverse | 7.29.8 | MIT | no | +| @babel/types | 7.29.8 | MIT | no | +| @bandscope/desktop | 0.1.0 | NOASSERTION | yes | +| @bandscope/shared-types | 0.1.0 | NOASSERTION | yes | +| @base-ui/react | 1.7.0 | MIT | no | +| @base-ui/react | ^1.5.0 | NOASSERTION | yes | +| @base-ui/utils | 0.3.2 | MIT | no | +| @bcoe/v8-coverage | 1.0.2 | ISC AND MIT | no | +| @bramus/specificity | 2.4.2 | MIT | no | +| @csstools/color-helpers | 6.1.0 | MIT-0 | no | +| @csstools/css-calc | 3.3.0 | MIT | no | +| @csstools/css-color-parser | 4.1.10 | MIT | no | +| @csstools/css-parser-algorithms | 4.0.0 | MIT | no | +| @csstools/css-syntax-patches-for-csstree | 1.1.7 | MIT-0 | no | +| @csstools/css-tokenizer | 4.0.0 | MIT | no | +| @emnapi/core | 1.11.2 | MIT | no | +| @emnapi/core | 1.9.2 | MIT | no | +| @emnapi/runtime | 1.11.2 | MIT | no | +| @emnapi/runtime | 1.9.2 | MIT | no | +| @emnapi/wasi-threads | 1.2.1 | MIT | no | +| @emnapi/wasi-threads | 1.2.2 | MIT | no | +| @es-joy/jsdoccomment | 0.91.0 | MIT | no | +| @es-joy/resolve.exports | 1.2.0 | MIT | no | +| @esbuild/aix-ppc64 | 0.28.2 | MIT | no | +| @esbuild/android-arm | 0.28.2 | MIT | no | +| @esbuild/android-arm64 | 0.28.2 | MIT | no | +| @esbuild/android-x64 | 0.28.2 | MIT | no | +| @esbuild/darwin-arm64 | 0.28.2 | MIT | no | +| @esbuild/darwin-x64 | 0.28.2 | MIT | no | +| @esbuild/freebsd-arm64 | 0.28.2 | MIT | no | +| @esbuild/freebsd-x64 | 0.28.2 | MIT | no | +| @esbuild/linux-arm | 0.28.2 | MIT | no | +| @esbuild/linux-arm64 | 0.28.2 | MIT | no | +| @esbuild/linux-ia32 | 0.28.2 | MIT | no | +| @esbuild/linux-loong64 | 0.28.2 | MIT | no | +| @esbuild/linux-mips64el | 0.28.2 | MIT | no | +| @esbuild/linux-ppc64 | 0.28.2 | MIT | no | +| @esbuild/linux-riscv64 | 0.28.2 | MIT | no | +| @esbuild/linux-s390x | 0.28.2 | MIT | no | +| @esbuild/linux-x64 | 0.28.2 | MIT | no | +| @esbuild/netbsd-arm64 | 0.28.2 | MIT | no | +| @esbuild/netbsd-x64 | 0.28.2 | MIT | no | +| @esbuild/openbsd-arm64 | 0.28.2 | MIT | no | +| @esbuild/openbsd-x64 | 0.28.2 | MIT | no | +| @esbuild/openharmony-arm64 | 0.28.2 | MIT | no | +| @esbuild/sunos-x64 | 0.28.2 | MIT | no | +| @esbuild/win32-arm64 | 0.28.2 | MIT | no | +| @esbuild/win32-ia32 | 0.28.2 | MIT | no | +| @esbuild/win32-x64 | 0.28.2 | MIT | no | +| @eslint-community/eslint-utils | 4.10.1 | MIT | no | +| @eslint-community/regexpp | 4.12.2 | MIT | no | +| @eslint/config-array | 0.23.5 | Apache-2.0 | no | +| @eslint/config-helpers | 0.7.0 | Apache-2.0 | no | +| @eslint/core | 1.2.1 | Apache-2.0 | no | +| @eslint/js | 10.0.1 | MIT | no | +| @eslint/object-schema | 3.0.5 | Apache-2.0 | no | +| @eslint/plugin-kit | 0.7.2 | Apache-2.0 | no | +| @exodus/bytes | 1.15.1 | MIT | no | +| @floating-ui/core | 1.8.0 | MIT | no | +| @floating-ui/dom | 1.8.0 | MIT | no | +| @floating-ui/react-dom | 2.1.9 | MIT | no | +| @floating-ui/utils | 0.2.12 | MIT | no | +| @fontsource-variable/geist | 5.3.0 | OFL-1.1 | no | +| @fontsource-variable/geist | ^5.2.9 | NOASSERTION | yes | +| @humanfs/core | 0.19.2 | Apache-2.0 | no | +| @humanfs/node | 0.16.8 | Apache-2.0 | no | +| @humanfs/types | 0.15.0 | Apache-2.0 | no | +| @humanwhocodes/module-importer | 1.0.1 | Apache-2.0 | no | +| @humanwhocodes/retry | 0.4.3 | Apache-2.0 | no | +| @joshwooding/vite-plugin-react-docgen-typescript | 0.7.0 | MIT | no | +| @jridgewell/gen-mapping | 0.3.13 | MIT | no | +| @jridgewell/remapping | 2.3.5 | MIT | no | +| @jridgewell/resolve-uri | 3.1.2 | MIT | no | +| @jridgewell/sourcemap-codec | 1.5.5 | MIT | no | +| @jridgewell/trace-mapping | 0.3.31 | MIT | no | +| @napi-rs/canvas | 1.0.5 | MIT | no | +| @napi-rs/canvas-android-arm64 | 1.0.5 | MIT | no | +| @napi-rs/canvas-darwin-arm64 | 1.0.5 | MIT | no | +| @napi-rs/canvas-darwin-x64 | 1.0.5 | MIT | no | +| @napi-rs/canvas-linux-arm-gnueabihf | 1.0.5 | MIT | no | +| @napi-rs/canvas-linux-arm64-gnu | 1.0.5 | MIT | no | +| @napi-rs/canvas-linux-arm64-musl | 1.0.5 | MIT | no | +| @napi-rs/canvas-linux-riscv64-gnu | 1.0.5 | MIT | no | +| @napi-rs/canvas-linux-x64-gnu | 1.0.5 | MIT | no | +| @napi-rs/canvas-linux-x64-musl | 1.0.5 | MIT | no | +| @napi-rs/canvas-win32-arm64-msvc | 1.0.5 | MIT | no | +| @napi-rs/canvas-win32-x64-msvc | 1.0.5 | MIT | no | +| @napi-rs/wasm-runtime | 1.2.2 | MIT | no | +| @oxc-parser/binding-android-arm-eabi | 0.127.0 | MIT | no | +| @oxc-parser/binding-android-arm64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-darwin-arm64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-darwin-x64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-freebsd-x64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm-gnueabihf | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm-musleabihf | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm64-musl | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-ppc64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-riscv64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-riscv64-musl | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-s390x-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-x64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-x64-musl | 0.127.0 | MIT | no | +| @oxc-parser/binding-openharmony-arm64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-wasm32-wasi | 0.127.0 | MIT | no | +| @oxc-parser/binding-win32-arm64-msvc | 0.127.0 | MIT | no | +| @oxc-parser/binding-win32-ia32-msvc | 0.127.0 | MIT | no | +| @oxc-parser/binding-win32-x64-msvc | 0.127.0 | MIT | no | +| @oxc-project/types | 0.127.0 | MIT | no | +| @oxc-project/types | 0.143.0 | MIT | no | +| @oxc-resolver/binding-android-arm-eabi | 11.24.2 | MIT | no | +| @oxc-resolver/binding-android-arm64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-darwin-arm64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-darwin-x64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-freebsd-x64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-arm-gnueabihf | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-arm-musleabihf | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-arm64-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-arm64-musl | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-ppc64-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-riscv64-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-riscv64-musl | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-s390x-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-x64-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-x64-musl | 11.24.2 | MIT | no | +| @oxc-resolver/binding-openharmony-arm64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-wasm32-wasi | 11.24.2 | MIT | no | +| @oxc-resolver/binding-win32-arm64-msvc | 11.24.2 | MIT | no | +| @oxc-resolver/binding-win32-x64-msvc | 11.24.2 | MIT | no | +| @rolldown/binding-android-arm64 | 1.2.3 | MIT | no | +| @rolldown/binding-darwin-arm64 | 1.2.3 | MIT | no | +| @rolldown/binding-darwin-x64 | 1.2.3 | MIT | no | +| @rolldown/binding-freebsd-x64 | 1.2.3 | MIT | no | +| @rolldown/binding-linux-arm-gnueabihf | 1.2.3 | MIT | no | +| @rolldown/binding-linux-arm64-gnu | 1.2.3 | MIT | no | +| @rolldown/binding-linux-arm64-musl | 1.2.3 | MIT | no | +| @rolldown/binding-linux-ppc64-gnu | 1.2.3 | MIT | no | +| @rolldown/binding-linux-s390x-gnu | 1.2.3 | MIT | no | +| @rolldown/binding-linux-x64-gnu | 1.2.3 | MIT | no | +| @rolldown/binding-linux-x64-musl | 1.2.3 | MIT | no | +| @rolldown/binding-openharmony-arm64 | 1.2.3 | MIT | no | +| @rolldown/binding-win32-arm64-msvc | 1.2.3 | MIT | no | +| @rolldown/binding-win32-x64-msvc | 1.2.3 | MIT | no | +| @rolldown/pluginutils | 1.0.1 | MIT | no | +| @rollup/pluginutils | 5.4.0 | MIT | no | +| @sindresorhus/base62 | 1.0.0 | MIT | no | +| @standard-schema/spec | 1.1.0 | MIT | no | +| @storybook/builder-vite | 10.5.7 | MIT | no | +| @storybook/csf-plugin | 10.5.7 | MIT | no | +| @storybook/global | 5.0.0 | MIT | no | +| @storybook/icons | 2.1.0 | MIT | no | +| @storybook/react | 10.5.7 | MIT | no | +| @storybook/react-dom-shim | 10.5.7 | MIT | no | +| @storybook/react-vite | 10.5.7 | MIT | no | +| @storybook/react-vite | ^10.4.6 | NOASSERTION | yes | +| @tailwindcss/node | 4.3.3 | MIT | no | +| @tailwindcss/oxide | 4.3.3 | MIT | no | +| @tailwindcss/oxide-android-arm64 | 4.3.3 | MIT | no | +| @tailwindcss/oxide-darwin-arm64 | 4.3.3 | MIT | no | +| @tailwindcss/oxide-darwin-x64 | 4.3.3 | MIT | no | +| @tailwindcss/oxide-freebsd-x64 | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-arm-gnueabihf | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-arm64-gnu | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-arm64-musl | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-x64-gnu | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-x64-musl | 4.3.3 | MIT | no | +| @tailwindcss/oxide-wasm32-wasi | 4.3.3 | MIT | no | +| @tailwindcss/oxide-win32-arm64-msvc | 4.3.3 | MIT | no | +| @tailwindcss/oxide-win32-x64-msvc | 4.3.3 | MIT | no | +| @tailwindcss/vite | 4.3.3 | MIT | no | +| @tailwindcss/vite | ^4.3.2 | NOASSERTION | yes | +| @tauri-apps/api | 2.11.1 | Apache-2.0 OR MIT | no | +| @tauri-apps/api | ^2.11.0 | NOASSERTION | yes | +| @tauri-apps/cli | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli | ^2.11.4 | NOASSERTION | yes | +| @tauri-apps/cli-darwin-arm64 | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-darwin-x64 | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-linux-arm-gnueabihf | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-linux-arm64-gnu | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-linux-arm64-musl | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-linux-riscv64-gnu | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-linux-x64-gnu | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-linux-x64-musl | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-win32-arm64-msvc | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-win32-ia32-msvc | 2.11.4 | Apache-2.0 OR MIT | no | +| @tauri-apps/cli-win32-x64-msvc | 2.11.4 | Apache-2.0 OR MIT | no | +| @testing-library/dom | 10.4.1 | MIT | no | +| @testing-library/jest-dom | 6.9.1 | MIT | no | +| @testing-library/jest-dom | ^6.6.3 | NOASSERTION | yes | +| @testing-library/react | 16.3.2 | MIT | no | +| @testing-library/react | ^16.2.0 | NOASSERTION | yes | +| @testing-library/user-event | 14.6.3 | MIT | no | +| @tybys/wasm-util | 0.10.3 | MIT | no | +| @types/aria-query | 5.0.4 | MIT | no | +| @types/babel__core | 7.20.5 | MIT | no | +| @types/babel__generator | 7.27.0 | MIT | no | +| @types/babel__template | 7.4.4 | MIT | no | +| @types/babel__traverse | 7.28.0 | MIT | no | +| @types/chai | 5.2.3 | MIT | no | +| @types/deep-eql | 4.0.2 | MIT | no | +| @types/doctrine | 0.0.9 | MIT | no | +| @types/esrecurse | 4.3.1 | MIT | no | +| @types/estree | 1.0.9 | MIT | no | +| @types/json-schema | 7.0.15 | MIT | no | +| @types/node | 26.2.0 | MIT | no | +| @types/node | ^26.1.1 | NOASSERTION | yes | +| @types/react | 19.2.18 | MIT | no | +| @types/react | ^19.2.17 | NOASSERTION | yes | +| @types/react-dom | 19.2.4 | MIT | no | +| @types/react-dom | ^19.2.3 | NOASSERTION | yes | +| @types/resolve | 1.20.6 | MIT | no | +| @typescript-eslint/eslint-plugin | 8.66.0 | MIT | no | +| @typescript-eslint/parser | 8.66.0 | MIT | no | +| @typescript-eslint/project-service | 8.66.0 | MIT | no | +| @typescript-eslint/scope-manager | 8.66.0 | MIT | no | +| @typescript-eslint/tsconfig-utils | 8.66.0 | MIT | no | +| @typescript-eslint/type-utils | 8.66.0 | MIT | no | +| @typescript-eslint/types | 8.66.0 | MIT | no | +| @typescript-eslint/typescript-estree | 8.66.0 | MIT | no | +| @typescript-eslint/utils | 8.66.0 | MIT | no | +| @typescript-eslint/visitor-keys | 8.66.0 | MIT | no | +| @vitejs/plugin-react | 6.0.5 | MIT | no | +| @vitejs/plugin-react | ^6.0.2 | NOASSERTION | yes | +| @vitest/coverage-v8 | 4.1.10 | MIT | no | +| @vitest/coverage-v8 | ^4.1.10 | NOASSERTION | yes | +| @vitest/expect | 3.2.4 | MIT | no | +| @vitest/expect | 4.1.10 | MIT | no | +| @vitest/mocker | 4.1.10 | MIT | no | +| @vitest/pretty-format | 3.2.4 | MIT | no | +| @vitest/pretty-format | 4.1.10 | MIT | no | +| @vitest/runner | 4.1.10 | MIT | no | +| @vitest/snapshot | 4.1.10 | MIT | no | +| @vitest/spy | 3.2.4 | MIT | no | +| @vitest/spy | 4.1.10 | MIT | no | +| @vitest/utils | 3.2.4 | MIT | no | +| @vitest/utils | 4.1.10 | MIT | no | +| @webcontainer/env | 1.1.1 | MIT | no | +| acorn | 8.18.0 | MIT | no | +| acorn-jsx | 5.3.2 | MIT | no | +| actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | yes | +| actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | yes | +| actions/setup-node | 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e | NOASSERTION | yes | +| actions/setup-python | a309ff8b426b58ec0e2a45f0f869d46889d02405 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| adler2 | 2.0.1 | 0BSD OR MIT OR Apache-2.0 | no | +| aho-corasick | 1.1.4 | Unlicense OR MIT | no | +| ajv | 6.15.0 | MIT | no | +| anchore/sbom-action | e22c389904149dbc22b58101806040fa8d37a610 | NOASSERTION | yes | +| android_system_properties | 0.1.5 | MIT OR Apache-2.0 | no | +| ansi-regex | 5.0.1 | MIT | no | +| ansi-styles | 5.2.0 | MIT | no | +| antlr4-python3-runtime | 4.9.3 | BSD-3-Clause | no | +| anyhow | 1.0.103 | MIT OR Apache-2.0 | no | +| aquasecurity/trivy-action | ed142fd0673e97e23eac54620cfb913e5ce36c25 | NOASSERTION | yes | +| are-docs-informative | 0.0.2 | MIT | no | +| aria-query | 5.3.0 | Apache-2.0 | no | +| assertion-error | 2.0.1 | MIT | no | +| ast-types | 0.16.1 | MIT | no | +| ast-v8-to-istanbul | 1.0.5 | MIT | no | +| astral-sh/setup-uv | 11f9893b081a58869d3b5fccaea48c9e9e46f990 | NOASSERTION | yes | +| atk | 0.18.2 | MIT | no | +| atk-sys | 0.18.2 | MIT | no | +| atomic-waker | 1.1.2 | Apache-2.0 OR MIT | no | +| audioop-lts | 0.2.2 | Python-2.0 AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | no | +| audioread | 3.1.0 | MIT | no | +| autocfg | 1.5.1 | Apache-2.0 OR MIT | no | +| balanced-match | 4.0.4 | MIT | no | +| bandit | 1.9.4 | Apache-2.0 | no | +| bandscope-analysis | 0.1.0 | NOASSERTION | yes | +| bandscope-workspace | 0.1.0 | NOASSERTION | yes | +| base64 | 0.21.7 | MIT OR Apache-2.0 | no | +| base64 | 0.22.1 | MIT OR Apache-2.0 | no | +| baseline-browser-mapping | 2.11.13 | Apache-2.0 | no | +| bidi-js | 1.0.3 | MIT | no | +| bit-set | 0.8.0 | Apache-2.0 OR MIT | no | +| bit-vec | 0.8.0 | Apache-2.0 OR MIT | no | +| bitflags | 1.3.2 | MIT OR Apache-2.0 | no | +| bitflags | 2.13.0 | MIT OR Apache-2.0 | no | +| block-buffer | 0.10.4 | MIT OR Apache-2.0 | no | +| block2 | 0.6.2 | MIT | no | +| brace-expansion | 5.0.9 | MIT | no | +| browserslist | 4.28.8 | MIT | no | +| bs58 | 0.5.1 | MIT OR Apache-2.0 | no | +| bumpalo | 3.20.3 | MIT OR Apache-2.0 | no | +| bundle-name | 4.1.0 | MIT | no | +| bytemuck | 1.25.1 | Zlib OR Apache-2.0 OR MIT | no | +| byteorder | 1.5.0 | Unlicense OR MIT | no | +| bytes | 1.12.1 | MIT | no | +| cairo-rs | 0.18.5 | MIT | no | +| cairo-sys-rs | 0.18.2 | MIT | no | +| camino | 1.2.4 | MIT OR Apache-2.0 | no | +| caniuse-lite | 1.0.30001809 | CC-BY-4.0 | no | +| cargo-platform | 0.1.9 | MIT OR Apache-2.0 | no | +| cargo_metadata | 0.19.2 | MIT | no | +| cargo_toml | 0.22.3 | Apache-2.0 OR MIT | no | +| cc | 1.2.67 | MIT OR Apache-2.0 | no | +| certifi | 2026.2.25 | MPL-2.0 | yes | +| cesu8 | 1.1.0 | Apache-2.0 OR MIT | no | +| cfb | 0.7.3 | MIT | no | +| cffi | 2.0.0 | MIT-0 | no | +| cfg-expr | 0.15.8 | MIT OR Apache-2.0 | no | +| cfg-if | 1.0.4 | MIT OR Apache-2.0 | no | +| chai | 5.3.3 | MIT | no | +| chai | 6.2.2 | MIT | no | +| charset-normalizer | 3.4.6 | MIT | no | +| check-error | 2.1.3 | MIT | no | +| chrono | 0.4.45 | MIT OR Apache-2.0 | no | +| class-variance-authority | 0.7.1 | Apache-2.0 | no | +| class-variance-authority | ^0.7.1 | NOASSERTION | yes | +| cloudpickle | 3.1.2 | BSD-3-Clause | no | +| clsx | 2.1.1 | MIT | no | +| clsx | ^2.1.1 | NOASSERTION | yes | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| combine | 4.6.7 | MIT | no | +| comment-parser | 1.4.7 | MIT | no | +| convert-source-map | 2.0.0 | MIT | no | +| cookie | 0.18.1 | MIT OR Apache-2.0 | no | +| core-foundation | 0.10.1 | MIT OR Apache-2.0 | no | +| core-foundation-sys | 0.8.7 | MIT OR Apache-2.0 | no | +| core-graphics | 0.25.0 | MIT OR Apache-2.0 | no | +| core-graphics-types | 0.2.0 | MIT OR Apache-2.0 | no | +| coverage | 7.13.4 | Apache-2.0 | no | +| cpufeatures | 0.2.17 | MIT OR Apache-2.0 | no | +| crc32fast | 1.5.0 | MIT OR Apache-2.0 | no | +| cross-spawn | 7.0.6 | MIT | no | +| crossbeam-channel | 0.5.16 | MIT OR Apache-2.0 | no | +| crossbeam-utils | 0.8.22 | MIT OR Apache-2.0 | no | +| crypto-common | 0.1.7 | MIT OR Apache-2.0 | no | +| css-tree | 3.2.1 | MIT | no | +| css.escape | 1.5.1 | MIT | no | +| cssparser | 0.36.0 | MPL-2.0 | yes | +| cssparser-macros | 0.6.1 | MPL-2.0 | yes | +| csstype | 3.2.3 | MIT | no | +| ctor | 0.8.0 | Apache-2.0 OR MIT | no | +| ctor-proc-macro | 0.0.7 | Apache-2.0 OR MIT | no | +| cuda-bindings | 13.3.1 | NOASSERTION | yes | +| cuda-pathfinder | 1.5.6 | Apache-2.0 | no | +| cuda-toolkit | 13.0.2 | Apache-2.0 | no | +| darling | 0.23.0 | MIT | no | +| darling_core | 0.23.0 | MIT | no | +| darling_macro | 0.23.0 | MIT | no | +| data-urls | 7.0.0 | MIT | no | +| debug | 4.4.3 | MIT | no | +| decimal.js | 10.6.0 | MIT | no | +| decorator | 5.2.1 | BSD-2-Clause AND BSD-3-Clause | no | +| deep-eql | 5.0.2 | MIT | no | +| deep-is | 0.1.4 | MIT | no | +| default-browser | 5.5.0 | MIT | no | +| default-browser-id | 5.0.1 | MIT | no | +| define-lazy-prop | 3.0.0 | MIT | no | +| demucs | 4.0.1 | MIT | no | +| dequal | 2.0.3 | MIT | no | +| deranged | 0.5.8 | MIT OR Apache-2.0 | no | +| derive_more | 2.1.1 | MIT | no | +| derive_more-impl | 2.1.1 | MIT | no | +| detect-libc | 2.1.2 | Apache-2.0 | no | +| digest | 0.10.7 | MIT OR Apache-2.0 | no | +| dirs | 6.0.0 | MIT OR Apache-2.0 | no | +| dirs-sys | 0.5.0 | MIT OR Apache-2.0 | no | +| dispatch2 | 0.3.1 | Zlib OR Apache-2.0 OR MIT | no | +| displaydoc | 0.2.6 | MIT OR Apache-2.0 | no | +| dlib | 0.5.3 | MIT | no | +| dlopen2 | 0.8.2 | MIT | no | +| dlopen2_derive | 0.4.3 | MIT | no | +| doctrine | 3.0.0 | Apache-2.0 AND BSD-2-Clause | no | +| dom-accessibility-api | 0.5.16 | MIT | no | +| dom-accessibility-api | 0.6.3 | MIT | no | +| dom_query | 0.27.0 | MIT | no | +| dora-search | 0.1.12 | MIT | no | +| downcast-rs | 1.2.1 | MIT OR Apache-2.0 | no | +| dpi | 0.1.2 | Apache-2.0 AND MIT | no | +| dtoa | 1.0.11 | MIT OR Apache-2.0 | no | +| dtoa-short | 0.3.5 | MPL-2.0 | yes | +| dtor | 0.3.0 | Apache-2.0 OR MIT | no | +| dtor-proc-macro | 0.0.6 | Apache-2.0 OR MIT | no | +| dunce | 1.0.5 | CC0-1.0 OR MIT-0 OR Apache-2.0 | no | +| dyn-clone | 1.0.20 | MIT OR Apache-2.0 | no | +| einops | 0.8.2 | MIT | no | +| electron-to-chromium | 1.5.403 | ISC | no | +| embed-resource | 3.0.11 | MIT | no | +| embed_plist | 1.2.2 | MIT OR Apache-2.0 | no | +| empathic | 2.0.1 | MIT | no | +| enhanced-resolve | 5.24.5 | MIT | no | +| entities | 8.0.0 | BSD-2-Clause | no | +| equivalent | 1.0.2 | Apache-2.0 OR MIT | no | +| erased-serde | 0.4.10 | MIT OR Apache-2.0 | no | +| errno | 0.3.14 | MIT OR Apache-2.0 | no | +| es-errors | 1.3.0 | MIT | no | +| es-module-lexer | 2.3.1 | MIT | no | +| esbuild | 0.28.2 | MIT | no | +| escalade | 3.2.0 | MIT | no | +| escape-string-regexp | 4.0.0 | MIT | no | +| eslint | 10.8.1 | MIT | no | +| eslint | ^10.7.0 | NOASSERTION | yes | +| eslint-plugin-jsdoc | 63.3.3 | BSD-3-Clause | no | +| eslint-scope | 9.1.2 | BSD-2-Clause | no | +| eslint-visitor-keys | 3.4.3 | Apache-2.0 | no | +| eslint-visitor-keys | 5.0.1 | Apache-2.0 | no | +| espree | 11.2.0 | BSD-2-Clause | no | +| esprima | 4.0.1 | BSD-2-Clause AND BSD-3-Clause | no | +| esquery | 1.7.0 | BSD-3-Clause | no | +| esrecurse | 4.3.0 | BSD-2-Clause | no | +| estraverse | 5.3.0 | BSD-2-Clause | no | +| estree-walker | 2.0.2 | MIT | no | +| estree-walker | 3.0.3 | MIT | no | +| esutils | 2.0.3 | BSD-2-Clause | no | +| expect-type | 1.4.0 | Apache-2.0 | no | +| fast-check | 4.9.0 | MIT | no | +| fast-check | ^4.8.0 | NOASSERTION | yes | +| fast-deep-equal | 3.1.3 | MIT | no | +| fast-json-stable-stringify | 2.1.0 | MIT | no | +| fast-levenshtein | 2.0.6 | MIT | no | +| fastrand | 2.4.1 | Apache-2.0 OR MIT | no | +| fdeflate | 0.3.7 | MIT OR Apache-2.0 | no | +| fdir | 6.5.0 | MIT | no | +| field-offset | 0.3.6 | MIT OR Apache-2.0 | no | +| file-entry-cache | 8.0.0 | MIT | no | +| filelock | 3.29.5 | MIT | no | +| find-msvc-tools | 0.1.9 | MIT OR Apache-2.0 | no | +| find-up | 5.0.0 | MIT | no | +| flat-cache | 4.0.1 | MIT | no | +| flate2 | 1.1.9 | MIT OR Apache-2.0 | no | +| flatted | 3.4.4 | ISC | no | +| fnv | 1.0.7 | Apache-2.0 OR MIT | no | +| foldhash | 0.2.0 | Zlib | no | +| foreign-types | 0.5.0 | MIT OR Apache-2.0 | no | +| foreign-types-macros | 0.2.3 | MIT OR Apache-2.0 | no | +| foreign-types-shared | 0.3.1 | MIT OR Apache-2.0 | no | +| form_urlencoded | 1.2.2 | MIT OR Apache-2.0 | no | +| fsevents | 2.3.3 | MIT | no | +| fsspec | 2026.6.0 | BSD-3-Clause | no | +| function-bind | 1.1.2 | MIT | no | +| futures-channel | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-core | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-executor | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-io | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-macro | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-sink | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-task | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-util | 0.3.32 | MIT OR Apache-2.0 | no | +| gdk | 0.18.2 | MIT | no | +| gdk-pixbuf | 0.18.5 | MIT | no | +| gdk-pixbuf-sys | 0.18.0 | MIT | no | +| gdk-sys | 0.18.2 | MIT | no | +| gdkwayland-sys | 0.18.2 | MIT | no | +| generic-array | 0.14.7 | MIT | no | +| gensync | 1.0.0-beta.2 | MIT | no | +| getrandom | 0.2.17 | MIT OR Apache-2.0 | no | +| getrandom | 0.3.4 | MIT OR Apache-2.0 | no | +| getrandom | 0.4.3 | MIT OR Apache-2.0 | no | +| gio | 0.18.4 | MIT | no | +| gio-sys | 0.18.1 | MIT | no | +| github/codeql-action/upload-sarif | 99df26d4f13ea111d4ec1a7dddef6063f76b97e9 | NOASSERTION | yes | +| glib | 0.18.5 | MIT | no | +| glib-macros | 0.18.5 | MIT | no | +| glib-sys | 0.18.1 | MIT | no | +| glob | 0.3.3 | MIT OR Apache-2.0 | no | +| glob | 13.0.6 | BlueOak-1.0.0 | no | +| glob-parent | 6.0.2 | ISC | no | +| gobject-sys | 0.18.0 | MIT | no | +| graceful-fs | 4.2.11 | ISC | no | +| gtk | 0.18.2 | MIT | no | +| gtk-sys | 0.18.2 | MIT | no | +| gtk3-macros | 0.18.2 | MIT | no | +| has-flag | 4.0.0 | MIT | no | +| hashbrown | 0.12.3 | MIT OR Apache-2.0 | no | +| hashbrown | 0.17.1 | MIT OR Apache-2.0 | no | +| hasown | 2.0.4 | MIT | no | +| heck | 0.4.1 | MIT OR Apache-2.0 | no | +| heck | 0.5.0 | MIT OR Apache-2.0 | no | +| hex | 0.4.3 | MIT OR Apache-2.0 | no | +| html-encoding-sniffer | 6.0.0 | MIT | no | +| html-entities | 2.6.0 | MIT | no | +| html-escaper | 2.0.2 | MIT | no | +| html5ever | 0.38.0 | MIT OR Apache-2.0 | no | +| http | 1.4.2 | MIT OR Apache-2.0 | no | +| http-body | 1.0.1 | MIT | no | +| http-body-util | 0.1.3 | MIT | no | +| httparse | 1.10.1 | MIT OR Apache-2.0 | no | +| hyper | 1.10.1 | MIT | no | +| hyper-util | 0.1.20 | MIT | no | +| iana-time-zone | 0.1.65 | MIT OR Apache-2.0 | no | +| iana-time-zone-haiku | 0.1.2 | MIT OR Apache-2.0 | no | +| ico | 0.5.0 | MIT | no | +| icu_collections | 2.2.0 | Unicode-3.0 | no | +| icu_locale_core | 2.2.0 | Unicode-3.0 | no | +| icu_normalizer | 2.2.0 | Unicode-3.0 | no | +| icu_normalizer_data | 2.2.0 | Unicode-3.0 | no | +| icu_properties | 2.2.0 | Unicode-3.0 | no | +| icu_properties_data | 2.2.0 | Unicode-3.0 | no | +| icu_provider | 2.2.0 | Unicode-3.0 | no | +| ident_case | 1.0.1 | MIT OR Apache-2.0 | no | +| idna | 1.1.0 | MIT OR Apache-2.0 | no | +| idna | 3.18 | BSD-3-Clause | no | +| idna_adapter | 1.2.2 | Apache-2.0 OR MIT | no | +| ignore | 5.3.2 | MIT | no | +| ignore | 7.0.6 | MIT | no | +| imurmurhash | 0.1.4 | MIT | no | +| indent-string | 4.0.0 | MIT | no | +| indexmap | 1.9.3 | Apache-2.0 OR MIT | no | +| indexmap | 2.14.0 | Apache-2.0 OR MIT | no | +| infer | 0.19.0 | MIT | no | +| iniconfig | 2.3.0 | MIT | no | +| ipnet | 2.12.0 | MIT OR Apache-2.0 | no | +| is-core-module | 2.16.2 | MIT | no | +| is-docker | 3.0.0 | MIT | no | +| is-extglob | 2.1.1 | MIT | no | +| is-glob | 4.0.3 | MIT | no | +| is-inside-container | 1.0.0 | MIT | no | +| is-potential-custom-element-name | 1.0.1 | MIT | no | +| is-wsl | 3.1.1 | MIT | no | +| isexe | 2.0.0 | ISC | no | +| istanbul-lib-coverage | 3.2.2 | BSD-3-Clause | no | +| istanbul-lib-report | 3.0.1 | BSD-3-Clause | no | +| istanbul-reports | 3.2.0 | BSD-3-Clause | no | +| itoa | 1.0.18 | MIT OR Apache-2.0 | no | +| javascriptcore-rs | 1.1.2 | MIT | no | +| javascriptcore-rs-sys | 1.1.1 | MIT | no | +| jinja2 | 3.1.6 | BSD-2-Clause AND BSD-3-Clause | no | +| jiti | 2.7.0 | MIT | no | +| jni | 0.21.1 | MIT OR Apache-2.0 | no | +| jni-sys | 0.3.1 | MIT OR Apache-2.0 | no | +| jni-sys | 0.4.1 | MIT OR Apache-2.0 | no | +| jni-sys-macros | 0.4.1 | MIT OR Apache-2.0 | no | +| joblib | 1.5.3 | BSD-3-Clause | no | +| js-sys | 0.3.103 | MIT OR Apache-2.0 | no | +| js-tokens | 10.0.0 | MIT | no | +| js-tokens | 4.0.0 | MIT | no | +| jsdoc-type-pratt-parser | 8.0.0 | MIT | no | +| jsdom | 29.1.1 | MIT | no | +| jsdom | ^29.1.1 | NOASSERTION | yes | +| jsesc | 3.1.0 | MIT | no | +| json-buffer | 3.0.1 | MIT | no | +| json-patch | 3.0.1 | MIT OR Apache-2.0 | no | +| json-schema-traverse | 0.4.1 | MIT | no | +| json-stable-stringify-without-jsonify | 1.0.1 | MIT | no | +| json5 | 2.2.3 | MIT | no | +| jsonc-parser | 3.3.1 | MIT | no | +| jsonptr | 0.6.3 | MIT OR Apache-2.0 | no | +| julius | 0.2.8 | MIT | no | +| keyboard-types | 0.7.0 | MIT OR Apache-2.0 | no | +| keyv | 4.5.4 | MIT | no | +| lameenc | 1.8.4 | GPL-3.0-or-later | yes | +| lazy-loader | 0.5 | BSD-3-Clause | no | +| levn | 0.4.1 | MIT | no | +| libc | 0.2.186 | MIT OR Apache-2.0 | no | +| libloading | 0.8.9 | ISC | no | +| libredox | 0.1.18 | MIT | no | +| librosa | 0.11.0 | ISC | no | +| librt | 0.8.1 | BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1 | no | +| lightningcss | 1.32.0 | MPL-2.0 | yes | +| lightningcss | 1.33.0 | MPL-2.0 | yes | +| lightningcss-android-arm64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-arm64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-x64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-freebsd-x64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm-gnueabihf | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-gnu | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-musl | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-gnu | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-musl | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-arm64-msvc | 1.32.0 | MPL-2.0 | yes | +| lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-x64-msvc | 1.32.0 | MPL-2.0 | yes | +| lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | yes | +| linux-raw-sys | 0.12.1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| litemap | 0.8.2 | Unicode-3.0 | no | +| llvmlite | 0.45.1 | BSD-2-Clause | no | +| locate-path | 6.0.0 | MIT | no | +| lock_api | 0.4.14 | MIT OR Apache-2.0 | no | +| log | 0.4.33 | MIT OR Apache-2.0 | no | +| loupe | 3.2.1 | MIT | no | +| lru-cache | 11.5.2 | BlueOak-1.0.0 | no | +| lru-cache | 5.1.1 | ISC | no | +| lucide-react | 1.30.0 | ISC | no | +| lucide-react | ^1.24.0 | NOASSERTION | yes | +| lz-string | 1.5.0 | MIT | no | +| magic-string | 0.30.21 | MIT | no | +| magicast | 0.5.4 | MIT | no | +| make-dir | 4.0.0 | MIT | no | +| markdown-it-py | 4.0.0 | MIT | no | +| markup5ever | 0.38.0 | MIT OR Apache-2.0 | no | +| markupsafe | 3.0.3 | BSD-3-Clause | no | +| matrixmultiply | 0.3.10 | MIT OR Apache-2.0 | no | +| maturin | — | NOASSERTION | yes | +| mdn-data | 2.27.1 | CC0-1.0 | no | +| mdurl | 0.1.2 | MIT | no | +| memchr | 2.8.3 | Unlicense OR MIT | no | +| memoffset | 0.9.1 | MIT | no | +| mime | 0.3.17 | MIT OR Apache-2.0 | no | +| min-indent | 1.0.1 | MIT | no | +| minimatch | 10.2.6 | BlueOak-1.0.0 | no | +| minimist | 1.2.8 | MIT | no | +| minipass | 7.1.3 | BlueOak-1.0.0 | no | +| miniz_oxide | 0.8.9 | MIT OR Zlib OR Apache-2.0 | no | +| mio | 1.2.1 | MIT | no | +| mpmath | 1.3.0 | BSD-3-Clause | no | +| ms | 2.1.3 | MIT | no | +| msgpack | 1.2.1 | Apache-2.0 | no | +| muda | 0.19.3 | Apache-2.0 OR MIT | no | +| mypy | 1.19.1 | BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1 | no | +| mypy-extensions | 1.1.0 | MIT | no | +| nanoid | 3.3.18 | MIT | no | +| natural-compare | 1.4.0 | MIT | no | +| ndarray | 0.16.1 | MIT OR Apache-2.0 | no | +| ndk | 0.9.0 | MIT OR Apache-2.0 | no | +| ndk-sys | 0.6.0+11769913 | MIT OR Apache-2.0 | no | +| networkx | 3.6.1 | BSD-3-Clause | no | +| new_debug_unreachable | 1.0.6 | MIT | no | +| node-releases | 2.0.53 | MIT | no | +| num-complex | 0.4.6 | MIT OR Apache-2.0 | no | +| num-conv | 0.2.2 | MIT OR Apache-2.0 | no | +| num-integer | 0.1.46 | MIT OR Apache-2.0 | no | +| num-traits | 0.2.19 | MIT OR Apache-2.0 | no | +| num_enum | 0.7.6 | BSD-3-Clause OR MIT OR Apache-2.0 | no | +| num_enum_derive | 0.7.6 | BSD-3-Clause OR MIT OR Apache-2.0 | no | +| numba | 0.62.1 | 0BSD AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND LicenseRef-scancode-python-cwi AND LicenseRef-scancode-secret-labs-2011 AND LicenseRef-scancode-unicode AND MIT AND Python-2.0 | no | +| numpy | 0.29.0 | BSD-2-Clause | no | +| numpy | 2.3.5 | Apache-2.0 AND BSD-3-Clause AND MIT AND Zlib | no | +| nvidia-cublas | 13.1.1.3 | Apache-2.0 | no | +| nvidia-cuda-cupti | 13.0.85 | Apache-2.0 | no | +| nvidia-cuda-nvrtc | 13.0.88 | LicenseRef-NVIDIA-Proprietary | no | +| nvidia-cuda-runtime | 13.0.96 | Apache-2.0 | no | +| nvidia-cudnn-cu13 | 9.20.0.48 | Apache-2.0 | no | +| nvidia-cufft | 12.0.0.61 | Apache-2.0 | no | +| nvidia-cufile | 1.15.1.6 | LicenseRef-NVIDIA-Proprietary | no | +| nvidia-curand | 10.4.0.35 | LicenseRef-NVIDIA-Proprietary | no | +| nvidia-cusolver | 12.0.4.66 | LicenseRef-NVIDIA-Proprietary | no | +| nvidia-cusparse | 12.6.3.3 | LicenseRef-NVIDIA-Proprietary | no | +| nvidia-cusparselt-cu13 | 0.8.1 | Apache-2.0 | no | +| nvidia-nccl-cu13 | 2.29.7 | Apache-2.0 | no | +| nvidia-nvjitlink | 13.0.88 | LicenseRef-NVIDIA-Proprietary | no | +| nvidia-nvshmem-cu13 | 3.4.5 | Apache-2.0 | no | +| nvidia-nvtx | 13.0.85 | LicenseRef-NVIDIA-Proprietary | no | +| objc2 | 0.6.4 | MIT | no | +| objc2-app-kit | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-cloud-kit | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-data | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-foundation | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-graphics | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-image | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-location | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-text | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-encode | 4.1.0 | MIT | no | +| objc2-exception-helper | 0.1.1 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-foundation | 0.3.2 | MIT | no | +| objc2-io-surface | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-quartz-core | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-ui-kit | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-user-notifications | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-web-kit | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| object-deep-merge | 2.0.1 | MIT | no | +| obug | 2.1.4 | MIT | no | +| omegaconf | 2.3.1 | BSD-2-Clause AND BSD-3-Clause | no | +| once_cell | 1.21.4 | MIT OR Apache-2.0 | no | +| open | 10.2.0 | MIT | no | +| openunmix | 1.3.0 | MIT | no | +| option-ext | 0.2.0 | MPL-2.0 | yes | +| optionator | 0.9.4 | MIT | no | +| ossf/scorecard-action | 4eaacf0543bb3f2c246792bd56e8cdeffafb205a | NOASSERTION | yes | +| oxc-parser | 0.127.0 | MIT | no | +| oxc-resolver | 11.24.2 | MIT | no | +| p-limit | 3.1.0 | MIT | no | +| p-locate | 5.0.0 | MIT | no | +| packaging | 26.0 | Apache-2.0 AND BSD-2-Clause | no | +| pango | 0.18.3 | MIT | no | +| pango-sys | 0.18.0 | MIT | no | +| parking_lot | 0.12.5 | MIT OR Apache-2.0 | no | +| parking_lot_core | 0.9.12 | MIT OR Apache-2.0 | no | +| parse-imports-exports | 0.2.4 | MIT | no | +| parse-statements | 1.0.11 | JSON AND MIT | no | +| parse5 | 8.0.1 | MIT | no | +| path-exists | 4.0.0 | MIT | no | +| path-key | 3.1.1 | MIT | no | +| path-parse | 1.0.7 | MIT | no | +| path-scurry | 2.0.2 | BlueOak-1.0.0 | no | +| pathe | 2.0.3 | MIT | no | +| pathspec | 1.0.4 | MPL-2.0 | yes | +| pathval | 2.0.1 | MIT | no | +| pdfjs-dist | 6.2.108 | Apache-2.0 | no | +| percent-encoding | 2.3.2 | MIT OR Apache-2.0 | no | +| phf | 0.13.1 | MIT | no | +| phf_codegen | 0.13.1 | MIT | no | +| phf_generator | 0.13.1 | MIT | no | +| phf_macros | 0.13.1 | MIT | no | +| phf_shared | 0.13.1 | MIT | no | +| picocolors | 1.1.1 | ISC | no | +| picomatch | 4.0.5 | MIT | no | +| pin-project-lite | 0.2.17 | Apache-2.0 OR MIT | no | +| pkg-config | 0.3.33 | MIT OR Apache-2.0 | no | +| platformdirs | 4.9.4 | MIT | no | +| plist | 1.10.0 | MIT | no | +| pluggy | 1.6.0 | MIT | no | +| png | 0.17.16 | MIT OR Apache-2.0 | no | +| png | 0.18.1 | MIT OR Apache-2.0 | no | +| pollster | 0.4.0 | Apache-2.0 OR MIT | no | +| pooch | 1.9.0 | BSD-3-Clause | no | +| portable-atomic | 1.13.1 | Apache-2.0 OR MIT | no | +| portable-atomic-util | 0.2.7 | Apache-2.0 OR MIT | no | +| postcss | 8.5.25 | MIT | no | +| potential_utf | 0.1.5 | Unicode-3.0 | no | +| powerfmt | 0.2.0 | MIT OR Apache-2.0 | no | +| precomputed-hash | 0.1.1 | MIT | no | +| prelude-ls | 1.2.1 | MIT | no | +| pretty-format | 27.5.1 | MIT | no | +| proc-macro-crate | 1.3.1 | MIT OR Apache-2.0 | no | +| proc-macro-crate | 2.0.2 | MIT OR Apache-2.0 | no | +| proc-macro-crate | 3.5.0 | MIT OR Apache-2.0 | no | +| proc-macro-error | 1.0.4 | MIT OR Apache-2.0 | no | +| proc-macro-error-attr | 1.0.4 | MIT OR Apache-2.0 | no | +| proc-macro2 | 1.0.106 | MIT OR Apache-2.0 | no | +| punycode | 2.3.1 | MIT | no | +| pure-rand | 8.4.2 | MIT | no | +| pycparser | 3.0 | BSD-3-Clause | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pyo3 | 0.29.0 | MIT OR Apache-2.0 | no | +| pyo3-build-config | 0.29.0 | MIT OR Apache-2.0 | no | +| pyo3-ffi | 0.29.0 | MIT OR Apache-2.0 | no | +| pyo3-macros | 0.29.0 | MIT OR Apache-2.0 | no | +| pyo3-macros-backend | 0.29.0 | MIT OR Apache-2.0 | no | +| pytest | 9.0.3 | MIT | no | +| pytest-cov | 7.0.0 | MIT | no | +| pyyaml | 6.0.3 | MIT | no | +| quick-xml | 0.39.4 | MIT | no | +| quick-xml | 0.41.0 | MIT | no | +| quote | 1.0.46 | MIT OR Apache-2.0 | no | +| r-efi | 5.3.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | yes | +| r-efi | 6.0.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | yes | +| raw-window-handle | 0.6.2 | MIT OR Apache-2.0 OR Zlib | no | +| rawpointer | 0.2.1 | MIT OR Apache-2.0 | no | +| react | 19.2.8 | MIT | no | +| react | ^19.2.4 | NOASSERTION | yes | +| react-docgen | 8.0.3 | MIT | no | +| react-docgen-typescript | 2.4.0 | MIT | no | +| react-dom | 19.2.8 | MIT | no | +| react-dom | ^19.2.7 | NOASSERTION | yes | +| react-is | 17.0.2 | MIT | no | +| recast | 0.23.19 | MIT | no | +| redent | 3.0.0 | MIT | no | +| redox_syscall | 0.5.18 | MIT | no | +| redox_users | 0.5.2 | MIT | no | +| ref-cast | 1.0.25 | MIT OR Apache-2.0 | no | +| ref-cast-impl | 1.0.25 | MIT OR Apache-2.0 | no | +| regex | 1.13.0 | MIT OR Apache-2.0 | no | +| regex-automata | 0.4.15 | MIT OR Apache-2.0 | no | +| regex-syntax | 0.8.11 | MIT OR Apache-2.0 | no | +| requests | 2.33.0 | Apache-2.0 | no | +| require-from-string | 2.0.2 | MIT | no | +| reqwest | 0.13.4 | MIT OR Apache-2.0 | no | +| reselect | 5.2.0 | MIT | no | +| reserved-identifiers | 1.2.0 | MIT | no | +| resolve | 1.22.12 | MIT | no | +| retrying | 1.4.2 | Apache-2.0 | no | +| rfd | 0.17.2 | MIT | no | +| rich | 15.0.0 | MIT | no | +| rolldown | 1.2.3 | MIT | no | +| ruff | 0.15.5 | MIT | no | +| run-applescript | 7.1.0 | MIT | no | +| rustc-hash | 2.1.3 | Apache-2.0 OR MIT | no | +| rustc_version | 0.4.1 | MIT OR Apache-2.0 | no | +| rustix | 1.1.4 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| rustversion | 1.0.23 | MIT OR Apache-2.0 | no | +| same-file | 1.0.6 | Unlicense OR MIT | no | +| saxes | 6.0.0 | ISC | no | +| scheduler | 0.27.0 | MIT | no | +| schemars | 0.8.22 | MIT | no | +| schemars | 0.9.0 | MIT | no | +| schemars | 1.2.1 | MIT | no | +| schemars_derive | 0.8.22 | MIT | no | +| scikit-learn | 1.8.0 | BSD-3-Clause | no | +| scipy | 1.17.1 | BSD-3-Clause | no | +| scoped-tls | 1.0.1 | MIT OR Apache-2.0 | no | +| scopeguard | 1.2.0 | MIT OR Apache-2.0 | no | +| selectors | 0.36.1 | MPL-2.0 | yes | +| semver | 1.0.28 | MIT OR Apache-2.0 | no | +| semver | 6.3.1 | ISC | no | +| semver | 7.8.5 | ISC | no | +| serde | 1.0.228 | MIT OR Apache-2.0 | no | +| serde | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| serde-untagged | 0.1.9 | MIT OR Apache-2.0 | no | +| serde_core | 1.0.228 | MIT OR Apache-2.0 | no | +| serde_derive | 1.0.228 | MIT OR Apache-2.0 | no | +| serde_derive_internals | 0.29.1 | MIT OR Apache-2.0 | no | +| serde_json | 1.0.150 | MIT OR Apache-2.0 | no | +| serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| serde_repr | 0.1.20 | MIT OR Apache-2.0 | no | +| serde_spanned | 0.6.9 | MIT OR Apache-2.0 | no | +| serde_spanned | 1.1.1 | MIT OR Apache-2.0 | no | +| serde_with | 3.21.0 | MIT OR Apache-2.0 | no | +| serde_with_macros | 3.21.0 | MIT OR Apache-2.0 | no | +| serialize-to-javascript | 0.1.2 | MIT OR Apache-2.0 | no | +| serialize-to-javascript-impl | 0.1.2 | MIT OR Apache-2.0 | no | +| servo_arc | 0.4.3 | MIT OR Apache-2.0 | no | +| setuptools | 81.0.0 | MIT | no | +| sha2 | 0.10.9 | MIT OR Apache-2.0 | no | +| shebang-command | 2.0.0 | MIT | no | +| shebang-regex | 3.0.0 | MIT | no | +| shlex | 2.0.1 | MIT OR Apache-2.0 | no | +| siginfo | 2.0.0 | ISC | no | +| simd-adler32 | 0.3.9 | MIT | no | +| siphasher | 1.0.3 | MIT OR Apache-2.0 | no | +| slab | 0.4.12 | MIT | no | +| smallvec | 1.15.2 | MIT OR Apache-2.0 | no | +| socket2 | 0.6.4 | MIT OR Apache-2.0 | no | +| softbuffer | 0.4.8 | MIT OR Apache-2.0 | no | +| sonner | 2.0.8 | MIT | no | +| sonner | ^2.0.7 | NOASSERTION | yes | +| soundfile | 0.13.1 | BSD-3-Clause AND Python-2.0 | no | +| soup3 | 0.5.0 | MIT | no | +| soup3-sys | 0.5.0 | MIT | no | +| source-map | 0.6.1 | BSD-3-Clause | no | +| source-map-js | 1.2.1 | BSD-3-Clause | no | +| soxr | 1.0.0 | Python-2.0 AND LGPL-2.1-or-later | yes | +| spdx-exceptions | 2.5.0 | CC-BY-3.0 | no | +| spdx-expression-parse | 5.0.0 | MIT | no | +| spdx-license-ids | 3.0.23 | CC0-1.0 | no | +| stable_deref_trait | 1.2.1 | MIT OR Apache-2.0 | no | +| stackback | 0.0.2 | MIT | no | +| standard-aifc | 3.13.0 | PSF-2.0 | no | +| standard-chunk | 3.13.0 | PSF-2.0 | no | +| standard-sunau | 3.13.0 | PSF-2.0 | no | +| std-env | 4.2.0 | MIT | no | +| stevedore | 5.7.0 | Apache-2.0 | no | +| storybook | 10.5.7 | MIT | no | +| storybook | ^10.4.6 | NOASSERTION | yes | +| string_cache | 0.9.0 | MIT OR Apache-2.0 | no | +| string_cache_codegen | 0.6.1 | MIT OR Apache-2.0 | no | +| strip-bom | 3.0.0 | MIT | no | +| strip-indent | 3.0.0 | MIT | no | +| strip-indent | 4.1.1 | MIT | no | +| strsim | 0.11.1 | MIT | no | +| submitit | 1.5.4 | MIT | no | +| supports-color | 7.2.0 | MIT | no | +| supports-preserve-symlinks-flag | 1.0.0 | MIT | no | +| swift-rs | 1.0.7 | MIT OR Apache-2.0 | no | +| symbol-tree | 3.2.4 | MIT | no | +| sympy | 1.14.0 | BSD-2-Clause AND BSD-3-Clause AND MIT | no | +| syn | 1.0.109 | MIT OR Apache-2.0 | no | +| syn | 2.0.118 | MIT OR Apache-2.0 | no | +| sync_wrapper | 1.0.2 | Apache-2.0 | no | +| synstructure | 0.13.2 | MIT | no | +| system-deps | 6.2.2 | MIT OR Apache-2.0 | no | +| tailwind-merge | 3.6.0 | MIT | no | +| tailwind-merge | ^3.6.0 | NOASSERTION | yes | +| tailwindcss | 4.3.3 | MIT | no | +| tailwindcss | ^4.2.4 | NOASSERTION | yes | +| tao | 0.35.3 | Apache-2.0 | no | +| tao-macros | 0.1.3 | MIT OR Apache-2.0 | no | +| tapable | 2.3.3 | MIT | no | +| target-lexicon | 0.12.16 | Apache-2.0 WITH LLVM-exception | no | +| target-lexicon | 0.13.5 | Apache-2.0 WITH LLVM-exception | no | +| tauri | 2.11.5 | Apache-2.0 OR MIT | no | +| tauri-build | 2.6.3 | Apache-2.0 OR MIT | no | +| tauri-codegen | 2.6.3 | Apache-2.0 OR MIT | no | +| tauri-macros | 2.6.3 | Apache-2.0 OR MIT | no | +| tauri-runtime | 2.11.3 | Apache-2.0 OR MIT | no | +| tauri-runtime-wry | 2.11.4 | Apache-2.0 OR MIT | no | +| tauri-utils | 2.9.3 | Apache-2.0 OR MIT | no | +| tauri-winres | 0.3.6 | MIT | no | +| tendril | 0.5.1 | MIT OR Apache-2.0 | no | +| thiserror | 1.0.69 | MIT OR Apache-2.0 | no | +| thiserror | 2.0.18 | MIT OR Apache-2.0 | no | +| thiserror-impl | 1.0.69 | MIT OR Apache-2.0 | no | +| thiserror-impl | 2.0.18 | MIT OR Apache-2.0 | no | +| threadpoolctl | 3.6.0 | BSD-3-Clause | no | +| time | 0.3.53 | MIT OR Apache-2.0 | no | +| time | >= 0.3.0,< 0.4.0 | NOASSERTION | yes | +| time-core | 0.1.9 | MIT OR Apache-2.0 | no | +| time-macros | 0.2.31 | MIT OR Apache-2.0 | no | +| tiny-invariant | 1.3.3 | MIT | no | +| tinybench | 2.9.0 | MIT | no | +| tinyexec | 1.3.0 | MIT | no | +| tinyglobby | 0.2.17 | MIT | no | +| tinyrainbow | 2.0.0 | MIT | no | +| tinyrainbow | 3.1.1 | MIT | no | +| tinyspy | 4.0.4 | MIT | no | +| tinystr | 0.8.3 | Unicode-3.0 | no | +| tinyvec | 1.12.0 | Zlib OR Apache-2.0 OR MIT | no | +| tinyvec_macros | 0.1.1 | MIT OR Apache-2.0 OR Zlib | no | +| tldts | 7.4.10 | MIT | no | +| tldts-core | 7.4.10 | MIT | no | +| to-valid-identifier | 1.0.0 | MIT | no | +| tokio | 1.52.3 | MIT | no | +| tokio-util | 0.7.18 | MIT | no | +| toml | 0.8.2 | MIT OR Apache-2.0 | no | +| toml | 0.9.12+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml | 1.1.2+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_datetime | 0.6.3 | MIT OR Apache-2.0 | no | +| toml_datetime | 0.7.5+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_datetime | 1.1.1+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_edit | 0.19.15 | MIT OR Apache-2.0 | no | +| toml_edit | 0.20.2 | MIT OR Apache-2.0 | no | +| toml_edit | 0.25.12+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_parser | 1.1.2+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_writer | 1.1.1+spec-1.1.0 | MIT OR Apache-2.0 | no | +| torch | 2.12.1 | BSD-2-Clause | no | +| torchaudio | 2.11.0 | BSD-2-Clause | no | +| tough-cookie | 6.0.2 | BSD-3-Clause | no | +| tower | 0.5.3 | MIT | no | +| tower-http | 0.6.11 | MIT | no | +| tower-layer | 0.3.3 | MIT | no | +| tower-service | 0.3.3 | MIT | no | +| tqdm | 4.68.3 | MIT AND MPL-2.0 | yes | +| tr46 | 6.0.0 | MIT | no | +| tracing | 0.1.44 | MIT | no | +| tracing-core | 0.1.36 | MIT | no | +| treetable | 0.2.6 | Unlicense | no | +| triton | 3.7.1 | MIT | no | +| try-lock | 0.2.5 | MIT | no | +| ts-api-utils | 2.5.0 | MIT | no | +| ts-dedent | 2.3.0 | MIT | no | +| tsconfig-paths | 4.2.0 | MIT | no | +| tslib | 2.8.1 | 0BSD | no | +| tw-animate-css | 1.4.0 | MIT | no | +| tw-animate-css | ^1.4.0 | NOASSERTION | yes | +| type-check | 0.4.0 | MIT | no | +| typeid | 1.0.3 | MIT OR Apache-2.0 | no | +| typenum | 1.20.1 | MIT OR Apache-2.0 | no | +| typescript | 6.0.3 | Apache-2.0 | no | +| typescript | ^6.0.3 | NOASSERTION | yes | +| typescript-eslint | 8.66.0 | MIT | no | +| typescript-eslint | ^8.63.0 | NOASSERTION | yes | +| typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| undici | 7.29.0 | MIT | no | +| undici-types | 8.3.0 | MIT | no | +| unic-char-property | 0.9.0 | MIT OR Apache-2.0 | no | +| unic-char-range | 0.9.0 | MIT OR Apache-2.0 | no | +| unic-common | 0.9.0 | MIT OR Apache-2.0 | no | +| unic-ucd-ident | 0.9.0 | MIT OR Apache-2.0 | no | +| unic-ucd-version | 0.9.0 | MIT OR Apache-2.0 | no | +| unicode-ident | 1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0 | no | +| unicode-segmentation | 1.13.3 | MIT OR Apache-2.0 | no | +| unplugin | 2.3.11 | MIT | no | +| update-browserslist-db | 1.3.0 | MIT | no | +| uri-js | 4.4.1 | BSD-2-Clause AND BSD-2-Clause-Views | no | +| url | 2.5.8 | MIT OR Apache-2.0 | no | +| url | >= 2.5.8,< 3.0.0 | NOASSERTION | yes | +| urllib3 | 2.7.0 | MIT | no | +| urlpattern | 0.3.0 | MIT | no | +| use-sync-external-store | 1.6.0 | MIT | no | +| utf8_iter | 1.0.4 | Apache-2.0 OR MIT | no | +| uuid | 1.23.4 | Apache-2.0 OR MIT | no | +| uuid | 1.25.0 | Apache-2.0 OR MIT | no | +| uuid | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| version-compare | 0.2.1 | MIT | no | +| version_check | 0.9.5 | MIT OR Apache-2.0 | no | +| vite | 8.2.1 | MIT | no | +| vite | ^8.1.4 | NOASSERTION | yes | +| vitest | 4.1.10 | MIT | no | +| vitest | ^4.1.10 | NOASSERTION | yes | +| vswhom | 0.1.0 | MIT | no | +| vswhom-sys | 0.1.3 | MIT | no | +| w3c-xmlserializer | 5.0.0 | MIT | no | +| walkdir | 2.5.0 | Unlicense OR MIT | no | +| want | 0.3.1 | MIT | no | +| wasi | 0.11.1+wasi-snapshot-preview1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| wasip2 | 1.0.4+wasi-0.2.12 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| wasm-bindgen | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-futures | 0.4.76 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro-support | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-shared | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-streams | 0.5.0 | MIT OR Apache-2.0 | no | +| wayland-backend | 0.3.15 | MIT | no | +| wayland-client | 0.31.14 | MIT | no | +| wayland-protocols | 0.32.13 | MIT | no | +| wayland-scanner | 0.31.10 | MIT | no | +| wayland-sys | 0.31.11 | MIT | no | +| web-sys | 0.3.103 | MIT OR Apache-2.0 | no | +| web_atoms | 0.2.5 | MIT OR Apache-2.0 | no | +| webidl-conversions | 8.0.1 | BSD-2-Clause | no | +| webkit2gtk | 2.0.2 | MIT | no | +| webkit2gtk-sys | 2.0.2 | MIT | no | +| webpack-virtual-modules | 0.6.2 | MIT | no | +| webview2-com | 0.38.2 | MIT | no | +| webview2-com-macros | 0.8.1 | MIT | no | +| webview2-com-sys | 0.38.2 | MIT | no | +| whatwg-mimetype | 5.0.0 | MIT | no | +| whatwg-url | 16.0.1 | MIT | no | +| which | 2.0.2 | ISC | no | +| why-is-node-running | 2.3.0 | MIT | no | +| winapi | 0.3.9 | MIT OR Apache-2.0 | no | +| winapi-i686-pc-windows-gnu | 0.4.0 | MIT OR Apache-2.0 | no | +| winapi-util | 0.1.11 | Unlicense OR MIT | no | +| winapi-x86_64-pc-windows-gnu | 0.4.0 | MIT OR Apache-2.0 | no | +| window-vibrancy | 0.6.0 | Apache-2.0 OR MIT | no | +| windows | 0.61.3 | MIT OR Apache-2.0 | no | +| windows-collections | 0.2.0 | MIT OR Apache-2.0 | no | +| windows-core | 0.61.2 | MIT OR Apache-2.0 | no | +| windows-core | 0.62.2 | MIT OR Apache-2.0 | no | +| windows-future | 0.2.1 | MIT OR Apache-2.0 | no | +| windows-implement | 0.60.2 | MIT OR Apache-2.0 | no | +| windows-interface | 0.59.3 | MIT OR Apache-2.0 | no | +| windows-link | 0.1.3 | MIT OR Apache-2.0 | no | +| windows-link | 0.2.1 | MIT OR Apache-2.0 | no | +| windows-numerics | 0.2.0 | MIT OR Apache-2.0 | no | +| windows-result | 0.3.4 | MIT OR Apache-2.0 | no | +| windows-result | 0.4.1 | MIT OR Apache-2.0 | no | +| windows-strings | 0.4.2 | MIT OR Apache-2.0 | no | +| windows-strings | 0.5.1 | MIT OR Apache-2.0 | no | +| windows-sys | 0.45.0 | MIT OR Apache-2.0 | no | +| windows-sys | 0.59.0 | MIT OR Apache-2.0 | no | +| windows-sys | 0.61.2 | MIT OR Apache-2.0 | no | +| windows-targets | 0.42.2 | MIT OR Apache-2.0 | no | +| windows-targets | 0.52.6 | MIT OR Apache-2.0 | no | +| windows-threading | 0.1.0 | MIT OR Apache-2.0 | no | +| windows-version | 0.1.7 | MIT OR Apache-2.0 | no | +| windows_aarch64_gnullvm | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_aarch64_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_aarch64_msvc | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_aarch64_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_gnu | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_i686_gnu | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_msvc | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_i686_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnu | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnu | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnullvm | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_msvc | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_x86_64_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| winnow | 0.5.40 | MIT | no | +| winnow | 0.7.15 | MIT | no | +| winnow | 1.0.3 | MIT | no | +| winreg | 0.55.0 | MIT | no | +| wit-bindgen | 0.57.1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| word-wrap | 1.2.5 | MIT | no | +| writeable | 0.6.3 | Unicode-3.0 | no | +| wry | 0.55.1 | Apache-2.0 OR MIT | no | +| ws | 8.21.3 | MIT | no | +| wsl-utils | 0.1.0 | MIT | no | +| xml-name-validator | 5.0.0 | Apache-2.0 | no | +| xmlchars | 2.2.0 | MIT | no | +| yallist | 3.1.1 | ISC | no | +| yocto-queue | 0.1.0 | MIT | no | +| yoke | 0.8.3 | Unicode-3.0 | no | +| yoke-derive | 0.8.2 | Unicode-3.0 | no | +| yt-dlp | 2026.7.4 | Unlicense AND Unlicense AND GPL-3.0-or-later AND MPL-2.0 AND MIT AND BSD-3-Clause AND Apache-2.0 AND MIT AND GPL-2.0-or-later AND BSD-3-Clause AND MIT AND LGPL-2.1-only AND BSD-2-Clause AND GPL-2.0-or-later | yes | +| zerofrom | 0.1.8 | Unicode-3.0 | no | +| zerofrom-derive | 0.1.7 | Unicode-3.0 | no | +| zerotrie | 0.2.4 | Unicode-3.0 | no | +| zerovec | 0.11.6 | Unicode-3.0 | no | +| zerovec-derive | 0.11.3 | Unicode-3.0 | no | +| zmij | 1.0.21 | MIT | no | + +### ContextualWisdomLab/CalendarWeave + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/ccube-jco-potential-customer + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/clearfolio + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/setup-java | b6effb05e454b25005698d916606bdc6ffcbf961 | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| com.code-intelligence:jazzer-api | 0.30.0 | Apache-2.0 | no | +| com.code-intelligence:jazzer-junit | 0.30.0 | Apache-2.0 | no | +| com.fasterxml.jackson.core:jackson-databind | 2.22.1 | Apache-2.0 | no | +| com.fasterxml.jackson:jackson-bom | 2.22.1 | Apache-2.0 | no | +| com.github.junrar:junrar | 8.1.0 | LicenseRef-bad-non-standard | no | +| commons-io:commons-io | 2.22.0 | Apache-2.0 | no | +| iniconfig | 2.3.0 | MIT | no | +| org.apache.commons:commons-lang3 | 3.20.0 | Apache-2.0 | no | +| org.apache.maven.plugins:maven-compiler-plugin | — | NOASSERTION | yes | +| org.apache.maven.plugins:maven-javadoc-plugin | 3.12.0 | Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND LicenseRef-scancode-public-domain AND MIT | no | +| org.apache.maven.plugins:maven-surefire-plugin | — | NOASSERTION | yes | +| org.apache.pdfbox:pdfbox | 3.0.8 | Apache-2.0 | no | +| org.bouncycastle:bcpkix-jdk18on | 1.85 | MIT | no | +| org.bouncycastle:bcprov-jdk18on | 1.85.2 | LicenseRef-bad-non-standard | no | +| org.jacoco:jacoco-maven-plugin | 0.8.15 | EPL-2.0 OR (Apache-2.0 AND EPL-2.0) | yes | +| org.springframework.boot:spring-boot-maven-plugin | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-starter-log4j2 | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-starter-test | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-starter-validation | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-starter-webflux | — | NOASSERTION | yes | +| org.webjars.npm:pdfjs-dist | 6.1.200 | Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause AND CC0-1.0 AND MIT AND OFL-1.1 | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| pluggy | 1.6.0 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pytest | 9.1.1 | MIT | no | + +### ContextualWisdomLab/codec-carver + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| aho-corasick | 1.1.4 | Unlicense OR MIT | no | +| aiofiles | — | NOASSERTION | yes | +| aiofiles | 25.1.0 | Apache-2.0 | no | +| aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | yes | +| aiohttp | 3.14.3 | Apache-2.0 AND MIT | no | +| aiosignal | 1.4.0 | Apache-2.0 | no | +| android_system_properties | 0.1.5 | MIT OR Apache-2.0 | no | +| annotated-doc | 0.0.4 | MIT | no | +| annotated-types | 0.7.0 | MIT | no | +| anstream | 1.0.0 | MIT OR Apache-2.0 | no | +| anstyle | 1.0.14 | MIT OR Apache-2.0 | no | +| anstyle-parse | 1.0.0 | MIT OR Apache-2.0 | no | +| anstyle-query | 1.1.5 | MIT OR Apache-2.0 | no | +| anstyle-wincon | 3.0.11 | MIT OR Apache-2.0 | no | +| anyhow | 1.0.103 | MIT OR Apache-2.0 | no | +| anyio | 4.14.1 | MIT | no | +| anyio | 4.14.2 | MIT | no | +| atheris | 3.0.0 | Apache-2.0 | no | +| attrs | 26.1.0 | MIT | no | +| autocfg | 1.5.1 | Apache-2.0 OR MIT | no | +| bitflags | 2.13.0 | MIT OR Apache-2.0 | no | +| block-buffer | 0.10.4 | MIT OR Apache-2.0 | no | +| block2 | 0.6.2 | MIT | no | +| bumpalo | 3.20.3 | MIT OR Apache-2.0 | no | +| cc | 1.2.67 | MIT OR Apache-2.0 | no | +| certifi | 2026.6.17 | MPL-2.0 | yes | +| cffi | 2.1.0 | MIT-0 | no | +| cfg-if | 1.0.4 | MIT OR Apache-2.0 | no | +| charset-normalizer | 3.4.9 | MIT | no | +| chrono | 0.4.45 | MIT OR Apache-2.0 | no | +| clap | 4.6.1 | MIT OR Apache-2.0 | no | +| clap_builder | 4.6.0 | MIT OR Apache-2.0 | no | +| clap_derive | 4.6.1 | MIT OR Apache-2.0 | no | +| clap_lex | 1.1.0 | MIT OR Apache-2.0 | no | +| click | 8.4.2 | BSD-3-Clause | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| colorchoice | 1.0.5 | MIT OR Apache-2.0 | no | +| core-foundation-sys | 0.8.7 | MIT OR Apache-2.0 | no | +| coverage | — | NOASSERTION | yes | +| coverage | 7.15.3 | Apache-2.0 | no | +| cpufeatures | 0.2.17 | MIT OR Apache-2.0 | no | +| crossbeam-deque | 0.8.7 | MIT OR Apache-2.0 | no | +| crossbeam-epoch | 0.9.20 | MIT OR Apache-2.0 | no | +| crossbeam-utils | 0.8.22 | MIT OR Apache-2.0 | no | +| crypto-common | 0.1.7 | MIT OR Apache-2.0 | no | +| cryptography | 49.0.0 | BSD-3-Clause OR Apache-2.0 | no | +| cryptography | 50.0.0 | Apache-2.0 OR BSD-3-Clause | no | +| datasets | 5.0.0 | Apache-2.0 | no | +| digest | 0.10.7 | MIT OR Apache-2.0 | no | +| dill | 0.4.1 | BSD-3-Clause | no | +| either | 1.16.0 | MIT OR Apache-2.0 | no | +| exceptiongroup | 1.3.1 | MIT AND Python-2.0 | no | +| fastapi | — | NOASSERTION | yes | +| fastapi | 0.139.0 | MIT | no | +| faster-whisper | 1.2.1 | MIT | no | +| filelock | 3.30.2 | MIT | no | +| find-msvc-tools | 0.1.9 | MIT OR Apache-2.0 | no | +| frozenlist | 1.8.0 | Apache-2.0 | no | +| fsspec | 2026.4.0 | BSD-3-Clause | no | +| futures-core | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-task | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-util | 0.3.32 | MIT OR Apache-2.0 | no | +| generic-array | 0.14.7 | MIT | no | +| h11 | 0.16.0 | MIT | no | +| heck | 0.5.0 | MIT OR Apache-2.0 | no | +| hf-xet | 1.5.2 | Apache-2.0 | no | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpcore2 | 2.5.0 | BSD-2-Clause AND BSD-3-Clause | no | +| httpx | — | NOASSERTION | yes | +| httpx | 0.28.1 | BSD-3-Clause | no | +| httpx-sse | 0.4.3 | MIT | no | +| httpx2 | 2.5.0 | BSD-2-Clause AND BSD-3-Clause | no | +| huggingface-hub | 1.23.0 | Apache-2.0 | no | +| hypothesis | — | NOASSERTION | yes | +| hypothesis | 6.165.0 | MPL-2.0 | yes | +| iana-time-zone | 0.1.65 | MIT OR Apache-2.0 | no | +| iana-time-zone-haiku | 0.1.2 | MIT OR Apache-2.0 | no | +| idna | 3.18 | BSD-3-Clause | no | +| interrogate | 1.7.0 | MIT | no | +| is_terminal_polyfill | 1.70.2 | MIT OR Apache-2.0 | no | +| itoa | 1.0.18 | MIT OR Apache-2.0 | no | +| jinja2 | 3.1.6 | BSD-2-Clause AND BSD-3-Clause | no | +| js-sys | 0.3.103 | MIT OR Apache-2.0 | no | +| jsonschema | 4.26.0 | MIT | no | +| jsonschema-specifications | 2025.9.1 | MIT | no | +| libc | 0.2.186 | MIT OR Apache-2.0 | no | +| llguidance | 1.7.6 | MIT | no | +| llvmlite | 0.48.0 | LicenseRef-bad-bsd-2-clause-and-apache-2.0-and-llvm-exception-and-bsd-2-clause | no | +| log | 0.4.33 | MIT OR Apache-2.0 | no | +| markdown-it-py | 4.2.0 | MIT | no | +| markupsafe | 3.0.3 | BSD-3-Clause | no | +| mcp | — | NOASSERTION | yes | +| mcp | 1.28.1 | MIT AND Python-2.0 | no | +| mdurl | 0.1.2 | MIT | no | +| memchr | 2.8.3 | Unlicense OR MIT | no | +| miniaudio | 1.71 | MIT AND Python-2.0 | no | +| mlx | 0.32.0 | MIT | no | +| mlx-audio | 0.4.5 | MIT | no | +| mlx-lm | 0.31.3 | MIT | no | +| mlx-metal | 0.32.0 | MIT | no | +| mlx-vlm | 0.6.4 | MIT | no | +| mlx-whisper | 0.4.3 | MIT | no | +| more-itertools | 11.1.0 | MIT | no | +| mpmath | 1.3.0 | BSD-3-Clause | no | +| multidict | 6.7.1 | Apache-2.0 | no | +| multiprocess | 0.70.19 | BSD-3-Clause | no | +| networkx | 3.6.1 | BSD-3-Clause | no | +| num-traits | 0.2.19 | MIT OR Apache-2.0 | no | +| numba | 0.66.0 | BSD-2-Clause AND BSD-3-Clause | no | +| numpy | 2.4.6 | BSD-3-Clause | no | +| objc2 | 0.6.4 | MIT | no | +| objc2-encode | 4.1.0 | MIT | no | +| objc2-foundation | 0.3.2 | MIT | no | +| once_cell | 1.21.4 | MIT OR Apache-2.0 | no | +| once_cell_polyfill | 1.70.2 | MIT OR Apache-2.0 | no | +| opencv-python | 5.0.0.93 | Apache-2.0 AND MIT | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| pandas | 3.0.3 | BSD-2-Clause AND BSD-3-Clause | no | +| pillow | 12.3.0 | MIT-CMU | no | +| pin-project-lite | 0.2.17 | Apache-2.0 OR MIT | no | +| proc-macro2 | 1.0.106 | MIT OR Apache-2.0 | no | +| propcache | 0.5.2 | Apache-2.0 | no | +| protobuf | 7.35.1 | BSD-3-Clause AND LicenseRef-scancode-protobuf | no | +| pyarrow | 25.0.0 | Apache-2.0 | no | +| pycparser | 3.0 | BSD-3-Clause | no | +| pydantic | 2.13.4 | MIT | no | +| pydantic-core | 2.46.4 | MIT | no | +| pydantic-settings | 2.14.2 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pyjwt | 2.13.0 | MIT | no | +| python-dateutil | 2.9.0.post0 | Apache-2.0 AND BSD-3-Clause | no | +| python-dotenv | 1.2.2 | BSD-3-Clause | no | +| python-multipart | — | NOASSERTION | yes | +| python-multipart | 0.0.32 | Apache-2.0 | no | +| pywin32 | 312 | PSF-2.0 | no | +| pyyaml | 6.0.3 | MIT | no | +| quote | 1.0.46 | MIT OR Apache-2.0 | no | +| rayon | 1.12.0 | MIT OR Apache-2.0 | no | +| rayon-core | 1.13.0 | MIT OR Apache-2.0 | no | +| referencing | 0.37.0 | MIT | no | +| regex | 1.13.0 | MIT OR Apache-2.0 | no | +| regex | 2026.7.10 | CNRI-Python AND Apache-2.0 | no | +| regex-automata | 0.4.15 | MIT OR Apache-2.0 | no | +| regex-syntax | 0.8.11 | MIT OR Apache-2.0 | no | +| requests | 2.34.2 | Apache-2.0 | no | +| rich | 15.0.0 | MIT | no | +| rpds-py | 0.30.0 | MIT | no | +| rpds-py | 2026.6.3 | MIT | no | +| rustversion | 1.0.23 | MIT OR Apache-2.0 | no | +| safetensors | 0.8.0 | Apache-2.0 | no | +| same-file | 1.0.6 | Unlicense OR MIT | no | +| scipy | 1.18.0 | BSD-3-Clause | no | +| sentencepiece | 0.2.2 | Apache-2.0 | no | +| serde | 1.0.228 | MIT OR Apache-2.0 | no | +| serde_core | 1.0.228 | MIT OR Apache-2.0 | no | +| serde_derive | 1.0.228 | MIT OR Apache-2.0 | no | +| serde_json | 1.0.150 | MIT OR Apache-2.0 | no | +| setuptools | 83.0.0 | MIT | no | +| sha2 | 0.10.9 | MIT OR Apache-2.0 | no | +| shellingham | 1.5.4 | ISC | no | +| shlex | 2.0.1 | MIT OR Apache-2.0 | no | +| six | 1.17.0 | MIT | no | +| slab | 0.4.12 | MIT | no | +| sortedcontainers | 2.4.0 | Apache-2.0 | no | +| sounddevice | 0.5.5 | MIT | no | +| sse-starlette | 3.4.5 | BSD-3-Clause | no | +| starlette | 1.3.1 | BSD-3-Clause | no | +| strsim | 0.11.1 | MIT | no | +| sympy | 1.14.0 | BSD-2-Clause AND BSD-3-Clause AND MIT | no | +| syn | 2.0.119 | MIT OR Apache-2.0 | no | +| tiktoken | 0.13.0 | MIT | no | +| tinyvec | 1.12.0 | Zlib OR Apache-2.0 OR MIT | no | +| tinyvec_macros | 0.1.1 | MIT OR Apache-2.0 OR Zlib | no | +| tokenizers | 0.22.2 | Apache-2.0 | no | +| torch | 2.13.0 | BSD-2-Clause | no | +| tqdm | 4.68.4 | MIT AND MPL-2.0 | yes | +| transformers | 5.12.1 | Apache-2.0 | no | +| truststore | 0.10.4 | MIT | no | +| typenum | 1.20.1 | MIT OR Apache-2.0 | no | +| typer | 0.27.0 | MIT | no | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.2 | MIT | no | +| unicode-ident | 1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0 | no | +| unicode-normalization | 0.1.25 | MIT OR Apache-2.0 | no | +| urllib3 | 2.7.0 | MIT | no | +| utf8parse | 0.2.2 | Apache-2.0 OR MIT | no | +| uvicorn | — | NOASSERTION | yes | +| uvicorn | 0.51.0 | BSD-3-Clause | no | +| version_check | 0.9.5 | MIT OR Apache-2.0 | no | +| walkdir | 2.5.0 | Unlicense OR MIT | no | +| wasm-bindgen | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro-support | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-shared | 0.2.126 | MIT OR Apache-2.0 | no | +| winapi-util | 0.1.11 | Unlicense OR MIT | no | +| windows-core | 0.62.2 | MIT OR Apache-2.0 | no | +| windows-implement | 0.60.2 | MIT OR Apache-2.0 | no | +| windows-interface | 0.59.3 | MIT OR Apache-2.0 | no | +| windows-link | 0.2.1 | MIT OR Apache-2.0 | no | +| windows-result | 0.4.1 | MIT OR Apache-2.0 | no | +| windows-strings | 0.5.1 | MIT OR Apache-2.0 | no | +| windows-sys | 0.61.2 | MIT OR Apache-2.0 | no | +| xxhash | 3.8.1 | BSD-2-Clause | no | +| yarl | 1.24.2 | Apache-2.0 | no | +| zmij | 1.0.23 | MIT | no | + +### ContextualWisdomLab/ConceptWeave + +No components reported. + +### ContextualWisdomLab/context-graph-contracts + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/contextual-orchestrator + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @adobe/css-tools | 4.5.0 | MIT | no | +| @babel/code-frame | 7.29.7 | MIT | no | +| @babel/compat-data | 7.29.7 | MIT | no | +| @babel/core | 7.29.7 | MIT | no | +| @babel/generator | 7.29.8 | MIT | no | +| @babel/helper-compilation-targets | 7.29.7 | MIT | no | +| @babel/helper-globals | 7.29.7 | MIT | no | +| @babel/helper-module-imports | 7.29.7 | MIT | no | +| @babel/helper-module-transforms | 7.29.7 | MIT | no | +| @babel/helper-string-parser | 7.29.7 | MIT | no | +| @babel/helper-validator-identifier | 7.29.7 | MIT | no | +| @babel/helper-validator-option | 7.29.7 | MIT | no | +| @babel/helpers | 7.29.7 | MIT | no | +| @babel/parser | 7.29.8 | MIT | no | +| @babel/runtime | 7.29.7 | MIT | no | +| @babel/template | 7.29.7 | MIT | no | +| @babel/traverse | 7.29.8 | MIT | no | +| @babel/types | 7.29.8 | MIT | no | +| @bcoe/v8-coverage | 1.0.2 | ISC AND MIT | no | +| @blazediff/core | 1.9.1 | MIT | no | +| @chromatic-com/storybook | 5.3.0 | MIT | no | +| @chromatic-com/storybook | latest | NOASSERTION | yes | +| @emnapi/core | 1.11.0 | MIT | no | +| @emnapi/core | 1.9.2 | MIT | no | +| @emnapi/runtime | 1.11.0 | MIT | no | +| @emnapi/runtime | 1.9.2 | MIT | no | +| @emnapi/wasi-threads | 1.2.1 | MIT | no | +| @emnapi/wasi-threads | 1.2.2 | MIT | no | +| @esbuild/aix-ppc64 | 0.28.2 | MIT | no | +| @esbuild/android-arm | 0.28.2 | MIT | no | +| @esbuild/android-arm64 | 0.28.2 | MIT | no | +| @esbuild/android-x64 | 0.28.2 | MIT | no | +| @esbuild/darwin-arm64 | 0.28.2 | MIT | no | +| @esbuild/darwin-x64 | 0.28.2 | MIT | no | +| @esbuild/freebsd-arm64 | 0.28.2 | MIT | no | +| @esbuild/freebsd-x64 | 0.28.2 | MIT | no | +| @esbuild/linux-arm | 0.28.2 | MIT | no | +| @esbuild/linux-arm64 | 0.28.2 | MIT | no | +| @esbuild/linux-ia32 | 0.28.2 | MIT | no | +| @esbuild/linux-loong64 | 0.28.2 | MIT | no | +| @esbuild/linux-mips64el | 0.28.2 | MIT | no | +| @esbuild/linux-ppc64 | 0.28.2 | MIT | no | +| @esbuild/linux-riscv64 | 0.28.2 | MIT | no | +| @esbuild/linux-s390x | 0.28.2 | MIT | no | +| @esbuild/linux-x64 | 0.28.2 | MIT | no | +| @esbuild/netbsd-arm64 | 0.28.2 | MIT | no | +| @esbuild/netbsd-x64 | 0.28.2 | MIT | no | +| @esbuild/openbsd-arm64 | 0.28.2 | MIT | no | +| @esbuild/openbsd-x64 | 0.28.2 | MIT | no | +| @esbuild/openharmony-arm64 | 0.28.2 | MIT | no | +| @esbuild/sunos-x64 | 0.28.2 | MIT | no | +| @esbuild/win32-arm64 | 0.28.2 | MIT | no | +| @esbuild/win32-ia32 | 0.28.2 | MIT | no | +| @esbuild/win32-x64 | 0.28.2 | MIT | no | +| @joshwooding/vite-plugin-react-docgen-typescript | 0.7.0 | MIT | no | +| @jridgewell/gen-mapping | 0.3.13 | MIT | no | +| @jridgewell/remapping | 2.3.5 | MIT | no | +| @jridgewell/resolve-uri | 3.1.2 | MIT | no | +| @jridgewell/sourcemap-codec | 1.5.5 | MIT | no | +| @jridgewell/trace-mapping | 0.3.31 | MIT | no | +| @mdx-js/react | 3.1.1 | MIT | no | +| @napi-rs/wasm-runtime | 1.2.3 | MIT | no | +| @neoconfetti/react | 1.0.0 | MIT | no | +| @oxc-parser/binding-android-arm-eabi | 0.127.0 | MIT | no | +| @oxc-parser/binding-android-arm64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-darwin-arm64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-darwin-x64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-freebsd-x64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm-gnueabihf | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm-musleabihf | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm64-musl | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-ppc64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-riscv64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-riscv64-musl | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-s390x-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-x64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-x64-musl | 0.127.0 | MIT | no | +| @oxc-parser/binding-openharmony-arm64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-wasm32-wasi | 0.127.0 | MIT | no | +| @oxc-parser/binding-win32-arm64-msvc | 0.127.0 | MIT | no | +| @oxc-parser/binding-win32-ia32-msvc | 0.127.0 | MIT | no | +| @oxc-parser/binding-win32-x64-msvc | 0.127.0 | MIT | no | +| @oxc-project/types | 0.127.0 | MIT | no | +| @oxc-project/types | 0.146.0 | MIT | no | +| @oxc-resolver/binding-android-arm-eabi | 11.21.2 | MIT | no | +| @oxc-resolver/binding-android-arm64 | 11.21.2 | MIT | no | +| @oxc-resolver/binding-darwin-arm64 | 11.21.2 | MIT | no | +| @oxc-resolver/binding-darwin-x64 | 11.21.2 | MIT | no | +| @oxc-resolver/binding-freebsd-x64 | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-arm-gnueabihf | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-arm-musleabihf | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-arm64-gnu | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-arm64-musl | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-ppc64-gnu | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-riscv64-gnu | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-riscv64-musl | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-s390x-gnu | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-x64-gnu | 11.21.2 | MIT | no | +| @oxc-resolver/binding-linux-x64-musl | 11.21.2 | MIT | no | +| @oxc-resolver/binding-openharmony-arm64 | 11.21.2 | MIT | no | +| @oxc-resolver/binding-wasm32-wasi | 11.21.2 | MIT | no | +| @oxc-resolver/binding-win32-arm64-msvc | 11.21.2 | MIT | no | +| @oxc-resolver/binding-win32-x64-msvc | 11.21.2 | MIT | no | +| @oxlint/binding-android-arm-eabi | 1.80.0 | MIT | no | +| @oxlint/binding-android-arm64 | 1.80.0 | MIT | no | +| @oxlint/binding-darwin-arm64 | 1.80.0 | MIT | no | +| @oxlint/binding-darwin-x64 | 1.80.0 | MIT | no | +| @oxlint/binding-freebsd-x64 | 1.80.0 | MIT | no | +| @oxlint/binding-linux-arm-gnueabihf | 1.80.0 | MIT | no | +| @oxlint/binding-linux-arm-musleabihf | 1.80.0 | MIT | no | +| @oxlint/binding-linux-arm64-gnu | 1.80.0 | MIT | no | +| @oxlint/binding-linux-arm64-musl | 1.80.0 | MIT | no | +| @oxlint/binding-linux-ppc64-gnu | 1.80.0 | MIT | no | +| @oxlint/binding-linux-riscv64-gnu | 1.80.0 | MIT | no | +| @oxlint/binding-linux-riscv64-musl | 1.80.0 | MIT | no | +| @oxlint/binding-linux-s390x-gnu | 1.80.0 | MIT | no | +| @oxlint/binding-linux-x64-gnu | 1.80.0 | MIT | no | +| @oxlint/binding-linux-x64-musl | 1.80.0 | MIT | no | +| @oxlint/binding-openharmony-arm64 | 1.80.0 | MIT | no | +| @oxlint/binding-win32-arm64-msvc | 1.80.0 | MIT | no | +| @oxlint/binding-win32-ia32-msvc | 1.80.0 | MIT | no | +| @oxlint/binding-win32-x64-msvc | 1.80.0 | MIT | no | +| @polka/url | 1.0.0-next.29 | MIT | no | +| @rolldown/binding-android-arm-eabi | 1.2.5 | MIT | no | +| @rolldown/binding-android-arm64 | 1.2.5 | MIT | no | +| @rolldown/binding-darwin-arm64 | 1.2.5 | MIT | no | +| @rolldown/binding-darwin-x64 | 1.2.5 | MIT | no | +| @rolldown/binding-freebsd-x64 | 1.2.5 | MIT | no | +| @rolldown/binding-linux-arm-gnueabihf | 1.2.5 | MIT | no | +| @rolldown/binding-linux-arm64-gnu | 1.2.5 | MIT | no | +| @rolldown/binding-linux-arm64-musl | 1.2.5 | MIT | no | +| @rolldown/binding-linux-ppc64-gnu | 1.2.5 | MIT | no | +| @rolldown/binding-linux-s390x-gnu | 1.2.5 | MIT | no | +| @rolldown/binding-linux-x64-gnu | 1.2.5 | MIT | no | +| @rolldown/binding-linux-x64-musl | 1.2.5 | MIT | no | +| @rolldown/binding-openharmony-arm64 | 1.2.5 | MIT | no | +| @rolldown/binding-win32-arm64-msvc | 1.2.5 | MIT | no | +| @rolldown/binding-win32-x64-msvc | 1.2.5 | MIT | no | +| @rolldown/pluginutils | 1.0.1 | MIT | no | +| @rollup/pluginutils | 5.4.0 | MIT | no | +| @standard-schema/spec | 1.1.0 | MIT | no | +| @storybook/addon-a11y | 10.5.10 | MIT | no | +| @storybook/addon-a11y | ^10.5.10 | NOASSERTION | yes | +| @storybook/addon-docs | 10.5.10 | MIT | no | +| @storybook/addon-docs | ^10.5.10 | NOASSERTION | yes | +| @storybook/addon-vitest | 10.5.10 | MIT | no | +| @storybook/addon-vitest | ^10.5.10 | NOASSERTION | yes | +| @storybook/builder-vite | 10.5.10 | MIT | no | +| @storybook/csf-plugin | 10.5.10 | MIT | no | +| @storybook/global | 5.0.0 | MIT | no | +| @storybook/icons | 2.1.0 | MIT | no | +| @storybook/react | 10.5.10 | MIT | no | +| @storybook/react-dom-shim | 10.5.10 | MIT | no | +| @storybook/react-vite | 10.5.10 | MIT | no | +| @storybook/react-vite | ^10.5.10 | NOASSERTION | yes | +| @testing-library/dom | 10.4.1 | MIT | no | +| @testing-library/jest-dom | 6.9.1 | MIT | no | +| @testing-library/user-event | 14.6.6 | MIT | no | +| @tybys/wasm-util | 0.10.3 | MIT | no | +| @types/aria-query | 5.0.4 | MIT | no | +| @types/babel__core | 7.20.5 | MIT | no | +| @types/babel__generator | 7.27.0 | MIT | no | +| @types/babel__template | 7.4.4 | MIT | no | +| @types/babel__traverse | 7.28.0 | MIT | no | +| @types/chai | 5.2.3 | MIT | no | +| @types/deep-eql | 4.0.2 | MIT | no | +| @types/doctrine | 0.0.9 | MIT | no | +| @types/estree | 1.0.9 | MIT | no | +| @types/mdx | 2.0.14 | MIT | no | +| @types/node | 24.13.3 | MIT | no | +| @types/node | ^24.13.3 | NOASSERTION | yes | +| @types/react | 19.2.18 | MIT | no | +| @types/react | ^19.2.18 | NOASSERTION | yes | +| @types/react-dom | 19.2.5 | MIT | no | +| @types/react-dom | ^19.2.4 | NOASSERTION | yes | +| @types/resolve | 1.20.6 | MIT | no | +| @vitejs/plugin-react | 6.1.0 | MIT | no | +| @vitejs/plugin-react | ^6.1.0 | NOASSERTION | yes | +| @vitest/browser | 4.1.11 | MIT | no | +| @vitest/browser-playwright | 4.1.11 | MIT | no | +| @vitest/browser-playwright | latest | NOASSERTION | yes | +| @vitest/coverage-v8 | 4.1.11 | MIT | no | +| @vitest/coverage-v8 | latest | NOASSERTION | yes | +| @vitest/expect | 3.2.4 | MIT | no | +| @vitest/expect | 4.1.11 | MIT | no | +| @vitest/mocker | 4.1.11 | MIT | no | +| @vitest/pretty-format | 3.2.4 | MIT | no | +| @vitest/pretty-format | 4.1.11 | MIT | no | +| @vitest/runner | 4.1.11 | MIT | no | +| @vitest/snapshot | 4.1.11 | MIT | no | +| @vitest/spy | 3.2.4 | MIT | no | +| @vitest/spy | 4.1.11 | MIT | no | +| @vitest/utils | 3.2.4 | MIT | no | +| @vitest/utils | 4.1.11 | MIT | no | +| @webcontainer/env | 1.1.1 | MIT | no | +| acorn | 8.18.0 | MIT | no | +| actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | yes | +| actions/setup-node | 820762786026740c76f36085b0efc47a31fe5020 | NOASSERTION | yes | +| actions/setup-python | ece7cb06caefa5fff74198d8649806c4678c61a1 | NOASSERTION | yes | +| actions/upload-artifact | 330a01c490aca151604b8cf639adc76d48f6c5d4 | NOASSERTION | yes | +| aho-corasick | 1.1.5 | Unlicense OR MIT | no | +| alembic | — | NOASSERTION | yes | +| alembic | 1.19.1 | MIT | no | +| annotated-doc | 0.0.5 | MIT | no | +| annotated-types | 0.8.0 | MIT | no | +| ansi-regex | 5.0.1 | MIT | no | +| ansi-regex | 6.3.0 | MIT | no | +| ansi-styles | 5.2.0 | MIT | no | +| anyhow | 1.0.104 | MIT OR Apache-2.0 | no | +| anyio | 4.14.2 | MIT | no | +| aria-query | 5.3.0 | Apache-2.0 | no | +| aria-query | 5.3.2 | Apache-2.0 | no | +| arrow | 1.4.0 | Apache-2.0 | no | +| assertion-error | 2.0.1 | MIT | no | +| ast-types | 0.16.1 | MIT | no | +| ast-v8-to-istanbul | 1.0.5 | MIT | no | +| astral-sh/setup-uv | 20cfd1bf945f4377ade1205e4dbc17946fc9a30d | NOASSERTION | yes | +| async-timeout | 5.0.1 | Apache-2.0 | no | +| atheris | 3.1.0 | Apache-2.0 | no | +| attrs | 26.1.0 | MIT | no | +| axe-core | 4.13.0 | MPL-2.0 | yes | +| balanced-match | 4.0.4 | MIT | no | +| base64 | 0.22.1 | MIT OR Apache-2.0 | no | +| baseline-browser-mapping | 2.11.19 | Apache-2.0 | no | +| bit-set | 0.5.3 | MIT OR Apache-2.0 | no | +| bit-vec | 0.6.3 | MIT OR Apache-2.0 | no | +| boolean-py | 5.0 | BSD-2-Clause | no | +| brace-expansion | 5.0.9 | MIT | no | +| browserslist | 4.28.8 | MIT | no | +| bstr | 1.13.1 | MIT OR Apache-2.0 | no | +| bundle-name | 4.1.0 | MIT | no | +| cachecontrol | 0.14.4 | Apache-2.0 | no | +| caniuse-lite | 1.0.30001810 | CC-BY-4.0 | no | +| certifi | 2026.6.17 | MPL-2.0 | yes | +| certifi | 2026.7.22 | MPL-2.0 | yes | +| cffi | 2.1.1 | MIT-0 | no | +| chai | 5.3.3 | MIT | no | +| chai | 6.2.2 | MIT | no | +| chardet | 5.2.0 | LGPL-2.1-or-later | yes | +| charset-normalizer | 3.4.9 | MIT | no | +| charset-normalizer | 3.5.1 | MIT | no | +| check-error | 2.1.3 | MIT | no | +| chromatic | 18.6.0 | MIT | no | +| click | 8.4.2 | BSD-3-Clause | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| contextual-orchestrator | 0.2.0 | NOASSERTION | yes | +| convert-source-map | 2.0.0 | MIT | no | +| coverage | 7.15.4 | Apache-2.0 | no | +| crossbeam-deque | 0.8.7 | MIT OR Apache-2.0 | no | +| crossbeam-epoch | 0.9.20 | MIT OR Apache-2.0 | no | +| crossbeam-utils | 0.8.22 | MIT OR Apache-2.0 | no | +| cryptography | 50.0.0 | Apache-2.0 OR BSD-3-Clause | no | +| css.escape | 1.5.1 | MIT | no | +| csstype | 3.2.3 | MIT | no | +| cyclonedx-bom | 7.3.0 | Apache-2.0 AND Python-2.0 | no | +| cyclonedx-python-lib | 11.11.0 | Apache-2.0 AND Python-2.0 | no | +| debug | 4.4.3 | MIT | no | +| deep-eql | 5.0.2 | MIT | no | +| default-browser | 5.5.1 | MIT | no | +| default-browser-id | 5.0.1 | MIT | no | +| define-lazy-prop | 3.0.0 | MIT | no | +| defusedxml | 0.7.1 | PSF-2.0 | no | +| dequal | 2.0.3 | MIT | no | +| detect-libc | 2.1.2 | Apache-2.0 | no | +| doctrine | 3.0.0 | Apache-2.0 AND BSD-2-Clause | no | +| dom-accessibility-api | 0.5.16 | MIT | no | +| dom-accessibility-api | 0.6.3 | MIT | no | +| either | 1.18.0 | MIT OR Apache-2.0 | no | +| electron-to-chromium | 1.5.415 | ISC | no | +| empathic | 2.0.1 | MIT | no | +| es-errors | 1.3.0 | MIT | no | +| es-module-lexer | 2.3.2 | MIT | no | +| esbuild | 0.28.2 | MIT | no | +| escalade | 3.2.0 | MIT | no | +| esprima | 4.0.1 | BSD-2-Clause AND BSD-3-Clause | no | +| estree-walker | 2.0.2 | MIT | no | +| estree-walker | 3.0.3 | MIT | no | +| esutils | 2.0.3 | BSD-2-Clause | no | +| exceptiongroup | 1.3.1 | MIT AND Python-2.0 | no | +| expect-type | 1.4.0 | Apache-2.0 | no | +| fancy-regex | 0.13.0 | MIT | no | +| fast-mlsirm | 0.9.1 | NOASSERTION | yes | +| fastapi | — | NOASSERTION | yes | +| fastapi | 0.141.1 | MIT | no | +| fdir | 6.5.0 | MIT | no | +| filelock | 3.29.7 | MIT | no | +| fqdn | 1.5.1 | MPL-2.0 | yes | +| fsevents | 2.3.2 | MIT | no | +| fsevents | 2.3.3 | MIT | no | +| function-bind | 1.1.2 | MIT | no | +| gensync | 1.0.0-beta.2 | MIT | no | +| github/codeql-action/analyze | db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 | NOASSERTION | yes | +| github/codeql-action/init | db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 | NOASSERTION | yes | +| glob | 13.0.6 | BlueOak-1.0.0 | no | +| googleapis-common-protos | 1.75.1 | Apache-2.0 | no | +| graceful-fs | 4.2.11 | ISC | no | +| greenlet | 3.5.5 | MIT AND PSF-2.0 | no | +| h11 | 0.16.0 | MIT | no | +| has-flag | 4.0.0 | MIT | no | +| hasown | 2.0.4 | MIT | no | +| heck | 0.5.0 | MIT OR Apache-2.0 | no | +| html-escaper | 2.0.2 | MIT | no | +| hypothesis | — | NOASSERTION | yes | +| hypothesis | 6.165.10 | MPL-2.0 | yes | +| hypothesis | 6.165.3 | MPL-2.0 | yes | +| idna | 3.18 | BSD-3-Clause | no | +| idna | 3.19 | BSD-3-Clause | no | +| indent-string | 4.0.0 | MIT | no | +| iniconfig | 2.3.0 | MIT | no | +| interrogate | 1.7.0 | MIT | no | +| is-core-module | 2.16.2 | MIT | no | +| is-docker | 3.0.0 | MIT | no | +| is-inside-container | 1.0.0 | MIT | no | +| is-wsl | 3.1.1 | MIT | no | +| isoduration | 20.11.0 | ISC | no | +| istanbul-lib-coverage | 3.2.2 | BSD-3-Clause | no | +| istanbul-lib-report | 3.0.1 | BSD-3-Clause | no | +| istanbul-reports | 3.2.0 | BSD-3-Clause | no | +| itoa | 1.0.18 | MIT OR Apache-2.0 | no | +| js-tokens | 10.0.0 | MIT | no | +| js-tokens | 4.0.0 | MIT | no | +| jsesc | 3.1.0 | MIT | no | +| json5 | 2.2.3 | MIT | no | +| jsonc-parser | 3.3.1 | MIT | no | +| jsonfile | 6.2.1 | MIT | no | +| jsonpointer | 3.1.1 | BSD-3-Clause | no | +| jsonschema | 4.26.0 | MIT | no | +| jsonschema-specifications | 2025.9.1 | MIT | no | +| lark | 1.3.1 | MIT AND MPL-2.0 | yes | +| lazy_static | 1.5.0 | MIT OR Apache-2.0 | no | +| libc | 0.2.189 | MIT OR Apache-2.0 | no | +| license-expression | 30.4.4 | Apache-2.0 | no | +| lightningcss | 1.33.0 | MPL-2.0 | yes | +| lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | yes | +| loupe | 3.2.1 | MIT | no | +| lru-cache | 11.5.2 | BlueOak-1.0.0 | no | +| lru-cache | 5.1.1 | ISC | no | +| lxml | 6.1.1 | BSD-3-Clause AND GPL-1.0-or-later | yes | +| lz-string | 1.5.0 | MIT | no | +| magic-string | 0.30.21 | MIT | no | +| magicast | 0.5.4 | MIT | no | +| make-dir | 4.0.0 | MIT | no | +| mako | 1.4.1 | MIT | no | +| markdown-it-py | 4.2.0 | MIT | no | +| markupsafe | 3.0.3 | BSD-3-Clause | no | +| maturin | — | NOASSERTION | yes | +| mdurl | 0.1.2 | MIT | no | +| memchr | 2.8.3 | Unlicense OR MIT | no | +| min-indent | 1.0.1 | MIT | no | +| minimatch | 10.2.6 | BlueOak-1.0.0 | no | +| minimist | 1.2.8 | MIT | no | +| minipass | 7.1.3 | BlueOak-1.0.0 | no | +| mrmime | 2.0.1 | MIT | no | +| ms | 2.1.3 | MIT | no | +| msgpack | 1.2.1 | Apache-2.0 | no | +| nanoid | 3.3.18 | MIT | no | +| node-releases | 2.0.53 | MIT | no | +| numpy | 2.5.2 | BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0 | no | +| obug | 2.1.4 | MIT | no | +| once_cell | 1.21.4 | MIT OR Apache-2.0 | no | +| open | 10.2.0 | MIT | no | +| opencode-ai | 1.18.22 | MIT | no | +| opencode-darwin-arm64 | 1.18.22 | NOASSERTION | yes | +| opencode-darwin-x64 | 1.18.22 | NOASSERTION | yes | +| opencode-darwin-x64-baseline | 1.18.22 | NOASSERTION | yes | +| opencode-linux-arm64 | 1.18.22 | NOASSERTION | yes | +| opencode-linux-arm64-musl | 1.18.22 | NOASSERTION | yes | +| opencode-linux-x64 | 1.18.22 | NOASSERTION | yes | +| opencode-linux-x64-baseline | 1.18.22 | NOASSERTION | yes | +| opencode-linux-x64-baseline-musl | 1.18.22 | NOASSERTION | yes | +| opencode-linux-x64-musl | 1.18.22 | NOASSERTION | yes | +| opencode-windows-arm64 | 1.18.22 | MIT | no | +| opencode-windows-x64 | 1.18.22 | NOASSERTION | yes | +| opencode-windows-x64-baseline | 1.18.22 | NOASSERTION | yes | +| opentelemetry-api | 1.44.0 | Apache-2.0 | no | +| opentelemetry-exporter-otlp-proto-common | 1.44.0 | Apache-2.0 | no | +| opentelemetry-exporter-otlp-proto-http | 1.44.0 | Apache-2.0 | no | +| opentelemetry-proto | 1.44.0 | Apache-2.0 | no | +| opentelemetry-sdk | 1.44.0 | Apache-2.0 | no | +| opentelemetry-semantic-conventions | 0.65b0 | Apache-2.0 | no | +| oxc-parser | 0.127.0 | MIT | no | +| oxc-resolver | 11.21.2 | MIT | no | +| oxlint | 1.80.0 | MIT | no | +| oxlint | ^1.79.0 | NOASSERTION | yes | +| packageurl-python | 0.17.6 | MIT | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| packaging | 26.3 | Apache-2.0 OR BSD-2-Clause | no | +| path-parse | 1.0.7 | MIT | no | +| path-scurry | 2.0.2 | BlueOak-1.0.0 | no | +| pathe | 2.0.3 | MIT | no | +| pathval | 2.0.1 | MIT | no | +| picocolors | 1.1.1 | ISC | no | +| picomatch | 4.0.7 | MIT | no | +| pip | — | NOASSERTION | yes | +| pip | 26.2.1 | MIT | no | +| pip-api | 0.0.34 | Apache-2.0 | no | +| pip-audit | 2.10.1 | Apache-2.0 AND ISC | no | +| pip-requirements-parser | 32.0.1 | Apache-2.0 AND MIT | no | +| platformdirs | 4.10.0 | MIT | no | +| playwright | 1.62.1 | Apache-2.0 | no | +| playwright | latest | NOASSERTION | yes | +| playwright-core | 1.62.1 | Apache-2.0 | no | +| pluggy | 1.6.0 | MIT | no | +| pngjs | 7.0.0 | MIT | no | +| portable-atomic | 1.15.0 | Apache-2.0 OR MIT | no | +| postcss | 8.5.26 | MIT | no | +| pretty-format | 27.5.1 | MIT | no | +| proc-macro2 | 1.0.107 | MIT OR Apache-2.0 | no | +| protobuf | 7.36.0 | BSD-3-Clause AND LicenseRef-scancode-protobuf | no | +| psycopg | — | NOASSERTION | yes | +| psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | yes | +| psycopg-binary | 3.3.4 | GPL-3.0-or-later | yes | +| py | 1.11.0 | MIT | no | +| py-serializable | 2.1.0 | Apache-2.0 | no | +| pycparser | 3.0 | BSD-3-Clause | no | +| pydantic | 2.13.4 | MIT | no | +| pydantic-core | 2.46.4 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pygments | 2.21.0 | BSD-2-Clause | no | +| pyo3 | 0.29.2 | MIT OR Apache-2.0 | no | +| pyo3 | >= 0.29.0,< 0.30.0 | NOASSERTION | yes | +| pyo3-build-config | 0.29.2 | MIT OR Apache-2.0 | no | +| pyo3-ffi | 0.29.2 | MIT OR Apache-2.0 | no | +| pyo3-macros | 0.29.2 | MIT OR Apache-2.0 | no | +| pyo3-macros-backend | 0.29.2 | MIT OR Apache-2.0 | no | +| pyparsing | 3.3.2 | MIT AND Python-2.0 | no | +| pytest | 9.0.3 | MIT | no | +| pytest | 9.1.1 | MIT | no | +| pytest-cov | 7.1.0 | MIT | no | +| python-dateutil | 2.9.0.post0 | Apache-2.0 AND BSD-3-Clause | no | +| quote | 1.0.47 | MIT OR Apache-2.0 | no | +| rayon | 1.12.0 | MIT OR Apache-2.0 | no | +| rayon | >= 1.10.0,< 2.0.0 | NOASSERTION | yes | +| rayon-core | 1.13.0 | MIT OR Apache-2.0 | no | +| react | 19.2.8 | MIT | no | +| react | ^19.2.8 | NOASSERTION | yes | +| react-docgen | 8.0.3 | MIT | no | +| react-docgen-typescript | 2.4.0 | MIT | no | +| react-dom | 19.2.8 | MIT | no | +| react-dom | ^19.2.8 | NOASSERTION | yes | +| react-is | 17.0.2 | MIT | no | +| recast | 0.23.21 | MIT | no | +| redent | 3.0.0 | MIT | no | +| redis | 8.1.0 | MIT | no | +| referencing | 0.37.0 | MIT | no | +| regex | 1.13.1 | MIT OR Apache-2.0 | no | +| regex-automata | 0.4.18 | NOASSERTION | yes | +| regex-syntax | 0.8.11 | MIT OR Apache-2.0 | no | +| requests | 2.34.2 | Apache-2.0 | no | +| resolve | 1.22.12 | MIT | no | +| rfc3339-validator | 0.1.4 | MIT | no | +| rfc3986-validator | 0.1.1 | MIT | no | +| rfc3987-syntax | 1.1.0 | Apache-2.0 AND GPL-1.0-or-later AND MIT | yes | +| rich | 15.0.0 | MIT | no | +| rolldown | 1.2.5 | MIT | no | +| rpds-py | 0.30.0 | MIT | no | +| rpds-py | 2026.6.3 | MIT | no | +| run-applescript | 7.1.0 | MIT | no | +| rustc-hash | 1.1.0 | Apache-2.0 OR MIT | no | +| scheduler | 0.27.0 | MIT | no | +| semver | 6.3.1 | ISC | no | +| semver | 7.8.5 | ISC | no | +| serde | 1.0.229 | MIT OR Apache-2.0 | no | +| serde | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| serde_core | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_derive | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_json | 1.0.151 | MIT OR Apache-2.0 | no | +| serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| siginfo | 2.0.0 | ISC | no | +| sirv | 3.0.2 | MIT | no | +| six | 1.17.0 | MIT | no | +| sortedcontainers | 2.4.0 | Apache-2.0 | no | +| source-map | 0.6.1 | BSD-3-Clause | no | +| source-map-js | 1.2.1 | BSD-3-Clause | no | +| sqlalchemy | — | NOASSERTION | yes | +| sqlalchemy | 2.0.52 | MIT | no | +| stackback | 0.0.2 | MIT | no | +| starlette | 1.6.0 | BSD-3-Clause | no | +| std-env | 4.2.0 | MIT | no | +| storybook | 10.5.10 | MIT | no | +| storybook | ^10.5.10 | NOASSERTION | yes | +| strip-ansi | 7.2.0 | MIT | no | +| strip-bom | 3.0.0 | MIT | no | +| strip-indent | 3.0.0 | MIT | no | +| strip-indent | 4.1.1 | MIT | no | +| supports-color | 7.2.0 | MIT | no | +| supports-preserve-symlinks-flag | 1.0.0 | MIT | no | +| syn | 2.0.119 | MIT OR Apache-2.0 | no | +| syn | 3.0.4 | MIT OR Apache-2.0 | no | +| tabulate | 0.10.0 | MIT | no | +| target-lexicon | 0.13.5 | Apache-2.0 WITH LLVM-exception | no | +| tiktoken-rs | 0.7.0 | MIT | no | +| tiktoken-rs | >= 0.7.0,< 0.8.0 | NOASSERTION | yes | +| tiny-invariant | 1.3.3 | MIT | no | +| tinybench | 2.9.0 | MIT | no | +| tinyexec | 1.3.0 | MIT | no | +| tinyglobby | 0.2.17 | MIT | no | +| tinyrainbow | 2.0.0 | MIT | no | +| tinyrainbow | 3.1.1 | MIT | no | +| tinyspy | 4.0.4 | MIT | no | +| tomli | 2.4.1 | MIT | no | +| tomli-w | 1.2.0 | MIT | no | +| totalist | 3.0.1 | MIT | no | +| ts-dedent | 2.3.0 | MIT | no | +| tsconfig-paths | 4.2.0 | MIT | no | +| tslib | 2.8.1 | 0BSD | no | +| typescript | 6.0.3 | Apache-2.0 | no | +| typescript | ~6.0.2 | NOASSERTION | yes | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.4 | MIT | no | +| tzdata | 2026.2 | Apache-2.0 | no | +| tzdata | 2026.3 | Apache-2.0 | no | +| undici-types | 7.18.2 | MIT | no | +| unicode-ident | 1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0 | no | +| universalify | 2.0.1 | MIT | no | +| unplugin | 2.3.11 | MIT | no | +| update-browserslist-db | 1.3.1 | MIT | no | +| uri-template | 1.3.0 | MIT | no | +| urllib3 | 2.7.0 | MIT | no | +| use-sync-external-store | 1.6.0 | MIT | no | +| uv | 0.12.3 | MIT OR Apache-2.0 | no | +| uvicorn | — | NOASSERTION | yes | +| uvicorn | 0.52.4 | BSD-3-Clause | no | +| vite | 8.2.2 | MIT | no | +| vite | ^8.2.2 | NOASSERTION | yes | +| vitest | 4.1.11 | MIT | no | +| vitest | latest | NOASSERTION | yes | +| webcolors | 25.10.0 | BSD-3-Clause | no | +| webpack-virtual-modules | 0.6.2 | MIT | no | +| why-is-node-running | 2.3.0 | MIT | no | +| ws | 8.21.3 | MIT | no | +| wsl-utils | 0.1.0 | MIT | no | +| yallist | 3.1.1 | ISC | no | +| zmij | 1.0.23 | MIT | no | + +### ContextualWisdomLab/ContextualWisdomLab.github.io + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | yes | +| github/codeql-action/analyze | 99df26d4f13ea111d4ec1a7dddef6063f76b97e9 | NOASSERTION | yes | +| github/codeql-action/init | 99df26d4f13ea111d4ec1a7dddef6063f76b97e9 | NOASSERTION | yes | + +### ContextualWisdomLab/DiagramWeave + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/disksage + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/attest | 1e69f48acb82d1966a394da916b4c1698aa569d6 | NOASSERTION | yes | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/download-artifact | 37930b1c2abaa49bbe596cd826c3c89aef350131 | NOASSERTION | yes | +| actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | yes | +| actions/setup-node | 820762786026740c76f36085b0efc47a31fe5020 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| adler2 | 2.0.1 | 0BSD OR MIT OR Apache-2.0 | no | +| aes | 0.8.4 | MIT OR Apache-2.0 | no | +| aho-corasick | 1.1.4 | Unlicense OR MIT | no | +| alloc-no-stdlib | 2.0.4 | BSD-3-Clause | no | +| alloc-stdlib | 0.2.4 | BSD-3-Clause | no | +| android_system_properties | 0.1.5 | MIT OR Apache-2.0 | no | +| anyhow | 1.0.103 | MIT OR Apache-2.0 | no | +| apple-native-keyring-store | 1.0.1 | MIT OR Apache-2.0 | no | +| arrayvec | 0.7.8 | MIT OR Apache-2.0 | no | +| async-broadcast | 0.7.2 | MIT OR Apache-2.0 | no | +| async-channel | 2.5.0 | Apache-2.0 OR MIT | no | +| async-executor | 1.14.0 | Apache-2.0 OR MIT | no | +| async-io | 2.6.0 | Apache-2.0 OR MIT | no | +| async-lock | 3.4.2 | Apache-2.0 OR MIT | no | +| async-process | 2.5.0 | Apache-2.0 OR MIT | no | +| async-recursion | 1.1.1 | MIT OR Apache-2.0 | no | +| async-signal | 0.2.14 | Apache-2.0 OR MIT | no | +| async-task | 4.7.1 | Apache-2.0 OR MIT | no | +| async-trait | 0.1.89 | MIT OR Apache-2.0 | no | +| atk | 0.18.2 | MIT | no | +| atk-sys | 0.18.2 | MIT | no | +| atoi_simd | 0.18.1 | MIT OR Apache-2.0 | no | +| atomic-waker | 1.1.2 | Apache-2.0 OR MIT | no | +| autocfg | 1.5.1 | Apache-2.0 OR MIT | no | +| base64 | 0.21.7 | MIT OR Apache-2.0 | no | +| base64 | 0.22.1 | MIT OR Apache-2.0 | no | +| base64 | 0.23.1 | MIT OR Apache-2.0 | no | +| bindgen | 0.72.1 | BSD-3-Clause | no | +| bit-set | 0.8.0 | Apache-2.0 OR MIT | no | +| bit-vec | 0.8.0 | Apache-2.0 OR MIT | no | +| bitflags | 1.3.2 | MIT OR Apache-2.0 | no | +| bitflags | 2.13.0 | MIT OR Apache-2.0 | no | +| blake3 | 1.8.7 | CC0-1.0 OR Apache-2.0 OR Apache-2.0 WITH LLVM-exception | no | +| block-buffer | 0.10.4 | MIT OR Apache-2.0 | no | +| block-buffer | 0.12.1 | MIT OR Apache-2.0 | no | +| block-padding | 0.3.3 | MIT OR Apache-2.0 | no | +| block2 | 0.6.2 | MIT | no | +| blocking | 1.6.2 | Apache-2.0 OR MIT | no | +| brotli | 8.0.4 | BSD-3-Clause AND MIT | no | +| brotli-decompressor | 5.0.3 | LicenseRef-bad-bsd-3-clausemit | no | +| bs58 | 0.5.1 | MIT OR Apache-2.0 | no | +| bumpalo | 3.20.3 | MIT OR Apache-2.0 | no | +| bytemuck | 1.25.0 | Zlib OR Apache-2.0 OR MIT | no | +| byteorder | 1.5.0 | Unlicense OR MIT | no | +| bytes | 1.12.1 | MIT | no | +| cairo-rs | 0.18.5 | MIT | no | +| cairo-sys-rs | 0.18.2 | MIT | no | +| calamine | 0.36.1 | MIT | no | +| camino | 1.2.4 | MIT OR Apache-2.0 | no | +| cargo-platform | 0.1.9 | MIT OR Apache-2.0 | no | +| cargo_metadata | 0.19.2 | MIT | no | +| cargo_toml | 0.22.3 | Apache-2.0 OR MIT | no | +| cbc | 0.1.2 | MIT OR Apache-2.0 | no | +| cc | 1.2.66 | MIT OR Apache-2.0 | no | +| cesu8 | 1.1.0 | Apache-2.0 OR MIT | no | +| cexpr | 0.6.0 | Apache-2.0 OR MIT | no | +| cfb | 0.14.0 | MIT | no | +| cfb | 0.7.3 | MIT | no | +| cfg-expr | 0.15.8 | MIT OR Apache-2.0 | no | +| cfg-if | 1.0.4 | MIT OR Apache-2.0 | no | +| chrono | 0.4.45 | MIT OR Apache-2.0 | no | +| cipher | 0.4.4 | MIT OR Apache-2.0 | no | +| clang-sys | 1.8.1 | Apache-2.0 | no | +| cmake | 0.1.58 | MIT OR Apache-2.0 | no | +| codepage | 0.1.2 | Apache-2.0 OR MIT | no | +| combine | 4.6.7 | MIT | no | +| concurrent-queue | 2.5.0 | Apache-2.0 OR MIT | no | +| const-oid | 0.10.2 | Apache-2.0 OR MIT | no | +| constant_time_eq | 0.4.2 | CC0-1.0 OR MIT-0 OR Apache-2.0 | no | +| cookie | 0.18.1 | MIT OR Apache-2.0 | no | +| core-foundation | 0.10.1 | MIT OR Apache-2.0 | no | +| core-foundation-sys | 0.8.7 | MIT OR Apache-2.0 | no | +| core-graphics | 0.25.0 | MIT OR Apache-2.0 | no | +| core-graphics-types | 0.2.0 | MIT OR Apache-2.0 | no | +| cpufeatures | 0.2.17 | MIT OR Apache-2.0 | no | +| cpufeatures | 0.3.0 | MIT OR Apache-2.0 | no | +| crc32fast | 1.5.0 | MIT OR Apache-2.0 | no | +| crossbeam-channel | 0.5.16 | MIT OR Apache-2.0 | no | +| crossbeam-utils | 0.8.22 | MIT OR Apache-2.0 | no | +| crypto-common | 0.1.7 | MIT OR Apache-2.0 | no | +| crypto-common | 0.2.2 | MIT OR Apache-2.0 | no | +| cssparser | 0.36.0 | MPL-2.0 | yes | +| cssparser-macros | 0.6.1 | MPL-2.0 | yes | +| csv | 1.4.0 | Unlicense OR MIT | no | +| csv-core | 0.1.13 | Unlicense OR MIT | no | +| ctor | 0.8.0 | Apache-2.0 OR MIT | no | +| ctor-proc-macro | 0.0.7 | Apache-2.0 OR MIT | no | +| darling | 0.23.0 | MIT | no | +| darling_core | 0.23.0 | MIT | no | +| darling_macro | 0.23.0 | MIT | no | +| dbus | 0.9.12 | LicenseRef-bad-apache-2.0mit | no | +| debug_unsafe | 0.1.4 | MIT OR Apache-2.0 | no | +| deranged | 0.5.8 | MIT OR Apache-2.0 | no | +| derive_more | 2.1.1 | MIT | no | +| derive_more-impl | 2.1.1 | MIT | no | +| digest | 0.10.7 | MIT OR Apache-2.0 | no | +| digest | 0.11.3 | MIT OR Apache-2.0 | no | +| dirs | 6.0.0 | MIT OR Apache-2.0 | no | +| dirs-sys | 0.5.0 | MIT OR Apache-2.0 | no | +| dispatch2 | 0.3.1 | Zlib OR Apache-2.0 OR MIT | no | +| displaydoc | 0.2.6 | MIT OR Apache-2.0 | no | +| dlopen2 | 0.8.2 | MIT | no | +| dlopen2_derive | 0.4.3 | MIT | no | +| dom_query | 0.27.0 | MIT | no | +| dpi | 0.1.2 | Apache-2.0 AND MIT | no | +| dtoa | 1.0.11 | MIT OR Apache-2.0 | no | +| dtoa-short | 0.3.5 | MPL-2.0 | yes | +| dtolnay/rust-toolchain | 4be7066ada62dd38de10e7b70166bc74ed198c30 | NOASSERTION | yes | +| dtor | 0.3.0 | Apache-2.0 OR MIT | no | +| dtor-proc-macro | 0.0.6 | Apache-2.0 OR MIT | no | +| dunce | 1.0.5 | CC0-1.0 OR MIT-0 OR Apache-2.0 | no | +| dyn-clone | 1.0.20 | MIT OR Apache-2.0 | no | +| either | 1.16.0 | MIT OR Apache-2.0 | no | +| embed-resource | 3.0.11 | MIT | no | +| embed_plist | 1.2.2 | MIT OR Apache-2.0 | no | +| encoding_rs | 0.8.35 | (Apache-2.0 OR MIT) AND BSD-3-Clause | no | +| endi | 1.1.1 | MIT | no | +| enumflags2 | 0.7.12 | MIT OR Apache-2.0 | no | +| enumflags2_derive | 0.7.12 | MIT OR Apache-2.0 | no | +| equivalent | 1.0.2 | Apache-2.0 OR MIT | no | +| erased-serde | 0.4.10 | MIT OR Apache-2.0 | no | +| errno | 0.3.14 | MIT OR Apache-2.0 | no | +| event-listener | 5.4.1 | Apache-2.0 OR MIT | no | +| event-listener-strategy | 0.5.4 | Apache-2.0 OR MIT | no | +| fast-float2 | 0.2.3 | MIT OR Apache-2.0 | no | +| fastrand | 2.4.1 | Apache-2.0 OR MIT | no | +| fdeflate | 0.3.7 | MIT OR Apache-2.0 | no | +| field-offset | 0.3.6 | MIT OR Apache-2.0 | no | +| find-msvc-tools | 0.1.9 | MIT OR Apache-2.0 | no | +| find_cuda_helper | 0.2.0 | MIT OR Apache-2.0 | no | +| flate2 | 1.1.9 | MIT OR Apache-2.0 | no | +| fnv | 1.0.7 | Apache-2.0 OR MIT | no | +| foldhash | 0.2.0 | Zlib | no | +| foreign-types | 0.5.0 | MIT OR Apache-2.0 | no | +| foreign-types-macros | 0.2.3 | MIT OR Apache-2.0 | no | +| foreign-types-shared | 0.3.1 | MIT OR Apache-2.0 | no | +| form_urlencoded | 1.2.2 | MIT OR Apache-2.0 | no | +| fs4 | 1.1.0 | MIT OR Apache-2.0 | no | +| futures-channel | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-core | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-executor | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-io | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-lite | 2.6.1 | Apache-2.0 OR MIT | no | +| futures-macro | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-sink | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-task | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-util | 0.3.32 | MIT OR Apache-2.0 | no | +| gdk | 0.18.2 | MIT | no | +| gdk-pixbuf | 0.18.5 | MIT | no | +| gdk-pixbuf-sys | 0.18.0 | MIT | no | +| gdk-sys | 0.18.2 | MIT | no | +| gdkwayland-sys | 0.18.2 | MIT | no | +| gdkx11 | 0.18.2 | MIT | no | +| gdkx11-sys | 0.18.2 | MIT | no | +| generic-array | 0.14.7 | MIT | no | +| getrandom | 0.2.17 | MIT OR Apache-2.0 | no | +| getrandom | 0.3.4 | MIT OR Apache-2.0 | no | +| getrandom | 0.4.3 | MIT OR Apache-2.0 | no | +| gio | 0.18.4 | MIT | no | +| gio-sys | 0.18.1 | MIT | no | +| glib | 0.18.5 | MIT | no | +| glib-macros | 0.18.5 | MIT | no | +| glib-sys | 0.18.1 | MIT | no | +| glob | 0.3.3 | MIT OR Apache-2.0 | no | +| gobject-sys | 0.18.0 | MIT | no | +| gtk | 0.18.2 | MIT | no | +| gtk-sys | 0.18.2 | MIT | no | +| gtk3-macros | 0.18.2 | MIT | no | +| hashbrown | 0.12.3 | MIT OR Apache-2.0 | no | +| hashbrown | 0.17.1 | MIT OR Apache-2.0 | no | +| hashify | 0.2.9 | Apache-2.0 OR MIT | no | +| heck | 0.4.1 | MIT OR Apache-2.0 | no | +| heck | 0.5.0 | MIT OR Apache-2.0 | no | +| hermit-abi | 0.5.2 | MIT OR Apache-2.0 | no | +| hex | 0.4.3 | MIT OR Apache-2.0 | no | +| hkdf | 0.12.4 | MIT OR Apache-2.0 | no | +| hmac | 0.12.1 | MIT OR Apache-2.0 | no | +| html5ever | 0.38.0 | MIT OR Apache-2.0 | no | +| http | 1.4.2 | MIT OR Apache-2.0 | no | +| http-body | 1.0.1 | MIT | no | +| http-body-util | 0.1.3 | MIT | no | +| httparse | 1.10.1 | MIT OR Apache-2.0 | no | +| hybrid-array | 0.4.13 | MIT OR Apache-2.0 | no | +| hyper | 1.10.1 | MIT | no | +| hyper-util | 0.1.20 | MIT | no | +| iana-time-zone | 0.1.65 | MIT OR Apache-2.0 | no | +| iana-time-zone-haiku | 0.1.2 | MIT OR Apache-2.0 | no | +| ico | 0.5.0 | MIT | no | +| icu_collections | 2.2.0 | Unicode-3.0 | no | +| icu_locale_core | 2.2.0 | Unicode-3.0 | no | +| icu_normalizer | 2.2.0 | Unicode-3.0 | no | +| icu_normalizer_data | 2.2.0 | Unicode-3.0 | no | +| icu_properties | 2.2.0 | Unicode-3.0 | no | +| icu_properties_data | 2.2.0 | Unicode-3.0 | no | +| icu_provider | 2.2.0 | Unicode-3.0 | no | +| ident_case | 1.0.1 | MIT OR Apache-2.0 | no | +| idna | 1.1.0 | MIT OR Apache-2.0 | no | +| idna_adapter | 1.2.2 | Apache-2.0 OR MIT | no | +| ilammy/msvc-dev-cmd | 0b201ec74fa43914dc39ae48a89fd1d8cb592756 | NOASSERTION | yes | +| indexmap | 1.9.3 | Apache-2.0 OR MIT | no | +| indexmap | 2.14.0 | Apache-2.0 OR MIT | no | +| infer | 0.19.0 | MIT | no | +| infer | 0.22.0 | MIT | no | +| inout | 0.1.4 | MIT OR Apache-2.0 | no | +| ipnet | 2.12.0 | MIT OR Apache-2.0 | no | +| is-docker | 0.2.0 | MIT | no | +| is-wsl | 0.4.0 | MIT | no | +| itertools | 0.13.0 | MIT OR Apache-2.0 | no | +| itoa | 1.0.18 | MIT OR Apache-2.0 | no | +| jakoch/install-vulkan-sdk-action | 37effcfa045411f8bfbbda26df2fd1b3bf3436fa | NOASSERTION | yes | +| javascriptcore-rs | 1.1.2 | MIT | no | +| javascriptcore-rs-sys | 1.1.1 | MIT | no | +| Jimver/cuda-toolkit | b8bf9c6c28f8a92fbb04dcfcaee872e60c57462d | NOASSERTION | yes | +| jni | 0.21.1 | MIT OR Apache-2.0 | no | +| jni-sys | 0.3.1 | MIT OR Apache-2.0 | no | +| jni-sys | 0.4.1 | MIT OR Apache-2.0 | no | +| jni-sys-macros | 0.4.1 | MIT OR Apache-2.0 | no | +| jobserver | 0.1.35 | MIT OR Apache-2.0 | no | +| js-sys | 0.3.103 | MIT OR Apache-2.0 | no | +| json-patch | 3.0.1 | MIT OR Apache-2.0 | no | +| jsonptr | 0.6.3 | MIT OR Apache-2.0 | no | +| keyboard-types | 0.7.0 | MIT OR Apache-2.0 | no | +| keyring | 4.1.6 | MIT OR Apache-2.0 | no | +| keyring-core | 1.0.0 | MIT OR Apache-2.0 | no | +| libappindicator | 0.9.0 | Apache-2.0 OR MIT | no | +| libappindicator-sys | 0.9.0 | Apache-2.0 OR MIT | no | +| libc | 0.2.189 | MIT OR Apache-2.0 | no | +| libdbus-sys | 0.2.7 | LicenseRef-bad-apache-2.0mit | no | +| libloading | 0.7.4 | ISC | no | +| libloading | 0.8.9 | ISC | no | +| libredox | 0.1.18 | MIT | no | +| linux-raw-sys | 0.12.1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| litemap | 0.8.2 | Unicode-3.0 | no | +| llama-cpp-2 | 0.1.154 | MIT OR Apache-2.0 | no | +| llama-cpp-sys-2 | 0.1.154 | MIT OR Apache-2.0 | no | +| lock_api | 0.4.14 | MIT OR Apache-2.0 | no | +| log | 0.4.33 | MIT OR Apache-2.0 | no | +| mail-parser | 0.11.7 | Apache-2.0 OR MIT | no | +| markup5ever | 0.38.0 | MIT OR Apache-2.0 | no | +| md-5 | 0.10.6 | MIT OR Apache-2.0 | no | +| memchr | 2.8.3 | Unlicense OR MIT | no | +| memoffset | 0.9.1 | MIT | no | +| mime | 0.3.17 | MIT OR Apache-2.0 | no | +| minimal-lexical | 0.2.1 | MIT OR Apache-2.0 | no | +| miniz_oxide | 0.8.9 | MIT OR Zlib OR Apache-2.0 | no | +| mio | 1.2.1 | MIT | no | +| mlsirm-core | 0.7.0 | NOASSERTION | yes | +| muda | 0.19.3 | Apache-2.0 OR MIT | no | +| ndk | 0.9.0 | MIT OR Apache-2.0 | no | +| ndk-sys | 0.6.0+11769913 | MIT OR Apache-2.0 | no | +| new_debug_unreachable | 1.0.6 | MIT | no | +| nom | 7.1.3 | MIT | no | +| num | 0.4.3 | MIT OR Apache-2.0 | no | +| num-bigint | 0.4.8 | MIT OR Apache-2.0 | no | +| num-complex | 0.4.6 | MIT OR Apache-2.0 | no | +| num-conv | 0.2.2 | MIT OR Apache-2.0 | no | +| num-integer | 0.1.46 | MIT OR Apache-2.0 | no | +| num-iter | 0.1.46 | MIT OR Apache-2.0 | no | +| num-rational | 0.4.2 | MIT OR Apache-2.0 | no | +| num-traits | 0.2.19 | MIT OR Apache-2.0 | no | +| num_enum | 0.7.6 | BSD-3-Clause OR MIT OR Apache-2.0 | no | +| num_enum_derive | 0.7.6 | BSD-3-Clause OR MIT OR Apache-2.0 | no | +| objc2 | 0.6.4 | MIT | no | +| objc2-app-kit | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-cloud-kit | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-data | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-foundation | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-graphics | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-image | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-location | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-text | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-encode | 4.1.0 | MIT | no | +| objc2-exception-helper | 0.1.1 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-foundation | 0.3.2 | MIT | no | +| objc2-io-surface | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-quartz-core | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-ui-kit | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-user-notifications | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-web-kit | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| once_cell | 1.21.4 | MIT OR Apache-2.0 | no | +| open | 5.3.6 | MIT | no | +| option-ext | 0.2.0 | MPL-2.0 | yes | +| ordered-stream | 0.2.0 | MIT OR Apache-2.0 | no | +| oxilangtag | 0.1.6 | MIT | no | +| oxiri | 0.2.11 | MIT OR Apache-2.0 | no | +| oxrdf | 0.3.3 | MIT OR Apache-2.0 | no | +| oxttl | 0.2.3 | MIT OR Apache-2.0 | no | +| pango | 0.18.3 | MIT | no | +| pango-sys | 0.18.0 | MIT | no | +| parking | 2.2.1 | Apache-2.0 OR MIT | no | +| parking_lot | 0.12.5 | MIT OR Apache-2.0 | no | +| parking_lot_core | 0.9.12 | MIT OR Apache-2.0 | no | +| percent-encoding | 2.3.2 | MIT OR Apache-2.0 | no | +| phf | 0.13.1 | MIT | no | +| phf_codegen | 0.13.1 | MIT | no | +| phf_generator | 0.13.1 | MIT | no | +| phf_macros | 0.13.1 | MIT | no | +| phf_shared | 0.13.1 | MIT | no | +| pin-project-lite | 0.2.17 | Apache-2.0 OR MIT | no | +| piper | 0.2.5 | MIT OR Apache-2.0 | no | +| pkg-config | 0.3.33 | MIT OR Apache-2.0 | no | +| plist | 1.10.0 | MIT | no | +| png | 0.17.16 | MIT OR Apache-2.0 | no | +| png | 0.18.1 | MIT OR Apache-2.0 | no | +| polling | 3.11.0 | Apache-2.0 OR MIT | no | +| potential_utf | 0.1.5 | Unicode-3.0 | no | +| powerfmt | 0.2.0 | MIT OR Apache-2.0 | no | +| ppv-lite86 | 0.2.21 | MIT OR Apache-2.0 | no | +| precomputed-hash | 0.1.1 | MIT | no | +| prettyplease | 0.2.37 | MIT OR Apache-2.0 | no | +| proc-macro-crate | 1.3.1 | MIT OR Apache-2.0 | no | +| proc-macro-crate | 2.0.2 | MIT OR Apache-2.0 | no | +| proc-macro-crate | 3.5.0 | MIT OR Apache-2.0 | no | +| proc-macro-error | 1.0.4 | MIT OR Apache-2.0 | no | +| proc-macro-error-attr | 1.0.4 | MIT OR Apache-2.0 | no | +| proc-macro2 | 1.0.106 | MIT OR Apache-2.0 | no | +| quick-xml | 0.41.0 | MIT | no | +| quote | 1.0.46 | MIT OR Apache-2.0 | no | +| r-efi | 5.3.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | yes | +| r-efi | 6.0.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | yes | +| rand | 0.9.4 | MIT OR Apache-2.0 | no | +| rand_chacha | 0.9.0 | MIT OR Apache-2.0 | no | +| rand_core | 0.9.5 | MIT OR Apache-2.0 | no | +| raw-window-handle | 0.6.2 | MIT OR Apache-2.0 OR Zlib | no | +| redox_syscall | 0.5.18 | MIT | no | +| redox_users | 0.5.2 | MIT | no | +| ref-cast | 1.0.25 | MIT OR Apache-2.0 | no | +| ref-cast-impl | 1.0.25 | MIT OR Apache-2.0 | no | +| regex | 1.13.0 | MIT OR Apache-2.0 | no | +| regex-automata | 0.4.15 | MIT OR Apache-2.0 | no | +| regex-syntax | 0.8.11 | MIT OR Apache-2.0 | no | +| reqwest | 0.13.4 | MIT OR Apache-2.0 | no | +| rfd | 0.16.0 | MIT | no | +| ring | 0.17.14 | Apache-2.0 AND ISC | no | +| rustc-hash | 2.1.3 | Apache-2.0 OR MIT | no | +| rustc_version | 0.4.1 | MIT OR Apache-2.0 | no | +| rustix | 1.1.4 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| rustls | 0.23.41 | Apache-2.0 OR ISC OR MIT | no | +| rustls-pki-types | 1.15.0 | MIT OR Apache-2.0 | no | +| rustls-webpki | 0.103.13 | ISC | no | +| rustversion | 1.0.23 | MIT OR Apache-2.0 | no | +| ryu | 1.0.23 | Apache-2.0 OR BSL-1.0 | no | +| same-file | 1.0.6 | Unlicense OR MIT | no | +| schemars | 0.8.22 | MIT | no | +| schemars | 0.9.0 | MIT | no | +| schemars | 1.2.1 | MIT | no | +| schemars_derive | 0.8.22 | MIT | no | +| scopeguard | 1.2.0 | MIT OR Apache-2.0 | no | +| secret-service | 5.1.0 | MIT OR Apache-2.0 | no | +| security-framework | 3.7.0 | MIT OR Apache-2.0 | no | +| security-framework-sys | 2.17.0 | MIT OR Apache-2.0 | no | +| selectors | 0.36.1 | MPL-2.0 | yes | +| semver | 1.0.28 | MIT OR Apache-2.0 | no | +| serde | 1.0.229 | MIT OR Apache-2.0 | no | +| serde-untagged | 0.1.9 | MIT OR Apache-2.0 | no | +| serde_core | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_derive | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_derive_internals | 0.29.1 | MIT OR Apache-2.0 | no | +| serde_json | 1.0.151 | MIT OR Apache-2.0 | no | +| serde_repr | 0.1.20 | MIT OR Apache-2.0 | no | +| serde_spanned | 0.6.9 | MIT OR Apache-2.0 | no | +| serde_spanned | 1.1.1 | MIT OR Apache-2.0 | no | +| serde_with | 3.21.0 | MIT OR Apache-2.0 | no | +| serde_with_macros | 3.21.0 | MIT OR Apache-2.0 | no | +| serialize-to-javascript | 0.1.2 | MIT OR Apache-2.0 | no | +| serialize-to-javascript-impl | 0.1.2 | MIT OR Apache-2.0 | no | +| servo_arc | 0.4.3 | MIT OR Apache-2.0 | no | +| sha1 | 0.11.0 | MIT OR Apache-2.0 | no | +| sha2 | 0.10.9 | MIT OR Apache-2.0 | no | +| sha2 | 0.11.0 | MIT OR Apache-2.0 | no | +| shlex | 1.3.0 | MIT OR Apache-2.0 | no | +| shlex | 2.0.1 | MIT OR Apache-2.0 | no | +| signal-hook-registry | 1.4.8 | MIT OR Apache-2.0 | no | +| simd-adler32 | 0.3.9 | MIT | no | +| siphasher | 1.0.3 | MIT OR Apache-2.0 | no | +| slab | 0.4.12 | MIT | no | +| smallvec | 1.15.2 | MIT OR Apache-2.0 | no | +| socket2 | 0.6.4 | MIT OR Apache-2.0 | no | +| softbuffer | 0.4.8 | MIT OR Apache-2.0 | no | +| softprops/action-gh-release | 3d0d9888cb7fd7b750713d6e236d1fcb99157228 | NOASSERTION | yes | +| soup3 | 0.5.0 | MIT | no | +| soup3-sys | 0.5.0 | MIT | no | +| stable_deref_trait | 1.2.1 | MIT OR Apache-2.0 | no | +| string_cache | 0.9.0 | MIT OR Apache-2.0 | no | +| string_cache_codegen | 0.6.1 | MIT OR Apache-2.0 | no | +| strsim | 0.11.1 | MIT | no | +| subtle | 2.6.1 | BSD-3-Clause | no | +| Swatinem/rust-cache | 6323deb102c322ba6fcbdcafc7e3dddab59af2b6 | NOASSERTION | yes | +| swift-rs | 1.0.7 | MIT OR Apache-2.0 | no | +| syn | 1.0.109 | MIT OR Apache-2.0 | no | +| syn | 2.0.118 | MIT OR Apache-2.0 | no | +| syn | 3.0.3 | MIT OR Apache-2.0 | no | +| sync_wrapper | 1.0.2 | Apache-2.0 | no | +| synstructure | 0.13.2 | MIT | no | +| system-deps | 6.2.2 | MIT OR Apache-2.0 | no | +| tao | 0.35.3 | Apache-2.0 | no | +| tao-macros | 0.1.3 | MIT OR Apache-2.0 | no | +| target-lexicon | 0.12.16 | Apache-2.0 WITH LLVM-exception | no | +| tauri | 2.11.5 | Apache-2.0 OR MIT | no | +| tauri-build | 2.6.3 | Apache-2.0 OR MIT | no | +| tauri-codegen | 2.6.3 | Apache-2.0 OR MIT | no | +| tauri-macros | 2.6.3 | Apache-2.0 OR MIT | no | +| tauri-plugin | 2.6.3 | Apache-2.0 OR MIT | no | +| tauri-plugin-dialog | 2.7.2 | Apache-2.0 OR MIT | no | +| tauri-plugin-fs | 2.5.1 | Apache-2.0 OR MIT | no | +| tauri-plugin-opener | 2.5.4 | Apache-2.0 OR MIT | no | +| tauri-runtime | 2.11.3 | Apache-2.0 OR MIT | no | +| tauri-runtime-wry | 2.11.4 | Apache-2.0 OR MIT | no | +| tauri-utils | 2.9.3 | Apache-2.0 OR MIT | no | +| tauri-winres | 0.3.6 | MIT | no | +| tempfile | 3.27.0 | MIT OR Apache-2.0 | no | +| tendril | 0.5.1 | MIT OR Apache-2.0 | no | +| thiserror | 1.0.69 | MIT OR Apache-2.0 | no | +| thiserror | 2.0.18 | MIT OR Apache-2.0 | no | +| thiserror-impl | 1.0.69 | MIT OR Apache-2.0 | no | +| thiserror-impl | 2.0.18 | MIT OR Apache-2.0 | no | +| time | 0.3.53 | MIT OR Apache-2.0 | no | +| time-core | 0.1.9 | MIT OR Apache-2.0 | no | +| time-macros | 0.2.31 | MIT OR Apache-2.0 | no | +| tinystr | 0.8.3 | Unicode-3.0 | no | +| tinyvec | 1.11.0 | Zlib OR Apache-2.0 OR MIT | no | +| tinyvec_macros | 0.1.1 | MIT OR Apache-2.0 OR Zlib | no | +| tokio | 1.52.3 | MIT | no | +| tokio-util | 0.7.18 | MIT | no | +| toml | 0.8.2 | MIT OR Apache-2.0 | no | +| toml | 0.9.12+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml | 1.1.2+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_datetime | 0.6.3 | MIT OR Apache-2.0 | no | +| toml_datetime | 0.7.5+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_datetime | 1.1.1+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_edit | 0.19.15 | MIT OR Apache-2.0 | no | +| toml_edit | 0.20.2 | MIT OR Apache-2.0 | no | +| toml_edit | 0.25.12+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_parser | 1.1.2+spec-1.1.0 | MIT OR Apache-2.0 | no | +| toml_writer | 1.1.1+spec-1.1.0 | MIT OR Apache-2.0 | no | +| tower | 0.5.3 | MIT | no | +| tower-http | 0.6.11 | MIT | no | +| tower-layer | 0.3.3 | MIT | no | +| tower-service | 0.3.3 | MIT | no | +| tracing | 0.1.44 | MIT | no | +| tracing-attributes | 0.1.31 | MIT | no | +| tracing-core | 0.1.36 | MIT | no | +| trash | 5.2.6 | MIT | no | +| tray-icon | 0.24.1 | MIT OR Apache-2.0 | no | +| try-lock | 0.2.5 | MIT | no | +| typed-path | 0.12.3 | MIT OR Apache-2.0 | no | +| typeid | 1.0.3 | MIT OR Apache-2.0 | no | +| typenum | 1.20.1 | MIT OR Apache-2.0 | no | +| uds_windows | 1.2.1 | MIT | no | +| unic-char-property | 0.9.0 | MIT OR Apache-2.0 | no | +| unic-char-range | 0.9.0 | MIT OR Apache-2.0 | no | +| unic-common | 0.9.0 | MIT OR Apache-2.0 | no | +| unic-ucd-ident | 0.9.0 | MIT OR Apache-2.0 | no | +| unic-ucd-version | 0.9.0 | MIT OR Apache-2.0 | no | +| unicode-general-category | 1.1.0 | Apache-2.0 | no | +| unicode-ident | 1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0 | no | +| unicode-normalization | 0.1.25 | MIT OR Apache-2.0 | no | +| unicode-segmentation | 1.13.3 | MIT OR Apache-2.0 | no | +| untrusted | 0.9.0 | ISC | no | +| ureq | 3.4.0 | MIT OR Apache-2.0 | no | +| ureq-proto | 0.6.1 | MIT OR Apache-2.0 | no | +| url | 2.5.8 | MIT OR Apache-2.0 | no | +| urlencoding | 2.1.3 | MIT | no | +| urlpattern | 0.3.0 | MIT | no | +| utf8-zero | 0.8.1 | MIT OR Apache-2.0 | no | +| utf8_iter | 1.0.4 | Apache-2.0 OR MIT | no | +| uuid | 1.23.4 | Apache-2.0 OR MIT | no | +| valuable | 0.1.1 | MIT | no | +| version-compare | 0.2.1 | MIT | no | +| version_check | 0.9.5 | MIT OR Apache-2.0 | no | +| vswhom | 0.1.0 | MIT | no | +| vswhom-sys | 0.1.3 | MIT | no | +| walkdir | 2.5.0 | Unlicense OR MIT | no | +| want | 0.3.1 | MIT | no | +| wasi | 0.11.1+wasi-snapshot-preview1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| wasip2 | 1.0.4+wasi-0.2.12 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| wasm-bindgen | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-futures | 0.4.76 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro-support | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-shared | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-streams | 0.5.0 | MIT OR Apache-2.0 | no | +| web-sys | 0.3.103 | MIT OR Apache-2.0 | no | +| web-time | 1.1.0 | MIT OR Apache-2.0 | no | +| web_atoms | 0.2.5 | MIT OR Apache-2.0 | no | +| webkit2gtk | 2.0.2 | MIT | no | +| webkit2gtk-sys | 2.0.2 | MIT | no | +| webpki-roots | 1.0.8 | NOASSERTION | yes | +| webview2-com | 0.38.2 | MIT | no | +| webview2-com-macros | 0.8.1 | MIT | no | +| webview2-com-sys | 0.38.2 | MIT | no | +| winapi | 0.3.9 | MIT OR Apache-2.0 | no | +| winapi-i686-pc-windows-gnu | 0.4.0 | MIT OR Apache-2.0 | no | +| winapi-util | 0.1.11 | Unlicense OR MIT | no | +| winapi-x86_64-pc-windows-gnu | 0.4.0 | MIT OR Apache-2.0 | no | +| window-vibrancy | 0.6.0 | Apache-2.0 OR MIT | no | +| windows | 0.56.0 | MIT OR Apache-2.0 | no | +| windows | 0.61.3 | MIT OR Apache-2.0 | no | +| windows-collections | 0.2.0 | MIT OR Apache-2.0 | no | +| windows-core | 0.56.0 | MIT OR Apache-2.0 | no | +| windows-core | 0.61.2 | MIT OR Apache-2.0 | no | +| windows-core | 0.62.2 | MIT OR Apache-2.0 | no | +| windows-future | 0.2.1 | MIT OR Apache-2.0 | no | +| windows-implement | 0.56.0 | MIT OR Apache-2.0 | no | +| windows-implement | 0.60.2 | MIT OR Apache-2.0 | no | +| windows-interface | 0.56.0 | MIT OR Apache-2.0 | no | +| windows-interface | 0.59.3 | MIT OR Apache-2.0 | no | +| windows-link | 0.1.3 | MIT OR Apache-2.0 | no | +| windows-link | 0.2.1 | MIT OR Apache-2.0 | no | +| windows-native-keyring-store | 1.1.0 | MIT OR Apache-2.0 | no | +| windows-numerics | 0.2.0 | MIT OR Apache-2.0 | no | +| windows-result | 0.1.2 | MIT OR Apache-2.0 | no | +| windows-result | 0.3.4 | MIT OR Apache-2.0 | no | +| windows-result | 0.4.1 | MIT OR Apache-2.0 | no | +| windows-strings | 0.4.2 | MIT OR Apache-2.0 | no | +| windows-strings | 0.5.1 | MIT OR Apache-2.0 | no | +| windows-sys | 0.45.0 | MIT OR Apache-2.0 | no | +| windows-sys | 0.52.0 | MIT OR Apache-2.0 | no | +| windows-sys | 0.59.0 | MIT OR Apache-2.0 | no | +| windows-sys | 0.60.2 | MIT OR Apache-2.0 | no | +| windows-sys | 0.61.2 | MIT OR Apache-2.0 | no | +| windows-targets | 0.42.2 | MIT OR Apache-2.0 | no | +| windows-targets | 0.52.6 | MIT OR Apache-2.0 | no | +| windows-targets | 0.53.5 | MIT OR Apache-2.0 | no | +| windows-threading | 0.1.0 | MIT OR Apache-2.0 | no | +| windows-version | 0.1.7 | MIT OR Apache-2.0 | no | +| windows_aarch64_gnullvm | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_aarch64_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_aarch64_gnullvm | 0.53.1 | MIT OR Apache-2.0 | no | +| windows_aarch64_msvc | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_aarch64_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_aarch64_msvc | 0.53.1 | MIT OR Apache-2.0 | no | +| windows_i686_gnu | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_i686_gnu | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_gnu | 0.53.1 | MIT OR Apache-2.0 | no | +| windows_i686_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_gnullvm | 0.53.1 | MIT OR Apache-2.0 | no | +| windows_i686_msvc | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_i686_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_msvc | 0.53.1 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnu | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnu | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnu | 0.53.1 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnullvm | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnullvm | 0.53.1 | MIT OR Apache-2.0 | no | +| windows_x86_64_msvc | 0.42.2 | MIT OR Apache-2.0 | no | +| windows_x86_64_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_msvc | 0.53.1 | MIT OR Apache-2.0 | no | +| winnow | 0.5.40 | MIT | no | +| winnow | 0.7.15 | MIT | no | +| winnow | 1.0.3 | MIT | no | +| winreg | 0.55.0 | MIT | no | +| wit-bindgen | 0.57.1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| writeable | 0.6.3 | Unicode-3.0 | no | +| wry | 0.55.1 | Apache-2.0 OR MIT | no | +| x11 | 2.21.0 | MIT | no | +| x11-dl | 2.21.0 | MIT | no | +| yoke | 0.8.3 | Unicode-3.0 | no | +| yoke-derive | 0.8.2 | Unicode-3.0 | no | +| zbus | 5.17.0 | NOASSERTION | yes | +| zbus-secret-service-keyring-store | 1.0.0 | NOASSERTION | yes | +| zbus_macros | 5.17.0 | NOASSERTION | yes | +| zbus_names | 4.3.3 | NOASSERTION | yes | +| zerocopy | 0.8.54 | BSD-2-Clause OR Apache-2.0 OR MIT | no | +| zerocopy-derive | 0.8.54 | BSD-2-Clause OR Apache-2.0 OR MIT | no | +| zerofrom | 0.1.8 | Unicode-3.0 | no | +| zerofrom-derive | 0.1.7 | Unicode-3.0 | no | +| zeroize | 1.9.0 | Apache-2.0 OR MIT | no | +| zeroize_derive | 1.5.0 | Apache-2.0 OR MIT | no | +| zerotrie | 0.2.4 | Unicode-3.0 | no | +| zerovec | 0.11.6 | Unicode-3.0 | no | +| zerovec-derive | 0.11.3 | Unicode-3.0 | no | +| zip | 8.6.0 | MIT | no | +| zlib-rs | 0.6.6 | Zlib | no | +| zmij | 1.0.21 | MIT | no | +| zopfli | 0.8.3 | Apache-2.0 | no | +| zvariant | 5.13.0 | NOASSERTION | yes | +| zvariant_derive | 5.13.0 | NOASSERTION | yes | +| zvariant_utils | 3.5.0 | NOASSERTION | yes | + +### ContextualWisdomLab/EgressWeave + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | yes | +| actions/download-artifact | d3f86a106a0bac45b974a628896c90dbdf5c8093 | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | yes | +| anyio | 4.14.2 | MIT | no | +| backports-asyncio-runner | 1.2.0 | NOASSERTION | yes | +| certifi | 2026.7.22 | MPL-2.0 | yes | +| coverage | — | NOASSERTION | yes | +| exceptiongroup | 1.3.1 | MIT AND Python-2.0 | no | +| h11 | 0.16.0 | MIT | no | +| hatchling | — | NOASSERTION | yes | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpx | 0.28.1 | BSD-3-Clause | no | +| idna | — | NOASSERTION | yes | +| idna | 3.18 | BSD-3-Clause | no | +| iniconfig | 2.3.0 | MIT | no | +| packaging | 26.3 | Apache-2.0 OR BSD-2-Clause | no | +| pathspec | — | NOASSERTION | yes | +| pluggy | 1.6.0 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pypa/gh-action-pypi-publish | dc37677b2e1c63e2034f94d8a5b11f265b73ba33 | NOASSERTION | yes | +| pytest | — | NOASSERTION | yes | +| pytest | 9.1.1 | MIT | no | +| pytest-asyncio | — | NOASSERTION | yes | +| pytest-asyncio | 1.4.0 | Apache-2.0 | no | +| ruff | 0.16.1 | MIT | no | +| step-security/harden-runner | bf7454d06d71f1098171f2acdf0cd4708d7b5920 | NOASSERTION | yes | +| tomli | 2.4.1 | MIT | no | +| trove-classifiers | — | NOASSERTION | yes | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | + +### ContextualWisdomLab/ELUNVERA + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/EmbedRelay + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/enterprise-architecture-core + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/fast-mlsirm + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| allocator-api2 | 0.2.21 | MIT OR Apache-2.0 | no | +| android_system_properties | 0.1.5 | MIT OR Apache-2.0 | no | +| arbitrary | 1.4.2 | MIT OR Apache-2.0 | no | +| arrayvec | 0.7.8 | MIT OR Apache-2.0 | no | +| ash | 0.38.0+1.3.281 | MIT OR Apache-2.0 | no | +| atheris | 3.1.0 | Apache-2.0 | no | +| autocfg | 1.5.1 | Apache-2.0 OR MIT | no | +| bit-set | 0.10.0 | Apache-2.0 OR MIT | no | +| bit-set | 0.8.0 | Apache-2.0 OR MIT | no | +| bit-vec | 0.8.0 | Apache-2.0 OR MIT | no | +| bit-vec | 0.9.1 | Apache-2.0 OR MIT | no | +| bitflags | 2.13.0 | MIT OR Apache-2.0 | no | +| bitflags | 2.13.1 | MIT OR Apache-2.0 | no | +| block-buffer | 0.10.4 | MIT OR Apache-2.0 | no | +| block2 | 0.6.2 | MIT | no | +| build | 1.5.1 | MIT | no | +| bumpalo | 3.20.3 | MIT OR Apache-2.0 | no | +| bytemuck | 1.25.2 | Zlib OR Apache-2.0 OR MIT | no | +| bytemuck | >= 1.25.0,< 2.0.0 | NOASSERTION | yes | +| bytemuck_derive | 1.10.2 | Zlib OR Apache-2.0 OR MIT | no | +| cc | 1.2.66 | MIT OR Apache-2.0 | no | +| cfg-if | 1.0.4 | MIT OR Apache-2.0 | no | +| cfg_aliases | 0.2.1 | MIT | no | +| codespan-reporting | 0.13.1 | Apache-2.0 | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| cpufeatures | 0.2.17 | MIT OR Apache-2.0 | no | +| crunchy | 0.2.4 | MIT | no | +| crypto-common | 0.1.7 | MIT OR Apache-2.0 | no | +| deranged | 0.5.8 | MIT OR Apache-2.0 | no | +| digest | 0.10.7 | MIT OR Apache-2.0 | no | +| dispatch2 | 0.3.1 | Zlib OR Apache-2.0 OR MIT | no | +| dlib | 0.5.3 | MIT | no | +| document-features | 0.2.12 | MIT OR Apache-2.0 | no | +| dtolnay/rust-toolchain | 4be7066ada62dd38de10e7b70166bc74ed198c30 | NOASSERTION | yes | +| equivalent | 1.0.2 | Apache-2.0 OR MIT | no | +| errno | 0.3.14 | MIT OR Apache-2.0 | no | +| fast-mlsirm | 0.9.1 | NOASSERTION | yes | +| fastrand | 2.4.1 | Apache-2.0 OR MIT | no | +| find-msvc-tools | 0.1.9 | MIT OR Apache-2.0 | no | +| fnv | 1.0.7 | Apache-2.0 OR MIT | no | +| foldhash | 0.2.0 | Zlib | no | +| futures-core | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-core | 0.3.34 | MIT OR Apache-2.0 | no | +| futures-task | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-task | 0.3.34 | MIT OR Apache-2.0 | no | +| futures-util | 0.3.32 | MIT OR Apache-2.0 | no | +| futures-util | 0.3.34 | MIT OR Apache-2.0 | no | +| generic-array | 0.14.7 | MIT | no | +| getrandom | 0.3.4 | MIT OR Apache-2.0 | no | +| getrandom | 0.4.3 | MIT OR Apache-2.0 | no | +| github/codeql-action/analyze | ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd | NOASSERTION | yes | +| github/codeql-action/init | ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd | NOASSERTION | yes | +| gl_generator | 0.14.0 | Apache-2.0 | no | +| glow | 0.17.0 | MIT OR Apache-2.0 OR Zlib | no | +| glutin_wgl_sys | 0.6.1 | Apache-2.0 | no | +| google/clusterfuzzlite/actions/build_fuzzers | 884713a6c30a92e5e8544c39945cd7cb630abcd1 | NOASSERTION | yes | +| google/clusterfuzzlite/actions/run_fuzzers | 884713a6c30a92e5e8544c39945cd7cb630abcd1 | NOASSERTION | yes | +| gpu-allocator | 0.28.0 | MIT OR Apache-2.0 | no | +| half | 2.7.1 | MIT OR Apache-2.0 | no | +| hashbrown | 0.16.1 | MIT OR Apache-2.0 | no | +| hashbrown | 0.17.1 | MIT OR Apache-2.0 | no | +| heck | 0.5.0 | MIT OR Apache-2.0 | no | +| hypothesis | 6.156.6 | MPL-2.0 AND MPL-1.1 | yes | +| indexmap | 2.14.0 | Apache-2.0 OR MIT | no | +| iniconfig | 2.3.0 | MIT | no | +| itoa | 1.0.18 | MIT OR Apache-2.0 | no | +| jni-sys | 0.3.1 | MIT OR Apache-2.0 | no | +| jni-sys | 0.4.1 | MIT OR Apache-2.0 | no | +| jni-sys-macros | 0.4.1 | MIT OR Apache-2.0 | no | +| jobserver | 0.1.35 | MIT OR Apache-2.0 | no | +| js-sys | 0.3.103 | MIT OR Apache-2.0 | no | +| khronos-egl | 6.0.0 | MIT OR Apache-2.0 | no | +| khronos_api | 3.1.0 | Apache-2.0 | no | +| libc | 0.2.186 | MIT OR Apache-2.0 | no | +| libc | 0.2.189 | MIT OR Apache-2.0 | no | +| libfuzzer-sys | 0.4.13 | (MIT OR Apache-2.0) AND NCSA | no | +| libloading | 0.8.9 | ISC | no | +| libm | 0.2.16 | MIT | no | +| linux-raw-sys | 0.12.1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| litrs | 1.0.0 | MIT OR Apache-2.0 | no | +| lock_api | 0.4.14 | MIT OR Apache-2.0 | no | +| log | 0.4.33 | MIT OR Apache-2.0 | no | +| log | 0.4.34 | MIT OR Apache-2.0 | no | +| matrixmultiply | 0.3.10 | MIT OR Apache-2.0 | no | +| maturin | — | NOASSERTION | yes | +| maturin | 1.14.1 | Apache-2.0 AND MIT | no | +| memchr | 2.8.3 | Unlicense OR MIT | no | +| naga | 30.0.0 | MIT OR Apache-2.0 | no | +| naga-types | 30.0.0 | MIT OR Apache-2.0 | no | +| ndarray | 0.17.2 | MIT OR Apache-2.0 | no | +| ndk-sys | 0.6.0+11769913 | MIT OR Apache-2.0 | no | +| num-complex | 0.4.6 | MIT OR Apache-2.0 | no | +| num-conv | 0.2.2 | MIT OR Apache-2.0 | no | +| num-integer | 0.1.46 | MIT OR Apache-2.0 | no | +| num-traits | 0.2.19 | MIT OR Apache-2.0 | no | +| numpy | — | NOASSERTION | yes | +| numpy | 0.29.0 | BSD-2-Clause | no | +| numpy | 2.5.1 | BSD-3-Clause | no | +| numpy | 2.5.2 | BSD-3-Clause AND 0BSD AND MIT AND Zlib AND CC0-1.0 | no | +| objc2 | 0.6.4 | MIT | no | +| objc2-core-foundation | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-core-graphics | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-encode | 4.1.0 | MIT | no | +| objc2-foundation | 0.3.2 | MIT | no | +| objc2-io-surface | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-metal | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| objc2-quartz-core | 0.3.2 | Zlib OR Apache-2.0 OR MIT | no | +| once_cell | 1.21.4 | MIT OR Apache-2.0 | no | +| ordered-float | 5.3.0 | MIT | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| parking_lot | 0.12.5 | MIT OR Apache-2.0 | no | +| parking_lot_core | 0.9.12 | MIT OR Apache-2.0 | no | +| pin-project-lite | 0.2.17 | Apache-2.0 OR MIT | no | +| pkg-config | 0.3.33 | MIT OR Apache-2.0 | no | +| pluggy | 1.6.0 | MIT | no | +| pollster | 1.0.1 | LicenseRef-bad-apache-2.0mit | no | +| pollster | >= 1.0.1,< 2.0.0 | NOASSERTION | yes | +| portable-atomic | 1.13.1 | Apache-2.0 OR MIT | no | +| portable-atomic | 1.15.0 | Apache-2.0 OR MIT | no | +| portable-atomic-util | 0.2.7 | Apache-2.0 OR MIT | no | +| powerfmt | 0.2.0 | MIT OR Apache-2.0 | no | +| ppv-lite86 | 0.2.21 | MIT OR Apache-2.0 | no | +| presser | 0.3.1 | MIT OR Apache-2.0 | no | +| proc-macro2 | 1.0.106 | MIT OR Apache-2.0 | no | +| proc-macro2 | 1.0.107 | MIT OR Apache-2.0 | no | +| profiling | 1.0.18 | MIT OR Apache-2.0 | no | +| proptest | 1.11.0 | MIT OR Apache-2.0 | no | +| proptest | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pyo3 | 0.29.0 | MIT OR Apache-2.0 | no | +| pyo3-build-config | 0.29.0 | MIT OR Apache-2.0 | no | +| pyo3-ffi | 0.29.0 | MIT OR Apache-2.0 | no | +| pyo3-macros | 0.29.0 | MIT OR Apache-2.0 | no | +| pyo3-macros-backend | 0.29.0 | MIT OR Apache-2.0 | no | +| PyO3/maturin-action | e83996d129638aa358a18fbd1dfb82f0b0fb5d3b | NOASSERTION | yes | +| pypa/gh-action-pypi-publish | dc37677b2e1c63e2034f94d8a5b11f265b73ba33 | NOASSERTION | yes | +| pyproject-hooks | 1.2.0 | MIT | no | +| pytest | — | NOASSERTION | yes | +| pytest | 9.1.1 | MIT | no | +| quick-error | 1.2.3 | MIT OR Apache-2.0 | no | +| quote | 1.0.46 | MIT OR Apache-2.0 | no | +| quote | 1.0.47 | MIT OR Apache-2.0 | no | +| r-efi | 5.3.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | yes | +| r-efi | 6.0.