chore(deps): update, version pinning and add lockfile · hexojs/hexo-generator-feed@bd6cc2d

Triggered via pull request January 2, 2026 12:34

yoshinorin

opened #256

Status Success

Total duration 1m 10s

Artifacts –

dependencies-review.yml

on: pull_request

10 warnings

npm/get-caller-file has an OpenSSF Scorecard of 2.4, which is less than this repository's threshold of 3.

npm/gensync has an OpenSSF Scorecard of 1.9, which is less than this repository's threshold of 3.

npm/fs.realpath has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.

npm/es6-error has an OpenSSF Scorecard of 2.1, which is less than this repository's threshold of 3.

npm/deepmerge has an OpenSSF Scorecard of 2.1, which is less than this repository's threshold of 3.

npm/cross-spawn has an OpenSSF Scorecard of 2.9, which is less than this repository's threshold of 3.

npm/command-exists has an OpenSSF Scorecard of 1.9, which is less than this repository's threshold of 3.

npm/bluebird has an OpenSSF Scorecard of 1.8, which is less than this repository's threshold of 3.

npm/append-transform has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/@jridgewell/resolve-uri has an OpenSSF Scorecard of 2.5, which is less than this repository's threshold of 3.