Dependency-Check Report

Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies; false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.

Scan Information (show all):

dependency-check version: 12.2.0
Report Generated On: Tue, 24 Mar 2026 14:23:40 +0100
Dependencies Scanned: 7 (6 unique)
Vulnerable Dependencies: 0
Vulnerabilities Found: 0
Vulnerabilities Suppressed: 0
...
NVD API Last Checked: 2026-03-24T14:01:44+01
NVD API Last Modified: 2026-03-24T12:33:33Z

Summary

Summary of Vulnerable Dependencies (click to show all)

Dependency	Vulnerability IDs	Package	Confidence	Evidence Count
acorn-typescript:1.4.13		pkg:npm/acorn-typescript@1.4.13		8
acorn-walk:8.3.5		pkg:npm/acorn-walk@8.3.5		14
acorn:8.16.0		pkg:npm/acorn@8.16.0		14
nanoid:5.1.7	cpe:2.3:a:nanoid_project:nanoid:5.1.7:::::::*	pkg:npm/nanoid@5.1.7	Highest	6
typescript:5.9.3	cpe:2.3:a:microsoft:typescript:5.9.3:::::::*	pkg:npm/typescript@5.9.3	Highest	8
valibot:1.3.1		pkg:npm/valibot@1.3.1		7

Dependencies (vulnerable)

acorn-typescript:1.4.13

Description:

Alternative, TypeScript parser

License:

MIT

File Path: /Users/jonathanterrell/DPUse/GitHub/dpuse-development/package-lock.json?dpuse-development:0.3.479/acorn-typescript:1.4.13

Referenced In Project/Scope: @dpuse/dpuse-development:0.3.479

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	tyrealhu	Highest
Vendor	package.json	bugs.url	https://github.com/TyrealHu/acorn-typescript/issues	Highest
Vendor	package.json	description	Alternative, TypeScript parser	Highest
Vendor	package.json	homepage	https://github.com/TyrealHu/acorn-typescript#readme	Highest
Vendor	package.json	name	acorn-typescript	Highest
Vendor	package.json	name	acorn-typescript_project	Highest
Product	package.json	name	acorn-typescript	Highest
Version	package.json	version	1.4.13	Highest

Identifiers

pkg:npm/acorn-typescript@1.4.13 (Confidence:Highest)

acorn-walk:8.3.5

Description:

ECMAScript (ESTree) AST walker

License:

MIT

File Path: /Users/jonathanterrell/DPUse/GitHub/dpuse-development/package-lock.json?dpuse-development:0.3.479/acorn-walk:8.3.5

Referenced In Project/Scope: @dpuse/dpuse-development:0.3.479

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	ECMAScript (ESTree) AST walker	Highest
Vendor	package.json	homepage	https://github.com/acornjs/acorn	Highest
Vendor	package.json	maintainers.email	marijnh@gmail.com	Highest
Vendor	package.json	maintainers.email	me@rreverser.com	Highest
Vendor	package.json	maintainers.name	Adrian Heine	Highest
Vendor	package.json	maintainers.name	Ingvar Stepanyan	Highest
Vendor	package.json	maintainers.name	Marijn Haverbeke	Highest
Vendor	package.json	maintainers.web	http://adrianheine.de	Highest
Vendor	package.json	maintainers.web	https://marijnhaverbeke.nl	Highest
Vendor	package.json	maintainers.web	https://rreverser.com/	Highest
Vendor	package.json	name	acorn-walk	Highest
Vendor	package.json	name	acorn-walk_project	Highest
Product	package.json	name	acorn-walk	Highest
Version	package.json	version	8.3.5	Highest

Identifiers

pkg:npm/acorn-walk@8.3.5 (Confidence:Highest)

acorn:8.16.0

Description:

ECMAScript parser

License:

MIT

File Path: /Users/jonathanterrell/DPUse/GitHub/dpuse-development/package-lock.json?dpuse-development:0.3.479/acorn-walk:8.3.5/acorn:^8.11.0

Referenced In Projects/Scopes:

@dpuse/dpuse-development:0.3.479
@dpuse/dpuse-development:0.3.479/acorn-walk:8.3.5