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | yes | +| rand | 0.9.4 | MIT OR Apache-2.0 | no | +| rand_chacha | 0.9.0 | MIT OR Apache-2.0 | no | +| rand_core | 0.9.5 | MIT OR Apache-2.0 | no | +| rand_xorshift | 0.4.0 | MIT OR Apache-2.0 | no | +| range-alloc | 0.1.5 | MIT OR Apache-2.0 | no | +| raw-window-handle | 0.6.2 | MIT OR Apache-2.0 OR Zlib | no | +| raw-window-metal | 1.1.0 | MIT OR Apache-2.0 | no | +| rawpointer | 0.2.1 | MIT OR Apache-2.0 | no | +| redox_syscall | 0.5.18 | MIT | no | +| regex-syntax | 0.8.11 | MIT OR Apache-2.0 | no | +| renderdoc-sys | 1.1.0 | MIT OR Apache-2.0 | no | +| rustc-hash | 1.1.0 | Apache-2.0 OR MIT | no | +| rustc-hash | 2.1.3 | Apache-2.0 OR MIT | no | +| rustix | 1.1.4 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| rustversion | 1.0.23 | MIT OR Apache-2.0 | no | +| rusty-fork | 0.3.1 | MIT OR Apache-2.0 | no | +| scopeguard | 1.2.0 | MIT OR Apache-2.0 | no | +| serde | 1.0.228 | MIT OR Apache-2.0 | no | +| serde | 1.0.229 | MIT OR Apache-2.0 | no | +| serde | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| serde_core | 1.0.228 | MIT OR Apache-2.0 | no | +| serde_core | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_derive | 1.0.228 | MIT OR Apache-2.0 | no | +| serde_derive | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_json | 1.0.151 | MIT OR Apache-2.0 | no | +| serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| sha2 | 0.10.9 | MIT OR Apache-2.0 | no | +| sha2 | >= 0.10.9,< 0.11.0 | NOASSERTION | yes | +| shlex | 2.0.1 | MIT OR Apache-2.0 | no | +| slab | 0.4.12 | MIT | no | +| slotmap | 1.1.1 | Zlib | no | +| smallvec | 1.15.2 | MIT OR Apache-2.0 | no | +| sortedcontainers | 2.4.0 | Apache-2.0 | no | +| spirv | 0.4.0+sdk-1.4.341.0 | Apache-2.0 | no | +| static_assertions | 1.1.0 | MIT OR Apache-2.0 | no | +| syn | 2.0.118 | MIT OR Apache-2.0 | no | +| syn | 2.0.119 | MIT OR Apache-2.0 | no | +| syn | 3.0.4 | MIT OR Apache-2.0 | no | +| target-lexicon | 0.13.5 | Apache-2.0 WITH LLVM-exception | no | +| tempfile | 3.27.0 | MIT OR Apache-2.0 | no | +| termcolor | 1.4.1 | Unlicense OR MIT | no | +| thiserror | 2.0.18 | MIT OR Apache-2.0 | no | +| thiserror | 2.0.20 | MIT OR Apache-2.0 | no | +| thiserror-impl | 2.0.18 | MIT OR Apache-2.0 | no | +| thiserror-impl | 2.0.20 | MIT OR Apache-2.0 | no | +| time | 0.3.55 | MIT OR Apache-2.0 | no | +| time | >= 0.3.0,< 0.4.0 | NOASSERTION | yes | +| time-core | 0.1.9 | MIT OR Apache-2.0 | no | +| time-macros | 0.2.32 | NOASSERTION | yes | +| typenum | 1.20.1 | MIT OR Apache-2.0 | no | +| unarray | 0.1.4 | MIT OR Apache-2.0 | no | +| unicode-ident | 1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0 | no | +| unicode-width | 0.2.2 | MIT OR Apache-2.0 | no | +| uuid | 1.25.0 | Apache-2.0 OR MIT | no | +| uuid | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| version_check | 0.9.5 | MIT OR Apache-2.0 | no | +| wait-timeout | 0.2.1 | MIT OR Apache-2.0 | no | +| wasip2 | 1.0.4+wasi-0.2.12 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| wasm-bindgen | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-futures | 0.4.76 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro-support | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-shared | 0.2.126 | MIT OR Apache-2.0 | no | +| wayland-sys | 0.31.11 | MIT | no | +| web-sys | 0.3.103 | MIT OR Apache-2.0 | no | +| wgpu | 30.0.0 | MIT OR Apache-2.0 | no | +| wgpu | >= 30.0.0,< 31.0.0 | NOASSERTION | yes | +| wgpu-core | 30.0.0 | MIT OR Apache-2.0 | no | +| wgpu-core-deps-apple | 30.0.0 | MIT OR Apache-2.0 | no | +| wgpu-core-deps-emscripten | 30.0.0 | MIT OR Apache-2.0 | no | +| wgpu-core-deps-windows-linux-android | 30.0.0 | MIT OR Apache-2.0 | no | +| wgpu-hal | 30.0.0 | MIT OR Apache-2.0 | no | +| wgpu-naga-bridge | 30.0.0 | MIT OR Apache-2.0 | no | +| wgpu-types | 30.0.0 | MIT OR Apache-2.0 | no | +| winapi-util | 0.1.11 | Unlicense OR MIT | no | +| windows | 0.62.2 | MIT OR Apache-2.0 | no | +| windows-collections | 0.3.2 | MIT OR Apache-2.0 | no | +| windows-core | 0.62.2 | MIT OR Apache-2.0 | no | +| windows-future | 0.3.2 | MIT OR Apache-2.0 | no | +| windows-implement | 0.60.2 | MIT OR Apache-2.0 | no | +| windows-interface | 0.59.3 | MIT OR Apache-2.0 | no | +| windows-link | 0.2.1 | MIT OR Apache-2.0 | no | +| windows-numerics | 0.3.1 | MIT OR Apache-2.0 | no | +| windows-result | 0.4.1 | MIT OR Apache-2.0 | no | +| windows-strings | 0.5.1 | MIT OR Apache-2.0 | no | +| windows-sys | 0.61.2 | MIT OR Apache-2.0 | no | +| windows-threading | 0.2.1 | MIT OR Apache-2.0 | no | +| wit-bindgen | 0.57.1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| xml-rs | 0.8.28 | MIT | no | +| zerocopy | 0.8.54 | BSD-2-Clause OR Apache-2.0 OR MIT | no | +| zerocopy | 0.8.56 | BSD-2-Clause OR Apache-2.0 OR MIT | no | +| zerocopy-derive | 0.8.54 | BSD-2-Clause OR Apache-2.0 OR MIT | no | +| zerocopy-derive | 0.8.56 | BSD-2-Clause OR Apache-2.0 OR MIT | no | +| zmij | 1.0.23 | MIT | no | + +### ContextualWisdomLab/feelanet-adfs + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @bcoe/v8-coverage | 1.0.2 | ISC AND MIT | no | +| @isaacs/cliui | 8.0.2 | ISC | no | +| @istanbuljs/schema | 0.1.6 | MIT | no | +| @jridgewell/resolve-uri | 3.1.2 | MIT | no | +| @jridgewell/sourcemap-codec | 1.5.5 | MIT | no | +| @jridgewell/trace-mapping | 0.3.31 | MIT | no | +| @node-saml/node-saml | 5.1.0 | MIT | no | +| @node-saml/passport-saml | 5.1.0 | MIT | no | +| @pkgjs/parseargs | 0.11.0 | Apache-2.0 AND MIT | no | +| @types/babel-types | 7.0.16 | MIT | no | +| @types/babylon | 6.16.9 | MIT | no | +| @types/body-parser | 1.19.6 | MIT | no | +| @types/connect | 3.4.38 | MIT | no | +| @types/debug | 4.1.13 | MIT | no | +| @types/express | 4.17.25 | MIT | no | +| @types/express-serve-static-core | 4.19.9 | MIT | no | +| @types/http-errors | 2.0.5 | MIT | no | +| @types/istanbul-lib-coverage | 2.0.6 | MIT | no | +| @types/mime | 1.3.5 | MIT | no | +| @types/ms | 2.1.0 | MIT | no | +| @types/node | 26.1.1 | MIT | no | +| @types/passport | 1.0.17 | MIT | no | +| @types/passport-strategy | 0.2.38 | MIT | no | +| @types/qs | 6.15.1 | MIT | no | +| @types/range-parser | 1.2.7 | MIT | no | +| @types/send | 0.17.6 | MIT | no | +| @types/send | 1.2.1 | MIT | no | +| @types/serve-static | 1.15.10 | MIT | no | +| @types/xml-encryption | 1.2.4 | MIT | no | +| @types/xml2js | 0.4.14 | MIT | no | +| @xmldom/is-dom-node | 1.0.1 | MIT | no | +| @xmldom/xmldom | 0.8.13 | MIT | no | +| accepts | 1.3.8 | MIT | no | +| acorn | 1.2.2 | MIT | no | +| acorn | 2.7.0 | MIT | no | +| acorn-globals | 1.0.9 | MIT | no | +| align-text | 0.1.4 | MIT | no | +| ansi-regex | 5.0.1 | MIT | no | +| ansi-regex | 6.2.2 | MIT | no | +| ansi-styles | 4.3.0 | MIT | no | +| ansi-styles | 6.2.3 | MIT | no | +| array-flatten | 1.1.1 | MIT | no | +| asap | 1.0.0 | MIT | no | +| axum | >= 0.7.0,< 0.8.0 | NOASSERTION | yes | +| babel-runtime | 6.26.0 | MIT | no | +| babel-types | 6.26.0 | MIT | no | +| babylon | 6.18.0 | MIT | no | +| balanced-match | 1.0.2 | MIT | no | +| balanced-match | 4.0.4 | MIT | no | +| base64 | >= 0.22.0,< 0.23.0 | NOASSERTION | yes | +| basic-auth | 2.0.1 | MIT | no | +| body-parser | 1.20.5 | MIT | no | +| body-parser | 1.20.6 | MIT | no | +| brace-expansion | 2.1.2 | MIT | no | +| brace-expansion | 5.0.7 | MIT | no | +| buffer-equal-constant-time | 1.0.1 | BSD-3-Clause | no | +| bytes | 3.1.2 | MIT | no | +| c8 | 10.1.3 | ISC | no | +| call-bind-apply-helpers | 1.0.2 | MIT | no | +| call-bound | 1.0.4 | MIT | no | +| camelcase | 1.2.1 | MIT | no | +| center-align | 0.1.3 | MIT | no | +| character-parser | 1.2.1 | MIT | no | +| clean-css | 4.2.4 | MIT | no | +| cliui | 2.1.0 | ISC | no | +| cliui | 8.0.1 | ISC | no | +| color-convert | 2.0.1 | MIT | no | +| color-name | 1.1.4 | MIT | no | +| commander | 2.6.0 | MIT | no | +| constantinople | 3.1.2 | MIT | no | +| content-disposition | 0.5.4 | MIT | no | +| content-type | 1.0.5 | MIT | no | +| convert-source-map | 2.0.0 | MIT | no | +| cookie | 0.7.2 | MIT | no | +| cookie-parser | 1.4.7 | MIT | no | +| cookie-signature | 1.0.6 | MIT | no | +| core-js | 2.6.12 | MIT | no | +| cross-spawn | 7.0.6 | MIT | no | +| cryptography | — | NOASSERTION | yes | +| css | 1.0.8 | MIT | no | +| css-parse | 1.0.4 | MIT | no | +| css-stringify | 1.0.5 | MIT | no | +| debug | 2.6.9 | MIT | no | +| debug | 4.4.3 | MIT | no | +| decamelize | 1.2.0 | MIT | no | +| depd | 2.0.0 | MIT | no | +| destroy | 1.2.0 | MIT | no | +| dunder-proto | 1.0.1 | MIT | no | +| eastasianwidth | 0.2.0 | MIT | no | +| ecdsa-sig-formatter | 1.0.11 | Apache-2.0 | no | +| ee-first | 1.1.1 | MIT | no | +| emoji-regex | 8.0.0 | MIT | no | +| emoji-regex | 9.2.2 | MIT | no | +| encodeurl | 2.0.0 | MIT | no | +| es-define-property | 1.0.1 | MIT | no | +| es-errors | 1.3.0 | MIT | no | +| es-object-atoms | 1.1.2 | MIT | no | +| escalade | 3.2.0 | MIT | no | +| escape-html | 1.0.3 | MIT | no | +| esutils | 2.0.3 | BSD-2-Clause | no | +| etag | 1.8.1 | MIT | no | +| express | 4.22.2 | MIT | no | +| express-rate-limit | 8.5.2 | MIT | no | +| ext-curl | >= 0 | NOASSERTION | yes | +| ext-dom | >= 0 | NOASSERTION | yes | +| ext-mcrypt | >= 0 | NOASSERTION | yes | +| ext-openssl | >= 0 | NOASSERTION | yes | +| fastapi | — | NOASSERTION | yes | +| finalhandler | 1.3.2 | MIT | no | +| find-up | 5.0.0 | MIT | no | +| firebase/php-jwt | 5.0.0 | BSD-3-Clause | no | +| flate2 | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| foreground-child | 3.3.1 | ISC | no | +| form_urlencoded | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| forwarded | 0.2.0 | MIT | no | +| fresh | 0.5.2 | MIT | no | +| function-bind | 1.1.2 | MIT | no | +| get-caller-file | 2.0.5 | ISC | no | +| get-intrinsic | 1.3.0 | MIT | no | +| get-proto | 1.0.1 | MIT | no | +| glob | 10.5.0 | ISC | no | +| gopd | 1.2.0 | MIT | no | +| has-flag | 4.0.0 | MIT | no | +| has-symbols | 1.1.0 | MIT | no | +| hasown | 2.0.4 | MIT | no | +| html-escaper | 2.0.2 | MIT | no | +| http-errors | 2.0.1 | MIT | no | +| httpx | — | NOASSERTION | yes | +| iconv-lite | 0.4.24 | MIT | no | +| inherits | 2.0.4 | ISC | no | +| io.jsonwebtoken:jjwt-api | 0.10.7 | Apache-2.0 | no | +| io.jsonwebtoken:jjwt-impl | 0.10.7 | Apache-2.0 | no | +| io.jsonwebtoken:jjwt-jackson | 0.10.7 | Apache-2.0 | no | +| ip-address | 10.4.0 | MIT | no | +| ipaddr.js | 1.9.1 | MIT | no | +| is-buffer | 1.1.6 | MIT | no | +| is-fullwidth-code-point | 3.0.0 | MIT | no | +| is-promise | 1.0.1 | MIT | no | +| is-promise | 2.2.2 | MIT | no | +| isexe | 2.0.0 | ISC | no | +| istanbul-lib-coverage | 3.2.2 | BSD-3-Clause | no | +| istanbul-lib-report | 3.0.1 | BSD-3-Clause | no | +| istanbul-reports | 3.2.0 | BSD-3-Clause | no | +| itsdangerous | — | NOASSERTION | yes | +| jackspeak | 3.4.3 | BlueOak-1.0.0 | no | +| jade | 1.11.0 | MIT | no | +| jinja2 | — | NOASSERTION | yes | +| jsonwebtoken | 9.0.3 | MIT | no | +| jsonwebtoken | >= 10.3.0,< 11.0.0 | NOASSERTION | yes | +| jstransformer | 0.0.2 | MIT | no | +| jwa | 1.4.2 | MIT | no | +| jws | 3.2.3 | MIT | no | +| kind-of | 3.2.2 | MIT | no | +| lazy-cache | 1.0.4 | MIT | no | +| locate-path | 6.0.0 | MIT | no | +| lodash | 4.18.1 | MIT | no | +| lodash.includes | 4.3.0 | CC0-1.0 AND MIT | no | +| lodash.isboolean | 3.0.3 | MIT | no | +| lodash.isinteger | 4.0.4 | CC0-1.0 AND MIT | no | +| lodash.isnumber | 3.0.3 | MIT | no | +| lodash.isplainobject | 4.0.6 | CC0-1.0 AND MIT | no | +| lodash.isstring | 4.0.1 | MIT | no | +| lodash.once | 4.1.1 | CC0-1.0 AND MIT | no | +| longest | 1.0.1 | MIT | no | +| lru-cache | 10.4.3 | ISC | no | +| lxml | — | NOASSERTION | yes | +| make-dir | 4.0.0 | MIT | no | +| math-intrinsics | 1.1.0 | MIT | no | +| media-typer | 0.3.0 | MIT | no | +| merge-descriptors | 1.0.3 | MIT | no | +| methods | 1.1.2 | MIT | no | +| Microsoft.AspNet.Mvc | 5.2.9 | NOASSERTION | yes | +| Microsoft.AspNet.Mvc.ko | 5.2.9 | NOASSERTION | yes | +| Microsoft.AspNet.Razor | 3.2.9 | LicenseRef-scancode-unknown | no | +| Microsoft.AspNet.Razor.ko | 3.2.9 | LicenseRef-scancode-unknown | no | +| Microsoft.AspNet.WebPages | 3.2.9 | NOASSERTION | yes | +| Microsoft.AspNet.WebPages.ko | 3.2.9 | LicenseRef-scancode-unknown | no | +| Microsoft.CodeDom.Providers.DotNetCompilerPlatform | 2.0.1 | LicenseRef-github-OTHER | no | +| Microsoft.IdentityModel.Clients.ActiveDirectory | 4.5.1 | MIT | no | +| Microsoft.IdentityModel.JsonWebTokens | 5.4.0 | MIT | no | +| Microsoft.IdentityModel.Logging | 5.4.0 | MIT | no | +| Microsoft.IdentityModel.Tokens | 5.4.0 | MIT | no | +| Microsoft.Web.Infrastructure | 2.0.1 | LicenseRef-scancode-unknown | no | +| mime | 1.6.0 | MIT | no | +| mime-db | 1.52.0 | MIT | no | +| mime-types | 2.1.35 | MIT | no | +| minimatch | 10.2.5 | BlueOak-1.0.0 | no | +| minimatch | 9.0.9 | ISC | no | +| minimist | 1.2.8 | MIT | no | +| minipass | 7.1.3 | BlueOak-1.0.0 | no | +| mkdirp | 0.5.6 | MIT | no | +| morgan | 1.11.0 | MIT | no | +| ms | 2.0.0 | MIT | no | +| ms | 2.1.3 | MIT | no | +| negotiator | 0.6.3 | MIT | no | +| Newtonsoft.Json | 12.0.1 | MIT | no | +| node-uuid | 1.4.8 | MIT | no | +| object-inspect | 1.13.4 | MIT | no | +| on-finished | 2.4.1 | MIT | no | +| on-headers | 1.1.0 | MIT | no | +| p-limit | 3.1.0 | MIT | no | +| p-locate | 5.0.0 | MIT | no | +| package-json-from-dist | 1.0.1 | BlueOak-1.0.0 | no | +| parseurl | 1.3.3 | MIT | no | +| passport | 0.7.0 | MIT | no | +| passport-strategy | 1.0.0 | MIT | no | +| path-exists | 4.0.0 | MIT | no | +| path-key | 3.1.1 | MIT | no | +| path-scurry | 1.11.1 | BlueOak-1.0.0 | no | +| path-to-regexp | 0.1.13 | MIT | no | +| pause | 0.0.1 | MIT | no | +| pdepend/pdepend | 1.1.0 | BSD-3-Clause | no | +| pem | >= 3.0.0,< 4.0.0 | NOASSERTION | yes | +| php | >= 5.3.2 | NOASSERTION | yes | +| phploc/phploc | >= 0 | NOASSERTION | yes | +| phpunit/phpunit | 4.8 | NOASSERTION | yes | +| promise | 2.0.0 | MIT | no | +| promise | 6.1.0 | MIT | no | +| proxy-addr | 2.0.7 | MIT | no | +| pyjwt | — | NOASSERTION | yes | +| pytest | — | NOASSERTION | yes | +| python-multipart | — | NOASSERTION | yes | +| qs | 6.15.3 | BSD-3-Clause | no | +| rand | >= 0.8.0,< 0.9.0 | NOASSERTION | yes | +| range-parser | 1.2.1 | MIT | no | +| raw-body | 2.5.3 | MIT | no | +| regenerator-runtime | 0.11.1 | MIT | no | +| repeat-string | 1.6.1 | MIT | no | +| require-directory | 2.1.1 | MIT | no | +| reqwest | >= 0.12.0,< 0.13.0 | NOASSERTION | yes | +| right-align | 0.1.3 | MIT | no | +| roxmltree | >= 0.20.0,< 0.21.0 | NOASSERTION | yes | +| rsa | >= 0.9.0,< 0.10.0 | NOASSERTION | yes | +| rust-xmlsec | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| safe-buffer | 5.1.2 | MIT | no | +| safe-buffer | 5.2.1 | MIT | no | +| safer-buffer | 2.1.2 | MIT | no | +| satooshi/php-coveralls | 1.0.1 | MIT | no | +| sax | 1.6.0 | BlueOak-1.0.0 | no | +| sebastian/phpcpd | >= 0 | NOASSERTION | yes | +| semver | 7.8.5 | ISC | no | +| send | 0.19.2 | MIT | no | +| serde | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| serve-static | 1.16.3 | MIT | no | +| setprototypeof | 1.2.0 | ISC | no | +| sha2 | >= 0.10.0,< 0.11.0 | NOASSERTION | yes | +| shebang-command | 2.0.0 | MIT | no | +| shebang-regex | 3.0.0 | MIT | no | +| side-channel | 1.1.1 | MIT | no | +| side-channel-list | 1.0.1 | MIT | no | +| side-channel-map | 1.0.1 | MIT | no | +| side-channel-weakmap | 1.0.2 | MIT | no | +| signal-exit | 4.1.0 | ISC | no | +| signxml | — | NOASSERTION | yes | +| source-map | 0.5.7 | BSD-3-Clause | no | +| source-map | 0.6.1 | BSD-3-Clause | no | +| squizlabs/php_codesniffer | 2.9.0 | BSD-3-Clause | no | +| statuses | 2.0.2 | MIT | no | +| string-width | 4.2.3 | MIT | no | +| string-width | 5.1.2 | MIT | no | +| strip-ansi | 6.0.1 | MIT | no | +| strip-ansi | 7.2.0 | MIT | no | +| supports-color | 7.2.0 | MIT | no | +| System.IdentityModel.Tokens.Jwt | 5.4.0 | NOASSERTION | yes | +| test-exclude | 7.0.2 | ISC | no | +| thiserror | >= 2.0.0,< 3.0.0 | NOASSERTION | yes | +| time | >= 0.3.0,< 0.4.0 | NOASSERTION | yes | +| to-fast-properties | 1.0.3 | MIT | no | +| toidentifier | 1.0.1 | MIT | no | +| tokio | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| tower-sessions | >= 0.13.0,< 0.14.0 | NOASSERTION | yes | +| transformers | 2.1.0 | MIT | no | +| type-is | 1.6.18 | MIT | no | +| uglify-js | 2.8.29 | BSD-2-Clause | no | +| uglify-to-browserify | 1.0.2 | MIT | no | +| undici-types | 8.3.0 | MIT | no | +| unpipe | 1.0.0 | MIT | no | +| utils-merge | 1.0.1 | MIT | no | +| uvicorn | — | NOASSERTION | yes | +| v8-to-istanbul | 9.3.0 | ISC | no | +| vary | 1.1.2 | MIT | no | +| void-elements | 2.0.1 | MIT | no | +| which | 2.0.2 | ISC | no | +| window-size | 0.1.0 | MIT | no | +| with | 4.0.3 | MIT | no | +| wordwrap | 0.0.2 | MIT | no | +| wrap-ansi | 7.0.0 | MIT | no | +| wrap-ansi | 8.1.0 | MIT | no | +| x509-parser | >= 0.16.0,< 0.17.0 | NOASSERTION | yes | +| xml-crypto | 6.1.2 | MIT | no | +| xml-encryption | 3.1.0 | MIT | no | +| xml2js | 0.6.2 | MIT | no | +| xmlbuilder | 11.0.1 | LicenseRef-scancode-unicode AND MIT | no | +| xmlbuilder | 15.1.1 | MIT | no | +| xpath | 0.0.32 | MIT | no | +| xpath | 0.0.33 | MIT | no | +| xpath | 0.0.34 | MIT | no | +| y18n | 5.0.8 | ISC | no | +| yargs | 17.7.3 | MIT | no | +| yargs | 3.10.0 | MIT | no | +| yargs-parser | 21.1.1 | ISC | no | +| yocto-queue | 0.1.0 | MIT | no | + +### ContextualWisdomLab/four-pillars + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 11d5960a326750d5838078e36cf38b85af677262 | NOASSERTION | yes | +| actions/create-github-app-token | bcd2ba49218906704ab6c1aa796996da409d3eb1 | NOASSERTION | yes | +| actions/download-artifact | d3f86a106a0bac45b974a628896c90dbdf5c8093 | NOASSERTION | yes | +| actions/setup-python | a26af69be951a213d495a4c3e4e4022e16d87065 | NOASSERTION | yes | +| actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | yes | +| annotated-doc | 0.0.5 | MIT | no | +| annotated-types | 0.8.0 | MIT | no | +| anyio | 4.14.2 | MIT | no | +| build | 1.5.0 | MIT | no | +| certifi | 2026.7.22 | MPL-2.0 | yes | +| charset-normalizer | 3.4.9 | MIT | no | +| click | 8.4.2 | BSD-3-Clause | no | +| coverage | 7.15.3 | Apache-2.0 | no | +| fastapi | 0.141.1 | MIT | no | +| fastapi | >= 0.115,< 1 | NOASSERTION | yes | +| h11 | 0.16.0 | MIT | no | +| hatchling | 1.31.0 | MIT | no | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpcore2 | 2.9.1 | BSD-2-Clause AND BSD-3-Clause | no | +| httptools | 0.8.0 | MIT | no | +| httpx | 0.28.1 | BSD-3-Clause | no | +| httpx | >= 0.27,< 1 | NOASSERTION | yes | +| httpx2 | 2.9.1 | BSD-2-Clause AND BSD-3-Clause | no | +| idna | 3.18 | BSD-3-Clause | no | +| iniconfig | 2.3.0 | MIT | no | +| jinja2 | 3.1.6 | BSD-2-Clause AND BSD-3-Clause | no | +| jinja2 | >= 3.1,< 4 | NOASSERTION | yes | +| korean-lunar-calendar | 0.4.0 | MIT | no | +| korean-lunar-calendar | >= 0.3.1,< 1 | NOASSERTION | yes | +| librt | 0.13.0 | MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause | no | +| markdown-it-py | 4.2.0 | MIT | no | +| markupsafe | 3.0.3 | BSD-3-Clause | no | +| mdurl | 0.1.2 | MIT | no | +| mypy | 1.20.2 | MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause AND MIT AND Python-2.0 AND Python-2.0.1 AND BSD-2-Clause | no | +| mypy-extensions | 1.1.0 | MIT | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| pathspec | 1.1.1 | MPL-2.0 | yes | +| pillow | 12.3.0 | MIT-CMU | no | +| pluggy | 1.6.0 | MIT | no | +| pydantic | 2.13.4 | MIT | no | +| pydantic | >= 2.10,< 3 | NOASSERTION | yes | +| pydantic-core | 2.46.4 | MIT | no | +| pydantic-settings | 2.14.2 | MIT | no | +| pydantic-settings | >= 2.7,< 3 | NOASSERTION | yes | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pyproject-hooks | 1.2.0 | MIT | no | +| pytest | 8.4.2 | MIT | no | +| pytest-asyncio | 0.26.0 | Apache-2.0 | no | +| pytest-cov | 6.3.0 | MIT | no | +| python-dotenv | 1.2.2 | BSD-3-Clause | no | +| python-multipart | 0.0.32 | Apache-2.0 | no | +| python-multipart | >= 0.0.20,< 1 | NOASSERTION | yes | +| pyyaml | 6.0.3 | MIT | no | +| reportlab | 4.5.1 | BSD-2-Clause AND BSD-3-Clause | no | +| reportlab | >= 4.2,< 5 | NOASSERTION | yes | +| rich | 15.0.0 | MIT | no | +| ruff | 0.16.1 | MIT | no | +| shellingham | 1.5.4 | ISC | no | +| starlette | 1.3.1 | BSD-3-Clause | no | +| trove-classifiers | 2026.6.1.19 | Apache-2.0 | no | +| truststore | 0.10.4 | MIT | no | +| typer | 0.27.1 | MIT | no | +| typer | >= 0.15,< 1 | NOASSERTION | yes | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.2 | MIT | no | +| uvicorn | — | NOASSERTION | yes | +| uvicorn | 0.52.1 | BSD-3-Clause | no | +| uvloop | 0.22.1 | Apache-2.0 AND MIT | no | +| watchfiles | 1.2.0 | MIT | no | +| websockets | 17.0.1 | BSD-3-Clause | no | + +### ContextualWisdomLab/governance-risk-compliance + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/gyeot + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @babel/code-frame | 7.29.7 | MIT | no | +| @babel/compat-data | 7.29.7 | MIT | no | +| @babel/core | 7.29.7 | MIT | no | +| @babel/generator | 7.29.8 | MIT | no | +| @babel/helper-annotate-as-pure | 7.29.7 | MIT | no | +| @babel/helper-compilation-targets | 7.29.7 | MIT | no | +| @babel/helper-create-class-features-plugin | 7.29.7 | MIT | no | +| @babel/helper-create-regexp-features-plugin | 7.29.7 | MIT | no | +| @babel/helper-define-polyfill-provider | 0.6.8 | MIT | no | +| @babel/helper-globals | 7.29.7 | MIT | no | +| @babel/helper-member-expression-to-functions | 7.29.7 | MIT | no | +| @babel/helper-module-imports | 7.29.7 | MIT | no | +| @babel/helper-module-transforms | 7.29.7 | MIT | no | +| @babel/helper-optimise-call-expression | 7.29.7 | MIT | no | +| @babel/helper-plugin-utils | 7.29.7 | MIT | no | +| @babel/helper-remap-async-to-generator | 7.29.7 | MIT | no | +| @babel/helper-replace-supers | 7.29.7 | MIT | no | +| @babel/helper-skip-transparent-expression-wrappers | 7.29.7 | MIT | no | +| @babel/helper-string-parser | 7.29.7 | MIT | no | +| @babel/helper-validator-identifier | 7.29.7 | MIT | no | +| @babel/helper-validator-option | 7.29.7 | MIT | no | +| @babel/helper-wrap-function | 7.29.7 | MIT | no | +| @babel/helpers | 7.29.7 | MIT | no | +| @babel/parser | 7.29.8 | MIT | no | +| @babel/plugin-proposal-decorators | 7.29.7 | MIT | no | +| @babel/plugin-proposal-export-default-from | 7.29.7 | MIT | no | +| @babel/plugin-syntax-async-generators | 7.8.4 | MIT | no | +| @babel/plugin-syntax-bigint | 7.8.3 | MIT | no | +| @babel/plugin-syntax-class-properties | 7.12.13 | MIT | no | +| @babel/plugin-syntax-class-static-block | 7.14.5 | MIT | no | +| @babel/plugin-syntax-decorators | 7.29.7 | MIT | no | +| @babel/plugin-syntax-dynamic-import | 7.8.3 | MIT | no | +| @babel/plugin-syntax-export-default-from | 7.29.7 | MIT | no | +| @babel/plugin-syntax-flow | 7.29.7 | MIT | no | +| @babel/plugin-syntax-import-attributes | 7.29.7 | MIT | no | +| @babel/plugin-syntax-import-meta | 7.10.4 | MIT | no | +| @babel/plugin-syntax-json-strings | 7.8.3 | MIT | no | +| @babel/plugin-syntax-jsx | 7.29.7 | MIT | no | +| @babel/plugin-syntax-logical-assignment-operators | 7.10.4 | MIT | no | +| @babel/plugin-syntax-nullish-coalescing-operator | 7.8.3 | MIT | no | +| @babel/plugin-syntax-numeric-separator | 7.10.4 | MIT | no | +| @babel/plugin-syntax-object-rest-spread | 7.8.3 | MIT | no | +| @babel/plugin-syntax-optional-catch-binding | 7.8.3 | MIT | no | +| @babel/plugin-syntax-optional-chaining | 7.8.3 | MIT | no | +| @babel/plugin-syntax-private-property-in-object | 7.14.5 | MIT | no | +| @babel/plugin-syntax-top-level-await | 7.14.5 | MIT | no | +| @babel/plugin-syntax-typescript | 7.29.7 | MIT | no | +| @babel/plugin-transform-async-generator-functions | 7.29.7 | MIT | no | +| @babel/plugin-transform-async-to-generator | 7.29.7 | MIT | no | +| @babel/plugin-transform-block-scoping | 7.29.7 | MIT | no | +| @babel/plugin-transform-class-properties | 7.29.7 | MIT | no | +| @babel/plugin-transform-class-static-block | 7.29.7 | MIT | no | +| @babel/plugin-transform-classes | 7.29.7 | MIT | no | +| @babel/plugin-transform-destructuring | 7.29.7 | MIT | no | +| @babel/plugin-transform-export-namespace-from | 7.29.7 | MIT | no | +| @babel/plugin-transform-flow-strip-types | 7.29.7 | MIT | no | +| @babel/plugin-transform-for-of | 7.29.7 | MIT | no | +| @babel/plugin-transform-logical-assignment-operators | 7.29.7 | MIT | no | +| @babel/plugin-transform-modules-commonjs | 7.29.7 | MIT | no | +| @babel/plugin-transform-named-capturing-groups-regex | 7.29.7 | MIT | no | +| @babel/plugin-transform-nullish-coalescing-operator | 7.29.7 | MIT | no | +| @babel/plugin-transform-object-rest-spread | 7.29.7 | MIT | no | +| @babel/plugin-transform-optional-catch-binding | 7.29.7 | MIT | no | +| @babel/plugin-transform-optional-chaining | 7.29.7 | MIT | no | +| @babel/plugin-transform-parameters | 7.29.7 | MIT | no | +| @babel/plugin-transform-private-methods | 7.29.7 | MIT | no | +| @babel/plugin-transform-private-property-in-object | 7.29.7 | MIT | no | +| @babel/plugin-transform-react-display-name | 7.29.7 | MIT | no | +| @babel/plugin-transform-react-jsx | 7.29.7 | MIT | no | +| @babel/plugin-transform-react-jsx-development | 7.29.7 | MIT | no | +| @babel/plugin-transform-react-pure-annotations | 7.29.7 | MIT | no | +| @babel/plugin-transform-runtime | 7.29.7 | MIT | no | +| @babel/plugin-transform-typescript | 7.29.7 | MIT | no | +| @babel/plugin-transform-unicode-regex | 7.29.7 | MIT | no | +| @babel/preset-typescript | 7.29.7 | MIT | no | +| @babel/runtime | 7.29.7 | MIT | no | +| @babel/template | 7.29.7 | MIT | no | +| @babel/traverse | 7.29.8 | MIT | no | +| @babel/types | 7.29.8 | MIT | no | +| @bcoe/v8-coverage | 0.2.3 | ISC AND MIT | no | +| @egjs/hammerjs | 2.0.17 | MIT | no | +| @emnapi/core | 1.10.0 | MIT | no | +| @emnapi/runtime | 1.10.0 | MIT | no | +| @emnapi/wasi-threads | 1.2.1 | MIT | no | +| @esbuild/aix-ppc64 | 0.28.1 | MIT | no | +| @esbuild/android-arm | 0.28.1 | MIT | no | +| @esbuild/android-arm64 | 0.28.1 | MIT | no | +| @esbuild/android-x64 | 0.28.1 | MIT | no | +| @esbuild/darwin-arm64 | 0.28.1 | MIT | no | +| @esbuild/darwin-x64 | 0.28.1 | MIT | no | +| @esbuild/freebsd-arm64 | 0.28.1 | MIT | no | +| @esbuild/freebsd-x64 | 0.28.1 | MIT | no | +| @esbuild/linux-arm | 0.28.1 | MIT | no | +| @esbuild/linux-arm64 | 0.28.1 | MIT | no | +| @esbuild/linux-ia32 | 0.28.1 | MIT | no | +| @esbuild/linux-loong64 | 0.28.1 | MIT | no | +| @esbuild/linux-mips64el | 0.28.1 | MIT | no | +| @esbuild/linux-ppc64 | 0.28.1 | MIT | no | +| @esbuild/linux-riscv64 | 0.28.1 | MIT | no | +| @esbuild/linux-s390x | 0.28.1 | MIT | no | +| @esbuild/linux-x64 | 0.28.1 | MIT | no | +| @esbuild/netbsd-arm64 | 0.28.1 | MIT | no | +| @esbuild/netbsd-x64 | 0.28.1 | MIT | no | +| @esbuild/openbsd-arm64 | 0.28.1 | MIT | no | +| @esbuild/openbsd-x64 | 0.28.1 | MIT | no | +| @esbuild/openharmony-arm64 | 0.28.1 | MIT | no | +| @esbuild/sunos-x64 | 0.28.1 | MIT | no | +| @esbuild/win32-arm64 | 0.28.1 | MIT | no | +| @esbuild/win32-ia32 | 0.28.1 | MIT | no | +| @esbuild/win32-x64 | 0.28.1 | MIT | no | +| @expo-google-fonts/material-symbols | 0.4.44 | MIT AND Apache-2.0 | no | +| @expo/cli | 57.0.17 | MIT | no | +| @expo/code-signing-certificates | 0.0.6 | MIT | no | +| @expo/config | 57.0.8 | MIT | no | +| @expo/config-plugins | 57.0.8 | MIT | no | +| @expo/config-types | 57.0.2 | MIT | no | +| @expo/devcert | 1.2.1 | MIT | no | +| @expo/devtools | 57.0.1 | MIT | no | +| @expo/dom-webview | 57.0.1 | MIT | no | +| @expo/env | 2.4.2 | MIT | no | +| @expo/expo-modules-macros-plugin | 0.6.1 | MIT | no | +| @expo/fingerprint | 0.20.9 | MIT | no | +| @expo/image-utils | 0.11.4 | MIT | no | +| @expo/inline-modules | 0.1.6 | MIT | no | +| @expo/json-file | 11.0.1 | MIT | no | +| @expo/local-build-cache-provider | 57.0.7 | MIT | no | +| @expo/log-box | 57.0.3 | MIT | no | +| @expo/metro | 56.0.2 | MIT | no | +| @expo/metro-config | 57.0.9 | MIT | no | +| @expo/metro-file-map | 57.0.1 | MIT | no | +| @expo/metro-runtime | 57.0.12 | MIT | no | +| @expo/osascript | 2.7.1 | MIT | no | +| @expo/package-manager | 1.13.1 | MIT | no | +| @expo/plist | 0.8.1 | MIT | no | +| @expo/prebuild-config | 57.0.13 | MIT | no | +| @expo/require-utils | 57.0.4 | MIT | no | +| @expo/router-server | 57.0.7 | MIT | no | +| @expo/schema-utils | 57.0.2 | MIT | no | +| @expo/sdk-runtime-versions | 1.0.0 | MIT | no | +| @expo/spawn-async | 1.8.0 | MIT | no | +| @expo/sudo-prompt | 9.3.2 | MIT | no | +| @expo/ui | 57.0.12 | MIT | no | +| @expo/ws-tunnel | 2.0.0 | MIT | no | +| @expo/xcpretty | 4.4.4 | BSD-3-Clause | no | +| @isaacs/cliui | 8.0.2 | ISC | no | +| @isaacs/ttlcache | 1.4.1 | ISC | no | +| @istanbuljs/load-nyc-config | 1.1.0 | ISC | no | +| @istanbuljs/schema | 0.1.6 | MIT | no | +| @jest/console | 30.4.1 | MIT | no | +| @jest/core | 30.4.2 | MIT | no | +| @jest/diff-sequences | 30.4.0 | MIT | no | +| @jest/environment | 30.4.1 | MIT | no | +| @jest/expect | 30.4.1 | MIT | no | +| @jest/expect-utils | 30.4.1 | MIT | no | +| @jest/fake-timers | 30.4.1 | MIT | no | +| @jest/get-type | 30.1.0 | MIT | no | +| @jest/globals | 30.4.1 | MIT | no | +| @jest/pattern | 30.4.0 | MIT | no | +| @jest/reporters | 30.4.1 | MIT | no | +| @jest/schemas | 29.6.3 | MIT | no | +| @jest/schemas | 30.4.1 | MIT | no | +| @jest/snapshot-utils | 30.4.1 | MIT | no | +| @jest/source-map | 30.0.1 | MIT | no | +| @jest/test-result | 30.4.1 | MIT | no | +| @jest/test-sequencer | 30.4.1 | MIT | no | +| @jest/transform | 30.4.1 | MIT | no | +| @jest/types | 29.6.3 | MIT | no | +| @jest/types | 30.4.1 | MIT | no | +| @jridgewell/gen-mapping | 0.3.13 | MIT | no | +| @jridgewell/remapping | 2.3.5 | MIT | no | +| @jridgewell/resolve-uri | 3.1.2 | MIT | no | +| @jridgewell/source-map | 0.3.11 | MIT | no | +| @jridgewell/sourcemap-codec | 1.5.5 | MIT | no | +| @jridgewell/trace-mapping | 0.3.31 | MIT | no | +| @napi-rs/wasm-runtime | 1.2.3 | MIT | no | +| @pkgjs/parseargs | 0.11.0 | Apache-2.0 AND MIT | no | +| @pkgr/core | 0.3.6 | MIT | no | +| @radix-ui/primitive | 1.1.7 | MIT | no | +| @radix-ui/react-collection | 1.1.15 | MIT | no | +| @radix-ui/react-compose-refs | 1.1.5 | MIT | no | +| @radix-ui/react-context | 1.2.2 | MIT | no | +| @radix-ui/react-dialog | 1.1.23 | MIT | no | +| @radix-ui/react-direction | 1.1.4 | MIT | no | +| @radix-ui/react-dismissable-layer | 1.1.19 | MIT | no | +| @radix-ui/react-focus-guards | 1.1.6 | MIT | no | +| @radix-ui/react-focus-scope | 1.1.16 | MIT | no | +| @radix-ui/react-id | 1.1.4 | MIT | no | +| @radix-ui/react-portal | 1.1.17 | MIT | no | +| @radix-ui/react-presence | 1.1.10 | MIT | no | +| @radix-ui/react-primitive | 2.1.10 | MIT | no | +| @radix-ui/react-roving-focus | 1.1.19 | MIT | no | +| @radix-ui/react-slot | 1.3.3 | MIT | no | +| @radix-ui/react-tabs | 1.1.21 | MIT | no | +| @radix-ui/react-use-callback-ref | 1.1.4 | MIT | no | +| @radix-ui/react-use-controllable-state | 1.2.6 | MIT | no | +| @radix-ui/react-use-effect-event | 0.0.5 | MIT | no | +| @radix-ui/react-use-is-hydrated | 0.1.3 | MIT | no | +| @radix-ui/react-use-layout-effect | 1.1.4 | MIT | no | +| @react-native-async-storage/async-storage | 2.2.0 | MIT | no | +| @react-native-masked-view/masked-view | 0.3.2 | MIT | no | +| @react-native/asset-utils | 0.87.0 | MIT | no | +| @react-native/babel-plugin-codegen | 0.86.2 | MIT | no | +| @react-native/codegen | 0.86.2 | MIT | no | +| @react-native/codegen | 0.87.0 | MIT | no | +| @react-native/community-cli-plugin | 0.87.0 | MIT | no | +| @react-native/debugger-frontend | 0.86.2 | BSD-3-Clause | no | +| @react-native/debugger-frontend | 0.87.0 | BSD-3-Clause | no | +| @react-native/debugger-shell | 0.86.2 | MIT | no | +| @react-native/debugger-shell | 0.87.0 | MIT | no | +| @react-native/dev-middleware | 0.86.2 | MIT | no | +| @react-native/dev-middleware | 0.87.0 | MIT | no | +| @react-native/gradle-plugin | 0.87.0 | MIT | no | +| @react-native/normalize-colors | 0.86.2 | MIT | no | +| @react-native/normalize-colors | 0.87.0 | MIT | no | +| @react-native/virtualized-lists | 0.87.0 | MIT | no | +| @sinclair/typebox | 0.27.12 | MIT | no | +| @sinclair/typebox | 0.34.52 | MIT | no | +| @sinonjs/commons | 3.0.1 | BSD-3-Clause | no | +| @sinonjs/fake-timers | 15.4.0 | BSD-3-Clause | no | +| @tybys/wasm-util | 0.10.3 | MIT | no | +| @types/babel__core | 7.20.5 | MIT | no | +| @types/babel__generator | 7.27.0 | MIT | no | +| @types/babel__template | 7.4.4 | MIT | no | +| @types/babel__traverse | 7.28.0 | MIT | no | +| @types/emscripten | 1.41.5 | MIT | no | +| @types/hammerjs | 2.0.46 | MIT | no | +| @types/istanbul-lib-coverage | 2.0.6 | MIT | no | +| @types/istanbul-lib-report | 3.0.3 | MIT | no | +| @types/istanbul-reports | 3.0.4 | MIT | no | +| @types/jest | 30.0.0 | MIT | no | +| @types/node | 24.13.3 | MIT | no | +| @types/node | 26.2.0 | MIT | no | +| @types/pg | 8.20.0 | MIT | no | +| @types/react | 19.2.18 | MIT | no | +| @types/react-test-renderer | 19.1.0 | MIT | no | +| @types/stack-utils | 2.0.3 | MIT | no | +| @types/yargs | 17.0.35 | MIT | no | +| @types/yargs-parser | 21.0.3 | MIT | no | +| @ungap/structured-clone | 1.3.3 | ISC | no | +| @unrs/resolver-binding-android-arm-eabi | 1.12.2 | MIT | no | +| @unrs/resolver-binding-android-arm64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-darwin-arm64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-darwin-x64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-freebsd-x64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-arm-gnueabihf | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-arm-musleabihf | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-arm64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-arm64-musl | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-loong64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-loong64-musl | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-ppc64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-riscv64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-riscv64-musl | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-s390x-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-x64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-x64-musl | 1.12.2 | MIT | no | +| @unrs/resolver-binding-openharmony-arm64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-wasm32-wasi | 1.12.2 | MIT | no | +| @unrs/resolver-binding-win32-arm64-msvc | 1.12.2 | MIT | no | +| @unrs/resolver-binding-win32-ia32-msvc | 1.12.2 | MIT | no | +| @unrs/resolver-binding-win32-x64-msvc | 1.12.2 | MIT | no | +| @xmldom/xmldom | 0.8.15 | MIT | no | +| @xmldom/xmldom | 0.9.12 | MIT | no | +| abort-controller | 3.0.0 | MIT | no | +| accepts | 1.3.8 | MIT | no | +| accepts | 2.0.0 | MIT | no | +| acorn | 8.18.0 | MIT | no | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/setup-node | 249970729cb0ef3589644e2896645e5dc5ba9c38 | NOASSERTION | yes | +| actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | yes | +| agent-base | 7.1.4 | MIT | no | +| agent-cli-detector | 0.1.6 | MIT | no | +| anser | 1.4.10 | MIT | no | +| ansi-escapes | 4.3.2 | MIT | no | +| ansi-regex | 4.1.1 | MIT | no | +| ansi-regex | 5.0.1 | MIT | no | +| ansi-regex | 6.2.2 | MIT | no | +| ansi-styles | 3.2.1 | MIT | no | +| ansi-styles | 4.3.0 | MIT | no | +| ansi-styles | 5.2.0 | MIT | no | +| ansi-styles | 6.2.3 | MIT | no | +| anymatch | 3.1.3 | ISC | no | +| arg | 5.0.2 | MIT | no | +| argparse | 1.0.10 | MIT | no | +| argparse | 2.0.1 | Python-2.0 | no | +| aria-hidden | 1.2.6 | MIT | no | +| asap | 2.0.6 | MIT | no | +| await-lock | 2.2.2 | MIT | no | +| babel-jest | 30.4.1 | MIT | no | +| babel-plugin-istanbul | 7.0.1 | BSD-3-Clause | no | +| babel-plugin-jest-hoist | 30.4.0 | MIT | no | +| babel-plugin-polyfill-corejs2 | 0.4.17 | MIT | no | +| babel-plugin-polyfill-corejs3 | 0.13.0 | MIT | no | +| babel-plugin-polyfill-regenerator | 0.6.8 | MIT | no | +| babel-plugin-react-compiler | 1.0.0 | MIT | no | +| babel-plugin-react-native-web | 0.21.2 | MIT | no | +| babel-plugin-syntax-hermes-parser | 0.36.1 | MIT | no | +| babel-plugin-transform-flow-enums | 0.0.2 | MIT | no | +| babel-preset-current-node-syntax | 1.2.0 | MIT | no | +| babel-preset-expo | 57.0.7 | MIT | no | +| babel-preset-jest | 30.4.0 | MIT | no | +| badgin | 1.2.3 | MIT | no | +| balanced-match | 4.0.4 | MIT | no | +| barcode-detector | 3.2.2 | MIT | no | +| base64-js | 1.5.1 | MIT | no | +| baseline-browser-mapping | 2.11.18 | Apache-2.0 | no | +| big-integer | 1.6.52 | LicenseRef-scancode-public-domain AND Unlicense | no | +| boolbase | 1.0.0 | ISC | no | +| bplist-creator | 0.1.0 | MIT | no | +| bplist-parser | 0.3.1 | MIT | no | +| bplist-parser | 0.3.2 | MIT | no | +| brace-expansion | 5.0.9 | MIT | no | +| braces | 3.0.3 | MIT | no | +| browserslist | 4.28.8 | MIT | no | +| bs-logger | 0.2.6 | MIT | no | +| bser | 2.1.1 | Apache-2.0 | no | +| buffer-from | 1.1.2 | MIT | no | +| bytes | 3.1.2 | MIT | no | +| callsites | 3.1.0 | MIT | no | +| camelcase | 5.3.1 | MIT | no | +| camelcase | 6.3.0 | MIT | no | +| caniuse-lite | 1.0.30001809 | CC-BY-4.0 | no | +| chalk | 2.4.2 | MIT | no | +| chalk | 4.1.2 | MIT | no | +| char-regex | 1.0.2 | MIT | no | +| chrome-launcher | 0.15.2 | Apache-2.0 | no | +| chromium-edge-launcher | 0.3.0 | Apache-2.0 | no | +| ci-info | 2.0.0 | MIT | no | +| ci-info | 3.9.0 | MIT | no | +| ci-info | 4.4.0 | MIT | no | +| cjs-module-lexer | 2.2.1 | MIT | no | +| cli-cursor | 2.1.0 | MIT | no | +| cli-spinners | 2.9.2 | MIT | no | +| client-only | 0.0.1 | MIT | no | +| cliui | 8.0.1 | ISC | no | +| clone | 1.0.4 | MIT | no | +| co | 4.6.0 | MIT | no | +| collect-v8-coverage | 1.0.3 | MIT | no | +| color | 4.2.3 | MIT | no | +| color-convert | 1.9.3 | MIT | no | +| color-convert | 2.0.1 | MIT | no | +| color-name | 1.1.3 | MIT | no | +| color-name | 1.1.4 | MIT | no | +| color-string | 1.9.1 | MIT | no | +| commander | 12.1.0 | MIT | no | +| commander | 2.20.3 | MIT | no | +| commander | 7.2.0 | MIT | no | +| compressible | 2.0.18 | MIT | no | +| compression | 1.8.1 | MIT | no | +| connect | 3.7.0 | MIT | no | +| convert-source-map | 2.0.0 | MIT | no | +| core-js-compat | 3.50.0 | MIT | no | +| cross-spawn | 7.0.6 | MIT | no | +| css-select | 5.2.2 | BSD-2-Clause | no | +| css-tree | 1.1.3 | MIT | no | +| css-what | 6.2.2 | BSD-2-Clause | no | +| csstype | 3.2.3 | MIT | no | +| debug | 2.6.9 | MIT | no | +| debug | 3.2.7 | MIT | no | +| debug | 4.4.3 | MIT | no | +| decode-uri-component | 0.2.2 | MIT | no | +| dedent | 1.7.2 | MIT | no | +| deepmerge | 4.3.1 | MIT | no | +| defaults | 1.0.4 | MIT | no | +| depd | 2.0.0 | MIT | no | +| destroy | 1.2.0 | MIT | no | +| detect-libc | 2.1.2 | Apache-2.0 | no | +| detect-newline | 3.1.0 | MIT | no | +| detect-node-es | 1.1.0 | MIT | no | +| dnssd-advertise | 1.1.6 | MIT | no | +| dom-serializer | 2.0.0 | MIT | no | +| domelementtype | 2.3.0 | BSD-2-Clause | no | +| domhandler | 5.0.3 | BSD-2-Clause | no | +| domutils | 3.2.2 | BSD-2-Clause | no | +| eastasianwidth | 0.2.0 | MIT | no | +| ee-first | 1.1.1 | MIT | no | +| electron-to-chromium | 1.5.412 | ISC | no | +| emittery | 0.13.1 | MIT | no | +| emoji-regex | 8.0.0 | MIT | no | +| emoji-regex | 9.2.2 | MIT | no | +| encodeurl | 1.0.2 | MIT | no | +| encodeurl | 2.0.0 | MIT | no | +| entities | 4.5.0 | BSD-2-Clause | no | +| error-ex | 1.3.4 | MIT | no | +| error-stack-parser | 2.1.4 | MIT | no | +| es-errors | 1.3.0 | MIT | no | +| esbuild | 0.28.1 | MIT | no | +| escalade | 3.2.0 | MIT | no | +| escape-html | 1.0.3 | MIT | no | +| escape-string-regexp | 1.0.5 | MIT | no | +| escape-string-regexp | 2.0.0 | MIT | no | +| escape-string-regexp | 4.0.0 | MIT | no | +| esprima | 4.0.1 | BSD-2-Clause AND BSD-3-Clause | no | +| etag | 1.8.1 | MIT | no | +| event-target-shim | 5.0.1 | MIT | no | +| execa | 5.1.1 | MIT | no | +| exit-x | 0.2.2 | MIT | no | +| expect | 30.4.1 | MIT | no | +| expo | 57.0.15 | MIT | no | +| expo-application | 57.0.2 | MIT | no | +| expo-asset | 57.0.13 | MIT | no | +| expo-audio | 57.0.4 | MIT | no | +| expo-camera | 57.0.4 | MIT | no | +| expo-constants | 57.0.13 | MIT | no | +| expo-crypto | 57.0.1 | MIT | no | +| expo-file-system | 57.0.5 | MIT | no | +| expo-font | 57.0.1 | MIT | no | +| expo-glass-effect | 57.0.1 | MIT | no | +| expo-haptics | 57.0.1 | MIT | no | +| expo-image-loader | 57.0.1 | MIT | no | +| expo-image-manipulator | 57.0.12 | MIT | no | +| expo-image-picker | 57.0.12 | MIT | no | +| expo-keep-awake | 57.0.1 | MIT | no | +| expo-linking | 57.0.7 | MIT | no | +| expo-media-library | 57.0.4 | MIT | no | +| expo-modules-autolinking | 57.0.10 | MIT | no | +| expo-modules-core | 57.0.12 | MIT | no | +| expo-modules-jsi | 57.0.5 | MIT | no | +| expo-notifications | 57.0.13 | MIT | no | +| expo-router | 57.0.15 | MIT | no | +| expo-secure-store | 57.0.1 | MIT | no | +| expo-server | 57.0.3 | MIT | no | +| expo-sqlite | 57.0.1 | MIT | no | +| expo-status-bar | 57.0.1 | MIT | no | +| expo-symbols | 57.0.2 | MIT | no | +| expo-video | 57.0.2 | MIT | no | +| exponential-backoff | 3.1.3 | Apache-2.0 | no | +| fast-deep-equal | 3.1.3 | MIT | no | +| fast-json-stable-stringify | 2.1.0 | MIT | no | +| fb-dotslash | 0.5.8 | Apache-2.0 AND MIT | no | +| fb-watchman | 2.0.2 | Apache-2.0 | no | +| fdir | 6.5.0 | MIT | no | +| fetch-nodeshim | 0.4.10 | MIT | no | +| fill-range | 7.1.1 | MIT | no | +| filter-obj | 1.1.0 | MIT | no | +| finalhandler | 1.1.2 | MIT | no | +| find-up | 4.1.0 | MIT | no | +| flow-enums-runtime | 0.0.6 | MIT | no | +| fontfaceobserver | 2.3.0 | BSD-2-Clause | no | +| foreground-child | 3.3.1 | ISC | no | +| fresh | 0.5.2 | MIT | no | +| fs.realpath | 1.0.0 | ISC AND MIT | no | +| fsevents | 2.3.3 | MIT | no | +| function-bind | 1.1.2 | MIT | no | +| gensync | 1.0.0-beta.2 | MIT | no | +| get-caller-file | 2.0.5 | ISC | no | +| get-nonce | 1.0.1 | MIT | no | +| get-package-type | 0.1.0 | MIT | no | +| get-stream | 6.0.1 | MIT | no | +| getenv | 2.0.0 | MIT | no | +| glob | 10.5.0 | ISC | no | +| glob | 13.0.6 | BlueOak-1.0.0 | no | +| glob | 7.2.3 | ISC | no | +| graceful-fs | 4.2.11 | ISC | no | +| handlebars | 4.7.9 | MIT | no | +| has-flag | 3.0.0 | MIT | no | +| has-flag | 4.0.0 | MIT | no | +| hasown | 2.0.4 | MIT | no | +| hermes-compiler | 250829098.0.16 | MIT | no | +| hermes-estree | 0.35.0 | MIT | no | +| hermes-estree | 0.36.0 | MIT | no | +| hermes-estree | 0.36.1 | MIT | no | +| hermes-parser | 0.35.0 | MIT | no | +| hermes-parser | 0.36.0 | MIT | no | +| hermes-parser | 0.36.1 | MIT | no | +| hoist-non-react-statics | 3.3.2 | BSD-3-Clause | no | +| hosted-git-info | 7.0.2 | ISC | no | +| html-escaper | 2.0.2 | MIT | no | +| http-errors | 2.0.1 | MIT | no | +| https-proxy-agent | 7.0.6 | MIT | no | +| human-signals | 2.1.0 | Apache-2.0 | no | +| ignore | 5.3.2 | MIT | no | +| image-size | 1.2.1 | MIT | no | +| import-local | 3.2.0 | MIT | no | +| imurmurhash | 0.1.4 | MIT | no | +| inflight | 1.0.6 | ISC | no | +| inherits | 2.0.4 | ISC | no | +| invariant | 2.2.4 | MIT | no | +| is-arrayish | 0.2.1 | MIT | no | +| is-arrayish | 0.3.4 | MIT | no | +| is-core-module | 2.16.2 | MIT | no | +| is-docker | 2.2.1 | MIT | no | +| is-fullwidth-code-point | 3.0.0 | MIT | no | +| is-generator-fn | 2.1.0 | MIT | no | +| is-number | 7.0.0 | MIT | no | +| is-plain-obj | 2.1.0 | MIT | no | +| is-stream | 2.0.1 | MIT | no | +| is-wsl | 2.2.0 | MIT | no | +| isexe | 2.0.0 | ISC | no | +| istanbul-lib-coverage | 3.2.2 | BSD-3-Clause | no | +| istanbul-lib-instrument | 6.0.3 | BSD-3-Clause | no | +| istanbul-lib-report | 3.0.1 | BSD-3-Clause | no | +| istanbul-lib-source-maps | 5.0.6 | BSD-3-Clause | no | +| istanbul-reports | 3.2.0 | BSD-3-Clause | no | +| jackspeak | 3.4.3 | BlueOak-1.0.0 | no | +| jest | 30.4.2 | MIT | no | +| jest-changed-files | 30.4.1 | MIT | no | +| jest-circus | 30.4.2 | MIT | no | +| jest-cli | 30.4.2 | MIT | no | +| jest-config | 30.4.2 | MIT | no | +| jest-diff | 30.4.1 | MIT | no | +| jest-docblock | 30.4.0 | MIT | no | +| jest-each | 30.4.1 | MIT | no | +| jest-environment-node | 30.4.1 | MIT | no | +| jest-get-type | 29.6.3 | MIT | no | +| jest-haste-map | 30.4.1 | MIT | no | +| jest-leak-detector | 30.4.1 | MIT | no | +| jest-matcher-utils | 30.4.1 | MIT | no | +| jest-message-util | 30.4.1 | MIT | no | +| jest-mock | 30.4.1 | MIT | no | +| jest-pnp-resolver | 1.2.3 | MIT | no | +| jest-regex-util | 30.4.0 | MIT | no | +| jest-resolve | 30.4.1 | MIT | no | +| jest-resolve-dependencies | 30.4.2 | MIT | no | +| jest-runner | 30.4.2 | MIT | no | +| jest-runtime | 30.4.2 | MIT | no | +| jest-snapshot | 30.4.1 | MIT | no | +| jest-util | 29.7.0 | MIT | no | +| jest-util | 30.4.1 | MIT | no | +| jest-validate | 29.7.0 | MIT | no | +| jest-validate | 30.4.1 | MIT | no | +| jest-watcher | 30.4.1 | MIT | no | +| jest-worker | 29.7.0 | MIT | no | +| jest-worker | 30.4.1 | MIT | no | +| jimp-compact | 0.16.1 | MIT | no | +| js-tokens | 4.0.0 | MIT | no | +| js-yaml | 3.15.1 | MIT | no | +| js-yaml | 4.3.1 | MIT | no | +| jsc-safe-url | 0.2.4 | 0BSD | no | +| jsesc | 3.1.0 | MIT | no | +| json-parse-even-better-errors | 2.3.1 | MIT | no | +| json5 | 2.2.3 | MIT | no | +| kleur | 3.0.3 | MIT | no | +| lan-network | 0.2.1 | MIT | no | +| leven | 3.1.0 | MIT | no | +| lighthouse-logger | 1.4.2 | Apache-2.0 | no | +| lightningcss | 1.33.0 | MPL-2.0 | yes | +| lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | yes | +| lines-and-columns | 1.2.4 | MIT | no | +| locate-path | 5.0.0 | MIT | no | +| lodash.debounce | 4.0.8 | MIT | no | +| lodash.memoize | 4.1.2 | MIT | no | +| lodash.throttle | 4.1.1 | MIT | no | +| log-symbols | 2.2.0 | MIT | no | +| loose-envify | 1.4.0 | MIT | no | +| lru-cache | 10.4.3 | ISC | no | +| lru-cache | 11.5.2 | BlueOak-1.0.0 | no | +| lru-cache | 5.1.1 | ISC | no | +| make-dir | 4.0.0 | MIT | no | +| make-error | 1.3.6 | ISC | no | +| makeerror | 1.0.12 | BSD-3-Clause | no | +| marky | 1.3.0 | Apache-2.0 | no | +| mdn-data | 2.0.14 | CC0-1.0 | no | +| memoize-one | 5.2.1 | MIT | no | +| merge-options | 3.0.4 | MIT | no | +| merge-stream | 2.0.0 | MIT | no | +| metro | 0.84.5 | MIT | no | +| metro | 0.87.0 | MIT | no | +| metro-babel-transformer | 0.84.5 | MIT | no | +| metro-babel-transformer | 0.87.0 | MIT | no | +| metro-cache | 0.84.5 | MIT | no | +| metro-cache | 0.87.0 | MIT | no | +| metro-cache-key | 0.84.5 | MIT | no | +| metro-cache-key | 0.87.0 | MIT | no | +| metro-config | 0.84.5 | MIT | no | +| metro-config | 0.87.0 | MIT | no | +| metro-core | 0.84.5 | MIT | no | +| metro-core | 0.87.0 | MIT | no | +| metro-file-map | 0.84.5 | MIT | no | +| metro-file-map | 0.87.0 | MIT | no | +| metro-minify-terser | 0.84.5 | MIT | no | +| metro-minify-terser | 0.87.0 | MIT | no | +| metro-resolver | 0.84.5 | MIT | no | +| metro-resolver | 0.87.0 | MIT | no | +| metro-runtime | 0.84.5 | MIT | no | +| metro-runtime | 0.87.0 | MIT | no | +| metro-source-map | 0.84.5 | MIT | no | +| metro-source-map | 0.87.0 | MIT | no | +| metro-symbolicate | 0.84.5 | MIT | no | +| metro-symbolicate | 0.87.0 | MIT | no | +| metro-transform-plugins | 0.84.5 | MIT | no | +| metro-transform-plugins | 0.87.0 | MIT | no | +| metro-transform-worker | 0.84.5 | MIT | no | +| metro-transform-worker | 0.87.0 | MIT | no | +| micromatch | 4.0.8 | MIT | no | +| mime | 1.6.0 | MIT | no | +| mime-db | 1.52.0 | MIT | no | +| mime-db | 1.54.0 | MIT | no | +| mime-types | 2.1.35 | MIT | no | +| mime-types | 3.0.2 | MIT | no | +| mimic-fn | 1.2.0 | MIT | no | +| mimic-fn | 2.1.0 | MIT | no | +| minimatch | 10.2.6 | BlueOak-1.0.0 | no | +| minimatch | 3.1.5 | ISC | no | +| minimatch | 9.0.9 | ISC | no | +| minimist | 1.2.8 | MIT | no | +| minipass | 7.1.3 | BlueOak-1.0.0 | no | +| mkdirp | 1.0.4 | MIT | no | +| ms | 2.0.0 | MIT | no | +| ms | 2.1.3 | MIT | no | +| multitars | 1.0.2 | MIT | no | +| nanoid | 3.3.18 | MIT | no | +| napi-postinstall | 0.3.4 | MIT | no | +| natural-compare | 1.4.0 | MIT | no | +| negotiator | 0.6.3 | MIT | no | +| negotiator | 0.6.4 | MIT | no | +| negotiator | 1.0.0 | MIT | no | +| neo-async | 2.6.2 | MIT | no | +| node-forge | 1.4.0 | BSD-3-Clause OR GPL-2.0-only | yes | +| node-int64 | 0.4.0 | MIT | no | +| node-releases | 2.0.53 | MIT | no | +| normalize-path | 3.0.0 | MIT | no | +| npm-package-arg | 11.0.3 | ISC | no | +| npm-run-path | 4.0.1 | MIT | no | +| nth-check | 2.1.1 | BSD-2-Clause | no | +| nullthrows | 1.1.1 | MIT | no | +| ob1 | 0.84.5 | MIT | no | +| ob1 | 0.87.0 | MIT | no | +| on-finished | 2.3.0 | MIT | no | +| on-finished | 2.4.1 | MIT | no | +| on-headers | 1.1.0 | MIT | no | +| once | 1.4.0 | ISC | no | +| onetime | 2.0.1 | MIT | no | +| onetime | 5.1.2 | MIT | no | +| open | 7.4.2 | MIT | no | +| ora | 3.4.0 | MIT | no | +| p-limit | 2.3.0 | MIT | no | +| p-limit | 3.1.0 | MIT | no | +| p-locate | 4.1.0 | MIT | no | +| p-try | 2.2.0 | MIT | no | +| package-json-from-dist | 1.0.1 | BlueOak-1.0.0 | no | +| parse-json | 5.2.0 | MIT | no | +| parse-png | 2.1.0 | MIT | no | +| parseurl | 1.3.3 | MIT | no | +| path-exists | 4.0.0 | MIT | no | +| path-is-absolute | 1.0.1 | MIT | no | +| path-key | 3.1.1 | MIT | no | +| path-parse | 1.0.7 | MIT | no | +| path-scurry | 1.11.1 | BlueOak-1.0.0 | no | +| path-scurry | 2.0.2 | BlueOak-1.0.0 | no | +| pg | 8.22.0 | MIT | no | +| pg-cloudflare | 1.4.0 | MIT | no | +| pg-connection-string | 2.14.0 | MIT | no | +| pg-int8 | 1.0.1 | ISC | no | +| pg-pool | 3.14.0 | MIT | no | +| pg-protocol | 1.15.0 | MIT | no | +| pg-types | 2.2.0 | MIT | no | +| pgpass | 1.0.5 | MIT | no | +| picocolors | 1.1.1 | ISC | no | +| picomatch | 2.3.2 | MIT | no | +| picomatch | 4.0.5 | MIT | no | +| pirates | 4.0.7 | MIT | no | +| pkg-dir | 4.2.0 | MIT | no | +| plist | 3.1.1 | MIT | no | +| pngjs | 3.4.0 | MIT | no | +| postcss | 8.5.26 | MIT | no | +| postgres-array | 2.0.0 | MIT | no | +| postgres-bytea | 1.0.1 | MIT | no | +| postgres-date | 1.0.7 | MIT | no | +| postgres-interval | 1.2.0 | MIT | no | +| pretty-format | 29.7.0 | MIT | no | +| pretty-format | 30.4.1 | MIT | no | +| proc-log | 4.2.0 | ISC | no | +| progress | 2.0.3 | MIT | no | +| promise | 8.3.0 | MIT | no | +| prompts | 2.4.2 | MIT | no | +| pure-rand | 7.0.1 | MIT | no | +| query-string | 7.1.3 | MIT | no | +| queue | 6.0.2 | MIT | no | +| range-parser | 1.2.1 | MIT | no | +| react | 19.2.8 | MIT | no | +| react-devtools-core | 6.1.5 | MIT | no | +| react-dom | 19.2.8 | MIT | no | +| react-fast-compare | 3.2.2 | MIT | no | +| react-freeze | 1.0.4 | MIT | no | +| react-is | 16.13.1 | MIT | no | +| react-is | 18.3.1 | MIT | no | +| react-is | 19.2.7 | MIT | no | +| react-native | 0.87.0 | MIT | no | +| react-native-drawer-layout | 4.2.10 | MIT | no | +| react-native-gesture-handler | 2.32.0 | MIT | no | +| react-native-safe-area-context | 5.9.1 | MIT | no | +| react-native-screens | 4.27.0 | MIT | no | +| react-native-svg | 15.15.5 | MIT | no | +| react-refresh | 0.14.2 | MIT | no | +| react-remove-scroll | 2.7.2 | MIT | no | +| react-remove-scroll-bar | 2.3.8 | MIT | no | +| react-style-singleton | 2.2.3 | MIT | no | +| regenerate | 1.4.2 | MIT | no | +| regenerate-unicode-properties | 10.2.2 | MIT | no | +| regenerator-runtime | 0.13.11 | MIT | no | +| regexpu-core | 6.4.0 | MIT | no | +| regjsgen | 0.8.0 | MIT | no | +| regjsparser | 0.13.2 | BSD-2-Clause | no | +| require-directory | 2.1.1 | MIT | no | +| resolve | 1.22.12 | MIT | no | +| resolve-cwd | 3.0.0 | MIT | no | +| resolve-from | 5.0.0 | MIT | no | +| resolve-workspace-root | 2.0.1 | MIT | no | +| restore-cursor | 2.0.0 | MIT | no | +| safe-buffer | 5.2.1 | MIT | no | +| sandbox-cli-detector | 0.2.0 | MIT | no | +| sax | 1.6.1 | BlueOak-1.0.0 | no | +| scheduler | 0.27.0 | MIT | no | +| semver | 6.3.1 | ISC | no | +| semver | 7.8.5 | ISC | no | +| send | 0.19.2 | MIT | no | +| serialize-error | 2.1.0 | MIT | no | +| serve-static | 1.16.3 | MIT | no | +| server-only | 0.0.1 | MIT | no | +| setprototypeof | 1.2.0 | ISC | no | +| sf-symbols-typescript | 2.2.0 | MIT | no | +| shallowequal | 1.1.0 | MIT | no | +| shebang-command | 2.0.0 | MIT | no | +| shebang-regex | 3.0.0 | MIT | no | +| shell-quote | 1.10.0 | MIT | no | +| signal-exit | 3.0.7 | ISC | no | +| signal-exit | 4.1.0 | ISC | no | +| simple-plist | 1.3.1 | MIT | no | +| simple-swizzle | 0.2.4 | MIT | no | +| sisteransi | 1.0.5 | MIT | no | +| slash | 3.0.0 | MIT | no | +| slugify | 1.6.9 | MIT | no | +| source-map | 0.5.7 | BSD-3-Clause | no | +| source-map | 0.6.1 | BSD-3-Clause | no | +| source-map-js | 1.2.1 | BSD-3-Clause | no | +| source-map-support | 0.5.13 | MIT | no | +| source-map-support | 0.5.21 | MIT | no | +| split-on-first | 1.1.0 | MIT | no | +| split2 | 4.2.0 | ISC | no | +| sprintf-js | 1.0.3 | BSD-3-Clause | no | +| stack-utils | 2.0.6 | MIT | no | +| stackframe | 1.3.4 | MIT | no | +| stacktrace-parser | 0.1.11 | MIT | no | +| standard-navigation | 0.0.5 | MIT | no | +| statuses | 1.5.0 | MIT | no | +| statuses | 2.0.2 | MIT | no | +| stream-buffers | 2.2.0 | Unlicense | no | +| strict-uri-encode | 2.0.0 | MIT | no | +| string-length | 4.0.2 | MIT | no | +| string-width | 4.2.3 | MIT | no | +| string-width | 5.1.2 | MIT | no | +| strip-ansi | 5.2.0 | MIT | no | +| strip-ansi | 6.0.1 | MIT | no | +| strip-ansi | 7.2.0 | MIT | no | +| strip-bom | 4.0.0 | MIT | no | +| strip-final-newline | 2.0.0 | MIT | no | +| strip-json-comments | 3.1.1 | MIT | no | +| structured-headers | 0.4.1 | MIT | no | +| supports-color | 5.5.0 | MIT | no | +| supports-color | 7.2.0 | MIT | no | +| supports-color | 8.1.1 | MIT | no | +| supports-hyperlinks | 2.3.0 | MIT | no | +| supports-preserve-symlinks-flag | 1.0.0 | MIT | no | +| synckit | 0.11.13 | MIT | no | +| tagged-tag | 1.0.0 | MIT | no | +| terminal-link | 2.1.1 | MIT | no | +| terser | 5.50.0 | BSD-2-Clause | no | +| test-exclude | 6.0.0 | ISC | no | +| throat | 5.0.0 | MIT | no | +| tinyglobby | 0.2.17 | MIT | no | +| tmpl | 1.0.5 | BSD-3-Clause | no | +| to-regex-range | 5.0.1 | MIT | no | +| toidentifier | 1.0.1 | MIT | no | +| toqr | 0.1.1 | MIT | no | +| ts-jest | 29.4.12 | MIT | no | +| tslib | 2.8.1 | 0BSD | no | +| tsx | 4.23.1 | MIT | no | +| type-detect | 4.0.8 | MIT | no | +| type-fest | 0.21.3 | CC0-1.0 AND MIT | no | +| type-fest | 0.7.1 | MIT OR (CC0-1.0 AND MIT) | no | +| type-fest | 4.41.0 | CC0-1.0 AND MIT | no | +| type-fest | 5.8.0 | (MIT OR CC0-1.0) | no | +| typescript | 5.9.3 | Apache-2.0 | no | +| typescript | 6.0.3 | Apache-2.0 | no | +| uglify-js | 3.19.3 | BSD-2-Clause AND BSD-3-Clause | no | +| undici-types | 7.18.2 | MIT | no | +| undici-types | 8.3.0 | MIT | no | +| unicode-canonical-property-names-ecmascript | 2.0.1 | MIT | no | +| unicode-match-property-ecmascript | 2.0.0 | MIT | no | +| unicode-match-property-value-ecmascript | 2.2.1 | LicenseRef-scancode-unicode AND MIT | no | +| unicode-property-aliases-ecmascript | 2.2.0 | LicenseRef-scancode-unicode AND MIT | no | +| unpipe | 1.0.0 | MIT | no | +| unrs-resolver | 1.12.2 | Apache-2.0 AND MIT | no | +| update-browserslist-db | 1.3.1 | MIT | no | +| use-callback-ref | 1.3.3 | MIT | no | +| use-latest-callback | 0.2.6 | MIT | no | +| use-sidecar | 1.1.3 | MIT | no | +| utils-merge | 1.0.1 | MIT | no | +| uuid | 11.1.1 | MIT | no | +| v8-to-istanbul | 9.3.0 | ISC | no | +| validate-npm-package-name | 5.0.1 | ISC | no | +| vary | 1.1.2 | MIT | no | +| vaul | 1.1.2 | MIT | no | +| vlq | 1.0.1 | MIT | no | +| walker | 1.0.8 | Apache-2.0 | no | +| warn-once | 0.1.1 | MIT | no | +| wcwidth | 1.0.1 | MIT | no | +| whatwg-fetch | 3.6.20 | MIT | no | +| whatwg-url-minimum | 0.1.2 | MIT | no | +| which | 2.0.2 | ISC | no | +| wordwrap | 1.0.0 | MIT | no | +| wrap-ansi | 7.0.0 | MIT | no | +| wrap-ansi | 8.1.0 | MIT | no | +| wrappy | 1.0.2 | ISC | no | +| write-file-atomic | 5.0.1 | ISC | no | +| ws | 7.5.13 | MIT | no | +| ws | 8.21.3 | MIT | no | +| xcode | 3.0.1 | Apache-2.0 | no | +| xml2js | 0.6.0 | MIT | no | +| xmlbuilder | 11.0.1 | LicenseRef-scancode-unicode AND MIT | no | +| xmlbuilder | 15.1.1 | MIT | no | +| xtend | 4.0.2 | MIT | no | +| y18n | 5.0.8 | ISC | no | +| yallist | 3.1.1 | ISC | no | +| yaml | 2.9.0 | ISC | no | +| yargs | 17.7.3 | MIT | no | +| yargs-parser | 21.1.1 | ISC | no | +| yocto-queue | 0.1.0 | MIT | no | +| zod | 3.25.76 | MIT | no | +| zxing-wasm | 3.1.3 | MIT | no | + +### ContextualWisdomLab/hyosung-itx-slogan-brief + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | yes | +| actions/setup-node | 49933ea5288caeca8642d1e84afbd3f7d6820020 | NOASSERTION | yes | + +### ContextualWisdomLab/inkspan + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @adobe/css-tools | 4.5.0 | MIT | no | +| @ampproject/remapping | 2.3.0 | Apache-2.0 | no | +| @asamuzakjp/css-color | 3.2.0 | MIT | no | +| @babel/code-frame | 7.29.7 | MIT | no | +| @babel/compat-data | 7.29.7 | MIT | no | +| @babel/core | 7.29.7 | MIT | no | +| @babel/generator | 7.29.7 | MIT | no | +| @babel/helper-compilation-targets | 7.29.7 | MIT | no | +| @babel/helper-globals | 7.29.7 | MIT | no | +| @babel/helper-module-imports | 7.29.7 | MIT | no | +| @babel/helper-module-transforms | 7.29.7 | MIT | no | +| @babel/helper-plugin-utils | 7.29.7 | MIT | no | +| @babel/helper-string-parser | 7.29.7 | MIT | no | +| @babel/helper-validator-identifier | 7.29.7 | MIT | no | +| @babel/helper-validator-option | 7.29.7 | MIT | no | +| @babel/helpers | 7.29.7 | MIT | no | +| @babel/parser | 7.29.7 | MIT | no | +| @babel/plugin-transform-react-jsx-self | 7.29.7 | MIT | no | +| @babel/plugin-transform-react-jsx-source | 7.29.7 | MIT | no | +| @babel/runtime | 7.29.7 | MIT | no | +| @babel/template | 7.29.7 | MIT | no | +| @babel/traverse | 7.29.7 | MIT | no | +| @babel/types | 7.29.7 | MIT | no | +| @bcoe/v8-coverage | 1.0.2 | ISC AND MIT | no | +| @csstools/color-helpers | 5.1.0 | MIT-0 | no | +| @csstools/css-calc | 2.1.4 | MIT | no | +| @csstools/css-color-parser | 3.1.0 | MIT | no | +| @csstools/css-parser-algorithms | 3.0.5 | MIT | no | +| @csstools/css-tokenizer | 3.0.4 | MIT | no | +| @emnapi/core | 1.11.2 | MIT | no | +| @emnapi/core | 1.9.2 | MIT | no | +| @emnapi/runtime | 1.11.2 | MIT | no | +| @emnapi/runtime | 1.9.2 | MIT | no | +| @emnapi/wasi-threads | 1.2.1 | MIT | no | +| @emnapi/wasi-threads | 1.2.2 | MIT | no | +| @esbuild/aix-ppc64 | 0.25.12 | MIT | no | +| @esbuild/android-arm | 0.25.12 | MIT | no | +| @esbuild/android-arm64 | 0.25.12 | MIT | no | +| @esbuild/android-x64 | 0.25.12 | MIT | no | +| @esbuild/darwin-arm64 | 0.25.12 | MIT | no | +| @esbuild/darwin-x64 | 0.25.12 | MIT | no | +| @esbuild/freebsd-arm64 | 0.25.12 | MIT | no | +| @esbuild/freebsd-x64 | 0.25.12 | MIT | no | +| @esbuild/linux-arm | 0.25.12 | MIT | no | +| @esbuild/linux-arm64 | 0.25.12 | MIT | no | +| @esbuild/linux-ia32 | 0.25.12 | MIT | no | +| @esbuild/linux-loong64 | 0.25.12 | MIT | no | +| @esbuild/linux-mips64el | 0.25.12 | MIT | no | +| @esbuild/linux-ppc64 | 0.25.12 | MIT | no | +| @esbuild/linux-riscv64 | 0.25.12 | MIT | no | +| @esbuild/linux-s390x | 0.25.12 | MIT | no | +| @esbuild/linux-x64 | 0.25.12 | MIT | no | +| @esbuild/netbsd-arm64 | 0.25.12 | MIT | no | +| @esbuild/netbsd-x64 | 0.25.12 | MIT | no | +| @esbuild/openbsd-arm64 | 0.25.12 | MIT | no | +| @esbuild/openbsd-x64 | 0.25.12 | MIT | no | +| @esbuild/openharmony-arm64 | 0.25.12 | MIT | no | +| @esbuild/sunos-x64 | 0.25.12 | MIT | no | +| @esbuild/win32-arm64 | 0.25.12 | MIT | no | +| @esbuild/win32-ia32 | 0.25.12 | MIT | no | +| @esbuild/win32-x64 | 0.25.12 | MIT | no | +| @isaacs/cliui | 8.0.2 | ISC | no | +| @istanbuljs/schema | 0.1.6 | MIT | no | +| @joshwooding/vite-plugin-react-docgen-typescript | 0.7.0 | MIT | no | +| @jridgewell/gen-mapping | 0.3.13 | MIT | no | +| @jridgewell/remapping | 2.3.5 | MIT | no | +| @jridgewell/resolve-uri | 3.1.2 | MIT | no | +| @jridgewell/sourcemap-codec | 1.5.5 | MIT | no | +| @jridgewell/trace-mapping | 0.3.31 | MIT | no | +| @mdx-js/react | 3.1.1 | MIT | no | +| @microsoft/api-extractor | 7.58.9 | MIT | no | +| @microsoft/api-extractor-model | 7.33.8 | MIT | no | +| @microsoft/tsdoc | 0.16.0 | MIT | no | +| @microsoft/tsdoc-config | 0.18.1 | MIT | no | +| @mixmark-io/domino | 2.2.0 | BSD-2-Clause | no | +| @napi-rs/wasm-runtime | 1.2.3 | MIT | no | +| @oxc-parser/binding-android-arm-eabi | 0.127.0 | MIT | no | +| @oxc-parser/binding-android-arm64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-darwin-arm64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-darwin-x64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-freebsd-x64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm-gnueabihf | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm-musleabihf | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-arm64-musl | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-ppc64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-riscv64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-riscv64-musl | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-s390x-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-x64-gnu | 0.127.0 | MIT | no | +| @oxc-parser/binding-linux-x64-musl | 0.127.0 | MIT | no | +| @oxc-parser/binding-openharmony-arm64 | 0.127.0 | MIT | no | +| @oxc-parser/binding-wasm32-wasi | 0.127.0 | MIT | no | +| @oxc-parser/binding-win32-arm64-msvc | 0.127.0 | MIT | no | +| @oxc-parser/binding-win32-ia32-msvc | 0.127.0 | MIT | no | +| @oxc-parser/binding-win32-x64-msvc | 0.127.0 | MIT | no | +| @oxc-project/types | 0.127.0 | MIT | no | +| @oxc-resolver/binding-android-arm-eabi | 11.24.2 | MIT | no | +| @oxc-resolver/binding-android-arm64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-darwin-arm64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-darwin-x64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-freebsd-x64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-arm-gnueabihf | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-arm-musleabihf | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-arm64-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-arm64-musl | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-ppc64-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-riscv64-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-riscv64-musl | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-s390x-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-x64-gnu | 11.24.2 | MIT | no | +| @oxc-resolver/binding-linux-x64-musl | 11.24.2 | MIT | no | +| @oxc-resolver/binding-openharmony-arm64 | 11.24.2 | MIT | no | +| @oxc-resolver/binding-wasm32-wasi | 11.24.2 | MIT | no | +| @oxc-resolver/binding-win32-arm64-msvc | 11.24.2 | MIT | no | +| @oxc-resolver/binding-win32-x64-msvc | 11.24.2 | MIT | no | +| @pkgjs/parseargs | 0.11.0 | Apache-2.0 AND MIT | no | +| @playwright/test | 1.62.0 | Apache-2.0 | no | +| @popperjs/core | 2.11.8 | MIT | no | +| @remirror/core-constants | 3.0.0 | MIT | no | +| @rolldown/pluginutils | 1.0.0-beta.27 | MIT | no | +| @rollup/pluginutils | 5.4.0 | MIT | no | +| @rollup/rollup-android-arm-eabi | 4.62.2 | MIT | no | +| @rollup/rollup-android-arm64 | 4.62.2 | MIT | no | +| @rollup/rollup-darwin-arm64 | 4.62.2 | MIT | no | +| @rollup/rollup-darwin-x64 | 4.62.2 | MIT | no | +| @rollup/rollup-freebsd-arm64 | 4.62.2 | MIT | no | +| @rollup/rollup-freebsd-x64 | 4.62.2 | MIT | no | +| @rollup/rollup-linux-arm-gnueabihf | 4.62.2 | MIT | no | +| @rollup/rollup-linux-arm-musleabihf | 4.62.2 | MIT | no | +| @rollup/rollup-linux-arm64-gnu | 4.62.2 | MIT | no | +| @rollup/rollup-linux-arm64-musl | 4.62.2 | MIT | no | +| @rollup/rollup-linux-loong64-gnu | 4.62.2 | MIT | no | +| @rollup/rollup-linux-loong64-musl | 4.62.2 | MIT | no | +| @rollup/rollup-linux-ppc64-gnu | 4.62.2 | MIT | no | +| @rollup/rollup-linux-ppc64-musl | 4.62.2 | MIT | no | +| @rollup/rollup-linux-riscv64-gnu | 4.62.2 | MIT | no | +| @rollup/rollup-linux-riscv64-musl | 4.62.2 | MIT | no | +| @rollup/rollup-linux-s390x-gnu | 4.62.2 | MIT | no | +| @rollup/rollup-linux-x64-gnu | 4.62.2 | MIT | no | +| @rollup/rollup-linux-x64-musl | 4.62.2 | MIT | no | +| @rollup/rollup-openbsd-x64 | 4.62.2 | MIT | no | +| @rollup/rollup-openharmony-arm64 | 4.62.2 | MIT | no | +| @rollup/rollup-win32-arm64-msvc | 4.62.2 | MIT | no | +| @rollup/rollup-win32-ia32-msvc | 4.62.2 | MIT | no | +| @rollup/rollup-win32-x64-gnu | 4.62.2 | MIT | no | +| @rollup/rollup-win32-x64-msvc | 4.62.2 | MIT | no | +| @rushstack/node-core-library | 5.23.1 | MIT | no | +| @rushstack/problem-matcher | 0.2.1 | MIT | no | +| @rushstack/rig-package | 0.7.3 | MIT | no | +| @rushstack/terminal | 0.24.0 | MIT | no | +| @rushstack/ts-command-line | 5.3.10 | MIT | no | +| @storybook/addon-docs | 10.5.8 | MIT | no | +| @storybook/builder-vite | 10.5.8 | MIT | no | +| @storybook/csf-plugin | 10.5.8 | MIT | no | +| @storybook/global | 5.0.0 | MIT | no | +| @storybook/icons | 2.1.0 | MIT | no | +| @storybook/react | 10.5.8 | MIT | no | +| @storybook/react-dom-shim | 10.5.8 | MIT | no | +| @storybook/react-vite | 10.5.8 | MIT | no | +| @testing-library/dom | 10.4.1 | MIT | no | +| @testing-library/jest-dom | 6.9.1 | MIT | no | +| @testing-library/react | 16.3.2 | MIT | no | +| @testing-library/user-event | 14.6.1 | MIT | no | +| @tiptap/core | 2.27.2 | MIT | no | +| @tiptap/extension-blockquote | 2.27.2 | MIT | no | +| @tiptap/extension-bold | 2.27.2 | MIT | no | +| @tiptap/extension-bubble-menu | 2.27.2 | MIT | no | +| @tiptap/extension-bullet-list | 2.27.2 | MIT | no | +| @tiptap/extension-code | 2.27.2 | MIT | no | +| @tiptap/extension-code-block | 2.27.2 | MIT | no | +| @tiptap/extension-collaboration | 2.27.2 | MIT | no | +| @tiptap/extension-collaboration-cursor | 2.27.2 | MIT | no | +| @tiptap/extension-document | 2.27.2 | MIT | no | +| @tiptap/extension-dropcursor | 2.27.2 | MIT | no | +| @tiptap/extension-floating-menu | 2.27.2 | MIT | no | +| @tiptap/extension-gapcursor | 2.27.2 | MIT | no | +| @tiptap/extension-hard-break | 2.27.2 | MIT | no | +| @tiptap/extension-heading | 2.27.2 | MIT | no | +| @tiptap/extension-history | 2.27.2 | MIT | no | +| @tiptap/extension-horizontal-rule | 2.27.2 | MIT | no | +| @tiptap/extension-image | 2.27.2 | MIT | no | +| @tiptap/extension-italic | 2.27.2 | MIT | no | +| @tiptap/extension-link | 2.27.2 | MIT | no | +| @tiptap/extension-list-item | 2.27.2 | MIT | no | +| @tiptap/extension-ordered-list | 2.27.2 | MIT | no | +| @tiptap/extension-paragraph | 2.27.2 | MIT | no | +| @tiptap/extension-placeholder | 2.27.2 | MIT | no | +| @tiptap/extension-strike | 2.27.2 | MIT | no | +| @tiptap/extension-table | 2.27.2 | MIT | no | +| @tiptap/extension-table-cell | 2.27.2 | MIT | no | +| @tiptap/extension-table-header | 2.27.2 | MIT | no | +| @tiptap/extension-table-row | 2.27.2 | MIT | no | +| @tiptap/extension-text | 2.27.2 | MIT | no | +| @tiptap/extension-text-style | 2.27.2 | MIT | no | +| @tiptap/pm | 2.27.2 | MIT | no | +| @tiptap/react | 2.27.2 | MIT | no | +| @tiptap/starter-kit | 2.27.2 | MIT | no | +| @tybys/wasm-util | 0.10.3 | MIT | no | +| @types/argparse | 1.0.38 | MIT | no | +| @types/aria-query | 5.0.4 | MIT | no | +| @types/babel__core | 7.20.5 | MIT | no | +| @types/babel__generator | 7.27.0 | MIT | no | +| @types/babel__template | 7.4.4 | MIT | no | +| @types/babel__traverse | 7.28.0 | MIT | no | +| @types/chai | 5.2.3 | MIT | no | +| @types/deep-eql | 4.0.2 | MIT | no | +| @types/doctrine | 0.0.9 | MIT | no | +| @types/estree | 1.0.9 | MIT | no | +| @types/linkify-it | 5.0.0 | MIT | no | +| @types/markdown-it | 14.1.2 | MIT | no | +| @types/mdurl | 2.0.0 | MIT | no | +| @types/mdx | 2.0.14 | MIT | no | +| @types/node | 22.20.1 | MIT | no | +| @types/prop-types | 15.7.15 | MIT | no | +| @types/react | 18.3.31 | MIT | no | +| @types/react-dom | 18.3.7 | MIT | no | +| @types/resolve | 1.20.6 | MIT | no | +| @types/turndown | 5.0.6 | MIT | no | +| @types/use-sync-external-store | 0.0.6 | MIT | no | +| @vitejs/plugin-react | 4.7.0 | MIT | no | +| @vitest/coverage-v8 | 3.2.7 | MIT | no | +| @vitest/expect | 3.2.4 | MIT | no | +| @vitest/expect | 3.2.7 | MIT | no | +| @vitest/mocker | 3.2.7 | MIT | no | +| @vitest/pretty-format | 3.2.4 | MIT | no | +| @vitest/pretty-format | 3.2.7 | MIT | no | +| @vitest/runner | 3.2.7 | MIT | no | +| @vitest/snapshot | 3.2.7 | MIT | no | +| @vitest/spy | 3.2.4 | MIT | no | +| @vitest/spy | 3.2.7 | MIT | no | +| @vitest/utils | 3.2.4 | MIT | no | +| @vitest/utils | 3.2.7 | MIT | no | +| @volar/language-core | 2.4.28 | MIT | no | +| @volar/source-map | 2.4.28 | MIT | no | +| @volar/typescript | 2.4.28 | MIT | no | +| @vue/compiler-core | 3.5.39 | MIT | no | +| @vue/compiler-dom | 3.5.39 | MIT | no | +| @vue/compiler-vue2 | 2.7.16 | MIT | no | +| @vue/language-core | 2.2.0 | MIT | no | +| @vue/shared | 3.5.39 | MIT | no | +| @webcontainer/env | 1.1.1 | MIT | no | +| acorn | 8.17.0 | MIT | no | +| actions/attest | 59d89421af93a897026c735860bf21b6eb4f7b26 | NOASSERTION | yes | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/download-artifact | 37930b1c2abaa49bbe596cd826c3c89aef350131 | NOASSERTION | yes | +| actions/setup-node | 820762786026740c76f36085b0efc47a31fe5020 | NOASSERTION | yes | +| actions/setup-python | a26af69be951a213d495a4c3e4e4022e16d87065 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| agent-base | 7.1.4 | MIT | no | +| ajv | 8.18.0 | MIT | no | +| ajv-draft-04 | 1.0.0 | MIT | no | +| ajv-formats | 3.0.1 | MIT | no | +| alien-signals | 0.4.14 | MIT | no | +| ansi-regex | 5.0.1 | MIT | no | +| ansi-regex | 6.2.2 | MIT | no | +| ansi-styles | 4.3.0 | MIT | no | +| ansi-styles | 5.2.0 | MIT | no | +| ansi-styles | 6.2.3 | MIT | no | +| argparse | 1.0.10 | MIT | no | +| argparse | 2.0.1 | Python-2.0 | no | +| aria-query | 5.3.0 | Apache-2.0 | no | +| aria-query | 5.3.2 | Apache-2.0 | no | +| assertion-error | 2.0.1 | MIT | no | +| ast-types | 0.16.1 | MIT | no | +| ast-v8-to-istanbul | 0.3.12 | MIT | no | +| asynckit | 0.4.0 | MIT | no | +| balanced-match | 4.0.4 | MIT | no | +| baseline-browser-mapping | 2.10.43 | Apache-2.0 | no | +| brace-expansion | 5.0.9 | MIT | no | +| browserslist | 4.28.5 | MIT | no | +| bundle-name | 4.1.0 | MIT | no | +| cac | 6.7.14 | MIT | no | +| call-bind-apply-helpers | 1.0.2 | MIT | no | +| caniuse-lite | 1.0.30001803 | CC-BY-4.0 | no | +| chai | 5.3.3 | MIT | no | +| check-error | 2.1.3 | MIT | no | +| color-convert | 2.0.1 | MIT | no | +| color-name | 1.1.4 | MIT | no | +| combined-stream | 1.0.8 | MIT | no | +| compare-versions | 6.1.1 | MIT | no | +| confbox | 0.1.8 | BSD-3-Clause AND MIT | no | +| confbox | 0.2.4 | MIT | no | +| convert-source-map | 2.0.0 | MIT | no | +| coverage | 7.15.3 | Apache-2.0 | no | +| crelt | 1.0.7 | MIT | no | +| cross-spawn | 7.0.6 | MIT | no | +| css.escape | 1.5.1 | MIT | no | +| cssstyle | 4.6.0 | MIT | no | +| csstype | 3.2.3 | MIT | no | +| data-urls | 5.0.0 | MIT | no | +| de-indent | 1.0.2 | MIT | no | +| debug | 4.4.3 | MIT | no | +| decimal.js | 10.6.0 | MIT | no | +| deep-eql | 5.0.2 | MIT | no | +| default-browser | 5.5.0 | MIT | no | +| default-browser-id | 5.0.1 | MIT | no | +| define-lazy-prop | 3.0.0 | MIT | no | +| delayed-stream | 1.0.0 | MIT | no | +| dequal | 2.0.3 | MIT | no | +| diff | 8.0.4 | BSD-3-Clause | no | +| doctrine | 3.0.0 | Apache-2.0 AND BSD-2-Clause | no | +| dom-accessibility-api | 0.5.16 | MIT | no | +| dom-accessibility-api | 0.6.3 | MIT | no | +| dunder-proto | 1.0.1 | MIT | no | +| eastasianwidth | 0.2.0 | MIT | no | +| electron-to-chromium | 1.5.389 | ISC | no | +| emoji-regex | 8.0.0 | MIT | no | +| emoji-regex | 9.2.2 | MIT | no | +| empathic | 2.0.1 | MIT | no | +| entities | 4.5.0 | BSD-2-Clause | no | +| entities | 6.0.1 | BSD-2-Clause | no | +| entities | 7.0.1 | BSD-2-Clause | no | +| es-define-property | 1.0.1 | MIT | no | +| es-errors | 1.3.0 | MIT | no | +| es-module-lexer | 1.7.0 | MIT | no | +| es-object-atoms | 1.1.2 | MIT | no | +| es-set-tostringtag | 2.1.0 | MIT | no | +| esbuild | 0.25.12 | MIT | no | +| escalade | 3.2.0 | MIT | no | +| escape-string-regexp | 4.0.0 | MIT | no | +| esprima | 4.0.1 | BSD-2-Clause AND BSD-3-Clause | no | +| estree-walker | 2.0.2 | MIT | no | +| estree-walker | 3.0.3 | MIT | no | +| esutils | 2.0.3 | BSD-2-Clause | no | +| et-xmlfile | 2.0.0 | 0BSD AND BSD-3-Clause AND MIT AND Python-2.0 | no | +| expect-type | 1.4.0 | Apache-2.0 | no | +| exsolve | 1.1.0 | MIT | no | +| fast-deep-equal | 3.1.3 | MIT | no | +| fast-uri | 3.1.5 | BSD-3-Clause | no | +| fdir | 6.5.0 | MIT | no | +| foreground-child | 3.3.1 | ISC | no | +| form-data | 4.0.6 | MIT | no | +| fs-extra | 11.3.6 | MIT | no | +| fsevents | 2.3.2 | MIT | no | +| fsevents | 2.3.3 | MIT | no | +| function-bind | 1.1.2 | MIT | no | +| gensync | 1.0.0-beta.2 | MIT | no | +| get-intrinsic | 1.3.0 | MIT | no | +| get-proto | 1.0.1 | MIT | no | +| glob | 10.5.0 | ISC | no | +| glob | 13.0.6 | BlueOak-1.0.0 | no | +| gopd | 1.2.0 | MIT | no | +| graceful-fs | 4.2.11 | ISC | no | +| has-flag | 4.0.0 | MIT | no | +| has-symbols | 1.1.0 | MIT | no | +| has-tostringtag | 1.0.2 | MIT | no | +| hasown | 2.0.4 | MIT | no | +| he | 1.2.0 | MIT | no | +| html-encoding-sniffer | 4.0.0 | MIT | no | +| html-escaper | 2.0.2 | MIT | no | +| http-proxy-agent | 7.0.2 | MIT | no | +| https-proxy-agent | 7.0.6 | MIT | no | +| iconv-lite | 0.6.3 | MIT | no | +| import-lazy | 4.0.0 | MIT | no | +| indent-string | 4.0.0 | MIT | no | +| iniconfig | 2.3.0 | MIT | no | +| is-core-module | 2.16.2 | MIT | no | +| is-docker | 3.0.0 | MIT | no | +| is-fullwidth-code-point | 3.0.0 | MIT | no | +| is-inside-container | 1.0.0 | MIT | no | +| is-potential-custom-element-name | 1.0.1 | MIT | no | +| is-wsl | 3.1.1 | MIT | no | +| isexe | 2.0.0 | ISC | no | +| isomorphic.js | 0.2.5 | MIT | no | +| istanbul-lib-coverage | 3.2.2 | BSD-3-Clause | no | +| istanbul-lib-report | 3.0.1 | BSD-3-Clause | no | +| istanbul-lib-source-maps | 5.0.6 | BSD-3-Clause | no | +| istanbul-reports | 3.2.0 | BSD-3-Clause | no | +| jackspeak | 3.4.3 | BlueOak-1.0.0 | no | +| jju | 1.4.0 | MIT | no | +| js-tokens | 10.0.0 | MIT | no | +| js-tokens | 4.0.0 | MIT | no | +| js-tokens | 9.0.1 | MIT | no | +| jsdom | 25.0.1 | MIT | no | +| jsesc | 3.1.0 | MIT | no | +| json-schema-traverse | 1.0.0 | MIT | no | +| json5 | 2.2.3 | MIT | no | +| jsonc-parser | 3.3.1 | MIT | no | +| jsonfile | 6.2.1 | MIT | no | +| kolorist | 1.8.0 | MIT | no | +| lib0 | 0.2.117 | MIT | no | +| linkify-it | 5.0.2 | MIT | no | +| linkifyjs | 4.3.3 | MIT | no | +| local-pkg | 1.2.1 | MIT | no | +| loose-envify | 1.4.0 | MIT | no | +| loupe | 3.2.1 | MIT | no | +| lru-cache | 10.4.3 | ISC | no | +| lru-cache | 11.5.2 | BlueOak-1.0.0 | no | +| lru-cache | 5.1.1 | ISC | no | +| lxml | 6.1.0 | BSD-3-Clause AND GPL-1.0-or-later | yes | +| lz-string | 1.5.0 | MIT | no | +| magic-string | 0.30.21 | MIT | no | +| magicast | 0.3.5 | MIT | no | +| make-dir | 4.0.0 | MIT | no | +| markdown-it | 14.3.0 | MIT | no | +| marked | 15.0.12 | BSD-3-Clause AND MIT | no | +| math-intrinsics | 1.1.0 | MIT | no | +| mdurl | 2.0.0 | MIT | no | +| mime-db | 1.52.0 | MIT | no | +| mime-types | 2.1.35 | MIT | no | +| min-indent | 1.0.1 | MIT | no | +| minimatch | 10.2.3 | BlueOak-1.0.0 | no | +| minimatch | 10.2.5 | BlueOak-1.0.0 | no | +| minimist | 1.2.8 | MIT | no | +| minipass | 7.1.3 | BlueOak-1.0.0 | no | +| mlly | 1.8.2 | MIT | no | +| ms | 2.1.3 | MIT | no | +| muggle-string | 0.4.1 | MIT | no | +| nanoid | 3.3.18 | MIT | no | +| node-releases | 2.0.51 | MIT | no | +| nwsapi | 2.2.24 | MIT | no | +| open | 10.2.0 | MIT | no | +| openpyxl | 3.1.5 | MIT | no | +| openpyxl | >= 3.1.5,< 4 | NOASSERTION | yes | +| orderedmap | 2.1.1 | MIT | no | +| oxc-parser | 0.127.0 | MIT | no | +| oxc-resolver | 11.24.2 | MIT | no | +| package-json-from-dist | 1.0.1 | BlueOak-1.0.0 | no | +| packaging | 25.0 | Apache-2.0 AND BSD-2-Clause | no | +| parse5 | 7.3.0 | MIT | no | +| path-browserify | 1.0.1 | MIT | no | +| path-key | 3.1.1 | MIT | no | +| path-parse | 1.0.7 | MIT | no | +| path-scurry | 1.11.1 | BlueOak-1.0.0 | no | +| path-scurry | 2.0.2 | BlueOak-1.0.0 | no | +| pathe | 2.0.3 | MIT | no | +| pathval | 2.0.1 | MIT | no | +| picocolors | 1.1.1 | ISC | no | +| picomatch | 4.0.5 | MIT | no | +| pillow | 12.3.0 | MIT-CMU | no | +| pkg-types | 1.3.1 | MIT | no | +| pkg-types | 2.3.1 | MIT | no | +| playwright | 1.62.0 | Apache-2.0 | no | +| playwright-core | 1.62.0 | Apache-2.0 | no | +| pluggy | 1.6.0 | MIT | no | +| pnpm/action-setup | 0977fd99725f1db4007ccb2928dbb4e90d06cc86 | NOASSERTION | yes | +| postcss | 8.5.25 | MIT | no | +| pretty-format | 27.5.1 | MIT | no | +| prosemirror-changeset | 2.4.1 | MIT | no | +| prosemirror-collab | 1.3.1 | MIT | no | +| prosemirror-commands | 1.7.1 | MIT | no | +| prosemirror-dropcursor | 1.8.3 | MIT | no | +| prosemirror-gapcursor | 1.4.1 | MIT | no | +| prosemirror-history | 1.5.0 | MIT | no | +| prosemirror-inputrules | 1.5.1 | MIT | no | +| prosemirror-keymap | 1.2.3 | MIT | no | +| prosemirror-markdown | 1.13.5 | MIT | no | +| prosemirror-menu | 1.3.2 | MIT | no | +| prosemirror-model | 1.25.11 | MIT | no | +| prosemirror-schema-basic | 1.2.4 | MIT | no | +| prosemirror-schema-list | 1.5.1 | MIT | no | +| prosemirror-state | 1.4.4 | MIT | no | +| prosemirror-tables | 1.8.5 | MIT | no | +| prosemirror-trailing-node | 3.0.0 | MIT | no | +| prosemirror-transform | 1.12.0 | MIT | no | +| prosemirror-view | 1.42.1 | MIT | no | +| punycode | 2.3.1 | MIT | no | +| punycode.js | 2.3.1 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pypa/gh-action-pypi-publish | dc37677b2e1c63e2034f94d8a5b11f265b73ba33 | NOASSERTION | yes | +| pytest | 9.0.3 | MIT | no | +| python-docx | 1.2.0 | MIT | no | +| python-docx | >= 1.2.0,< 2 | NOASSERTION | yes | +| python-pptx | 1.0.2 | MIT | no | +| python-pptx | >= 1.0.2,< 2 | NOASSERTION | yes | +| quansync | 0.2.11 | MIT | no | +| react | 18.3.1 | MIT | no | +| react-docgen | 8.0.3 | MIT | no | +| react-docgen-typescript | 2.4.0 | MIT | no | +| react-dom | 18.3.1 | MIT | no | +| react-is | 17.0.2 | MIT | no | +| react-refresh | 0.17.0 | MIT | no | +| recast | 0.23.21 | MIT | no | +| redent | 3.0.0 | MIT | no | +| require-from-string | 2.0.2 | MIT | no | +| resolve | 1.22.12 | MIT | no | +| rollup | 4.62.2 | MIT | no | +| rope-sequence | 1.3.4 | MIT | no | +| rrweb-cssom | 0.7.1 | MIT | no | +| rrweb-cssom | 0.8.0 | MIT | no | +| run-applescript | 7.1.0 | MIT | no | +| safer-buffer | 2.1.2 | MIT | no | +| saxes | 6.0.0 | ISC | no | +| scheduler | 0.23.2 | MIT | no | +| semver | 6.3.1 | ISC | no | +| semver | 7.7.4 | ISC | no | +| semver | 7.8.5 | ISC | no | +| setuptools | 83.0.0 | MIT | no | +| shebang-command | 2.0.0 | MIT | no | +| shebang-regex | 3.0.0 | MIT | no | +| siginfo | 2.0.0 | ISC | no | +| signal-exit | 4.1.0 | ISC | no | +| sigstore/cosign-installer | 6f9f17788090df1f26f669e9d70d6ae9567deba6 | NOASSERTION | yes | +| source-map | 0.6.1 | BSD-3-Clause | no | +| source-map-js | 1.2.1 | BSD-3-Clause | no | +| sprintf-js | 1.0.3 | BSD-3-Clause | no | +| stackback | 0.0.2 | MIT | no | +| std-env | 3.10.0 | MIT | no | +| storybook | 10.5.8 | MIT | no | +| string-argv | 0.3.2 | MIT | no | +| string-width | 4.2.3 | MIT | no | +| string-width | 5.1.2 | MIT | no | +| strip-ansi | 6.0.1 | MIT | no | +| strip-ansi | 7.2.0 | MIT | no | +| strip-bom | 3.0.0 | MIT | no | +| strip-indent | 3.0.0 | MIT | no | +| strip-indent | 4.1.1 | MIT | no | +| strip-literal | 3.1.0 | MIT | no | +| supports-color | 7.2.0 | MIT | no | +| supports-color | 8.1.1 | MIT | no | +| supports-preserve-symlinks-flag | 1.0.0 | MIT | no | +| symbol-tree | 3.2.4 | MIT | no | +| test-exclude | 7.0.2 | ISC | no | +| tiny-invariant | 1.3.3 | MIT | no | +| tinybench | 2.9.0 | MIT | no | +| tinyexec | 0.3.2 | MIT | no | +| tinyglobby | 0.2.17 | MIT | no | +| tinypool | 1.1.1 | MIT | no | +| tinyrainbow | 2.0.0 | MIT | no | +| tinyspy | 4.0.4 | MIT | no | +| tippy.js | 6.3.7 | MIT | no | +| tldts | 6.1.86 | MIT | no | +| tldts-core | 6.1.86 | MIT | no | +| tough-cookie | 5.1.2 | BSD-3-Clause | no | +| tr46 | 5.1.1 | MIT | no | +| ts-dedent | 2.3.0 | MIT | no | +| tsconfig-paths | 4.2.0 | MIT | no | +| tslib | 2.8.1 | 0BSD | no | +| turndown | 7.2.4 | MIT | no | +| turndown-plugin-gfm | 1.0.2 | MIT | no | +| typescript | 5.9.3 | Apache-2.0 | no | +| typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| uc.micro | 2.1.0 | MIT | no | +| ufo | 1.6.4 | MIT | no | +| undici-types | 6.21.0 | MIT | no | +| universalify | 2.0.1 | MIT | no | +| unplugin | 2.3.11 | MIT | no | +| update-browserslist-db | 1.2.3 | MIT | no | +| use-sync-external-store | 1.6.0 | MIT | no | +| vite | 6.4.3 | MIT | no | +| vite-node | 3.2.4 | MIT | no | +| vite-plugin-dts | 4.5.4 | MIT | no | +| vitest | 3.2.7 | MIT | no | +| vscode-uri | 3.1.0 | MIT | no | +| w3c-keyname | 2.2.8 | MIT | no | +| w3c-xmlserializer | 5.0.0 | MIT | no | +| webidl-conversions | 7.0.0 | BSD-2-Clause | no | +| webpack-virtual-modules | 0.6.2 | MIT | no | +| whatwg-encoding | 3.1.1 | MIT | no | +| whatwg-mimetype | 4.0.0 | MIT | no | +| whatwg-url | 14.2.0 | MIT | no | +| wheel | 0.47.0 | MIT | no | +| which | 2.0.2 | ISC | no | +| why-is-node-running | 2.3.0 | MIT | no | +| wrap-ansi | 7.0.0 | MIT | no | +| wrap-ansi | 8.1.0 | MIT | no | +| ws | 8.21.0 | MIT | no | +| ws | 8.21.3 | MIT | no | +| wsl-utils | 0.1.0 | MIT | no | +| xlsxwriter | 3.2.9 | BSD-2-Clause | no | +| xml-name-validator | 5.0.0 | Apache-2.0 | no | +| xmlchars | 2.2.0 | MIT | no | +| y-prosemirror | 1.3.7 | MIT | no | +| y-protocols | 1.0.7 | MIT | no | +| yallist | 3.1.1 | ISC | no | +| yjs | 13.6.31 | MIT | no | + +### ContextualWisdomLab/IRT-bibliography-set + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/j-planner + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/kaefa + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| r-lib/actions/check-r-package | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | yes | +| r-lib/actions/setup-pandoc | d3c5be51b12e724e68f33216ca3c148b66d5f0b6 | NOASSERTION | yes | +| r-lib/actions/setup-r | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | yes | +| r-lib/actions/setup-r-dependencies | 6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 | NOASSERTION | yes | + +### ContextualWisdomLab/keyverse + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/download-artifact | 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| annotated-doc | 0.0.5 | MIT | no | +| annotated-types | 0.8.0 | MIT | no | +| anyio | 4.14.2 | MIT | no | +| astral-sh/setup-uv | 20cfd1bf945f4377ade1205e4dbc17946fc9a30d | NOASSERTION | yes | +| atheris | 3.1.0 | Apache-2.0 | no | +| attrs | 26.1.0 | MIT | no | +| certifi | 2026.7.22 | MPL-2.0 | yes | +| cffi | 2.1.1 | MIT-0 | no | +| click | 8.4.2 | BSD-3-Clause | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| coverage | 7.15.4 | Apache-2.0 | no | +| cryptography | 50.0.0 | Apache-2.0 OR BSD-3-Clause | no | +| cwl-idp-account-unification | 0.1.0 | NOASSERTION | yes | +| fastapi | — | NOASSERTION | yes | +| fastapi | 0.141.1 | MIT | no | +| h11 | 0.16.0 | MIT | no | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpcore2 | 2.9.1 | BSD-2-Clause AND BSD-3-Clause | no | +| httpx | — | NOASSERTION | yes | +| httpx | 0.28.1 | BSD-3-Clause | no | +| httpx2 | 2.9.1 | BSD-2-Clause AND BSD-3-Clause | no | +| idna | 3.18 | BSD-3-Clause | no | +| iniconfig | 2.3.0 | MIT | no | +| interrogate | 1.7.0 | MIT | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| pluggy | 1.6.0 | MIT | no | +| py | 1.11.0 | MIT | no | +| pycparser | 3.0 | BSD-3-Clause | no | +| pydantic | — | NOASSERTION | yes | +| pydantic | 2.13.4 | MIT | no | +| pydantic-core | 2.46.4 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pytest | — | NOASSERTION | yes | +| pytest | 9.1.1 | MIT | no | +| pyyaml | — | NOASSERTION | yes | +| pyyaml | 6.0.3 | MIT | no | +| ruff | — | NOASSERTION | yes | +| ruff | 0.16.3 | MIT | no | +| setuptools | — | NOASSERTION | yes | +| setuptools | 84.0.0 | MIT | no | +| starlette | 1.3.1 | BSD-3-Clause | no | +| step-security/harden-runner | 05e31511f85b41b11d1cf0ef85d0992719546e2c | NOASSERTION | yes | +| tabulate | 0.10.0 | MIT | no | +| truststore | 0.10.4 | MIT | no | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.4 | MIT | no | +| uvicorn | — | NOASSERTION | yes | +| uvicorn | 0.52.3 | BSD-3-Clause | no | + +### ContextualWisdomLab/learning-content-studio + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/learning-interoperability-contracts + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/learning-management-platform + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/learning-record-store + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/life-os + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/LineageWeave + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/linux-cluster-ops + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/attest-build-provenance | a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 | NOASSERTION | yes | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/setup-python | ece7cb06caefa5fff74198d8649806c4678c61a1 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| atheris | 3.0.0 | Apache-2.0 | no | + +### ContextualWisdomLab/litellm-patched-proxy + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/macos_utility_packs + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/metering-billing-platform + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/mhtml-etl-gateway + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/mightyETL + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | yes | +| actions/dependency-review-action | a1d282b36b6f3519aa1f3fc636f609c47dddb294 | NOASSERTION | yes | +| actions/setup-java | 1bcf9fb12cf4aa7d266a90ae39939e61372fe520 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| com.fasterxml.jackson.core:jackson-databind | — | NOASSERTION | yes | +| com.fasterxml.jackson:jackson-bom | 2.21.5 | Apache-2.0 | no | +| com.h2database:h2 | — | NOASSERTION | yes | +| github/codeql-action/analyze | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | yes | +| github/codeql-action/autobuild | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | yes | +| github/codeql-action/init | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | yes | +| github/codeql-action/upload-sarif | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | yes | +| io.debezium:debezium-api | 3.4.0 | NOASSERTION | yes | +| io.debezium:debezium-connector-postgres | 3.4.0 | NOASSERTION | yes | +| io.debezium:debezium-embedded | 3.4.0 | NOASSERTION | yes | +| io.jsonwebtoken:jjwt | 0.13.0 | Apache-2.0 | no | +| io.micrometer:micrometer-tracing-bridge-brave | — | NOASSERTION | yes | +| io.zipkin.reporter2:zipkin-reporter-brave | — | NOASSERTION | yes | +| org.apache.maven.plugins:maven-compiler-plugin | 3.13.0 | Apache-2.0 | no | +| org.apache.maven.plugins:maven-dependency-plugin | — | NOASSERTION | yes | +| org.apache.maven.plugins:maven-dependency-plugin | 3.9.0 | Apache-2.0 | no | +| org.apache.maven.plugins:maven-surefire-plugin | 3.5.4 | Apache-2.0 | no | +| org.flywaydb:flyway-core | — | NOASSERTION | yes | +| org.flywaydb:flyway-database-postgresql | — | NOASSERTION | yes | +| org.jacoco:jacoco-maven-plugin | 0.8.15 | EPL-2.0 OR (Apache-2.0 AND EPL-2.0) | yes | +| org.junit.jupiter:junit-jupiter-api | 5.12.2 | EPL-2.0 | yes | +| org.junit.jupiter:junit-jupiter-engine | 5.12.2 | EPL-2.0 | yes | +| org.junit.platform:junit-platform-commons | 1.12.2 | EPL-2.0 | yes | +| org.junit.platform:junit-platform-engine | 1.12.2 | EPL-2.0 | yes | +| org.junit.platform:junit-platform-launcher | 1.12.2 | EPL-2.0 | yes | +| org.mockito:mockito-core | 5.21.0 | MIT | no | +| org.mockito:mockito-junit-jupiter | 5.21.0 | MIT | no | +| org.postgresql:postgresql | — | NOASSERTION | yes | +| org.postgresql:postgresql | 42.7.12 | BSD-2-Clause | no | +| org.springframework.boot:spring-boot-configuration-processor | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-dependencies | 3.5.16 | Apache-2.0 | no | +| org.springframework.boot:spring-boot-maven-plugin | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-maven-plugin | 3.5.16 | Apache-2.0 | no | +| org.springframework.boot:spring-boot-starter-actuator | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-starter-aop | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-starter-data-jpa | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-starter-security | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-starter-test | — | NOASSERTION | yes | +| org.springframework.boot:spring-boot-starter-web | — | NOASSERTION | yes | +| org.springframework.cloud:spring-cloud-config-server | — | NOASSERTION | yes | +| org.springframework.cloud:spring-cloud-dependencies | 2025.0.3 | Apache-2.0 | no | +| org.springframework.cloud:spring-cloud-starter-gateway | — | NOASSERTION | yes | +| org.springframework.cloud:spring-cloud-starter-netflix-eureka-client | — | NOASSERTION | yes | +| org.springframework.cloud:spring-cloud-starter-netflix-eureka-server | — | NOASSERTION | yes | +| org.springframework.kafka:spring-kafka | — | NOASSERTION | yes | +| org.springframework.kafka:spring-kafka | 3.3.16 | Apache-2.0 | no | +| org.springframework.retry:spring-retry | — | NOASSERTION | yes | +| org.springframework.retry:spring-retry | 2.0.13 | Apache-2.0 | no | +| org.springframework.security:spring-security-test | — | NOASSERTION | yes | +| ossf/scorecard-action | 4eaacf0543bb3f2c246792bd56e8cdeffafb205a | NOASSERTION | yes | + +### ContextualWisdomLab/naruon + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @alloc/quick-lru | 5.2.0 | MIT | no | +| @asamuzakjp/css-color | 6.0.5 | MIT | no | +| @asamuzakjp/dom-selector | 8.3.0 | MIT | no | +| @babel/code-frame | 7.29.7 | MIT | no | +| @babel/compat-data | 7.29.7 | MIT | no | +| @babel/core | 7.29.7 | MIT | no | +| @babel/generator | 7.29.7 | MIT | no | +| @babel/helper-compilation-targets | 7.29.7 | MIT | no | +| @babel/helper-globals | 7.29.7 | MIT | no | +| @babel/helper-module-imports | 7.29.7 | MIT | no | +| @babel/helper-module-transforms | 7.29.7 | MIT | no | +| @babel/helper-string-parser | 7.29.7 | MIT | no | +| @babel/helper-validator-identifier | 7.29.7 | MIT | no | +| @babel/helper-validator-option | 7.29.7 | MIT | no | +| @babel/helpers | 7.29.7 | MIT | no | +| @babel/parser | 7.29.7 | MIT | no | +| @babel/runtime | 7.29.7 | MIT | no | +| @babel/template | 7.29.7 | MIT | no | +| @babel/traverse | 7.29.7 | MIT | no | +| @babel/types | 7.29.7 | MIT | no | +| @base-ui/react | 1.6.0 | MIT | no | +| @base-ui/utils | 0.3.1 | MIT | no | +| @bcoe/v8-coverage | 1.0.2 | ISC AND MIT | no | +| @bramus/specificity | 2.4.2 | MIT | no | +| @csstools/color-helpers | 6.1.0 | MIT-0 | no | +| @csstools/css-calc | 3.3.0 | MIT | no | +| @csstools/css-color-parser | 4.1.10 | MIT | no | +| @csstools/css-parser-algorithms | 4.0.0 | MIT | no | +| @csstools/css-syntax-patches-for-csstree | 1.1.7 | MIT-0 | no | +| @csstools/css-tokenizer | 4.0.0 | MIT | no | +| @egjs/hammerjs | 2.0.17 | MIT | no | +| @emnapi/core | 1.10.0 | MIT | no | +| @emnapi/core | 1.11.1 | MIT | no | +| @emnapi/runtime | 1.10.0 | MIT | no | +| @emnapi/runtime | 1.11.1 | MIT | no | +| @emnapi/runtime | 1.11.3 | MIT | no | +| @emnapi/wasi-threads | 1.2.1 | MIT | no | +| @emnapi/wasi-threads | 1.2.2 | MIT | no | +| @eslint-community/eslint-utils | 4.10.1 | MIT | no | +| @eslint-community/regexpp | 4.12.2 | MIT | no | +| @eslint/config-array | 0.21.2 | Apache-2.0 | no | +| @eslint/config-helpers | 0.4.2 | Apache-2.0 | no | +| @eslint/core | 0.17.0 | Apache-2.0 | no | +| @eslint/eslintrc | 3.3.6 | MIT | no | +| @eslint/js | 9.39.5 | MIT | no | +| @eslint/object-schema | 2.1.7 | Apache-2.0 | no | +| @eslint/plugin-kit | 0.4.1 | Apache-2.0 | no | +| @exodus/bytes | 1.15.1 | MIT | no | +| @floating-ui/core | 1.8.0 | MIT | no | +| @floating-ui/dom | 1.8.0 | MIT | no | +| @floating-ui/react-dom | 2.1.9 | MIT | no | +| @floating-ui/utils | 0.2.12 | MIT | no | +| @humanfs/core | 0.19.2 | Apache-2.0 | no | +| @humanfs/node | 0.16.8 | Apache-2.0 | no | +| @humanfs/types | 0.15.0 | Apache-2.0 | no | +| @humanwhocodes/module-importer | 1.0.1 | Apache-2.0 | no | +| @humanwhocodes/retry | 0.4.3 | Apache-2.0 | no | +| @img/colour | 1.1.0 | MIT | no | +| @img/sharp-darwin-arm64 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-darwin-x64 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-freebsd-wasm32 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-libvips-darwin-arm64 | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-darwin-x64 | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-arm | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-arm64 | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-ppc64 | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-riscv64 | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-s390x | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-x64 | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linuxmusl-arm64 | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linuxmusl-x64 | 1.3.0 | LGPL-3.0-or-later | yes | +| @img/sharp-linux-arm | 0.35.0 | Apache-2.0 | no | +| @img/sharp-linux-arm64 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-linux-ppc64 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-linux-riscv64 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-linux-s390x | 0.35.0 | Apache-2.0 | no | +| @img/sharp-linux-x64 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-linuxmusl-arm64 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-linuxmusl-x64 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-wasm32 | 0.35.0 | Apache-2.0 AND LGPL-3.0-or-later AND MIT | yes | +| @img/sharp-webcontainers-wasm32 | 0.35.0 | Apache-2.0 | no | +| @img/sharp-win32-arm64 | 0.35.0 | Apache-2.0 AND LGPL-3.0-or-later | yes | +| @img/sharp-win32-ia32 | 0.35.0 | Apache-2.0 AND LGPL-3.0-or-later | yes | +| @img/sharp-win32-x64 | 0.35.0 | Apache-2.0 AND LGPL-3.0-or-later | yes | +| @jridgewell/gen-mapping | 0.3.13 | MIT | no | +| @jridgewell/remapping | 2.3.5 | MIT | no | +| @jridgewell/resolve-uri | 3.1.2 | MIT | no | +| @jridgewell/sourcemap-codec | 1.5.5 | MIT | no | +| @jridgewell/trace-mapping | 0.3.31 | MIT | no | +| @napi-rs/wasm-runtime | 1.1.6 | MIT | no | +| @next/env | 16.2.12 | MIT | no | +| @next/eslint-plugin-next | 16.2.12 | MIT | no | +| @next/swc-darwin-arm64 | 16.2.12 | MIT | no | +| @next/swc-darwin-x64 | 16.2.12 | MIT | no | +| @next/swc-linux-arm64-gnu | 16.2.12 | MIT | no | +| @next/swc-linux-arm64-musl | 16.2.12 | MIT | no | +| @next/swc-linux-x64-gnu | 16.2.12 | MIT | no | +| @next/swc-linux-x64-musl | 16.2.12 | MIT | no | +| @next/swc-win32-arm64-msvc | 16.2.12 | MIT | no | +| @next/swc-win32-x64-msvc | 16.2.12 | MIT | no | +| @nodelib/fs.scandir | 2.1.5 | MIT | no | +| @nodelib/fs.stat | 2.0.5 | MIT | no | +| @nodelib/fs.walk | 1.2.8 | MIT | no | +| @nolyfill/is-core-module | 1.0.39 | MIT | no | +| @oxc-project/types | 0.139.0 | MIT | no | +| @playwright/test | 1.62.0 | Apache-2.0 | no | +| @radix-ui/primitive | 1.1.7 | MIT | no | +| @radix-ui/react-collection | 1.1.15 | MIT | no | +| @radix-ui/react-compose-refs | 1.1.5 | MIT | no | +| @radix-ui/react-context | 1.2.2 | MIT | no | +| @radix-ui/react-direction | 1.1.4 | MIT | no | +| @radix-ui/react-id | 1.1.4 | MIT | no | +| @radix-ui/react-presence | 1.1.10 | MIT | no | +| @radix-ui/react-primitive | 2.1.10 | MIT | no | +| @radix-ui/react-roving-focus | 1.1.19 | MIT | no | +| @radix-ui/react-slot | 1.3.3 | MIT | no | +| @radix-ui/react-tabs | 1.1.21 | MIT | no | +| @radix-ui/react-use-callback-ref | 1.1.4 | MIT | no | +| @radix-ui/react-use-controllable-state | 1.2.6 | MIT | no | +| @radix-ui/react-use-effect-event | 0.0.5 | MIT | no | +| @radix-ui/react-use-is-hydrated | 0.1.3 | MIT | no | +| @radix-ui/react-use-layout-effect | 1.1.4 | MIT | no | +| @rolldown/binding-android-arm64 | 1.1.5 | MIT | no | +| @rolldown/binding-darwin-arm64 | 1.1.5 | MIT | no | +| @rolldown/binding-darwin-x64 | 1.1.5 | MIT | no | +| @rolldown/binding-freebsd-x64 | 1.1.5 | MIT | no | +| @rolldown/binding-linux-arm-gnueabihf | 1.1.5 | MIT | no | +| @rolldown/binding-linux-arm64-gnu | 1.1.5 | MIT | no | +| @rolldown/binding-linux-arm64-musl | 1.1.5 | MIT | no | +| @rolldown/binding-linux-ppc64-gnu | 1.1.5 | MIT | no | +| @rolldown/binding-linux-s390x-gnu | 1.1.5 | MIT | no | +| @rolldown/binding-linux-x64-gnu | 1.1.5 | MIT | no | +| @rolldown/binding-linux-x64-musl | 1.1.5 | MIT | no | +| @rolldown/binding-openharmony-arm64 | 1.1.5 | MIT | no | +| @rolldown/binding-wasm32-wasi | 1.1.5 | MIT | no | +| @rolldown/binding-win32-arm64-msvc | 1.1.5 | MIT | no | +| @rolldown/binding-win32-x64-msvc | 1.1.5 | MIT | no | +| @rolldown/pluginutils | 1.0.1 | MIT | no | +| @rtsao/scc | 1.1.0 | MIT | no | +| @standard-schema/spec | 1.1.0 | MIT | no | +| @swc/helpers | 0.5.15 | Apache-2.0 | no | +| @tailwindcss/node | 4.3.3 | MIT | no | +| @tailwindcss/oxide | 4.3.3 | MIT | no | +| @tailwindcss/oxide-android-arm64 | 4.3.3 | MIT | no | +| @tailwindcss/oxide-darwin-arm64 | 4.3.3 | MIT | no | +| @tailwindcss/oxide-darwin-x64 | 4.3.3 | MIT | no | +| @tailwindcss/oxide-freebsd-x64 | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-arm-gnueabihf | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-arm64-gnu | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-arm64-musl | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-x64-gnu | 4.3.3 | MIT | no | +| @tailwindcss/oxide-linux-x64-musl | 4.3.3 | MIT | no | +| @tailwindcss/oxide-wasm32-wasi | 4.3.3 | MIT | no | +| @tailwindcss/oxide-win32-arm64-msvc | 4.3.3 | MIT | no | +| @tailwindcss/oxide-win32-x64-msvc | 4.3.3 | MIT | no | +| @tailwindcss/postcss | 4.3.3 | MIT | no | +| @tybys/wasm-util | 0.10.3 | MIT | no | +| @types/chai | 5.2.3 | MIT | no | +| @types/deep-eql | 4.0.2 | MIT | no | +| @types/estree | 1.0.9 | MIT | no | +| @types/hammerjs | 2.0.46 | MIT | no | +| @types/json-schema | 7.0.15 | MIT | no | +| @types/json5 | 0.0.29 | MIT | no | +| @types/node | 26.1.2 | MIT | no | +| @types/react | 19.2.17 | MIT | no | +| @types/react-dom | 19.2.3 | MIT | no | +| @typescript-eslint/eslint-plugin | 8.65.0 | MIT | no | +| @typescript-eslint/parser | 8.65.0 | MIT | no | +| @typescript-eslint/project-service | 8.65.0 | MIT | no | +| @typescript-eslint/scope-manager | 8.65.0 | MIT | no | +| @typescript-eslint/tsconfig-utils | 8.65.0 | MIT | no | +| @typescript-eslint/type-utils | 8.65.0 | MIT | no | +| @typescript-eslint/types | 8.65.0 | MIT | no | +| @typescript-eslint/typescript-estree | 8.65.0 | MIT | no | +| @typescript-eslint/utils | 8.65.0 | MIT | no | +| @typescript-eslint/visitor-keys | 8.65.0 | MIT | no | +| @unrs/resolver-binding-android-arm-eabi | 1.12.2 | MIT | no | +| @unrs/resolver-binding-android-arm64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-darwin-arm64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-darwin-x64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-freebsd-x64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-arm-gnueabihf | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-arm-musleabihf | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-arm64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-arm64-musl | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-loong64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-loong64-musl | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-ppc64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-riscv64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-riscv64-musl | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-s390x-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-x64-gnu | 1.12.2 | MIT | no | +| @unrs/resolver-binding-linux-x64-musl | 1.12.2 | MIT | no | +| @unrs/resolver-binding-openharmony-arm64 | 1.12.2 | MIT | no | +| @unrs/resolver-binding-wasm32-wasi | 1.12.2 | MIT | no | +| @unrs/resolver-binding-win32-arm64-msvc | 1.12.2 | MIT | no | +| @unrs/resolver-binding-win32-ia32-msvc | 1.12.2 | MIT | no | +| @unrs/resolver-binding-win32-x64-msvc | 1.12.2 | MIT | no | +| @vitest/coverage-v8 | 4.1.10 | MIT | no | +| @vitest/expect | 4.1.10 | MIT | no | +| @vitest/mocker | 4.1.10 | MIT | no | +| @vitest/pretty-format | 4.1.10 | MIT | no | +| @vitest/runner | 4.1.10 | MIT | no | +| @vitest/snapshot | 4.1.10 | MIT | no | +| @vitest/spy | 4.1.10 | MIT | no | +| @vitest/utils | 4.1.10 | MIT | no | +| acorn | 8.17.0 | MIT | no | +| acorn-jsx | 5.3.2 | MIT | no | +| actions/cache | 55cc8345863c7cc4c66a329aec7e433d2d1c52a9 | NOASSERTION | yes | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/dependency-review-action | a1d282b36b6f3519aa1f3fc636f609c47dddb294 | NOASSERTION | yes | +| actions/setup-node | 820762786026740c76f36085b0efc47a31fe5020 | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | yes | +| aiohttp | 3.14.1 | Apache-2.0 AND MIT | no | +| aioimaplib | 2.0.1 | GPL-3.0 AND GPL-3.0-only AND GPL-3.0-or-later | yes | +| aiosignal | 1.4.0 | Apache-2.0 | no | +| aiosmtplib | 5.1.2 | MIT | no | +| ajv | 6.15.0 | MIT | no | +| alembic | 1.18.5 | MIT | no | +| annotated-doc | 0.0.4 | MIT | no | +| annotated-types | 0.7.0 | MIT | no | +| ansi-styles | 4.3.0 | MIT | no | +| anyio | 4.14.1 | MIT | no | +| anyio | 4.14.2 | MIT | no | +| argparse | 2.0.1 | Python-2.0 | no | +| aria-query | 5.3.2 | Apache-2.0 | no | +| array-buffer-byte-length | 1.0.2 | MIT | no | +| array-includes | 3.1.9 | MIT | no | +| array.prototype.findlast | 1.2.5 | MIT | no | +| array.prototype.findlastindex | 1.2.6 | MIT | no | +| array.prototype.flat | 1.3.3 | MIT | no | +| array.prototype.flatmap | 1.3.3 | MIT | no | +| array.prototype.tosorted | 1.1.4 | MIT | no | +| arraybuffer.prototype.slice | 1.0.4 | MIT | no | +| asgiref | 3.11.1 | BSD-3-Clause | no | +| assertion-error | 2.0.1 | MIT | no | +| ast-types-flow | 0.0.8 | MIT | no | +| ast-v8-to-istanbul | 1.0.4 | MIT | no | +| async-function | 1.0.0 | MIT | no | +| asyncpg | 0.31.0 | Apache-2.0 | no | +| attrs | 26.1.0 | MIT | no | +| available-typed-arrays | 1.0.7 | MIT | no | +| axe-core | 4.12.1 | MPL-2.0 | yes | +| axobject-query | 4.1.0 | Apache-2.0 | no | +| backoff | 2.2.1 | MIT | no | +| balanced-match | 4.0.4 | MIT | no | +| bandit | 1.9.4 | Apache-2.0 | no | +| baseline-browser-mapping | 2.11.5 | Apache-2.0 | no | +| bidi-js | 1.0.3 | MIT | no | +| brace-expansion | 5.0.9 | MIT | no | +| braces | 3.0.3 | MIT | no | +| browserslist | 4.28.7 | MIT | no | +| caido-sdk-client | 0.2.0 | MIT | no | +| caido-server-auth | 0.1.2 | NOASSERTION | yes | +| call-bind | 1.0.9 | MIT | no | +| call-bind-apply-helpers | 1.0.2 | MIT | no | +| call-bound | 1.0.4 | MIT | no | +| callsites | 3.1.0 | MIT | no | +| caniuse-lite | 1.0.30001806 | CC-BY-4.0 | no | +| certifi | 2026.6.17 | MPL-2.0 | yes | +| cffi | 2.0.0 | MIT-0 | no | +| cffi | 2.1.0 | MIT-0 | no | +| chai | 6.2.2 | MIT | no | +| chalk | 4.1.2 | MIT | no | +| charset-normalizer | 3.4.7 | MIT | no | +| charset-normalizer | 3.4.9 | MIT | no | +| class-variance-authority | 0.7.1 | Apache-2.0 | no | +| click | 8.4.2 | BSD-3-Clause | no | +| client-only | 0.0.1 | MIT | no | +| clsx | 2.1.1 | MIT | no | +| color-convert | 2.0.1 | MIT | no | +| color-name | 1.1.4 | MIT | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| component-emitter | 2.0.0 | MIT | no | +| convert-source-map | 2.0.0 | MIT | no | +| coverage | 7.15.1 | Apache-2.0 | no | +| cross-spawn | 7.0.6 | MIT | no | +| cryptography | 49.0.0 | BSD-3-Clause OR Apache-2.0 | no | +| cryptography | 50.0.0 | Apache-2.0 OR BSD-3-Clause | no | +| css-tree | 3.2.1 | MIT | no | +| csstype | 3.2.3 | MIT | no | +| cvss | 3.6 | LGPL-3.0 AND LGPL-3.0-only AND LGPL-3.0-or-later | yes | +| damerau-levenshtein | 1.0.8 | BSD-2-Clause | no | +| data-urls | 7.0.0 | MIT | no | +| data-view-buffer | 1.0.2 | MIT | no | +| data-view-byte-length | 1.0.2 | MIT | no | +| data-view-byte-offset | 1.0.1 | MIT | no | +| debug | 3.2.7 | MIT | no | +| debug | 4.4.3 | MIT | no | +| decimal.js | 10.6.0 | MIT | no | +| deep-is | 0.1.4 | MIT | no | +| define-data-property | 1.1.4 | MIT | no | +| define-properties | 1.2.1 | MIT | no | +| defusedxml | 0.7.1 | PSF-2.0 | no | +| detect-libc | 2.1.2 | Apache-2.0 | no | +| distro | 1.9.0 | Apache-2.0 | no | +| dnspython | 2.8.0 | ISC AND MPL-2.0 | yes | +| docker | 7.2.0 | Apache-2.0 | no | +| docker/build-push-action | 53b7df96c91f9c12dcc8a07bcb9ccacbed38856a | NOASSERTION | yes | +| docker/login-action | dbcb813823bdd20940b903addbd779551569679f | NOASSERTION | yes | +| docker/metadata-action | dc802804100637a589fabce1cb79ff13a1411302 | NOASSERTION | yes | +| docker/setup-buildx-action | bb05f3f5519dd87d3ba754cc423b652a5edd6d2c | NOASSERTION | yes | +| docker/setup-qemu-action | 96fe6ef7f33517b61c61be40b68a1882f3264fb8 | NOASSERTION | yes | +| docstring-parser | 0.18.0 | MIT | no | +| doctrine | 2.1.0 | Apache-2.0 AND BSD-2-Clause | no | +| dunder-proto | 1.0.1 | MIT | no | +| electron-to-chromium | 1.5.396 | ISC | no | +| email-validator | 2.3.0 | CC0-1.0 AND Unlicense | no | +| emoji-regex | 9.2.2 | MIT | no | +| enhanced-resolve | 5.24.3 | MIT | no | +| entities | 8.0.0 | BSD-2-Clause | no | +| es-abstract | 1.24.2 | MIT | no | +| es-abstract-get | 1.0.0 | MIT | no | +| es-define-property | 1.0.1 | MIT | no | +| es-errors | 1.3.0 | MIT | no | +| es-iterator-helpers | 1.4.0 | MIT | no | +| es-module-lexer | 2.3.0 | MIT | no | +| es-object-atoms | 1.1.2 | MIT | no | +| es-set-tostringtag | 2.1.0 | MIT | no | +| es-shim-unscopables | 1.1.0 | MIT | no | +| es-to-primitive | 1.3.4 | MIT | no | +| escalade | 3.2.0 | MIT | no | +| escape-string-regexp | 4.0.0 | MIT | no | +| eslint | 9.39.5 | MIT | no | +| eslint-config-next | 16.2.12 | MIT | no | +| eslint-import-resolver-node | 0.3.10 | MIT | no | +| eslint-import-resolver-typescript | 3.10.1 | ISC | no | +| eslint-module-utils | 2.14.0 | MIT | no | +| eslint-plugin-import | 2.32.0 | MIT | no | +| eslint-plugin-jsx-a11y | 6.10.2 | MIT | no | +| eslint-plugin-react | 7.37.5 | MIT | no | +| eslint-plugin-react-hooks | 7.1.1 | MIT | no | +| eslint-scope | 8.4.0 | BSD-2-Clause | no | +| eslint-visitor-keys | 3.4.3 | Apache-2.0 | no | +| eslint-visitor-keys | 4.2.1 | Apache-2.0 | no | +| eslint-visitor-keys | 5.0.1 | Apache-2.0 | no | +| espree | 10.4.0 | BSD-2-Clause | no | +| esquery | 1.7.0 | BSD-3-Clause | no | +| esrecurse | 4.3.0 | BSD-2-Clause | no | +| estraverse | 5.3.0 | BSD-2-Clause | no | +| estree-walker | 3.0.3 | MIT | no | +| esutils | 2.0.3 | BSD-2-Clause | no | +| expect-type | 1.4.0 | Apache-2.0 | no | +| fast-check | 4.9.0 | MIT | no | +| fast-deep-equal | 3.1.3 | MIT | no | +| fast-glob | 3.3.1 | MIT | no | +| fast-json-stable-stringify | 2.1.0 | MIT | no | +| fast-levenshtein | 2.0.6 | MIT | no | +| fastapi | 0.138.2 | MIT | no | +| fastapi | 0.139.0 | MIT | no | +| fastq | 1.20.1 | ISC | no | +| fastuuid | 0.14.0 | BSD-2-Clause AND BSD-3-Clause | no | +| fdir | 6.5.0 | MIT | no | +| file-entry-cache | 8.0.0 | MIT | no | +| filelock | 3.29.7 | MIT | no | +| fill-range | 7.1.1 | MIT | no | +| find-up | 5.0.0 | MIT | no | +| flat-cache | 4.0.1 | MIT | no | +| flatted | 3.4.3 | ISC | no | +| for-each | 0.3.5 | MIT | no | +| frozenlist | 1.8.0 | Apache-2.0 | no | +| fsevents | 2.3.2 | MIT | no | +| fsevents | 2.3.3 | MIT | no | +| fsspec | 2026.6.0 | BSD-3-Clause | no | +| function-bind | 1.1.2 | MIT | no | +| function.prototype.name | 1.2.0 | MIT | no | +| functions-have-names | 1.2.3 | MIT | no | +| genai-prices | 0.0.71 | MIT | no | +| generator-function | 2.0.1 | MIT | no | +| gensync | 1.0.0-beta.2 | MIT | no | +| get-intrinsic | 1.3.0 | MIT | no | +| get-proto | 1.0.1 | MIT | no | +| get-symbol-description | 1.1.0 | MIT | no | +| get-tsconfig | 4.14.0 | MIT | no | +| github/codeql-action/upload-sarif | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | yes | +| glob-parent | 5.1.2 | ISC | no | +| glob-parent | 6.0.2 | ISC | no | +| globals | 14.0.0 | MIT | no | +| globals | 16.4.0 | MIT | no | +| globalthis | 1.0.4 | MIT | no | +| google-api-core | 2.31.0 | Apache-2.0 | no | +| google-api-python-client | 2.198.0 | Apache-2.0 | no | +| google-auth | 2.55.1 | Apache-2.0 | no | +| google-auth | 2.55.2 | Apache-2.0 | no | +| google-auth-httplib2 | 0.4.0 | Apache-2.0 | no | +| google-auth-oauthlib | 1.4.0 | Apache-2.0 | no | +| google-cloud-aiplatform | 1.160.0 | Apache-2.0 | no | +| google-cloud-bigquery | 3.42.2 | Apache-2.0 | no | +| google-cloud-core | 2.6.0 | Apache-2.0 | no | +| google-cloud-resource-manager | 1.18.0 | Apache-2.0 | no | +| google-cloud-storage | 3.12.1 | Apache-2.0 | no | +| google-crc32c | 1.8.0 | Apache-2.0 | no | +| google-genai | 2.11.0 | Apache-2.0 | no | +| google-resumable-media | 2.10.0 | Apache-2.0 | no | +| googleapis-common-protos | 1.75.0 | Apache-2.0 | no | +| gopd | 1.2.0 | MIT | no | +| gql | 4.0.0 | MIT | no | +| graceful-fs | 4.2.11 | ISC | no | +| graphql-core | 3.2.11 | MIT | no | +| greenlet | 3.5.3 | MIT AND PSF-2.0 | no | +| griffelib | 2.1.0 | ISC | no | +| grpc-google-iam-v1 | 0.14.4 | Apache-2.0 | no | +| grpcio | 1.81.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | yes | +| grpcio | 1.82.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | yes | +| grpcio-status | 1.81.1 | Apache-2.0 AND BSD-3-Clause AND MPL-2.0 | yes | +| h11 | 0.16.0 | MIT | no | +| has-bigints | 1.1.0 | MIT | no | +| has-flag | 4.0.0 | MIT | no | +| has-property-descriptors | 1.0.2 | MIT | no | +| has-proto | 1.2.0 | MIT | no | +| has-symbols | 1.1.0 | MIT | no | +| has-tostringtag | 1.0.2 | MIT | no | +| hasown | 2.0.4 | MIT | no | +| hermes-estree | 0.25.1 | MIT | no | +| hermes-parser | 0.25.1 | MIT | no | +| hf-xet | 1.5.1 | Apache-2.0 | no | +| html-encoding-sniffer | 6.0.0 | MIT | no | +| html-escaper | 2.0.2 | MIT | no | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpcore2 | 2.5.0 | BSD-2-Clause AND BSD-3-Clause | no | +| httplib2 | 0.32.0 | MIT | no | +| httpx | 0.28.1 | BSD-3-Clause | no | +| httpx-sse | 0.4.3 | MIT | no | +| httpx2 | 2.5.0 | BSD-2-Clause AND BSD-3-Clause | no | +| huggingface-hub | 1.23.0 | Apache-2.0 | no | +| icalendar | 7.2.0 | BSD-2-Clause AND BSD-3-Clause | no | +| idna | 3.18 | BSD-3-Clause | no | +| ignore | 5.3.2 | MIT | no | +| ignore | 7.0.6 | MIT | no | +| import-fresh | 3.3.1 | MIT | no | +| importlib-metadata | 8.9.0 | Apache-2.0 | no | +| imurmurhash | 0.1.4 | MIT | no | +| iniconfig | 2.3.0 | MIT | no | +| internal-slot | 1.1.0 | MIT | no | +| is-array-buffer | 3.0.5 | MIT | no | +| is-async-function | 2.1.1 | MIT | no | +| is-bigint | 1.1.0 | MIT | no | +| is-boolean-object | 1.2.2 | MIT | no | +| is-bun-module | 2.0.0 | MIT | no | +| is-callable | 1.2.7 | MIT | no | +| is-core-module | 2.16.2 | MIT | no | +| is-data-view | 1.0.2 | MIT | no | +| is-date-object | 1.1.0 | MIT | no | +| is-document.all | 1.0.0 | MIT | no | +| is-extglob | 2.1.1 | MIT | no | +| is-finalizationregistry | 1.1.1 | MIT | no | +| is-generator-function | 1.1.2 | MIT | no | +| is-glob | 4.0.3 | MIT | no | +| is-map | 2.0.3 | MIT | no | +| is-negative-zero | 2.0.3 | MIT | no | +| is-number | 7.0.0 | MIT | no | +| is-number-object | 1.1.1 | MIT | no | +| is-potential-custom-element-name | 1.0.1 | MIT | no | +| is-regex | 1.2.1 | MIT | no | +| is-set | 2.0.3 | MIT | no | +| is-shared-array-buffer | 1.0.4 | MIT | no | +| is-string | 1.1.1 | MIT | no | +| is-symbol | 1.1.1 | MIT | no | +| is-typed-array | 1.1.15 | MIT | no | +| is-weakmap | 2.0.2 | MIT | no | +| is-weakref | 1.1.1 | MIT | no | +| is-weakset | 2.0.4 | MIT | no | +| isarray | 2.0.5 | MIT | no | +| isexe | 2.0.0 | ISC | no | +| istanbul-lib-coverage | 3.2.2 | BSD-3-Clause | no | +| istanbul-lib-report | 3.0.1 | BSD-3-Clause | no | +| istanbul-reports | 3.2.0 | BSD-3-Clause | no | +| iterator.prototype | 1.1.5 | MIT | no | +| jinja2 | 3.1.6 | BSD-2-Clause AND BSD-3-Clause | no | +| jiter | 0.16.0 | MIT | no | +| jiti | 2.7.0 | MIT | no | +| js-tokens | 10.0.0 | MIT | no | +| js-tokens | 4.0.0 | MIT | no | +| js-yaml | 4.3.0 | MIT | no | +| jschema-to-python | 1.2.3 | MIT | no | +| jsdom | 30.0.1 | MIT | no | +| jsesc | 3.1.0 | MIT | no | +| json-buffer | 3.0.1 | MIT | no | +| json-schema-traverse | 0.4.1 | MIT | no | +| json-stable-stringify-without-jsonify | 1.0.1 | MIT | no | +| json5 | 1.0.2 | MIT | no | +| json5 | 2.2.3 | MIT | no | +| jsonpatch | 1.33 | BSD-3-Clause | no | +| jsonpickle | 4.1.2 | BSD-3-Clause | no | +| jsonpointer | 3.1.1 | BSD-3-Clause | no | +| jsonschema | 4.26.0 | MIT | no | +| jsonschema-specifications | 2025.9.1 | MIT | no | +| jsx-ast-utils | 3.3.5 | MIT | no | +| keycharm | 0.4.0 | Apache-2.0 AND MIT | no | +| keyv | 4.5.4 | MIT | no | +| langchain-core | 1.4.8 | MIT | no | +| langchain-core | 1.4.9 | MIT | no | +| langchain-protocol | 0.0.18 | MIT | no | +| langchain-text-splitters | 1.1.2 | MIT | no | +| langsmith | 0.10.1 | MIT | no | +| langsmith | 0.10.2 | MIT | no | +| langsmith | 0.9.4 | MIT | no | +| language-subtag-registry | 0.3.23 | CC0-1.0 | no | +| language-tags | 1.0.9 | MIT | no | +| levn | 0.4.1 | MIT | no | +| lightningcss | 1.32.0 | MPL-2.0 | yes | +| lightningcss | 1.33.0 | MPL-2.0 | yes | +| lightningcss-android-arm64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-arm64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-x64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-freebsd-x64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm-gnueabihf | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-gnu | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-musl | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-gnu | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-musl | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-arm64-msvc | 1.32.0 | MPL-2.0 | yes | +| lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-x64-msvc | 1.32.0 | MPL-2.0 | yes | +| lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | yes | +| linkify-it-py | 2.1.0 | MIT | no | +| litellm | 1.89.2 | MIT | no | +| locate-path | 6.0.0 | MIT | no | +| lodash.merge | 4.6.2 | MIT | no | +| logfire-api | 4.37.0 | MIT | no | +| loose-envify | 1.4.0 | MIT | no | +| lru-cache | 11.5.2 | BlueOak-1.0.0 | no | +| lru-cache | 5.1.1 | ISC | no | +| lucide-react | 1.27.0 | ISC | no | +| magic-string | 0.30.21 | MIT | no | +| magicast | 0.5.3 | MIT | no | +| make-dir | 4.0.0 | MIT | no | +| mako | 1.3.12 | MIT | no | +| markdown-it-py | 4.2.0 | MIT | no | +| markupsafe | 3.0.3 | BSD-3-Clause | no | +| math-intrinsics | 1.1.0 | MIT | no | +| mcp | 1.28.1 | MIT AND Python-2.0 | no | +| mdit-py-plugins | 0.6.1 | MIT | no | +| mdn-data | 2.27.1 | CC0-1.0 | no | +| mdurl | 0.1.2 | MIT | no | +| merge2 | 1.4.1 | MIT | no | +| micromatch | 4.0.8 | MIT | no | +| minimatch | 10.2.6 | BlueOak-1.0.0 | no | +| minimatch | 3.1.5 | ISC | no | +| minimist | 1.2.8 | MIT | no | +| ms | 2.1.3 | MIT | no | +| multidict | 6.7.1 | Apache-2.0 | no | +| nanoid | 3.3.18 | MIT | no | +| napi-postinstall | 0.3.4 | MIT | no | +| naruon-backend | 0.14.4 | NOASSERTION | yes | +| natural-compare | 1.4.0 | MIT | no | +| next | 16.2.12 | MIT | no | +| node-exports-info | 1.6.2 | MIT | no | +| node-releases | 2.0.51 | MIT | no | +| numpy | 2.5.0 | BSD-3-Clause | no | +| oauthlib | 3.3.1 | BSD-3-Clause | no | +| object-assign | 4.1.1 | MIT | no | +| object-inspect | 1.13.4 | MIT | no | +| object-keys | 1.1.1 | MIT | no | +| object.assign | 4.1.7 | MIT | no | +| object.entries | 1.1.9 | MIT | no | +| object.fromentries | 2.0.8 | MIT | no | +| object.groupby | 1.0.3 | MIT | no | +| object.values | 1.2.1 | MIT | no | +| obug | 2.1.3 | MIT | no | +| openai | 2.44.0 | Apache-2.0 | no | +| openai | 2.45.0 | Apache-2.0 | no | +| openai-agents | 0.14.6 | MIT | no | +| opentelemetry-api | 1.43.0 | Apache-2.0 | no | +| opentelemetry-exporter-otlp | 1.43.0 | Apache-2.0 | no | +| opentelemetry-exporter-otlp-proto-common | 1.43.0 | Apache-2.0 | no | +| opentelemetry-exporter-otlp-proto-grpc | 1.43.0 | Apache-2.0 | no | +| opentelemetry-exporter-otlp-proto-http | 1.43.0 | Apache-2.0 | no | +| opentelemetry-instrumentation | 0.64b0 | Apache-2.0 | no | +| opentelemetry-instrumentation-asgi | 0.64b0 | Apache-2.0 | no | +| opentelemetry-instrumentation-fastapi | 0.64b0 | Apache-2.0 | no | +| opentelemetry-proto | 1.43.0 | Apache-2.0 | no | +| opentelemetry-sdk | 1.43.0 | Apache-2.0 | no | +| opentelemetry-semantic-conventions | 0.64b0 | Apache-2.0 | no | +| opentelemetry-util-http | 0.64b0 | Apache-2.0 | no | +| optionator | 0.9.4 | MIT | no | +| orjson | 3.11.9 | Apache-2.0 AND MIT AND MPL-2.0 | yes | +| own-keys | 1.0.2 | MIT | no | +| p-limit | 3.1.0 | MIT | no | +| p-locate | 5.0.0 | MIT | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| parent-module | 1.0.1 | MIT | no | +| parse5 | 8.0.1 | MIT | no | +| path-exists | 4.0.0 | MIT | no | +| path-key | 3.1.1 | MIT | no | +| path-parse | 1.0.7 | MIT | no | +| pathe | 2.0.3 | MIT | no | +| pbr | 7.0.3 | Apache-2.0 | no | +| pgvector | 0.4.2 | MIT | no | +| pgvector | 0.5.0 | MIT | no | +| picocolors | 1.1.1 | ISC | no | +| picomatch | 2.3.2 | MIT | no | +| picomatch | 4.0.5 | MIT | no | +| platformdirs | 4.10.0 | MIT | no | +| playwright | 1.62.0 | Apache-2.0 | no | +| playwright-core | 1.62.0 | Apache-2.0 | no | +| pluggy | 1.6.0 | MIT | no | +| possible-typed-array-names | 1.1.0 | MIT | no | +| postcss | 8.5.24 | MIT | no | +| prelude-ls | 1.2.1 | MIT | no | +| prometheus-client | 0.25.0 | Apache-2.0 AND BSD-2-Clause | no | +| prometheus-fastapi-instrumentator | 8.0.2 | BSD-2-Clause AND BSD-3-Clause AND ISC AND MIT | no | +| prop-types | 15.8.1 | MIT | no | +| propcache | 0.5.2 | Apache-2.0 | no | +| proto-plus | 1.28.0 | Apache-2.0 | no | +| proto-plus | 1.28.1 | Apache-2.0 | no | +| protobuf | 6.33.6 | BSD-3-Clause AND LicenseRef-scancode-protobuf | no | +| protobuf | 7.35.1 | BSD-3-Clause AND LicenseRef-scancode-protobuf | no | +| punycode | 2.3.1 | MIT | no | +| pure-rand | 8.4.2 | MIT | no | +| pyasn1 | 0.6.3 | BSD-2-Clause AND BSD-3-Clause AND MIT | no | +| pyasn1 | 0.6.4 | BSD-2-Clause AND BSD-3-Clause AND MIT | no | +| pyasn1-modules | 0.4.2 | BSD-2-Clause AND BSD-3-Clause | no | +| pycparser | 3.0 | BSD-3-Clause | no | +| pydantic | 2.13.4 | MIT | no | +| pydantic-ai-slim | 2.9.0 | MIT | no | +| pydantic-core | 2.46.4 | MIT | no | +| pydantic-graph | 2.9.0 | MIT | no | +| pydantic-settings | 2.14.2 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pyjwt | 2.13.0 | MIT | no | +| pyparsing | 3.3.2 | MIT AND Python-2.0 | no | +| pytest | 9.1.1 | MIT | no | +| pytest-asyncio | 1.4.0 | Apache-2.0 | no | +| python-dateutil | 2.9.0.post0 | Apache-2.0 AND BSD-3-Clause | no | +| python-dotenv | 1.2.2 | BSD-3-Clause | no | +| python-multipart | 0.0.32 | Apache-2.0 | no | +| pyyaml | 6.0.3 | MIT | no | +| queue-microtask | 1.2.3 | MIT | no | +| rankweave | 0.1.0 | NOASSERTION | yes | +| react | 19.2.8 | MIT | no | +| react-dom | 19.2.8 | MIT | no | +| react-is | 16.13.1 | MIT | no | +| react-resizable-panels | 4.12.2 | MIT | no | +| referencing | 0.37.0 | MIT | no | +| reflect.getprototypeof | 1.0.10 | MIT | no | +| regex | 2026.6.28 | CNRI-Python AND Apache-2.0 | no | +| regex | 2026.7.10 | CNRI-Python AND Apache-2.0 | no | +| regexp.prototype.flags | 1.5.4 | MIT | no | +| requests | 2.34.2 | Apache-2.0 | no | +| requests-oauthlib | 2.0.0 | ISC | no | +| requests-toolbelt | 1.0.0 | Apache-2.0 | no | +| require-from-string | 2.0.2 | MIT | no | +| reselect | 5.2.0 | MIT | no | +| resolve | 2.0.0-next.7 | MIT | no | +| resolve-from | 4.0.0 | MIT | no | +| resolve-pkg-maps | 1.0.0 | MIT | no | +| reusify | 1.1.0 | MIT | no | +| rich | 15.0.0 | MIT | no | +| rolldown | 1.1.5 | MIT | no | +| rpds-py | 2026.6.3 | MIT | no | +| ruff | 0.15.20 | MIT | no | +| ruff | 0.15.21 | MIT | no | +| run-parallel | 1.2.0 | MIT | no | +| safe-array-concat | 1.1.4 | MIT | no | +| safe-push-apply | 1.0.0 | MIT | no | +| safe-regex-test | 1.1.0 | MIT | no | +| sarif-om | 1.0.4 | MIT | no | +| saxes | 6.0.0 | ISC | no | +| scheduler | 0.27.0 | MIT | no | +| semver | 6.3.1 | ISC | no | +| semver | 7.8.5 | ISC | no | +| set-function-length | 1.2.2 | MIT | no | +| set-function-name | 2.0.2 | MIT | no | +| set-proto | 1.0.0 | MIT | no | +| setuptools | 82.0.1 | MIT | no | +| setuptools | 83.0.0 | MIT | no | +| sharp | 0.35.0 | Apache-2.0 | no | +| shebang-command | 2.0.0 | MIT | no | +| shebang-regex | 3.0.0 | MIT | no | +| side-channel | 1.1.1 | MIT | no | +| side-channel-list | 1.0.1 | MIT | no | +| side-channel-map | 1.0.1 | MIT | no | +| side-channel-weakmap | 1.0.2 | MIT | no | +| siginfo | 2.0.0 | ISC | no | +| six | 1.17.0 | MIT | no | +| sniffio | 1.3.1 | Apache-2.0 AND MIT | no | +| source-map-js | 1.2.1 | BSD-3-Clause | no | +| sqlalchemy | 2.0.51 | MIT | no | +| sse-starlette | 3.4.5 | BSD-3-Clause | no | +| stable-hash | 0.0.5 | MIT | no | +| stackback | 0.0.2 | MIT | no | +| starlette | 1.3.1 | BSD-3-Clause | no | +| std-env | 4.2.0 | MIT | no | +| step-security/harden-runner | bf7454d06d71f1098171f2acdf0cd4708d7b5920 | NOASSERTION | yes | +| stevedore | 5.9.0 | Apache-2.0 | no | +| stop-iteration-iterator | 1.1.0 | MIT | no | +| string.prototype.includes | 2.0.1 | MIT | no | +| string.prototype.matchall | 4.0.12 | MIT | no | +| string.prototype.repeat | 1.0.0 | MIT | no | +| string.prototype.trim | 1.2.11 | MIT | no | +| string.prototype.trimend | 1.0.10 | MIT | no | +| string.prototype.trimstart | 1.0.8 | MIT | no | +| strip-bom | 3.0.0 | MIT | no | +| strip-json-comments | 3.1.1 | MIT | no | +| strix-agent | 1.0.4 | Apache-2.0 | no | +| styled-jsx | 5.1.6 | MIT | no | +| supports-color | 7.2.0 | MIT | no | +| supports-preserve-symlinks-flag | 1.0.0 | MIT | no | +| symbol-tree | 3.2.4 | MIT | no | +| tailwind-merge | 3.6.0 | MIT | no | +| tailwindcss | 4.3.3 | MIT | no | +| tapable | 2.3.3 | MIT | no | +| tenacity | 9.1.4 | Apache-2.0 | no | +| textual | 8.2.8 | MIT | no | +| tiktoken | 0.13.0 | MIT | no | +| tinybench | 2.9.0 | MIT | no | +| tinyexec | 1.2.4 | MIT | no | +| tinyglobby | 0.2.17 | MIT | no | +| tinyrainbow | 3.1.0 | MIT | no | +| tldts | 7.4.9 | MIT | no | +| tldts-core | 7.4.9 | MIT | no | +| to-regex-range | 5.0.1 | MIT | no | +| tokenizers | 0.23.1 | Apache-2.0 | no | +| tough-cookie | 6.0.2 | BSD-3-Clause | no | +| tqdm | 4.68.3 | MIT AND MPL-2.0 | yes | +| tqdm | 4.68.4 | MIT AND MPL-2.0 | yes | +| tr46 | 6.0.0 | MIT | no | +| truststore | 0.10.4 | MIT | no | +| ts-api-utils | 2.5.0 | MIT | no | +| tsconfig-paths | 3.15.0 | MIT | no | +| tslib | 2.8.1 | 0BSD | no | +| tw-animate-css | 1.4.0 | MIT | no | +| type-check | 0.4.0 | MIT | no | +| typed-array-buffer | 1.0.3 | MIT | no | +| typed-array-byte-length | 1.0.3 | MIT | no | +| typed-array-byte-offset | 1.0.4 | MIT | no | +| typed-array-length | 1.0.8 | MIT | no | +| types-requests | 2.33.0.20260712 | Apache-2.0 AND MIT | no | +| typescript | 6.0.3 | Apache-2.0 | no | +| typescript-eslint | 8.65.0 | MIT | no | +| typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.2 | MIT | no | +| tzdata | 2026.2 | Apache-2.0 | no | +| tzdata | 2026.3 | Apache-2.0 | no | +| uc-micro-py | 2.0.0 | MIT | no | +| unbox-primitive | 1.1.0 | MIT | no | +| undici | 8.9.0 | MIT | no | +| undici-types | 8.3.0 | MIT | no | +| unrs-resolver | 1.12.2 | Apache-2.0 AND MIT | no | +| update-browserslist-db | 1.2.3 | MIT | no | +| uri-js | 4.4.1 | BSD-2-Clause AND BSD-2-Clause-Views | no | +| uritemplate | 4.2.0 | Apache-2.0 OR BSD-3-Clause OR (Apache-2.0 AND BSD-3-Clause) | no | +| urllib3 | 2.7.0 | MIT | no | +| use-sync-external-store | 1.6.0 | MIT | no | +| uuid | 14.0.1 | MIT | no | +| uuid-utils | 0.16.2 | BSD-3-Clause | no | +| uuid-utils | 0.17.0 | BSD-3-Clause | no | +| uvicorn | 0.49.0 | BSD-3-Clause | no | +| uvicorn | 0.51.0 | BSD-3-Clause | no | +| vis-data | 8.0.4 | (Apache-2.0 OR MIT) | no | +| vis-network | 10.1.0 | MIT OR (Apache-2.0 AND MIT) | no | +| vis-util | 6.0.0 | (Apache-2.0 OR MIT) | no | +| vite | 8.1.4 | MIT | no | +| vitest | 4.1.10 | MIT | no | +| w3c-xmlserializer | 5.0.0 | MIT | no | +| webidl-conversions | 8.0.1 | BSD-2-Clause | no | +| websockets | 15.0.1 | BSD-3-Clause | no | +| websockets | 16.0 | BSD-3-Clause | no | +| websockets | 16.1 | BSD-3-Clause | no | +| whatwg-mimetype | 5.0.0 | MIT | no | +| whatwg-url | 16.0.1 | MIT | no | +| whatwg-url | 17.1.0 | MIT | no | +| wheel | 0.47.0 | MIT | no | +| which | 2.0.2 | ISC | no | +| which-boxed-primitive | 1.1.1 | MIT | no | +| which-builtin-type | 1.2.1 | MIT | no | +| which-collection | 1.0.2 | MIT | no | +| which-typed-array | 1.1.22 | MIT | no | +| why-is-node-running | 2.3.0 | MIT | no | +| word-wrap | 1.2.5 | MIT | no | +| wrapt | 2.2.2 | BSD-2-Clause AND BSD-3-Clause AND Python-2.0 AND Ruby | no | +| xml-name-validator | 5.0.0 | Apache-2.0 | no | +| xmlchars | 2.2.0 | MIT | no | +| xxhash | 3.8.0 | BSD-2-Clause | no | +| xxhash | 3.8.1 | BSD-2-Clause | no | +| yallist | 3.1.1 | ISC | no | +| yarl | 1.24.2 | Apache-2.0 | no | +| yocto-queue | 0.1.0 | MIT | no | +| zipp | 4.1.0 | MIT | no | +| zod | 4.4.3 | MIT | no | +| zod-validation-error | 4.0.2 | MIT | no | +| zstandard | 0.25.0 | BSD-3-Clause | no | + +### ContextualWisdomLab/newsdom-api + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/attest-build-provenance | 0f67c3f4856b2e3261c31976d6725780e5e4c373 | NOASSERTION | yes | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/dependency-review-action | a1d282b36b6f3519aa1f3fc636f609c47dddb294 | NOASSERTION | yes | +| actions/deploy-pages | cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| altgraph | 0.17.5 | MIT AND MIT-0 | no | +| annotated-doc | 0.0.4 | MIT | no | +| annotated-types | 0.7.0 | MIT | no | +| anyio | 4.13.0 | MIT | no | +| astral-sh/setup-uv | c771a70e6277c0a99b617c7a806ffedaca235ff9 | NOASSERTION | yes | +| atheris | 3.0.0 | Apache-2.0 | no | +| atheris | 3.1.0 | Apache-2.0 | no | +| babel | 2.18.0 | BSD-3-Clause | no | +| backports-asyncio-runner | 1.2.0 | NOASSERTION | yes | +| backrefs | 5.9 | MIT | no | +| certifi | 2026.2.25 | MPL-2.0 | yes | +| charset-normalizer | 3.4.7 | MIT | no | +| click | 8.4.2 | BSD-3-Clause | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| coverage | 7.13.5 | Apache-2.0 | no | +| docker/build-push-action | 53b7df96c91f9c12dcc8a07bcb9ccacbed38856a | NOASSERTION | yes | +| docker/login-action | dbcb813823bdd20940b903addbd779551569679f | NOASSERTION | yes | +| docker/metadata-action | dc802804100637a589fabce1cb79ff13a1411302 | NOASSERTION | yes | +| docker/setup-buildx-action | bb05f3f5519dd87d3ba754cc423b652a5edd6d2c | NOASSERTION | yes | +| docker/setup-qemu-action | 96fe6ef7f33517b61c61be40b68a1882f3264fb8 | NOASSERTION | yes | +| exceptiongroup | 1.3.1 | MIT AND Python-2.0 | no | +| fastapi | 0.135.3 | MIT | no | +| ghp-import | 2.1.0 | Apache-2.0 | no | +| github/codeql-action/analyze | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | yes | +| github/codeql-action/autobuild | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | yes | +| github/codeql-action/init | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | yes | +| github/codeql-action/upload-sarif | f205ea1c3313d32999d8d6a48b4f6530d4437b38 | NOASSERTION | yes | +| google/clusterfuzzlite/actions/build_fuzzers | 52ecc61cb587ee99c26825a112a21abf19c7448c | NOASSERTION | yes | +| google/clusterfuzzlite/actions/run_fuzzers | 52ecc61cb587ee99c26825a112a21abf19c7448c | NOASSERTION | yes | +| h11 | 0.16.0 | MIT | no | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpcore2 | 2.4.0 | BSD-2-Clause AND BSD-3-Clause | no | +| httpx | 0.28.1 | BSD-3-Clause | no | +| httpx2 | 2.4.0 | BSD-2-Clause AND BSD-3-Clause | no | +| idna | 3.18 | BSD-3-Clause | no | +| iniconfig | 2.3.0 | MIT | no | +| jinja2 | 3.1.6 | BSD-2-Clause AND BSD-3-Clause | no | +| macholib | 1.16.4 | MIT | no | +| markdown | 3.10.2 | BSD-3-Clause | no | +| markupsafe | 3.0.3 | BSD-3-Clause | no | +| mergedeep | 1.3.4 | MIT | no | +| mkdocs | 1.6.1 | BSD-2-Clause AND BSD-3-Clause | no | +| mkdocs-get-deps | 0.2.2 | MIT | no | +| mkdocs-material | 9.7.7 | MIT | no | +| mkdocs-material-extensions | 1.3.1 | MIT | no | +| newsdom-api | 0.2.0 | NOASSERTION | yes | +| ossf/scorecard-action | 2d1146689b8cda280b9bc96326124645441f03bc | NOASSERTION | yes | +| packaging | 26.0 | Apache-2.0 AND BSD-2-Clause | no | +| paginate | 0.5.7 | MIT | no | +| pathspec | 1.0.4 | MPL-2.0 | yes | +| pefile | 2023.2.7 | MIT | no | +| pillow | 12.3.0 | MIT-CMU | no | +| platformdirs | 4.9.6 | MIT | no | +| pluggy | 1.6.0 | MIT | no | +| pydantic | 2.12.5 | MIT | no | +| pydantic-core | 2.41.5 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pyinstaller | 6.21.0 | GPL-2.0-only AND GPL-2.0-or-later | yes | +| pyinstaller-hooks-contrib | 2026.6 | Apache-2.0 AND GPL-1.0-or-later AND GPL-2.0-only AND GPL-2.0-or-later | yes | +| pymdown-extensions | 11.0.1 | BSD-3-Clause AND MIT | no | +| pypdf | 6.15.0 | BSD-3-Clause | no | +| pytest | 9.0.3 | MIT | no | +| pytest-asyncio | 1.3.0 | Apache-2.0 | no | +| pytest-cov | 7.1.0 | MIT | no | +| python-dateutil | 2.9.0.post0 | Apache-2.0 AND BSD-3-Clause | no | +| python-multipart | 0.0.31 | Apache-2.0 | no | +| pywin32-ctypes | 0.2.3 | BSD-3-Clause | no | +| pyyaml | 6.0.3 | MIT | no | +| pyyaml-env-tag | 1.1 | MIT | no | +| reportlab | 4.4.10 | BSD-2-Clause AND BSD-3-Clause | no | +| requests | 2.33.1 | Apache-2.0 | no | +| setuptools | 83.0.0 | MIT | no | +| six | 1.17.0 | MIT | no | +| starlette | 1.3.1 | BSD-3-Clause | no | +| tomli | 2.4.1 | MIT | no | +| truststore | 0.10.4 | MIT | no | +| typing-extensions | 4.15.