advanced-security / spdx-dependency-submission-action

MIT License

11 stars 3 forks source link

v0.1.0 #38

Closed GeekMasher closed 4 weeks ago

GeekMasher commented 4 weeks ago

This pull request involves several changes aimed at updating the Node.js version, restructuring GitHub workflows, and refactoring the JavaScript codebase. The most significant changes include updating the Node.js version used in GitHub workflows and the action, restructuring the test.yml workflow, and refactoring the index.js file to use the @github/dependency-submission-toolkit package differently.

github-actions[bot] commented 4 weeks ago

Dependency Review

The following issues were found:

❌ 134 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
⚠️ 2212 package(s) with unknown licenses.
⚠️ 1 packages with OpenSSF Scorecard issues.

View full job summary