### Unverified Publisher

Flags items published by entities that haven’t gone through the publisher verification process of the marketplace. Lack of verification may indicate higher risk, as the publisher’s identity and trustworthiness are unconfirmed.

medium

### Contains Vulnerability (CVSS High)

Flags items that contain or rely on components with high-severity vulnerabilities, as identified by sources such as Google OSV and NVD. These vulnerabilities may expose the item to exploitation, including risks like backdoors, privilege escalation, or data compromise.

low

### Unmaintained Item

Flags items that are not maintained on the marketplace, suggesting concerns about the item's reputation and the publisher's reliability.

low

### Vulnerabilities

GHSA-f8q6-p94x-37v3  
minimatch ReDoS vulnerability  
CVSS: 7.5

GHSA-rp65-9cf3-cjxr  
Inefficient Regular Expression Complexity in nth-check  
CVSS: 7.5

GHSA-hrpp-h998-j3pp  
qs vulnerable to Prototype Pollution  
CVSS: 7.5

### Packages

ansi-styles  
Version: 3.2.1  
MIT

azure-devops-node-api  
Version: 11.0.1  
MIT

qs  
Version: 6.10.1  
BSD-3-Clause

### Licenses

MIT License  
[View License](https://marketplace.cursorapi.com/open-vsx-mirror/api/TshakaEricLekholoane/hy/0.0.17/file/LICENSE.txt)  
MIT License  
Copyright (c) 2021 Tshaka Eric Lekholoane  
Permission is hereby granted, free of charge, to any person obtaining a copy  
of this software and associated documentation files (the "Software"...

See More