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.2 | MIT | no | +| urllib3 | 2.7.0 | MIT | no | +| uvicorn | 0.44.0 | BSD-3-Clause | no | +| watchdog | 6.0.0 | Apache-2.0 AND Python-2.0 | no | + +### ContextualWisdomLab/noema + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @babel/helper-string-parser | 7.29.7 | MIT | no | +| @babel/helper-validator-identifier | 7.29.7 | MIT | no | +| @babel/parser | 7.29.7 | MIT | no | +| @babel/types | 7.29.7 | MIT | no | +| @bcoe/v8-coverage | 1.0.2 | ISC AND MIT | no | +| @cloudflare/kv-asset-handler | 0.5.0 | MIT OR Apache-2.0 | no | +| @cloudflare/unenv-preset | 2.16.1 | MIT OR Apache-2.0 | no | +| @cloudflare/workerd-darwin-64 | 1.20260625.1 | Apache-2.0 | no | +| @cloudflare/workerd-darwin-arm64 | 1.20260625.1 | Apache-2.0 | no | +| @cloudflare/workerd-linux-64 | 1.20260625.1 | Apache-2.0 | no | +| @cloudflare/workerd-linux-arm64 | 1.20260625.1 | Apache-2.0 | no | +| @cloudflare/workerd-windows-64 | 1.20260625.1 | Apache-2.0 | no | +| @cloudflare/workers-types | 4.20260630.1 | MIT OR Apache-2.0 | no | +| @colbymchenry/codegraph | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-darwin-arm64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-darwin-x64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-linux-arm64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-linux-x64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-win32-arm64 | 1.4.1 | MIT | no | +| @colbymchenry/codegraph-win32-x64 | 1.4.1 | MIT | no | +| @cspotcode/source-map-support | 0.8.1 | MIT | no | +| @emnapi/core | 1.11.1 | MIT | no | +| @emnapi/runtime | 1.11.1 | MIT | no | +| @emnapi/wasi-threads | 1.2.2 | MIT | no | +| @esbuild/aix-ppc64 | 0.28.1 | MIT | no | +| @esbuild/android-arm | 0.28.1 | MIT | no | +| @esbuild/android-arm64 | 0.28.1 | MIT | no | +| @esbuild/android-x64 | 0.28.1 | MIT | no | +| @esbuild/darwin-arm64 | 0.28.1 | MIT | no | +| @esbuild/darwin-x64 | 0.28.1 | MIT | no | +| @esbuild/freebsd-arm64 | 0.28.1 | MIT | no | +| @esbuild/freebsd-x64 | 0.28.1 | MIT | no | +| @esbuild/linux-arm | 0.28.1 | MIT | no | +| @esbuild/linux-arm64 | 0.28.1 | MIT | no | +| @esbuild/linux-ia32 | 0.28.1 | MIT | no | +| @esbuild/linux-loong64 | 0.28.1 | MIT | no | +| @esbuild/linux-mips64el | 0.28.1 | MIT | no | +| @esbuild/linux-ppc64 | 0.28.1 | MIT | no | +| @esbuild/linux-riscv64 | 0.28.1 | MIT | no | +| @esbuild/linux-s390x | 0.28.1 | MIT | no | +| @esbuild/linux-x64 | 0.28.1 | MIT | no | +| @esbuild/netbsd-arm64 | 0.28.1 | MIT | no | +| @esbuild/netbsd-x64 | 0.28.1 | MIT | no | +| @esbuild/openbsd-arm64 | 0.28.1 | MIT | no | +| @esbuild/openbsd-x64 | 0.28.1 | MIT | no | +| @esbuild/openharmony-arm64 | 0.28.1 | MIT | no | +| @esbuild/sunos-x64 | 0.28.1 | MIT | no | +| @esbuild/win32-arm64 | 0.28.1 | MIT | no | +| @esbuild/win32-ia32 | 0.28.1 | MIT | no | +| @esbuild/win32-x64 | 0.28.1 | MIT | no | +| @img/colour | 1.1.0 | MIT | no | +| @img/sharp-darwin-arm64 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-darwin-x64 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-freebsd-wasm32 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-libvips-darwin-arm64 | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-darwin-x64 | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-arm | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-arm64 | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-ppc64 | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-riscv64 | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-s390x | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linux-x64 | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linuxmusl-arm64 | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-libvips-linuxmusl-x64 | 1.3.2 | LGPL-3.0-or-later | yes | +| @img/sharp-linux-arm | 0.35.3 | Apache-2.0 | no | +| @img/sharp-linux-arm64 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-linux-ppc64 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-linux-riscv64 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-linux-s390x | 0.35.3 | Apache-2.0 | no | +| @img/sharp-linux-x64 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-linuxmusl-arm64 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-linuxmusl-x64 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-wasm32 | 0.35.3 | Apache-2.0 AND LGPL-3.0-or-later AND MIT | yes | +| @img/sharp-webcontainers-wasm32 | 0.35.3 | Apache-2.0 | no | +| @img/sharp-win32-arm64 | 0.35.3 | Apache-2.0 AND LGPL-3.0-or-later | yes | +| @img/sharp-win32-ia32 | 0.35.3 | Apache-2.0 AND LGPL-3.0-or-later | yes | +| @img/sharp-win32-x64 | 0.35.3 | Apache-2.0 AND LGPL-3.0-or-later | yes | +| @jridgewell/resolve-uri | 3.1.2 | MIT | no | +| @jridgewell/sourcemap-codec | 1.5.5 | MIT | no | +| @jridgewell/trace-mapping | 0.3.31 | MIT | no | +| @jridgewell/trace-mapping | 0.3.9 | MIT | no | +| @napi-rs/wasm-runtime | 1.1.6 | MIT | no | +| @oxc-project/types | 0.137.0 | MIT | no | +| @poppinss/colors | 4.1.6 | MIT | no | +| @poppinss/dumper | 0.6.5 | MIT | no | +| @poppinss/exception | 1.2.3 | MIT | no | +| @rolldown/binding-android-arm64 | 1.1.3 | MIT | no | +| @rolldown/binding-darwin-arm64 | 1.1.3 | MIT | no | +| @rolldown/binding-darwin-x64 | 1.1.3 | MIT | no | +| @rolldown/binding-freebsd-x64 | 1.1.3 | MIT | no | +| @rolldown/binding-linux-arm-gnueabihf | 1.1.3 | MIT | no | +| @rolldown/binding-linux-arm64-gnu | 1.1.3 | MIT | no | +| @rolldown/binding-linux-arm64-musl | 1.1.3 | MIT | no | +| @rolldown/binding-linux-ppc64-gnu | 1.1.3 | MIT | no | +| @rolldown/binding-linux-s390x-gnu | 1.1.3 | MIT | no | +| @rolldown/binding-linux-x64-gnu | 1.1.3 | MIT | no | +| @rolldown/binding-linux-x64-musl | 1.1.3 | MIT | no | +| @rolldown/binding-openharmony-arm64 | 1.1.3 | MIT | no | +| @rolldown/binding-wasm32-wasi | 1.1.3 | MIT | no | +| @rolldown/binding-win32-arm64-msvc | 1.1.3 | MIT | no | +| @rolldown/binding-win32-x64-msvc | 1.1.3 | MIT | no | +| @rolldown/pluginutils | 1.0.1 | MIT | no | +| @sindresorhus/is | 7.2.0 | MIT | no | +| @speed-highlight/core | 1.2.17 | CC0-1.0 | no | +| @standard-schema/spec | 1.1.0 | MIT | no | +| @tybys/wasm-util | 0.10.3 | MIT | no | +| @types/chai | 5.2.3 | MIT | no | +| @types/deep-eql | 4.0.2 | MIT | no | +| @types/estree | 1.0.9 | MIT | no | +| @vitest/coverage-v8 | 4.1.9 | MIT | no | +| @vitest/expect | 4.1.9 | MIT | no | +| @vitest/mocker | 4.1.9 | MIT | no | +| @vitest/pretty-format | 4.1.9 | MIT | no | +| @vitest/runner | 4.1.9 | MIT | no | +| @vitest/snapshot | 4.1.9 | MIT | no | +| @vitest/spy | 4.1.9 | MIT | no | +| @vitest/utils | 4.1.9 | MIT | no | +| actions/attest | 59d89421af93a897026c735860bf21b6eb4f7b26 | NOASSERTION | yes | +| actions/checkout | 11bd71901bbe5b1630ceea73d27597364c9af683 | NOASSERTION | yes | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/checkout | de0fac2e4500dabe0009e67214ff5f5447ce83dd | NOASSERTION | yes | +| actions/create-github-app-token | bcd2ba49218906704ab6c1aa796996da409d3eb1 | NOASSERTION | yes | +| actions/download-artifact | d3f86a106a0bac45b974a628896c90dbdf5c8093 | NOASSERTION | yes | +| actions/setup-node | 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/setup-python | a26af69be951a213d495a4c3e4e4022e16d87065 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| annotated-types | 0.7.0 | MIT | no | +| anyio | 4.14.1 | MIT | no | +| aquasecurity/setup-trivy | 81e514348e19b6112ce2a7e3ecbafe19c1e1f567 | NOASSERTION | yes | +| assertion-error | 2.0.1 | MIT | no | +| ast-v8-to-istanbul | 1.0.4 | MIT | no | +| attrs | 26.1.0 | MIT | no | +| blake3-wasm | 2.1.5 | MIT | no | +| certifi | 2026.6.17 | MPL-2.0 | yes | +| chai | 6.2.2 | MIT | no | +| charset-normalizer | 3.4.9 | MIT | no | +| click | 8.4.2 | BSD-3-Clause | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| convert-source-map | 2.0.0 | MIT | no | +| cookie | 1.1.1 | MIT | no | +| coverage | 7.15.0 | Apache-2.0 | no | +| detect-libc | 2.1.2 | Apache-2.0 | no | +| distro | 1.9.0 | Apache-2.0 | no | +| docker/setup-buildx-action | 37fe631027851001ddb9b187196cc803df7f5f0e | NOASSERTION | yes | +| error-stack-parser-es | 1.0.5 | MIT | no | +| es-module-lexer | 2.2.0 | MIT | no | +| esbuild | 0.28.1 | MIT | no | +| estree-walker | 3.0.3 | MIT | no | +| expect-type | 1.4.0 | Apache-2.0 | no | +| fdir | 6.5.0 | MIT | no | +| fsevents | 2.3.3 | MIT | no | +| genai-prices | 0.0.71 | MIT | no | +| griffelib | 2.1.0 | ISC | no | +| h11 | 0.16.0 | MIT | no | +| has-flag | 4.0.0 | MIT | no | +| html-escaper | 2.0.2 | MIT | no | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpcore2 | 2.5.0 | BSD-2-Clause AND BSD-3-Clause | no | +| httpx | 0.28.1 | BSD-3-Clause | no | +| httpx2 | 2.5.0 | BSD-2-Clause AND BSD-3-Clause | no | +| idna | 3.18 | BSD-3-Clause | no | +| iniconfig | 2.3.0 | MIT | no | +| interrogate | — | NOASSERTION | yes | +| interrogate | 1.7.0 | MIT | no | +| istanbul-lib-coverage | 3.2.2 | BSD-3-Clause | no | +| istanbul-lib-report | 3.0.1 | BSD-3-Clause | no | +| istanbul-reports | 3.2.0 | BSD-3-Clause | no | +| jiter | 0.16.0 | MIT | no | +| js-tokens | 10.0.0 | MIT | no | +| kleur | 4.1.5 | MIT | no | +| lightningcss | 1.32.0 | MPL-2.0 | yes | +| lightningcss-android-arm64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-darwin-arm64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-darwin-x64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-freebsd-x64 | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-arm-gnueabihf | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-gnu | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-musl | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-gnu | 1.32.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-musl | 1.32.0 | MPL-2.0 | yes | +| lightningcss-win32-arm64-msvc | 1.32.0 | MPL-2.0 | yes | +| lightningcss-win32-x64-msvc | 1.32.0 | MPL-2.0 | yes | +| logfire-api | 4.37.0 | MIT | no | +| magic-string | 0.30.21 | MIT | no | +| magicast | 0.5.3 | MIT | no | +| make-dir | 4.0.0 | MIT | no | +| miniflare | 4.20260625.0 | MIT | no | +| nanoid | 3.3.18 | MIT | no | +| obug | 2.1.3 | MIT | no | +| openai | 2.45.0 | Apache-2.0 | no | +| opentelemetry-api | 1.43.0 | Apache-2.0 | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| path-to-regexp | 6.3.0 | MIT | no | +| pathe | 2.0.3 | MIT | no | +| picocolors | 1.1.1 | ISC | no | +| picomatch | 4.0.4 | MIT | no | +| pluggy | 1.6.0 | MIT | no | +| postcss | 8.5.25 | MIT | no | +| py | 1.11.0 | MIT | no | +| pydantic | — | NOASSERTION | yes | +| pydantic | 2.13.4 | MIT | no | +| pydantic-ai-slim | — | NOASSERTION | yes | +| pydantic-ai-slim | 2.9.0 | MIT | no | +| pydantic-core | 2.46.4 | MIT | no | +| pydantic-graph | 2.9.0 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pytest | — | NOASSERTION | yes | +| pytest | 9.1.1 | MIT | no | +| pytest-cov | — | NOASSERTION | yes | +| pytest-cov | 7.1.0 | MIT | no | +| regex | 2026.7.10 | CNRI-Python AND Apache-2.0 | no | +| requests | 2.34.2 | Apache-2.0 | no | +| rolldown | 1.1.3 | MIT | no | +| semver | 7.8.5 | ISC | no | +| setuptools | — | NOASSERTION | yes | +| sharp | 0.35.3 | Apache-2.0 | no | +| siginfo | 2.0.0 | ISC | no | +| sigstore/cosign-installer | 6f9f17788090df1f26f669e9d70d6ae9567deba6 | NOASSERTION | yes | +| sniffio | 1.3.1 | Apache-2.0 AND MIT | no | +| source-map-js | 1.2.1 | BSD-3-Clause | no | +| stackback | 0.0.2 | MIT | no | +| std-env | 4.1.0 | MIT | no | +| supports-color | 10.2.2 | MIT | no | +| supports-color | 7.2.0 | MIT | no | +| tabulate | 0.10.0 | MIT | no | +| tiktoken | 0.13.0 | MIT | no | +| tinybench | 2.9.0 | MIT | no | +| tinyexec | 1.2.4 | MIT | no | +| tinyglobby | 0.2.17 | MIT | no | +| tinyrainbow | 3.1.0 | MIT | no | +| tomli | 2.4.1 | MIT | no | +| tqdm | 4.68.4 | MIT AND MPL-2.0 | yes | +| truststore | 0.10.4 | MIT | no | +| tslib | 2.8.1 | 0BSD | no | +| typescript | 5.9.3 | Apache-2.0 | no | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.2 | MIT | no | +| undici | 7.29.0 | MIT | no | +| unenv | 2.0.0-rc.24 | MIT | no | +| urllib3 | 2.7.0 | MIT | no | +| vite | 8.1.1 | MIT | no | +| vitest | 4.1.9 | MIT | no | +| why-is-node-running | 2.3.0 | MIT | no | +| workerd | 1.20260625.1 | Apache-2.0 | no | +| wrangler | 4.105.0 | MIT OR Apache-2.0 | no | +| ws | 8.21.0 | MIT | no | +| youch | 4.1.0-beta.10 | MIT | no | +| youch-core | 0.3.3 | MIT | no | + +### ContextualWisdomLab/Orgmetra + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/OriginWeave + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | yes | +| asn1-rs | 0.7.2 | MIT OR Apache-2.0 | no | +| asn1-rs-derive | 0.6.0 | MIT OR Apache-2.0 | no | +| asn1-rs-impl | 0.2.0 | MIT OR Apache-2.0 | no | +| autocfg | 1.5.1 | Apache-2.0 OR MIT | no | +| base64 | 0.22.1 | MIT OR Apache-2.0 | no | +| bit-vec | 0.9.1 | Apache-2.0 OR MIT | no | +| block-buffer | 0.10.4 | MIT OR Apache-2.0 | no | +| cc | 1.4.0 | MIT OR Apache-2.0 | no | +| cfg-if | 1.0.4 | MIT OR Apache-2.0 | no | +| cpufeatures | 0.2.17 | MIT OR Apache-2.0 | no | +| crypto-common | 0.1.7 | MIT OR Apache-2.0 | no | +| data-encoding | 2.11.1 | MIT | no | +| der-parser | 10.0.0 | MIT OR Apache-2.0 | no | +| deranged | 0.5.8 | MIT OR Apache-2.0 | no | +| digest | 0.10.7 | MIT OR Apache-2.0 | no | +| displaydoc | 0.2.7 | MIT OR Apache-2.0 | no | +| dtolnay/rust-toolchain | 4be7066ada62dd38de10e7b70166bc74ed198c30 | NOASSERTION | yes | +| find-msvc-tools | 0.1.9 | MIT OR Apache-2.0 | no | +| generic-array | 0.14.7 | MIT | no | +| getrandom | 0.2.17 | MIT OR Apache-2.0 | no | +| lazy_static | 1.5.0 | MIT OR Apache-2.0 | no | +| libc | 0.2.189 | MIT OR Apache-2.0 | no | +| memchr | 2.8.3 | Unlicense OR MIT | no | +| minimal-lexical | 0.2.1 | MIT OR Apache-2.0 | no | +| nom | 7.1.3 | MIT | no | +| num-bigint | 0.4.8 | MIT OR Apache-2.0 | no | +| num-conv | 0.2.2 | MIT OR Apache-2.0 | no | +| num-integer | 0.1.46 | MIT OR Apache-2.0 | no | +| num-traits | 0.2.19 | MIT OR Apache-2.0 | no | +| oid-registry | 0.8.1 | MIT OR Apache-2.0 | no | +| once_cell | 1.21.4 | MIT OR Apache-2.0 | no | +| pem | 3.0.6 | MIT | no | +| powerfmt | 0.2.0 | MIT OR Apache-2.0 | no | +| proc-macro2 | 1.0.107 | MIT OR Apache-2.0 | no | +| quote | 1.0.47 | MIT OR Apache-2.0 | no | +| rcgen | 0.14.8 | MIT OR Apache-2.0 | no | +| ring | 0.17.14 | Apache-2.0 AND ISC | no | +| rusticata-macros | 4.1.0 | MIT OR Apache-2.0 | no | +| rustls | 0.23.42 | Apache-2.0 OR ISC OR MIT | no | +| rustls-pki-types | 1.15.1 | MIT OR Apache-2.0 | no | +| rustls-webpki | 0.103.13 | ISC | no | +| serde | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_core | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_derive | 1.0.229 | MIT OR Apache-2.0 | no | +| sha2 | 0.10.9 | MIT OR Apache-2.0 | no | +| shlex | 2.0.1 | MIT OR Apache-2.0 | no | +| step-security/harden-runner | bf7454d06d71f1098171f2acdf0cd4708d7b5920 | NOASSERTION | yes | +| subtle | 2.6.1 | BSD-3-Clause | no | +| syn | 2.0.119 | MIT OR Apache-2.0 | no | +| syn | 3.0.3 | MIT OR Apache-2.0 | no | +| synstructure | 0.13.2 | MIT | no | +| thiserror | 2.0.19 | MIT OR Apache-2.0 | no | +| thiserror-impl | 2.0.19 | MIT OR Apache-2.0 | no | +| time | 0.3.55 | MIT OR Apache-2.0 | no | +| time-core | 0.1.9 | MIT OR Apache-2.0 | no | +| time-macros | 0.2.32 | NOASSERTION | yes | +| tinyvec | 1.10.0 | Zlib OR Apache-2.0 OR MIT | no | +| tinyvec_macros | 0.1.1 | MIT OR Apache-2.0 OR Zlib | no | +| typenum | 1.20.1 | MIT OR Apache-2.0 | no | +| unicode-ident | 1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0 | no | +| unicode-normalization | 0.1.25 | MIT OR Apache-2.0 | no | +| untrusted | 0.9.0 | ISC | no | +| version_check | 0.9.5 | MIT OR Apache-2.0 | no | +| wasi | 0.11.1+wasi-snapshot-preview1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| windows-sys | 0.52.0 | MIT OR Apache-2.0 | no | +| windows-targets | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_aarch64_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_aarch64_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_gnu | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnu | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| x509-parser | 0.18.1 | MIT OR Apache-2.0 | no | +| yasna | 0.6.0 | MIT OR Apache-2.0 | no | +| zeroize | 1.9.0 | Apache-2.0 OR MIT | no | + +### ContextualWisdomLab/pg-erd-cloud + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @adobe/css-tools | 4.5.0 | MIT | no | +| @asamuzakjp/css-color | 6.0.5 | MIT | no | +| @asamuzakjp/dom-selector | 8.3.2 | MIT | no | +| @babel/code-frame | 7.29.7 | MIT | no | +| @babel/helper-string-parser | 7.29.7 | MIT | no | +| @babel/helper-validator-identifier | 7.29.7 | MIT | no | +| @babel/parser | 7.29.7 | MIT | no | +| @babel/runtime | 7.29.7 | MIT | no | +| @babel/types | 7.29.7 | MIT | no | +| @bcoe/v8-coverage | 1.0.2 | ISC AND MIT | no | +| @bramus/specificity | 2.4.2 | MIT | no | +| @csstools/color-helpers | 6.1.0 | MIT-0 | no | +| @csstools/css-calc | 3.3.0 | MIT | no | +| @csstools/css-color-parser | 4.1.10 | MIT | no | +| @csstools/css-parser-algorithms | 4.0.0 | MIT | no | +| @csstools/css-syntax-patches-for-csstree | 1.1.7 | MIT-0 | no | +| @csstools/css-tokenizer | 4.0.0 | MIT | no | +| @emnapi/core | 2.0.0-alpha.3 | MIT | no | +| @emnapi/runtime | 2.0.0-alpha.3 | MIT | no | +| @emnapi/wasi-threads | 2.0.1 | MIT | no | +| @exodus/bytes | 1.15.1 | MIT | no | +| @jridgewell/resolve-uri | 3.1.2 | MIT | no | +| @jridgewell/sourcemap-codec | 1.5.5 | MIT | no | +| @jridgewell/trace-mapping | 0.3.31 | MIT | no | +| @napi-rs/wasm-runtime | 1.2.2 | MIT | no | +| @oxc-project/types | 0.142.0 | MIT | no | +| @rolldown/binding-android-arm64 | 1.2.1 | MIT | no | +| @rolldown/binding-darwin-arm64 | 1.2.1 | MIT | no | +| @rolldown/binding-darwin-x64 | 1.2.1 | MIT | no | +| @rolldown/binding-freebsd-x64 | 1.2.1 | MIT | no | +| @rolldown/binding-linux-arm-gnueabihf | 1.2.1 | MIT | no | +| @rolldown/binding-linux-arm64-gnu | 1.2.1 | MIT | no | +| @rolldown/binding-linux-arm64-musl | 1.2.1 | MIT | no | +| @rolldown/binding-linux-ppc64-gnu | 1.2.1 | MIT | no | +| @rolldown/binding-linux-s390x-gnu | 1.2.1 | MIT | no | +| @rolldown/binding-linux-x64-gnu | 1.2.1 | MIT | no | +| @rolldown/binding-linux-x64-musl | 1.2.1 | MIT | no | +| @rolldown/binding-openharmony-arm64 | 1.2.1 | MIT | no | +| @rolldown/binding-wasm32-wasi | 1.2.1 | MIT | no | +| @rolldown/binding-win32-arm64-msvc | 1.2.1 | MIT | no | +| @rolldown/binding-win32-x64-msvc | 1.2.1 | MIT | no | +| @rolldown/pluginutils | 1.0.1 | MIT | no | +| @standard-schema/spec | 1.1.0 | MIT | no | +| @testing-library/dom | 10.4.1 | MIT | no | +| @testing-library/jest-dom | 6.9.1 | MIT | no | +| @testing-library/react | 16.3.2 | MIT | no | +| @testing-library/user-event | 14.6.4 | MIT | no | +| @tybys/wasm-util | 0.10.3 | MIT | no | +| @types/aria-query | 5.0.4 | MIT | no | +| @types/chai | 5.2.3 | MIT | no | +| @types/d3-color | 3.1.3 | MIT | no | +| @types/d3-drag | 3.0.7 | MIT | no | +| @types/d3-interpolate | 3.0.4 | MIT | no | +| @types/d3-selection | 3.0.11 | MIT | no | +| @types/d3-transition | 3.0.9 | MIT | no | +| @types/d3-zoom | 3.0.8 | MIT | no | +| @types/deep-eql | 4.0.2 | MIT | no | +| @types/estree | 1.0.9 | MIT | no | +| @types/react | 19.2.18 | MIT | no | +| @types/react-dom | 19.2.4 | MIT | no | +| @vitest/coverage-v8 | 4.1.10 | MIT | no | +| @vitest/expect | 4.1.10 | MIT | no | +| @vitest/mocker | 4.1.10 | MIT | no | +| @vitest/pretty-format | 4.1.10 | MIT | no | +| @vitest/runner | 4.1.10 | MIT | no | +| @vitest/snapshot | 4.1.10 | MIT | no | +| @vitest/spy | 4.1.10 | MIT | no | +| @vitest/utils | 4.1.10 | MIT | no | +| @xyflow/react | 12.11.3 | MIT | no | +| @xyflow/system | 0.0.80 | MIT | no | +| actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | yes | +| actions/setup-node | 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e | NOASSERTION | yes | +| actions/setup-python | ece7cb06caefa5fff74198d8649806c4678c61a1 | NOASSERTION | yes | +| aiohttp | — | NOASSERTION | yes | +| alembic | — | NOASSERTION | yes | +| ansi-regex | 5.0.1 | MIT | no | +| ansi-styles | 5.2.0 | MIT | no | +| aria-query | 5.3.0 | Apache-2.0 | no | +| assertion-error | 2.0.1 | MIT | no | +| ast-v8-to-istanbul | 1.0.4 | MIT | no | +| asyncpg | — | NOASSERTION | yes | +| asyncpg-stubs | — | NOASSERTION | yes | +| bidi-js | 1.0.3 | MIT | no | +| chai | 6.2.2 | MIT | no | +| classcat | 5.0.5 | MIT | no | +| convert-source-map | 2.0.0 | MIT | no | +| cryptography | — | NOASSERTION | yes | +| css-tree | 3.2.1 | MIT | no | +| css.escape | 1.5.1 | MIT | no | +| csstype | 3.2.3 | MIT | no | +| d3-color | 3.1.0 | ISC | no | +| d3-dispatch | 3.0.1 | ISC | no | +| d3-drag | 3.0.0 | ISC | no | +| d3-ease | 3.0.1 | BSD-3-Clause | no | +| d3-interpolate | 3.0.1 | ISC | no | +| d3-selection | 3.0.0 | ISC | no | +| d3-timer | 3.0.1 | ISC | no | +| d3-transition | 3.0.1 | ISC | no | +| d3-zoom | 3.0.0 | ISC | no | +| data-urls | 7.0.0 | MIT | no | +| decimal.js | 10.6.0 | MIT | no | +| dequal | 2.0.3 | MIT | no | +| detect-libc | 2.1.2 | Apache-2.0 | no | +| dom-accessibility-api | 0.5.16 | MIT | no | +| dom-accessibility-api | 0.6.3 | MIT | no | +| entities | 8.0.0 | BSD-2-Clause | no | +| es-module-lexer | 2.1.0 | MIT | no | +| estree-walker | 3.0.3 | MIT | no | +| expect-type | 1.3.0 | Apache-2.0 | no | +| fast-check | 4.8.0 | MIT | no | +| fastapi | — | NOASSERTION | yes | +| fdir | 6.5.0 | MIT | no | +| fsevents | 2.3.3 | MIT | no | +| github/codeql-action/analyze | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | yes | +| github/codeql-action/autobuild | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | yes | +| github/codeql-action/init | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | yes | +| has-flag | 4.0.0 | MIT | no | +| html-encoding-sniffer | 6.0.0 | MIT | no | +| html-escaper | 2.0.2 | MIT | no | +| httpx | — | NOASSERTION | yes | +| hypercorn | — | NOASSERTION | yes | +| indent-string | 4.0.0 | MIT | no | +| is-potential-custom-element-name | 1.0.1 | MIT | no | +| istanbul-lib-coverage | 3.2.2 | BSD-3-Clause | no | +| istanbul-lib-report | 3.0.1 | BSD-3-Clause | no | +| istanbul-reports | 3.2.0 | BSD-3-Clause | no | +| js-tokens | 10.0.0 | MIT | no | +| js-tokens | 4.0.0 | MIT | no | +| jsdom | 30.0.1 | MIT | no | +| lightningcss | 1.33.0 | MPL-2.0 | yes | +| lightningcss-android-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-arm64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-darwin-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-freebsd-x64 | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm-gnueabihf | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-arm64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-gnu | 1.33.0 | MPL-2.0 | yes | +| lightningcss-linux-x64-musl | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-arm64-msvc | 1.33.0 | MPL-2.0 | yes | +| lightningcss-win32-x64-msvc | 1.33.0 | MPL-2.0 | yes | +| lru-cache | 11.5.2 | BlueOak-1.0.0 | no | +| lz-string | 1.5.0 | MIT | no | +| magic-string | 0.30.21 | MIT | no | +| magicast | 0.5.3 | MIT | no | +| make-dir | 4.0.0 | MIT | no | +| mdn-data | 2.27.1 | CC0-1.0 | no | +| min-indent | 1.0.1 | MIT | no | +| mypy | — | NOASSERTION | yes | +| nanoid | 3.3.16 | MIT | no | +| obug | 2.1.3 | MIT | no | +| parse5 | 8.0.1 | MIT | no | +| pathe | 2.0.3 | MIT | no | +| picocolors | 1.1.1 | ISC | no | +| picomatch | 4.0.5 | MIT | no | +| postcss | 8.5.25 | MIT | no | +| pretty-format | 27.5.1 | MIT | no | +| prometheus-client | — | NOASSERTION | yes | +| psycopg | — | NOASSERTION | yes | +| punycode | 2.3.1 | MIT | no | +| pure-rand | 8.4.1 | MIT | no | +| pydantic | — | NOASSERTION | yes | +| pydantic-settings | — | NOASSERTION | yes | +| pyjwt | — | NOASSERTION | yes | +| pytest | — | NOASSERTION | yes | +| pytest-asyncio | — | NOASSERTION | yes | +| pytest-cov | — | NOASSERTION | yes | +| python-jose | — | NOASSERTION | yes | +| python-multipart | — | NOASSERTION | yes | +| react | 19.2.8 | MIT | no | +| react-dom | 19.2.8 | MIT | no | +| react-is | 17.0.2 | MIT | no | +| redent | 3.0.0 | MIT | no | +| redis | — | NOASSERTION | yes | +| requests | — | NOASSERTION | yes | +| require-from-string | 2.0.2 | MIT | no | +| rolldown | 1.2.1 | MIT | no | +| saxes | 6.0.0 | ISC | no | +| scheduler | 0.27.0 | MIT | no | +| semver | 7.8.5 | ISC | no | +| setuptools | — | NOASSERTION | yes | +| siginfo | 2.0.0 | ISC | no | +| snowflake-connector-python | — | NOASSERTION | yes | +| source-map-js | 1.2.1 | BSD-3-Clause | no | +| sqlalchemy | — | NOASSERTION | yes | +| stackback | 0.0.2 | MIT | no | +| starlette | — | NOASSERTION | yes | +| std-env | 4.1.0 | MIT | no | +| step-security/harden-runner | b09bb98e06d4d774595224525879c09bc6e98c40 | NOASSERTION | yes | +| strip-indent | 3.0.0 | MIT | no | +| supports-color | 7.2.0 | MIT | no | +| symbol-tree | 3.2.4 | MIT | no | +| tinybench | 2.9.0 | MIT | no | +| tinyexec | 1.2.4 | MIT | no | +| tinyglobby | 0.2.17 | MIT | no | +| tinyrainbow | 3.1.0 | MIT | no | +| tldts | 7.4.10 | MIT | no | +| tldts-core | 7.4.10 | MIT | no | +| tough-cookie | 6.0.2 | BSD-3-Clause | no | +| tr46 | 6.0.0 | MIT | no | +| tslib | 2.8.1 | 0BSD | no | +| types-python-jose | — | NOASSERTION | yes | +| typescript | 6.0.3 | Apache-2.0 | no | +| undici | 8.10.0 | MIT | no | +| urllib3 | — | NOASSERTION | yes | +| use-sync-external-store | 1.6.0 | MIT | no | +| vite | 8.2.1 | MIT | no | +| vitest | 4.1.10 | MIT | no | +| w3c-xmlserializer | 5.0.0 | MIT | no | +| webidl-conversions | 8.0.1 | BSD-2-Clause | no | +| whatwg-mimetype | 5.0.0 | MIT | no | +| whatwg-url | 16.0.1 | MIT | no | +| whatwg-url | 17.1.0 | MIT | no | +| why-is-node-running | 2.3.0 | MIT | no | +| xml-name-validator | 5.0.0 | Apache-2.0 | no | +| xmlchars | 2.2.0 | MIT | no | +| zustand | 4.5.7 | MIT | no | + +### ContextualWisdomLab/pg-llm-batch + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/setup-python | 5fda3b95a4ea91299a34e894583c3862153e4b97 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | yes | +| aiohttp | — | NOASSERTION | yes | +| aiohttp | 3.14.3 | Apache-2.0 AND MIT | no | +| aiosignal | 1.4.0 | Apache-2.0 | no | +| astral-sh/setup-uv | c771a70e6277c0a99b617c7a806ffedaca235ff9 | NOASSERTION | yes | +| async-timeout | 5.0.1 | Apache-2.0 | no | +| attrs | 26.1.0 | MIT | no | +| backports-asyncio-runner | 1.2.0 | NOASSERTION | yes | +| cffi | 2.1.0 | MIT-0 | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| cryptography | — | NOASSERTION | yes | +| cryptography | 50.0.0 | Apache-2.0 OR BSD-3-Clause | no | +| exceptiongroup | 1.3.1 | MIT AND Python-2.0 | no | +| frozenlist | 1.8.0 | Apache-2.0 | no | +| idna | 3.18 | BSD-3-Clause | no | +| iniconfig | 2.3.0 | MIT | no | +| multidict | 6.7.1 | Apache-2.0 | no | +| opentelemetry-api | 1.44.0 | Apache-2.0 | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| pg-llm-batch | 0.1.0 | NOASSERTION | yes | +| pluggy | 1.6.0 | MIT | no | +| propcache | 0.5.2 | Apache-2.0 | no | +| psycopg | — | NOASSERTION | yes | +| psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | yes | +| psycopg-binary | 3.3.4 | GPL-3.0-or-later | yes | +| pycparser | 3.0 | BSD-3-Clause | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pytest | — | NOASSERTION | yes | +| pytest | 9.1.1 | MIT | no | +| pytest-asyncio | — | NOASSERTION | yes | +| pytest-asyncio | 1.4.0 | Apache-2.0 | no | +| ruff | 0.16.1 | MIT | no | +| setuptools | — | NOASSERTION | yes | +| step-security/harden-runner | b09bb98e06d4d774595224525879c09bc6e98c40 | NOASSERTION | yes | +| tomli | 2.4.1 | MIT | no | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| tzdata | 2026.2 | Apache-2.0 | no | +| yarl | 1.24.2 | Apache-2.0 | no | + +### ContextualWisdomLab/pingora-gateway + +No components reported. + +### ContextualWisdomLab/PolicyWeave + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/psychometrics-commons + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/quarantine-sandbox-runtime + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/RankWeave + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/saju-caldav + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/scopeweave + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @bcoe/v8-coverage | 1.0.2 | ISC AND MIT | no | +| @hono/node-server | 2.1.1 | MIT | no | +| @istanbuljs/schema | 0.1.6 | MIT | no | +| @jridgewell/resolve-uri | 3.1.2 | MIT | no | +| @jridgewell/sourcemap-codec | 1.5.5 | MIT | no | +| @jridgewell/trace-mapping | 0.3.31 | MIT | no | +| @playwright/test | 1.62.1 | Apache-2.0 | no | +| @types/istanbul-lib-coverage | 2.0.6 | MIT | no | +| actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | yes | +| actions/configure-pages | 45bfe0192ca1faeb007ade9deae92b16b8254a0d | NOASSERTION | yes | +| actions/dependency-review-action | a1d282b36b6f3519aa1f3fc636f609c47dddb294 | NOASSERTION | yes | +| actions/deploy-pages | cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 | NOASSERTION | yes | +| actions/setup-node | 2028fbc5c25fe9cf00d9f06a71cc4710d4507903 | NOASSERTION | yes | +| actions/setup-node | 39370e3970a6d050c480ffad4ff0ed4d3fdee5af | NOASSERTION | yes | +| actions/upload-pages-artifact | fc324d3547104276b827a68afc52ff2a11cc49c9 | NOASSERTION | yes | +| ansi-regex | 6.2.2 | MIT | no | +| ansi-styles | 6.2.3 | MIT | no | +| balanced-match | 4.0.4 | MIT | no | +| brace-expansion | 5.0.9 | MIT | no | +| c8 | 12.0.0 | ISC | no | +| cliui | 9.0.1 | ISC | no | +| convert-source-map | 2.0.0 | MIT | no | +| cross-spawn | 7.0.6 | MIT | no | +| emoji-regex | 10.6.0 | MIT | no | +| escalade | 3.2.0 | MIT | no | +| fast-check | 4.9.0 | MIT | no | +| find-up | 5.0.0 | MIT | no | +| foreground-child | 3.3.1 | ISC | no | +| fsevents | 2.3.2 | MIT | no | +| get-caller-file | 2.0.5 | ISC | no | +| get-east-asian-width | 1.6.0 | MIT | no | +| github/codeql-action/analyze | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | yes | +| github/codeql-action/init | 8aad20d150bbac5944a9f9d289da16a4b0d87c1e | NOASSERTION | yes | +| glob | 13.0.6 | BlueOak-1.0.0 | no | +| google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml | 3a7550f43ba5b58905a821ce3a0ed24c4858b3f4 | NOASSERTION | yes | +| has-flag | 4.0.0 | MIT | no | +| hono | 4.13.0 | MIT | no | +| html-escaper | 2.0.2 | MIT | no | +| isexe | 2.0.0 | ISC | no | +| istanbul-lib-coverage | 3.2.2 | BSD-3-Clause | no | +| istanbul-lib-report | 3.0.1 | BSD-3-Clause | no | +| istanbul-reports | 3.2.0 | BSD-3-Clause | no | +| locate-path | 6.0.0 | MIT | no | +| lru-cache | 11.5.2 | BlueOak-1.0.0 | no | +| make-dir | 4.0.0 | MIT | no | +| minimatch | 10.2.6 | BlueOak-1.0.0 | no | +| minipass | 7.1.3 | BlueOak-1.0.0 | no | +| p-limit | 3.1.0 | MIT | no | +| p-locate | 5.0.0 | MIT | no | +| path-exists | 4.0.0 | MIT | no | +| path-key | 3.1.1 | MIT | no | +| path-scurry | 2.0.2 | BlueOak-1.0.0 | no | +| playwright | 1.62.1 | Apache-2.0 | no | +| playwright-core | 1.62.1 | Apache-2.0 | no | +| pure-rand | 8.4.1 | MIT | no | +| semver | 7.8.5 | ISC | no | +| shebang-command | 2.0.0 | MIT | no | +| shebang-regex | 3.0.0 | MIT | no | +| signal-exit | 4.1.0 | ISC | no | +| string-width | 7.2.0 | MIT | no | +| string-width | 8.2.2 | MIT | no | +| strip-ansi | 7.2.0 | MIT | no | +| supports-color | 7.2.0 | MIT | no | +| test-exclude | 8.0.0 | ISC | no | +| v8-to-istanbul | 9.3.0 | ISC | no | +| which | 2.0.2 | ISC | no | +| wrap-ansi | 9.0.2 | MIT | no | +| y18n | 5.0.8 | ISC | no | +| yargs | 18.1.0 | MIT | no | +| yargs-parser | 21.1.1 | ISC | no | +| yargs-parser | 22.0.0 | ISC | no | +| yocto-queue | 0.1.0 | MIT | no | + +### ContextualWisdomLab/semantic-data-portal + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/checkout | 9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 | NOASSERTION | yes | +| actions/setup-python | ece7cb06caefa5fff74198d8649806c4678c61a1 | NOASSERTION | yes | +| actions/upload-artifact | 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a | NOASSERTION | yes | +| annotated-doc | 0.0.4 | MIT | no | +| annotated-types | 0.7.0 | MIT | no | +| anyio | 4.14.1 | MIT | no | +| anyio | 4.14.2 | MIT | no | +| atheris | 3.0.0 | Apache-2.0 | no | +| certifi | 2026.6.17 | MPL-2.0 | yes | +| cffi | 2.1.0 | MIT-0 | no | +| click | 8.4.2 | BSD-3-Clause | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| cryptography | 49.0.0 | BSD-3-Clause OR Apache-2.0 | no | +| fastapi | 0.139.0 | MIT | no | +| github/codeql-action/upload-sarif | 54f647b7e1bb85c95cddabcd46b0c578ec92bc1a | NOASSERTION | yes | +| greenlet | 3.2.5 | MIT AND PSF-2.0 | no | +| greenlet | 3.5.3 | MIT AND PSF-2.0 | no | +| h11 | 0.16.0 | MIT | no | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpx | 0.28.1 | BSD-3-Clause | no | +| hypothesis | — | NOASSERTION | yes | +| hypothesis | 6.156.6 | MPL-2.0 AND MPL-1.1 | yes | +| idna | 3.18 | BSD-3-Clause | no | +| iniconfig | 2.3.0 | MIT | no | +| ossf/scorecard-action | 4eaacf0543bb3f2c246792bd56e8cdeffafb205a | NOASSERTION | yes | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| pluggy | 1.6.0 | MIT | no | +| psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | yes | +| psycopg-binary | 3.3.4 | GPL-3.0-or-later | yes | +| pycparser | 3.0 | BSD-3-Clause | no | +| pydantic | 2.13.4 | MIT | no | +| pydantic-core | 2.46.4 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pyjwt | 2.13.0 | MIT | no | +| pytest | 9.1.1 | MIT | no | +| setuptools | 80.9.0 | MIT | no | +| sortedcontainers | 2.4.0 | Apache-2.0 | no | +| sqlalchemy | — | NOASSERTION | yes | +| sqlalchemy | 2.0.51 | MIT | no | +| starlette | 1.3.1 | BSD-3-Clause | no | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.2 | MIT | no | +| tzdata | 2026.2 | Apache-2.0 | no | +| tzdata | 2026.3 | Apache-2.0 | no | +| uvicorn | 0.51.0 | BSD-3-Clause | no | + +### ContextualWisdomLab/supply-chain-control-plane + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/TEPP + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/ThreadWeave + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/Veilpick + +No components reported. + +### ContextualWisdomLab/wardnet + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| actions/cache | 0057852bfaa89a56745cba8c7296529d2fc39830 | NOASSERTION | yes | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | yes | +| arbitrary | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| atomic-waker | 1.1.2 | Apache-2.0 OR MIT | no | +| autocfg | 1.5.1 | Apache-2.0 OR MIT | no | +| axum | 0.8.9 | MIT | no | +| axum-core | 0.5.6 | MIT | no | +| base64 | 0.22.1 | MIT OR Apache-2.0 | no | +| bit-set | 0.8.0 | Apache-2.0 OR MIT | no | +| bit-vec | 0.8.0 | Apache-2.0 OR MIT | no | +| bitflags | 2.13.1 | MIT OR Apache-2.0 | no | +| bumpalo | 3.20.3 | MIT OR Apache-2.0 | no | +| bytes | 1.12.1 | MIT | no | +| cc | 1.4.0 | MIT OR Apache-2.0 | no | +| cfg-if | 1.0.4 | MIT OR Apache-2.0 | no | +| cfg_aliases | 0.2.2 | MIT | no | +| chacha20 | 0.10.1 | MIT OR Apache-2.0 | no | +| cpufeatures | 0.3.0 | MIT OR Apache-2.0 | no | +| displaydoc | 0.2.7 | MIT OR Apache-2.0 | no | +| dtolnay/rust-toolchain | 4be7066ada62dd38de10e7b70166bc74ed198c30 | NOASSERTION | yes | +| dtolnay/rust-toolchain | efcb852328a9f50117170cc43094fb6f09eaf1ae | NOASSERTION | yes | +| errno | 0.3.14 | MIT OR Apache-2.0 | no | +| fastrand | 2.5.0 | Apache-2.0 OR MIT | no | +| find-msvc-tools | 0.1.9 | MIT OR Apache-2.0 | no | +| fnv | 1.0.7 | Apache-2.0 OR MIT | no | +| form_urlencoded | 1.2.2 | MIT OR Apache-2.0 | no | +| futures-channel | 0.3.33 | MIT OR Apache-2.0 | no | +| futures-core | 0.3.34 | MIT OR Apache-2.0 | no | +| futures-io | 0.3.34 | MIT OR Apache-2.0 | no | +| futures-macro | 0.3.34 | MIT OR Apache-2.0 | no | +| futures-sink | 0.3.34 | MIT OR Apache-2.0 | no | +| futures-task | 0.3.34 | MIT OR Apache-2.0 | no | +| futures-util | 0.3.34 | MIT OR Apache-2.0 | no | +| getrandom | 0.2.17 | MIT OR Apache-2.0 | no | +| getrandom | 0.3.4 | MIT OR Apache-2.0 | no | +| getrandom | 0.4.3 | MIT OR Apache-2.0 | no | +| github/codeql-action/upload-sarif | ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd | NOASSERTION | yes | +| http | 1.5.0 | MIT OR Apache-2.0 | no | +| http-body | 1.1.0 | MIT | no | +| http-body-util | 0.1.4 | MIT | no | +| httparse | 1.10.1 | MIT OR Apache-2.0 | no | +| httpdate | 1.0.3 | MIT OR Apache-2.0 | no | +| hyper | 1.11.0 | MIT | no | +| hyper-rustls | 0.27.9 | Apache-2.0 OR ISC OR MIT | no | +| hyper-util | 0.1.20 | MIT | no | +| icu_collections | 2.2.0 | Unicode-3.0 | no | +| icu_locale_core | 2.2.0 | Unicode-3.0 | no | +| icu_normalizer | 2.2.0 | Unicode-3.0 | no | +| icu_normalizer_data | 2.2.0 | Unicode-3.0 | no | +| icu_properties | 2.2.0 | Unicode-3.0 | no | +| icu_properties_data | 2.2.0 | Unicode-3.0 | no | +| icu_provider | 2.2.0 | Unicode-3.0 | no | +| idna | 1.1.0 | MIT OR Apache-2.0 | no | +| idna_adapter | 1.2.2 | Apache-2.0 OR MIT | no | +| ipnet | 2.12.0 | MIT OR Apache-2.0 | no | +| itoa | 1.0.18 | MIT OR Apache-2.0 | no | +| js-sys | 0.3.103 | MIT OR Apache-2.0 | no | +| libc | 0.2.189 | MIT OR Apache-2.0 | no | +| libfuzzer-sys | >= 0.4.0,< 0.5.0 | NOASSERTION | yes | +| linux-raw-sys | 0.12.1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| litemap | 0.8.2 | Unicode-3.0 | no | +| log | 0.4.33 | MIT OR Apache-2.0 | no | +| lru-slab | 0.1.2 | MIT OR Apache-2.0 OR Zlib | no | +| matchit | 0.8.4 | MIT AND BSD-3-Clause | no | +| memchr | 2.8.3 | Unlicense OR MIT | no | +| mime | 0.3.17 | MIT OR Apache-2.0 | no | +| mime_guess | 2.0.5 | MIT | no | +| mio | 1.2.2 | MIT | no | +| num-traits | 0.2.19 | MIT OR Apache-2.0 | no | +| once_cell | 1.21.4 | MIT OR Apache-2.0 | no | +| ossf/scorecard-action | 2d1146689b8cda280b9bc96326124645441f03bc | NOASSERTION | yes | +| percent-encoding | 2.3.2 | MIT OR Apache-2.0 | no | +| percent-encoding | >= 2.0.0,< 3.0.0 | NOASSERTION | yes | +| pin-project-lite | 0.2.17 | Apache-2.0 OR MIT | no | +| potential_utf | 0.1.5 | Unicode-3.0 | no | +| ppv-lite86 | 0.2.21 | MIT OR Apache-2.0 | no | +| proc-macro2 | 1.0.107 | MIT OR Apache-2.0 | no | +| proptest | 1.11.0 | MIT OR Apache-2.0 | no | +| proptest | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| quick-error | 1.2.3 | MIT OR Apache-2.0 | no | +| quinn | 0.11.11 | MIT OR Apache-2.0 | no | +| quinn-proto | 0.11.16 | MIT OR Apache-2.0 | no | +| quinn-udp | 0.5.15 | MIT OR Apache-2.0 | no | +| quote | 1.0.47 | MIT OR Apache-2.0 | no | +| r-efi | 5.3.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | yes | +| r-efi | 6.0.0 | MIT OR Apache-2.0 OR LGPL-2.1-or-later | yes | +| rand | 0.10.2 | MIT OR Apache-2.0 | no | +| rand | 0.9.5 | MIT OR Apache-2.0 | no | +| rand_chacha | 0.9.0 | MIT OR Apache-2.0 | no | +| rand_core | 0.10.1 | MIT OR Apache-2.0 | no | +| rand_core | 0.9.5 | MIT OR Apache-2.0 | no | +| rand_pcg | 0.10.2 | MIT OR Apache-2.0 | no | +| rand_xorshift | 0.4.0 | MIT OR Apache-2.0 | no | +| regex-syntax | 0.8.11 | MIT OR Apache-2.0 | no | +| reqwest | 0.12.28 | MIT OR Apache-2.0 | no | +| ring | 0.17.14 | Apache-2.0 AND ISC | no | +| rustc-hash | 2.1.3 | Apache-2.0 OR MIT | no | +| rustix | 1.1.4 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| rustls | 0.23.43 | Apache-2.0 OR ISC OR MIT | no | +| rustls-pki-types | 1.15.1 | MIT OR Apache-2.0 | no | +| rustls-webpki | 0.103.13 | ISC | no | +| rustversion | 1.0.23 | MIT OR Apache-2.0 | no | +| rusty-fork | 0.3.1 | MIT OR Apache-2.0 | no | +| ryu | 1.0.23 | Apache-2.0 OR BSL-1.0 | no | +| serde | 1.0.229 | MIT OR Apache-2.0 | no | +| serde | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| serde_core | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_derive | 1.0.229 | MIT OR Apache-2.0 | no | +| serde_json | 1.0.151 | MIT OR Apache-2.0 | no | +| serde_json | >= 1.0.0,< 2.0.0 | NOASSERTION | yes | +| serde_path_to_error | 0.1.20 | MIT OR Apache-2.0 | no | +| serde_urlencoded | 0.7.1 | MIT OR Apache-2.0 | no | +| shlex | 2.0.1 | MIT OR Apache-2.0 | no | +| signal-hook-registry | 1.4.8 | MIT OR Apache-2.0 | no | +| slab | 0.4.12 | MIT | no | +| smallvec | 1.15.2 | MIT OR Apache-2.0 | no | +| socket2 | 0.6.5 | MIT OR Apache-2.0 | no | +| stable_deref_trait | 1.2.1 | MIT OR Apache-2.0 | no | +| subtle | 2.6.1 | BSD-3-Clause | no | +| syn | 2.0.119 | MIT OR Apache-2.0 | no | +| syn | 3.0.3 | MIT OR Apache-2.0 | no | +| sync_wrapper | 1.0.2 | Apache-2.0 | no | +| synstructure | 0.13.2 | MIT | no | +| tempfile | 3.27.0 | MIT OR Apache-2.0 | no | +| thiserror | 2.0.19 | MIT OR Apache-2.0 | no | +| thiserror-impl | 2.0.19 | MIT OR Apache-2.0 | no | +| tinystr | 0.8.3 | Unicode-3.0 | no | +| tinyvec | 1.12.0 | Zlib OR Apache-2.0 OR MIT | no | +| tinyvec_macros | 0.1.1 | MIT OR Apache-2.0 OR Zlib | no | +| tokio | 1.53.1 | MIT | no | +| tokio-macros | 2.7.2 | MIT | no | +| tokio-rustls | 0.26.4 | MIT OR Apache-2.0 | no | +| tokio-util | 0.7.19 | MIT | no | +| tower | 0.5.3 | MIT | no | +| tower-http | 0.6.11 | MIT | no | +| tower-layer | 0.3.3 | MIT | no | +| tower-service | 0.3.3 | MIT | no | +| tracing | 0.1.44 | MIT | no | +| tracing-core | 0.1.36 | MIT | no | +| try-lock | 0.2.5 | MIT | no | +| unarray | 0.1.4 | MIT OR Apache-2.0 | no | +| unicase | 2.9.0 | MIT OR Apache-2.0 | no | +| unicode-ident | 1.0.24 | (MIT OR Apache-2.0) AND Unicode-3.0 | no | +| untrusted | 0.9.0 | ISC | no | +| url | 2.5.8 | MIT OR Apache-2.0 | no | +| utf8_iter | 1.0.4 | Apache-2.0 OR MIT | no | +| wait-timeout | 0.2.1 | MIT OR Apache-2.0 | no | +| want | 0.3.1 | MIT | no | +| wasi | 0.11.1+wasi-snapshot-preview1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| wasip2 | 1.0.4+wasi-0.2.12 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| wasm-bindgen | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-futures | 0.4.76 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-macro-support | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-bindgen-shared | 0.2.126 | MIT OR Apache-2.0 | no | +| wasm-streams | 0.4.2 | MIT OR Apache-2.0 | no | +| web-sys | 0.3.103 | MIT OR Apache-2.0 | no | +| web-time | 1.1.0 | MIT OR Apache-2.0 | no | +| webpki-roots | 1.0.9 | CDLA-Permissive-2.0 | no | +| windows-link | 0.2.1 | MIT OR Apache-2.0 | no | +| windows-sys | 0.52.0 | MIT OR Apache-2.0 | no | +| windows-sys | 0.61.2 | MIT OR Apache-2.0 | no | +| windows-targets | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_aarch64_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_aarch64_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_gnu | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_i686_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnu | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_gnullvm | 0.52.6 | MIT OR Apache-2.0 | no | +| windows_x86_64_msvc | 0.52.6 | MIT OR Apache-2.0 | no | +| wit-bindgen | 0.57.1 | Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT | no | +| writeable | 0.6.3 | Unicode-3.0 | no | +| yoke | 0.8.3 | Unicode-3.0 | no | +| yoke-derive | 0.8.2 | Unicode-3.0 | no | +| zerocopy | 0.8.55 | BSD-2-Clause OR Apache-2.0 OR MIT | no | +| zerocopy-derive | 0.8.55 | BSD-2-Clause OR Apache-2.0 OR MIT | no | +| zerofrom | 0.1.8 | Unicode-3.0 | no | +| zerofrom-derive | 0.1.7 | Unicode-3.0 | no | +| zeroize | 1.9.0 | Apache-2.0 OR MIT | no | +| zerotrie | 0.2.4 | Unicode-3.0 | no | +| zerovec | 0.11.6 | Unicode-3.0 | no | +| zerovec-derive | 0.11.3 | Unicode-3.0 | no | +| zmij | 1.0.23 | MIT | no | + +### ContextualWisdomLab/xtrm-lead-pi-outbound + +SBOM unavailable: gh: Not Found (HTTP 404) + +### ContextualWisdomLab/xtrmLLMBatchPython + +| Component | Version | License | Flagged | +| --- | --- | --- | --- | +| @types/express | ^4.17.0 | NOASSERTION | yes | +| @types/inquirer | ^8.2.12 | NOASSERTION | yes | +| @types/node | ^24.0.1 | NOASSERTION | yes | +| @vitest/coverage-v8 | ^3.2.6 | NOASSERTION | yes | +| @vitest/ui | ^3.2.6 | NOASSERTION | yes | +| actions/checkout | 3d3c42e5aac5ba805825da76410c181273ba90b1 | NOASSERTION | yes | +| actions/setup-python | a26af69be951a213d495a4c3e4e4022e16d87065 | NOASSERTION | yes | +| actions/upload-artifact | ea165f8d65b6e75b540449e92b4886f43607fa02 | NOASSERTION | yes | +| aiofiles | 25.1.0 | Apache-2.0 | no | +| aiohappyeyeballs | 2.7.1 | 0BSD AND BSD-3-Clause AND GPL-1.0-or-later AND PSF-2.0 AND Python-2.0 | yes | +| aiohttp | 3.14.1 | Apache-2.0 AND MIT | no | +| aioresponses | 0.7.9 | MIT | no | +| aiosignal | 1.4.0 | Apache-2.0 | no | +| aiosqlite | 0.22.1 | MIT | no | +| annotated-types | 0.7.0 | MIT | no | +| anyio | 4.14.1 | MIT | no | +| astral-sh/setup-uv | c771a70e6277c0a99b617c7a806ffedaca235ff9 | NOASSERTION | yes | +| async-timeout | 5.0.1 | Apache-2.0 | no | +| attrs | 26.1.0 | MIT | no | +| axios | ^1.9.0 | NOASSERTION | yes | +| backports-asyncio-runner | 1.2.0 | NOASSERTION | yes | +| certifi | 2026.6.17 | MPL-2.0 | yes | +| cffi | 2.0.0 | MIT-0 | no | +| charset-normalizer | 3.4.7 | MIT | no | +| click | 8.4.2 | BSD-3-Clause | no | +| colorama | 0.4.6 | BSD-2-Clause AND BSD-3-Clause | no | +| commander | ^14.0.0 | NOASSERTION | yes | +| cryptography | 49.0.0 | BSD-3-Clause OR Apache-2.0 | no | +| eslint | ^9.27.0 | NOASSERTION | yes | +| et-xmlfile | 2.0.0 | 0BSD AND BSD-3-Clause AND MIT AND Python-2.0 | no | +| exceptiongroup | 1.3.1 | MIT AND Python-2.0 | no | +| express | ^4.18.0 | NOASSERTION | yes | +| extract-zip | ^2.0.1 | NOASSERTION | yes | +| frozenlist | 1.8.0 | Apache-2.0 | no | +| github.com/lib/pq | v1.12.3 | MIT | no | +| h11 | 0.16.0 | MIT | no | +| httpcore | 1.0.9 | BSD-2-Clause AND BSD-3-Clause | no | +| httpx | 0.28.1 | BSD-3-Clause | no | +| idna | 3.18 | BSD-3-Clause | no | +| iniconfig | 2.3.0 | MIT | no | +| inquirer | ^8.2.6 | NOASSERTION | yes | +| markdown-it-py | 4.2.0 | MIT | no | +| mdurl | 0.1.2 | MIT | no | +| multidict | 6.7.1 | Apache-2.0 | no | +| numpy | 2.2.6 | Apache-2.0 AND BSD-3-Clause AND MIT AND Zlib | no | +| numpy | 2.4.6 | BSD-3-Clause | no | +| numpy | 2.5.0 | BSD-3-Clause | no | +| open | ^10.0.0 | NOASSERTION | yes | +| openpyxl | 3.1.5 | MIT | no | +| packaging | 26.2 | Apache-2.0 AND BSD-2-Clause | no | +| pandas | 2.3.3 | BSD-2-Clause AND BSD-3-Clause | no | +| pandas | 3.0.3 | BSD-2-Clause AND BSD-3-Clause | no | +| pino | ^9.7.0 | NOASSERTION | yes | +| pluggy | 1.6.0 | MIT | no | +| propcache | 0.5.2 | Apache-2.0 | no | +| psycopg | 3.3.4 | LGPL-3.0 AND LGPL-3.0-only | yes | +| psycopg-binary | 3.3.4 | GPL-3.0-or-later | yes | +| pycparser | 3.0 | BSD-3-Clause | no | +| pydantic | 2.13.4 | MIT | no | +| pydantic-core | 2.46.4 | MIT | no | +| pygments | 2.20.0 | BSD-2-Clause | no | +| pypa/gh-action-pip-audit | 1220774d901786e6f652ae159f7b6bc8fea6d266 | NOASSERTION | yes | +| pytest | 9.1.1 | MIT | no | +| pytest-asyncio | 1.4.0 | Apache-2.0 | no | +| python-dateutil | 2.9.0.post0 | Apache-2.0 AND BSD-3-Clause | no | +| python-dotenv | 1.2.2 | BSD-3-Clause | no | +| pytz | 2026.2 | MIT AND ZPL-2.1 | no | +| regex | 2026.6.28 | CNRI-Python AND Apache-2.0 | no | +| requests | 2.34.2 | Apache-2.0 | no | +| rich | 15.0.0 | MIT | no | +| six | 1.17.0 | MIT | no | +| tiktoken | 0.13.0 | MIT | no | +| tomli | 2.4.1 | MIT | no | +| typescript | ^5.8.3 | NOASSERTION | yes | +| typing-extensions | 4.16.0 | Python-2.0 AND GPL-1.0-or-later AND Python-2.0 AND BSD-3-Clause AND Python-2.0 AND BSD-3-Clause AND 0BSD | yes | +| typing-inspection | 0.4.2 | MIT | no | +| tzdata | 2026.2 | Apache-2.0 | no | +| urllib3 | 2.7.0 | MIT | no | +| vitest | ^3.2.6 | NOASSERTION | yes | +| xtrmllmbatch | 0.1.0 | NOASSERTION | yes | +| yarl | 1.24.2 | Apache-2.0 | no | +| zod | ^3.25.67 | NOASSERTION | yes | diff --git a/scripts/ci/audit_org_codeql_coverage.py b/scripts/ci/audit_org_codeql_coverage.py index f9fb2eaf17..bdbc835491 100644 --- a/scripts/ci/audit_org_codeql_coverage.py +++ b/scripts/ci/audit_org_codeql_coverage.py @@ -66,6 +66,43 @@ def _is_analysis_fresh_and_successful( return parsed >= now - timedelta(days=CODEQL_ANALYSIS_FRESHNESS_DAYS) +def _default_setup_scans_a_language(repository: dict[str, Any]) -> bool: + """Return True when default-setup is configured AND has languages enabled. + + ``state == "configured"`` alone is not coverage. Measured 2026-09-07: + ``life-os``, ``aFIPC`` and ``inkspan`` all report ``configured`` with an + **empty** ``languages`` list and no ``schedule``; ``life-os`` has zero CodeQL + analyses of any language as a result, while still satisfying the + configured-state check this function replaces. A default setup with nothing + enabled is a commitment to scan nothing. + + A missing ``default_setup_languages`` key fails closed rather than falling + back to the state alone, which would silently restore that gap. The audit + workflow collects the field in the same change that introduced this check, + so the key is absent only when the payload predates them both. + """ + if repository.get("default_setup_state") != "configured": + return False + languages = repository.get("default_setup_languages") + return isinstance(languages, list) and bool(languages) + + +def auditable_repositories( + repositories: list[dict[str, Any]], +) -> list[dict[str, Any]]: + """Return the repositories this audit actually examines. + + Archived repositories are excluded: they cannot run workflows or code + scanning, so a lack of coverage there is not a product gap. Counting them + as examined is what let ``main`` report success over an empty subject set. + """ + return [ + repository + for repository in repositories + if not repository.get("archived") + ] + + def repositories_without_codeql( repositories: list[dict[str, Any]], now: datetime | None = None ) -> list[dict[str, Any]]: @@ -81,15 +118,15 @@ def repositories_without_codeql( """ current = now or datetime.now(timezone.utc) uncovered: list[dict[str, Any]] = [] - for repository in repositories: - if repository.get("archived"): - continue + for repository in auditable_repositories(repositories): # "configured" is GitHub's own forward-looking commitment to run # CodeQL going forward (like a scheduled cron guarantee), not a # one-time historical scan that can go stale -- so it does not need # the same freshness check as latest_codeql_analysis below. Do not - # "fix" this into requiring a completed scan. - has_default_setup = repository.get("default_setup_state") == "configured" + # "fix" this into requiring a completed scan. It does need the + # commitment to cover at least one language: see + # _default_setup_scans_a_language. + has_default_setup = _default_setup_scans_a_language(repository) has_fresh_analysis = _is_analysis_fresh_and_successful( repository.get("latest_codeql_analysis"), current ) @@ -98,13 +135,30 @@ def repositories_without_codeql( return uncovered +def _coverage_gap_reason(repository: dict[str, Any]) -> str: + """Return the gap description that tells the operator what to change. + + "Default setup is on but scans nothing" and "there is no coverage at all" + need different fixes -- enable languages on the existing setup, versus set + coverage up -- so they are reported as different sentences. + """ + if repository.get("default_setup_state") == "configured": + return ( + f"{repository.get('name')} has CodeQL default-setup configured with no " + "languages enabled, so it scans nothing and produces no analyses" + ) + return ( + f"{repository.get('name')} has no CodeQL coverage from any source " + "(no default-setup, no recent analysis)" + ) + + def audit_codeql_coverage( repositories: list[dict[str, Any]], now: datetime | None = None ) -> list[str]: """Return one human-readable error per repository with zero CodeQL coverage.""" return [ - f"{repository.get('name')} has no CodeQL coverage from any source " - "(no default-setup, no recent analysis)" + _coverage_gap_reason(repository) for repository in repositories_without_codeql(repositories, now) ] @@ -137,6 +191,24 @@ def main(argv: list[str] | None = None) -> int: print(f"ERROR: unable to load repository JSON: {exc}", file=sys.stderr) return 2 + audited = auditable_repositories(repositories) + if not audited: + # An audit that examined nothing is not a clean organization, and + # "PASS: all 0 repositories have real CodeQL coverage" reads as + # success. The count that matters is what was examined, not what was + # supplied: an empty payload and a payload of nothing but archived + # repositories both reach zero subjects, and only the first was caught + # when this guard counted `repositories`. The calling workflow refuses + # an enumeration missing its known-private sentinel repositories, but + # the script is directly runnable against a JSON path or stdin, so the + # guard has to live here too. + print( + f"ERROR: this run audited nothing " + f"(0 of {len(repositories)} repositories were eligible)", + file=sys.stderr, + ) + return 2 + errors = audit_codeql_coverage(repositories) if errors: for error in errors: @@ -147,7 +219,7 @@ def main(argv: list[str] | None = None) -> int: ) return 1 - print(f"PASS: all {len(repositories)} repositories have real CodeQL coverage") + print(f"PASS: all {len(audited)} repositories have real CodeQL coverage") return 0 diff --git a/scripts/ci/contextual_orchestrator_review_launcher.py b/scripts/ci/contextual_orchestrator_review_launcher.py index 2e56809639..e8c462abcc 100644 --- a/scripts/ci/contextual_orchestrator_review_launcher.py +++ b/scripts/ci/contextual_orchestrator_review_launcher.py @@ -22,14 +22,20 @@ from __future__ import annotations import argparse +import copy +import dataclasses import json +import logging import os import re import sys from pathlib import Path -from typing import Any +from typing import Any, Callable -from scripts.ci.contextual_orchestrator_review_policy import FREE_POOL_CREDENTIAL_NAMES +from scripts.ci.contextual_orchestrator_review_policy import ( + FREE_POOL_CREDENTIAL_NAMES, + provider_account, +) # The vendored server's generic 64 KiB default is intentionally conservative. @@ -42,8 +48,60 @@ # Provider-neutral sampling: several modern endpoints reject non-default # temperatures, while 1.0 is the OpenAI-compatible default. REVIEW_TEMPERATURE = 1.0 -REVIEW_PREFLIGHT_MAX_TOTAL_ROUTES = 12 -REVIEW_PREFLIGHT_PRIMARY_ROUTE_LIMIT = 8 +# Lazy fill (ADR-0029): the catalog is a *candidate* list, probed in its +# tier-then-round-robin order until REVIEW_PREFLIGHT_TARGET_READY routes are +# ready or REVIEW_PREFLIGHT_MAX_PROBES probes are spent, whichever comes first. +# A permanently dead candidate (NIM lists gemma-3-12b/4b but answers 404 on +# every run) then costs one probe instead of a served slot, and a healthy hour +# stops early instead of always probing every candidate. MAX_TOTAL_ROUTES is +# the two-stage total (auto pool: 16 free, up to 8 priced; the production +# ``free`` pool lists all 24). A silent candidate's probe costs up to one +# transport timeout (19 probes took 805 s in one artifact), so MAX_PROBES +# bounds preflight wall time as well as request count. Candidates past the +# probe cap are reached only when the account rule below sets earlier ones +# aside, and the report separates ``skipped_count`` (set aside, never probed) +# from the unreached tail so the evidence stays readable. +REVIEW_PREFLIGHT_MAX_TOTAL_ROUTES = 24 +REVIEW_PREFLIGHT_PRIMARY_ROUTE_LIMIT = 16 +REVIEW_PREFLIGHT_TARGET_READY = 8 +REVIEW_PREFLIGHT_MAX_PROBES = 16 +# Once one credential account has answered 429 to this many probes in a row, +# its remaining candidates are set aside so the walk reaches the other +# accounts' next candidates first: under the real 2026-09-06 candidate order +# (jan's table on #1949) the round-robin would otherwise spend five of sixteen +# probes on an account whose every free route answered 429, and the readiness +# target was unreachable; setting them aside lets the same sixteen probes +# reach both keys' llama routes (catalog position 17, ready in eight of the +# fourteen merged-rule artifacts of 2026-09-06 and reached only this way). +# +# But the rule must not END the walk. When every account is set aside the walk +# stops with most of its probe budget unspent and the stage fails closed -- +# and because deferral needs one ready route (#1947), nothing is served +# either. Measured that day: `.github` run 34016207820 sent six probes across +# all three accounts between 07:49:35.111Z and 07:49:35.767Z, every one +# refused 429, and gave up with ten probes unspent; five runs between 07:24Z +# and 08:05Z read probed 6 / skipped 18 / ready 0. Because the walk is a +# round-robin, "two consecutive 429s" on one account is two requests about +# 310 ms apart (nvidia_nim at .111 and .422). +# +# A refusal is not a verdict on the account. Run 34016093772 was inside its +# own preflight during that burst, and its llama probes on the same two NVIDIA +# keys answered ready at 07:50:58.7 and 07:50:59.0 -- 84 s after those keys +# refused 429. Whether the unspent probes would find a ready route *inside* a +# burst is still unmeasured; that is what `retry_after_s` is for. What is +# certain is that failing closed with two thirds of the budget in hand is +# indefensible, and the cost of spending it is bounded by the probe count, not +# a clock: a refused probe costs about 120 ms, a silent one up to the 90 s +# receive timeout, and the postponed tail contains both (google/gemma-4-31b-it +# answered TimeoutError in 15 of the 19 probes that reached it). See ADR-0029's +# amendment for the full cost table. +# +# So a set-aside candidate is postponed, not banned: once the first pass ends +# with the target unmet and probes left, the postponed candidates are probed +# in catalog order until the budget is spent. Probed 429 routes are still +# deferred (#1947); a candidate the budget never reaches is neither probed nor +# served. +REVIEW_PREFLIGHT_ACCOUNT_SKIP_AFTER_429 = 2 # ADR-0005: a single fixed max_tokens cannot fit every model in a heterogeneous # pool -- some spend internal reasoning tokens before visible content and need # more, others have a real completion ceiling a large budget would exceed. The @@ -62,6 +120,28 @@ # Shared cap on how many candidates in one preflight run may use the # escalation retry above. It bounds request count, never model response time. REVIEW_PREFLIGHT_MAX_ESCALATIONS = 4 +# Probe outcomes the serving gateway itself treats as transient -- it retries +# the same route and then fails over across exactly these statuses +# (contextual_orchestrator.orchestrator.TRANSIENT_HTTP_STATUS at the vendored +# pin; provider_errors.PROVIDER_STATUS_SURFACES marks 429 retryable). A route +# that answered one of them to the 16-token probe is not known to be dead; it +# was rate-limited or unlucky in the second the probe ran, very often because +# the probe itself spent the per-key budget. Discarding it left the serving +# set with nothing to fail over to: on 2026-09-05 a noema-review preflight +# rejected 11 of 12 routes -- six of them with 429 -- served the one ready +# route for 542 s and returned 502. Such routes are kept as *deferred*, ranked +# after every ready route, so failover has somewhere to go. Only a route that +# *answered* with one of these statuses qualifies (a probe that timed out +# records no http_status and stays rejected), so deferral never admits, on the +# strength of a probe that already showed it, the silent route whose serving +# request would spend the gateway's full retry budget in 90 s timeouts. Keep +# this set in sync with the vendored orchestrator's; a status the gateway +# would not retry must not be deferred. +REVIEW_PREFLIGHT_DEFERRABLE_HTTP_STATUS = frozenset({408, 409, 425, 429, 500, 502, 503, 504, 529}) +# Subtracted from a deferred route's catalog priority so the orchestrator's +# ranking (higher priority first; catalog priorities are 0..