:warning: Found in manifest package-lock.json, Package wrap-ansi-cjs resolved to an URL https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz that does not follow the package name path convention. Refer to this for more details
:warning: Found in manifest package-lock.json, Package strip-ansi-cjs resolved to an URL https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz that does not follow the package name path convention. Refer to this for more details
:warning: Found in manifest package-lock.json, Package string-width-cjs resolved to an URL https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz that does not follow the package name path convention. Refer to this for more details
Changed Packages
Changed Packages
:warning: [Npm] lucide-react@0.462.0
Policy Violations
## Packages Violating Policy
### [Npm] `lucide-react@0.462.0` [:link:](https://deps.dev/npm/lucide-react/0.462.0)
- :arrow_right: Found in manifest `package-lock.json`
- :warning: Component release pipeline appear to use dangerous workflows
vet Summary Report
This report is generated by vet
Policy Checks
Threats
LockfilePoisoning
package-lock.json
, Packagewrap-ansi-cjs
resolved to an URLhttps://registry.npmjs.org/wrap-ansi/-/wrap-ansi-7.0.0.tgz
that does not follow the package name path convention. Refer to this for more detailspackage-lock.json
, Packagestrip-ansi-cjs
resolved to an URLhttps://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz
that does not follow the package name path convention. Refer to this for more detailspackage-lock.json
, Packagestring-width-cjs
resolved to an URLhttps://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz
that does not follow the package name path convention. Refer to this for more detailsChanged Packages
Changed Packages
Npm
]lucide-react@0.462.0
Policy Violations
## Packages Violating Policy ### [Npm] `lucide-react@0.462.0` [:link:](https://deps.dev/npm/lucide-react/0.462.0) - :arrow_right: Found in manifest `package-lock.json` - :warning: Component release pipeline appear to use dangerous workflows