Bump zip-a-folder from 3.1.6 to 4.0.4 in /extensions/ql-vscode · github/vscode-codeql@40fe510

Triggered via pull request December 25, 2025 13:01

opened #4248

Status Success

Total duration 12s

Artifacts –

dependency-review.yml

on: pull_request

5 warnings

npm/once has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.

npm/jackspeak has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/inherits has an OpenSSF Scorecard of 2.6, which is less than this repository's threshold of 3.

npm/fs.realpath has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/core-util-is has an OpenSSF Scorecard of 1.7, which is less than this repository's threshold of 3.