-11) never places a +# deferred route ahead of a ready one. +REVIEW_PREFLIGHT_DEFERRED_PRIORITY_PENALTY = 1000 class ReviewPreflightError(RuntimeError): @@ -214,6 +294,46 @@ def _safe_http_status(exc: Exception) -> int | None: return None +def _safe_retry_after_seconds(exc: Exception) -> int | None: + """Return the response's ``Retry-After`` delay in whole seconds, if it sent one. + + Recorded so the evidence can answer a question this codebase cannot + answer today: when a preflight probe is refused with 429, do the + providers say how long the refusal lasts? The 2026-09-06 artifacts show + every probe of a burst refused inside a second (`.github` 34016207820 and + four sibling boots), with nothing in the evidence about how long the + refusal window actually was. Only the delta-seconds + form is read; the HTTP-date form and anything out of range record + nothing, because a wrong number here would be worse than no number. + This is evidence only -- no code waits on it (ADR-0003). + + Args: + exc: The exception a probe attempt raised. + + Returns: + The delay in seconds, or ``None`` when the response carried no + usable ``Retry-After`` header. + """ + headers = getattr(exc, "headers", None) + get_header = getattr(headers, "get", None) + if not callable(get_header): + return None + try: + raw = get_header("Retry-After") + except Exception: # noqa: BLE001 - a hostile header mapping is not evidence + return None + # ``isdecimal`` rather than ``isdigit``: a provider controls this header, + # and ``"²".isdigit()`` is True while ``int("²")`` raises. This + # runs inside the probe walk's exception handler, so a ValueError here + # would escape ``_preflight_review_agents`` -- whose callers catch only + # ``ReviewPreflightError`` -- and kill the boot before any evidence file + # is written. Every ``isdecimal`` string is accepted by ``int``. + if not isinstance(raw, str) or not raw.strip().isdecimal(): + return None + seconds = int(raw.strip()) + return seconds if 0 <= seconds <= 86400 else None + + def _response_finish_reason(response: object) -> str | None: """Return a bounded ``finish_reason`` string from an OpenAI-compatible response. @@ -275,10 +395,29 @@ def _record_provider_exception(row: dict[str, object], exc: Exception) -> None: http_status = _safe_http_status(exc) if http_status is not None: row["http_status"] = http_status + retry_after = _safe_retry_after_seconds(exc) + if retry_after is not None: + row["retry_after_s"] = retry_after row.pop("finish_reason", None) row.pop("reasoning_without_content", None) +def _demote_agent(agent: object, penalty: int) -> object: + """Return a copy of ``agent`` whose ``priority`` is lowered by ``penalty``. + + Serving agents are frozen ``ModelAgent`` dataclasses, so the copy goes + through :func:`dataclasses.replace`; the plain objects tests use are + shallow-copied and assigned. A missing ``priority`` counts as 0, matching + the dataclass default. + """ + priority = int(getattr(agent, "priority", 0)) - penalty + if dataclasses.is_dataclass(agent) and not isinstance(agent, type): + return dataclasses.replace(agent, priority=priority) + demoted = copy.copy(agent) + demoted.priority = priority + return demoted + + def _response_has_reasoning_without_content(response: object) -> bool: """Return whether a response matches the vendored "reasoning, no content" signature. @@ -368,6 +507,20 @@ def _preflight_review_agents( response, both fields are absent entirely (there is no response to describe) rather than silently retaining the base attempt's values. + Candidates are probed lazily in catalog order (ADR-0029): probing stops + once ``REVIEW_PREFLIGHT_TARGET_READY`` routes are ready or + ``REVIEW_PREFLIGHT_MAX_PROBES`` probes have been spent, so a dead + candidate costs one probe rather than a served slot and a healthy pool is + not probed to exhaustion. An account that has answered 429 to + ``REVIEW_PREFLIGHT_ACCOUNT_SKIP_AFTER_429`` consecutive probes has its + remaining candidates postponed behind the other accounts' candidates; + once the first pass ends with the target unmet and budget left, the + postponed candidates are probed in catalog order (a 429 is an answer + about the instant, not the account). Unprobed candidates get no + ``routes`` row; ``skipped_count`` counts the postponed candidates the + budget never reached, ``postponed_probed_count`` the ones it did, and + ``candidate_count - probed_count - skipped_count`` the unreached tail. + Args: agents: Selected zero-cost model agents. client: Vendored ``ModelClient``-compatible transport. @@ -386,7 +539,41 @@ def _preflight_review_agents( """ viable: list[object] = [] routes: list[dict[str, object]] = [] - for agent in agents: + consecutive_429: dict[str, int] = {} + # Candidates the account rule set aside in the first pass, in catalog + # order. They are probed in a second pass while budget is left and the + # target is unmet; the ones that pass never reaches are the skipped ones. + postponed: list[object] = [] + postponed_probed = 0 + # One entry per probe, in probe order: ``routes[i]`` describes + # ``probed[i]``. A postponed candidate joins both only when its probe + # runs, so the deferral pass below must pair rows with this list, not + # with ``agents``. + probed: list[object] = [] + walk = iter(agents) + second_pass = False + # A dedicated sentinel, not ``None``: ``None`` is a legal element of a + # candidate list and would silently truncate the walk. + exhausted = object() + while True: + if len(viable) >= REVIEW_PREFLIGHT_TARGET_READY or len(routes) >= REVIEW_PREFLIGHT_MAX_PROBES: + break + agent = next(walk, exhausted) + if agent is exhausted: + if second_pass or not postponed: + break + walk = iter(postponed) + second_pass = True + continue + account = provider_account(str(getattr(agent, "provider_name", "") or "unknown")) + if second_pass: + postponed_probed += 1 + elif consecutive_429.get(account, 0) >= REVIEW_PREFLIGHT_ACCOUNT_SKIP_AFTER_429: + postponed.append(agent) + continue + # Cleared here; only a 429 answer below restores it, incremented. + streak_429 = consecutive_429.pop(account, 0) + probed.append(agent) row: dict[str, object] = { "agent_id": str(getattr(agent, "id", "")), "provider": str(getattr(agent, "provider_name", "") or "unknown"), @@ -407,6 +594,8 @@ def _preflight_review_agents( response = client.proxy_send_once(agent, "chat/completions", base_payload) except Exception as exc: # noqa: BLE001 - sanitize at the provider boundary _record_provider_exception(row, exc) + if row.get("http_status") == 429: + consecutive_429[account] = streak_429 + 1 routes.append(row) continue if _chat_response_has_text(response): @@ -456,11 +645,27 @@ def _preflight_review_agents( # a specific policy without real telemetry on which candidates # actually need escalation would itself be the kind of unjustified # heuristic this design rejects elsewhere. - if not budget_signature or escalations_used >= REVIEW_PREFLIGHT_MAX_ESCALATIONS: + # The second pass never draws on the shared escalation budget. That + # budget is one counter for the whole run, spent in catalog order and + # carried into the priced fallback stage (#1458). Candidates in the + # second pass are ones the account rule had set aside and the previous + # design never probed at all, so letting them claim escalations would + # take them from stages that had them before: measured on a two-stage + # run where every primary candidate on one account answered 429, the + # priced fallback candidate that needs its escalation is denied one and + # the run stops serving a route it used to serve. + if ( + not budget_signature + or second_pass + or escalations_used >= REVIEW_PREFLIGHT_MAX_ESCALATIONS + ): row["status"] = "rejected" - row["error_type"] = ( - "invalid_chat_response" if not budget_signature else "escalation_budget_exhausted" - ) + if not budget_signature: + row["error_type"] = "invalid_chat_response" + elif second_pass: + row["error_type"] = "escalation_reserved_for_first_pass" + else: + row["error_type"] = "escalation_budget_exhausted" routes.append(row) continue escalations_used += 1 @@ -507,11 +712,36 @@ def _preflight_review_agents( ) routes.append(row) + # Deferral pass: a route rejected with a status the serving gateway would + # retry and fail over across is kept behind the ready routes instead of + # being discarded -- but only once at least one route is ready. With no + # ready route the run still fails this stage exactly as before, so + # _preflight_with_fallback's "priced catalog only after every primary + # route rejects" contract (ADR-0005) is unchanged. ``routes`` holds one + # row per *probed* agent in probe order (every branch above appends once), + # and ``probed`` the matching agents -- a postponed candidate is in both + # once its second-pass probe has run, and in neither otherwise. + deferred: list[object] = [] + if viable: + for agent, row in zip(probed, routes): + if ( + row.get("status") == "rejected" + and row.get("http_status") in REVIEW_PREFLIGHT_DEFERRABLE_HTTP_STATUS + ): + row["status"] = "deferred" + deferred.append(_demote_agent(agent, REVIEW_PREFLIGHT_DEFERRED_PRIORITY_PENALTY)) report: dict[str, object] = { "contract": "strix-plain-chat-preflight-v2", - "probed_count": len(agents), + "candidate_count": len(agents), + "probed_count": len(routes), "ready_count": len(viable), - "rejected_count": len(agents) - len(viable), + "deferred_count": len(deferred), + "rejected_count": len(routes) - len(viable) - len(deferred), + "skipped_count": len(postponed) - postponed_probed, + "postponed_probed_count": postponed_probed, + "target_ready": REVIEW_PREFLIGHT_TARGET_READY, + "probe_budget": REVIEW_PREFLIGHT_MAX_PROBES, + "account_skip_after_429": REVIEW_PREFLIGHT_ACCOUNT_SKIP_AFTER_429, "escalations_used": escalations_used, "escalation_budget": REVIEW_PREFLIGHT_MAX_ESCALATIONS, "routes": routes, @@ -520,7 +750,7 @@ def _preflight_review_agents( raise ReviewPreflightError( "no provider route passed the Strix plain-chat preflight", report ) - return viable, report + return [*viable, *deferred], report def _preflight_with_fallback( @@ -531,9 +761,10 @@ def _preflight_with_fallback( The two stages share ADR-0005's one ``REVIEW_PREFLIGHT_MAX_ESCALATIONS`` budget for the whole preflight run, not one budget each: the primary stage's ending ``escalations_used`` is passed as the fallback stage's - starting point, so a run that rejects all 8 primary routes and then - probes 4 fallback routes still spends at most 4 escalations total (12 - base attempts + 4 escalations). This bounds request count, not individual + starting point, so a run that rejects all 16 primary candidates and then + probes 8 fallback candidates still spends at most 4 escalations total (at + most ``REVIEW_PREFLIGHT_MAX_PROBES`` base attempts per stage + 4 + escalations). This bounds request count, not individual model response or sidecar readiness time. Both stages' reports remain in the result: the fallback (or sole) stage's report carries the run's final, cumulative ``escalations_used``, and @@ -580,8 +811,9 @@ def _log_preflight_rejections(report: dict[str, object]) -> None: if not isinstance(routes, list): return for row in routes: - if not isinstance(row, dict) or row.get("status") != "rejected": + if not isinstance(row, dict) or row.get("status") not in ("rejected", "deferred"): continue + event = f"preflight_route_{row['status']}" # Re-validate rather than trust the caller's own sanitization: this # print reaches the sidecar's sanitized stderr stream unchanged, so an # out-of-contract value here (not a plain identifier) must degrade to @@ -601,13 +833,13 @@ def _log_preflight_rejections(report: dict[str, object]) -> None: http_status = row.get("http_status") if isinstance(http_status, int) and not isinstance(http_status, bool) and 100 <= http_status <= 599: print( - f"preflight_route_rejected provider={provider} " + f"{event} provider={provider} " f"error_type={error_type} http_status={http_status}", file=sys.stderr, ) else: print( - f"preflight_route_rejected provider={provider} error_type={error_type}", + f"{event} provider={provider} error_type={error_type}", file=sys.stderr, ) @@ -628,6 +860,10 @@ def _bounded_primary_catalog_limit( total_limit = min(requested_limit, REVIEW_PREFLIGHT_MAX_TOTAL_ROUTES) if pool == "auto" and has_free_rows: return min(total_limit, REVIEW_PREFLIGHT_PRIMARY_ROUTE_LIMIT) + # ADR-0029: the production pool is ``free`` (no fallback stage) and lists + # the full two-stage budget. Candidates past REVIEW_PREFLIGHT_MAX_PROBES + # are reached only when the account-skip rule frees probes; the report's + # ``skipped_count`` keeps that tail distinguishable from an early stop. return total_limit @@ -673,6 +909,62 @@ def _catalog_account_cap(default: int) -> int: return int(os.environ.get("ORCHESTRATOR_CATALOG_ACCOUNT_CAP", str(default))) +DEFAULT_SIDECAR_LOG_LEVEL = "DEBUG" +SIDECAR_LOG_FORMAT = "%(asctime)s %(levelname)s %(name)s %(message)s" + + +def _sidecar_log_level() -> str: + """Return the log level the review sidecar configures for its orchestrator process. + + Defaults to ``DEBUG`` because that is where ``contextual_orchestrator`` + records the per-request trace a failed review needs afterwards: every + provider attempt (``provider_attempt``), its classified failure + (``provider_attempt_failed`` with error type and transient flag), backoff, + and circuit events are ``_LOGGER.debug`` calls, while the default + ``WARNING`` level keeps only ``provider_exhausted``/``circuit_opened``. At + the vendored pin none of those DEBUG sites logs a prompt, payload, or + response body; the one free-text field is ``provider_attempt_failed``'s + ``error_message`` (the exception text, which can quote an upstream error + body), and the sidecar pipes this process's stderr through the allow-list + sanitizer before it reaches disk, so only lines the sanitizer recognises + -- and only their structured fields -- become CI evidence. On + 2026-09-05 a 3122 s ``noema-review`` failure could not be attributed to + "six ready routes, two retry layers, 548 s per hop" from the job log alone + because this trace was never emitted. Override with + ``ORCHESTRATOR_SIDECAR_LOG_LEVEL``. + """ + return os.environ.get("ORCHESTRATOR_SIDECAR_LOG_LEVEL", DEFAULT_SIDECAR_LOG_LEVEL) + + +def _configure_sidecar_logging(configure_logging: Callable[[str], None]) -> str: + """Configure the orchestrator process's logging for CI evidence. + + ``configure_logging`` is ``contextual_orchestrator.debug_logging.configure_logging`` + (injected so this module stays importable without the vendored package): + it installs the root level with ``basicConfig(force=True)``. Its default + formatter carries no timestamp, and a per-attempt trace without + timestamps cannot yield per-hop durations, so every root handler is then + given :data:`SIDECAR_LOG_FORMAT`. + + Returns: + The level name that was applied. + + Raises: + SystemExit: If ``ORCHESTRATOR_SIDECAR_LOG_LEVEL`` is not a level name + the orchestrator accepts; a misspelt level must not silently leave + the process at ``WARNING``. + """ + level = _sidecar_log_level() + try: + configure_logging(level) + except ValueError as exc: + raise SystemExit(f"ORCHESTRATOR_SIDECAR_LOG_LEVEL is invalid: {exc}") from None + formatter = logging.Formatter(SIDECAR_LOG_FORMAT) + for handler in logging.getLogger().handlers: + handler.setFormatter(formatter) + return level + + def _with_discovery_counts( report: dict[str, object], rows: list[dict[str, Any]], @@ -802,7 +1094,9 @@ def main(argv: list[str] | None = None) -> int: parse_discovery_report, provider_account, ) + from contextual_orchestrator.debug_logging import configure_logging + _configure_sidecar_logging(configure_logging) registered = register_review_credentials(os.environ) auth_token = args.auth_token or get_credential(REVIEW_AUTH_CREDENTIAL_NAME) if not auth_token: @@ -856,7 +1150,7 @@ def main(argv: list[str] | None = None) -> int: zdr_endpoints=zdr_endpoints, checker=is_zdr_model, ) - requested_catalog_limit = int(os.environ.get("ORCHESTRATOR_CATALOG_LIMIT", "12")) + requested_catalog_limit = int(os.environ.get("ORCHESTRATOR_CATALOG_LIMIT", "24")) primary_limit = _bounded_primary_catalog_limit( requested_catalog_limit, pool=args.pool, has_free_rows=bool(admitted_free_rows) ) diff --git a/scripts/ci/contextual_orchestrator_review_policy.py b/scripts/ci/contextual_orchestrator_review_policy.py index 910b8da3a9..e609e67ff3 100644 --- a/scripts/ci/contextual_orchestrator_review_policy.py +++ b/scripts/ci/contextual_orchestrator_review_policy.py @@ -13,6 +13,7 @@ from __future__ import annotations import argparse +import itertools import json import math import re @@ -273,6 +274,21 @@ def _free_pool_source_admitted(row: Mapping[str, Any]) -> bool: ) +def _route_tier(row: Mapping[str, Any], zdr_endpoints: frozenset[str]) -> tuple[int, int]: + """Return the ``(cost rank, ZDR rank)`` tier a route is selected within. + + Free routes rank before priced ones and ZDR-attested routes before + unattested ones; the tier is what the catalog fill must never reorder, + while accounts inside one tier may be interleaved freely. + """ + attested = is_zdr_model( + str(row["provider"]), + model=str(row["model"]), + zdr_endpoints=zdr_endpoints, + ) + return (_COST_EVIDENCE_RANK[_cost_evidence(row)], 0 if attested else 1) + + def build_zdr_prioritized_catalog( rows: Iterable[Mapping[str, Any]], *, @@ -317,27 +333,36 @@ def build_zdr_prioritized_catalog( ] eligible_rows.sort( key=lambda row: ( - _COST_EVIDENCE_RANK[_cost_evidence(row)], - 0 - if is_zdr_model( - str(row["provider"]), - model=str(row["model"]), - zdr_endpoints=zdr_endpoints, - ) - else 1, + *_route_tier(row, zdr_endpoints), str(row["provider"]), str(row["model"]), ) ) + # Fill each (cost, ZDR) tier round-robin across independently credentialed + # accounts. A plain sorted fill let the alphabetically first account take + # its whole cap before the next account saw a slot: on 2026-09-05 the review + # sidecar admitted 62 free routes across three accounts and served + # 8 nvidia_nim + 4 nvidia_nim_sub + 0 openrouter (limit 12, cap 8), so a + # stalled NVIDIA endpoint had no other account to fail over to + # (ContextualWisdomLab/.github#1476, contextual-orchestrator#1045). per_account: Counter[str] = Counter() picked: list[Mapping[str, Any]] = [] - for row in eligible_rows: - account = provider_account(str(row["provider"])) - if per_account[account] >= account_cap: - continue - per_account[account] += 1 - picked.append(row) + for _tier, tier_rows in itertools.groupby( + eligible_rows, key=lambda row: _route_tier(row, zdr_endpoints) + ): + queues: dict[str, list[Mapping[str, Any]]] = {} + for row in tier_rows: + queues.setdefault(provider_account(str(row["provider"])), []).append(row) + while queues and len(picked) < limit: + for account in list(queues): + if per_account[account] >= account_cap or not queues[account]: + del queues[account] + continue + picked.append(queues[account].pop(0)) + per_account[account] += 1 + if len(picked) >= limit: + break if len(picked) >= limit: break diff --git a/scripts/ci/contextual_orchestrator_review_sidecar.sh b/scripts/ci/contextual_orchestrator_review_sidecar.sh index a96e854a51..38d9551a32 100755 --- a/scripts/ci/contextual_orchestrator_review_sidecar.sh +++ b/scripts/ci/contextual_orchestrator_review_sidecar.sh @@ -14,7 +14,7 @@ # (fail-closed zero-cost) pool. set -euo pipefail -ORCHESTRATOR_PIN_SHA="${ORCHESTRATOR_PIN_SHA:-2e414d15ba58f28597751b625a8a2f00fc9fadcf}" +ORCHESTRATOR_PIN_SHA="${ORCHESTRATOR_PIN_SHA:-414f22973658c4ddc3d4320fcf7acd9b4e8ba991}" ORCHESTRATOR_GIT_URL="${ORCHESTRATOR_GIT_URL:-https://github.com/ContextualWisdomLab/contextual-orchestrator.git}" # The Strix gate and Noema SSRF guard accept this one process-local origin. # Keep it fixed so an environment override cannot create an unvalidated sidecar. @@ -35,11 +35,12 @@ SIDECAR_LOG_SANITIZER="$ORG_REPO_ROOT/scripts/ci/sanitize_contextual_orchestrato # finishes, letting the shell script wait for a deterministic marker instead # of guessing whether the async sanitizer has caught up. SIDECAR_DISCOVERY_DIAGNOSTICS_SENTINEL="discovery_diagnostics_complete" -CATALOG_LIMIT="${ORCHESTRATOR_CATALOG_LIMIT:-12}" +CATALOG_LIMIT="${ORCHESTRATOR_CATALOG_LIMIT:-24}" # Each KV credential is an independent account, including two credentials for # the same vendor or endpoint. The account cap prevents one credential from -# consuming the bounded twelve-route preflight catalog without inventing a -# provider-family equivalence relation. +# consuming the bounded preflight candidate list (24 candidates, probed lazily +# to a readiness target -- ADR-0029) without inventing a provider-family +# equivalence relation. CATALOG_ACCOUNT_CAP="${ORCHESTRATOR_CATALOG_ACCOUNT_CAP:-8}" ORCHESTRATOR_GITHUB_ENV="${GITHUB_ENV:-}" sidecar_python="$(command -v python3)" @@ -688,4 +689,7 @@ fi log "policy evidence summary:" sed -n '1,80p' "$policy_report" || true log "runtime preflight summary:" -sed -n '1,160p' "$preflight_report" || true +# 16 probed routes at 8-10 lines each plus the header run past the old +# 160-line cap exactly in the dead hour the summary matters most (ADR-0029); +# the artifact copy was always complete, only the job-log echo was cut. +sed -n '1,400p' "$preflight_report" || true diff --git a/scripts/ci/pr_review_merge_scheduler_core.py b/scripts/ci/pr_review_merge_scheduler_core.py index e97b41074a..4df4dac3de 100644 --- a/scripts/ci/pr_review_merge_scheduler_core.py +++ b/scripts/ci/pr_review_merge_scheduler_core.py @@ -1904,6 +1904,11 @@ def opencode_in_progress(pr: dict[str, Any], *, stale_after_minutes: int | None return opencode_progress_state(pr, stale_after_minutes=stale_after) == "running" +def has_in_flight_check_runs(pr: dict[str, Any]) -> bool: + """Return whether any newest current-head check run is still queued or running.""" + return any(running_check_state(node) == "running" for node in latest_check_runs(pr)) + + _STRIX_SUCCESS_CONCLUSIONS = {"SUCCESS"} @@ -3247,7 +3252,24 @@ def active_review_run_refs( for run_repo in (dispatch_repo,): for run_data in active_workflow_runs(run_repo, statuses): run_name = str(run_data.get("name") or "") - if run_name != workflow and run_name not in workflow_aliases: + # GitHub reports the *rendered* ``run-name:`` in a run's ``name``, + # not the workflow name, and eight workflows here define one -- + # every workflow whose runs this matcher looks for + # (``opencode-review.yml`` = "Required OpenCode Review", + # ``opencode-review-dispatch.yml`` = "OpenCode Review Dispatch", + # ``strix.yml`` = "Strix Security Scan") is among them. Exact + # matching therefore dropped every production dispatch run here, + # before the ``repository_dispatch`` branch below that exists to + # handle it: ``already_running`` never suppressed a same-head + # repeat and ``stale`` never populated, so .github#1529 took 27 + # dispatches on one unchanged head and older-head central runs were + # never cancelled. Sampled 2026-09-07: 100 of 100 + # opencode-review-dispatch runs carry the rendered form, 0 bare. + # Accept it -- the workflow name, then a space, then the suffix. + if not any( + run_name == candidate or run_name.startswith(f"{candidate} ") + for candidate in (workflow, *workflow_aliases) + ): continue run_id = run_data.get("id") if not run_id: @@ -4781,6 +4803,19 @@ def request_branch_update(freshness_reason: str, *, suffix: str = "") -> Decisio f"current head has no OpenCode approval; branch is outdated before review dispatch, " f"but head repo {head_repo} is not writable by the scheduler credential", ) + if has_in_flight_check_runs(pr): + # Updating now would cancel every queued or running check on the + # current head and requeue the pull request behind them. Under a + # saturated runner queue the PR's own delayed scheduler run does + # this on every execution, so no head ever finishes its checks + # (#1935). Deliberately no age cap: a check that never finishes + # keeps the head where it is instead of restarting that loop. + return decide( + "wait", + "current head has no OpenCode approval; branch is outdated before review dispatch, " + "but current-head checks are still queued or running; holding the update so their " + "evidence is not discarded", + ) if merge_state == "BEHIND": freshness_reason = "current head has no OpenCode approval; branch is outdated before review dispatch" else: diff --git a/scripts/ci/sanitize_contextual_orchestrator_sidecar_stream.py b/scripts/ci/sanitize_contextual_orchestrator_sidecar_stream.py index 18bc11b667..e055513954 100644 --- a/scripts/ci/sanitize_contextual_orchestrator_sidecar_stream.py +++ b/scripts/ci/sanitize_contextual_orchestrator_sidecar_stream.py @@ -16,10 +16,63 @@ r"code=(?P[A-Za-z0-9_.-]{1,64})" ) _PREFLIGHT_ROUTE_REJECTED = re.compile( - r"preflight_route_rejected provider=(?P[a-z][a-z0-9_]{0,63}) " + r"preflight_route_(?Prejected|deferred) provider=(?P[a-z][a-z0-9_]{0,63}) " r"error_type=(?P[A-Za-z_][A-Za-z0-9_]{0,63})" r"(?: http_status=(?P[1-5][0-9]{2}))?" ) +_LOG_PREFIX = re.compile( + r"^(?:(?P\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2},\d{3}) )?" + r"(?:DEBUG|INFO|WARNING|ERROR)[: ][A-Za-z0-9_.]+[: ]" +) +_AGENT_ID = r"[a-z][a-z0-9_]*" +_MODEL_ID = r"[A-Za-z0-9_./:-]+" +_ERROR_TYPE = r"[A-Za-z_][A-Za-z0-9_.]*" +_NUMBER = r"\d+(?:\.\d+)?" +# contextual_orchestrator/orchestrator.py templates at the vendored pin. Every +# field is a bounded identifier or number; ``error_message`` is free text and is +# deliberately excluded from the match so it can never be re-emitted. +# ``failures`` and ``reset_seconds`` are floats at runtime (``0.0 += 1.0``, ``30.0``), +# so they take the number charset; ``threshold`` is an int. +_ORCHESTRATOR_EVENTS = tuple( + re.compile(pattern) + for pattern in ( + rf"^provider_attempt agent_id={_AGENT_ID} model={_MODEL_ID} attempt=\d+/\d+$", + rf"^provider_attempt_failed agent_id={_AGENT_ID} model={_MODEL_ID} attempt=\d+ " + rf"error_type={_ERROR_TYPE} transient=(?:True|False)(?= error_message=)", + rf"^provider_backoff agent_id={_AGENT_ID} attempt=\d+ delay_seconds={_NUMBER}$", + rf"^provider_exhausted agent_id={_AGENT_ID} model={_MODEL_ID} attempts=\d+ " + rf"final_error_type={_ERROR_TYPE}$", + rf"^provider_rejected_permanent agent_id={_AGENT_ID} model={_MODEL_ID} attempts=\d+ " + rf"final_error_type={_ERROR_TYPE}$", + rf"^provider_no_retry_budget agent_id={_AGENT_ID} model={_MODEL_ID} attempts=\d+ " + rf"final_error_type={_ERROR_TYPE} transient=(?:True|False)$", + rf"^circuit_failure agent_id={_AGENT_ID} failures={_NUMBER} threshold=\d+$", + rf"^circuit_opened agent_id={_AGENT_ID} failures={_NUMBER} threshold=\d+ reset_seconds={_NUMBER}$", + rf"^circuit_reset agent_id={_AGENT_ID}$", + rf"^circuit_cleared agent_id={_AGENT_ID}$", + ) +) +# Python traceback anatomy. The orchestrator's generic request handler +# (``server.py`` ``except Exception: traceback.print_exc(); _send_error(500, +# "internal_error", ...)``) prints one traceback per unhandled exception, so the +# exception *type* and the innermost ``contextual_orchestrator`` frame are the +# only evidence of what escaped. Frame lines are indented; the terminal line +# (``Type: message``) starts at column 0. Only the bounded type identifier and +# the package-relative frame are re-emitted -- never the message, which can +# carry provider bodies or credentials. +_TRACEBACK_FRAME = re.compile( + r'^\s+File ".*?[/\\]contextual_orchestrator[/\\](?P[A-Za-z0-9_][A-Za-z0-9_/\\]*\.py)", ' + r"line (?P\d+), in (?P[A-Za-z0-9_<>]{1,80})$" +) +_TRACEBACK_TERMINAL = re.compile( + r"^(?P[A-Za-z_][A-Za-z0-9_]{0,63}(?:\.[A-Za-z_][A-Za-z0-9_]{0,63}){0,8})(?::.*)?$" +) +_TRACEBACK_CHAIN_LINES = frozenset( + ( + "During handling of the above exception, another exception occurred:", + "The above exception was the direct cause of the following exception:", + ) +) _PREFIX_SUMMARIES = ( ("review sidecar preflight failed:", "review sidecar preflight failed"), ("review sidecar discovery failed:", "review sidecar discovery failed"), @@ -43,6 +96,29 @@ ) +def _sanitize_orchestrator_event(stripped: str) -> str | None: + """Return an orchestrator route or circuit event reduced to its bounded fields. + + Accepts the bare message, Python's default ``LEVEL:name:message`` prefix, and + the sidecar formatter's ``asctime LEVEL name message`` prefix; the timestamp + is kept (digits and punctuation only) so per-route durations can be read as + differences. ``provider_attempt_failed`` is cut before ``error_message=``, + which carries upstream text. + """ + prefix = _LOG_PREFIX.match(stripped) + message = stripped[prefix.end():] if prefix is not None else stripped + for pattern in _ORCHESTRATOR_EVENTS: + match = pattern.match(message) + if match is None: + continue + summary = match.group(0) + if message.startswith("provider_attempt_failed "): + summary += " error_message=" + asctime = prefix.group("asctime") if prefix is not None else None + return f"{asctime} {summary}" if asctime else summary + return None + + def sanitize_line(line: str) -> str | None: """Return one allowlisted diagnostic summary or ``None`` for raw content.""" stripped = line.strip() @@ -61,13 +137,17 @@ def sanitize_line(line: str) -> str | None: preflight_route_rejected = _PREFLIGHT_ROUTE_REJECTED.search(stripped) if preflight_route_rejected is not None: summary = ( - f"preflight_route_rejected provider={preflight_route_rejected.group('provider')} " + f"preflight_route_{preflight_route_rejected.group('event')} " + f"provider={preflight_route_rejected.group('provider')} " f"error_type={preflight_route_rejected.group('error_type')}" ) http_status = preflight_route_rejected.group("http_status") if http_status is not None: summary += f" http_status={http_status}" return summary + orchestrator_event = _sanitize_orchestrator_event(stripped) + if orchestrator_event is not None: + return orchestrator_event if stripped in ("client_disconnected", "discovery_diagnostics_complete"): return stripped for prefix, summary in _PREFIX_SUMMARIES: @@ -76,21 +156,65 @@ def sanitize_line(line: str) -> str | None: return None +def _traceback_summary(exception_type: str | None, frame: str | None) -> str: + """Return the one bounded line kept per traceback: exception type and innermost frame.""" + return ( + f"unexpected_exception type={exception_type or 'unknown'} " + f"frame={frame or 'unknown'}" + ) + + def main() -> int: - """Stream sanitized summaries to stdout without retaining raw provider text.""" + """Stream sanitized summaries to stdout without retaining raw provider text. + + A traceback opens at its ``Traceback`` header and closes at its column-0 + terminal ``Type: message`` line (emitting ``unexpected_exception type=... + frame=...``), at the next header or allowlisted line, or at end of stream + (``type=unknown``). Indented lines inside it are frames and source echoes: + consumed, not counted as omitted, and only a ``contextual_orchestrator`` + frame's package path, line and function are retained. Any other column-0 + line closes the traceback and is classified like every other line. + """ omitted = 0 - unexpected_exception_reported = False + in_traceback = False + frame: str | None = None for line in sys.stdin: - if line.lstrip().startswith("Traceback"): - if not unexpected_exception_reported: - print("sidecar emitted an unexpected exception", flush=True) - unexpected_exception_reported = True + stripped = line.strip() + if not stripped or stripped in _TRACEBACK_CHAIN_LINES: + # Blank lines carry nothing (Python pads chain sentences with them). + continue + if stripped.startswith("Traceback"): + if in_traceback: + print(_traceback_summary(None, frame), flush=True) + in_traceback, frame = True, None + continue + if in_traceback: + frame_match = _TRACEBACK_FRAME.match(line.rstrip("\n")) + if frame_match is not None: + module = frame_match.group("module").replace("\\", "/") + frame = f"contextual_orchestrator/{module}:{frame_match.group('line')}:{frame_match.group('function')}" + continue + if line[:1].isspace(): + continue + in_traceback = False + sanitized = sanitize_line(line) + terminal = _TRACEBACK_TERMINAL.match(stripped) if sanitized is None else None + if terminal is not None: + print(_traceback_summary(terminal.group("type"), frame), flush=True) + continue + print(_traceback_summary(None, frame), flush=True) + if sanitized is None: + omitted += 1 + continue + print(sanitized, flush=True) continue sanitized = sanitize_line(line) if sanitized is None: omitted += 1 continue print(sanitized, flush=True) + if in_traceback: + print(_traceback_summary(None, frame), flush=True) if omitted: print(f"omitted_unstructured_lines={omitted}", flush=True) return 0 diff --git a/scripts/ci/strix_quick_gate.sh b/scripts/ci/strix_quick_gate.sh index 3a563d7020..c08f2fa36c 100755 --- a/scripts/ci/strix_quick_gate.sh +++ b/scripts/ci/strix_quick_gate.sh @@ -46,6 +46,18 @@ STRIX_EXECUTABLE_ROOT="${STRIX_EXECUTABLE_ROOT:-}" STRIX_EXECUTABLE_SHA256="${STRIX_EXECUTABLE_SHA256:-}" STRIX_TRANSIENT_RETRY_PER_MODEL="${STRIX_TRANSIENT_RETRY_PER_MODEL:-0}" STRIX_TRANSIENT_RETRY_BACKOFF_SECONDS="${STRIX_TRANSIENT_RETRY_BACKOFF_SECONDS:-3}" +## Extra same-model attempts granted only to the Caido sandbox bootstrap race +## (is_caido_bootstrap_timing_error), on top of STRIX_TRANSIENT_RETRY_PER_MODEL. +## That budget is 0 in production because the gateway owns model failover, but +## the sandbox never reaches the model: a fresh container is the only cure for +## a proxy that never came up, and without this the documented retry never ran +## (argos run 34013128112, 2026-09-06: one attempt, then the gateway blamed). +## A sandbox retry waits the same STRIX_TRANSIENT_RETRY_BACKOFF_SECONDS as any +## other retry -- a pause between container attempts, not an inference deadline. +STRIX_SANDBOX_BOOTSTRAP_RETRIES="${STRIX_SANDBOX_BOOTSTRAP_RETRIES:-1}" +## Sandbox-specific retries actually taken by the primary model's attempt +## loop; the final verdict reports this observed count, not the budget. +SANDBOX_RETRIES_USED=0 STRIX_FAIL_ON_MIN_SEVERITY="${STRIX_FAIL_ON_MIN_SEVERITY:-MEDIUM}" STRIX_FAIL_ON_PROVIDER_SIGNAL="${STRIX_FAIL_ON_PROVIDER_SIGNAL:-0}" RUN_START_EPOCH=0 @@ -166,11 +178,24 @@ import sys root = Path(sys.argv[1]) known_internal_warning = re.compile( r"^\d{4}-\d{2}-\d{2} \d{2}:\d{2}:\d{2}\.\d+ WARNING " - r"[^ ]+ - strix\.core\.execution: agent [0-9a-f]+ " + r"[^ ]+ - strix\.core\.execution: " + r"(?:" + r"agent [0-9a-f]+ " r"(?:" r"produced non-lifecycle final output in non-interactive mode" r"|ended a turn without a lifecycle tool call \(interactive=False\)" r"); forcing tool continuation \(\d+/\d+\): " + # strix-agent 1.5.3 strix/core/execution.py:763 logs this only inside its + # bounded transient-retry branch, immediately before the replay runs, so + # the line means "a retry is happening now", not "the scan failed". An + # exhausted retry logs `agent run failed for …; marking failed` at ERROR + # with a traceback and exits non-zero; neither of those is touched here. + # Anchored before the exception repr on purpose: the same class appears + # as InternalServerError today and as a different type after a gateway + # pin advance. Re-verify the message format on every strix-agent bump. + r"|transient model/provider error for [0-9a-f]+; replaying turn " + r"\(attempt \d+/\d+, backoff [0-9.]+s\): " + r")" ) known_scanner_warning = re.compile( r"^(?:│ MODEL QUALITY WARNING\s+│|" @@ -885,6 +910,7 @@ if is_github_models_model "$PRIMARY_MODEL" && [ -z "$LLM_API_BASE_FILE" ]; then fi require_non_negative_integer "$STRIX_TRANSIENT_RETRY_PER_MODEL" "STRIX_TRANSIENT_RETRY_PER_MODEL" +require_non_negative_integer "$STRIX_SANDBOX_BOOTSTRAP_RETRIES" "STRIX_SANDBOX_BOOTSTRAP_RETRIES" require_non_negative_integer "$STRIX_TRANSIENT_RETRY_BACKOFF_SECONDS" "STRIX_TRANSIENT_RETRY_BACKOFF_SECONDS" require_non_negative_integer "$STRIX_PROCESS_TIMEOUT_SECONDS" "STRIX_PROCESS_TIMEOUT_SECONDS" require_non_negative_integer "$STRIX_TOTAL_TIMEOUT_SECONDS" "STRIX_TOTAL_TIMEOUT_SECONDS" @@ -3092,6 +3118,8 @@ run_strix_with_transient_retry() { local model="$1" local max_attempts=$((STRIX_TRANSIENT_RETRY_PER_MODEL + 1)) local attempt=1 + local sandbox_retries_used=0 + SANDBOX_RETRIES_USED=0 while [ "$attempt" -le "$max_attempts" ]; do local run_rc=0 @@ -3107,7 +3135,18 @@ run_strix_with_transient_retry() { fi if [ "$attempt" -ge "$max_attempts" ]; then - return 1 + ## The per-model budget is spent. The sandbox bootstrap race is not + ## a model failure, so it may draw on its own bounded budget. The + ## budget is charged HERE, in the same branch that grants the + ## attempt: charging it anywhere else lets a log that matches the + ## sandbox class together with another class grant without + ## charging, and nothing in production bounds the loop then. + if is_caido_bootstrap_timing_error && [ "$sandbox_retries_used" -lt "$STRIX_SANDBOX_BOOTSTRAP_RETRIES" ]; then + max_attempts=$((max_attempts + 1)) + sandbox_retries_used=$((sandbox_retries_used + 1)) + else + return 1 + fi fi if [ "$STRIX_TOTAL_TIMEOUT_SECONDS" -gt 0 ] && [ "$(remaining_total_budget)" -le 0 ]; then @@ -3138,6 +3177,10 @@ run_strix_with_transient_retry() { retry_reason="Caido sandbox bootstrap timing" fi echo "Retrying model '$model' due to $retry_reason (attempt $((attempt + 1))/$max_attempts)." >&2 + ## Reported only once the retry really runs: a granted attempt can + ## still be vetoed by the timeout / transient checks above, and the + ## verdict must state retries taken, not budget spent. + SANDBOX_RETRIES_USED="$sandbox_retries_used" sleep "$STRIX_TRANSIENT_RETRY_BACKOFF_SECONDS" attempt=$((attempt + 1)) done @@ -4335,6 +4378,21 @@ run_current_target_scan() { local strict_primary_provider_fallback=0 if [ "$INFRA_ERROR_DETECTED" -eq 1 ] && provider_signal_fail_closed_enabled; then if is_contextual_orchestrator_model "$PRIMARY_MODEL"; then + ## Name the component that actually failed. The sandbox race ends + ## the run before any model request, so blaming the gateway here + ## corrupted every census that read this line (2026-09-06: two of + ## six recent Strix artifacts were this class, with the sidecar + ## reporting ready routes that were never called). The leading + ## STRIX_PROVIDER_UNAVAILABLE token is kept: the workflow classifies + ## a finding-free sandbox outage as incomplete infrastructure + ## evidence, and its tests pin that. + if is_caido_bootstrap_timing_error; then + ## Only what the gate observed: the last attempt's log shows the + ## sandbox bootstrap failure, and this many sandbox-specific + ## retries were taken. Nothing is claimed about the gateway. + echo "STRIX_PROVIDER_UNAVAILABLE: STRIX_SANDBOX_UNAVAILABLE: the last Strix attempt ended in the sandbox bootstrap (Caido proxy on 127.0.0.1 unreachable through Strix's loginAsGuest attempts) after ${SANDBOX_RETRIES_USED} sandbox-specific same-model retries (budget ${STRIX_SANDBOX_BOOTSTRAP_RETRIES}); this verdict names Strix's sandbox, not the LLM gateway." >&2 + return 1 + fi echo "STRIX_PROVIDER_UNAVAILABLE: contextual-orchestrator/orchestrator/free exhausted; the gateway owns provider discovery and failover." >&2 return 1 elif is_model_retryable_error "$PRIMARY_MODEL" && has_distinct_fallback_model_for_model "$PRIMARY_MODEL"; then diff --git a/tests/test_agent_mention_downstream_idempotency.py b/tests/test_agent_mention_downstream_idempotency.py index c9b6ab86ea..cb3c31763e 100644 --- a/tests/test_agent_mention_downstream_idempotency.py +++ b/tests/test_agent_mention_downstream_idempotency.py @@ -1,5 +1,8 @@ """Static contracts for downstream review-agent invocation idempotency.""" +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, +) from pathlib import Path ROOT = Path(__file__).resolve().parents[1] @@ -33,10 +36,19 @@ def test_downstream_workflows_claim_artifacts_and_coalesce_by_pull_request() -> ): header = text.split("\npermissions:\n", 1)[0] job = text.split(" validate-and-forward:\n", 1)[1] - concurrency = job.split(" concurrency:\n", 1)[1].split( - "\n runs-on:", 1 - )[0] - assert "concurrency:" not in header + concurrency = header.split("\nconcurrency:\n", 1)[1] + # 109d79b7 ("replace unsupported queue concurrency") deleted a + # workflow-level block that used ``queue: max``, a key GitHub Actions + # does not support, and parked the group on the job while it was at it. + # What that commit pins is the absence of ``queue:``, not the level: the + # group is back at workflow level because a job-level group is never + # evaluated while the run waits behind the organization job ceiling, so a + # superseded mention held its queue slot until a runner freed up. Every + # other queue-bearing workflow here (strix.yml, noema-review.yml, + # opencode-review.yml, codeql-scan-dispatch.yml, + # opencode-review-dispatch.yml) keys its group at workflow level too. + assert "queue:" not in header + assert " concurrency:" not in job assert "github.event.client_payload.agent_invocation_key" in text assert "cwl-agent-invocation:" in text assert "source_comment_id" in text @@ -45,7 +57,7 @@ def test_downstream_workflows_claim_artifacts_and_coalesce_by_pull_request() -> f"group: {workflow_name}-${{{{ github.event.client_payload.target_repository }}}}-${{{{ github.event.client_payload.pr_number || github.run_id }}}}" in concurrency ) - assert "cancel-in-progress: true" in concurrency + assert workflow_level_cancels_in_progress(text) assert "queue: max" not in text assert "^[0-9a-f]{64}$" in text assert "^[1-9][0-9]*$" in text diff --git a/tests/test_agent_mention_queue_isolation.py b/tests/test_agent_mention_queue_isolation.py index e93ae61aed..d751076661 100644 --- a/tests/test_agent_mention_queue_isolation.py +++ b/tests/test_agent_mention_queue_isolation.py @@ -2,6 +2,9 @@ from __future__ import annotations +import re + + from pathlib import Path ROOT = Path(__file__).resolve().parents[1] @@ -68,4 +71,7 @@ def test_interactive_queue_retires_older_requests_for_only_the_same_pr() -> None concurrency = _concurrency_block(local_job) assert "github.event.issue.number || github.run_id" in concurrency - assert "cancel-in-progress: true" in concurrency + # Anchored on the JOB block, not the workflow-level helper: this router + # declares no workflow-level concurrency, so the sibling helper would raise + # rather than read the block this test is about. + assert re.search(r"(?m)^[ \t]+cancel-in-progress:[ \t]+true[ \t]*$", concurrency) diff --git a/tests/test_agent_review_runtime_quality_consolidation.py b/tests/test_agent_review_runtime_quality_consolidation.py index b0c90eb707..4592cfd166 100644 --- a/tests/test_agent_review_runtime_quality_consolidation.py +++ b/tests/test_agent_review_runtime_quality_consolidation.py @@ -2,6 +2,10 @@ from __future__ import annotations +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, +) + import re import subprocess from pathlib import Path @@ -56,7 +60,7 @@ def test_pr_concurrency_cancels_only_the_same_workflow_repository_and_pr() -> No "${{ github.repository }}-${{ github.event.pull_request.number }}" in concurrency_contract ) - assert "cancel-in-progress: true" in concurrency_contract + assert workflow_level_cancels_in_progress(workflow) assert "github.sha" not in concurrency_contract assert "head.sha" not in concurrency_contract assert "github.ref" not in concurrency_contract diff --git a/tests/test_audit_org_codeql_coverage.py b/tests/test_audit_org_codeql_coverage.py index ccd2cd9c42..0ffc8fa749 100644 --- a/tests/test_audit_org_codeql_coverage.py +++ b/tests/test_audit_org_codeql_coverage.py @@ -14,6 +14,23 @@ def covered_by_default_setup(name: str) -> dict: "name": name, "archived": False, "default_setup_state": "configured", + "default_setup_languages": ["actions", "python"], + "latest_codeql_analysis": None, + } + + +def default_setup_scanning_nothing(name: str) -> dict: + """Return a repository whose default-setup is on but has no languages enabled. + + The live shape measured on 2026-09-07 for ``life-os``, ``aFIPC`` and + ``inkspan``: ``state`` is ``configured``, ``languages`` is empty and + ``schedule`` is null. ``life-os`` had zero CodeQL analyses of any language. + """ + return { + "name": name, + "archived": False, + "default_setup_state": "configured", + "default_setup_languages": [], "latest_codeql_analysis": None, } @@ -89,6 +106,60 @@ def test_default_setup_alone_counts_as_coverage() -> None: assert audit.audit_codeql_coverage(repositories, now=NOW) == [] +def test_default_setup_with_no_languages_enabled_is_not_coverage() -> None: + """A setup that scans nothing must not satisfy the configured-state check. + + Measured 2026-09-07: ``life-os`` reports ``configured`` with an empty + ``languages`` list and has zero CodeQL analyses of any language, while + ``codeql-pr.yml`` still runs on every pull request head. Before this check + the audit passed it on the state alone. + """ + repositories = [default_setup_scanning_nothing("life-os")] + + assert audit.audit_codeql_coverage(repositories, now=NOW) == [ + "life-os has CodeQL default-setup configured with no languages enabled, " + "so it scans nothing and produces no analyses" + ] + + +def test_default_setup_scanning_nothing_still_passes_on_a_fresh_analysis() -> None: + """The empty-language setup is only a gap when nothing else covers the repo. + + ``aFIPC`` and ``inkspan`` both report the empty-language shape yet receive + analyses from a repository-local ``codeql.yml``, so flagging them would be a + false alarm. + """ + repository = default_setup_scanning_nothing("aFIPC") + repository["latest_codeql_analysis"] = covered_by_recent_analysis("aFIPC")[ + "latest_codeql_analysis" + ] + + assert audit.audit_codeql_coverage([repository], now=NOW) == [] + + +def test_payload_without_the_languages_key_fails_closed() -> None: + """A payload predating the workflow change must not pass on state alone. + + Falling back to ``default_setup_state`` when the key is missing would + silently restore the gap this check exists to close. + """ + repository = covered_by_default_setup("PolicyWeave") + del repository["default_setup_languages"] + + assert audit.audit_codeql_coverage([repository], now=NOW) == [ + "PolicyWeave has CodeQL default-setup configured with no languages " + "enabled, so it scans nothing and produces no analyses" + ] + + +def test_non_list_languages_value_fails_closed() -> None: + """A malformed ``languages`` value is not evidence that anything is scanned.""" + repository = covered_by_default_setup("PolicyWeave") + repository["default_setup_languages"] = "python" + + assert len(audit.audit_codeql_coverage([repository], now=NOW)) == 1 + + def test_recent_analysis_alone_counts_as_coverage() -> None: repositories = [covered_by_recent_analysis("TEPP")] @@ -269,3 +340,60 @@ def test_parse_args_defaults_to_none() -> None: args = audit.parse_args([]) assert args.repositories_json is None + + +def test_main_refuses_an_empty_payload_instead_of_passing_vacuously( + monkeypatch, capsys +) -> None: + """An audit that examined nothing must not print PASS. + + ``audit_codeql_coverage([])`` returning no gaps is correct -- there are no + repositories to have gaps. What is wrong is ``main`` turning that into + "PASS: all 0 repositories have real CodeQL coverage" and exiting 0, which + is the same vacuous-pass shape as a default setup that is configured with + no languages enabled. + """ + monkeypatch.setattr("sys.stdin", StringIO("[]")) + + assert audit.main([]) == 2 + captured = capsys.readouterr() + assert "audited nothing" in captured.err + assert "PASS" not in captured.out + + +def test_main_refuses_a_payload_of_only_archived_repositories(monkeypatch, capsys) -> None: + """Counting what was supplied, not what was examined, left the hole open. + + An archived-only payload is non-empty, so it passed the first version of + this guard, and archived repositories are then legitimately skipped -- the + run reported "PASS: all 1 repositories have real CodeQL coverage" having + examined none of them. Found in review, one layer out from the empty-payload + case it replaces. + """ + monkeypatch.setattr( + "sys.stdin", StringIO(json.dumps([uncovered("trivy-sarif-repro", archived=True)])) + ) + + assert audit.main([]) == 2 + captured = capsys.readouterr() + assert "0 of 1 repositories were eligible" in captured.err + assert "PASS" not in captured.out + + +def test_pass_line_counts_examined_repositories_not_supplied_ones( + tmp_path, capsys +) -> None: + """The PASS line must not credit archived repositories it never examined.""" + payload = tmp_path / "repositories.json" + payload.write_text( + json.dumps( + [ + covered_by_default_setup("PolicyWeave"), + uncovered("trivy-sarif-repro", archived=True), + ] + ), + encoding="utf-8", + ) + + assert audit.main([str(payload)]) == 0 + assert "PASS: all 1 repositories" in capsys.readouterr().out diff --git a/tests/test_bootstrap_codeql_pull_requests.py b/tests/test_bootstrap_codeql_pull_requests.py index eb20c3d1e0..12fd1d8b52 100644 --- a/tests/test_bootstrap_codeql_pull_requests.py +++ b/tests/test_bootstrap_codeql_pull_requests.py @@ -2,6 +2,10 @@ from __future__ import annotations +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, +) + from io import StringIO import json import subprocess @@ -67,7 +71,7 @@ def test_rendered_workflow_redetects_stacks_and_pins_every_action() -> None: assert "pull_request:" not in workflow assert "github.event.pull_request" not in workflow assert "github.event_name == 'push' && github.ref || github.event_name" in workflow - assert "cancel-in-progress: true" in workflow + assert workflow_level_cancels_in_progress(workflow) assert workflow.count("@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9") == 2 assert "actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0" in workflow diff --git a/tests/test_central_required_workflow_ruleset_audit.py b/tests/test_central_required_workflow_ruleset_audit.py index 77bbf53305..cec0d2aead 100644 --- a/tests/test_central_required_workflow_ruleset_audit.py +++ b/tests/test_central_required_workflow_ruleset_audit.py @@ -517,13 +517,21 @@ def test_audit_organization_codeql_coverage_step_has_freshness_and_credential_gu " exit 1\n" " fi" ) in workflow + # This pinned `--jq .state` until 2026-09-07. What it protects is that the + # audit reads default-setup per repository, not that it reads only the + # state: `state == "configured"` with an empty `languages` list scans + # nothing and produces no analyses (live on life-os, aFIPC and inkspan), + # so the step now fetches the whole object and extracts both fields. + assert 'repos/${ORG_LOGIN}/${repository}/code-scanning/default-setup"' in workflow + assert """default_setup_state=$(jq '.state // null' "$default_setup_json")""" in workflow assert ( - 'repos/${ORG_LOGIN}/${repository}/code-scanning/default-setup" --jq .state' + """default_setup_languages=$(jq '.languages // []' "$default_setup_json")""" in workflow ) + assert "default_setup_languages: $default_setup_languages" in workflow assert ( 'if [ "$archived" != "true" ]; then\n' - ' default_setup_state_json="$RUNNER_TEMP/codeql-default-setup-' + ' default_setup_json="$RUNNER_TEMP/codeql-default-setup-' '${repository//[^A-Za-z0-9_.-]/_}.json"' ) in workflow assert ( @@ -540,6 +548,33 @@ def test_audit_organization_codeql_coverage_step_has_freshness_and_credential_gu assert "python3 scripts/ci/audit_org_codeql_coverage.py" in workflow +def test_codeql_coverage_audit_survives_a_ruleset_drift_failure() -> None: + """An owner-configured ruleset drift must not disable the coverage detector. + + Both audits live in one job, and the ruleset step exits 1 on governance + drift. It did on 2026-09-06 ("exactly two approving reviews are not + required", "last-push approval protection is disabled"), so every run since + 2026-09-04 failed before reaching the CodeQL coverage step. The subjects are + unrelated and the coverage step has no data dependency on the one above it, + so it is guarded by ``if: always()``. + + The bootstrap steps below it are deliberately *not* given the same guard: + they open pull requests, and running a mutation after an unexplained + upstream failure is a different decision from running a read-only detector. + """ + workflow = (REPO_ROOT / ".github/workflows/audit-central-ruleset.yml").read_text( + encoding="utf-8" + ) + coverage_step = workflow.split("- name: Audit organization CodeQL coverage\n", 1)[1] + before_next_step = coverage_step.split(" - name: ", 1)[0] + + assert "\n if: always()\n" in before_next_step + bootstrap_step = workflow.split( + "- name: Create missing CodeQL setup pull requests\n", 1 + )[1].split(" - name: ", 1)[0] + assert "if: always()" not in bootstrap_step + + def test_codeql_gap_bootstrap_uses_trusted_opencode_identity_without_pr_head_execution() -> None: """Backlog item 38 stays on trusted main and treats installation tokens as opaque.""" workflow = (REPO_ROOT / ".github/workflows/audit-central-ruleset.yml").read_text( diff --git a/tests/test_close_empty_pr_queue_pressure.py b/tests/test_close_empty_pr_queue_pressure.py index 331a604631..6da88f63f1 100644 --- a/tests/test_close_empty_pr_queue_pressure.py +++ b/tests/test_close_empty_pr_queue_pressure.py @@ -1,5 +1,6 @@ """Regression contracts for close-event runner admission pressure.""" +import re from pathlib import Path import pytest @@ -29,7 +30,7 @@ def test_closed_pull_request_does_not_allocate_a_noop_runner( assert "closed" in workflow assert "github.event.pull_request.number" in concurrency assert "github.event.pull_request.head.sha" not in concurrency - assert "cancel-in-progress:" in concurrency + assert re.search(r"(?m)^[ \t]+cancel-in-progress:[ \t]+\S", concurrency) assert "cancel-closed-pr-runs:" not in workflow assert "github.event.action != 'closed'" in workflow assert evidence_job in workflow diff --git a/tests/test_codeql_pr_workflow_contract.py b/tests/test_codeql_pr_workflow_contract.py index 90612e9bc8..2d11ca0141 100644 --- a/tests/test_codeql_pr_workflow_contract.py +++ b/tests/test_codeql_pr_workflow_contract.py @@ -59,25 +59,49 @@ def test_codeql_pr_workflow_structure() -> None: assert "commits/${PR_HEAD_SHA}/statuses" in workflow -def test_codeql_pr_dispatches_one_language_per_shard_not_the_full_matrix() -> None: - """Every shard dispatches, but only its own language, not the full matrix. - - Each shard carries its own run, job, language, and head identity so the - trusted dispatcher can wake only that intentionally failed job. +def test_codeql_pr_shards_do_not_dispatch_and_coordinator_sends_the_full_matrix_once() -> None: + """Shards consume verdicts; one coordinator POSTs the remaining language matrix. + + Per-language repository_dispatch runs were the 60-job ceiling: live + 2026-09-07 queued ~149 ``codeql-scan-dispatch.yml`` runs across 60 PR@SHA + tuples because each analyze-head shard POSTed its own ``codeql-scan``. + Language independence now lives in the handler's job matrix, so the + required workflow may send every still-pending language in one payload. """ workflow = WORKFLOW_PATH.read_text(encoding="utf-8") - - assert "id: dispatch" in workflow - assert 'matrix:[{language:$language,"build-mode":$build_mode}]' in workflow - assert "needs.detect-languages.outputs.matrix).include[0]" not in workflow - assert "DISPATCH_OUTCOME: ${{ steps.dispatch.outcome }}" in workflow - assert workflow.count("- name: Request current-head CodeQL scan dispatch") == 1 + analyze_head = workflow.split(" analyze-head:\n", 1)[1].split( + " dispatch-current-head:\n", 1 + )[0] + coordinator = workflow.split(" dispatch-current-head:\n", 1)[1] + + assert "id: dispatch" in analyze_head + assert "repos/ContextualWisdomLab/.github/dispatches" not in analyze_head + assert 'event_type:"codeql-scan"' not in analyze_head + assert 'matrix:[{language:$language,"build-mode":$build_mode}]' not in workflow + assert "required_job_id:$required_job_id" not in analyze_head + assert "required_language:$required_language" not in analyze_head + assert "DISPATCH_OUTCOME: ${{ steps.dispatch.outcome }}" in analyze_head + assert workflow.count("- name: Read current-head CodeQL dispatch verdict") == 1 assert workflow.count("- name: Release runner or enforce current-head CodeQL verdict") == 1 + assert workflow.count("- name: Dispatch current-head CodeQL scan") == 1 + assert "needs: [detect-languages, analyze-head]" in coordinator + assert "always()" in coordinator.split("\n runs-on:", 1)[0] + assert "github.event.action != 'closed'" in coordinator.split("\n runs-on:", 1)[0] + assert "github.run_attempt == 1" in coordinator.split("\n runs-on:", 1)[0] + assert coordinator.count("repos/ContextualWisdomLab/.github/dispatches") == 1 + assert 'event_type:"codeql-scan"' in coordinator + assert "required_jobs:$required_jobs" in coordinator + assert "required_run_id:$required_run_id" in coordinator + assert "required_job_id:$required_job_id" not in coordinator + assert "required_language:$required_language" not in coordinator + assert "actions/runs/${REQUIRED_RUN_ID}/jobs" in coordinator + assert "CodeQL compatibility analysis (" in coordinator RUN_BLOCK_STEP_NAMES = ( - "Request current-head CodeQL scan dispatch", + "Read current-head CodeQL dispatch verdict", "Release runner or enforce current-head CodeQL verdict", + "Dispatch current-head CodeQL scan", ) @@ -103,8 +127,9 @@ def test_codeql_pr_dispatch_and_release_run_blocks_are_valid_bash() -> None: assert result.returncode == 0, f"{step_name}: {result.stderr}" -DISPATCH_STEP_NAME = "Request current-head CodeQL scan dispatch" +DISPATCH_STEP_NAME = "Read current-head CodeQL dispatch verdict" VERDICT_STEP_NAME = "Release runner or enforce current-head CodeQL verdict" +COORDINATOR_STEP_NAME = "Dispatch current-head CodeQL scan" def _run_verdict_read( @@ -238,19 +263,21 @@ def test_codeql_action_steps_use_one_version_per_workflow() -> None: assert len(refs) == 1, f"scheduled-security-scan.yml mixes CodeQL action refs: {sorted(refs)}" -def test_codeql_shard_releases_runner_and_dispatches_exact_wake_identity() -> None: +def test_codeql_shard_releases_runner_and_reads_exact_head_verdict() -> None: workflow = WORKFLOW_PATH.read_text(encoding="utf-8") - shard = workflow.split(" analyze-head:\n", 1)[1] + shard = workflow.split(" analyze-head:\n", 1)[1].split( + " dispatch-current-head:\n", 1 + )[0] assert "while :; do" not in shard assert "poll_interval_seconds" not in shard assert "sleep " not in shard - assert "job.check_run_id" in shard - assert "required_run_id:$required_run_id" in shard - assert "required_job_id:$required_job_id" in shard - assert "required_language:$required_language" in shard + assert "job.check_run_id" not in shard + assert "required_job_id:$required_job_id" not in shard + assert "required_language:$required_language" not in shard assert "The dispatch workflow will rerun this exact failed CodeQL job" in shard assert "commits/${PR_HEAD_SHA}/statuses" in shard + assert "repos/ContextualWisdomLab/.github/dispatches" not in shard def test_codeql_required_workflow_does_not_gain_actions_write() -> None: @@ -259,6 +286,335 @@ def test_codeql_required_workflow_does_not_gain_actions_write() -> None: shard_permissions = workflow.split(" analyze-head:\n", 1)[1].split( " strategy:\n", 1 )[0] + coordinator_permissions = workflow.split(" dispatch-current-head:\n", 1)[1].split( + " steps:\n", 1 + )[0] assert "actions: write" not in permissions assert "actions: write" not in shard_permissions + assert "actions: write" not in coordinator_permissions + + +def test_codeql_pr_attempt_one_without_verdict_fails_pending_without_dispatch( + tmp_path: Path, +) -> None: + """Attempt 1 with no authenticated status releases the runner and does not POST.""" + bash = shutil.which("bash") + jq = shutil.which("jq") + assert bash is not None and jq is not None, "bash and jq are required to run this test" + + workflow_text = WORKFLOW_PATH.read_text(encoding="utf-8") + dispatch_script = _extract_run_block(workflow_text, DISPATCH_STEP_NAME) + verdict_script = _extract_run_block(workflow_text, VERDICT_STEP_NAME) + head_sha = "b" * 40 + fake_bin = tmp_path / "bin" + fake_bin.mkdir() + post_log = tmp_path / "posts" + fake_gh = fake_bin / "gh" + fake_gh.write_text( + "#!/usr/bin/env bash\n" + "set -euo pipefail\n" + 'test "$1" = api\n' + 'if [ "${2:-}" = "-X" ]; then\n' + ' printf \'%s\\n\' "$4" >>"$FAKE_POST_LOG"\n' + " exit 0\n" + "fi\n" + 'case "$2" in\n' + " */pulls/*) printf '%s\\n' \"$FAKE_PULL_JSON\" ;;\n" + " */statuses) printf '%s\\n' \"$FAKE_STATUSES_JSON\" ;;\n" + " *) exit 1 ;;\n" + "esac\n", + encoding="utf-8", + ) + fake_gh.chmod(0o755) + output = tmp_path / "github-output" + env = { + **os.environ, + "PATH": f"{fake_bin}:{os.environ['PATH']}", + "FAKE_PULL_JSON": json.dumps({"head": {"sha": head_sha}, "state": "open"}), + "FAKE_STATUSES_JSON": json.dumps([]), + "FAKE_POST_LOG": str(post_log), + "GH_TOKEN": "fake-token", + "TARGET_REPOSITORY": "ContextualWisdomLab/naruon", + "PR_NUMBER": "42", + "PR_HEAD_SHA": head_sha, + "LANGUAGE": "python", + "BUILD_MODE": "none", + "RUN_ATTEMPT": "1", + "REQUIRED_RUN_ID": "42", + "GITHUB_OUTPUT": str(output), + } + dispatch_result = subprocess.run( + [bash], input=dispatch_script, text=True, capture_output=True, check=False, + env=env, timeout=60, + ) + assert dispatch_result.returncode == 0, dispatch_result.stderr + assert "verdict=pending" in output.read_text(encoding="utf-8") + assert not post_log.exists() + verdict_result = subprocess.run( + [bash], + input=verdict_script, + text=True, + capture_output=True, + check=False, + env={ + **os.environ, + "LANGUAGE": "python", + "DISPATCH_OUTCOME": "success", + "VERDICT_STATE": "pending", + }, + timeout=60, + ) + assert verdict_result.returncode == 1 + assert "CodeQL scan dispatched" in verdict_result.stdout + + +def _write_coordinator_fakes( + tmp_path: Path, + *, + pull: dict, + jobs: dict, + statuses: list[dict], +) -> tuple[Path, Path, Path]: + """Install fake gh/curl binaries and return (bin, post_log, post_body).""" + fake_bin = tmp_path / "bin" + fake_bin.mkdir(parents=True) + post_log = tmp_path / "posts" + post_body = tmp_path / "post-body" + fake_gh = fake_bin / "gh" + fake_gh.write_text( + "#!/usr/bin/env bash\n" + "set -euo pipefail\n" + 'test "$1" = api\n' + "shift\n" + "method=GET\n" + "path=\n" + "jq_filter=\n" + "while [ $# -gt 0 ]; do\n" + ' case "$1" in\n' + " -X) shift; method=$1 ;;\n" + " --input) shift; input=$1 ;;\n" + " --jq|-q) shift; jq_filter=$1 ;;\n" + " --paginate) ;;\n" + ' repos/*) path=$1 ;;\n' + " esac\n" + " shift || true\n" + "done\n" + 'if [ "$method" = POST ]; then\n' + ' printf \'%s\\n\' "$path" >>"$FAKE_POST_LOG"\n' + ' if [ "${input:-}" = "-" ]; then cat >>"$FAKE_POST_BODY"; fi\n' + " exit 0\n" + "fi\n" + "body=\n" + 'case "$path" in\n' + " */pulls/*) body=$FAKE_PULL_JSON ;;\n" + " */statuses) body=$FAKE_STATUSES_JSON ;;\n" + " */actions/runs/*/jobs) body=$FAKE_JOBS_JSON ;;\n" + " *) exit 1 ;;\n" + "esac\n" + 'if [ -n "${jq_filter}" ]; then printf \'%s\\n\' "$body" | jq -c "$jq_filter"; else printf \'%s\\n\' "$body"; fi\n', + encoding="utf-8", + ) + fake_gh.chmod(0o755) + fake_curl = fake_bin / "curl" + fake_curl.write_text( + "#!/usr/bin/env bash\n" + "set -euo pipefail\n" + 'printf \'%s\\n\' "$*" >>"$FAKE_CURL_LOG"\n' + 'if [[ " $* " == *"exchange_github_app_token"* ]]; then\n' + " printf '%s\\n' '{\"token\":\"fake-app-token\"}'\n" + " exit 0\n" + "fi\n" + "printf '%s\\n' '{\"value\":\"fake-oidc-token\"}'\n", + encoding="utf-8", + ) + fake_curl.chmod(0o755) + (tmp_path / "pull.json").write_text(json.dumps(pull), encoding="utf-8") + (tmp_path / "jobs.json").write_text(json.dumps(jobs), encoding="utf-8") + (tmp_path / "statuses.json").write_text(json.dumps(statuses), encoding="utf-8") + return fake_bin, post_log, post_body + + +def _run_coordinator( + tmp_path: Path, + *, + pull: dict | None = None, + jobs: dict | None = None, + statuses: list[dict] | None = None, + env_overrides: dict[str, str] | None = None, +) -> tuple[subprocess.CompletedProcess[str], Path, Path]: + """Execute the coordinator dispatch block against fixture-backed APIs.""" + bash = shutil.which("bash") + jq = shutil.which("jq") + assert bash is not None and jq is not None, "bash and jq are required to run this test" + + head_sha = "b" * 40 + pull = pull or { + "state": "open", + "head": {"sha": head_sha, "ref": "feature"}, + "base": {"sha": "a" * 40, "ref": "main"}, + } + jobs = jobs or { + "total_count": 2, + "jobs": [ + { + "id": 101, + "name": "CodeQL compatibility analysis (python)", + "status": "completed", + "conclusion": "failure", + }, + { + "id": 102, + "name": "CodeQL compatibility analysis (actions)", + "status": "completed", + "conclusion": "failure", + }, + ], + } + statuses = statuses if statuses is not None else [] + fake_bin, post_log, post_body = _write_coordinator_fakes( + tmp_path, pull=pull, jobs=jobs, statuses=statuses + ) + script = _extract_run_block( + WORKFLOW_PATH.read_text(encoding="utf-8"), COORDINATOR_STEP_NAME + ) + env = { + **os.environ, + "PATH": f"{fake_bin}:{os.environ['PATH']}", + "FAKE_PULL_JSON": json.dumps(pull), + "FAKE_JOBS_JSON": json.dumps(jobs), + "FAKE_STATUSES_JSON": json.dumps(statuses), + "FAKE_POST_LOG": str(post_log), + "FAKE_POST_BODY": str(post_body), + "FAKE_CURL_LOG": str(tmp_path / "curl.log"), + "GH_TOKEN": "fake-token", + "TARGET_REPOSITORY": "ContextualWisdomLab/naruon", + "GITHUB_REPOSITORY": "ContextualWisdomLab/naruon", + "PR_NUMBER": "42", + "PR_BASE_REF": "main", + "PR_BASE_SHA": "a" * 40, + "PR_HEAD_REF": "feature", + "PR_HEAD_SHA": head_sha, + "REQUIRED_RUN_ID": "99", + "MATRIX": json.dumps( + { + "include": [ + {"language": "python", "build-mode": "none"}, + {"language": "actions", "build-mode": "none"}, + ] + } + ), + "ACTIONS_ID_TOKEN_REQUEST_TOKEN": "oidc-request-token", + "ACTIONS_ID_TOKEN_REQUEST_URL": "https://example.test/oidc", + "OIDC_AUDIENCE": "opencode-github-action", + "OPENCODE_API_BASE_URL": "https://api.opencode.ai", + **(env_overrides or {}), + } + result = subprocess.run( + [bash], input=script, text=True, capture_output=True, check=False, env=env, + timeout=60, + ) + return result, post_log, post_body + + +def test_codeql_coordinator_posts_one_dispatch_for_every_pending_language( + tmp_path: Path, +) -> None: + """One repository_dispatch carries every language that still needs a scan.""" + result, post_log, post_body = _run_coordinator(tmp_path) + + assert result.returncode == 0, result.stderr + result.stdout + assert post_log.read_text(encoding="utf-8").splitlines() == [ + "repos/ContextualWisdomLab/.github/dispatches" + ] + payload = json.loads(post_body.read_text(encoding="utf-8")) + assert payload["event_type"] == "codeql-scan" + client = payload["client_payload"] + assert client["target_repository"] == "ContextualWisdomLab/naruon" + assert client["pr_number"] == "42" + assert client["required_run_id"] == "99" + assert "required_job_id" not in client + assert "required_language" not in client + languages = [entry["language"] for entry in client["matrix"]] + assert languages == ["python", "actions"] + jobs_by_language = { + entry["language"]: entry["job_id"] for entry in client["required_jobs"] + } + assert jobs_by_language == {"python": 101, "actions": 102} + + +def test_codeql_coordinator_skips_dispatch_when_every_language_has_a_verdict( + tmp_path: Path, +) -> None: + """A rerun that already has terminal statuses must not enqueue another scan.""" + result, post_log, post_body = _run_coordinator( + tmp_path, + statuses=[ + { + "context": "codeql-dispatch/python", + "state": "success", + "creator": {"login": "opencode-agent[bot]"}, + }, + { + "context": "codeql-dispatch/actions", + "state": "failure", + "creator": {"login": "opencode-agent[bot]"}, + }, + ], + ) + + assert result.returncode == 0, result.stderr + result.stdout + assert not post_log.exists() + assert not post_body.exists() or post_body.read_text(encoding="utf-8") == "" + assert "already have authenticated terminal verdicts" in result.stdout + + +def test_codeql_coordinator_fails_closed_when_a_shard_job_id_is_missing( + tmp_path: Path, +) -> None: + """A matrix language with no analyze-head job cannot be woken later.""" + result, post_log, _post_body = _run_coordinator( + tmp_path, + jobs={ + "total_count": 1, + "jobs": [ + { + "id": 101, + "name": "CodeQL compatibility analysis (python)", + "status": "completed", + "conclusion": "failure", + } + ], + }, + ) + + assert result.returncode == 1 + assert "missing current-head job id" in result.stdout + assert not post_log.exists() + + +def test_codeql_coordinator_does_not_dispatch_a_closed_or_stale_pull_request( + tmp_path: Path, +) -> None: + """Live-head revalidation remains fail-closed before the single POST.""" + closed, closed_log, _closed_body = _run_coordinator( + tmp_path / "closed", + pull={ + "state": "closed", + "head": {"sha": "b" * 40, "ref": "feature"}, + "base": {"sha": "a" * 40, "ref": "main"}, + }, + ) + stale, stale_log, _stale_body = _run_coordinator( + tmp_path / "stale", + pull={ + "state": "open", + "head": {"sha": "c" * 40, "ref": "feature"}, + "base": {"sha": "a" * 40, "ref": "main"}, + }, + ) + + assert closed.returncode == 0, closed.stderr + assert stale.returncode == 0, stale.stderr + assert not closed_log.exists() + assert not stale_log.exists() diff --git a/tests/test_codeql_scan_dispatch_workflow_contract.py b/tests/test_codeql_scan_dispatch_workflow_contract.py index dbc0e4bb73..dea1326494 100644 --- a/tests/test_codeql_scan_dispatch_workflow_contract.py +++ b/tests/test_codeql_scan_dispatch_workflow_contract.py @@ -19,6 +19,10 @@ from scripts.ci import audit_central_required_workflows as ruleset_audit from tests.test_opencode_workflow_shell_syntax import _extract_run_block +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, + workflow_level_concurrency_group, +) REPO_ROOT = Path(__file__).resolve().parents[1] WORKFLOW_PATH = REPO_ROOT / ".github/workflows/codeql-scan-dispatch.yml" @@ -91,14 +95,30 @@ def test_codeql_scan_dispatch_workflow_structure(): def test_codeql_scan_dispatch_keeps_current_head_language_shards_independent(): - """A current-head language scan cannot cancel its sibling language scans.""" + """Sibling languages stay independent as jobs in one run, not as separate runs. + + The 60-job ceiling was one queued handler run per language. Putting + ``required_language`` in the concurrency group was the 2026-09-05 + workaround after contextual-orchestrator#1049 / run 33938784437 cancelled + sibling scans. Independence now comes from ``strategy.fail-fast: false`` + on this run's language matrix, so the group can be + ``{workflow}-{repository}-{PR}`` and ``cancel-in-progress: true`` only + drops a superseded HEAD of the same pull request. + """ workflow = WORKFLOW_PATH.read_text(encoding="utf-8") - concurrency = workflow.split("concurrency:\n", 1)[1].split("\n\npermissions:", 1)[0] + group_value = workflow_level_concurrency_group(workflow) + header = workflow.split("\non:", 1)[0] + scan = workflow.split(" scan:\n", 1)[1] + strategy = scan.split(" strategy:\n", 1)[1].split(" steps:\n", 1)[0] - assert "github.event.client_payload.target_repository" in concurrency - assert "github.event.client_payload.pr_number" in concurrency - assert "github.event.client_payload.required_language" in concurrency - assert "cancel-in-progress: true" in concurrency + assert "github.event.client_payload.target_repository" in group_value + assert "github.event.client_payload.pr_number" in group_value + assert "github.event.client_payload.required_language" not in group_value + assert "unknown-language" not in group_value + assert "required_language" not in header + assert "fail-fast: false" in strategy + assert "include: ${{ fromJSON(needs.validate-dispatch.outputs.matrix) }}" in strategy + assert workflow_level_cancels_in_progress(workflow) def _run_validate_step(tmp_path: Path, env_overrides: dict[str, str], pull_request: dict) -> subprocess.CompletedProcess[str]: @@ -139,8 +159,9 @@ def _run_validate_step(tmp_path: Path, env_overrides: dict[str, str], pull_reque "SUPPLIED_HEAD_SHA": "b" * 40, "SUPPLIED_MATRIX": json.dumps([{"language": "python", "build-mode": "none"}]), "SUPPLIED_REQUIRED_RUN_ID": "42", - "SUPPLIED_REQUIRED_JOB_ID": "43", - "SUPPLIED_REQUIRED_LANGUAGE": "python", + "SUPPLIED_REQUIRED_JOBS": json.dumps([{"language": "python", "job_id": 43}]), + "SUPPLIED_REQUIRED_JOB_ID": "", + "SUPPLIED_REQUIRED_LANGUAGE": "", **env_overrides, } result = subprocess.run([bash], input=script, text=True, capture_output=True, check=False, env=env) @@ -168,8 +189,9 @@ def test_codeql_scan_dispatch_validate_step_accepts_matching_live_metadata(tmp_p assert "head_sha=" + "b" * 40 in output_text assert '[{"language":"python","build-mode":"none"}]' in output_text assert "required_run_id=42" in output_text - assert "required_job_id=43" in output_text - assert "required_language=python" in output_text + assert '"job_id":43' in output_text.replace(" ", "") + assert "required_job_id=" not in output_text + assert "required_language=" not in output_text def test_codeql_scan_dispatch_validate_step_rejects_actor_mismatch(tmp_path): @@ -180,6 +202,52 @@ def test_codeql_scan_dispatch_validate_step_rejects_actor_mismatch(tmp_path): assert "authorization rejected actor=" in result.stdout +def test_codeql_scan_dispatch_validate_step_accepts_any_listed_dispatcher(tmp_path): + """ALLOWED_DISPATCH_ACTOR is a comma-separated allowlist shared by all three + dispatch consumers; each listed identity passes when actor and sender both + equal it, an unlisted one is rejected, and actor/sender that are two + *different* listed identities are still rejected.""" + # _run_validate_step creates tmp_path/bin, so each invocation needs its + # own directory. + allowlist = "github-actions[bot], opencode-agent[bot]" + for identity in ("github-actions[bot]", "opencode-agent[bot]"): + result = _run_validate_step( + tmp_path / identity.replace("[", "").replace("]", ""), + { + "ALLOWED_DISPATCH_ACTOR": allowlist, + "DISPATCH_ACTOR": identity, + "DISPATCH_SENDER": identity, + }, + _matching_pull_request(), + ) + assert