Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ❌ 1 package(s) with incompatible licenses
• ❌ 1 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

package.json

Name	Version	Vulnerability	Severity
lodash	4.17.20	Command Injection in lodash	high
		Regular Expression Denial of Service (ReDoS) in lodash	moderate

Only included vulnerabilities with severity high or higher.

License Issues

Allowed Licenses: MIT

---

Incompatible Licenses

package.json

Package	Version	License
underscore	1.12.0	Apache 2.0

---

Invalid SPDX License Definitions

package.json

Package	Version	License
octoinvader	4.17.20	Non SPDX License

---

Unknown Licenses

package.json

Package	Version	License
my-other-dependency	4.17.20	No License

---

Scanned Manifest Files

package.json

• [email protected]
• [email protected]
• [email protected]
• [email protected]