Bump cross-spawn and npm in /npm_and_yarn/helpers · dependabot/dependabot-core@f341dce

Triggered via pull request December 13, 2024 00:26

synchronize #11119

Status Success

Total duration 24s

Artifacts –

dependency-review.yml

on: pull_request

4 warnings

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

npm/diff has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.

npm/graceful-fs has an OpenSSF Scorecard of 2.8, which is less than this repository's threshold of 3.

npm/is-cidr has an OpenSSF Scorecard of 2.7, which is less than this repository's threshold of 3.