result.returncode == 0, result.stderr + assert f"Authorized repository_dispatch actor={identity}" in result.stdout + + unlisted = _run_validate_step( + tmp_path / "unlisted", + { + "ALLOWED_DISPATCH_ACTOR": allowlist, + "DISPATCH_ACTOR": "seonghobae", + "DISPATCH_SENDER": "seonghobae", + }, + _matching_pull_request(), + ) + assert unlisted.returncode == 1 + assert "authorization rejected actor=seonghobae" in unlisted.stdout + + mismatched = _run_validate_step( + tmp_path / "mismatched", + { + "ALLOWED_DISPATCH_ACTOR": allowlist, + "DISPATCH_ACTOR": "opencode-agent[bot]", + "DISPATCH_SENDER": "github-actions[bot]", + }, + _matching_pull_request(), + ) + assert mismatched.returncode == 1 + assert "authorization rejected actor=opencode-agent[bot]" in mismatched.stdout + + def test_codeql_scan_dispatch_validate_step_accepts_any_org_repository(tmp_path): """Unlike opencode-review-dispatch.yml, any ContextualWisdomLab repo is accepted. @@ -215,15 +283,190 @@ def test_codeql_scan_dispatch_validate_step_rejects_non_org_target(tmp_path): def test_codeql_scan_dispatch_validate_step_rejects_malformed_matrix(tmp_path): - """A matrix entry missing a valid language/build-mode fails closed.""" + """Empty, invalid, or job-map-mismatched matrices fail closed; a multi-language payload is valid.""" + missing_build_mode = _run_validate_step( + tmp_path / "missing-build-mode", + {"SUPPLIED_MATRIX": json.dumps([{"language": "python"}])}, + _matching_pull_request(), + ) + empty_matrix = _run_validate_step( + tmp_path / "empty", + { + "SUPPLIED_MATRIX": "[]", + "SUPPLIED_REQUIRED_JOBS": "[]", + }, + _matching_pull_request(), + ) + invalid_language = _run_validate_step( + tmp_path / "invalid-language", + { + "SUPPLIED_MATRIX": json.dumps([{"language": "PYTHON", "build-mode": "none"}]), + "SUPPLIED_REQUIRED_JOBS": json.dumps([{"language": "PYTHON", "job_id": 43}]), + }, + _matching_pull_request(), + ) + mismatched_jobs = _run_validate_step( + tmp_path / "mismatched-jobs", + { + "SUPPLIED_MATRIX": json.dumps( + [ + {"language": "python", "build-mode": "none"}, + {"language": "actions", "build-mode": "none"}, + ] + ), + "SUPPLIED_REQUIRED_JOBS": json.dumps([{"language": "python", "job_id": 43}]), + }, + _matching_pull_request(), + ) + + assert missing_build_mode.returncode == 1 + assert empty_matrix.returncode == 1 + assert invalid_language.returncode == 1 + assert mismatched_jobs.returncode == 1 + assert "at least one valid language/build-mode shard" in missing_build_mode.stdout + assert "at least one valid language/build-mode shard" in empty_matrix.stdout + assert "at least one valid language/build-mode shard" in invalid_language.stdout + assert "does not match the dispatched languages one-to-one" in mismatched_jobs.stdout + + +def test_codeql_scan_dispatch_validate_step_accepts_multi_language_payload(tmp_path): + """One dispatch may carry every remaining language for the current head.""" result = _run_validate_step( tmp_path, - {"SUPPLIED_MATRIX": json.dumps([{"language": "python"}])}, + { + "SUPPLIED_MATRIX": json.dumps( + [ + {"language": "python", "build-mode": "none"}, + {"language": "javascript-typescript", "build-mode": "none"}, + ] + ), + "SUPPLIED_REQUIRED_JOBS": json.dumps( + [ + {"language": "javascript-typescript", "job_id": "55"}, + {"language": "python", "job_id": 43}, + ] + ), + }, _matching_pull_request(), ) - assert result.returncode == 1 - assert "matrix must contain exactly one valid language/build-mode shard" in result.stdout + assert result.returncode == 0, result.stderr + result.stdout + output_text = result.output_path.read_text(encoding="utf-8") + assert "javascript-typescript" in output_text + assert '"job_id":55' in output_text.replace(" ", "") + assert '"job_id":43' in output_text.replace(" ", "") + + +def test_codeql_scan_dispatch_validate_step_accepts_legacy_single_language_payload(tmp_path): + """A queued pre-cutover payload still validates after required_jobs became mandatory. + + repository_dispatch always runs the default-branch file. Payloads that + lined up before #2008 carry required_language + required_job_id and a + one-shard matrix, with required_jobs absent (JSON null) or empty. Those + fields synthesize required_jobs=[{language, job_id}] and must be accepted. + """ + for empty_jobs, case_name in (("null", "missing"), ("[]", "empty-array")): + result = _run_validate_step( + tmp_path / case_name, + { + "SUPPLIED_REQUIRED_JOBS": empty_jobs, + "SUPPLIED_REQUIRED_LANGUAGE": "python", + "SUPPLIED_REQUIRED_JOB_ID": "43", + }, + _matching_pull_request(), + ) + + assert result.returncode == 0, result.stderr + result.stdout + output_text = result.output_path.read_text(encoding="utf-8") + compact = output_text.replace(" ", "") + assert '"language":"python"' in compact + assert '"job_id":43' in compact + assert "required_job_id=" not in output_text + assert "required_language=" not in output_text + + +def test_codeql_scan_dispatch_validate_step_ignores_legacy_fields_when_required_jobs_present( + tmp_path, +): + """A current required_jobs array wins; leftover scalar fields are ignored.""" + result = _run_validate_step( + tmp_path, + { + "SUPPLIED_MATRIX": json.dumps( + [ + {"language": "python", "build-mode": "none"}, + {"language": "javascript-typescript", "build-mode": "none"}, + ] + ), + "SUPPLIED_REQUIRED_JOBS": json.dumps( + [ + {"language": "javascript-typescript", "job_id": "55"}, + {"language": "python", "job_id": 43}, + ] + ), + "SUPPLIED_REQUIRED_LANGUAGE": "actions", + "SUPPLIED_REQUIRED_JOB_ID": "999", + }, + _matching_pull_request(), + ) + + assert result.returncode == 0, result.stderr + result.stdout + compact = result.output_path.read_text(encoding="utf-8").replace(" ", "") + assert '"job_id":55' in compact + assert '"job_id":43' in compact + assert '"job_id":999' not in compact + assert "actions" not in compact + + +def test_codeql_scan_dispatch_validate_step_rejects_unusable_legacy_payload(tmp_path): + """Empty required_jobs still fail closed when the scalar identity cannot be synthesized.""" + missing_both = _run_validate_step( + tmp_path / "missing-both", + {"SUPPLIED_REQUIRED_JOBS": "null"}, + _matching_pull_request(), + ) + language_mismatch = _run_validate_step( + tmp_path / "language-mismatch", + { + "SUPPLIED_REQUIRED_JOBS": "[]", + "SUPPLIED_REQUIRED_LANGUAGE": "javascript-typescript", + "SUPPLIED_REQUIRED_JOB_ID": "43", + }, + _matching_pull_request(), + ) + multi_language_legacy = _run_validate_step( + tmp_path / "multi-language-legacy", + { + "SUPPLIED_MATRIX": json.dumps( + [ + {"language": "python", "build-mode": "none"}, + {"language": "javascript-typescript", "build-mode": "none"}, + ] + ), + "SUPPLIED_REQUIRED_JOBS": "null", + "SUPPLIED_REQUIRED_LANGUAGE": "python", + "SUPPLIED_REQUIRED_JOB_ID": "43", + }, + _matching_pull_request(), + ) + invalid_job_id = _run_validate_step( + tmp_path / "invalid-job-id", + { + "SUPPLIED_REQUIRED_JOBS": "null", + "SUPPLIED_REQUIRED_LANGUAGE": "python", + "SUPPLIED_REQUIRED_JOB_ID": "0", + }, + _matching_pull_request(), + ) + + assert missing_both.returncode == 1 + assert language_mismatch.returncode == 1 + assert multi_language_legacy.returncode == 1 + assert invalid_job_id.returncode == 1 + assert "does not match the dispatched languages one-to-one" in missing_both.stdout + assert "does not match the dispatched languages one-to-one" in language_mismatch.stdout + assert "does not match the dispatched languages one-to-one" in multi_language_legacy.stdout + assert "does not match the dispatched languages one-to-one" in invalid_job_id.stdout def test_codeql_scan_dispatch_validate_step_rejects_stale_head_sha(tmp_path): @@ -292,8 +535,9 @@ def test_dispatch_wake_has_only_trusted_actions_write_boundary() -> None: assert "actions: write" in scan_permissions assert "pull_request:" not in workflow assert "pull_request_target:" not in workflow - assert "github.event.client_payload.required_run_id != ''" in scan - assert "github.event.client_payload.required_job_id != ''" in scan + assert "needs.validate-dispatch.outputs.required_run_id != ''" in scan + assert "needs.validate-dispatch.outputs.required_jobs != ''" in scan + assert "github.event.client_payload.required_job_id" not in scan def _run_wake_step( @@ -364,7 +608,12 @@ def _run_wake_step( "PR_NUMBER": "42", "HEAD_SHA": head_sha, "REQUIRED_RUN_ID": "42", - "REQUIRED_JOB_ID": "43", + "REQUIRED_JOBS": json.dumps( + [ + {"language": "python", "job_id": 43}, + {"language": "actions", "job_id": 44}, + ] + ), "REQUIRED_LANGUAGE": "python", } result = subprocess.run( @@ -443,3 +692,39 @@ def test_dispatch_wake_allows_parallel_language_rerun_on_same_exact_run(tmp_path assert result.returncode == 0, result.stderr assert post_log.exists() + + +def test_codeql_scan_dispatch_serialises_the_matrix_payload() -> None: + """The dispatched matrix reaches `env:` as JSON text, never as a raw sequence. + + `codeql-pr.yml` sends `client_payload.matrix` as an array. An `env:` value must be + a scalar, so assigning the array directly makes GitHub reject that step when its + `env:` is evaluated -- "A sequence was not expected" -- after the runner has been + assigned and the earlier steps have already run. That shipped in #1776 and left this + workflow at 0 successes across 136 attempts. + + No local tool catches it: `yaml.safe_load` parses the file and `actionlint` 1.7.12 + reports it clean, because it is an Actions template rule rather than YAML syntax. + Only GitHub's own validator rejects it, so this string contract is the only guard + that runs before a dispatch does. The validate step consumes the value through + `jq`, so JSON text is what it already expects. + """ + workflow = WORKFLOW_PATH.read_text(encoding="utf-8") + assert ( + "SUPPLIED_MATRIX: ${{ toJSON(github.event.client_payload.matrix) }}" in workflow + ), "SUPPLIED_MATRIX must be serialised with toJSON(); a bare array breaks template validation" + assert ( + "SUPPLIED_MATRIX: ${{ github.event.client_payload.matrix" not in workflow + ), "SUPPLIED_MATRIX must not assign the raw client_payload array to env:" + assert ( + "SUPPLIED_REQUIRED_JOBS: ${{ toJSON(github.event.client_payload.required_jobs) }}" + in workflow + ), "SUPPLIED_REQUIRED_JOBS must be serialised with toJSON(); a bare array breaks template validation" + assert ( + "SUPPLIED_REQUIRED_JOB_ID: ${{ github.event.client_payload.required_job_id || '' }}" + in workflow + ), "Queued pre-cutover payloads still supply required_job_id as a scalar" + assert ( + "SUPPLIED_REQUIRED_LANGUAGE: ${{ github.event.client_payload.required_language || '' }}" + in workflow + ), "Queued pre-cutover payloads still supply required_language as a scalar" diff --git a/tests/test_contextual_orchestrator_review_policy.py b/tests/test_contextual_orchestrator_review_policy.py index 4cda949897..41c1ea40b2 100644 --- a/tests/test_contextual_orchestrator_review_policy.py +++ b/tests/test_contextual_orchestrator_review_policy.py @@ -563,3 +563,92 @@ def test_private_catalog_fails_closed_without_attested_zdr_route() -> None: account_cap=4, require_zdr=True, ) + + +def _free_rows(provider: str, count: int, prefix: str) -> list[dict[str, object]]: + """Return ``count`` free discovery rows for one credential account.""" + return [ + { + "provider": provider, + "model": f"{prefix}{i}", + "agent_id": f"{prefix}_{i}", + "is_free": True, + **FREE_PRICE, + } + for i in range(count) + ] + + +def test_build_catalog_interleaves_accounts_within_a_tier() -> None: + """A bounded catalog spreads across admitted accounts instead of filling alphabetically. + + Measured on 2026-09-05 (``noema-review`` run 33969842312): 62 admitted free + routes across three accounts, limit 12, account cap 8, served as + 8 ``nvidia_nim`` + 4 ``nvidia_nim_sub`` + 0 ``openrouter`` because the + sorted fill reached the limit before the alphabetically last account got a + slot -- so a stalled NVIDIA endpoint had no other account to fail over to. + """ + report = { + "models": _free_rows("nvidia_nim", 8, "a") + + _free_rows("nvidia_nim_sub", 8, "b") + + _free_rows("openrouter", 8, "o") + } + result = policy.build_zdr_prioritized_catalog( + policy.parse_discovery_report(report), limit=12, account_cap=8 + ) + providers = [agent["provider_name"] for agent in result["agents"]] + assert providers[:3] == ["nvidia_nim", "nvidia_nim_sub", "openrouter"] + assert providers.count("nvidia_nim") == 4 + assert providers.count("nvidia_nim_sub") == 4 + assert providers.count("openrouter") == 4 + + +def test_build_catalog_interleaving_keeps_zdr_tier_first() -> None: + """Account interleaving never lifts a non-ZDR route above an attested one.""" + report = { + "models": _free_rows("nvidia_nim", 3, "a") + + [ + { + "provider": "openrouter", + "model": "deepseek/deepseek-r1:free", + "agent_id": "or_zdr", + "is_free": True, + **FREE_PRICE, + } + ] + + _free_rows("openrouter", 3, "o") + } + result = policy.build_zdr_prioritized_catalog( + policy.parse_discovery_report(report), + limit=4, + account_cap=8, + zdr_endpoints=ZDR_FEED, + ) + assert result["agents"][0]["model"] == "deepseek/deepseek-r1:free" + assert [agent["provider_name"] for agent in result["agents"]][1:] == [ + "nvidia_nim", + "openrouter", + "nvidia_nim", + ] + + +def test_build_catalog_interleaving_skips_exhausted_accounts() -> None: + """An account with fewer routes than its share hands its turns to the others.""" + report = { + "models": _free_rows("nvidia_nim", 5, "a") + + _free_rows("nvidia_nim_sub", 1, "b") + + _free_rows("openrouter", 2, "o") + } + result = policy.build_zdr_prioritized_catalog( + policy.parse_discovery_report(report), limit=12, account_cap=8 + ) + assert [agent["provider_name"] for agent in result["agents"]] == [ + "nvidia_nim", + "nvidia_nim_sub", + "openrouter", + "nvidia_nim", + "openrouter", + "nvidia_nim", + "nvidia_nim", + "nvidia_nim", + ] diff --git a/tests/test_contextual_orchestrator_review_runtime_preflight.py b/tests/test_contextual_orchestrator_review_runtime_preflight.py index 559c2d1e99..7f92162097 100644 --- a/tests/test_contextual_orchestrator_review_runtime_preflight.py +++ b/tests/test_contextual_orchestrator_review_runtime_preflight.py @@ -1419,10 +1419,10 @@ def test_fallback_escalation_budget_is_shared_with_primary_and_bounds_worst_case 10s), blowing past Layer 1's 180s healthz-readiness watchdog and contradicting the ADR's own claimed 160s worst case. - This drives all 8 primary routes and all 4 fallback routes (the exact - ``REVIEW_PREFLIGHT_MAX_TOTAL_ROUTES`` split) through a response that + This drives all 16 primary candidates and all 8 fallback candidates (the + exact ``REVIEW_PREFLIGHT_MAX_TOTAL_ROUTES`` split) through a response that always qualifies for escalation and never resolves, so every one of the - 12 candidates *would* escalate if the budget were not shared. Asserts + 24 candidates *would* escalate if the budget were not shared. Asserts the run spends at most ``REVIEW_PREFLIGHT_MAX_ESCALATIONS`` escalations in total (not per stage), and that the resulting worst-case attempt count keeps total elapsed time at or under 160s -- both stages' escalation @@ -1458,8 +1458,10 @@ def test_fallback_escalation_budget_is_shared_with_primary_and_bounds_worst_case assert report["primary_attempt"]["escalations_used"] == max_escalations total_attempts = len(client.calls) - # Exactly the ADR's own worst-case arithmetic: 12 base attempts (one per - # candidate across both stages) + 4 escalations (the shared cap) = 16. + # Exactly the ADR's own worst-case arithmetic: 24 base attempts (one per + # candidate across both stages -- nothing is ready, so lazy fill never + # stops early, and each stage's list fits REVIEW_PREFLIGHT_MAX_PROBES) + + # 4 escalations (the shared cap) = 28. assert total_attempts == total_route_limit + max_escalations @@ -1472,8 +1474,20 @@ def test_preflight_stage_limits_share_one_startup_budget() -> None: fallback = namespace["_bounded_fallback_catalog_limit"]( 99, primary_count=primary ) - assert (primary, fallback) == (8, 4) + assert (primary, fallback) == (16, 8) assert primary + fallback == namespace["REVIEW_PREFLIGHT_MAX_TOTAL_ROUTES"] + # Lazy fill (ADR-0029): the auto stages each fit the probe budget, so + # their worst case is still "every candidate probed once". + assert primary <= namespace["REVIEW_PREFLIGHT_MAX_PROBES"] + assert fallback <= namespace["REVIEW_PREFLIGHT_MAX_PROBES"] + assert namespace["REVIEW_PREFLIGHT_TARGET_READY"] < primary + # The production pool is ``free`` (sidecar default; no fallback stage) and + # lists the whole budget: candidates past the probe cap are reachable only + # through the account-skip rule, and the report says how many were skipped. + free_pool = namespace["_bounded_primary_catalog_limit"](99, pool="free", has_free_rows=True) + assert free_pool == namespace["REVIEW_PREFLIGHT_MAX_TOTAL_ROUTES"] == 24 + assert free_pool > namespace["REVIEW_PREFLIGHT_MAX_PROBES"] + assert namespace["_bounded_fallback_catalog_limit"](99, primary_count=free_pool) == 0 def test_catalog_account_cap_defaults_to_the_caller_supplied_policy_default( @@ -1719,6 +1733,118 @@ def test_sidecar_stream_sanitizer_allowlists_only_bounded_diagnostics() -> None: assert sanitize_line("provider response sk-secret") is None +def test_sidecar_stream_sanitizer_admits_orchestrator_route_events() -> None: + """Per-route attempt, retry-budget, and circuit events survive with bounded fields only. + + Before this, every orchestrator ``provider_*``/``circuit_*`` line was folded + into ``omitted_unstructured_lines``, so a 3122 s walk across six routes left + no per-route trace in the artifact (#1935 / #1939). Both log prefixes are + accepted so runs before and after the sidecar formatter read the same way. + """ + namespace = _load_sanitizer() + sanitize_line = namespace["sanitize_line"] + secret = "sk-secret-must-not-enter-artifact" + + assert sanitize_line( + "provider_attempt agent_id=nvidia_nim_deepseek model=deepseek-ai/deepseek-v4-flash-0731 attempt=1/3" + ) == "provider_attempt agent_id=nvidia_nim_deepseek model=deepseek-ai/deepseek-v4-flash-0731 attempt=1/3" + assert sanitize_line( + "WARNING:contextual_orchestrator.orchestrator:provider_exhausted agent_id=nvidia_nim_x " + "model=deepseek-ai/deepseek-v4-flash-0731 attempts=3 final_error_type=TimeoutError" + ) == ( + "provider_exhausted agent_id=nvidia_nim_x model=deepseek-ai/deepseek-v4-flash-0731 " + "attempts=3 final_error_type=TimeoutError" + ) + failed = sanitize_line( + "2026-09-05 21:40:00,123 DEBUG contextual_orchestrator.orchestrator provider_attempt_failed " + f"agent_id=openrouter_gemma model=google/gemma-3-12b-it:free attempt=2 error_type=HTTPError " + f"transient=True error_message=upstream said {secret}" + ) + assert failed == ( + "2026-09-05 21:40:00,123 provider_attempt_failed agent_id=openrouter_gemma " + "model=google/gemma-3-12b-it:free attempt=2 error_type=HTTPError transient=True " + "error_message=" + ) + assert secret not in failed + assert sanitize_line( + "provider_backoff agent_id=nvidia_nim_x attempt=1 delay_seconds=0.500" + ) == "provider_backoff agent_id=nvidia_nim_x attempt=1 delay_seconds=0.500" + assert sanitize_line( + "INFO:contextual_orchestrator.orchestrator:provider_no_retry_budget agent_id=bytez_a " + "model=m/x attempts=1 final_error_type=InvalidChatResponse transient=False" + ) == ( + "provider_no_retry_budget agent_id=bytez_a model=m/x attempts=1 " + "final_error_type=InvalidChatResponse transient=False" + ) + assert sanitize_line( + "provider_rejected_permanent agent_id=bytez_a model=m/x attempts=1 final_error_type=ValueError" + ) == "provider_rejected_permanent agent_id=bytez_a model=m/x attempts=1 final_error_type=ValueError" + assert sanitize_line( + "2026-09-05 21:41:02,000 WARNING contextual_orchestrator.orchestrator circuit_opened " + "agent_id=nvidia_nim_x failures=3.0 threshold=3 reset_seconds=30.0" + ) == "2026-09-05 21:41:02,000 circuit_opened agent_id=nvidia_nim_x failures=3.0 threshold=3 reset_seconds=30.0" + assert sanitize_line("circuit_failure agent_id=nvidia_nim_x failures=2.0 threshold=3") == ( + "circuit_failure agent_id=nvidia_nim_x failures=2.0 threshold=3" + ) + assert sanitize_line("circuit_reset agent_id=nvidia_nim_x") == "circuit_reset agent_id=nvidia_nim_x" + assert sanitize_line("circuit_cleared agent_id=nvidia_nim_x") == "circuit_cleared agent_id=nvidia_nim_x" + + # Tampered or free-text variants stay out: an uppercase agent id, trailing text + # after a complete template, a failed-attempt line that lacks the error_message + # boundary, and a prefix with no known template. + assert sanitize_line("provider_attempt agent_id=NVIDIA model=m/x attempt=1/3") is None + assert sanitize_line(f"provider_attempt agent_id=nvidia_nim_x model=m/x attempt=1/3 {secret}") is None + assert sanitize_line( + "provider_attempt_failed agent_id=nvidia_nim_x model=m/x attempt=1 error_type=E transient=False" + ) is None + assert sanitize_line(f"DEBUG:contextual_orchestrator.orchestrator:{secret}") is None + + +def test_sidecar_stream_sanitizer_matches_real_formatter_output() -> None: + """Fixtures typed from a template miss runtime value types; render the real records. + + The circuit counters are floats in the orchestrator (``failures`` starts at + ``0.0`` and is incremented by ``1.0``; ``circuit_reset_seconds`` is ``30.0``), so + the lines that actually reach stderr say ``failures=2.0``, not ``failures=2``. + Render each template through ``logging.Formatter`` with the sidecar format + and the runtime value types, and require every one to pass. + """ + import logging + + namespace = _load_sanitizer() + sanitize_line = namespace["sanitize_line"] + formatter = logging.Formatter("%(asctime)s %(levelname)s %(name)s %(message)s") + records = ( + (logging.DEBUG, "provider_attempt agent_id=%s model=%s attempt=%d/%d", ("nvidia_nim_x", "deepseek-ai/deepseek-v4-flash-0731", 1, 3)), + (logging.DEBUG, "provider_attempt_failed agent_id=%s model=%s attempt=%d error_type=%s transient=%s error_message=%s", ("nvidia_nim_x", "deepseek-ai/deepseek-v4-flash-0731", 1, "TimeoutError", True, "Bearer sk-secret in body")), + (logging.DEBUG, "provider_backoff agent_id=%s attempt=%d delay_seconds=%.3f", ("nvidia_nim_x", 1, 0.5)), + (logging.WARNING, "provider_exhausted agent_id=%s model=%s attempts=%s final_error_type=%s", ("nvidia_nim_x", "deepseek-ai/deepseek-v4-flash-0731", 3, "TimeoutError")), + (logging.WARNING, "provider_rejected_permanent agent_id=%s model=%s attempts=%s final_error_type=%s", ("bytez_a", "m/x", 1, "ValueError")), + (logging.WARNING, "provider_no_retry_budget agent_id=%s model=%s attempts=%s final_error_type=%s transient=%s", ("bytez_a", "m/x", 1, "InvalidChatResponse", False)), + (logging.DEBUG, "circuit_failure agent_id=%s failures=%s threshold=%s", ("nvidia_nim_x", 2.0, 3)), + (logging.WARNING, "circuit_opened agent_id=%s failures=%s threshold=%s reset_seconds=%s", ("nvidia_nim_x", 3.0, 3, 30.0)), + (logging.DEBUG, "circuit_reset agent_id=%s", ("nvidia_nim_x",)), + (logging.DEBUG, "circuit_cleared agent_id=%s", ("nvidia_nim_x",)), + ) + for level, template, args in records: + record = logging.LogRecord( + "contextual_orchestrator.orchestrator", level, __file__, 0, template, args, None + ) + rendered = formatter.format(record) + sanitized = sanitize_line(rendered) + assert sanitized is not None, rendered + assert "sk-secret" not in sanitized + assert sanitized.split(" ", 2)[2].split(" ")[0] == template.split(" ")[0] + assert sanitize_line( + formatter.format( + logging.LogRecord( + "contextual_orchestrator.orchestrator", logging.DEBUG, __file__, 0, + "circuit_failure agent_id=%s failures=%s threshold=%s", ("nvidia_nim_x", 2.0, 3), None, + ) + ) + ).endswith("circuit_failure agent_id=nvidia_nim_x failures=2.0 threshold=3") + + def test_sidecar_stream_sanitizer_summarizes_unstructured_and_traceback_lines( monkeypatch: pytest.MonkeyPatch, ) -> None: @@ -1745,16 +1871,148 @@ def test_sidecar_stream_sanitizer_summarizes_unstructured_and_traceback_lines( assert main() == 0 rendered = output.getvalue() + # The indented pseudo-frame is consumed as traceback body (not counted as + # omitted); each header closes at the next header or allowlisted line. assert rendered.splitlines() == [ "request_failed status=500 code=internal_error", - "sidecar emitted an unexpected exception", + "unexpected_exception type=unknown frame=unknown", + "unexpected_exception type=unknown frame=unknown", "review sidecar preflight failed", "client_disconnected", - "omitted_unstructured_lines=1", ] assert secret not in rendered +def _render_orchestrator_traceback(source: str, module: str, call: str) -> str: + """Run ``source`` as if it were a ``contextual_orchestrator`` module and return the real traceback.""" + import traceback + + namespace: dict[str, object] = {"__name__": f"contextual_orchestrator.{module}"} + exec( # noqa: S102 - test-only: the source is a literal in this file + compile(source, f"/opt/site-packages/contextual_orchestrator/{module}.py", "exec"), + namespace, + ) + try: + eval(call, namespace) # noqa: S307 - test-only literal + except Exception: # noqa: BLE001 - the traceback under test + return traceback.format_exc() + raise AssertionError("fixture did not raise") + + +def _sanitize_stream(monkeypatch: pytest.MonkeyPatch, text: str) -> list[str]: + """Run the sanitizer's ``main`` over ``text`` and return its output lines.""" + namespace = _load_sanitizer() + monkeypatch.setattr(sys, "stdin", io.StringIO(text)) + output = io.StringIO() + with redirect_stdout(output): + assert namespace["main"]() == 0 + return output.getvalue().splitlines() + + +def test_sidecar_stream_sanitizer_keeps_exception_type_and_innermost_frame( + monkeypatch: pytest.MonkeyPatch, +) -> None: + """A real traceback is reduced to its exception type and innermost package frame. + + `.github#1812`'s strix run (33993155419) died on 83 gateway ``500 + internal_error`` responses -- the orchestrator's generic handler prints one + traceback per unhandled exception -- and the sanitized stream kept a single + ``sidecar emitted an unexpected exception`` line, so neither the exception + type nor where it escaped survived into any artifact. + """ + secret = "sk-secret-must-not-enter-artifact" + rendered = _render_orchestrator_traceback( + "def _serve(payload):\n" + " return payload['model']\n" + "def do_POST(payload):\n" + " return _serve(payload)\n", + "server", + f"do_POST({{'token': '{secret}'}})", + ) + assert "KeyError: 'model'" in rendered + assert 'contextual_orchestrator/server.py", line 2, in _serve' in rendered + + lines = _sanitize_stream( + monkeypatch, + rendered + "request_failed status=500 code=internal_error\n", + ) + + assert lines == [ + "unexpected_exception type=KeyError frame=contextual_orchestrator/server.py:2:_serve", + "request_failed status=500 code=internal_error", + ] + assert secret not in "\n".join(lines) + assert "test_contextual_orchestrator" not in "\n".join(lines) + + +def test_sidecar_stream_sanitizer_keeps_dotted_exception_types_and_chains( + monkeypatch: pytest.MonkeyPatch, +) -> None: + """A package-defined exception keeps its dotted type; a chained traceback yields cause then effect.""" + rendered = _render_orchestrator_traceback( + "class ProviderResponseError(RuntimeError):\n" + " pass\n" + "def _parse(body):\n" + " return body['choices']\n" + "def proxy(body):\n" + " try:\n" + " return _parse(body)\n" + " except KeyError as exc:\n" + " raise ProviderResponseError('malformed body: sk-leak') from exc\n", + "transport", + "proxy({})", + ) + assert "The above exception was the direct cause of the following exception:" in rendered + + lines = _sanitize_stream(monkeypatch, rendered) + + assert lines == [ + "unexpected_exception type=KeyError frame=contextual_orchestrator/transport.py:4:_parse", + "unexpected_exception type=contextual_orchestrator.transport.ProviderResponseError " + "frame=contextual_orchestrator/transport.py:9:proxy", + ] + assert "sk-leak" not in "\n".join(lines) + + +def test_sidecar_stream_sanitizer_closes_a_truncated_traceback_at_end_of_stream( + monkeypatch: pytest.MonkeyPatch, +) -> None: + """A traceback cut off by the sidecar dying still reports its innermost frame.""" + lines = _sanitize_stream( + monkeypatch, + "Traceback (most recent call last):\n" + ' File "/x/site-packages/contextual_orchestrator/orchestrator.py", line 7824, in _invoke\n' + " result = await candidate.send(sk-secret)\n" + " ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^\n", + ) + assert lines == [ + "unexpected_exception type=unknown frame=contextual_orchestrator/orchestrator.py:7824:_invoke", + ] + + +def test_sidecar_stream_sanitizer_does_not_treat_free_text_as_an_exception( + monkeypatch: pytest.MonkeyPatch, +) -> None: + """A column-0 line that is neither a terminal nor allowlisted closes the traceback and is omitted. + + Unstructured lines outside any traceback keep counting as omitted, as before. + """ + lines = _sanitize_stream( + monkeypatch, + "Traceback (most recent call last):\n" + ' File "/x/site-packages/contextual_orchestrator/server.py", line 6288, in do_POST\n' + "provider said: sk-secret and more words\n" + "client_disconnected\n" + "provider body outside any traceback: sk-secret-two\n", + ) + assert lines == [ + "unexpected_exception type=unknown frame=contextual_orchestrator/server.py:6288:do_POST", + "client_disconnected", + "omitted_unstructured_lines=2", + ] + assert "sk-secret" not in "\n".join(lines) + + def test_sidecar_stream_sanitizer_omits_no_summary_for_fully_safe_input( monkeypatch: pytest.MonkeyPatch, ) -> None: @@ -1768,3 +2026,614 @@ def test_sidecar_stream_sanitizer_omits_no_summary_for_fully_safe_input( assert main() == 0 assert output.getvalue() == "client_disconnected\n" + + +def test_sidecar_log_level_defaults_to_debug(monkeypatch: pytest.MonkeyPatch) -> None: + """The sidecar asks for DEBUG so provider attempts and circuit events are recorded.""" + monkeypatch.delenv("ORCHESTRATOR_SIDECAR_LOG_LEVEL", raising=False) + namespace = _load_launcher() + assert namespace["_sidecar_log_level"]() == "DEBUG" + assert namespace["DEFAULT_SIDECAR_LOG_LEVEL"] == "DEBUG" + + +def test_sidecar_log_level_honors_an_explicit_override(monkeypatch: pytest.MonkeyPatch) -> None: + """An operator-set ``ORCHESTRATOR_SIDECAR_LOG_LEVEL`` is passed through untouched.""" + monkeypatch.setenv("ORCHESTRATOR_SIDECAR_LOG_LEVEL", "INFO") + namespace = _load_launcher() + assert namespace["_sidecar_log_level"]() == "INFO" + + +def test_configure_sidecar_logging_applies_level_and_timestamped_format( + monkeypatch: pytest.MonkeyPatch, +) -> None: + """The injected configurator receives the level and every root handler gets timestamps.""" + import logging + + monkeypatch.delenv("ORCHESTRATOR_SIDECAR_LOG_LEVEL", raising=False) + namespace = _load_launcher() + received: list[str] = [] + + def fake_configure_logging(level_name: str) -> None: + received.append(level_name) + logging.basicConfig(level=getattr(logging, level_name), force=True) + + try: + applied = namespace["_configure_sidecar_logging"](fake_configure_logging) + assert applied == "DEBUG" + assert received == ["DEBUG"] + handlers = logging.getLogger().handlers + assert handlers, "basicConfig(force=True) must have installed a root handler" + for handler in handlers: + assert handler.formatter is not None + assert "%(asctime)s" in handler.formatter._fmt # noqa: SLF001 - formatter has no public getter + finally: + logging.basicConfig(level=logging.WARNING, force=True) + + +def test_configure_sidecar_logging_rejects_an_invalid_level(monkeypatch: pytest.MonkeyPatch) -> None: + """A misspelt level fails the launch instead of silently staying at WARNING.""" + monkeypatch.setenv("ORCHESTRATOR_SIDECAR_LOG_LEVEL", "LOUD") + namespace = _load_launcher() + + def strict_configure_logging(level_name: str) -> None: + raise ValueError(f"unknown log level {level_name!r}") + + with pytest.raises(SystemExit, match="ORCHESTRATOR_SIDECAR_LOG_LEVEL is invalid: unknown log level 'LOUD'"): + namespace["_configure_sidecar_logging"](strict_configure_logging) + + +def test_main_configures_sidecar_logging_before_touching_credentials() -> None: + """``main()`` wires the orchestrator's own ``configure_logging`` in before any credential work.""" + source = _LAUNCHER.read_text(encoding="utf-8") + configure_at = source.index("_configure_sidecar_logging(configure_logging)") + credentials_at = source.index("registered = register_review_credentials(os.environ)") + assert configure_at < credentials_at + assert "from contextual_orchestrator.debug_logging import configure_logging" in source + + +def _preflight_agents(*ids: str) -> list[SimpleNamespace]: + """Return catalog-shaped agents with descending priorities, one per id.""" + return [ + SimpleNamespace(id=agent_id, provider_name=agent_id.split("_")[0], model=f"{agent_id}/m", priority=-index) + for index, agent_id in enumerate(ids) + ] + + +class _StatusError(Exception): + """Exception with a ``code`` attribute, the shape ``_safe_http_status`` reads.""" + + def __init__(self, code: int, headers: object | None = None) -> None: + super().__init__(f"HTTP Error {code}") + self.code = code + if headers is not None: + self.headers = headers + + +@pytest.mark.parametrize( + ("headers", "expected"), + [ + ({"Retry-After": "37"}, 37), + ({"Retry-After": " 60 "}, 60), + ({"Retry-After": "0"}, 0), + ({"Retry-After": "Wed, 06 Sep 2026 08:00:00 GMT"}, None), + # "²".isdigit() is True but int("²") raises; the header is provider + # controlled and this runs inside the probe walk's exception handler, + # so an unguarded int() would kill the boot before any evidence file + # is written. Reached in production: HTTPError.headers decodes + # iso-8859-1, so byte 0xB2 arrives as this string. + ({"Retry-After": "²"}, None), + ({"Retry-After": "¹²"}, None), + # Arabic-Indic digits are decimal, so int() does parse them. + ({"Retry-After": "٣٠"}, 30), + ({"Retry-After": "-5"}, None), + ({"Retry-After": "999999"}, None), + ({"Retry-After": ""}, None), + ({}, None), + (None, None), + ("not-a-mapping", None), + ], +) +def test_preflight_records_only_a_usable_retry_after_delay( + headers: object | None, expected: int | None +) -> None: + """``retry_after_s`` records whole delta-seconds and nothing else. + + A 429 at preflight says nothing today about how long the refusal lasts + (`.github` run 34016207820 and `keyverse` #143 both refused every probe + inside a second). The delta-seconds form is recorded as evidence; the + HTTP-date form, out-of-range values and a hostile header object record + nothing, because a wrong number would be worse than no number. No code + waits on the value. + """ + namespace = _load_launcher() + row: dict[str, object] = {} + + namespace["_record_provider_exception"](row, _StatusError(429, headers)) + + assert row.get("retry_after_s") == expected + assert (row["status"], row["http_status"]) == ("rejected", 429) + + +def test_preflight_second_pass_does_not_spend_the_shared_escalation_budget() -> None: + """A postponed candidate never claims an escalation the priced stage still needs. + + ``escalations_used`` is one counter for the whole run, carried into the + priced fallback stage (#1458). Second-pass candidates are ones the account + rule had set aside and the previous design never probed, so letting them + escalate would take escalations from stages that had them before. Here the + first pass sets an account aside, and the postponed candidates all answer + with the budget-too-small signature: without the reservation each would + escalate and drain the shared budget. + """ + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + + def agent(account: str, index: int) -> SimpleNamespace: + return SimpleNamespace(id=f"{account}{index}", provider_name=account, model=f"{account}/m{index}", priority=0) + + agents = [agent("X", 1), agent("X", 2), agent("Y", 1), agent("X", 3), agent("X", 4)] + too_small = {"choices": [{"finish_reason": "length", "message": {"content": ""}}]} + client = _ProbeClient( + { + "X1": _StatusError(429), + "X2": _StatusError(429), + "Y1": _openai_text("OK"), + "X3": too_small, + "X4": too_small, + } + ) + + served, report = preflight(agents, client=client) + + assert [call[0].id for call in client.calls] == ["X1", "X2", "Y1", "X3", "X4"] + assert report["escalations_used"] == 0 + second_pass = report["routes"][3:] + assert [row["error_type"] for row in second_pass] == [ + "escalation_reserved_for_first_pass", + "escalation_reserved_for_first_pass", + ] + assert [row["attempts"] for row in second_pass] == [1, 1] + assert [a.id for a in served][:1] == ["Y1"] + + +def test_preflight_walk_treats_a_none_candidate_as_a_candidate() -> None: + """Exhaustion is a dedicated sentinel, so a ``None`` entry cannot truncate the walk.""" + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + agents: list[object] = [None, SimpleNamespace(id="B", provider_name="b", model="b/m", priority=0)] + client = _ProbeClient({"": _StatusError(404), "B": _openai_text("OK")}) + + served, report = preflight(agents, client=client) + + assert report["probed_count"] == 2 + assert [a.id for a in served] == ["B"] + + +def test_preflight_retry_after_survives_a_raising_header_mapping() -> None: + """A header mapping that raises is not evidence and never breaks the probe walk.""" + namespace = _load_launcher() + + class _HostileHeaders: + def get(self, name: str) -> str: + raise RuntimeError(name) + + row: dict[str, object] = {} + + namespace["_record_provider_exception"](row, _StatusError(429, _HostileHeaders())) + + assert "retry_after_s" not in row + assert row["status"] == "rejected" + + +def test_preflight_defers_transient_probe_statuses_behind_ready_routes() -> None: + """A 429/5xx probe answer keeps the route, ranked after every ready route. + + noema-review run 33993637015 (2026-09-05) rejected 11 of 12 routes -- six + with 429 -- served the single ready route for 542 s and returned 502. The + serving gateway retries and fails over across exactly these statuses, so + discarding them at preflight left it nowhere to go. + """ + namespace = _load_launcher() + agents = _preflight_agents("nvidia_ready", "openrouter_limited", "nvidia_missing", "nvidia_down") + client = _ProbeClient( + { + "nvidia_ready": {"choices": [{"message": {"content": "OK"}, "finish_reason": "stop"}]}, + "openrouter_limited": _StatusError(429), + "nvidia_missing": _StatusError(404), + "nvidia_down": _StatusError(503), + } + ) + served, report = namespace["_preflight_review_agents"](agents, client=client) + + assert [agent.id for agent in served] == ["nvidia_ready", "openrouter_limited", "nvidia_down"] + assert served[0].priority == 0 + penalty = namespace["REVIEW_PREFLIGHT_DEFERRED_PRIORITY_PENALTY"] + assert served[1].priority == -1 - penalty + assert served[2].priority == -3 - penalty + assert agents[1].priority == -1, "deferral must not mutate the caller's agent" + assert report["ready_count"] == 1 + assert report["deferred_count"] == 2 + assert report["rejected_count"] == 1 + statuses = {row["agent_id"]: row["status"] for row in report["routes"]} + assert statuses == { + "nvidia_ready": "ready", + "openrouter_limited": "deferred", + "nvidia_missing": "rejected", + "nvidia_down": "deferred", + } + + +def test_preflight_still_fails_when_no_route_is_ready() -> None: + """All-transient rejections keep failing the stage so the priced fallback still runs.""" + namespace = _load_launcher() + agents = _preflight_agents("openrouter_a", "nvidia_b") + client = _ProbeClient({"openrouter_a": _StatusError(429), "nvidia_b": _StatusError(429)}) + with pytest.raises(namespace["ReviewPreflightError"]) as excinfo: + namespace["_preflight_review_agents"](agents, client=client) + report = excinfo.value.report + assert report["ready_count"] == 0 + assert report["deferred_count"] == 0 + assert report["rejected_count"] == 2 + assert {row["status"] for row in report["routes"]} == {"rejected"} + + +def test_demote_agent_handles_frozen_dataclasses_and_plain_objects() -> None: + """The serving ``ModelAgent`` is a frozen dataclass; test doubles are plain objects.""" + import dataclasses + + namespace = _load_launcher() + + @dataclasses.dataclass(frozen=True) + class _Frozen: + id: str + priority: int = 0 + + frozen = _Frozen(id="a", priority=-2) + demoted = namespace["_demote_agent"](frozen, 1000) + assert demoted.priority == -1002 and frozen.priority == -2 + plain = SimpleNamespace(id="b") + demoted_plain = namespace["_demote_agent"](plain, 1000) + assert demoted_plain.priority == -1000 and not hasattr(plain, "priority") + + +def test_log_preflight_rejections_reports_deferred_routes(capsys: pytest.CaptureFixture[str]) -> None: + """Deferred routes get their own bounded line so the stream tells them apart.""" + namespace = _load_launcher() + namespace["_log_preflight_rejections"]( + { + "routes": [ + {"provider": "openrouter", "status": "deferred", "error_type": "HTTPError", "http_status": 429}, + {"provider": "nvidia_nim", "status": "rejected", "error_type": "HTTPError", "http_status": 404}, + {"provider": "nvidia_nim_sub", "status": "ready"}, + ] + } + ) + err = capsys.readouterr().err + assert "preflight_route_deferred provider=openrouter error_type=HTTPError http_status=429" in err + assert "preflight_route_rejected provider=nvidia_nim error_type=HTTPError http_status=404" in err + assert "nvidia_nim_sub" not in err + + +def test_sidecar_stream_sanitizer_passes_deferred_preflight_lines() -> None: + """``preflight_route_deferred`` reaches the artifact with the same bounded fields as rejected.""" + sanitizer = _load_sanitizer() + sanitize_line = sanitizer["sanitize_line"] + deferred = "preflight_route_deferred provider=openrouter error_type=HTTPError http_status=429" + rejected = "preflight_route_rejected provider=nvidia_nim error_type=HTTPError http_status=404" + assert sanitize_line(deferred) == deferred + assert sanitize_line(rejected) == rejected + assert sanitize_line("preflight_route_deferred provider=openrouter error_type=HTTPError") == ( + "preflight_route_deferred provider=openrouter error_type=HTTPError" + ) + assert sanitize_line("preflight_route_paused provider=openrouter error_type=HTTPError http_status=429") is None + assert sanitize_line(deferred + " token=sk-secret") is not None + assert "sk-secret" not in sanitize_line(deferred + " token=sk-secret") + + +def test_preflight_fills_lazily_and_stops_at_the_readiness_target() -> None: + """Probing stops once ``REVIEW_PREFLIGHT_TARGET_READY`` routes are ready (ADR-0029). + + Post-#1939 census (2026-09-06, .github#1948): the fixed 4+4+4 slice took + each NVIDIA key's first four models alphabetically, two of which answer + 404 on every run, so each key served two contended routes and noema went + from 7/14 to 0/22. A longer candidate list probed lazily lets a healthy + pool stop early and a dead candidate cost one probe instead of a slot. + """ + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + target = namespace["REVIEW_PREFLIGHT_TARGET_READY"] + agents = _preflight_agents(*(f"nvidia_{index}" for index in range(target + 4))) + client = _ProbeClient({agent.id: _openai_text("OK") for agent in agents}) + + served, report = preflight(agents, client=client) + + assert [agent.id for agent in served] == [agent.id for agent in agents[:target]] + assert len(client.calls) == target + assert (report["candidate_count"], report["probed_count"], report["ready_count"]) == ( + target + 4, + target, + target, + ) + assert (report["rejected_count"], report["deferred_count"]) == (0, 0) + assert (report["target_ready"], report["probe_budget"]) == ( + target, + namespace["REVIEW_PREFLIGHT_MAX_PROBES"], + ) + assert len(report["routes"]) == target + + +def test_preflight_dead_candidates_cost_a_probe_not_a_served_slot() -> None: + """Two 404s at the head of the list are probed past; the fill still reaches the target.""" + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + target = namespace["REVIEW_PREFLIGHT_TARGET_READY"] + dead = _preflight_agents("nvidia_gemma12", "nvidia_gemma4") + live = _preflight_agents(*(f"openrouter_{index}" for index in range(target + 2))) + outcomes: dict[str, object] = {agent.id: _StatusError(404) for agent in dead} + outcomes.update({agent.id: _openai_text("OK") for agent in live}) + + served, report = preflight([*dead, *live], client=_ProbeClient(outcomes)) + + assert [agent.id for agent in served] == [agent.id for agent in live[:target]] + assert report["probed_count"] == target + 2 + assert (report["ready_count"], report["rejected_count"], report["deferred_count"]) == (target, 2, 0) + assert [row["status"] for row in report["routes"][:2]] == ["rejected", "rejected"] + + +def test_preflight_probe_budget_bounds_a_dead_hour() -> None: + """With nothing ready and no 429, probing stops at ``REVIEW_PREFLIGHT_MAX_PROBES`` and the stage fails.""" + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + budget = namespace["REVIEW_PREFLIGHT_MAX_PROBES"] + agents = _preflight_agents(*(f"nvidia_{index}" for index in range(budget + 8))) + client = _ProbeClient({agent.id: _StatusError(404) for agent in agents}) + + with pytest.raises(namespace["ReviewPreflightError"]) as failure: + preflight(agents, client=client) + + report = failure.value.report + assert len(client.calls) == budget + assert (report["candidate_count"], report["probed_count"], report["ready_count"]) == ( + budget + 8, + budget, + 0, + ) + assert (report["rejected_count"], report["deferred_count"], report["skipped_count"]) == (budget, 0, 0) + + +def test_preflight_postpones_a_rate_limited_account_and_spends_the_leftover_budget() -> None: + """Two 429s set an account aside; the leftover budget is then spent on the postponed candidates. + + With every account answering 429 the first pass ends after two probes per + account with ten of sixteen probes unspent. The merged rule stopped the walk + there and failed the stage with the budget unused (2026-09-06 07:49:35Z: + six 429s within 656 ms across all three accounts, `.github` run + 34016207820). Now the postponed candidates are probed in catalog order + until the budget is spent; the stage still fails when nothing answers, and + the report says how many postponed candidates were probed and how many + were never reached. + """ + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + skip_after = namespace["REVIEW_PREFLIGHT_ACCOUNT_SKIP_AFTER_429"] + budget = namespace["REVIEW_PREFLIGHT_MAX_PROBES"] + accounts = ("nvidia_nim", "nvidia_nim_sub", "openrouter") + agents = [ + SimpleNamespace(id=f"{account}_{index}", provider_name=account, model=f"{account}/m{index}", priority=-index) + for index in range(8) + for account in accounts + ] + client = _ProbeClient({agent.id: _StatusError(429) for agent in agents}) + + with pytest.raises(namespace["ReviewPreflightError"]) as failure: + preflight(agents, client=client) + + report = failure.value.report + first_pass = skip_after * len(accounts) + assert len(client.calls) == report["probed_count"] == budget == 16 + # First pass: two probes per account in catalog order; second pass: the + # postponed candidates in catalog order until the budget is spent. + assert [call[0].id for call in client.calls] == [agent.id for agent in agents[:budget]] + assert report["postponed_probed_count"] == budget - first_pass == 10 + assert report["skipped_count"] == len(agents) - budget == 8 + assert report["account_skip_after_429"] == skip_after + assert (report["ready_count"], report["deferred_count"], report["rejected_count"]) == (0, 0, budget) + + +def test_preflight_burst_of_429s_does_not_end_the_walk_before_a_ready_route() -> None: + """A refusal on every account's first candidates no longer hides a ready route further down the catalog. + + `.github` run 34016207820's six probes all answered 429 within 656 ms and + the merged rule gave up there, ten probes unspent. This test does NOT + claim those ten probes would have succeeded in that run -- that is + unmeasured, and `retry_after_s` was added to find out. It pins the + behaviour the rule owes the caller: when the refusals do not extend to + every candidate (one artifact shows two models on one key answering 529 + and ready in the same minute), the leftover budget reaches the route that + answers. Under the artifact order with both keys' deepseek routes + refusing, the sixteenth probe reaches the first llama route and the stage + serves it with the refused routes deferred behind it. + + It also pins the cost ADR-0029 bounds: two of the ten second-pass probes + land on the silent `gemma-4-31b` entries, each of which can hold the full + receive timeout in production. The budget, not a clock, is what limits it. + """ + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + budget = namespace["REVIEW_PREFLIGHT_MAX_PROBES"] + agents, outcomes = _artifact_order_candidates() + for agent in agents: + if "deepseek" in agent.model: + outcomes[agent.id] = _StatusError(429) + client = _ProbeClient(outcomes) + + served, report = preflight(agents, client=client) + + probed_ids = [call[0].id for call in client.calls] + assert probed_ids[:6] == [agent.id for agent in agents[:6]] + assert len(probed_ids) == report["probed_count"] == budget + assert probed_ids[-1] == "nvidia_nim_llama-3.2-11b" + assert report["postponed_probed_count"] == budget - 6 + assert report["skipped_count"] == len(agents) - budget + assert (report["ready_count"], report["deferred_count"], report["rejected_count"]) == (1, 9, 6) + second_pass = report["routes"][6:] + silent = [row for row in second_pass if row.get("error_type") == "TimeoutError"] + assert [row["agent_id"] for row in silent] == [ + "nvidia_nim_gemma-4-31b", + "nvidia_nim_sub_gemma-4-31b", + ] + assert [agent.id for agent in served][:1] == ["nvidia_nim_llama-3.2-11b"] + # Every deferred route ranks behind the one ready route. + assert max(agent.priority for agent in served[1:]) < served[0].priority + + +def _artifact_order_candidates() -> tuple[list[SimpleNamespace], dict[str, object]]: + """Rebuild the 2026-09-06 candidate order and probe answers from jan's #1949 table. + + Two NVIDIA keys list the same models alphabetically -- two deepseek routes, + the two gemma-3 entries that answer 404 on every run, a gemma-4 entry that + goes *silent* (`google/gemma-4-31b-it` answered ``TimeoutError`` in 15 of + the 19 probes that reached it across the 2026-09-06 artifacts, so modelling + it as an instant empty completion hid the dominant cost of walking the + catalog tail), then the llama and muse routes that were ready in every + pre-#1939 artifact -- and every OpenRouter free route answers 429. The + catalog interleaves the three accounts tier-round-robin, eight each. + + KNOWN OPTIMISM, deliberately left alone here: the artifacts also show + `meta/llama-3.2-90b-vision-instruct` answering ``TimeoutError`` on both + keys in every probe that reached it (17 of 17), while this fixture answers + it OK. Correcting that drops + ``test_preflight_reaches_both_keys_llama_routes_under_the_artifact_order`` + below its `ready_count == REVIEW_PREFLIGHT_TARGET_READY` assertion -- which + matches production, where no 2026-09-06 artifact ever reached eight ready + routes (the best was six). That is a question about #1949's readiness + target, not about postponement, so it is raised on #1948 rather than + changed under this PR. + """ + nvidia_models = [ + "deepseek-v4-flash", + "deepseek-v4-pro", + "gemma-3-12b", + "gemma-3-4b", + "gemma-4-31b", + "llama-3.2-11b", + "llama-3.2-90b", + "muse-glimmer-30b", + ] + openrouter_models = [f"free-{index}" for index in range(8)] + per_account = { + "nvidia_nim": nvidia_models, + "nvidia_nim_sub": nvidia_models, + "openrouter": openrouter_models, + } + agents: list[SimpleNamespace] = [] + for index in range(8): + for account, models in per_account.items(): + agents.append( + SimpleNamespace( + id=f"{account}_{models[index]}", + provider_name=account, + model=f"{account}/{models[index]}", + priority=-len(agents), + ) + ) + outcomes: dict[str, object] = {} + for agent in agents: + model = agent.model.split("/", 1)[1] + if agent.provider_name == "openrouter": + outcomes[agent.id] = _StatusError(429) + elif model.startswith("gemma-3"): + outcomes[agent.id] = _StatusError(404) + elif model.startswith("gemma-4"): + outcomes[agent.id] = TimeoutError("read timed out") + else: + outcomes[agent.id] = _openai_text("OK") + return agents, outcomes + + +def test_preflight_reaches_both_keys_llama_routes_under_the_artifact_order() -> None: + """Under the real candidate order the sixteen probes reach a non-deepseek route on each key. + + Without the account skip the round-robin spends five probes on OpenRouter's + 429s and the target of eight is unreachable (about five ready + five + deferred, jan's table on #1949); with it the same budget reaches both + keys' llama routes and the target. + """ + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + agents, outcomes = _artifact_order_candidates() + client = _ProbeClient(outcomes) + + served, report = preflight(agents, client=client) + + served_ids = [agent.id for agent in served] + for key in ("nvidia_nim", "nvidia_nim_sub"): + assert any(agent_id.startswith(f"{key}_llama") for agent_id in served_ids), served_ids + assert report["ready_count"] == namespace["REVIEW_PREFLIGHT_TARGET_READY"] + assert report["probed_count"] <= namespace["REVIEW_PREFLIGHT_MAX_PROBES"] + assert report["deferred_count"] == namespace["REVIEW_PREFLIGHT_ACCOUNT_SKIP_AFTER_429"] + assert report["skipped_count"] >= 3 + assert len(client.calls) == report["probed_count"] + # The deferred agents are the two OpenRouter routes that were actually + # probed, not whichever agents happen to share their index once skips + # have shifted the row list. + assert served_ids[report["ready_count"] :] == ["openrouter_free-0", "openrouter_free-1"] + + +def test_preflight_deferral_pairs_rows_with_probed_agents_after_skips() -> None: + """After an account is set aside, deferred rows still map to the agents that were probed. + + Order: X answers 429 twice (then is postponed), Y is ready, Z answers 429 + once after X's postponement began; the second pass probes X3..X5 with the + leftover budget, so the row list runs X1 X2 Y1 Z1 Y2 Z2 Y3 X3 X4 X5 while + the catalog runs X1 X2 Y1 X3 Z1 Y2 X4 Z2 X5 Y3. Pairing rows with the + catalog would demote the wrong candidates from the fourth row on. + """ + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + + def agent(account: str, index: int) -> SimpleNamespace: + return SimpleNamespace(id=f"{account}{index}", provider_name=account, model=f"{account}/m{index}", priority=0) + + agents = [ + agent("X", 1), agent("X", 2), agent("Y", 1), agent("X", 3), agent("Z", 1), + agent("Y", 2), agent("X", 4), agent("Z", 2), agent("X", 5), agent("Y", 3), + ] + outcomes: dict[str, object] = { + "X1": _StatusError(429), "X2": _StatusError(429), "X3": _StatusError(429), + "X4": _StatusError(429), "X5": _StatusError(429), "Z1": _StatusError(429), + "Y1": _openai_text("OK"), "Y2": _openai_text("OK"), "Y3": _openai_text("OK"), + "Z2": _openai_text("OK"), + } + client = _ProbeClient(outcomes) + + served, report = preflight(agents, client=client) + + assert [call[0].id for call in client.calls] == [ + "X1", "X2", "Y1", "Z1", "Y2", "Z2", "Y3", "X3", "X4", "X5", + ] + assert (report["ready_count"], report["deferred_count"], report["skipped_count"]) == (4, 6, 0) + assert report["postponed_probed_count"] == 3 + assert [a.id for a in served] == ["Y1", "Y2", "Z2", "Y3", "X1", "X2", "Z1", "X3", "X4", "X5"] + assert all(a.priority == -namespace["REVIEW_PREFLIGHT_DEFERRED_PRIORITY_PENALTY"] for a in served[4:]) + + +def test_preflight_lazy_fill_keeps_deferral_for_probed_transient_routes() -> None: + """A 429 met on the way to the target is deferred; candidates past the stop get no row.""" + namespace = _load_launcher() + preflight = namespace["_preflight_review_agents"] + target = namespace["REVIEW_PREFLIGHT_TARGET_READY"] + agents = _preflight_agents("openrouter_a", *(f"nvidia_{index}" for index in range(target + 3))) + outcomes: dict[str, object] = {agent.id: _openai_text("OK") for agent in agents} + outcomes["openrouter_a"] = _StatusError(429) + + served, report = preflight(agents, client=_ProbeClient(outcomes)) + + assert [agent.id for agent in served] == [ + *(f"nvidia_{index}" for index in range(target)), + "openrouter_a", + ] + assert report["probed_count"] == target + 1 + assert (report["ready_count"], report["deferred_count"], report["rejected_count"]) == (target, 1, 0) + assert served[-1].priority == -namespace["REVIEW_PREFLIGHT_DEFERRED_PRIORITY_PENALTY"] + assert report["routes"][0]["status"] == "deferred" diff --git a/tests/test_contextual_orchestrator_review_sidecar_contract.py b/tests/test_contextual_orchestrator_review_sidecar_contract.py index 79c74a4d43..31af868d45 100644 --- a/tests/test_contextual_orchestrator_review_sidecar_contract.py +++ b/tests/test_contextual_orchestrator_review_sidecar_contract.py @@ -40,7 +40,7 @@ ) GATEWAY_MODEL = "contextual-orchestrator/orchestrator/free" -ORCH_PIN_SHA = "2e414d15ba58f28597751b625a8a2f00fc9fadcf" +ORCH_PIN_SHA = "414f22973658c4ddc3d4320fcf7acd9b4e8ba991" def _read(path: Path) -> str: diff --git a/tests/test_docs_only_pr_runner_admission.py b/tests/test_docs_only_pr_runner_admission.py index 8b2e6e8ee2..49631d2a19 100644 --- a/tests/test_docs_only_pr_runner_admission.py +++ b/tests/test_docs_only_pr_runner_admission.py @@ -186,13 +186,13 @@ def test_codeql_pr_gates_analyze_head_at_step_level_not_job_level(): the required `CodeQL compatibility analysis (actions|python)` contexts, so those required checks never appear. Gating the steps instead lets the job run (~20s), succeed, and publish the correctly expanded names. Since - the dispatch+poll rewrite (docs/adr/0025-codeql-required-workflow-dispatch-architecture.md), - `analyze-head` has two steps: the dispatch step's `if:` additionally - restricts it to the first matrix shard (see - tests/test_codeql_pr_workflow_contract.py::test_codeql_pr_dispatches_once_not_once_per_matrix_shard), - while the poll step runs unconditionally on `code == 'true'` alone -- both - still gate at step level, never at job level. `analyze-merge` no longer - exists: it was required nowhere (PR #1766) and was dropped, not migrated. + the dispatch+exact-job-wake rewrite + (docs/adr/0025-codeql-required-workflow-dispatch-architecture.md), + `analyze-head` has two steps: the verdict-read step and the runner-release + step. Both still gate at step level on `code == 'true'`, never at job + level. The one-shot coordinator that POSTs the remaining language matrix + is a separate job. `analyze-merge` no longer exists: it was required + nowhere (PR #1766) and was dropped, not migrated. """ workflow = _read("codeql-pr.yml") diff --git a/tests/test_exact_artifact_quality_single_runner.py b/tests/test_exact_artifact_quality_single_runner.py index b8711ab7a5..9378e2232c 100644 --- a/tests/test_exact_artifact_quality_single_runner.py +++ b/tests/test_exact_artifact_quality_single_runner.py @@ -2,6 +2,10 @@ from __future__ import annotations +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, +) + import re from pathlib import Path @@ -68,7 +72,7 @@ def test_pr_concurrency_uses_workflow_repository_and_pr_identity() -> None: "${{ github.event.pull_request.number }}" in concurrency ) - assert "cancel-in-progress: true" in concurrency + assert workflow_level_cancels_in_progress(workflow) assert "github.sha" not in concurrency assert "pull_request.head.sha" not in concurrency diff --git a/tests/test_noema_orchestrator_workflow_contract.py b/tests/test_noema_orchestrator_workflow_contract.py index 937cf6fe97..628fa3cbc1 100644 --- a/tests/test_noema_orchestrator_workflow_contract.py +++ b/tests/test_noema_orchestrator_workflow_contract.py @@ -485,3 +485,34 @@ def test_noema_review_job_has_no_job_level_timeout() -> None: encoding="utf-8" ) ), "the two-hour-per-model allowance this bound relies on must still be documented" + + +def test_noema_review_uploads_sidecar_evidence_on_failure() -> None: + """A failed verdict phase ships the sanitized sidecar stderr and preflight report. + + Before this step a failed Noema run left ``artifacts=0`` (run 33981136873: + 3122 s, then HTTP 502, no per-route trace in the job log). The stderr file + is the sidecar sanitizer's bounded allowlist output -- the same file Strix + already publishes in ``strix-reports`` -- so shipping it on failure adds + diagnosis without adding exposure (#1935 follow-up). + """ + workflow = workflow_text("noema-review.yml") + name = "Upload contextual-orchestrator sidecar evidence on failure" + step = workflow_step(workflow, name) + assert "if: failure() && env.PR_NUMBER != ''" in step + strix_pin = re.search( + r"actions/upload-artifact@([0-9a-f]{40})", workflow_text("strix.yml") + ).group(1) + assert f"actions/upload-artifact@{strix_pin}" in step + assert "name: noema-sidecar-evidence" in step + assert "strix_runs/contextual-orchestrator-sidecar.stderr.log" in step + assert "strix_runs/contextual-orchestrator-preflight.json" in step + assert "if-no-files-found: ignore" in step + assert "retention-days: 5" in step + prepare = workflow.index(" - name: Prepare Noema model verdict\n") + upload = workflow.index(f" - name: {name}\n") + refresh = workflow.index( + " - name: Refresh repository-scoped Noema GitHub App token for publication\n" + ) + assert prepare < upload < refresh + assert workflow.count("actions/upload-artifact@") == 1 diff --git a/tests/test_noema_review_gate.py b/tests/test_noema_review_gate.py index 5fa23dec53..e8a0dd6f59 100644 --- a/tests/test_noema_review_gate.py +++ b/tests/test_noema_review_gate.py @@ -1,3 +1,7 @@ + +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, +) import base64 import hashlib import http.client @@ -60,7 +64,7 @@ def test_noema_concurrency_and_live_head_cleanup_preserve_current_review(): workflow = Path(".github/workflows/noema-review.yml").read_text(encoding="utf-8") concurrency = workflow.split("concurrency:", 1)[1].split("permissions:", 1)[0] assert "github.event.workflow_run" not in concurrency - assert "cancel-in-progress: true" in concurrency + assert workflow_level_cancels_in_progress(workflow) admission = workflow.split("\n admit-current-head:\n", 1)[1].split( "\n cancel-closed-pr-runs:", 1 )[0] diff --git a/tests/test_noema_token_lifetime_stale_run_contract.py b/tests/test_noema_token_lifetime_stale_run_contract.py index 77a64cabdb..108647907a 100644 --- a/tests/test_noema_token_lifetime_stale_run_contract.py +++ b/tests/test_noema_token_lifetime_stale_run_contract.py @@ -1,5 +1,8 @@ """Regression contract for consolidated Noema quality-run retirement.""" +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, +) from pathlib import Path @@ -26,4 +29,4 @@ def test_noema_token_lifetime_quality_ci_retires_superseded_pr_runs() -> None: assert "github.event.pull_request.head.sha" not in concurrency_contract assert "github.sha" not in concurrency_contract assert "github.ref" not in concurrency_contract - assert "cancel-in-progress: true" in concurrency_contract + assert workflow_level_cancels_in_progress(workflow) diff --git a/tests/test_opencode_agent_contract.py b/tests/test_opencode_agent_contract.py index 72a8b44e56..321d25bd57 100644 --- a/tests/test_opencode_agent_contract.py +++ b/tests/test_opencode_agent_contract.py @@ -1121,9 +1121,50 @@ def test_opencode_repository_dispatch_authorization_is_fail_closed(): assert authorized.returncode == 0, authorized.stderr assert "Authorized repository_dispatch actor=" in authorized.stdout + # Two trusted identities dispatch this workflow: opencode-review.yml through + # the OpenCode GitHub App and pr-review-merge-scheduler.yml through its own + # token chain. The allowlist is a comma-separated list parsed like + # ALLOWED_DISPATCH_TARGETS, whitespace tolerated, and each identity must + # match on BOTH actor and sender. + multi_allowlist = "github-actions[bot], opencode-agent[bot]" + for identity in ("github-actions[bot]", "opencode-agent[bot]"): + listed = subprocess.run( + ["bash", "-c", shell], + env={ + **base_env, + "ALLOWED_DISPATCH_ACTOR": multi_allowlist, + "DISPATCH_ACTOR": identity, + "DISPATCH_SENDER": identity, + }, + text=True, + capture_output=True, + check=False, + ) + assert listed.returncode == 0, listed.stderr + assert f"Authorized repository_dispatch actor={identity}" in listed.stdout + for overrides, expected_reason in ( ({"ALLOWED_DISPATCH_ACTOR": ""}, "rejected actor="), ({"DISPATCH_SENDER": "seonghobae"}, "rejected actor="), + # A listed allowlist still rejects an identity that is not on it. + ( + { + "ALLOWED_DISPATCH_ACTOR": multi_allowlist, + "DISPATCH_ACTOR": "seonghobae", + "DISPATCH_SENDER": "seonghobae", + }, + "rejected actor=seonghobae", + ), + # Actor and sender must be the SAME listed identity, not each some + # listed identity -- a dispatch where they differ is still rejected. + ( + { + "ALLOWED_DISPATCH_ACTOR": multi_allowlist, + "DISPATCH_ACTOR": "opencode-agent[bot]", + "DISPATCH_SENDER": "github-actions[bot]", + }, + "rejected actor=opencode-agent[bot]", + ), ( {"ALLOWED_DISPATCH_TARGETS": "ContextualWisdomLab/.github"}, "rejected target=ContextualWisdomLab/naruon", @@ -1774,8 +1815,12 @@ def test_workflow_provisions_sandbox_tool_and_reviewer_agent(): assert "run_opencode_review_model_pool.sh" in workflow assert "rekick_model_pool_on_exhaustion" not in workflow assert "publish stage performs no duplicate model-catalog pass" in workflow - concurrency_contract = workflow.split("concurrency:", 1)[1].split( - "permissions:", 1 + # The review job's own group, addressed by its indentation: the workflow + # also carries a workflow-level admission group (pinned in + # tests/test_required_workflow_queue_contract.py), so splitting on the + # first "concurrency:" would read that one instead of this one. + concurrency_contract = workflow.split("\n concurrency:", 1)[1].split( + "\n runs-on:", 1 )[0] assert "needs.validate-pr-metadata.outputs.target_repository" in concurrency_contract assert "needs.validate-pr-metadata.outputs.pr_number || github.run_id" in concurrency_contract diff --git a/tests/test_opencode_dispatch_strix_sandbox_finding.py b/tests/test_opencode_dispatch_strix_sandbox_finding.py new file mode 100644 index 0000000000..ae73576cb0 --- /dev/null +++ b/tests/test_opencode_dispatch_strix_sandbox_finding.py @@ -0,0 +1,94 @@ +"""The failed-check finding must name Strix sandbox when the gate named it. + +`#1953` gave the Strix sandbox bootstrap failure its own verdict token, +`STRIX_SANDBOX_UNAVAILABLE`, precisely because reporting it as +`contextual-orchestrator/orchestrator/free exhausted` sent readers to a +component the run never reached. This consumer rendered one fixed finding for +every `STRIX_PROVIDER_UNAVAILABLE` line, so the corrected verdict was being +re-attributed to the gateway one step downstream, and no test covered the text +at all. These tests pin both directions. +""" + +from __future__ import annotations + +import subprocess +from pathlib import Path + +from tests.test_opencode_workflow_shell_syntax import _extract_run_block + +WORKFLOW = Path(".github/workflows/opencode-review-dispatch.yml") +STEP_NAME = "Publish OpenCode review outcome" +FUNCTION = "emit_strix_provider_failure_finding" + + +def _emitter_source() -> str: + """Return the emitter function's shell source from the published run block.""" + script = _extract_run_block(WORKFLOW.read_text(encoding="utf-8"), STEP_NAME) + start = script.index(f"{FUNCTION}() {{") + # ``_extract_run_block`` dedents the YAML block scalar, leaving the + # function body at two spaces and its closing brace on a line of its own. + closing = "\n }\n" + end = script.index(closing, start) + len(closing) + return script[start:end] + + +def _run_emitter(evidence: str, tmp_path: Path) -> str: + """Run the production emitter against one evidence file and return its finding text.""" + evidence_file = tmp_path / "strix-evidence.txt" + evidence_file.write_text(evidence, encoding="utf-8") + harness = tmp_path / "harness.sh" + harness.write_text( + "set -euo pipefail\n" + f'strix_evidence_file="{evidence_file}"\n' + f'repo_root="{tmp_path}"\n' + "finding_index=0\n" + f"{_emitter_source()}\n" + f"{FUNCTION}\n", + encoding="utf-8", + ) + result = subprocess.run( + ["bash", str(harness)], capture_output=True, text=True, check=True + ) + return result.stdout + + +def test_sandbox_token_reports_the_sandbox_not_the_gateway(tmp_path: Path) -> None: + """A `STRIX_SANDBOX_UNAVAILABLE` verdict never blames the gateway or its provider pool.""" + finding = _run_emitter( + "STRIX_PROVIDER_UNAVAILABLE: STRIX_SANDBOX_UNAVAILABLE: the last Strix " + "attempt ended in the sandbox bootstrap (Caido proxy on 127.0.0.1 " + "unreachable through Strix's loginAsGuest attempts) after 1 " + "sandbox-specific same-model retries (budget 1); this verdict names " + "Strix's sandbox, not the LLM gateway.