Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> fetch-7.0.1.tgz (Root Library)

   -> network.agent-0.1.0.tgz

     -> network.proxy-agent-0.1.0.tgz

       -> socks-proxy-agent-6.1.1.tgz

         -> socks-2.7.1.tgz

           -> ❌ ip-2.0.0.tgz (Vulnerable Library)

Path to dependency file: /fixtures/with-unsaved-deps/package.json

Path to vulnerable library: /fixtures/with-unsaved-deps/package.json

Dependency Hierarchy:

-> symlink-dir-2.0.2.tgz (Root Library)

   -> mkdirp-promise-5.0.1.tgz

     -> mkdirp-0.5.1.tgz

       -> ❌ minimist-0.0.8.tgz (Vulnerable Library)

Path to dependency file: /fixtures/hello-world-js-bin/package.json

Path to vulnerable library: /fixtures/hello-world-js-bin/node_modules/minimist/package.json

Dependency Hierarchy:

-> cowsay-1.2.1.tgz (Root Library)

   -> optimist-0.6.1.tgz

     -> ❌ minimist-0.0.10.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> fetch-7.0.1.tgz (Root Library)

   -> network.agent-0.1.0.tgz

     -> network.proxy-agent-0.1.0.tgz

       -> socks-proxy-agent-6.1.1.tgz

         -> socks-2.7.1.tgz

           -> ❌ ip-2.0.0.tgz (Vulnerable Library)

Path to dependency file: /fixtures/with-unsaved-deps/package.json

Path to vulnerable library: /fixtures/with-unsaved-deps/package.json

Dependency Hierarchy:

-> symlink-dir-2.0.2.tgz (Root Library)

   -> mz-2.7.0.tgz

     -> thenify-all-1.6.0.tgz

       -> ❌ thenify-3.3.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ pnpm-8.5.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ npm-resolver-16.0.4.tgz (Vulnerable Library)

Path to dependency file: /fixtures/pkg-with-external-lockfile/pkg/package.json

Path to vulnerable library: /fixtures/pkg-with-external-lockfile/pkg/node_modules/path-to-regexp/package.json,/package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> express-4.18.2.tgz

     -> ❌ path-to-regexp-0.1.7.tgz (Vulnerable Library)

Path to dependency file: /fixtures/pkg-with-external-lockfile/pkg/package.json

Path to vulnerable library: /fixtures/pkg-with-external-lockfile/pkg/node_modules/body-parser/package.json

Dependency Hierarchy:

-> express-4.17.1.tgz (Root Library)

   -> ❌ body-parser-1.19.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> ❌ body-parser-1.20.1.tgz (Vulnerable Library)

Path to dependency file: /fixtures/pkg-with-external-lockfile/pkg/package.json

Path to vulnerable library: /fixtures/pkg-with-external-lockfile/pkg/node_modules/path-to-regexp/package.json,/package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> express-4.18.2.tgz

     -> ❌ path-to-regexp-0.1.7.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> filter-workspace-packages-7.0.8.tgz (Root Library)

   -> micromatch-4.0.5.tgz

     -> ❌ braces-3.0.2.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> eslint-8.39.0.tgz (Root Library)

   -> ❌ cross-spawn-7.0.3.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> patching.apply-patch-2.0.0.tgz (Root Library)

   -> patch-package-6.5.1.tgz

     -> ❌ cross-spawn-6.0.5.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ macos-arm64-8.5.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ pnpm-8.5.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ linux-x64-8.5.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ exe-8.5.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ macos-x64-8.5.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ linux-arm64-8.5.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ cafs-7.0.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> ❌ win-x64-8.5.1.tgz (Vulnerable Library)

Path to dependency file: /fixtures/general/package.json

Path to vulnerable library: /fixtures/general/package.json,/fixtures/has-yarn2-lock/package.json,/fixtures/with-unsaved-deps/package.json,/fixtures/fixtureWithLinks/general/package.json

Dependency Hierarchy:

-> ❌ minimatch-3.0.4.tgz (Vulnerable Library)

Path to dependency file: /fixtures/pkg-with-external-lockfile/pkg/package.json

Path to vulnerable library: /fixtures/pkg-with-external-lockfile/pkg/node_modules/qs/package.json

Dependency Hierarchy:

-> express-4.17.1.tgz (Root Library)

   -> ❌ qs-6.7.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> plugin-commands-installation-13.0.7.tgz (Root Library)

   -> @yarnpkg/core-4.0.0-rc.42.tgz

     -> ❌ tar-6.1.14.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> request-2.88.0.tgz

     -> ❌ tough-cookie-2.4.3.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> registry-mock-3.8.0.tgz (Root Library)

