Unverified Publisher

Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.

medium

Contains Vulnerability (CVSS High)

Flags items that contain or rely on components with high-severity vulnerabilities, as identified by sources such as Google OSV and NVD. These vulnerabilities may expose the item to exploitation, including risks like backdoors, privilege escalation, or data compromise.

low

Unmaintained Item

Flags items that are not maintained on the marketplace, suggesting concerns about the item's reputation and the publisher's reliability.

low

Vulnerabilities

GHSA-f8q6-p94x-37v3
minimatch ReDoS vulnerability
CVSS: 7.5

GHSA-rp65-9cf3-cjxr
Inefficient Regular Expression Complexity in nth-check
CVSS: 7.5

GHSA-hrpp-h998-j3pp
qs vulnerable to Prototype Pollution
CVSS: 7.5

Packages

ansi-styles
Version: 3.2.1
MIT

azure-devops-node-api
Version: 11.0.1
MIT

qs
Version: 6.10.1
BSD-3-Clause

Licenses

MIT License
View License
MIT License
Copyright (c) 2021 Tshaka Eric Lekholoane
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"...