\n", + tmp_path, + ) + + assert "Strix sandbox bootstrap blocked current-head security evidence" in finding + assert "STRIX_SANDBOX_UNAVAILABLE" in finding + assert "names Strix sandbox, not the contextual-orchestrator gateway" in finding + assert "gateway or its discovered provider pool was unavailable" not in finding + # The reader must not be sent to change gateway configuration. + assert "Do not change gateway or provider configuration" in finding + assert finding.startswith("### 1. HIGH .github/workflows/strix.yml:") + + +def test_gateway_failure_keeps_its_existing_finding(tmp_path: Path) -> None: + """Without the sandbox token the previous gateway text is emitted unchanged.""" + finding = _run_emitter( + "STRIX_PROVIDER_UNAVAILABLE: contextual-orchestrator/orchestrator/free " + "exhausted; the gateway owns provider discovery and failover.\n", + tmp_path, + ) + + assert ( + "Contextual-orchestrator provider availability blocked current-head security evidence" + in finding + ) + assert "gateway or its discovered provider pool was unavailable" in finding + assert "STRIX_SANDBOX_UNAVAILABLE" not in finding + assert "Strix sandbox bootstrap blocked" not in finding + + +def test_unrelated_evidence_emits_no_finding(tmp_path: Path) -> None: + """Evidence with no provider-unavailable signal still produces nothing.""" + assert _run_emitter("Strix run succeeded for model 'x' in 12s.\n", tmp_path) == "" diff --git a/tests/test_opencode_required_rerun_capacity.py b/tests/test_opencode_required_rerun_capacity.py index 431d3a8bc2..c85bc24e3c 100644 --- a/tests/test_opencode_required_rerun_capacity.py +++ b/tests/test_opencode_required_rerun_capacity.py @@ -1,5 +1,8 @@ """Capacity contract for Required OpenCode dispatch and exact-run wakeup.""" +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, +) import json import os from pathlib import Path @@ -48,7 +51,7 @@ def test_native_cancellation_runs_before_runner_admission() -> None: assert "required-opencode-review-${{" in concurrency assert "github.event.pull_request.number || github.run_id" in concurrency - assert "cancel-in-progress: true" in concurrency + assert workflow_level_cancels_in_progress(required) assert "live_head_matches()" in required diff --git a/tests/test_opencode_required_verdict_regression.py b/tests/test_opencode_required_verdict_regression.py index f29b97a663..5c5325d1aa 100644 --- a/tests/test_opencode_required_verdict_regression.py +++ b/tests/test_opencode_required_verdict_regression.py @@ -2,6 +2,10 @@ from __future__ import annotations +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, +) + import json import os import re @@ -86,7 +90,7 @@ def test_opencode_dispatch_uses_the_same_target_repo_pr_group() -> None: assert "opencode-review-${{" in dispatched assert "needs.validate-pr-metadata.outputs.target_repository" in dispatched assert "needs.validate-pr-metadata.outputs.pr_number || github.run_id" in dispatched - assert "cancel-in-progress: true" in dispatched + assert workflow_level_cancels_in_progress(dispatched) assert dispatched.index("validate-pr-metadata:") < dispatched.index(" concurrency:") @@ -621,7 +625,7 @@ def test_opencode_review_trigger_reacts_to_draft_conversion() -> None: "types: [opened, synchronize, reopened, ready_for_review, " "converted_to_draft, closed]" ) in trigger_block - assert "cancel-in-progress: true" in workflow.split("\npermissions:\n", 1)[0] + assert workflow_level_cancels_in_progress(workflow) def test_opencode_review_concurrency_group_is_workflow_level_repo_and_pr() -> None: @@ -637,7 +641,7 @@ def test_opencode_review_concurrency_group_is_workflow_level_repo_and_pr() -> No assert "required-opencode-review-${{" in concurrency_block assert "github.event.pull_request.head.sha || github.run_id" not in concurrency_block assert "github.event.pull_request.number || github.run_id" in concurrency_block - assert "cancel-in-progress: true" in concurrency_block + assert workflow_level_cancels_in_progress(workflow) assert " concurrency:" not in target_job.split(" permissions:", 1)[0] admission = workflow.split("\n admit-current-head:\n", 1)[1].split( "\n coverage-source-tree:", 1 diff --git a/tests/test_pr_review_autofix_nvidia_nim_contract.py b/tests/test_pr_review_autofix_nvidia_nim_contract.py index 8d4397c42d..2e733ac9e9 100644 --- a/tests/test_pr_review_autofix_nvidia_nim_contract.py +++ b/tests/test_pr_review_autofix_nvidia_nim_contract.py @@ -17,7 +17,7 @@ DOCTORING_RECORD = Path("docs/doctoring/hourly-nvidia-nim-autofix.md") CHANGELOG = Path("CHANGELOG.md") REVIEW_DISPATCH_WORKFLOW = Path(".github/workflows/opencode-review-dispatch.yml") -REVIEW_DISPATCH_BLOB_SHA = "ade10b37c43d0f2b46490b2196c893244afc3d49" +REVIEW_DISPATCH_BLOB_SHA = "d86497b3f43bebbabbb4f504eb5132cdf3b7b293" def _workflow_text(path: Path) -> str: diff --git a/tests/test_pr_review_fix_hourly_contract.py b/tests/test_pr_review_fix_hourly_contract.py index 4157aaf521..994145b469 100644 --- a/tests/test_pr_review_fix_hourly_contract.py +++ b/tests/test_pr_review_fix_hourly_contract.py @@ -195,12 +195,43 @@ def test_scheduler_validates_dispatch_authority_before_credentials() -> None: check=False, ).returncode == 0 + # ALLOWED_DISPATCH_ACTOR is a comma-separated allowlist shared with the two + # dispatch workflows; every listed identity passes when actor and sender + # both equal it, whitespace around commas tolerated. + allowlist = "github-actions[bot], opencode-agent[bot]" + for identity in ("github-actions[bot]", "opencode-agent[bot]"): + assert subprocess.run( + ["bash"], + input=shell, + text=True, + env={ + **base_env, + "ALLOWED_DISPATCH_ACTOR": allowlist, + "DISPATCH_ACTOR": identity, + "DISPATCH_SENDER": identity, + }, + check=False, + ).returncode == 0 + for override in ( {"DISPATCH_SENDER": "untrusted"}, {"DISPATCH_ACTOR": "untrusted"}, {"TARGET_REPOSITORY": "ContextualWisdomLab/unapproved"}, {"ALLOWED_DISPATCH_ACTOR": ""}, {"ALLOWED_TARGET_REPOSITORIES": ""}, + # A listed allowlist still rejects an unlisted identity. + { + "ALLOWED_DISPATCH_ACTOR": allowlist, + "DISPATCH_ACTOR": "untrusted", + "DISPATCH_SENDER": "untrusted", + }, + # Actor and sender must be the SAME listed identity, not each some + # listed identity. + { + "ALLOWED_DISPATCH_ACTOR": allowlist, + "DISPATCH_ACTOR": "opencode-agent[bot]", + "DISPATCH_SENDER": "github-actions[bot]", + }, ): assert subprocess.run( ["bash"], diff --git a/tests/test_pr_review_fix_scheduler_source_pin.py b/tests/test_pr_review_fix_scheduler_source_pin.py index 7958ba5163..0f9e0adb1c 100644 --- a/tests/test_pr_review_fix_scheduler_source_pin.py +++ b/tests/test_pr_review_fix_scheduler_source_pin.py @@ -2,6 +2,10 @@ from __future__ import annotations +from tests.test_required_workflow_queue_contract import ( + workflow_level_cancels_in_progress, +) + from pathlib import Path @@ -88,7 +92,7 @@ def test_reusable_scheduler_retains_least_privilege_and_bounded_dispatch() -> No assert "pull-requests: write" not in workflow assert "MAX_DISPATCHES:" in workflow assert "RETRY_HOURS:" in workflow - assert "cancel-in-progress: true" in workflow + assert workflow_level_cancels_in_progress(workflow) def test_reusable_scheduler_bounds_both_oidc_exchange_requests() -> None: diff --git a/tests/test_pr_review_merge_scheduler.py b/tests/test_pr_review_merge_scheduler.py index 1e5848aac3..ba47b89c8d 100644 --- a/tests/test_pr_review_merge_scheduler.py +++ b/tests/test_pr_review_merge_scheduler.py @@ -6109,6 +6109,101 @@ def test_dispatch_strix_waits_for_active_target_repository_run(monkeypatch, caps assert "target repository already has active run(s) ContextualWisdomLab/.github@9350" in capsys.readouterr().out +def test_central_run_filter_accepts_the_run_name_github_actually_sends(monkeypatch): + """A ``run-name:`` workflow reports the rendered title in ``name``. + + ``opencode-review-dispatch.yml``, ``strix.yml`` and ``noema-review.yml`` all + define ``run-name:``, so GitHub sets each run's ``name`` to the rendered + string, identical to ``display_title`` -- sampled 2026-09-07, 100 of 100 + opencode-review-dispatch runs carry that form and none carries the bare + workflow name. Matching ``name`` exactly against the aliases dropped every + one of them before the ``repository_dispatch`` branch that exists to read + them, so ``already_running`` never suppressed a same-head repeat and + ``stale`` never populated: .github#1529 took 27 dispatches on one unchanged + head, and older-head central runs were never cancelled. + + The neighbouring fixture below sets a bare ``name`` alongside a rendered + ``display_title``, which is why 100% coverage of that branch never showed + that production could not reach it. + """ + head_sha = "a" * 40 + stale_sha = "b" * 40 + current_title = f"Required OpenCode Review owner/repo#1@{head_sha}" + stale_title = f"Required OpenCode Review owner/repo#1@{stale_sha}" + central_runs = [ + { + "id": 9500, + "name": current_title, + "display_title": current_title, + "event": "repository_dispatch", + }, + { + "id": 9501, + "name": stale_title, + "display_title": stale_title, + "event": "repository_dispatch", + }, + ] + + def fake_active_runs(repo, statuses=("queued", "in_progress")): + del statuses + return central_runs if repo == "ContextualWisdomLab/.github" else [] + + monkeypatch.setattr(sched, "active_workflow_runs", fake_active_runs) + monkeypatch.setenv( + "SCHEDULER_REQUIRED_WORKFLOW_REPOSITORY", + "ContextualWisdomLab/.github", + ) + + assert sched.active_opencode_run_refs( + "owner/repo", + "OpenCode Review", + make_pr(headRefOid=head_sha), + ) == ( + [("ContextualWisdomLab/.github", "9500")], + [("ContextualWisdomLab/.github", "9501")], + ) + + +def test_central_run_filter_reads_the_rendered_strix_run_name_too(monkeypatch): + """Strix shares the matcher, and ``strix.yml`` also defines ``run-name:``. + + ``active_review_run_refs`` has exactly two call sites -- OpenCode's and + ``dispatch_strix_evidence``'s -- so the exact-``name`` match blinded both. + Pinning the Strix side here keeps a later narrowing of the fix to the + OpenCode aliases from silently reopening the Strix half. + """ + head_sha = "c" * 40 + current_title = f"Strix Security Scan owner/repo#1@{head_sha}" + + def fake_active_runs(repo, statuses=("queued", "in_progress")): + del statuses + if repo != "ContextualWisdomLab/.github": + return [] + return [ + { + "id": 9600, + "name": current_title, + "display_title": current_title, + "event": "repository_dispatch", + } + ] + + monkeypatch.setattr(sched, "active_workflow_runs", fake_active_runs) + monkeypatch.setenv( + "SCHEDULER_REQUIRED_WORKFLOW_REPOSITORY", + "ContextualWisdomLab/.github", + ) + + assert sched.active_review_run_refs( + "owner/repo", + "Strix Security Scan", + make_pr(headRefOid=head_sha), + run_title="Strix Security Scan", + workflow_aliases=frozenset({"Strix Security Scan"}), + ) == ([("ContextualWisdomLab/.github", "9600")], []) + + def test_central_run_filter_ignores_malformed_and_non_dispatch_titles(monkeypatch): head_sha = "a" * 40 central_runs = [ @@ -10648,3 +10743,50 @@ def test_reconcile_releases_strix_lease_when_no_run_was_created(tmp_path): record = next(iter(load_state_file(gate.state_path).records.values())) assert record.status == "stale" + + +def test_inspect_pr_holds_pre_review_update_while_current_head_checks_run(): + """A behind, unreviewed head keeps its queued checks instead of being updated (#1935). + + Under a saturated queue the PR's own delayed scheduler run used to merge + ``main`` into the head before review dispatch, cancelling every queued + check on the old head and requeueing the PR behind them. The hold has no + age cap on purpose: a check that never finishes keeps the head in place + rather than restarting that loop, and the update resumes as soon as every + newest check run has a terminal status. + """ + + def behind_with(nodes): + return make_pr( + mergeStateStatus="BEHIND", + statusCheckRollup={"contexts": {"nodes": nodes}}, + ) + + held = inspect( + behind_with( + [ + {"__typename": "CheckRun", "name": "trivy-fs", "status": "QUEUED", "conclusion": None}, + {"__typename": "CheckRun", "name": "scan-pr-queue", "status": "IN_PROGRESS", "conclusion": None}, + {"__typename": "CheckRun", "name": "osv-scan", "status": "COMPLETED", "conclusion": "SUCCESS"}, + ] + ) + ) + assert held.action == "wait" + assert "branch is outdated before review dispatch" in held.reason + assert "checks are still queued or running" in held.reason + + resumed = inspect( + behind_with( + [ + {"__typename": "CheckRun", "name": "trivy-fs", "status": "COMPLETED", "conclusion": "SUCCESS"}, + {"__typename": "CheckRun", "name": "scan-pr-queue", "status": "COMPLETED", "conclusion": "SKIPPED"}, + ] + ) + ) + assert resumed.action == "update_branch" + assert resumed.reason.startswith( + "current head has no OpenCode approval; branch is outdated before review dispatch" + ) + assert "checks are still queued or running" not in resumed.reason + + assert sched.has_in_flight_check_runs(behind_with([])) is False diff --git a/tests/test_repository_metadata_workflow_pages.py b/tests/test_repository_metadata_workflow_pages.py index 82aa4462f7..5c05dfbe3d 100644 --- a/tests/test_repository_metadata_workflow_pages.py +++ b/tests/test_repository_metadata_workflow_pages.py @@ -2,6 +2,8 @@ from __future__ import annotations +import re + import importlib.util import json from pathlib import Path @@ -40,7 +42,11 @@ def test_metadata_pr_validation_cancels_superseded_head_runs() -> None: concurrency = workflow.split("concurrency:", 1)[1].split("jobs:", 1)[0] assert "group: repository-metadata-reconcile-${{ github.ref }}" in concurrency - assert "cancel-in-progress: ${{ github.event_name == 'pull_request' }}" in concurrency + assert re.search( + r"(?m)^[ \t]+cancel-in-progress:[ \t]+\$\{\{ github\.event_name == 'pull_request' \}\}" + r"[ \t]*$", + concurrency, + ) assert "github.event.pull_request.head.sha" not in concurrency diff --git a/tests/test_required_workflow_queue_contract.py b/tests/test_required_workflow_queue_contract.py index 803d43ab59..4ab09b1d0c 100644 --- a/tests/test_required_workflow_queue_contract.py +++ b/tests/test_required_workflow_queue_contract.py @@ -21,6 +21,90 @@ def workflow_text(name: str) -> str: return (REPO_ROOT / ".github" / "workflows" / name).read_text(encoding="utf-8") +# The workflow-level block is the one whose key starts at column zero; job-level +# blocks are indented under ``jobs:``. Anchoring there instead of slicing the text +# before ``permissions:`` makes the search independent of key order, which two +# workflows already need: javascript-coverage-quality-ci.yml and +# repository-metadata-reconcile.yml declare ``permissions:`` above ``concurrency:``, +# and the older slice returned nothing for them and raised IndexError rather than +# reading the block that is plainly there. +WORKFLOW_LEVEL_CONCURRENCY_BLOCK = re.compile( + r"(?m)^concurrency:[ \t]*\n(?P(?:[ \t]+[^\n]*\n)+)" +) + + +def workflow_level_concurrency_group(workflow: str) -> str: + """Return only the workflow-level ``concurrency.group`` value, comments removed. + + Asserting that an expression "appears in the concurrency block" is satisfied by + a comment that merely documents the key while the key itself says something + else, because the block's raw text carries its comments. That is not + hypothetical: the block above this workflow's group explains the key in prose, + so a maintainer quoting the expressions there while another change collapsed + the group to the repository alone would leave every pull request in one group, + cancelling each other, with the contract still green. Slice to the group's own + value so the assertion tests the key rather than the documentation beside it. + """ + block_match = WORKFLOW_LEVEL_CONCURRENCY_BLOCK.search(workflow) + if block_match is None: + raise AssertionError("workflow declares no workflow-level concurrency block") + value: list[str] = [] + collecting = False + for line in block_match.group("body").splitlines(): + if line.strip().startswith("#"): + continue + if not collecting: + if re.match(r"^\s*group:", line): + collecting = True + value.append(line.split("group:", 1)[1]) + continue + if re.match(r"^\s*[A-Za-z][\w-]*:", line): + break + value.append(line) + if not collecting: + raise AssertionError("workflow-level concurrency block declares no group") + head = value[0].strip() + if head.startswith("|"): + # Not represented here, and on 2026-09-07 no workflow uses one: a literal + # block keeps its newlines, so folding it would return a value YAML never + # produces. Refusing is better than returning a plausible wrong string. + raise AssertionError("literal block scalars are not supported for the group key") + if head.startswith(">"): + # Nine of the twenty-nine workflow-level keys are folded, including every + # required review workflow, so this is the majority shape rather than an + # edge case. YAML joins a folded scalar's lines with single spaces, so + # returning the indicator and the raw newlines would make the helper + # disagree with the file's own meaning. Blank lines and more-deeply + # indented lines inside a fold keep their newlines in YAML and are not + # handled here; neither shape occurs in this tree. + return " ".join(part.strip() for part in value[1:] if part.strip()) + return "\n".join(value).strip() + + +def workflow_level_cancels_in_progress(workflow: str) -> bool: + """Return whether the workflow-level block really sets ``cancel-in-progress: true``. + + Anchored to the start of a block line, so a commented-out setting cannot + satisfy it. Substring assertions could: commenting the real line out and + adding ``cancel-in-progress: false`` beside it leaves the searched text in + the file while YAML reads the opposite, and on 2026-09-06 that mutation + passed the whole suite (2958 passed, 0 failed) against ``noema-review.yml``. + A required review workflow that stops cancelling superseded runs keeps every + earlier review alive on each push, which is the queue behaviour this + repository has been trying to remove. + + Kept separate from the group helper on purpose: ``cancel-in-progress`` is a + sibling of ``group``, so it lies outside the value that helper returns and + cannot be covered by moving assertions onto it. + """ + block_match = WORKFLOW_LEVEL_CONCURRENCY_BLOCK.search(workflow) + if block_match is None: + raise AssertionError("workflow declares no workflow-level concurrency block") + return bool( + re.search(r"(?m)^[ \t]+cancel-in-progress:[ \t]+true[ \t]*$", block_match.group("body")) + ) + + def workflow_step(workflow: str, name: str) -> str: """Extract one named workflow step without parsing YAML dynamically.""" step = f" - name: {name}\n" @@ -112,7 +196,10 @@ def test_merge_scheduler_uses_native_auto_merge_after_required_checks() -> None: assert "github.event_name == 'repository_dispatch' && github.run_id" not in ( concurrency_contract ) - assert "cancel-in-progress: ${{" in concurrency_contract + # Anchored, not a substring: this workflow's value is an expression rather + # than a constant, so it cannot use the boolean helper, but a commented-out + # setting must not satisfy it either. + assert re.search(r"(?m)^[ \t]+cancel-in-progress:[ \t]+\$\{\{", concurrency_contract) assert "github.event_name == 'repository_dispatch'" in concurrency_contract @@ -214,6 +301,239 @@ def test_privileged_review_retries_use_default_branch_repository_dispatch() -> N assert '"gh",\n "workflow",\n "run"' not in autofix_scheduler +def test_privileged_review_dispatch_coalesces_superseded_runs_before_admission() -> None: + """A superseded dispatch must be cancelled while queued, not after it takes a runner. + + ``opencode-review-dispatch.yml`` carried its concurrency group only on the + long ``opencode-review-target`` job. A job-level group is not evaluated + while the whole run waits behind the organization job ceiling, so two + dispatches for one pull request each waited hours and each was allocated a + runner before the older one could be discarded. Measured on 2026-09-06: + four of the five dispatch runs that passed ``validate-pr-metadata`` were + then rejected by the privileged metadata check because the head had moved + while they queued, every one of them after ``coverage-source-tree`` and + ``coverage-evidence`` had already run. + + The workflow-level group is keyed by the dispatched pull request, matching + ``codeql-scan-dispatch.yml``'s workflow-level group and the job-level group + this workflow keeps for the review job itself. + """ + workflow = workflow_text("opencode-review-dispatch.yml") + header = workflow.split("permissions:", 1)[0] + concurrency_contract = header.split("concurrency:", 1)[1] + group_value = workflow_level_concurrency_group(workflow) + + assert re.search(r"(?m)^concurrency:", header) + assert "opencode-review-dispatch-" in group_value + assert ( + "github.event.client_payload.target_repository || github.repository" + in group_value + ) + assert "github.event.client_payload.pr_number || github.run_id" in group_value + assert workflow_level_cancels_in_progress(workflow) + assert "github.event.client_payload.pr_head_sha" not in concurrency_contract + assert re.search(r"(?m)^ concurrency:", workflow) + + +@pytest.mark.parametrize( + ("workflow_name", "group_prefix"), + ( + ("agent-mention-opencode-dispatch.yml", "agent-mention-opencode-"), + ("agent-mention-noema-dispatch.yml", "agent-mention-noema-"), + ), +) +def test_agent_mention_dispatch_coalesces_while_queued( + workflow_name: str, group_prefix: str +) -> None: + """A superseded agent mention must be discarded before it holds a queue slot. + + Both mention dispatchers carried the same defect + ``opencode-review-dispatch.yml`` carried before #1958: the group sat on the + single ``validate-and-forward`` job, and a job-level group is not evaluated + while the run waits behind the organization job ceiling. Measured on the + review dispatcher over the 39.7 hours ending 2026-09-06T12:41Z, 23 pairs of + runs for one pull request overlapped -- the older run was still open when its + successor arrived -- and none was coalesced; the five that ended + ``cancelled`` were cancelled between 0.7 and 2.9 hours after the newer run + was created, which is a sweep, not concurrency. + + The group moves to workflow level and is not duplicated on the job. Every + workflow here that keys a group at both levels (``strix.yml``, + ``opencode-review-dispatch.yml``) gives the two levels different names, + because a job that requests the group its own run already holds waits on + itself. + """ + workflow = workflow_text(workflow_name) + header = workflow.split("permissions:", 1)[0] + group = workflow_level_concurrency_group(workflow) + + assert re.search(r"(?m)^concurrency:", header) + # Read the group's value, not the block: the comment above these keys quotes + # the very expressions asserted here, so a raw-block assertion would survive + # the key being collapsed. That is the hole #1970 closed. + assert group.strip().startswith(group_prefix) + assert "github.event.client_payload.target_repository" in group + assert "github.event.client_payload.pr_number || github.run_id" in group + # ``cancel-in-progress`` is a sibling key, so it is outside the group value. + # Anchor it to its own line at the block's indent; a comment starts with + # ``#`` and cannot satisfy this. + assert re.search(r"(?m)^ cancel-in-progress: true$", header) + # ``\s`` also matches the newline before a column-0 key, so anchor the + # job-level search on horizontal whitespace only. + assert not re.search(r"(?m)^[ \t]+concurrency:", workflow) + + +def test_agent_mention_router_keeps_its_two_distinct_job_groups() -> None: + """The router must not be hoisted: its two jobs need different groups. + + ``agent-mention-router.yml`` runs a per-issue local route that supersedes + itself and an organization-wide sweep that must never be cancelled midway. + A workflow carries at most one workflow-level group, so hoisting either one + would silently give the sweep the route's ``cancel-in-progress: true`` and + let a later comment kill a sweep that is part way through the organization. + """ + workflow = workflow_text("agent-mention-router.yml") + + assert not re.search(r"(?m)^concurrency:", workflow) + assert ( + "group: review-agent-mention-router-local-${{ github.repository }}" + in workflow + ) + assert "group: review-agent-mention-router-sweep-${{ github.repository }}" in workflow + + sweep = workflow.split("sweep-organization-agent-mentions:", 1)[1] + # Anchored on the sweep JOB block: this router declares no workflow-level + # concurrency, so the sibling helper would raise rather than read it. + assert re.search( + r"(?m)^[ \t]+cancel-in-progress:[ \t]+false[ \t]*$", + sweep.split("steps:", 1)[0], + ) + +def test_concurrency_group_slice_ignores_the_comment_that_documents_it() -> None: + """A comment quoting the key must not satisfy an assertion about the key. + + This is the negative control for ``workflow_level_concurrency_group``. The + synthetic workflow below is exactly the shape that defeated the previous + contract: the real group is collapsed to the repository alone, so every pull + request in that repository shares one group and they cancel each other, while + a comment directly above still quotes both expressions the contract looks for. + Reading the raw block finds them; reading the group's value does not. + """ + defeated = textwrap.dedent( + """\ + name: Example + on: + repository_dispatch: + concurrency: + # Key: github.event.client_payload.target_repository || github.repository + # with github.event.client_payload.pr_number || github.run_id + group: opencode-review-dispatch-${{ github.repository }} + cancel-in-progress: true + permissions: + contents: read + """ + ) + raw_block = defeated.split("permissions:", 1)[0].split("concurrency:", 1)[1] + group_value = workflow_level_concurrency_group(defeated) + + assert "github.event.client_payload.pr_number || github.run_id" in raw_block + assert "github.event.client_payload.pr_number || github.run_id" not in group_value + assert "github.event.client_payload.target_repository" not in group_value + assert "opencode-review-dispatch-${{ github.repository }}" in group_value + + +def test_concurrency_group_slice_reads_a_folded_multi_line_key() -> None: + """The real key is a folded block, so the slice must join its continuation lines.""" + folded = textwrap.dedent( + """\ + concurrency: + group: >- + opencode-review-dispatch-${{ + github.event.client_payload.target_repository || github.repository }}-${{ + github.event.client_payload.pr_number || github.run_id }} + cancel-in-progress: true + permissions: + contents: read + """ + ) + group_value = workflow_level_concurrency_group(folded) + + assert ( + "github.event.client_payload.target_repository || github.repository" + in group_value + ) + assert "github.event.client_payload.pr_number || github.run_id" in group_value + assert "cancel-in-progress" not in group_value + + +def test_concurrency_helpers_read_the_block_when_permissions_comes_first() -> None: + """Key order must not decide whether the contract can see the block. + + The earlier helper sliced the text before ``permissions:`` and then split on + ``concurrency:``. That works only when ``concurrency:`` is declared first. Two + workflows in this repository declare ``permissions:`` above it -- + javascript-coverage-quality-ci.yml and repository-metadata-reconcile.yml -- + and for those the slice was empty, so the helper raised ``IndexError`` instead + of reading the block that is plainly there. Anchoring at column zero makes the + order irrelevant. + """ + permissions_first = textwrap.dedent( + """\ + name: Example + permissions: + contents: read + concurrency: + group: example-${{ github.repository }}-${{ github.event.pull_request.number }} + cancel-in-progress: true + jobs: + build: + runs-on: ubuntu-latest + """ + ) + + assert ( + workflow_level_concurrency_group(permissions_first) + == "example-${{ github.repository }}-${{ github.event.pull_request.number }}" + ) + assert workflow_level_cancels_in_progress(permissions_first) + + +def test_concurrency_helpers_name_a_missing_block_instead_of_index_error() -> None: + """A workflow with no top-level block must fail with a sentence, not ``IndexError``. + + ``IndexError: list index out of range`` names neither the workflow nor the + contract it broke, so a reader has to reconstruct both from the traceback. + """ + no_block = "name: Example\njobs:\n build:\n runs-on: ubuntu-latest\n" + + for helper in (workflow_level_concurrency_group, workflow_level_cancels_in_progress): + with pytest.raises(AssertionError, match="no workflow-level concurrency block"): + helper(no_block) + + +def test_cancel_in_progress_assertion_rejects_a_commented_out_setting() -> None: + """The negative control for ``workflow_level_cancels_in_progress``. + + A substring test for ``cancel-in-progress: true`` is satisfied by a comment + that quotes it. On 2026-09-06 that exact mutation -- comment out the real line + in noema-review.yml, add ``cancel-in-progress: false`` beneath it -- passed the + whole suite (2958 passed, 0 failed) while every push to a pull request stopped + cancelling its own superseded run. Anchoring to the start of a block line is + what closes it. + """ + quoted_but_disabled = textwrap.dedent( + """\ + concurrency: + group: example-${{ github.repository }}-${{ github.event.pull_request.number }} + # cancel-in-progress: true + cancel-in-progress: false + """ + ) + + assert "cancel-in-progress: true" in quoted_but_disabled + assert not workflow_level_cancels_in_progress(quoted_but_disabled) + + def test_required_opencode_dispatch_does_not_wait_on_merge_scheduler() -> None: """Dispatch review execution directly so polling cannot starve its producer.""" workflow = workflow_text("opencode-review.yml") @@ -256,33 +576,32 @@ def test_required_pull_request_workflows_cancel_superseded_runs() -> None: concurrency_contract = workflow.split("concurrency:", 1)[1].split( "permissions:", 1 )[0] + group_value = workflow_level_concurrency_group(workflow) assert "concurrency:" in workflow - assert "github.event.pull_request.base.repo.full_name" in concurrency_contract - assert "github.repository" in concurrency_contract + assert "github.event.pull_request.base.repo.full_name" in group_value + assert "github.repository" in group_value assert "github.event.pull_request.number" in workflow assert re.search(r"(?m)^concurrency:", workflow) - assert "cancel-in-progress: true" in concurrency_contract + assert workflow_level_cancels_in_progress(workflow) if filename == "security-scan.yml": assert ( - "github.event_name == 'pull_request_target'" in concurrency_contract - or ("github.event_name == 'pull_request'" in concurrency_contract) + "github.event_name == 'pull_request_target'" in group_value + or ("github.event_name == 'pull_request'" in group_value) ) elif filename == "opencode-review.yml": - assert "required-opencode-review-${{" in concurrency_contract + assert "required-opencode-review-${{" in group_value assert "outputs.admitted == 'true'" in workflow elif filename == "noema-review.yml": assert not re.search(r"(?m)^ concurrency:", workflow) assert "github.event.workflow_run" not in concurrency_contract - assert "required-noema-review-${{" in concurrency_contract + assert "required-noema-review-${{" in group_value assert "outputs.admitted == 'true'" in workflow else: if filename == "codeql-pr.yml": - assert "github.event_name == 'pull_request'" in concurrency_contract + assert "github.event_name == 'pull_request'" in group_value else: - assert ( - "github.event_name == 'pull_request_target'" in concurrency_contract - ) + assert "github.event_name == 'pull_request_target'" in group_value assert "github.event.pull_request.head.sha" not in concurrency_contract assert "format('pr-{0}-{1}'" not in concurrency_contract @@ -306,12 +625,17 @@ def test_pr_quality_workflows_isolate_concurrency_by_repository_and_pr() -> None "${{ github.event.pull_request.number || github.ref }}" ) in concurrency if filename == "cloudflare-dns.yml": - assert ( - "cancel-in-progress: ${{ github.event_name == 'pull_request' }}" - in concurrency + # Anchored like the ``true`` contracts below: a commented-out setting + # must not satisfy this either, and this workflow deliberately cancels + # only for pull requests, so its value is an expression rather than a + # constant. + assert re.search( + r"(?m)^[ \t]+cancel-in-progress:[ \t]+\$\{\{ github\.event_name ==" + r" 'pull_request' \}\}[ \t]*$", + concurrency, ) else: - assert "cancel-in-progress: true" in concurrency + assert workflow_level_cancels_in_progress(workflow) def test_central_semgrep_logs_every_finding_and_distinguishes_engine_failure() -> None: @@ -389,18 +713,20 @@ def test_strix_serializes_provider_evidence_per_repository_and_pr() -> None: )[0] strix_job = workflow.split("\n strix:\n", 1)[1] + group_value = workflow_level_concurrency_group(workflow) + assert re.search(r"(?m)^concurrency:", workflow) assert "needs: [changed-scope, admit-current-head]" in strix_job assert "needs.admit-current-head.outputs.admitted == 'true'" in strix_job - assert "strix-security-scan-${{" in concurrency_contract - assert "github.event.pull_request.base.repo.full_name" in concurrency_contract - assert "github.event.client_payload.target_repository" in concurrency_contract - assert "github.event.pull_request.number" in concurrency_contract - assert "github.event.client_payload.pr_number" in concurrency_contract - assert "github.run_id" in concurrency_contract + assert "strix-security-scan-${{" in group_value + assert "github.event.pull_request.base.repo.full_name" in group_value + assert "github.event.client_payload.target_repository" in group_value + assert "github.event.pull_request.number" in group_value + assert "github.event.client_payload.pr_number" in group_value + assert "github.run_id" in group_value assert "github.event.pull_request.head.sha" not in concurrency_contract assert "github.event.client_payload.pr_head_sha" not in concurrency_contract - assert "cancel-in-progress: true" in concurrency_contract + assert workflow_level_cancels_in_progress(workflow) assert " concurrency:" not in strix_job.split(" permissions:", 1)[0] assert "queue: max" not in workflow assert workflow.index("admit-current-head:") < workflow.index("\n strix:\n") @@ -579,6 +905,32 @@ def test_strix_draft_transition_cancels_current_scan(tmp_path: Path) -> None: assert "/actions/runs/100/cancel" in calls +def test_pr_keyed_scan_workflows_pin_cancellation_as_a_value() -> None: + """Pin `cancel-in-progress` for the two PR-keyed scans that only had presence. + + Both appear in ``test_pull_request_close_events_cancel_superseded_runs_without_heavy_jobs``, + but in the branch that asserts the key is *present* rather than what it says. + That branch is shaped by ``pr-review-merge-scheduler.yml``, whose value is + deliberately an expression over ``github.event_name``, so the loop cannot + assert a constant for everyone in it. Nothing else read the flag: flipping + either to ``false`` left the whole suite green (2968 passed, 0 failed, + measured 2026-09-06). + + Kept out of ``test_required_pull_request_workflows_cancel_superseded_runs`` + because that loop ends by requiring a ``github.event_name`` discriminator in + the group, and these two key on + ``pull_request.number || github.ref`` with no event-name term. Adding them + there would need a branch that asserts nothing. + """ + for filename in ("python-security.yml", "sast-semgrep.yml"): + workflow = workflow_text(filename) + group_value = workflow_level_concurrency_group(workflow) + + assert workflow_level_cancels_in_progress(workflow) + assert "github.event.pull_request.number" in group_value + assert "github.event_name" not in group_value + + def test_pull_request_close_events_cancel_superseded_runs_without_heavy_jobs() -> None: """Close events should cancel old runs without starting expensive jobs.""" workflows = ( @@ -639,7 +991,9 @@ def test_pull_request_close_events_cancel_superseded_runs_without_heavy_jobs() - )[0] assert "github.event.pull_request.number" in concurrency_contract assert "github.event.pull_request.head.sha" not in concurrency_contract - assert "cancel-in-progress:" in concurrency_contract + assert re.search( + r"(?m)^[ \t]+cancel-in-progress:[ \t]+\S", concurrency_contract + ) else: raise AssertionError(f"unclassified close-event workflow: {filename}") assert "github.event.action != 'closed'" in workflow @@ -658,7 +1012,7 @@ def test_pull_request_close_events_cancel_superseded_runs_without_heavy_jobs() - # outside that queue so synchronize and close events can retire old work. assert "admit-current-head:" in strix_workflow assert "skipping stale evidence" in strix_workflow - assert "cancel-in-progress: true" in strix_workflow + assert workflow_level_cancels_in_progress(strix_workflow) def test_merge_scheduler_owns_empty_pr_cleanup_without_checkout() -> None: @@ -720,7 +1074,7 @@ def test_noema_triggers_preserve_standalone_pull_request_review() -> None: assert "github.event_name" not in concurrency_contract.split( "cancel-in-progress:", 1 )[0] - assert "cancel-in-progress: true" in concurrency_contract + assert workflow_level_cancels_in_progress(workflow) assert re.search(r"(?m)^concurrency:", workflow) assert not re.search(r"(?m)^ concurrency:", workflow) assert "needs.admit-current-head.outputs.admitted == 'true'" in noema_job @@ -1037,7 +1391,7 @@ def test_fix_scheduler_cancels_superseded_cron_runs() -> None: workflow = workflow_text("pr-review-fix-scheduler.yml") assert "central-pr-review-fix-scheduler-" in workflow - assert "cancel-in-progress: true" in workflow + assert workflow_level_cancels_in_progress(workflow) def test_security_scan_fails_closed_when_dependency_review_is_unavailable() -> None: diff --git a/tests/test_scheduler_and_codeql_dispatch_runner_image_contract.py b/tests/test_scheduler_and_codeql_dispatch_runner_image_contract.py index dd7af43427..ba0b2598a9 100644 --- a/tests/test_scheduler_and_codeql_dispatch_runner_image_contract.py +++ b/tests/test_scheduler_and_codeql_dispatch_runner_image_contract.py @@ -45,10 +45,10 @@ def test_hourly_review_repair_uses_explicit_supported_image(self) -> None: self.assert_explicit_supported_image(HOURLY_REVIEW_REPAIR) def test_codeql_pr_uses_explicit_supported_image(self) -> None: - """Require both CodeQL PR compatibility-analysis jobs to pin Ubuntu 24.04.""" + """Require detect-languages, analyze-head, and the coordinator to pin Ubuntu 24.04.""" workflow = CODEQL_PR.read_text(encoding="utf-8") self.assertNotIn("runs-on: ubuntu-latest", workflow) - self.assertEqual(workflow.count("runs-on: ubuntu-24.04"), 2) + self.assertEqual(workflow.count("runs-on: ubuntu-24.04"), 3) def test_codeql_scan_dispatch_uses_explicit_supported_image(self) -> None: """Require both CodeQL Scan Dispatch jobs to pin Ubuntu 24.04.""" diff --git a/tests/test_strix_caido_bootstrap_timing_retry.py b/tests/test_strix_caido_bootstrap_timing_retry.py index a60b9d801b..3bb7c9e220 100644 --- a/tests/test_strix_caido_bootstrap_timing_retry.py +++ b/tests/test_strix_caido_bootstrap_timing_retry.py @@ -138,5 +138,199 @@ def test_retry_reason_is_logged_for_operators(self) -> None: ) +RATE_LIMIT_LOG = ( + "litellm.RateLimitError: RateLimitError: rate limit exceeded\n" + "Vulnerabilities 0\n" +) + + +def _run_retry_loop(log_text: str, *, per_model: int, sandbox_retries: int) -> tuple[int, str]: + """Drive the production retry loop with a stubbed Strix run and return (calls, stderr). + + The reported sandbox retry count (``SANDBOX_RETRIES_USED``) is echoed to + stdout as ``reported=`` and appended to the returned stderr text so + tests can assert it without a second harness. + + ``run_strix_once`` is replaced by a stub that writes ``log_text`` to the + attempt log and fails, so the loop's own retry decision is what is under + test; every classifier the loop consults is the production function. + """ + + gate_source = STRIX_GATE.read_text(encoding="utf-8") + blocks = [ + _function_block(gate_source, name) + for name in ( + "run_strix_with_transient_retry", + "is_transient_same_model_retry_error", + "is_timeout_error", + "is_llm_api_connection_error", + "is_llm_service_unavailable_error", + "is_rate_limit_error", + "is_midstream_fallback_error", + "is_caido_bootstrap_timing_error", + ) + ] + with tempfile.TemporaryDirectory(prefix="strix-caido-retry-") as temp_dir: + log_path = Path(temp_dir) / "strix.log" + counter = Path(temp_dir) / "calls" + counter.write_text("0", encoding="utf-8") + script = "\n".join( + ( + "set -uo pipefail", + f'STRIX_LOG="{log_path}"', + f'COUNTER="{counter}"', + f"STRIX_TRANSIENT_RETRY_PER_MODEL={per_model}", + f"STRIX_SANDBOX_BOOTSTRAP_RETRIES={sandbox_retries}", + "STRIX_TRANSIENT_RETRY_BACKOFF_SECONDS=0", + "STRIX_TOTAL_TIMEOUT_SECONDS=0", + "TOTAL_TIMEOUT_EXCEEDED=0", + "github_models_rate_limit_should_skip_same_model_retry() { return 1; }", + # The stub caps itself: a runaway loop returns the configuration + # exit code 2 after six calls, which the harness reports as a + # failure instead of hanging the suite. + 'run_strix_once() { n=$(( $(cat "$COUNTER") + 1 )); echo "$n" > "$COUNTER"; printf "%s" "$LOG_TEXT" > "$STRIX_LOG"; [ "$n" -ge 6 ] && return 2; return 1; }', + *blocks, + 'run_strix_with_transient_retry "orchestrator/free"; rc=$?; echo "reported=$SANDBOX_RETRIES_USED"; exit "$rc"', + ) + ) + completed = subprocess.run( + ["bash", "-c", script, "strix-retry"], + check=False, + capture_output=True, + text=True, + env={"PATH": "/usr/bin:/bin", "LOG_TEXT": log_text}, + ) + calls = int(counter.read_text(encoding="utf-8").strip()) + if completed.returncode != 1: + raise AssertionError(f"rc={completed.returncode}\n{completed.stderr}") + return calls, completed.stderr + completed.stdout + + +def _orchestrator_verdict_line(log_text: str) -> str: + """Return the stderr the primary-scan verdict branch emits for a failed orchestrator scan.""" + + gate_source = STRIX_GATE.read_text(encoding="utf-8") + blocks = [ + _function_block(gate_source, name) + for name in ("run_current_target_scan", "is_caido_bootstrap_timing_error") + ] + with tempfile.TemporaryDirectory(prefix="strix-caido-verdict-") as temp_dir: + log_path = Path(temp_dir) / "strix.log" + log_path.write_text(log_text, encoding="utf-8") + script = "\n".join( + ( + "set -uo pipefail", + f'STRIX_LOG="{log_path}"', + 'PRIMARY_MODEL="orchestrator/free"', + "STRIX_SANDBOX_BOOTSTRAP_RETRIES=1", + "SANDBOX_RETRIES_USED=1", + "TOTAL_TIMEOUT_EXCEEDED=0", + # run_current_target_scan resets INFRA_ERROR_DETECTED before the + # scan; the production run_strix_once sets it on a failed attempt, + # so the stub does the same. + "run_strix_with_transient_retry() { INFRA_ERROR_DETECTED=1; return 1; }", + "provider_signal_fail_closed_enabled() { return 0; }", + "is_contextual_orchestrator_model() { return 0; }", + "is_model_retryable_error() { return 1; }", + "has_distinct_fallback_model_for_model() { return 1; }", + # has_detected_infrastructure_error is consulted by run_strix_once, + # which the stub above replaces; the flag is set by that path. + *blocks, + "run_current_target_scan", + ) + ) + completed = subprocess.run( + ["bash", "-c", script, "strix-verdict"], + check=False, + capture_output=True, + text=True, + ) + if completed.returncode != 1: + raise AssertionError(f"rc={completed.returncode}\n{completed.stderr}") + return completed.stderr + + +class StrixSandboxBootstrapRetryAndVerdictTests(unittest.TestCase): + """The sandbox race gets its own bounded retry and its own name in the verdict. + + Evidence (2026-09-06): ``argos`` Strix run 34013128112 and a second + artifact both show a single attempt ending in ``loginAsGuest failed after + 10 attempts`` on ``127.0.0.1:48080`` after ``Docker image ready``, then + ``STRIX_PROVIDER_UNAVAILABLE: … orchestrator/free exhausted`` -- while the + sidecar had four ready and four deferred routes that were never called. + ``STRIX_TRANSIENT_RETRY_PER_MODEL`` defaults to 0 and the workflow does not + raise it, so the documented same-model retry for this class never ran. + """ + + def test_sandbox_bootstrap_failure_is_retried_once_even_with_zero_per_model_budget(self) -> None: + calls, stderr = _run_retry_loop(OBSERVED_LOG, per_model=0, sandbox_retries=1) + self.assertEqual(calls, 2) + self.assertIn("Caido sandbox bootstrap timing", stderr) + self.assertIn("attempt 2/2", stderr) + + def test_sandbox_retry_budget_is_bounded(self) -> None: + calls, _ = _run_retry_loop(OBSERVED_LOG, per_model=0, sandbox_retries=2) + self.assertEqual(calls, 3) + calls, _ = _run_retry_loop(OBSERVED_LOG, per_model=0, sandbox_retries=0) + self.assertEqual(calls, 1) + + def test_mixed_sandbox_and_gateway_log_stays_bounded(self) -> None: + """A log matching the sandbox class AND a gateway class grants at most the sandbox budget. + + Found by adversarial review of the first draft, which charged the + sandbox counter in the retry-reason chain behind the gateway classes: + such a log then extended the budget on every iteration without ever + charging it, and production bounds the loop with nothing but GitHub's + six-hour default. + """ + + calls, stderr = _run_retry_loop(RATE_LIMIT_LOG + OBSERVED_LOG, per_model=0, sandbox_retries=1) + self.assertEqual(calls, 2) + self.assertNotIn("attempt 3/", stderr) + + def test_sandbox_budget_is_granted_on_top_of_the_per_model_budget(self) -> None: + calls, _ = _run_retry_loop(OBSERVED_LOG, per_model=1, sandbox_retries=1) + self.assertEqual(calls, 3) + + def test_reported_sandbox_retries_count_only_retries_that_ran(self) -> None: + """A granted attempt vetoed by the timeout check is not reported as a retry. + + Lane peer 1's verification note: the budget is charged at the grant, + but ``is_transient_same_model_retry_error`` returns 1 for a timeout + signature, so a log carrying both the sandbox and a timeout signature + is granted, charged, and then not retried; the verdict must say 0. + """ + + calls, out = _run_retry_loop( + "litellm.exceptions.Timeout: request timed out\n" + OBSERVED_LOG, + per_model=0, + sandbox_retries=1, + ) + self.assertEqual(calls, 1) + self.assertIn("reported=0", out) + calls, out = _run_retry_loop(OBSERVED_LOG, per_model=0, sandbox_retries=1) + self.assertEqual(calls, 2) + self.assertIn("reported=1", out) + + def test_sandbox_retry_does_not_widen_gateway_retries(self) -> None: + """A rate limit from the gateway still gets no same-model retry at budget 0.""" + + calls, stderr = _run_retry_loop(RATE_LIMIT_LOG, per_model=0, sandbox_retries=1) + self.assertEqual(calls, 1) + self.assertNotIn("Retrying model", stderr) + + def test_verdict_names_the_sandbox_and_keeps_the_workflow_token(self) -> None: + stderr = _orchestrator_verdict_line(OBSERVED_LOG) + self.assertIn("STRIX_PROVIDER_UNAVAILABLE: STRIX_SANDBOX_UNAVAILABLE:", stderr) + self.assertIn("after 1 sandbox-specific same-model retries (budget 1)", stderr) + self.assertIn("names Strix's sandbox, not the LLM gateway", stderr) + self.assertNotIn("orchestrator/free exhausted", stderr) + + def test_verdict_for_a_gateway_failure_is_unchanged(self) -> None: + stderr = _orchestrator_verdict_line(RATE_LIMIT_LOG) + self.assertIn("orchestrator/free exhausted", stderr) + self.assertNotIn("STRIX_SANDBOX_UNAVAILABLE", stderr) + + if __name__ == "__main__": unittest.main() diff --git a/tests/test_strix_recovered_transient_sanitizer.py b/tests/test_strix_recovered_transient_sanitizer.py new file mode 100644 index 0000000000..28fda47205 --- /dev/null +++ b/tests/test_strix_recovered_transient_sanitizer.py @@ -0,0 +1,284 @@ +"""Regression contract for strix-agent's recovered transient model errors. + +strix-agent 1.5.3 (``strix/core/execution.py:760-763``) retries a transient +model/provider error up to ``_MAX_TRANSIENT_MODEL_RETRIES`` times and, inside +that branch only, logs:: + + WARNING - strix.core.execution: transient model/provider error for + ; replaying turn (attempt n/m, backoff Ns): + +immediately before the replay runs. The line therefore means "a retry is +happening now", never "the scan failed". When the budget is exhausted the same +module logs ``agent run failed for ; marking failed`` at ERROR with a +traceback and the process exits non-zero. + +Observed on ContextualWisdomLab/.github#1689 run ``34013778497``: a completed +63-minute scan (``run.json`` status ``completed``, SARIF 0 results, attempt exit +code 0) was failed closed as ``STRIX_PROVIDER_UNAVAILABLE … exhausted`` because +three such WARNING lines survived ``sanitize_known_strix_report_warnings`` and +tripped ``has_strix_report_failure_signal``'s ``WARNING`` scan. + +Negative control, as measured by running this file against ``main``'s gate before +this change: **3 failed, 4 passed.** The three that fail are +``test_recovered_transient_replay_warnings_are_sanitized`` (the lines remain and +the failure signal fires), ``test_production_argument_shape_sanitizes_the_scanned_directory`` +(the same, through the narrowing branch), and +``test_unrecovered_transient_keeps_the_error_and_traceback`` on its first assertion +only, since ``assertNotIn("replaying turn", ...)`` also needs the new alternative +while its ERROR-and-traceback retention assertions hold on both gates. The four +that pass on both gates are the guards: the two unknown-warning cases, the +foreign-module case, and the pre-existing forced-continuation case. +""" + +from __future__ import annotations + +import re +import subprocess +import tempfile +import unittest +from pathlib import Path + + +REPOSITORY_ROOT = Path(__file__).resolve().parents[1] +STRIX_GATE = REPOSITORY_ROOT / "scripts" / "ci" / "strix_quick_gate.sh" + +_PREFIX = "strix-pr-scope-qd1fsv_9ee6 - strix.core.execution: " + +# The three lines exactly as the run above wrote them (490 characters each). +_REPR = ( + "InternalServerError(\"Error code: 500 - {'error': {'code': 'internal_error', " + "'message': 'internal server error', 'detail': {'request_id': '%s'}}, " + "'error_code': 'internal_error', 'error_message': 'internal server error', " + "'error_detail': {'request_id': '%s'}}\")" +) +RECOVERED_LOG = ( + "2026-09-06 07:23:08.199 WARNING " + _PREFIX + + "transient model/provider error for 76d3c83d; replaying turn " + "(attempt 1/5, backoff 2.0s): " + + _REPR % ("466c7aee94e24a6e811cbd7fd12bc1a9", "466c7aee94e24a6e811cbd7fd12bc1a9") + + "\n" + "2026-09-06 07:23:10.205 DEBUG strix-pr-scope-qd1fsv_9ee6 - " + "strix.llm.context_budget: No LiteLLM model info for 'openai/orchestrator/free'; " + "using configured fallbacks\n" + "2026-09-06 07:45:20.154 WARNING " + _PREFIX + + "transient model/provider error for 76d3c83d; replaying turn " + "(attempt 2/5, backoff 4.0s): " + + _REPR % ("6dbf7b28ee16448592e10bb9728a523f", "6dbf7b28ee16448592e10bb9728a523f") + + "\n" + "2026-09-06 07:58:54.623 WARNING " + _PREFIX + + "transient model/provider error for 76d3c83d; replaying turn " + "(attempt 3/5, backoff 8.0s): " + + _REPR % ("a85b9828eb754e129f62d202359ea316", "a85b9828eb754e129f62d202359ea316") + + "\n" + "2026-09-06 08:09:35.584 INFO strix-pr-scope-qd1fsv_9ee6 - " + "strix.core.runner: Strix scan strix-pr-scope-qd1fsv_9ee6 done\n" +) + +# After the bounded budget is spent strix-agent logs at ERROR with a traceback +# (observed on a same-day run) and exits non-zero. The sanitizer must leave it. +UNRECOVERED_LOG = ( + "2026-09-06 07:24:31.010 WARNING strix-pr-scope-5p3h3c_e0d0 - " + "strix.core.execution: transient model/provider error for 6c480eb0; " + "replaying turn (attempt 5/5, backoff 32.0s): InternalServerError(\"Error code: 500\")\n" + "2026-09-06 07:24:40.562 ERROR strix-pr-scope-5p3h3c_e0d0 - " + "strix.core.execution: agent run failed for 6c480eb0; marking failed\n" + "Traceback (most recent call last):\n" + ' File "/opt/hostedtoolcache/Python/3.13.15/x64/lib/python3.13/site-packages/' + 'strix/core/execution.py", line 676, in _run_cycle\n' + " async for event in stream.stream_events():\n" + "openai.InternalServerError: Error code: 500\n" +) + +UNKNOWN_WARNING_LOG = ( + "2026-09-06 07:30:00.000 WARNING strix-pr-scope-qd1fsv_9ee6 - " + "strix.core.execution: transient model/provider error for 76d3c83d; " + "giving up after 5 attempts\n" +) + +# A different module echoing the same words must not be sanitized: the anchor +# is the logger name, not the phrase. +FOREIGN_MODULE_LOG = ( + "2026-09-06 07:30:00.000 WARNING strix-pr-scope-qd1fsv_9ee6 - " + "strix.tools.browser: transient model/provider error for 76d3c83d; " + "replaying turn (attempt 1/5, backoff 2.0s): Timeout\n" +) + +LEGACY_LOG = ( + "2026-06-18 13:08:05.986 WARNING strix-pr-scope-example - strix.core.execution: " + "agent a9fb4033 produced non-lifecycle final output in non-interactive mode; " + "forcing tool continuation (1/3): {'x': 1}\n" + "2026-08-22 09:53:26.193 WARNING strix-pr-scope-example - strix.core.execution: " + "agent 673f770f ended a turn without a lifecycle tool call (interactive=False); " + "forcing tool continuation (2/3): done\n" + "2026-06-18 13:10:44.089 INFO strix-pr-scope-example - strix.tools.finish.tool: " + "finish_scan: completed scan with 0 vulnerability report(s)\n" +) + + +def _function_block(source: str, function_name: str) -> str: + """Return one top-level Bash function, including its closing brace.""" + + match = re.search( + rf"(?ms)^{re.escape(function_name)}\(\) \{{\n.*?^\}}\n", + source, + ) + if match is None: + raise AssertionError(f"missing Bash function: {function_name}") + return match.group(0) + + +def _sanitize_then_signal(log_text: str) -> tuple[str, bool]: + """Run the production sanitizer, then the production failure-signal scan. + + Returns the report log's remaining text and whether + ``has_strix_report_failure_signal`` still fires on it. The report root is a + plain temp directory, so the function's ``STRIX_REPORTS_DIR`` branch + (which resolves the newest run) is not taken and needs no helper. + """ + + gate_source = STRIX_GATE.read_text(encoding="utf-8") + blocks = [ + _function_block(gate_source, name) + for name in ( + "sanitize_known_strix_report_warnings", + "has_strix_report_failure_signal", + ) + ] + with tempfile.TemporaryDirectory(prefix="strix-recovered-transient-") as temp_dir: + report_root = Path(temp_dir) / "strix_runs" / "strix-pr-scope-qd1fsv_9ee6" + report_root.mkdir(parents=True) + log_path = report_root / "strix.log" + log_path.write_text(log_text, encoding="utf-8") + script = "\n".join( + ( + "set -uo pipefail", + 'STRIX_REPORTS_DIR="/nonexistent/strix-reports"', + *blocks, + 'sanitize_known_strix_report_warnings "$1"', + 'if has_strix_report_failure_signal "$1"; then echo signal=1; else echo signal=0; fi', + ) + ) + completed = subprocess.run( + ["bash", "-c", script, "strix-sanitizer", str(report_root)], + check=False, + capture_output=True, + text=True, + ) + remaining = log_path.read_text(encoding="utf-8") + if completed.returncode != 0: + raise AssertionError(f"rc={completed.returncode}\n{completed.stderr}") + return remaining, "signal=1" in completed.stdout + + +def _sanitize_then_signal_production_shape(log_text: str) -> tuple[str, bool]: + """Same sequence with the argument shape production actually uses. + + Production passes ``ACTIVE_REPORTS_DIR``, which equals ``STRIX_REPORTS_DIR``, + so ``has_strix_report_failure_signal`` takes its narrowing branch and scans + only ``latest_strix_report_dir``'s newest run directory. ``_sanitize_then_signal`` + hands in that run directory directly and therefore skips the branch; this + helper covers it, so the pair proves the sanitized tree and the scanned tree + are the same one. + """ + + gate_source = STRIX_GATE.read_text(encoding="utf-8") + blocks = [ + _function_block(gate_source, name) + for name in ( + "sanitize_known_strix_report_warnings", + "has_strix_report_failure_signal", + "latest_strix_report_dir", + "is_preexisting_report_dir", + ) + ] + with tempfile.TemporaryDirectory(prefix="strix-recovered-transient-prod-") as temp_dir: + reports_root = Path(temp_dir) / "reports" + run_dir = reports_root / "strix-pr-scope-qd1fsv_9ee6" + run_dir.mkdir(parents=True) + log_path = run_dir / "strix.log" + log_path.write_text(log_text, encoding="utf-8") + script = "\n".join( + ( + "set -uo pipefail", + f'STRIX_REPORTS_DIR="{reports_root}"', + # Non-empty so "${PREEXISTING_REPORT_DIRS[@]}" is safe under set -u. + 'PREEXISTING_REPORT_DIRS=("/nonexistent/preexisting")', + *blocks, + 'sanitize_known_strix_report_warnings "$STRIX_REPORTS_DIR"', + 'if has_strix_report_failure_signal "$STRIX_REPORTS_DIR"; then echo signal=1; else echo signal=0; fi', + ) + ) + completed = subprocess.run( + ["bash", "-c", script, "strix-sanitizer-prod"], + check=False, + capture_output=True, + text=True, + ) + remaining = log_path.read_text(encoding="utf-8") + if completed.returncode != 0: + raise AssertionError(f"rc={completed.returncode}\n{completed.stderr}") + return remaining, "signal=1" in completed.stdout + + +class StrixRecoveredTransientSanitizerTests(unittest.TestCase): + """Keep a recovered transient model error from failing a completed scan.""" + + def test_recovered_transient_replay_warnings_are_sanitized(self) -> None: + """The three observed lines are removed and the WARNING scan stays quiet.""" + + remaining, signal = _sanitize_then_signal(RECOVERED_LOG) + self.assertNotIn("replaying turn", remaining) + self.assertNotIn("InternalServerError", remaining) + self.assertIn("strix.core.runner: Strix scan strix-pr-scope-qd1fsv_9ee6 done", remaining) + self.assertIn("strix.llm.context_budget", remaining) + self.assertFalse(signal) + + def test_unrecovered_transient_keeps_the_error_and_traceback(self) -> None: + """Only the retry line goes; the ERROR record and its traceback stay for the rc!=0 path.""" + + remaining, _signal = _sanitize_then_signal(UNRECOVERED_LOG) + self.assertNotIn("replaying turn", remaining) + self.assertIn("agent run failed for 6c480eb0; marking failed", remaining) + self.assertIn("Traceback (most recent call last):", remaining) + self.assertIn("openai.InternalServerError: Error code: 500", remaining) + + def test_unknown_execution_warning_still_fails_closed(self) -> None: + """A WARNING from the same logger with a different message is not sanitized.""" + + remaining, signal = _sanitize_then_signal(UNKNOWN_WARNING_LOG) + self.assertEqual(remaining, UNKNOWN_WARNING_LOG) + self.assertTrue(signal) + + def test_same_words_from_another_module_still_fail_closed(self) -> None: + """The anchor is the strix.core.execution logger, not the phrase.""" + + remaining, signal = _sanitize_then_signal(FOREIGN_MODULE_LOG) + self.assertEqual(remaining, FOREIGN_MODULE_LOG) + self.assertTrue(signal) + + def test_production_argument_shape_sanitizes_the_scanned_directory(self) -> None: + """With the reports root passed as production passes it, the narrowed scan is quiet.""" + + remaining, signal = _sanitize_then_signal_production_shape(RECOVERED_LOG) + self.assertNotIn("replaying turn", remaining) + self.assertIn("strix.core.runner: Strix scan strix-pr-scope-qd1fsv_9ee6 done", remaining) + self.assertFalse(signal) + + def test_production_argument_shape_still_fails_closed_on_an_unknown_warning(self) -> None: + """The narrowing branch does not swallow a warning the sanitizer does not know.""" + + remaining, signal = _sanitize_then_signal_production_shape(UNKNOWN_WARNING_LOG) + self.assertEqual(remaining, UNKNOWN_WARNING_LOG) + self.assertTrue(signal) + + def test_existing_forced_continuation_warnings_remain_sanitized(self) -> None: + """The two pre-existing alternatives keep working after the regex restructure.""" + + remaining, signal = _sanitize_then_signal(LEGACY_LOG) + self.assertNotIn("forcing tool continuation", remaining) + self.assertIn("finish_scan: completed scan with 0 vulnerability report(s)", remaining) + self.assertFalse(signal) + + +if __name__ == "__main__": + unittest.main()