   -> anonymous-npm-registry-client-0.2.0.tgz

     -> request-2.88.2.tgz

       -> ❌ tough-cookie-2.5.0.tgz (Vulnerable Library)

Path to dependency file: /fixtures/pkg-with-external-lockfile/pkg/package.json

Path to vulnerable library: /fixtures/pkg-with-external-lockfile/pkg/node_modules/express/package.json

Dependency Hierarchy:

-> ❌ express-4.17.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> ❌ express-4.18.2.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> ❌ request-2.88.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> registry-mock-3.8.0.tgz (Root Library)

   -> anonymous-npm-registry-client-0.2.0.tgz

     -> ❌ request-2.88.2.tgz (Vulnerable Library)

Path to dependency file: /fixtures/with-unsaved-deps/package.json

Path to vulnerable library: /fixtures/with-unsaved-deps/package.json

Dependency Hierarchy:

-> symlink-dir-2.0.2.tgz (Root Library)

   -> mkdirp-promise-5.0.1.tgz

     -> mkdirp-0.5.1.tgz

       -> ❌ minimist-0.0.8.tgz (Vulnerable Library)

Path to dependency file: /fixtures/hello-world-js-bin/package.json

Path to vulnerable library: /fixtures/hello-world-js-bin/node_modules/minimist/package.json

Dependency Hierarchy:

-> cowsay-1.2.1.tgz (Root Library)

   -> optimist-0.6.1.tgz

     -> ❌ minimist-0.0.10.tgz (Vulnerable Library)

Path to dependency file: /fixtures/with-peer/package.json

Path to vulnerable library: /fixtures/with-peer/package.json

Dependency Hierarchy:

-> ❌ ajv-6.10.2.tgz (Vulnerable Library)

Path to dependency file: /fixtures/pkg-with-external-lockfile/pkg/package.json

Path to vulnerable library: /fixtures/pkg-with-external-lockfile/pkg/node_modules/cookie/package.json

Dependency Hierarchy:

-> express-4.17.1.tgz (Root Library)

   -> ❌ cookie-0.4.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> express-4.18.2.tgz

     -> ❌ cookie-0.5.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> filter-workspace-packages-7.0.8.tgz (Root Library)

   -> ❌ micromatch-4.0.5.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> eslint-8.39.0.tgz (Root Library)

   -> optionator-0.9.1.tgz

     -> ❌ word-wrap-1.2.3.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> git-resolver-8.0.2.tgz (Root Library)

   -> ❌ semver-7.5.0.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> patching.apply-patch-2.0.0.tgz (Root Library)

   -> patch-package-6.5.1.tgz

     -> ❌ semver-5.7.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> ❌ semver-7.3.8.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> eslint-config-1.0.1.tgz (Root Library)

   -> eslint-plugin-n-14.0.0.tgz

     -> ❌ semver-6.3.0.tgz (Vulnerable Library)

Path to dependency file: /fixtures/pkg-with-external-lockfile/pkg/package.json

Path to vulnerable library: /fixtures/pkg-with-external-lockfile/pkg/node_modules/serve-static/package.json

Dependency Hierarchy:

-> express-4.17.1.tgz (Root Library)

   -> ❌ serve-static-1.14.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> express-4.18.2.tgz

     -> ❌ serve-static-1.15.0.tgz (Vulnerable Library)

Path to dependency file: /fixtures/pkg-with-external-lockfile/pkg/package.json

Path to vulnerable library: /fixtures/pkg-with-external-lockfile/pkg/node_modules/send/package.json

Dependency Hierarchy:

-> express-4.17.1.tgz (Root Library)

   -> ❌ send-0.17.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> express-4.18.2.tgz

     -> ❌ send-0.18.0.tgz (Vulnerable Library)

Path to dependency file: /fixtures/pkg-with-external-lockfile/pkg/package.json

Path to vulnerable library: /fixtures/pkg-with-external-lockfile/pkg/node_modules/express/package.json

Dependency Hierarchy:

-> ❌ express-4.17.1.tgz (Vulnerable Library)

Path to dependency file: /package.json

Path to vulnerable library: /package.json

Dependency Hierarchy:

-> verdaccio-5.20.1.tgz (Root Library)

   -> ❌ express-4.18.2.tgz (Vulnerable Library)

Path to dependency file: /fixtures/circular/package.json

Path to vulnerable library: /fixtures/circular/package.json

Dependency Hierarchy:

-> es6-iterator-2.0.1.tgz (Root Library)

   -> ❌ es5-ext-0.10.24.tgz (Vulnerable Library)