Clicking on a OpenSSF scorecard (a.k.a deps-dev) link of a scoped npm package (for example: @angular/cli) leads o a "package not found" page.
Steps to reproduce:
Visit StackOverflow and find a page that contains a code section with a scoped package (for example: this link)
Open the extension and click on the "open link" icon in OpenSSF Scorecard section. A new tab should be opened stating that the package could not be found.
solution
The following background/advisory/deps-dev.js causes the problem:
replacing name with encodeURIComponent(name) should solve the problem.
Clicking on a OpenSSF scorecard (a.k.a deps-dev) link of a scoped npm package (for example:
@angular/cli
) leads o a "package not found" page.Steps to reproduce:
solution The following
background/advisory/deps-dev.js
causes the problem:replacing
name
withencodeURIComponent(name)
should solve the problem.