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	description	ECMAScript parser	Highest
Vendor	package.json	homepage	https://github.com/acornjs/acorn	Highest
Vendor	package.json	maintainers.email	marijnh@gmail.com	Highest
Vendor	package.json	maintainers.email	me@rreverser.com	Highest
Vendor	package.json	maintainers.name	Adrian Heine	Highest
Vendor	package.json	maintainers.name	Ingvar Stepanyan	Highest
Vendor	package.json	maintainers.name	Marijn Haverbeke	Highest
Vendor	package.json	maintainers.web	http://adrianheine.de	Highest
Vendor	package.json	maintainers.web	https://marijnhaverbeke.nl	Highest
Vendor	package.json	maintainers.web	https://rreverser.com/	Highest
Vendor	package.json	name	acorn	Highest
Vendor	package.json	name	acorn_project	Highest
Product	package.json	name	acorn	Highest
Version	package.json	version	8.16.0	Highest

Related Dependencies

Identifiers

pkg:npm/acorn@8.16.0 (Confidence:Highest)

nanoid:5.1.7

Description:

A tiny (118 bytes), secure URL-friendly unique string ID generator

License:

MIT

File Path: /Users/jonathanterrell/DPUse/GitHub/dpuse-development/package-lock.json?dpuse-development:0.3.479/nanoid:5.1.7

Referenced In Project/Scope: @dpuse/dpuse-development:0.3.479

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Andrey Sitnik <andrey@sitnik.ru>	Highest
Vendor	package.json	description	A tiny (118 bytes), secure URL-friendly unique string ID generator	Highest
Vendor	package.json	name	nanoid	Highest
Vendor	package.json	name	nanoid_project	Highest
Product	package.json	name	nanoid	Highest
Version	package.json	version	5.1.7	Highest

Identifiers

pkg:npm/nanoid@5.1.7 (Confidence:Highest)
cpe:2.3:a:nanoid_project:nanoid:5.1.7:*:*:*:*:*:*:* (Confidence:Highest)

typescript:5.9.3

Description:

TypeScript is a language for application scale JavaScript development

License:

Apache-2.0

File Path: /Users/jonathanterrell/DPUse/GitHub/dpuse-development/package-lock.json?dpuse-development:0.3.479/typescript:5.9.3

Referenced In Project/Scope: @dpuse/dpuse-development:0.3.479

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Microsoft Corp.	Highest
Vendor	package.json	bugs.url	https://github.com/microsoft/TypeScript/issues	Highest
Vendor	package.json	description	TypeScript is a language for application scale JavaScript development	Highest
Vendor	package.json	homepage	https://www.typescriptlang.org/	Highest
Vendor	package.json	name	typescript	Highest
Vendor	package.json	name	typescript_project	Highest
Product	package.json	name	typescript	Highest
Version	package.json	version	5.9.3	Highest

Identifiers

pkg:npm/typescript@5.9.3 (Confidence:Highest)
cpe:2.3:a:microsoft:typescript:5.9.3:*:*:*:*:*:*:* (Confidence:Highest)

valibot:1.3.1

Description:

The modular and type safe schema library for validating structural data

License:

MIT

File Path: /Users/jonathanterrell/DPUse/GitHub/dpuse-development/package-lock.json?dpuse-development:0.3.479/valibot:1.3.1

Referenced In Project/Scope: @dpuse/dpuse-development:0.3.479

Evidence

Type	Source	Name	Value	Confidence
Vendor	package.json	author	Fabian Hiller	Highest
Vendor	package.json	description	The modular and type safe schema library for validating structural data	Highest
Vendor	package.json	homepage	https://valibot.dev	Highest
Vendor	package.json	name	valibot	Highest
Vendor	package.json	name	valibot_project	Highest
Product	package.json	name	valibot	Highest
Version	package.json	version	1.3.1	Highest

Identifiers

pkg:npm/valibot@1.3.1 (Confidence:Highest)

How to read the report | Suppressing false positives | Getting Help: github issues

Project: @dpuse/dpuse-development

Summary

Dependencies (vulnerable)

acorn-typescript:1.4.13

Evidence

Identifiers

acorn-walk:8.3.5

Evidence

Identifiers

acorn:8.16.0

Evidence

Related Dependencies

Identifiers

nanoid:5.1.7

Evidence

Identifiers

typescript:5.9.3

Evidence

Identifiers

valibot:1.3.1

Evidence

Identifiers